Privacy Policy

As of January 2025

General Information

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that says something about you and with which you can be identified. In this privacy policy, we would like to explain to you how, for what purpose, and on what legal basis we process your data.

The data controller responsible for data processing on this website and within our company is:

Laubner ID Solutions GmbH

Röntgenstraße 4

67133 Maxdorf

Germany

Phone: +49 6237/924380

Email: info@laubner.com

General Notes

SSL/TLS Encryption

When you enter your data on websites, place online orders, or send emails over the Internet, you must always expect that unauthorized third parties may access your data. Complete protection against such access is not possible. However, we make every effort to protect your data as best as possible and close security gaps to the extent that it is possible for us.

An important protection mechanism is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the lock icon in front of the entered Internet address in your browser and by the fact that our Internet address begins with https:// and not with http://.

How Long Do We Store Your Data?

In some sections of this privacy policy, we inform you about how long we or the companies that process your data on our behalf store your data. If such information is missing, we store your data until the purpose of the data processing ceases to apply, you object to the data processing, or you revoke your consent to the data processing.

In the event of an objection or revocation, however, we may continue to process your data if at least one of the following conditions is met:

  • We have compelling legitimate grounds for continuing the data processing that outweigh your interests, rights, and freedoms (only in the case of an objection to data processing; if the objection is directed against direct marketing, we cannot provide any compelling legitimate grounds).
  • The data processing is necessary to assert, exercise, or defend legal claims (does not apply if your objection is directed against direct marketing).  
  • We are legally obliged to retain your data.

In this case, we will delete your data as soon as the condition(s) no longer apply.

Data Transfer to the USA

On our website, we also use tools from companies that transmit your data to the USA, where they store and, if necessary, further process it. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework. This establishes that the USA ensures an adequate level of protection for personal data from the EU that is transferred to US companies. This decision is based on new guarantees and measures introduced by the USA to meet data protection requirements. The adequacy decision includes, among other things, restrictions and guarantees regarding the access of US intelligence services to the data. Binding guarantees have been introduced to limit the access of US intelligence services to what is necessary and proportionate to protect national security. In addition, enhanced oversight of the activities of US intelligence services has been established to ensure that the restrictions on surveillance activities are complied with. An independent redress mechanism has also been established to process and resolve complaints from European citizens about access to their data. The EU-US Data Privacy Framework thus enables European companies to transfer data to certified US companies without having to introduce additional data protection guarantees. You can view a list of all certified companies at the following link: https://www.dataprivacyframework.gov/s/participant-search

A change in the decision of the European Commission cannot be ruled out.

Data Protection Officer

We have appointed a data protection officer for our company.

DataGAP GmbH

Markus Altenburg

Bessemerstr. 82

12103 Berlin

Germany

Email address: team@datagap.de

Phone number: +49 30 57710513

Objection to Data Processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND THEREFORE BASE THIS ON ART. 6 PARA. 1 SENTENCE 1 LIT. F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS ACCORDING TO ART. 21 GDPR. THIS ALSO APPLIES TO PROFILING THAT TAKES PLACE BASED ON THE AFOREMENTIONED PROVISION. THE CONDITION IS THAT YOU PROVIDE REASONS FOR THE OBJECTION THAT ARISE FROM YOUR PARTICULAR SITUATION. A REASON IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS ONLY DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS EXISTS:  

  • WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, RIGHTS, AND FREEDOMS.
  • THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.  

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR AGAINST PROFILING ASSOCIATED WITH IT.

Further Rights

Revocation of Your Consent to Data Processing

Many data processing operations are based on your consent. You give this consent, for example, by ticking a corresponding box in online forms before sending the form or by allowing certain cookies when you visit our website. You can revoke your consent at any time without giving reasons (Art. 7 para. 3 GDPR). From the time of revocation, we may no longer process your data. The only exception: we are legally obliged to retain the data for a certain period. Such retention periods exist in particular in tax and commercial law.  

Right to Complain to the Competent Supervisory Authority

If you believe that we are violating the General Data Protection Regulation (GDPR), you have the right to complain to a supervisory authority in accordance with Art. 77 GDPR. You can contact a supervisory authority in the member state of your residence, your workplace, or the place where the alleged violation occurred. The right to complain exists in addition to administrative or judicial remedies.

Right to Data Portability

Data that we process automatically based on your consent or in fulfillment of a contract must be provided to you or a third party in a common machine-readable format if you request it. We can only transfer the data to another controller if this is technically possible.

Right to Information, Deletion, and Correction of Data

In accordance with Art. 15 GDPR, you have the right to receive free information about which personal data we have stored about you, where the data comes from, to whom we transfer the data, and for what purpose it is stored. If the data is incorrect, you have a right to correction (Art. 16 GDPR); under the conditions of Art. 17 GDPR, you can request that we delete the data.

Right to Restriction of Processing

In certain situations, you can request that we restrict the processing of your data in accordance with Art. 18 GDPR. The data may then – apart from storage – only be processed as follows:

  • with your consent
  • for the assertion, exercise, or defense of legal claims  
  • to protect the rights of another natural or legal person
  • for reasons of important public interest of the European Union or a member state  

The right to restrict processing exists in the following situations:

  • You have disputed the accuracy of your personal data stored with us, and we need time to verify this. Here, the right exists for the duration of the verification.  
  • The processing of your personal data is unlawful or was unlawful in the past. Here, the right exists as an alternative to the deletion of the data.  
  • We no longer need your personal data, but you need it to exercise, defend, or assert legal claims. Here, the right exists as an alternative to the deletion of the data.
  • You have lodged an objection in accordance with Art. 21 para. 1 GDPR, and now your and our interests must be weighed against each other. Here, the right exists as long as the result of the weighing is not yet determined.

Hosting and Content Delivery Networks (CDN)

External Hosting

Our website is hosted on a server of the following internet service provider (hoster):

Host Europe GmbH

Hansestraße 111

51149 Cologne

Germany

Was a Data Processing Agreement Concluded with the Hoster or are Standard Contractual Clauses (SCCs) Used?

Yes

How Do We Process Your Data?

The hoster stores all data from our website. This includes all personal data that is collected automatically or by your input. This can include in particular: your IP address, accessed pages, names, contact details and requests, as well as meta and communication data. During data processing, our hoster adheres to our instructions and always processes the data only to the extent necessary to fulfill the performance obligation towards us.

On What Legal Basis Do We Process Your Data?

Since we address potential customers and maintain contacts with existing customers through our website, the data processing by our hoster serves to initiate and fulfill contracts and is therefore based on Art. 6 para. 1 lit. b) GDPR. Furthermore, it is our legitimate interest as a company to provide a professional internet presence that meets the necessary requirements for security, speed, and efficiency. In this respect, we also process your data on the basis of Art. 6 para. 1 lit. f) GDPR.  

Data Collection on this Website

Use of Cookies

Our website places cookies on your device. These are small text files that are used for various purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are needed to perform certain actions or functions on the site (functional cookies). For example, without cookies, it would not be possible to use the advantages of a shopping cart in an online shop. Yet other cookies are used to analyze user behavior or optimize advertising measures. If we use third-party services on our website, e.g., to process payment transactions, these companies can also leave cookies on your device when you visit the website (so-called third-party cookies).  

How Do We Process Your Data?

Session cookies are only stored on your device for the duration of a session. As soon as you close the browser, they disappear by themselves. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This can, for example, lead to your user behavior being analyzed permanently. You can influence how your browser handles cookies via the settings in your browser:  

  • Do you want to be informed when cookies are set?
  • Do you want to exclude cookies in general or for specific cases?
  • Do you want cookies to be automatically deleted when you close the browser?

If you deactivate or do not allow cookies, the functionality of the website may be limited.

If we use cookies from other companies or for analytical purposes, we will inform you about this within the framework of this data protection declaration. We also ask for your consent in this regard when you visit our website.  

On What Legal Basis Do We Process Your Data?

We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device therefore takes place on the basis of Art. 6 para. 1 lit. f) GDPR. We use all other cookies on the basis of Art. 6 para. 1 lit. a) GDPR, provided that you give us your corresponding consent. You can revoke this at any time with effect for the future. If you have consented to the placement of necessary and functional cookies when asked for your consent, the storage of these cookies is also carried out exclusively on the basis of your consent.  

Cookie Consent with Consent Manager

What is Consent Manager?

Consent Manager is a Consent Management Provider (CMP) used to collect, process, and forward GDPR-compliant consents.

Who processes your data?

Consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden

Has data processing agreement been concluded with Consent Manager Provider?

Yes.

Where can you find more information about data protection at Consent Manager?

https://www.consentmanager.de/datenschutz/

How do we process your data?

We use Consent Manager to obtain your consent to store cookies on your device and to document this in a data protection-compliant manner. When you visit our website and close the Consent Manager cookie window with the consent request, the following data is transmitted to the company:

  • Your IP address (from which your country is also determined)
  • The browser used
  • The language used
  • The website accessed

Consent Manager also stores various cookies in your browser to assign the consents given or their revocation to your browser. All data collected is stored until the cookies are no longer needed, you delete the cookies from Consent Manager, or you ask us to delete the data. This does not apply if we are legally obliged to retain the data.

On what legal basis do we process your data?

We are legally obliged to obtain the consent of our website visitors for the use of certain cookies. To fulfill this obligation, we use Consent Manager. The legal basis for data processing is therefore Art. 6 para. 1 lit. c) GDPR.

Server Log Files

Server log files log all requests and accesses to our website and record error messages. They also include personal data, especially your IP address. However, this is anonymized by the provider after a short time, so that we cannot assign the data to your person. The data is automatically transmitted from your browser to our provider.

How do we process your data?

Our provider stores the server log files to track activities on our website and identify errors. The files contain the following data:

  • Browser type and version
  • Operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address (possibly anonymized)  

We do not combine this data with other data, but only use it for statistical evaluation and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website runs without errors. It is also our legitimate interest to obtain an anonymized overview of the accesses to our website. Data processing is therefore lawful in accordance with Art. 6 para. 1 lit. f) GDPR.  

Contact Form

You can send us a message via the contact form on this website.

How do we process your data?

We store your message and the information from the form to process your request including follow-up questions. This also includes the contact details provided. Without your consent, we will not pass the data on to other people.

How long do we store your data?

We delete your data as soon as one of the following points occurs:

  • Your request has been processed conclusively.
  • You ask us to delete the data.
  • You revoke your consent to storage.

This only does not apply if we are legally obliged to retain the data.

On what legal basis do we process your data?

If your request is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to process requests directed to us effectively. The legal basis for data processing is therefore Art. 6 para. 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 para. 1 lit. a) GDPR is the legal basis. In this case, you can revoke your consent at any time with effect for the future.  

Request by Email, Telephone or Fax

You can send us a message by email or fax or call us.

How do we process your data?

We store your message as well as your self-made contact details or the transmitted telephone number to process your request including follow-up questions. Without your consent, we will not pass the data on to other people.

How long do we store your data?

We delete your data as soon as one of the following points occurs:

  • Your request has been processed conclusively.
  • You ask us to delete the data.
  • You revoke your consent to storage.

This only does not apply if we are legally obliged to retain the data.

On what legal basis do we process your data?

If your request is related to our contractual relationship or serves to carry out pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b) GDPR. In all other cases, it is our legitimate interest to process requests directed to us effectively. The legal basis for data processing is therefore Art. 6 para. 1 lit. f) GDPR. If you have consented to the storage of your data, Art. 6 para. 1 lit. a) GDPR is the legal basis. In this case, you can revoke your consent at any time with effect for the future.  

Analysis Tools and Advertising

We use the following tools to analyze the behavior of our website visitors and to show you advertisements.

Google Analytics

What is Google Analytics?

A tool for analyzing user behavior provided by Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland.

Where can you find more information about data protection at Google Analytics?

https://support.google.com/analytics/answer/6004245?hl=de

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How can you prevent data collection?

Among other things, with a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en

How do we process your data?

We are always interested in optimizing our web offering for the visitors of our website and in placing advertisements optimally. Google Analytics helps us with this, a tool that analyzes user behavior and thus provides us with the necessary data basis for adjustments. Through the tool, we receive information about the origin of our visitors, their page views and their dwell time on the pages, as well as the operating system they use.

Standard Processing

To collect the data, Google Analytics uses cookies, device fingerprinting, or other technologies to recognize users. The data is transmitted to Google's servers in the USA and, with the help of the also recorded IP address, combined in a profile that can be assigned to you or your device.  

You can prevent Google from processing your data by installing a browser plugin that Google itself provides: https://tools.google.com/dlpage/gaoptout?hl=en.

How long do we store your data?

According to Google's own information, data stored at the user and event level that is linked to cookies, user identifiers (e.g., user IDs), or advertising IDs is deleted or anonymized by Google after 14 months (see https://support.google.com/analytics/answer/7667196?hl=de).

On what legal basis do we process your data?

As website operators, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our web offering and the advertising placed there. Data processing is therefore lawful according to Art. 6 para. 1 lit. f) GDPR. In the event that you have, for example, agreed to the storage of cookies or otherwise consented to data processing by Google Analytics, Art. 6 para. 1 lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.  

Quellen und ähnliche Inhalte

Newsletter

Inxmail

What is Inxmail?

Among other things, a service for sending newsletters and analyzing recipient behavior.

Who processes your data?

Inxmail GmbH, Wetzinger Straße 17, 79106 Freiburg, Germany.

Has a data processing agreement been concluded with Inxmail?

Yes.

Where can I find more information about data protection at Inxmail?

https://www.inxmail.de/datenschutz/

How do we process your data?

We use Inxmail for our newsletter distribution. The service manages the data of newsletter subscribers for us, sends our newsletter, and analyzes our newsletter campaigns.

If you would like to receive our newsletter, we need your email address. We will also use a confirmation email (double opt-in procedure) to verify that you are indeed the owner of this email address. We do not collect any further data or only on a voluntary basis. We use your data exclusively for sending the newsletter. It is stored on an Inxmail server.

If we send a newsletter via Inxmail and you open it, a file contained in the newsletter automatically connects to the Inxmail servers. This tells the service that the newsletter has been opened and registers all clicks on the links it contains. It also registers whether, for example, you made a purchase after clicking on a link. In addition, Mail Poet collects technical information, such as the time of retrieval, the IP address, browser type, and operating system.

With Inxmail, we can categorize the recipients of our newsletter, e.g., by age, gender, or location. This enables us to better adapt our newsletters to the respective target group.

You can unsubscribe from the newsletter at any time.

How long do we store your data?

After you unsubscribe, the data is deleted from the newsletter distribution list. Under certain circumstances, we may also put your email address on a blacklist; this is necessary, for example, if we have a record of your objection to advertising. The storage then takes place on the basis of Art. 6 para. 1 lit. f) GDPR.

Otherwise, we reserve the right to delete the data at any time after the purpose of the collection ceases or at our own discretion.

On what legal basis do we process your data?

By entering the subscriber list, you consent to data processing by Inxmail. This is therefore legally valid on the basis of Art. 6 para. 1 lit. a) GDPR. You can revoke your consent by unsubscribing from the newsletter or by sending us an informal message. For us, this means that we are no longer allowed to send you newsletters from this point on.

Plugins and Tools

YouTube (with enhanced data protection)

What is YouTube?

Video platform

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at YouTube?

[https://www.youtube.com/intl/ALL_en/howyoutubeworks/our-commitments/protecting-user-data/](https://www.youtube.com/intl/ALL_en/howyoutubeworks/our-commitments/protecting-user-data/)

How do we process your data?

On our website, you can watch YouTube videos. Google, as the provider of YouTube, collects and stores certain information about you. However, since we use YouTube in enhanced data protection mode, this only happens when you start a video. Specifically, the following happens in this case:

  • Google's servers are informed which of our pages have been visited from your device. If you are logged into your YouTube account while browsing, Google can directly assign your browsing behavior to your personal profile. If you do not want this, you must log out of your YouTube account before continuing to browse the internet.
  • Google receives information about visitors to our website via cookies, device fingerprinting, or similar recognition technologies. Based on this, the company then creates video statistics, makes its application more attractive for users, and prevents fraud attempts.
  • Your data may also be processed beyond this. However, details are beyond our knowledge. We also cannot influence the processing.

Even if you do not start a YouTube video on our website, Google establishes a connection to its DoubleClick network and, if necessary, to other partners. The enhanced data protection mode does not mean that Google does not process any data from you at all when you visit our website.

On what legal basis do we process your data?

By embedding YouTube videos, we want to make our website and our services and offers more appealing. This is our legitimate interest as a company and therefore lawful according to Art. 6 para. 1 lit. f) GDPR.

If you have consented to the data processing, we process your data exclusively on the basis of Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time. From the time of revocation, we may no longer process your data.

Google Fonts (local hosting)

We use fonts from the US company Google on our website. We have installed the fonts locally, so that no connection to Google's servers takes place when you visit our website.

You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=en.

WeTransfer

  • What is WeTransfer?
    • File-sharing service  
  • Who processes your data?
    • WeTransfer BV Willem Fenengastraat 19 1096BI Amsterdam
  • Where can you find more information about data protection at Dropbox?
  • On what basis do we transfer your data to the USA and other third countries?
  • How do we process your data?
    • We use WeTransfer, a free file-sharing service that allows users to send large files quickly and easily. Without a registered account, users can upload files to the WeTransfer website. In this case, both the email address of the sender and the recipient must be provided. The recipient receives an email with a download link and, if necessary, a personal message.  
    • WeTransfer states that personal data is only stored until the service is successfully completed. Once a file has been downloaded or the download link has expired, the data is deleted. WeTransfer is an internationally operating company, we cannot exclude the transfer of data to the USA or other third countries.  
  • On what legal basis do we process your data?
    • We have a legitimate interest in offering a straightforward data exchange. The processing of your data therefore takes place on the basis of Art. 6 para. 1 lit. f) GDPR. If you have consented to the data processing, we process your data exclusively on the basis of Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.
  • eCommerce

Absolut, hier ist die englische Übersetzung:

Data Transfer for Shipping Goods

How do we process your data?

When you order goods from us, we transfer your data to companies that we commission with the delivery and/or through which we process the payment. Only data that is necessary for the commissioned company to carry out the specific order is transmitted. If we want to pass on data beyond that, we will obtain your consent. We do not pass on your data for advertising purposes.

On what legal basis do we process your data?

We pass on your data to fulfill the contract we have concluded with you. The basis for data processing is therefore Art. 6 para. 1 lit. b) GDPR.

Data Transfer for Dropshipping

Dropshipping means that ordered goods are delivered directly from the manufacturer or wholesaler to you. In our case, this is:

JARLTECH Europe GmbH Jarltech-Platz 1 61250 Usingen Germany

We have concluded a data processing agreement with JARLTECH Europe GmbH.

How do we process your data?

In order for the delivery to be carried out by JARLTECH Europe GmbH, we pass on your name, delivery address, and – if necessary – your telephone number to them.

On what legal basis do we process your data?

We pass on your data to fulfill the contract we have concluded with you. The basis for data processing is therefore Art. 6 para. 1 lit. b) GDPR. We also have a legitimate interest in processing purchases as quickly and effectively as possible. The legal basis is therefore also Art. 6 para. 1 lit. f) GDPR.

Audio and Video Conferences

As a company, we are in contact with many people: customers, business partners, service providers, etc. For communication, we use online conference tools, among other means. You will find information relevant to data protection law regarding the provider(s) of the tools we use at the end of this section. When you communicate with us via such a tool, not only we, but especially the provider of the respective tool, process your personal data.

How do we process your data?

Online conference tools collect and store various personal data to enable participation in an online conference and its smooth execution. In addition to registration, conference, and technical data, this also concerns certain communication content.

  • Registration data: Your email address and/or telephone number and, if applicable, other data that you provide when registering for the conference.  
  • Conference data: Start, end, and duration of your participation in the conference, the number of participants, and other metadata about the conference.  
  • Technical data: IP address, MAC address, device ID, device type, operating system and version, client version, camera type, microphone or speakers, and the type of connection.  
  • Communication content: Cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

For details on data processing, please refer to the privacy policies of the respective conference tool provider.  

How long do we store your data?

We, as your communication partner, delete your data on our systems as soon as one of the following points occurs:

  • The purpose of data processing ceases to apply.
  • You ask us to delete the data.
  • You revoke your consent to storage.

This only does not apply if we are legally obliged to retain the data.

Cookies remain on your device until you delete them.

The providers of conference tools also store your data for their own purposes. Please ask the providers directly about what this means for the duration of the storage of your data.

On what legal basis do we process your data?

If we are already contractually connected or you would like to conclude a contract with us, we use conference tools to fulfill the contract or to inform you about our services or products. Data processing therefore takes place on the basis of Art. 6 para. 1 lit. b) GDPR. Otherwise, the use of conference tools serves simple and fast communication, without which we could not run our company efficiently. We therefore also have a legitimate interest in data processing in accordance with Art. 6 para. 1 lit. f) GDPR. Another legal basis can be your consent. In this case, Art. 6 para. 1 lit. a) GDPR is relevant. This basis ceases to apply for the future if you revoke your consent.

Which online conference tools do we use?

TeamViewer

  • What is TeamViewer?
    • Software for online collaboration and remote support
  • Who processes your data?
    • TeamViewer Germany GmbH, Bahnhofsplatz 2, 73033 Göppingen, Germany
  • Where can you find more information about data protection at TeamViewer?

Microsoft Teams

  • What is Microsoft Teams?
    • Communication platform for collaboration in teams
  • Who processes your data?
    • Microsoft Corp., One Microsoft Way, Redmond, WA 98052-6399, USA
  • Where can you find more information about data protection at Microsoft Teams?
  • On what basis do we transfer your data to the USA?
    • Based on the adequacy decision of the European Commission and the corresponding certification of the company.

Own Services / Other

Handling Applicant Data

If you would like to work for us, we are happy to receive your application. We treat all transmitted personal data with strict confidentiality. This also applies to data that we collect later in the application process.

How do we process your data?

We store all data that we collect during the application process and use it to the extent necessary to make a decision about the establishment of an employment relationship. In addition to contact and communication data and application documents, this also includes, for example, notes that we make during job interviews. We only pass on your data within our company to people who are involved in processing your application.  

If your application is successful, we store the data that is necessary to carry out the employment relationship in our data processing systems.

If we cannot currently offer you a suitable position, we are happy to include your data in our applicant pool with your consent. This makes it possible to contact you if a position becomes available that matches your profile.

How long do we store your data?

If we cannot make you a job offer, you reject a job offer, or you withdraw your application, we reserve the right to keep your documents and other application data for up to 6 months after the end of the application process. The reason is that we may need the data for evidentiary purposes in the event of a legal dispute. After this period, we delete the data and destroy the documents. If a legal dispute is actually threatened or is already pending, we will delete the data and documents when they are no longer needed for evidentiary purposes.  

We delete data in the applicant pool no later than 2 years after consent is given. If you revoke your consent before this period expires, we will delete it earlier.

The deletion of your data always presupposes that we are not legally obliged to keep it longer.

On what legal basis do we process your data?

We process your applicant data on the basis of Section 26 BDSG-neu (initiation of an employment relationship) and Art. 6 para. 1 lit. b) GDPR (general contract initiation).  

The same applies if your application is successful.

If we cannot make you a job offer, you reject a job offer, or you withdraw your application, we have a legitimate interest in using your data for evidentiary purposes in a possible legal dispute. Data processing is therefore based on Art. 6 para. 1 lit. f) GDPR.  

If you have expressly consented to the storage of your data, we process your data on the basis of Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Data Processing on Social Media

What is Social Media?

By social media, we mean the social networks on which we have created publicly accessible profiles. You can read which social networks these are in concrete terms below.

Who processes your data?

The respective operating companies of the social networks. You will find the individual operators below for the respective networks.

How is your data processed?

The operators of social networks are generally able to collect and evaluate comprehensive data about the behavior of visitors and users of the network. We are unable to trace all processing operations in the social networks we use, which is why other processing operations that are not listed here may be carried out by the operators of the social networks. You will find further information on this in the terms of use and privacy policies of the respective social networks.

The processing of your data can be triggered by visiting the website of the social network or our profile page there. Even if you access a website that uses certain content from the network, e.g., like or share buttons, data can already be transferred to the operators of the social network. If you yourself are a user of the social network and are logged into

Which social media do we use?

Facebook

  • What is Facebook?
    • A social network
  • Who processes your data?
    • Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
  • Is your data transferred to third countries?
    • Yes, to the USA and other third countries
  • Where can you find more information about data protection at Facebook?
  • Where can you, as a Facebook user, adjust your advertising settings?

Twitter

  • What is Twitter?
    • A social network in the form of a micro-blogging platform
  • Who processes your data?
    • Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
  • Is your data transferred to third countries?
    • Yes, to the USA
  • Where can you find more information about data protection at Twitter?
  • Where can you, as a Twitter user, adjust your advertising settings?
    • As a registered Twitter user, you can adjust your privacy settings in your user account. To do this, click on the following link and log in:

LinkedIn

Xing

  • What is Xing?
    • A social network for professional contacts
  • Who processes your data?
    • New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
  • Is your data transferred to third countries?
    • Yes, to fulfill the contract with Xing, if you have given your consent, if it is necessary to assert, exercise, or defend legal claims, or if there is an adequacy decision in accordance with Art. 45 EU-GDPR or suitable guarantees in accordance with Art. 46 EU-GDPR.
  • Where can you find more information about data protection at Xing?
  • Where can you, as a user, adjust your privacy settings?

YouTube