1. Data protection at a glance

Gene­ral information

The fol­lo­wing infor­ma­ti­on pro­vi­des a simp­le over­view of what hap­pens to your per­so­nal data when you visit this web­site. Per­so­nal data is any data that can be used to iden­ti­fy you per­so­nal­ly. Detail­ed infor­ma­ti­on on the sub­ject of data pro­tec­tion can be found in our data pro­tec­tion decla­ra­ti­on lis­ted below this text.

Data coll­ec­tion on our website

Who is respon­si­ble for data coll­ec­tion on this web­site?
Data pro­ces­sing on this web­site is car­ri­ed out by the web­site ope­ra­tor. You can find their cont­act details in the “Infor­ma­ti­on on the con­trol­ler” sec­tion of this pri­va­cy policy.

How do we coll­ect your data?
On the one hand, your data is coll­ec­ted when you pro­vi­de it to us. This may, for exam­p­le, be data that you enter in a cont­act form.
Other data is coll­ec­ted auto­ma­ti­cal­ly or with your con­sent by our IT sys­tems when you visit the web­site. This is pri­ma­ri­ly tech­ni­cal data (e.g. inter­net brow­ser, ope­ra­ting sys­tem or time of page view). This data is coll­ec­ted auto­ma­ti­cal­ly as soon as you enter this website.

What do we use your data for?
Some of the data is coll­ec­ted to ensu­re that the web­site is pro­vi­ded wit­hout errors. Other data may be used to ana­ly­ze your user behavior.

What rights do you have regar­ding your data?
You have the right to recei­ve infor­ma­ti­on about the ori­gin, reci­pi­ent and pur­po­se of your stored per­so­nal data free of char­ge at any time. You also have the right to request the cor­rec­tion or dele­ti­on of this data. If you have given your con­sent to data pro­ces­sing, you can revo­ke this con­sent at any time for the future. You also have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data under cer­tain cir­cum­s­tances. You also have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry aut­ho­ri­ty.
You can cont­act us at any time if you have fur­ther ques­ti­ons on the sub­ject of data protection.

Ana­ly­sis tools and tools from third-par­ty providers

When you visit this web­site, your sur­fing beha­vi­or may be sta­tis­ti­cal­ly eva­lua­ted. This is main­ly done using so-cal­led ana­ly­sis pro­grams.
Detail­ed infor­ma­ti­on on the­se ana­ly­sis pro­grams can be found in the fol­lo­wing pri­va­cy policy.

2. Hosting

We host the con­tent of our web­site with the fol­lo­wing provider:

DomainFactory

The pro­vi­der is Domain­Fac­to­ry GmbH, c/o WeWork, Neu­turm­stra­ße 5, 80331 Munich (her­ein­af­ter refer­red to as Domain­Fac­to­ry). When you visit our web­site, Domain­Fac­to­ry coll­ects various log files inclu­ding your IP addresses.

Details can be found in DomainFactory’s pri­va­cy poli­cy:                                                                   https://www.df.eu/de/datenschutz/.

The use of Domain­Fac­to­ry is based on Art. 6 para. 1 lit. f GDPR. We have a legi­ti­ma­te inte­rest in ensu­ring that our web­site is dis­play­ed as relia­bly as pos­si­ble. If a cor­re­spon­ding con­sent has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on in the user’s ter­mi­nal device (e.g. for device fin­ger­prin­ting) within the mea­ning of the TTDSG. Con­sent can be revo­ked at any time.

Order pro­ces­sing
We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the abo­ve-men­tio­ned ser­vice. This is a con­tract pre­scri­bed by data pro­tec­tion law, which ensu­res that it pro­ces­ses the per­so­nal data of our web­site visi­tors only in accordance with our ins­truc­tions and in com­pli­ance with the GDPR.

3. General notes and mandatory information

Data protection

The ope­ra­tors of the­se pages take the pro­tec­tion of your per­so­nal data very serious­ly. We tre­at your per­so­nal data con­fi­den­ti­al­ly and in accordance with the sta­tu­to­ry data pro­tec­tion regu­la­ti­ons and this pri­va­cy policy.

When you use this web­site, various per­so­nal data is coll­ec­ted. Per­so­nal data is data that can be used to iden­ti­fy you per­so­nal­ly. This pri­va­cy poli­cy explains what data we coll­ect and what we use it for. It also explains how and for what pur­po­se this is done.

We would like to point out that data trans­mis­si­on over the Inter­net (e.g. when com­mu­ni­ca­ting by email) may be sub­ject to secu­ri­ty vul­nerabi­li­ties. Com­ple­te pro­tec­tion of data against access by third par­ties is not possible.

Note on the responsible body

The con­trol­ler respon­si­ble for data pro­ces­sing on this web­site is

pro­s­pe­ga GmbH
Erhard­stras­se 24
97688 Bad Kissingen
Germany

Pho­ne: 0971 / 699 190 460
E‑Mail: online@prospega.de

The con­trol­ler is the natu­ral or legal per­son who alo­ne or joint­ly with others deter­mi­nes the pur­po­ses and means of the pro­ces­sing of per­so­nal data (e.g. names, e‑mail addres­ses, etc.).

Storage period

Unless a more spe­ci­fic sto­rage peri­od has been spe­ci­fied in this pri­va­cy poli­cy, your per­so­nal data will remain with us until the pur­po­se for data pro­ces­sing no lon­ger appli­es. If you assert a jus­ti­fied request for dele­ti­on or revo­ke your con­sent to data pro­ces­sing, your data will be dele­ted unless we have other legal­ly per­mis­si­ble reasons for sto­ring your per­so­nal data (e.g. reten­ti­on peri­ods under tax or com­mer­cial law); in the lat­ter case, the dele­ti­on will take place after the­se reasons no lon­ger apply.

General information on the legal basis for data processing on this website

If you have con­sen­ted to data pro­ces­sing, we pro­cess your per­so­nal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, inso­far as spe­cial cate­go­ries of data are pro­ces­sed in accordance with Art. 9 para. 1 GDPR. In the event of express con­sent to the trans­fer of per­so­nal data to third count­ries, data pro­ces­sing is also car­ri­ed out on the basis of Art. 49 para. 1 lit. a GDPR. If you have con­sen­ted to the sto­rage of coo­kies or access to infor­ma­ti­on in your end device (e.g. via device fin­ger­prin­ting), the data pro­ces­sing is also car­ri­ed out on the basis of Sec­tion 25 (1) TTDSG. Con­sent can be revo­ked at any time. If your data is requi­red to ful­fill the con­tract or to car­ry out pre-con­trac­tu­al mea­su­res, we pro­cess your data on the basis of Art. 6 para. 1 lit. b GDPR. Fur­ther­mo­re, we pro­cess your data if this is neces­sa­ry to ful­fill a legal obli­ga­ti­on on the basis of Art. 6 para. 1 lit. c GDPR. Data pro­ces­sing may also be car­ri­ed out on the basis of our legi­ti­ma­te inte­rest in accordance with Art. 6 para. 1 lit. f GDPR. Infor­ma­ti­on on the rele­vant legal bases in each indi­vi­du­al case is pro­vi­ded in the fol­lo­wing para­graphs of this pri­va­cy policy.

Data Protection Officer

We have appoin­ted a data pro­tec­tion offi­cer for our company.

E‑Mail: datenschutz@prospega.de

Recipients of personal data

As part of our busi­ness acti­vi­ties, we work tog­e­ther with various exter­nal bodies. In some cases, it is also neces­sa­ry to trans­fer per­so­nal data to the­se exter­nal bodies. We only pass on per­so­nal data to exter­nal bodies if this is neces­sa­ry for the ful­fill­ment of a con­tract, if we are legal­ly obli­ged to do so (e.g. pas­sing on data to tax aut­ho­ri­ties), if we have a legi­ti­ma­te inte­rest in the trans­fer in accordance with Art. 6 para. 1 lit. f GDPR or if ano­ther legal basis per­mits the trans­fer of data. When using pro­ces­sors, we only pass on our cus­to­mers’ per­so­nal data on the basis of a valid con­tract for order pro­ces­sing. In the case of joint pro­ces­sing, a joint pro­ces­sing agree­ment is concluded.

Revocation of your consent to data processing

Many data pro­ces­sing ope­ra­ti­ons are only pos­si­ble with your express con­sent. You can with­draw your con­sent at any time. All you need to do is send us an infor­mal e‑mail. The lega­li­ty of the data pro­ces­sing car­ri­ed out until the revo­ca­ti­on remains unaf­fec­ted by the revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 ABS. 1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 PARA. 1 GDPR).
IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of vio­la­ti­ons of the GDPR, data sub­jects have the right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty, in par­ti­cu­lar in the Mem­ber Sta­te of their habi­tu­al resi­dence, place of work or place of the alle­ged vio­la­ti­on. The right to lodge a com­plaint is wit­hout pre­ju­di­ce to any other admi­nis­tra­ti­ve or judi­cial remedy.

Right to data portability

You have the right to have data that we pro­cess auto­ma­ti­cal­ly on the basis of your con­sent or in ful­fill­ment of a con­tract han­ded over to you or to a third par­ty in a com­mon, machi­ne-rea­da­ble for­mat. If you request the direct trans­fer of the data to ano­ther con­trol­ler, this will only be done to the ext­ent that it is tech­ni­cal­ly feasible.

Information, rectification and erasure

You have the right to free infor­ma­ti­on about your stored per­so­nal data, its ori­gin and reci­pi­ents and the pur­po­se of the data pro­ces­sing and, if neces­sa­ry, a right to cor­rec­tion or dele­ti­on of this data at any time within the frame­work of the appli­ca­ble legal pro­vi­si­ons. You can cont­act us at any time if you have fur­ther ques­ti­ons on the sub­ject of per­so­nal data.

Right to restriction of processing

You have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data. You can cont­act us at any time to do this. The right to rest­ric­tion of pro­ces­sing exists in the fol­lo­wing cases

1. if you dis­pu­te the accu­ra­cy of your per­so­nal data stored by us, we gene­ral­ly need time to veri­fy this. For the dura­ti­on of the veri­fi­ca­ti­on, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data.
2. if the pro­ces­sing of your per­so­nal data was/is unlawful, you can request the rest­ric­tion of data pro­ces­sing ins­tead of erasure
3. if we no lon­ger need your per­so­nal data, but you need it for the exer­cise, defen­se or asser­ti­on of legal claims, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data ins­tead of deletion.
request the rest­ric­tion of the pro­ces­sing of your per­so­nal data ins­tead of erasure.
4. if you have lodged an objec­tion pur­su­ant to Art. 21 para. 1 GDPR, a balan­ce must be struck bet­ween your inte­rests and ours. As long as it has not yet been deter­mi­ned who­se inte­rests pre­vail, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data.

If you have rest­ric­ted the pro­ces­sing of your per­so­nal data, this data — apart from its sto­rage — may only be pro­ces­sed with your con­sent or for the estab­lish­ment, exer­cise or defen­se of legal claims or for the pro­tec­tion of the rights of ano­ther natu­ral or legal per­son or for reasons of important public inte­rest of the Euro­pean Uni­on or of a Mem­ber State.

SSL or TLS encryption

This site uses SSL or TLS encryp­ti­on for secu­ri­ty reasons and to pro­tect the trans­mis­si­on of con­fi­den­ti­al con­tent, such as orders or inqui­ries that you send to us as the site ope­ra­tor. You can reco­gni­ze an encrypt­ed con­nec­tion by the fact that the address line of the brow­ser chan­ges from “http://” to “https://” and by the lock sym­bol in your brow­ser line.

If SSL or TLS encryp­ti­on is acti­va­ted, the data you trans­mit to us can­not be read by third parties.

Objection to advertising emails

We her­eby object to the use of cont­act data published as part of our obli­ga­ti­on to pro­vi­de a legal noti­ce for the pur­po­se of sen­ding unso­li­ci­ted adver­ti­sing and infor­ma­ti­on mate­ri­al. The ope­ra­tors of the web­site express­ly reser­ve the right to take legal action in the event of the unso­li­ci­ted sen­ding of adver­ti­sing infor­ma­ti­on, such as spam emails.

4. Data collection on our website

Cookies

Our Inter­net pages use so-cal­led “coo­kies”. Coo­kies are small data packets and do not cau­se any dama­ge to your end device. They are stored on your device eit­her tem­po­r­a­ri­ly for the dura­ti­on of a ses­si­on (ses­si­on coo­kies) or per­ma­nent­ly (per­ma­nent coo­kies). Ses­si­on coo­kies are auto­ma­ti­cal­ly dele­ted at the end of your visit. Per­ma­nent coo­kies remain stored on your device until you dele­te them yours­elf or they are auto­ma­ti­cal­ly dele­ted by your web browser.

Coo­kies may ori­gi­na­te from us (first-par­ty coo­kies) or from third-par­ty com­pa­nies (so-cal­led third-par­ty coo­kies). Third-par­ty coo­kies enable the inte­gra­ti­on of cer­tain ser­vices from third-par­ty com­pa­nies within web­sites (e.g. coo­kies for pro­ces­sing pay­ment services).

Coo­kies have various func­tions. Many coo­kies are tech­ni­cal­ly neces­sa­ry, as cer­tain web­site func­tions would not work wit­hout them (e.g. the shop­ping cart func­tion or the dis­play of vide­os). Other coo­kies can be used to eva­lua­te user beha­vi­or or for adver­ti­sing purposes.

Coo­kies that are requi­red to car­ry out the elec­tro­nic com­mu­ni­ca­ti­on pro­cess, to pro­vi­de cer­tain func­tions that you have reques­ted (e.g. for the shop­ping cart func­tion) or to opti­mi­ze the web­site (e.g. coo­kies to mea­su­re the web audi­ence) (neces­sa­ry coo­kies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless ano­ther legal basis is spe­ci­fied. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the sto­rage of neces­sa­ry coo­kies for the tech­ni­cal­ly error-free and opti­mi­zed pro­vi­si­on of its ser­vices. If con­sent to the sto­rage of coo­kies and com­pa­ra­ble reco­gni­ti­on tech­no­lo­gies has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of this con­sent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG); the con­sent can be revo­ked at any time.

You can set your brow­ser so that you are infor­med about the set­ting of coo­kies and only allow coo­kies in indi­vi­du­al cases, exclude the accep­tance of coo­kies for cer­tain cases or in gene­ral and acti­va­te the auto­ma­tic dele­ti­on of coo­kies when clo­sing the brow­ser. If coo­kies are deac­ti­va­ted, the func­tion­a­li­ty of this web­site may be restricted.

You can find out which coo­kies and ser­vices are used on this web­site in this
pri­va­cy policy.

Consent with Borlabs Cookie

Our web­site uses Borlabs Cookie’s con­sent tech­no­lo­gy to obtain your con­sent to store cer­tain coo­kies in your brow­ser or to use cer­tain tech­no­lo­gies and to docu­ment this in com­pli­ance with data pro­tec­tion regu­la­ti­ons. The pro­vi­der of this tech­no­lo­gy is Borlabs GmbH, Rüben­kamp 32, 22305 Ham­burg (her­ein­af­ter refer­red to as “Borlabs”).

When you enter our web­site, a Borlabs coo­kie is stored in your brow­ser, in which the cons­ents you have given or the revo­ca­ti­on of the­se cons­ents are stored. This data is not pas­sed on to the pro­vi­der of Borlabs Cookie.

The data coll­ec­ted will be stored until you request us to dele­te it or until the Borlabs coo­kie its­elf is dele­ted, or the pur­po­se for data sto­rage no lon­ger appli­es. Man­da­to­ry sta­tu­to­ry reten­ti­on peri­ods remain unaf­fec­ted. Details on data pro­ces­sing by Borlabs Coo­kie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

The use of Borlabs Coo­kie Con­sent Tech­no­lo­gy is to obtain the legal­ly requi­red cons­ents for the use of coo­kies. The legal basis for this is Art. 6 Para. 1 lit. c DSGVO.

Server Log Files

The pro­vi­der of the pages auto­ma­ti­cal­ly coll­ects and stores infor­ma­ti­on in so-cal­led ser­ver log files, which your brow­ser auto­ma­ti­cal­ly trans­mits to us. The­se are:

• Brow­ser type and brow­ser version
• Ope­ra­ting sys­tem used
• Refer­rer URL
• Host­na­me of the acces­sing computer
• Time of the ser­ver request
• IP address

The­se data will not be com­bi­ned with other data sources.

The coll­ec­tion of this data is based on Art. 6 para. 1 lit. f DSGVO. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the tech­ni­cal­ly error-free pre­sen­ta­ti­on and opti­miza­ti­on of his web­site – for this pur­po­se, the ser­ver log files must be recorded.

Contact Form

If you send us inqui­ries via the cont­act form, your details from the inquiry form, inclu­ding the cont­act details you pro­vi­ded the­re, will be stored by us for the pur­po­se of pro­ces­sing the inquiry and in case of fol­low-up ques­ti­ons. We will not pass on this data wit­hout your consent.

The pro­ces­sing of this data is based on Art. 6 para. 1 lit. b DSGVO, if your request is rela­ted to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the inqui­ries addres­sed to us (Art. 6 para. 1 lit. f DSGVO) or on your con­sent (Art. 6 para. 1 lit. a DSGVO), if this has been reques­ted; the con­sent is revo­ca­ble at any time.

The data ente­red by you in the cont­act form will remain with us until you request us to dele­te it, revo­ke your con­sent to store it, or the pur­po­se for sto­ring the data no lon­ger appli­es (e.g. after we have com­ple­ted pro­ces­sing your inquiry). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons – in par­ti­cu­lar sta­tu­to­ry reten­ti­on peri­ods – remain unaffected.

Inquiry by E‑Mail, Telephone, or Fax

If you cont­act us by e‑mail, tele­pho­ne, or fax, your inquiry inclu­ding all resul­ting per­so­nal data (name, inquiry) will be stored and pro­ces­sed by us for the pur­po­se of pro­ces­sing your request. We will not pass on this data wit­hout your consent.

The pro­ces­sing of this data is based on Art. 6 para. 1 lit. b DSGVO, if your request is rela­ted to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the inqui­ries addres­sed to us (Art. 6 para. 1 lit. f DSGVO) or on your con­sent (Art. 6 para. 1 lit. a DSGVO), if this has been reques­ted; the con­sent is revo­ca­ble at any time.

The data you send to us via cont­act inqui­ries will remain with us until you request us to dele­te it, revo­ke your con­sent to store it, or the pur­po­se for sto­ring the data no lon­ger appli­es (e.g. after we have com­ple­ted pro­ces­sing your request). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons – in par­ti­cu­lar sta­tu­to­ry reten­ti­on peri­ods – remain unaffected.

Gravatar

We have inte­gra­ted Grava­tar on this web­site. The pro­vi­der is Auto­mat­tic Inc., 60 29th Street #343, San Fran­cis­co, CA 94110, USA (her­ein­af­ter “Grava­tar”).

Grava­tar is a tool that enables us to pro­vi­de per­so­nal images (ava­tars) for users of our web­site. The ava­tars ser­ve as visu­al repre­sen­ta­ti­ons of the users and are dis­play­ed whe­re­ver a user inter­acts with the plat­form (e.g., in forums or chats). When a user inter­acts with the plat­form, their ava­tar is dis­play­ed based on the sel­ec­tion asso­cia­ted with their email address. This gives users’ online pre­sence a per­so­nal touch and faci­li­ta­tes iden­ti­fi­ca­ti­on sin­ce the cho­sen image is assi­gned to users when they are acti­ve online.

When you com­ment or inter­act on our web­site and Grava­tar is acti­va­ted, the hash of the user’s email address using Grava­tar (used as an ID) is pro­ces­sed by Gravatar.

The use of Grava­tar is based on Art. 6 para. 1 lit. f DSGVO. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in an appe­al­ing pre­sen­ta­ti­on of his forums. If con­sent has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1 TTDSG. The con­sent can be revo­ked at any time.

For more details, plea­se refer to the provider’s pri­va­cy poli­cy at
https://automattic.com/privacy/.

The com­pa­ny is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA aimed at ensu­ring com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Each com­pa­ny cer­ti­fied under the DPF under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on can be obtai­ned from the pro­vi­der at the fol­lo­wing link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?
contact=true&id=a2zt0000000CbqcAAC&status=Active

Data Pro­ces­sing Agreement
We have ente­red into a data pro­ces­sing agree­ment (DPA) for the use of the abo­ve-men­tio­ned ser­vice. This is a legal­ly requi­red con­tract that ensu­res that the per­so­nal data of our web­site visi­tors is pro­ces­sed only accor­ding to our ins­truc­tions and in com­pli­ance with the GDPR.

5. Analytics tools and advertising

Google Analytics

This web­site uses fea­tures of the web ana­ly­tics ser­vice Goog­le Ana­ly­tics. The pro­vi­der is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

Goog­le Ana­ly­tics enables the web­site ope­ra­tor to ana­ly­ze the beha­vi­or of web­site visi­tors. For this pur­po­se, the web­site ope­ra­tor recei­ves various usa­ge data, such as page views, dwell time, ope­ra­ting sys­tems used, and the user’s ori­gin. This data is sum­ma­ri­zed in a user ID and assi­gned to the respec­ti­ve end device of the web­site visitor.

Fur­ther­mo­re, we can record your mou­se and scroll move­ments and clicks with Goog­le Ana­ly­tics, among other things. Goog­le Ana­ly­tics also uses various mode­ling approa­ches to sup­ple­ment the coll­ec­ted data and employs machi­ne lear­ning tech­no­lo­gies in data analysis.

Goog­le Ana­ly­tics uses tech­no­lo­gies that enable the reco­gni­ti­on of the user for the pur­po­se of ana­ly­zing user beha­vi­or (e.g., coo­kies or device fin­ger­prin­ting). The infor­ma­ti­on coll­ec­ted by Goog­le about the use of this web­site is usual­ly trans­mit­ted to a Goog­le ser­ver in the USA and stored there.

The use of this ser­vice is based on your con­sent accor­ding to Art. 6 Para. 1 lit. a DSGVO (Gene­ral Data Pro­tec­tion Regu­la­ti­on) and §25 Para. 1 TTDSG (Tele­me­dia Act). The con­sent can be revo­ked at any time.

The data trans­fer to the USA is based on the stan­dard con­trac­tu­al clau­ses of the Euro­pean Com­mis­si­on. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The com­pa­ny is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA aimed at ensu­ring com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Each com­pa­ny cer­ti­fied under the DPF under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on can be obtai­ned from the pro­vi­der at the fol­lo­wing link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?
contact=true&id=a2zt000000001L5AAI&status=Active

Browser Plugin

You can pre­vent Goog­le from coll­ec­ting and pro­ces­sing your data by down­loa­ding and instal­ling the brow­ser plug­in available at the fol­lo­wing link:
https://tools.google.com/dlpage/gaoptout?hl=de.

For more infor­ma­ti­on on how Goog­le Ana­ly­tics hand­les user data, plea­se refer to Google’s pri­va­cy policy:
https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing Agreement

We have con­cluded a con­tract for order pro­ces­sing with Goog­le and ful­ly imple­ment the strict requi­re­ments of the Ger­man data pro­tec­tion aut­ho­ri­ties when using Goog­le Analytics.

6. Newsletter

Newsletter Data

If you would like to sub­scri­be to the news­let­ter offe­red on the web­site, we requi­re an email address from you as well as infor­ma­ti­on that allows us to veri­fy that you are the owner of the spe­ci­fied email address and agree to recei­ve the news­let­ter. Fur­ther data is not coll­ec­ted or is only coll­ec­ted on a vol­un­t­a­ry basis. We use news­let­ter ser­vice pro­vi­ders to pro­cess the news­let­ter, which are descri­bed below.

Rapidmail

This web­site uses Rapidmail for sen­ding news­let­ters. The pro­vi­der is rapidmail GmbH, Augus­ti­ner­platz 2, 79098 Frei­burg i.Br., Germany.

Rapidmail is a ser­vice that can be used to orga­ni­ze and ana­ly­ze the sen­ding of news­let­ters, among other things. The data you enter for the pur­po­se of sub­scrib­ing to the news­let­ter will be stored on Rapidmail’s ser­vers in Germany.

Data Analysis by Rapidmail

For the pur­po­se of ana­ly­sis, emails sent with Rapidmail con­tain a so-cal­led “track­ing pixel” that con­nects to Rapidmail’s ser­vers when the email is ope­ned. This allows us to deter­mi­ne whe­ther a news­let­ter mes­sa­ge has been opened.

Fur­ther­mo­re, we can use Rapidmail to deter­mi­ne whe­ther and which links in the news­let­ter mes­sa­ge are cli­cked on. All links in the email are track­ing links, which means that your clicks can be coun­ted. If you do not want ana­ly­sis by Rapidmail, you must unsub­scri­be from the news­let­ter. For this pur­po­se, we pro­vi­de a cor­re­spon­ding link in every news­let­ter message.

For more infor­ma­ti­on on the ana­ly­sis func­tions of Rapidmail, plea­se refer to the fol­lo­wing link: https://de.rapidmail.wiki/kategorien/statistiken/.

Legal Basis

The data pro­ces­sing is based on your con­sent (Art. 6 para. 1 lit. a DSGVO). You can revo­ke this con­sent at any time. The lega­li­ty of the data pro­ces­sing ope­ra­ti­ons alre­a­dy car­ri­ed out remains unaf­fec­ted by the revocation.

Storage Duration

The data you pro­vi­de us for the pur­po­se of sub­scrib­ing to the news­let­ter will be stored by us until you unsub­scri­be from the news­let­ter with us or the news­let­ter ser­vice pro­vi­der and will be dele­ted from the news­let­ter dis­tri­bu­ti­on list after you unsub­scri­be. Data stored by us for other pur­po­ses remains unaf­fec­ted by this.

After you have been remo­ved from the news­let­ter dis­tri­bu­ti­on list, your email address will be stored by us or the news­let­ter ser­vice pro­vi­der in a black­list, if neces­sa­ry, to pre­vent future mai­lings. The data from the black­list will only be used for this pur­po­se and will not be mer­ged with other data. This ser­ves both your inte­rests and our inte­rests in com­pli­ance with legal requi­re­ments when sen­ding news­let­ters (legi­ti­ma­te inte­rest within the mea­ning of Art. 6 para. 1 lit. f DSGVO). The sto­rage in the black­list is not limi­t­ed in time. You can object to the sto­rage if your inte­rests out­weigh our legi­ti­ma­te interest.

For more infor­ma­ti­on, plea­se refer to Rapidmail’s data secu­ri­ty infor­ma­ti­on at:
https://www.rapidmail.de/datensicherheit.

Data Processing Agreement

We have ente­red into a con­tract for order pro­ces­sing (AVV) with the abo­ve-men­tio­ned ser­vice pro­vi­der. This is a legal­ly requi­red con­tract that ensu­res that the per­so­nal data of our web­site visi­tors is pro­ces­sed only accor­ding to our ins­truc­tions and in com­pli­ance with the DSGVO.

7. Plugins and Tools

Google Fonts (Local Hosting)

This site uses Goog­le Fonts pro­vi­ded by Goog­le for con­sis­tent font dis­play. The Goog­le Fonts are local­ly instal­led, and the­re is no con­nec­tion to Goog­le servers.

For more infor­ma­ti­on about Goog­le Fonts, plea­se visit https://developers.google.com/fonts/faq and the Goog­le Pri­va­cy Poli­cy: https://policies.google.com/privacy?hl=en.

Font Awesome (Local Hosting)

This site uses Font Awe­so­me for con­sis­tent font dis­play. Font Awe­so­me is local­ly instal­led, and the­re is no con­nec­tion to Fon­ti­cons, Inc. servers.

For more infor­ma­ti­on about Font Awe­so­me, plea­se refer to the Font Awe­so­me Pri­va­cy Poli­cy: https://fontawesome.com/privacy.

8. Own services

Handling of Applicant Data

We offer you the oppor­tu­ni­ty to app­ly to us (e.g., by email, pos­tal mail, or via online appli­ca­ti­on form). Below, we inform you about the ext­ent, pur­po­se, and use of your per­so­nal data coll­ec­ted within the frame­work of the appli­ca­ti­on pro­cess. We assu­re you that the coll­ec­tion, pro­ces­sing, and use of your data are in accordance with appli­ca­ble data pro­tec­tion laws and all other legal pro­vi­si­ons and that your data will be trea­ted strict­ly confidentially.

Extent and Purpose of Data Collection

If you send us an appli­ca­ti­on, we pro­cess the asso­cia­ted per­so­nal data (e.g., cont­act and com­mu­ni­ca­ti­on data, appli­ca­ti­on docu­ments, notes from job inter­views, etc.) to the ext­ent neces­sa­ry to make a decis­i­on about estab­li­shing an employ­ment rela­ti­onship. The legal basis for this is § 26 BDSG accor­ding to Ger­man law (initia­ti­on of an employ­ment rela­ti­onship), Art. 6 para. 1 lit. b GDPR (gene­ral con­tract initia­ti­on), and — if you have given your con­sent — Art. 6 para. 1 lit. a GDPR. The con­sent can be revo­ked at any time. Your per­so­nal data will only be dis­c­lo­sed within our com­pa­ny to per­sons invol­ved in pro­ces­sing your application.

If the appli­ca­ti­on is suc­cessful, the data sub­mit­ted by you will be stored in our data pro­ces­sing sys­tems based on § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the pur­po­se of car­ry­ing out the employ­ment relationship.

Data Retention Period

If we can­not offer you a posi­ti­on, you reject an offer, or with­draw your appli­ca­ti­on, we reser­ve the right to retain the data you have pro­vi­ded to us on the basis of our legi­ti­ma­te inte­rests (Art. 6 para. 1 lit. f GDPR) for up to 6 months after the end of the appli­ca­ti­on pro­cess (rejec­tion or with­dra­wal of the appli­ca­ti­on). After­ward, the data will be dele­ted, and phy­si­cal appli­ca­ti­on docu­ments will be des­troy­ed. Sto­rage is par­ti­cu­lar­ly for evi­den­tia­ry pur­po­ses in the event of legal dis­pu­tes. If it is evi­dent that the data will be requi­red after the 6‑month peri­od (e.g., due to a pen­ding or threa­ten­ed legal dis­pu­te), dele­ti­on will only take place when the pur­po­se for fur­ther sto­rage no lon­ger applies.

Exten­ded sto­rage may also occur if you have given cor­re­spon­ding con­sent (Art. 6 para. 1 lit. a GDPR) or if legal reten­ti­on obli­ga­ti­ons pre­vent deletion.

Inclusion in the Applicant Pool

If we can­not offer you a posi­ti­on, the­re may be the oppor­tu­ni­ty to include you in our appli­cant pool. In the event of inclu­si­on, all docu­ments and infor­ma­ti­on from the appli­ca­ti­on will be trans­fer­red to the appli­cant pool to cont­act you in case of sui­ta­ble vacancies.

Inclu­si­on in the appli­cant pool is based sole­ly on your expli­cit con­sent (Art. 6 para. 1 lit. a GDPR). Giving con­sent is vol­un­t­a­ry and is not rela­ted to the ongo­ing appli­ca­ti­on pro­cess. The data sub­ject can revo­ke their con­sent at any time. In this case, the data from the appli­cant pool will be irrever­si­bly dele­ted unless the­re are legal reten­ti­on reasons.

The data from the appli­cant pool will be irrever­si­bly dele­ted no later than two years after con­sent is given.

Source: eRecht24 / Sep­tem­ber 2023