1. Data privacy at a glance
Analytics and third-party tools
2. General information and mandatory information
Please note that data transmitted via the internet (e.g. via e-mail communication) may be subject to security breaches. Complete protection of your data from third-party access is not possible.
Telephone: Tel.: +49 5242 4105-0
The party responsible is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data (names, e-mail addresses, etc.).
Right to lodge a complaint with the competent supervisory authority
In the event of a breach of data protection legislation, the data subject may file a complaint with the competent supervisory authority. The competent regulatory authority for matters related to data protection legislation is the data protection officer of the German state in which our company is headquartered. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
SSL or TLS encryption
This website uses SSL or TLS encryption for security reasons and for the protection of the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection in your browser's address line when it changes from “http://” to “https://” and the lock icon is displayed in your browser's address bar.
When SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.
3. Data protection officer
4. Data collection on our website
Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit. Other cookies remain in your device’s memory until you delete them. These cookies make it possible to recognize your browser when you next visit the site.
If you send us questions via the contact form, we will collect the data entered on the form, including the contact details you provide, to answer your question and any follow-up questions. We will not share this information without your permission.
We will therefore process any data you enter onto the contact form only with your consent (Art. 6 paragraph 1, letter a GDPR). You may withdraw your consent at any time. An informal email making this request is sufficient. The data processed before we receive your request may still be legally processed.
We will retain the data you provide on the contact form until you request its deletion, withdraw your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, shall remain unaffected by this provision.
5. Analytics and advertising
Matomo (formerly Piwik)
This website uses the open source web analytics service Matomo. Matomo uses “cookies”. Cookies are text files that are stored on your computer and allow an analysis of the use of the website by you. For this, the information generated by the cookie about your use of this website is stored on our server. Your IP address will be shortened before it is stored.
Matomo cookies remain on your device until you delete them.
Matomo cookies are stored based on Art. 6 paragraph 1 letter f GDPR. The website operator has a legitimate interest in analysing user behaviour anonymously to optimise both its website and its advertising.
The information generated by the cookie about your use of this website is not forwarded to third parties. You can prevent the cookies from being stored by changing your browser settings. However, please note that if you do this you may not be able to use all the features of this website.
If you do not agree to the storage and use of your data, you can disable its storage and use here. For this purpose, there is an opt-out cookie stored in your browser, which prevents Matomo from storing usage data. Deleting your cookies will result in deletion of the Matomo opt-out cookie as well. The opt-out must be enabled again when you visit our site next.
6. Plugins and tools
Our website uses plugins from YouTube, which is operated by Google. The operator of the pages is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.
When you visit one of our pages featuring a YouTube plugin, a connection to the YouTube servers is established. Here, the YouTube server is informed about which of our pages you have visited.
If you are logged in to your YouTube account, YouTube allows you to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used to help make our website appealing. This constitutes a justified interest pursuant to Art. 6 paragraph 1 letter f GDPR.
Our social media appearances | Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Twitter etc. can generally analyze your user behavior comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.
Individual social networks
Facebook | We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. According to Facebook’s statement the collected data will also be transferred to the USA and to other third-party countries. We have signed an agreement with Facebook on shared responsibility for the processing of data (Controller Addendum). This agreement determines which data processing operations we or Facebook are responsible for when you visit our Facebook Fanpage. This agreement can be viewed at the following link:
You can customize your advertising settings independently in your user account. Click on the following link and log in:
https://www.facebook.com/settings?tab=ads. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here:
Instagram | We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here:
help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
This site uses the Google Maps map service via an API. It is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To use Google Maps, it is necessary to save your IP address. This information is generally transferred to and saved on a Google server in the United States. The provider of this site has no influence on this data transfer.
Google Maps is used to make our website appealing and facilitate the location of places specified by us on the website. This constitutes a justified interest pursuant to Art. 6 paragraph 1 letter f GDPR.
7. How we handle applicants’ data
How we handle applicants’ data
If you are interested, you can apply for a position at our company (e.g. via e-mail, post or our online application form). This page is designed to provide information about the scope of the personal data we will collect from you during the application process, the purpose of this collection and how the data is used. We hereby assure all applicants that the collection, processing and use of their data shall be conducted in accordance with applicable data protection laws and all other applicable regulations, and that their data shall be treated as strictly confidential.
Scope and purpose of data collection
If you submit an application to us, we will process your personal data associated with said application (e.g. contact and communication data, application documents, notices regarding interviews, etc.) to the extent required in order for us to reach a decision on whether to enter into an employment relationship with you. The legal basis for this processing is provided by Section 26 of the German Federal Data Protection Act (BDSG) (initiating an employment relationship), Art. 6, Para. 1(b) of the GDPR (general entry into a contract) and – if you have provided your consent accordingly – Art. 6, Para. 1(a) of the GDPR. You can withdraw your consent at any time. Within our company, your personal data will only be passed on to persons who are involved in the processing of your application.
If your application is successful, the data you have submitted to us shall be saved in our data processing system for the purpose of pursuing our employment relationship in accordance with Section 26 of the BDSG and Art. 6, Para. 1(b) of the GDPR.
Data retention period
If we are unable to offer you a position, if you turn down an offer of a position from us, or if you withdraw your application, we reserve the right to retain the data you have submitted to us for up to 6 (six) months following the end of the application process (rejection or withdrawal of the application), on the basis of our legitimate interests (Art. 6, Para. 1(f), GDPR). Once this period expires, your data will be deleted and your physical application documents destroyed. In particular, data is retained in this context for use as evidence in case of a legal dispute. If it can be reasonably expected that the data may be required after the expiry of the six-month retention period (e.g. due a potential or pending legal dispute), it shall not be erased until the purpose for which the retention period has been extended ceases to exist.
Your data can also be retained for an extended period if you have provided us with consent for this purpose (Art. 6, Para 1(a), GDPR), or if erasure of the data would be in contravention of the legal obligations regarding data retention.