Sie sind hier: Disclaimer  

Disclaimer

Privacy policy
Welcome to the Jung since 1928 website. Data protection and the protection of your personal rights are of great importance to us. On this page we would like to inform you which data Jung since 1928 processes and for what purposes this happens. If you have any questions or suggestions regarding the data protection declaration, please do not hesitate to contact us.


1. Preface and selected terms

Diese Datenschutzerklärung klärt zum einen die Besucher und Nutzer unserer Internetpräsenz über die online stattfindenden Datenverarbeitungsvorgänge auf, bei denen personenbezogene Daten verarbeitet werden. Zum anderen erhalten Sie Informationen zur unseren Verarbeitungsvorgängen, die nicht primär online stattfinden.
• GDPR stands as an abbreviation for the European General Data Protection Regulation.
• BDSG stands as an abbreviation for the Federal Data Protection Act in its current version.
• • Personal data are all details that allow conclusions to be drawn about a natural person (definition see Art. 4 sec. 1 GDPR). This includes, for example, names, e-mail addresses, telephone numbers, but also data such as IP addresses or customer numbers.
• The processing of personal data includes all operations, such as the collection, storage, transmission, archiving or deletion of personal data (definition Art. 4 sec. 2 GDPR).
• The data subject within the meaning of data protection law is any natural person from whose personal data is processed.
• Further definitions can be found in the General Data Protection Regulation, which can be found in Article 4 of the GDPR (Terms).

2. Responsible Party and Data Protection Officer
Responsible part for data processing
JUNG since 1828 GmbH & Co. KG
Uhlandstraße 36
71665 Vaihingen/Enz
Telefon: 07042 907-0
Telefax: 07042-907-129
E-Mail: zentrale[at]jung-europe.de
Data Protection Officer commissioned bay law
DSB Externer Datenschutzbeauftragter Stuttgart
Fabian Henkel
Diplom-Betriebswirt (FH)
Zertifizierter Datenschutzbeauftragter
Telefon: +49(0)176 32744172
E-Mail: info@externer-datenschutzbeauftragter-stuttgart.de
Web: https://www.externer-datenschutzbeauftragter-stuttgart.de

3. Overview
The following contents give you a brief overview of the processing of personal data. More detailed information can be found in the single passages in detail.
Data that you transmit to us
On the one hand, we process the data that you enter yourself, for example in a form. In this case, the purpose of processing results from the type of form and from this data protection declaration. Even if you send us a message by email, for example, or otherwise contact us, we process your data in accordance with the purpose of contacting us.
Automatic server log files
On the other hand, our server automatically records all accesses and thus also IP addresses (log files), this serves to prevent attacks, analyze access numbers and run smoothly.
Use of cookies
Cookies help us to provide various services; you can find more information on this in this data protection declaration.
Analysis and tracking tools
In addition to server log files, which also provide us with information on page views, we use analysis tools. These tools give us detailed insights into the content of our site visited, the flow of behavior and, for example, the country from which access took place. In order to work, cookies or scripts must be executed in the browser of our page visitors.
Plugins and Content Delivery Networks
We use plugins and content delivery networks, well-known examples of such services are the video service Youtube or the map service Google Maps. If such services are integrated via a website, access data is transmitted to the services. This is usually your IP address and other metadata such as the time and date of access. Usually those tools also use cookies.

Direct marketing
a) Direct marketing based on legitimate interests
We reserve the right to send our customers direct marketing content based on § 7 (3) UWG (German competition law) and Art. 6 para. 1 lit. f GDPR. You can, of course, object to the receipt of direct marketing information at any time.
b) Direct marketing based on your consent
Insofar as you give us consent for the processing of your data for the purposes of direct marketing, you can revoke it at any time with effect for the future

Further data recipients

a) Service Providers within Data Processing Agreements
We have commissioned service providers in accordance with Article 28 GDPR, for example in the field of IT services, web hosting, e-mail hosting or printing services. They process personal data for us in accordance with instructions
b) Use of external specialist services
If necessary (e.g. to perform the contract), we pass on your data to banks, other payment service providers, shipping service providers, our tax advisor or lawyer, for example.
c) Legal obligations
We are subject to legal obligations, such as commercial laws or tax law, in this context we have to pass on certain data to tax authorities, for example.
d) Data processing to support law enforcement
If it is necessary for the investigation of a crime, we pass on data to the law enforcement authorities

General information on deletion periods of personal data
We process the data as long as this is necessary for the respective purpose. If necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and processing of a contract; we are also obliged to comply with statutory retention requirements. If the data processing is based on your consent, we will delete your data after your revocation.

Transfer of personal data to a third country
We try to have all service providers and services provided by providers within the European Union as far as possible. A transfer to a third country is an option if you have given us your consent and/or we have concluded a contract for the processing of orders in accordance with Art. 28 GDPR, taking into account appropriate guarantees. In individual cases, we may use plugins or tools that are hosted in third countries, but we use them based on our legitimate interests. In these cases, we may draw attention to the circumstance.


Obligation to provide personal data
The provision of personal data is regularly necessary for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the required personal data, we are not able to conclude and fulfill a contract with you.


4. Legal bases for the processing of personal data

The legal bases for the processing of personal data are exceptional facts that allow the processing of personal data. The main legal bases are depicted in particular in Article 6 GDPR. The legal bases by which we process personal data are described in the individual processing operations in this Privacy Policy.
Consent given (Art. 6 sec. 1 lit. a GDPR)
Consent is one of these legal bases and presupposes that the consenting person grants it in an informed manner and on a voluntary basis. Consent based on Article 6 (1) lit a GDPR can be revoked at any time without giving reasons.
Contract-related data processing (Art. 6 sec. 1 lit. b GDPR)
The processing of personal data for the initiation or execution of contracts is also a legal basis and is defined in Art. 6 sec. 1 lit. b GDPR.
Legal obligation (Art. 6 sec. 1 lit. c GDPR)
The exception of data processing due to a legal obligation can be found in Art. 6 sec. 1 lit. c GDPR, for example, we are obliged to comply with certain retention periods in accordance with commercial and tax law.
Legitimate interests (Art. 6 sec. 1 lit. f GDPR)
The processing of personal data on the basis of a balance of interests in accordance with Art. 6 sec. 1 lit. f GDPR allows processing after careful consideration of financial or legal interests against the protected interests of the data subject.

5. Your rights under the General Data Protection Regulation

Each natural person has certain rights, which are defined in particular in Articles 15 to 21 and 77 of the GDPR. In principle, you have the following rights, which you can claim from us.
Right to revoke consent given in accordance with Art. 7 sec. 3 GDPR
You can revoke your consent to us at any time without giving reasons with effect for the future.
Right to information under Art. 15 GDPR (restrictions possible under Section 34 of the German Data Protection Act)
You have the right at any time to request information about the data processed by you and the purposes of the processing.
Right to rectification under Article 16 GDPR
If you find that we are processing incorrect or incomplete data about you, you have the right to correction.
Right to erasure under Art. 17 GDPR (restrictions possible under Section 35 of the German Data Protection Act)
You have the right at any time to request the deletion of your personal data that we are processing about you. If complete deletion is not possible, for example because we have to meet statutory retention requirements or we can assert legitimate interests for other reasons, we will restrict your data until these reasons no longer apply.
You have the right to restrict the processing in accordance with Article 18
GDPR. You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address given in the imprint. The right to restrict processing exists in the following cases:
• If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the examination, you have the right to request the restriction of the processing of your personal data.
• If the processing of your personal data has been/happens unlawfully, you can request the restriction of data processing instead of deletion.
• • If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
• • If you have filed an objection under Article 21(1) GDPR, a balance must be made between your interests and our interests. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data may be processed, except for its storage, only with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.

You have the right to data portability in accordance with Art. 20 GDPR
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract automatically handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.

Right to object to certain processing operations and direct marketing in accordance with Art. 21 GDPR
If the data processing is carried out on the basis of Art. 6 sec. 1 lit. e or f GDPR, you have at any time the right to object to the processing of your personal data for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data concerned unless we can prove compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (opposition under Art. 21 sec. 1 GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling in so far as it is related to such direct marketing. If you object, your personal data will no longer be used for the purpose of direct marketing (opposition under Art. 21 sec. 2 GDPR).

The right to appeal to a supervisory authority pursuant to Article 77 GDPR in accordance with Section 19 of the German Data Protection Act (BDSG)
In the event of breaches of the GDPR, the persons concerned have the right to complain to a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place of the alleged infringement. The right to appeal is without prejudice to other administrative or judicial remedies.


6. External hosting
This website is hosted by an external service provider (hoster). The personal data recorded on this website are stored on the host's servers. This can be v. a. be IP addresses, contact requests, meta and communication data, contract data, contact data, names, website accesses and other data generated via a website. The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 Para. 1 lit.b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Para . 1 lit.f GDPR). Our host will only process your data insofar as this is necessary to fulfill its service obligations and follow our instructions with regard to this data.
We have commissioned the following host:

Full Moon Digital GmbH
Epplestraße 225
70567 Stuttgart
Conclusion of a data processing agreement
In order to ensure data protection compliant processing, we have concluded a Data Processing Agreement with our host.


7. Automatic Server Log Files

Our web server automatically logs all accesses and thus also the IP addresses of the visitors. This serves to defend against attacks, analyze access numbers and ensure smooth operation. We have a legitimate interest in this (Art. 6 lit. f GDPR).
In addition to the IP address, the server log usually records additional metadata about the session; you can find this data below.
• Date and time of access
• Information about the browser type and the browser version used
• Information on the operating system used
• Device (client)
• Referring URL (from which page you landed with us)
• Hyperlinks accessed
The stored data is evaluated anonymously for statistical purposes and then deleted. We only process this data for the purposes mentioned above. We delete server log files after six months at the latest.


8. Use of cookies
Our website uses cookies to provide services and to ensure full functionality. Cookies - these are small text files that are automatically saved in your browser or device - can have various functions and contain a characteristic string of characters that enables the browser to be clearly identified when the website is called up again.
Cookies are stored on your end device and transmitted to our site from there. As a user, you generally have full control over the use of cookies. You can specify whether and which cookies you generally allow in your browser settings. We recommend that you set your browser so that you are informed when a website wants to set cookies on you. This gives you control over which cookies you want to allow. However, if you do not allow cookies, the functionality of websites may be restricted.
Cookies are basically divided into non-persistent and persistent cookies. A distinction is also made between first party cookies (which come directly from our web server) and third party cookies (which are set by you via third party providers).

8.1 Types of cookies by duration
Session cookies: Session cookies are deleted at the latest when you leave our website and close your browser.
Persistent cookies: These cookies remain stored even after you leave our website and close your browser. Persistent cookies can have different durations, from one day to several years. These cookies can fulfill various functions, for example your login data can be saved so that you are automatically logged in when you visit our website again. Other persistent cookies are used for analysis, tracking and marketing purposes.

8.2 Types of cookies by origin
We use both first-party cookies and third-party cookies. First-party cookies are cookies that come directly from us. Third-party cookies are cookies that are placed via a third-party provider. We use various third-party cookies for analysis, tracking and marketing purposes.

8.3 Types of cookies by function
Technically required or necessary cookies
These cookies enable the operation of our website; without the necessary technical cookies, our website would not be usable or would only be usable to a very limited extent. For example, such cookies are used when you log in to our website or when you add a product to the shopping cart. In some cases, required cookies are also used for security.
Analysis and statistics cookies
Analysis cookies collect information about the behavior of the site visitors, provide information about the length of stay and what information was accessed. Information is also collected about the website from which page visitors come, how many visitors the websites have and how long the user stays on the websites. The aim of these cookies is to optimize our website based on the information collected.
Tracking and Marketing Cookies
Tracking or marketing cookies (including remarketing and retargeting cookies) enable browser behavior to be analyzed, they save which content was visited or which products the user was looking for (tracking means tracking in this sense). On the basis of these cookies, a user can also be identified across pages with the aim of placing advertisements tailored to his interests.

8.4 Legal bases and information on setting your preferences
We use technically required cookies in the interest of a functional and stable website (Art. 6 Para. 1 lit. f GDPR), we may only use other cookies with your consent (Art. 6 Para. 1 lit. a GDPR). You can make your preferences with regard to the selection of unnecessary cookies at the beginning of your visit; you also have the option of adapting your preferences at any time.
The individual legal bases for the use of various tools that use cookies can be found in the respective passages in our data protection declaration.

9. Cookie Consent Management
We offer you the option of choosing whether and which cookies and services you want to allow. For this purpose, we have implemented what is known as consent management, which is automatically displayed when you visit our website for the first time or after the preference cookie has expired. When you have confirmed your selection with regard to cookies and services, a cookie will be stored in your browser to save your preferences. You can find more information about this cookie in our cookie list.



Overview of the cookies used by www.jung-europe.de

Technical required cookies

Cookie Origin Description Storage Duration
fe_typo_user TYPO3 CMS Session
DivasCookiesBanner Cookie-Banner Saves the settings of the user when choosing which cookies may and may not be set. 1 Year

Optionale Cookies set by your choice of preferences

Cookie Origin Category Description Storage Duration
_ga Google Analytics Analyse /
Tracking
This cookie is at the heart of all cookies as it is used for visitor tracking. Google Analytics identifies users using a unique identifier, which they refer to as a "customer ID". This client ID is stored together with other parameters in the _ga cookie. 2 Years
_gid Google Analytics Analyse /
Tracking
This cookie is used to group user behavior for each user. The structure of its value is very similar to the _ga cookie. 1 Day
_gat Google Analytics Analyse /
Tracking
This cookie is used to throttle requests to Google Analytics in order to increase the efficiency of network calls. If you double-click on your website or have demographic reports / interest reports enabled, your browser will also send hits to the double-click from Google. This cookie is created to restrict the requests sent by your browser to Google to double clicks. This ensures that double clicks are not stifled by too many requests. Session
NID Google Maps / YouTube / Google Search Preference Tracking The NID cookie contains a unique ID that Google uses to save your preferred settings and other information, in particular your preferred language (e.g. German), how many search results should be displayed per page (e.g. 10 or 20) and whether the Google SafeSearch filter should be activated. 1 Year
ANID Google Maps / YouTube / Google Services Preferences Tracking This cookie, which is usually provided by your own browser, is used by Google to provide content with personal preferences such as the preferred language, the number of search results per page and whether Google's SafeSearch filter should be used. 1 Year

 

10. Data processing in the context of communication and contact

Message via contact form
You can send us messages using the contact form. In doing so, we process the data that you have entered into the data entry mask. Mandatory fields are marked and must be indicated. The purpose of the data processing is to process your request and, if necessary, to contact you afterwards. The legal basis for processing the data entered in the contact form is based on your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke your consent at any time without giving us reasons for the future. In addition, we process your data in order to initiate or carry out purchase contracts, for example if you ask us product-related questions (Art. 6 Para. 1 lit. b GDPR).
We store the transmitted data until the purpose of data storage is achieved or you revoke your consent. Please note that the process may be subject to statutory retention periods. In this case, we will restrict your data for further processing until it expires.
Communication by email
If you write us an email, we will process your data in accordance with the content and purpose of the message. As a rule, processing takes place on the basis of pre-contractual measures or in the context of the implementation of a contractual relationship on the basis of Art. 6 Para. 1 lit. b GDPR and Art. 6 Para. 1 lit f. GDPR. It is a legitimate interest to process your request quickly and efficiently.
Insofar as it is a product or service-related message, we usually process your data on the basis of our legitimate interests according to Art. 6 Para. 1 lit. f GDPR.
Please note that we store all incoming e-mails in accordance with the principles of proper accounting for a period of ten years, starting on the first day of the following year in which the message was received. If you ask us to delete the data, we will from now on restrict your data for processing and only save it for the purpose of complying with retention periods in our legitimate interest.
Communication by phone or fax
Even if you contact us by phone or fax, we will process your data either to initiate and implement contractual relationships (if the content is product or service-related) and / or in our legitimate interest, analogous to contacting us by email.
We do not record the content of the conversation, but we may make notes to process your request. This will be stored until the purpose of the data processing has been achieved and we no longer have any legitimate interests in processing. If necessary, the content of the conversation is stored anonymously for statistical purposes. Of course you can request deletion at any time.

11. Request for a user account (business customers)

Corporate customers have the option to request a user account. This enables you to access the protected dealer area on our website and to set up a neutral website with your own logo and legal notice (whitepage). This allows you to have the complete range online and updated daily. In addition, all product prices of our range are visible. With a user account you can log in to the site with a user name and password, passwords are always stored in encrypted form.
The legal basis for processing your data when applying for and providing a user account is Article 6 (1) (b) GDPR, we process your data to carry out pre-contractual measures and to carry out contractual relationships and, if necessary, to initiate further contracts. We will keep your user account as long as you want to use it. You can request the deletion of your user account at any time if you no longer want to use the services.
This only applies to the data that is processed to provide the user account. Insofar as we have processed other data, for example for the purposes of billing services provided, the statutory retention periods apply. These retention periods are usually 10 years (§147 AO / §257 HGB / §14b UstG).
Further information on the processing of personal data in the context of the initiation and processing of legal transactions can be found in the mandatory information for business partners.

12. Direct marketing

Direct marketing to our customers based on our legitimate interests
We reserve the right to use the data collected as part of a sales contract or service contract for direct advertising by email or post in accordance with Section 7 (3) UWG (Gesetz gegen unlauteren Wettbewerb or German competition law) if the customer does not object or has objected to this use. Direct advertising only includes offers for similar products or services, such as the products or services already purchased from us by the user.
We use your data for up to three years after the last legal transaction for purposes of direct marketing in a legitimate interest.
We have a legitimate economic interest (Art. 6 Para. 1 lit. f GDPR) in informing our customers about new products and improving our services. You can of course object to receiving direct mail at any time. Send your objection to the responsible body mentioned above. In every newsletter you will also find information on how to assert your objection.

Direct marketing based on your consent (newsletter)
You have the option of giving us your consent to receive direct marketing content. If you give your consent (Art. 6 Para. 1 lit. a GDPR) to receive our e-mail newsletter, for example, we will process your data earmarked for direct marketing measures by e-mail.
Since we are obliged to check the correctness of the e-mail address you provided when registering for the newsletter and want to ensure that it is correct, we use procedures that enable us to verify the ownership of the e-mail address. As a rule, this check is carried out using the double opt-in procedure. After registration, you will receive an email with a link that you have to click to confirm. If the double opt-in procedure is not available due to temporary technical reasons, we will send you an e-mail to which you can reply without text to confirm your identity.
You can revoke your consent at any time with effect for the future. You will find a "Unsubscribe" link in every newsletter. Alternatively, you can send us an email with the subject "Unsubscribe from the newsletter". We process your data until you withdraw your consent. Statutory retention periods remain unaffected.
After you have been removed from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR). Storage in the blacklist is not limited in time. You can object to the storage provided that your interests outweigh our legitimate interests.

Use of CleverReach to send our newsletters
We use CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service with which the newsletter dispatch can be organized and analyzed. The data you enter for the purpose of receiving the newsletter (e.g. email address) are stored on CleverReach's servers in Germany or Ireland.
Our newsletters sent with CleverReach enable us to analyze the behavior of newsletter recipients. Here u. a. It is analyzed how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analyzed whether a previously defined action (e.g. purchase of a product on our website) has taken place after clicking the link in the newsletter. Further information on data analysis by the CleverReach newsletter is available at: https://www.cleverreach.com/de/funktion/reporting-und-tracking/.
Wenn Sie sich für unseren Newsletter aktiv angemeldet haben, erfolgt die If you have actively registered for our newsletter, the data processing takes place on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.
If we receive our newsletter to you on the basis of our legitimate interests (Art. 6 Para. 1 lit f GDPR) within the scope of the existing customer privilege (Section 7 (3) UWG), the processing takes place in our legitimate interest. You can make use of your right of objection at any time if you do not wish to receive any further newsletters.
If you do not want an analysis by CleverReach, you have to unsubscribe from the newsletter. We provide a link for this in every newsletter message. You can also unsubscribe from the newsletter directly on the website.
The data you have stored with us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from our servers as well as from the CleverReach servers after you unsubscribe from the newsletter. This does not affect data that we have stored for other purposes (e.g. email addresses for the members' area).
For more information, see the CleverReach privacy policy at: https://www.cleverreach.com/de/datenschutz/.
Conclusion of a data processing agreement
We have concluded a Data Processing Agreement with CleverReach and fully implement the strict requirements of the German data protection authorities when using CleverReach.

13. Information for applicants

Data protection provisions application process

If you apply for a job at Jung since 1928, whether for an advertised position or on your own initiative, we will process your data to carry out the selection process. It is irrelevant to us whether you apply by post, e-mail or, if available for the respective position, using the online form.
In principle, only process the data that you have transmitted to us yourself as part of an application process. The use of other sources can only be considered after informing you and consulting you. For example, whether we can turn to a former employer.
The legal basis for carrying out an application process is §26 BDSG in conjunction with Article 6 Para. 1 lit. b GDPR (initiation of an employment contract). If you give us your consent to the long-term storage of your data, this is done on the legal basis of Art. 6 Para. 1 lit. a GDPR.
Storage Duration for applicant data
We delete applicant data a maximum of 4 months after completion of the application process (when a candidate has been selected and all applicants have been informed of the outcome). The purpose of the data processing is basically no longer given at the end of the selection process, but we have a legitimate interest (Art. 6 Para. 1 lit. f GDPR) in being able to defend ourselves against any claims by rejected applicants. If you have the impression that your interests in an immediate deletion outweigh this, you can ask us to do so. We will then check your request and give you feedback.
After the expiry of the above-mentioned period, your data will be deleted, unless we have to defend ourselves, for example in an ongoing process, for example due to a lawsuit under the General Equal Treatment Act. In this case, we will delete your data after completion of the procedure, unless there are no statutory retention periods.
If we are allowed to store your data for a longer period based on your consent, we will delete your data if you ask us to do so and if you revoke your consent. If necessary, we will delete your data before you withdraw your consent if it is foreseeable that no position will be available.
Other recipients of your data
We use the HRWorks software for the management of applications, the provider is HRworks GmbH, Waldkircher Str. 28, 79106 Freiburg. We have concluded a Data Processing Agreement with HRWorks, your data will be processed strictly in accordance with our instructions.
Inclusion in our applicant pool
If we are currently unable to offer you a position, we may ask for your consent to the further storage of your data. The purpose of this is to offer you a suitable position at a later date. The legal basis for the processing of your data in our applicant pool is your consent (Art. 6 Aba. 1 lit. a GDPR). Of course, you can revoke your consent at any time with effect for the future. If you do not revoke your consent yourself within a period of two years, we will then delete your data from our pool of applicants at the latest.

14. Analysis tools and advertising

Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. Google may consolidate these data in a profile that is allocated to the respective user or the user’s device.
Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g. cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.
This analysis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

IP anonymization
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in
You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en. For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

Archiving period
Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: https://support.google.com/analytics/answer/7667196?hl=en

Google Remarketing
This website uses the functions of Google Analytics Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Remarketing analyzes your user patterns on our website (e.g. clicks on specific products), to allocate a certain advertising target groups to you and to subsequently display matching online offers to you when you visit other online offers (remarketing or retargeting).
Moreover, it is possible to link the advertising target groups generated with Google Remarketing to device encompassing functions of Google. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g. cell phone) in a manner tailored to you as well as on any of your devices (e.g. tablet or PC).
If you have a Google account, you have the option to object to personalized advertising under the following link: https://www.google.com/settings/ads/onweb/.
The use of Google Remarketing is based on Art. 6 1 lit. et seq. GDPR. The website operator has a legitimate interest in the marketing of the operator’s products that is as effective as possible. If a respective declaration of consent was requested, processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time.
For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.

Google Ads
The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display ads in the Google search engine or on third party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g. location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.
The use of Google Ads is based on Art. 6 Sect. 1 lit. et seq. GDPR. The website operator has a legitimate interest in marketing the operator’s services and products as effectively as possible.

Google Conversion-Tracking
This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the assistance of Google Conversion Tracking we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes.
We use Google Conversion Tracking on the basis of Art. 6 Sect. 1 lit. et seq. GDPR. The operator of the website has a legitimate interest in the analysis of the user patterns with the aim of optimizing both, the operator’s web presentation and advertising. If a respective declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time.
For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en

Google DoubleClick
This website uses features of Google DoubleClick. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter “DoubleClick”).
DoubleClick is used to show you interest-based ads across the Google Network. Advertisements can be tailored to the interests of the viewer using DoubleClick. For example, our ads may appear in Google search results or in banners associated with DoubleClick.
To be able to display interest adequate promotional content to users, DoubleClick must recognize the respective visitor so that it can allocate the websites visited, the clicks and other user pattern information to the user. To do this, DoubleClick deploys cookies or comparable recognition technologies (e.g. device fingerprinting). The recorded information is consolidated into a pseudonym user profile so that the respective user can be shown interest adequate advertising.
The use of Google DoubleClick takes place in the interest of targeted advertising measures. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.
For further information on how to object to the advertisements displayed by Google, please see the following links: https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.

15. Plugins und Tools

YouTube
This website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. If you visit a page on this website into which a YouTube has been embedded, a connection with YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. Furthermore, YouTube will be able to place various cookies on your device or comparable technologies for recognition (e.g. device fingerprinting). In this way YouTube will be able to obtain information about this website’s visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud.
If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account. The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest. If a corresponding agreement has been requested, the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time..
For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

Google Maps
This website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer.
We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR. If a respective declaration of consent has been obtained, the data shall be processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be revoked at any time.
For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Google reCaptcha
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
The purpose of reCAPTCHA is to determine whether data entered on this website (e.g. information entered into a contact form) is being provided by a human user or by an automated program. To determine this, reCAPTCHA analyzes the behavior of the website visitors based on a variety of parameters. This analysis is triggered automatically as soon as the website visitor enters the site. For this analysis, reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor spent on the site or cursor movements initiated by the user). The data tracked during such analyses are forwarded to Google.
reCAPTCHA analyses run entirely in the background. Website visitors are not alerted that an analysis is underway.
Data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in the protection of the operator’s websites against abusive automated spying and against SPAM. If a respective declaration of consent has been obtained, the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a DGDPR. Any such consent may be revoked at any time.
For more information about Google reCAPTCHA please refer to the Google Data Privacy Declaration and Terms Of Use under the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.


16. Online-based Audio and Video Conferences (Conference tools)

Data processing
We use online conference tools, among other things, for communication with our customers. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conference tool and by us. The conferencing tools collect all information that you provide/access to use the tools (email address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other “context information” related to the communication process (metadata).
Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.
Should content be exchanged, uploaded or otherwise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant messages, voicemail uploaded photos and videos, files, whiteboards and other information shared while using the service.
Please note that we do not have complete influence on the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, and which we have listed below this text.
Speicherdauer
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 para. 1 sentence 1 lit. b GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art. 6 para. 1 lit. f GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date. Insofar as video conferences are used as part of the initiation or implementation of an employment relationship, in addition to our legitimate interests, Section 26 BDSG is the legal basis.
Duration of storage
Data collected directly by us via the video and conference tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please contact directly the operators of the conference tools.

Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For details on data processing, please refer to the Microsoft Teams privacy policy: https://privacy.microsoft.com/en-us/privacystatement.
Execution of a contract data processing agreement
We have entered into a contract data processing agreement with the provider of Microsoft Teams and implement the strict provisions of the German data protection agencies to the fullest when using Microsoft Teams.


17. Our social media appearances
Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Google+ etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.
Legal basis
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
Storage Time
The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.
We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).


Individual social networks
Facebook
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook’s statement the collected data will also be transferred to the USA and to other third-party countries.
We have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
You can customize your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads. Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.
Instagram
We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. For details on how they handle your personal information, see the Instagram Privacy Policy: https://help.instagram.com/519522125107875.
XING
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. Details on their handling of your personal data can be found in the XING Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.
LinkedIn
We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies.
If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
Youtube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy?hl=en.


18. Additional Information for Business Partners

Categories of data and purposes of processing

We process personal data of our service providers and partners, which we receive directly within the scope of our business relationship. If we have received data from you, we process it only for the purposes for which we have received or collected it.
As a rule, we process the following categories of data from you:
• Name, first name
• Adress and / or company address
• Telecommunications data
• E-mail adress
• Company
• Professional function and / or position
• Bank details / credit card number / other payment details
• Data on the history of the business relationship
In the course of the business initiation phase and during the business relationship, in particular through personal, telephone or written contacts, initiated by you or by one of our employees, further personal data is generated, e.g. information on the contact channel, date, occasion and result; (electronic) copies of correspondence and information on participation in direct marketing measures.
On the other hand, we process personal data that we have obtained and are permitted to process from publicly accessible sources (e.g. commercial and association registers, press, media, Internet).
Data processing for other purposes can only be considered if the necessary legal requirements according to Art. 6 para. 4 DSGVO are met. In this case we will of course comply with any information duties according to Art. 13 para. 3 DSGVO and Art. 14 para. 4 DSGVO.

Legal bases according to which we process your data

Based on your consent (Art. 6 para. 1 lit. a) DSGVO)

We process personal data for one or more specific purposes if you have given us permission to do so. If personal data are processed on the basis of your consent, you have the right to revoke this consent at any time with effect for the future.
Data processing for the fulfilment of contracts (Art. 6 para. 1 lit. b) DSGVO)
We process personal data for the fulfilment of contracts. The fulfillment of contracts includes, for example, the conclusion, processing and reversal of a contract. In addition, we process personal data which are necessary for the implementation of pre-contractual measures, such as the initiation of a contract, and which are provided upon your request.
Data processing based on a legal obligation (Art. 6 para. 1 lit. c) DSGVO)
Like any company, we have to comply with retention and other documentation requirements, and this may include documents containing personal information. Insofar as we process data for these purposes, the processing is based on a legal obligation.
Data processing based on a weighing of interests (Art. 6 para. 1 lit. f) DSGVO)
If we process data on the basis of a balancing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 DSGVO. Insofar as the specific purpose permits, we process your data pseudonymised or anonymised.

Other recipients of your data

Passing on to data processors in accordance to Art. 28 GDPR
Data processors commissioned by us (Art. 28 GDPR), especially in the field of IT services and, for example, printing services, who process your data for us in accordance with our instructions. If we commission service providers to perform our tasks, we always observe the provisions of data protection law; in particular, data will only be passed on after the conclusion of data processing agreements. We will be pleased to inform you which contract processors we use.
For the execution of a contractual relationship
If it is necessary for the execution of the contract with you, we will pass on your data, for example, to our bank for the processing of payments or shipping service providers, such as the German Post, DHL, UPS, GSL, DPD or other occasion-related providers.
Transfer due to a legal obligation
In the event of a legal or official obligation, we will pass on your data to public bodies or institutions (authorities, for example in the context of criminal prosecution).
Other authorities, insofar as you have given us your consent
If you have given your explicit consent, we will also pass on your data to other parties. However, this will be done within the limits of your verifiable consent.


General information on deletion periods for personal data

Principle of earmarking and compliance with statutory retention periods
We process the data as long as this is necessary for the respective purpose. If necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract.
In addition, like any company, we are obliged to comply with the statutory retention periods, for example the periods under commercial and tax law. Insofar as legal storage obligations exist, the relevant personal data is stored for the duration of the storage obligation. The duration of storage also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases may be up to thirty years. After expiry of the obligation to retain data, it is checked whether there is any further necessity for the processing. If there is no longer a need, the data is deleted.
As a rule, such retention periods within the framework of legal transactions (according to §147 AO / §257 HGB / §14b UstG) are 10 years, beginning with the year following the legal transaction.
Concrete example
Insofar as you provide us with your contact details, for example by e-mail, telephone, or by handing over your business card, we store this data in accordance with Art. 6 Para. 1 lit. b DSGVO on the basis of pre-contractual measures and in the legitimate interest (Art. 6 Para. 1 lit. f DSGVO) of smooth and targeted communication. Insofar as no legal transaction is concluded, we will delete your data if you request us to do so or if no further contact takes place within a period of three years. If you enter into a legal transaction with us (Art. 6 para. 1 lit. b DSGVO), we will store your data for ten years until the expiry of the commercial and tax law requirements. After this period, we will check whether we can delete the data and, if necessary, we will delete it.
E-mails and business letters
We archive all our e-mail traffic for ten years. If you send us an e-mail, your data and the entire e-mail content will be stored for 10 years. Most e-mails count as business letters; in addition, e-mails may contain information relevant to tax law. In our opinion, the effort required to check each individual e-mail is not in proportion to the benefit and the interests of the sender worthy of protection. However, you can of course request us to delete the e-mail at any time and we will check each individual case and inform you of the result. This may lead to deletion or restriction of processing, depending on the content of the correspondence.
Revocation of your consent
Insofar as we process your data on the basis of your consent (Art. 6 para. 1 lit. a DSGVO), we will delete them after your revocation. Unless there is a justified interest against a complete deletion. For example, we retain declarations of consent in principle for up to three years after receipt of your revocation in the legitimate interest (Art. 6 para. 1 lit. f DSGVO). We keep the consent exclusively under restriction of the processing in order to be able to defend ourselves in case of dispute.

Legal or contractual obligation to provide personal data
The provision of personal data is regularly required for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the necessary personal data, we will not be able to conclude and fulfil a contract with you.

Transfer to a third party country

Your personal data is generally processed by us in computer centres in the Federal Republic of Germany or the European Union. A transfer to a third country is only possible if you have given us your consent or if we have concluded a contract for data processing in accordance with Art. 28 DSGVO, taking into account suitable guarantees or other appropriate safeguards.