1. Data Protection at a Glance

General Information

The fol­lo­wing infor­ma­ti­on pro­vi­des a simp­le over­view of what hap­pens to your per­so­nal data when you visit this web­site. Per­so­nal data refers to any infor­ma­ti­on that can per­so­nal­ly iden­ti­fy you. For detail­ed infor­ma­ti­on on data pro­tec­tion, plea­se refer to our pri­va­cy poli­cy lis­ted below this text.

Data Collection on Our Website

Who is respon­si­ble for data coll­ec­tion on this website?
The data pro­ces­sing on this web­site is car­ri­ed out by the web­site ope­ra­tor. You can find the operator’s cont­act details in the “Infor­ma­ti­on on the Respon­si­ble Par­ty” sec­tion of this pri­va­cy policy.

How do we coll­ect your data?
Your data is coll­ec­ted in two main ways. First­ly, by you pro­vi­ding it to us, such as when you enter infor­ma­ti­on into a cont­act form. Second­ly, other data is auto­ma­ti­cal­ly coll­ec­ted by our IT sys­tems when you visit the web­site. This includes tech­ni­cal data (e.g., inter­net brow­ser, ope­ra­ting sys­tem, or the time of the page visit). This data is coll­ec­ted auto­ma­ti­cal­ly as soon as you access our website.

What do we use your data for?
Some of the data is coll­ec­ted to ensu­re the web­site is pro­vi­ded wit­hout errors. Other data may be used to ana­ly­ze your user behavior.

What rights do you have regar­ding your data?
You have the right to obtain infor­ma­ti­on about the ori­gin, reci­pi­ents, and pur­po­se of your stored per­so­nal data at any time, free of char­ge. You also have the right to request the cor­rec­tion or dele­ti­on of this data. If you have given con­sent to data pro­ces­sing, you can revo­ke this con­sent at any time for the future. Addi­tio­nal­ly, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data under cer­tain cir­cum­s­tances. Fur­ther­mo­re, you have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry aut­ho­ri­ty. For this and other ques­ti­ons regar­ding data pro­tec­tion, you can cont­act us at any time.

Analysis Tools and Third-Party Tools

When you visit this web­site, your brow­sing beha­vi­or may be sta­tis­ti­cal­ly ana­ly­zed. This pri­ma­ri­ly hap­pens through the use of ana­ly­sis pro­grams. Detail­ed infor­ma­ti­on about the­se ana­ly­sis pro­grams can be found in the fol­lo­wing pri­va­cy policy.

2. Hosting

DomainFactory

The pro­vi­der is Domain­Fac­to­ry GmbH, c/o WeWork, Neu­turm­stra­ße 5, 80331 Munich (her­ein­af­ter refer­red to as Domain­Fac­to­ry). When you visit our web­site, Domain­Fac­to­ry coll­ects various log files, inclu­ding your IP addresses.

For details, plea­se refer to DomainFactory’s pri­va­cy policy:
https://www.df.eu/de/datenschutz/.

The use of Domain­Fac­to­ry is based on Art. 6(1)(f) GDPR. We have a legi­ti­ma­te inte­rest in the most relia­ble pre­sen­ta­ti­on of our web­site. If con­sent has been reques­ted, pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on on the user’s device (e.g., for device fin­ger­prin­ting) within the mea­ning of the TTDSG. Con­sent can be revo­ked at any time.

Data Pro­ces­sing Agreement
We have ente­red into a data pro­ces­sing agree­ment (DPA) for the use of the afo­re­men­tio­ned ser­vice. This is a data pro­tec­tion regu­la­ti­on-requi­red con­tract that ensu­res the ser­vice pro­vi­der pro­ces­ses the per­so­nal data of our web­site visi­tors only in accordance with our ins­truc­tions and in com­pli­ance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The ope­ra­tors of the­se pages take the pro­tec­tion of your per­so­nal data very serious­ly. We tre­at your per­so­nal data con­fi­den­ti­al­ly and in accordance with legal data pro­tec­tion regu­la­ti­ons and this pri­va­cy policy.

When you use this web­site, various per­so­nal data are coll­ec­ted. Per­so­nal data refers to infor­ma­ti­on that can per­so­nal­ly iden­ti­fy you. This pri­va­cy poli­cy explains what data we coll­ect and how we use it. It also explains how and for what pur­po­se this is done.

Plea­se note that data trans­mis­si­on over the Inter­net (e.g., com­mu­ni­ca­ti­on by email) can have secu­ri­ty vul­nerabi­li­ties. Com­ple­te pro­tec­tion of data from third-par­ty access is not possible.

Information on the Responsible Party

The respon­si­ble par­ty for data pro­ces­sing on this web­site is:

pro­s­pe­ga GmbH
Erhard­stras­se 24
97688 Bad Kissingen
Germany

Pho­ne: 0971 / 699 190 460
Email: online@prospega.de

The respon­si­ble par­ty is the natu­ral or legal per­son who alo­ne or joint­ly with others deter­mi­nes the pur­po­ses and means of pro­ces­sing per­so­nal data (e.g., names, email addres­ses, etc.).

Storage Duration

Unless a more spe­ci­fic sto­rage peri­od is men­tio­ned within this pri­va­cy poli­cy, your per­so­nal data will remain with us until the pur­po­se for data pro­ces­sing no lon­ger appli­es. If you make a legi­ti­ma­te request for dele­ti­on or revo­ke your con­sent to data pro­ces­sing, your data will be dele­ted unless we have other legal­ly per­mis­si­ble reasons for sto­ring your per­so­nal data (e.g., tax or com­mer­cial law reten­ti­on peri­ods); in such cases, the data will be dele­ted once the­se reasons no lon­ger apply.

General Information on the Legal Bases for Data Processing on This Website

If you have con­sen­ted to data pro­ces­sing, we pro­cess your per­so­nal data based on Artic­le 6(1)(a) GDPR or Artic­le 9(2)(a) GDPR, whe­re spe­cial data cate­go­ries are invol­ved accor­ding to Artic­le 9(1) GDPR. In the case of expli­cit con­sent to the trans­fer of per­so­nal data to third count­ries, data pro­ces­sing is also based on Artic­le 49(1)(a) GDPR. If you have con­sen­ted to the sto­rage of coo­kies or access to infor­ma­ti­on on your device (e.g., via device fin­ger­prin­ting), data pro­ces­sing addi­tio­nal­ly occurs under Sec­tion 25(1) TTDSG. Con­sent can be revo­ked at any time. If your data is requi­red for ful­fil­ling a con­tract or pre-con­trac­tu­al mea­su­res, we pro­cess your data based on Artic­le 6(1)(b) GDPR. Fur­ther­mo­re, we pro­cess your data if neces­sa­ry to ful­fill a legal obli­ga­ti­on under Artic­le 6(1)© GDPR. Data pro­ces­sing may also occur based on our legi­ti­ma­te inte­rest under Artic­le 6(1)(f) GDPR. The rele­vant legal bases are spe­ci­fied in the fol­lo­wing sec­tions of this pri­va­cy policy.

Data Protection Officer

We have appoin­ted a data pro­tec­tion offi­cer for our company.

Email: datenschutz@prospega.de

Recipients of Personal Data

In the cour­se of our busi­ness acti­vi­ties, we work with various exter­nal par­ties. This some­ti­mes requi­res the trans­fer of per­so­nal data to the­se exter­nal par­ties. We only share per­so­nal data with exter­nal par­ties if it is neces­sa­ry for con­tract ful­fill­ment, if we are legal­ly obli­ga­ted (e.g., data trans­fer to tax aut­ho­ri­ties), if we have a legi­ti­ma­te inte­rest under Artic­le 6(1)(f) GDPR, or if ano­ther legal basis per­mits the data trans­fer. When using pro­ces­sors, we only share per­so­nal data based on a valid data pro­ces­sing agree­ment. In the case of joint pro­ces­sing, a joint pro­ces­sing agree­ment is established.

Revocation of Your Consent to Data Processing

Many data pro­ces­sing acti­vi­ties are only pos­si­ble with your expli­cit con­sent. You can revo­ke your con­sent at any time. A simp­le infor­mal noti­fi­ca­ti­on via email to us is suf­fi­ci­ent. The lega­li­ty of the data pro­ces­sing car­ri­ed out up until the revo­ca­ti­on remains unaf­fec­ted by the revocation.

Right to Object to Data Collection in Special Cases and to Direct Advertising (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING IS FOR THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

Right to Lodge a Complaint with the Competent Supervisory Authority

In the event of vio­la­ti­ons of the GDPR, affec­ted indi­vi­du­als have the right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty, par­ti­cu­lar­ly in the mem­ber sta­te of their habi­tu­al resi­dence, place of work, or place of the alle­ged vio­la­ti­on. The right to lodge a com­plaint is wit­hout pre­ju­di­ce to any other admi­nis­tra­ti­ve or judi­cial remedies.

Right to Data Portability

You have the right to recei­ve data that we pro­cess auto­ma­ti­cal­ly based on your con­sent or in ful­fill­ment of a con­tract in a com­mon­ly used, machi­ne-rea­da­ble for­mat, eit­her for yours­elf or for a third par­ty. If you request the direct trans­fer of the data to ano­ther respon­si­ble par­ty, this will only be done to the ext­ent that it is tech­ni­cal­ly feasible.

Access, Correction, and Deletion

You have the right, within the scope of appli­ca­ble legal pro­vi­si­ons, to obtain free infor­ma­ti­on at any time about your stored per­so­nal data, its ori­gin and reci­pi­ents, and the pur­po­se of data pro­ces­sing. You also have the right to request the cor­rec­tion or dele­ti­on of this data. For this pur­po­se, and for fur­ther ques­ti­ons regar­ding per­so­nal data, you can cont­act us at any time.

Right to Restrict Processing

You have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data. You can cont­act us at any time for this pur­po­se. The right to rest­rict pro­ces­sing appli­es in the fol­lo­wing cases:

1. If you dis­pu­te the accu­ra­cy of your per­so­nal data stored with us, we usual­ly need time to veri­fy this. During the veri­fi­ca­ti­on peri­od, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data.
2. If the pro­ces­sing of your per­so­nal data was/is unlawful, you can request the rest­ric­tion of data pro­ces­sing ins­tead of deletion.
3. If we no lon­ger need your per­so­nal data, but you requi­re it to exer­cise, defend, or assert legal claims, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data ins­tead of deletion.
4. If you have lodged an objec­tion under Art. 21(1) GDPR, a balan­ce must be struck bet­ween your inte­rests and ours. As long as it is not yet clear who­se inte­rests pre­vail, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data.

If you have rest­ric­ted the pro­ces­sing of your per­so­nal data, the­se data may only be processed—with the excep­ti­on of their storage—with your con­sent or for the estab­lish­ment, exer­cise, or defen­se of legal claims, or for the pro­tec­tion of the rights of ano­ther natu­ral or legal per­son, or for reasons of important public inte­rest of the Euro­pean Uni­on or a mem­ber state.

SSL or TLS Encryption

For secu­ri­ty reasons and to pro­tect the trans­mis­si­on of con­fi­den­ti­al con­tent, such as orders or inqui­ries you send to us as the site ope­ra­tor, this site uses SSL or TLS encryp­ti­on. You can reco­gni­ze an encrypt­ed con­nec­tion by the fact that the browser’s address line chan­ges from “http://” to “https://” and by the lock icon in your browser’s address bar.

When SSL or TLS encryp­ti­on is acti­va­ted, the data you trans­mit to us can­not be read by third parties.

Objection to Promotional Emails

We her­eby object to the use of cont­act infor­ma­ti­on published in the con­text of the legal noti­ce requi­re­ment for the pur­po­se of sen­ding unso­li­ci­ted adver­ti­sing and infor­ma­tio­nal mate­ri­als. The ope­ra­tors of this site express­ly reser­ve the right to take legal action in the event of unso­li­ci­ted sen­ding of adver­ti­sing infor­ma­ti­on, such as spam emails.

4. Data Collection on Our Website

Cookies

Our web­sites use so-cal­led “coo­kies.” Coo­kies are small data packets that do not harm your device. They are stored eit­her tem­po­r­a­ri­ly for the dura­ti­on of a ses­si­on (ses­si­on coo­kies) or per­ma­nent­ly (per­sis­tent coo­kies) on your device. Ses­si­on coo­kies are auto­ma­ti­cal­ly dele­ted after your visit. Per­sis­tent coo­kies remain stored on your device until you dele­te them or your web brow­ser auto­ma­ti­cal­ly dele­tes them.

Coo­kies can be set by us (first-par­ty coo­kies) or by third-par­ty com­pa­nies (so-cal­led third-par­ty coo­kies). Third-par­ty coo­kies allow the inte­gra­ti­on of cer­tain ser­vices from third-par­ty com­pa­nies within web­sites (e.g., coo­kies for pro­ces­sing pay­ment services).

Coo­kies ser­ve various func­tions. Many coo­kies are tech­ni­cal­ly neces­sa­ry, as cer­tain web­site func­tions would not work wit­hout them (e.g., the shop­ping cart func­tion or the dis­play of vide­os). Other coo­kies may be used to ana­ly­ze user beha­vi­or or for adver­ti­sing purposes.

Coo­kies neces­sa­ry for car­ry­ing out elec­tro­nic com­mu­ni­ca­ti­on, pro­vi­ding cer­tain func­tions you desi­re (e.g., the shop­ping cart func­tion), or opti­mi­zing the web­site (e.g., coo­kies for mea­su­ring web audi­ence) are stored based on Art. 6(1)(f) GDPR, unless ano­ther legal basis is spe­ci­fied. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in sto­ring neces­sa­ry coo­kies for the tech­ni­cal­ly error-free and opti­mi­zed pro­vi­si­on of its ser­vices. If con­sent for the sto­rage of coo­kies and simi­lar reco­gni­ti­on tech­no­lo­gies has been reques­ted, pro­ces­sing will be car­ri­ed out exclu­si­ve­ly based on this con­sent (Art. 6(1)(a) GDPR and § 25(1) TTDSG); con­sent can be revo­ked at any time.

You can set your brow­ser to inform you about the set­ting of coo­kies, allow coo­kies only in indi­vi­du­al cases, exclude the accep­tance of coo­kies for cer­tain cases or in gene­ral, and acti­va­te the auto­ma­tic dele­ti­on of coo­kies when clo­sing the brow­ser. If coo­kies are deac­ti­va­ted, the func­tion­a­li­ty of this web­site may be limited.

You can find out which coo­kies and ser­vices are used on this web­site in this pri­va­cy policy.

Consent with Borlabs Cookie

Our web­site uses the Borlabs Coo­kie con­sent tech­no­lo­gy to obtain your con­sent for the sto­rage of cer­tain coo­kies in your brow­ser or the use of cer­tain tech­no­lo­gies and to docu­ment this con­sent in com­pli­ance with data pro­tec­tion regu­la­ti­ons. The pro­vi­der of this tech­no­lo­gy is Borlabs GmbH, Rüben­kamp 32, 22305 Ham­burg (her­ein­af­ter refer­red to as Borlabs).

When you enter our web­site, a Borlabs coo­kie is stored in your brow­ser, whe­re the cons­ents you have given or the revo­ca­ti­on of the­se cons­ents are stored. This data is not shared with the pro­vi­der of Borlabs Cookie.

The coll­ec­ted data will be stored until you request its dele­ti­on, dele­te the Borlabs coo­kie yours­elf, or the pur­po­se for data sto­rage no lon­ger appli­es. Man­da­to­ry legal reten­ti­on peri­ods remain unaf­fec­ted. Details on data pro­ces­sing by Borlabs Coo­kie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

The use of the Borlabs Coo­kie con­sent tech­no­lo­gy is to obtain the legal­ly requi­red cons­ents for the use of coo­kies. The legal basis for this is Art. 6(1)© GDPR.

Server Log Files

The pro­vi­der of the­se pages auto­ma­ti­cal­ly coll­ects and stores infor­ma­ti­on in so-cal­led ser­ver log files, which your brow­ser auto­ma­ti­cal­ly trans­mits to us. The­se are:

• Brow­ser type and version
• Ope­ra­ting sys­tem used
• Refer­rer URL
• Host­na­me of the acces­sing computer
• Time of the ser­ver request
• IP address

This data is not mer­ged with other data sources.

The coll­ec­tion of this data is based on Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the tech­ni­cal­ly error-free pre­sen­ta­ti­on and opti­miza­ti­on of his website—for this pur­po­se, ser­ver log files must be recorded.

Contact Form

If you send us inqui­ries via the cont­act form, the infor­ma­ti­on you pro­vi­de in the inquiry form, inclu­ding the cont­act details you enter, will be stored by us for the pur­po­se of pro­ces­sing the inquiry and for any fol­low-up ques­ti­ons. We do not share this data wit­hout your consent.

The pro­ces­sing of this data is based on Art. 6(1)(b) GDPR if your request is rela­ted to the ful­fill­ment of a con­tract or is neces­sa­ry for pre-con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of inqui­ries direc­ted to us (Art. 6(1)(f) GDPR) or on your con­sent (Art. 6(1)(a) GDPR) if it has been reques­ted; con­sent can be revo­ked at any time.

The data you enter in the cont­act form will remain with us until you request dele­ti­on, revo­ke your con­sent to sto­rage, or the pur­po­se for data sto­rage no lon­ger appli­es (e.g., after your request has been pro­ces­sed). Man­da­to­ry legal provisions—especially reten­ti­on periods—remain unaffected.

Inquiry via Email, Phone, or Fax

If you cont­act us via email, pho­ne, or fax, your inquiry, inclu­ding all resul­ting per­so­nal data (name, inquiry), will be stored and pro­ces­sed by us for the pur­po­se of hand­ling your request. We do not share this data wit­hout your consent.

The pro­ces­sing of this data is based on Art. 6(1)(b) GDPR if your request is rela­ted to the ful­fill­ment of a con­tract or is neces­sa­ry for pre-con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve hand­ling of inqui­ries direc­ted to us (Art. 6(1)(f) GDPR) or on your con­sent (Art. 6(1)(a) GDPR) if reques­ted; con­sent can be revo­ked at any time.

The data you send to us via cont­act inqui­ries will remain with us until you request dele­ti­on, revo­ke your con­sent to sto­rage, or the pur­po­se for data sto­rage no lon­ger appli­es (e.g., after your request has been pro­ces­sed). Man­da­to­ry legal provisions—especially sta­tu­to­ry reten­ti­on periods—remain unaffected.

Gravatar

We have inte­gra­ted Grava­tar on this web­site. The pro­vi­der is Auto­mat­tic Inc., 60 29th Street #343, San Fran­cis­co, CA 94110, USA (her­ein­af­ter refer­red to as Gravatar).

Grava­tar is a tool that allows users to pro­vi­de per­so­nal images (ava­tars) on our web­site. The ava­tars ser­ve as visu­al repre­sen­ta­ti­ons of users and are dis­play­ed whe­re­ver a user inter­acts with the plat­form (e.g., in forums or chats). When a user inter­acts with the plat­form, their ava­tar is dis­play­ed based on the sel­ec­tion lin­ked to their email address. This adds a per­so­nal touch to the user’s online pre­sence and makes iden­ti­fi­ca­ti­on easier, as the cho­sen image is asso­cia­ted with the user when they are acti­ve online.

If you com­ment or inter­act on our web­site with Grava­tar enab­led, the hash of the email address of the user using Grava­tar (used as an ID) is pro­ces­sed by Gravatar.

The use of Grava­tar is based on Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in an appe­al­ing pre­sen­ta­ti­on of its forums. If cor­re­spon­ding con­sent has been reques­ted, pro­ces­sing is car­ri­ed out exclu­si­ve­ly based on Art. 6(1)(a) GDPR and § 25(1) TTDSG. Con­sent can be revo­ked at any time.

For more details, plea­se refer to the provider’s pri­va­cy poli­cy at
https://automattic.com/privacy/.

The com­pa­ny is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that aims to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards in data pro­ces­sing in the USA. Every com­pa­ny cer­ti­fied under the DPF is com­mit­ted to adhe­ring to the­se data pro­tec­tion stan­dards. You can find more infor­ma­ti­on from the pro­vi­der at the fol­lo­wing link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?
contact=true&id=a2zt0000000CbqcAAC&status=Active

Data Pro­ces­sing Agreement
We have ente­red into a Data Pro­ces­sing Agree­ment (DPA) for the use of the afo­re­men­tio­ned ser­vice. This is a data pro­tec­tion regu­la­ti­on-requi­red con­tract that ensu­res the ser­vice pro­vi­der pro­ces­ses the per­so­nal data of our web­site visi­tors only accor­ding to our ins­truc­tions and in com­pli­ance with the GDPR.

5. Analysis Tools and Advertising

Google Analytics

This web­site uses func­tions of the web ana­ly­tics ser­vice Goog­le Ana­ly­tics. The pro­vi­der is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ireland.

Goog­le Ana­ly­tics enables the web­site ope­ra­tor to ana­ly­ze the beha­vi­or of web­site visi­tors. The web­site ope­ra­tor recei­ves various usa­ge data, such as page views, time spent on the site, ope­ra­ting sys­tems used, and the user’s ori­gin. This data is aggre­ga­ted into a User-ID and assi­gned to the respec­ti­ve device of the web­site visitor.

Addi­tio­nal­ly, with Goog­le Ana­ly­tics, we can record your mou­se and scroll move­ments and clicks. Goog­le Ana­ly­tics also uses various mode­ling approa­ches to sup­ple­ment the coll­ec­ted data sets and appli­es machi­ne lear­ning tech­no­lo­gies in data analysis.

Goog­le Ana­ly­tics uses tech­no­lo­gies that enable the reco­gni­ti­on of the user for the pur­po­se of ana­ly­zing user beha­vi­or (e.g., coo­kies or device fin­ger­prin­ting). The infor­ma­ti­on coll­ec­ted by Goog­le about the use of this web­site is usual­ly trans­mit­ted to a Goog­le ser­ver in the USA and stored there.

The use of this ser­vice is based on your con­sent accor­ding to Art. 6(1)(a) GDPR and §25(1) TTDSG. Con­sent can be revo­ked at any time.

Data trans­fer to the USA is based on the EU Commission’s stan­dard con­trac­tu­al clau­ses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The com­pa­ny is cer­ti­fied under the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that aims to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards in data pro­ces­sing in the USA. Every com­pa­ny cer­ti­fied under the DPF is com­mit­ted to adhe­ring to the­se data pro­tec­tion stan­dards. You can find more infor­ma­ti­on from the pro­vi­der at the fol­lo­wing link:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?
contact=true&id=a2zt000000001L5AAI&status=Active

Browser Plugin

You can pre­vent the coll­ec­tion and pro­ces­sing of your data by Goog­le by down­loa­ding and instal­ling the brow­ser plug­in available at the fol­lo­wing link:
https://tools.google.com/dlpage/gaoptout?hl=de.

For more infor­ma­ti­on on how Goog­le Ana­ly­tics hand­les user data, plea­se see Google’s pri­va­cy policy:
https://support.google.com/analytics/answer/6004245?hl=de.

Data Processing Agreement

We have ente­red into a data pro­ces­sing agree­ment with Goog­le and ful­ly imple­ment the strict requi­re­ments of the Ger­man data pro­tec­tion aut­ho­ri­ties when using Goog­le Analytics.

6. Newsletter

Newsletter Data

If you would like to recei­ve the news­let­ter offe­red on the web­site, we requi­re an email address from you, as well as infor­ma­ti­on that allows us to veri­fy that you are the owner of the pro­vi­ded email address and agree to recei­ve the news­let­ter. Addi­tio­nal data will only be coll­ec­ted on a vol­un­t­a­ry basis. We use news­let­ter ser­vice pro­vi­ders, which are descri­bed below, for the hand­ling of newsletters.

Rapidmail

This web­site uses Rapidmail for sen­ding news­let­ters. The pro­vi­der is rapidmail GmbH, Augus­ti­ner­platz 2, 79098 Frei­burg i.Br., Germany.

Rapidmail is a ser­vice that helps orga­ni­ze and ana­ly­ze the sen­ding of news­let­ters. The data you enter to recei­ve the news­let­ter is stored on Rapidmail’s ser­vers in Germany.

Data Analysis by Rapidmail

For ana­ly­sis pur­po­ses, the emails sent with Rapidmail include a so-cal­led “track­ing pixel” that con­nects to Rapidmail’s ser­vers when the email is ope­ned. This allows us to deter­mi­ne if a news­let­ter mes­sa­ge has been opened.

Addi­tio­nal­ly, we can use Rapidmail to iden­ti­fy whe­ther and which links in the news­let­ter mes­sa­ge were cli­cked. All links in the email are so-cal­led track­ing links, which allow your clicks to be coun­ted. If you do not want Rapidmail to ana­ly­ze your data, you must unsub­scri­be from the news­let­ter. We pro­vi­de a link to do this in every news­let­ter message.

For more details on Rapidmail’s ana­ly­sis fea­tures, plea­se see the fol­lo­wing link: https://de.rapidmail.wiki/kategorien/statistiken/.

Legal Basis

Data pro­ces­sing is based on your con­sent (Art. 6(1)(a) GDPR). You can revo­ke this con­sent at any time. The lega­li­ty of the data pro­ces­sing car­ri­ed out befo­re the revo­ca­ti­on remains unaf­fec­ted by the revocation.

Storage Duration

The data you pro­vi­de to recei­ve the news­let­ter will be stored by us or the news­let­ter ser­vice pro­vi­der until you unsub­scri­be from the news­let­ter and will be dele­ted from the news­let­ter dis­tri­bu­ti­on list after you unsub­scri­be. Data stored by us for other pur­po­ses remains unaffected.

After you unsub­scri­be from the news­let­ter dis­tri­bu­ti­on list, your email address may be stored in a black­list with us or the news­let­ter ser­vice pro­vi­der if neces­sa­ry to pre­vent future mai­lings. The data from the black­list will only be used for this pur­po­se and will not be mer­ged with other data. This is in your inte­rest as well as our inte­rest in com­ply­ing with the legal requi­re­ments for sen­ding news­let­ters (legi­ti­ma­te inte­rest under Art. 6(1)(f) GDPR). The sto­rage in the black­list is inde­fi­ni­te. You can object to the sto­rage if your inte­rests out­weigh our legi­ti­ma­te interest.

For more details, plea­se refer to Rapidmail’s data secu­ri­ty noti­ces at:
https://www.rapidmail.de/datensicherheit.

Data Processing Agreement

We have ente­red into a data pro­ces­sing agree­ment (DPA) with the pro­vi­der men­tio­ned abo­ve. This is a legal­ly requi­red con­tract that ensu­res that the pro­vi­der pro­ces­ses the per­so­nal data of our web­site visi­tors only accor­ding to our ins­truc­tions and in com­pli­ance with the GDPR.

7. Plugins and Tools

Google Fonts (Local Hosting)

This site uses Goog­le Fonts for uni­form font repre­sen­ta­ti­on, pro­vi­ded by Goog­le. The Goog­le Fonts are instal­led local­ly, so no con­nec­tion to Google’s ser­vers is made.

For more infor­ma­ti­on on Goog­le Fonts, visit https://developers.google.com/fonts/faq and Google’s pri­va­cy poli­cy: https://policies.google.com/privacy?hl=de.

Font Awesome (Local Hosting)

This site uses Font Awe­so­me for uni­form font repre­sen­ta­ti­on. Font Awe­so­me is instal­led local­ly, so no con­nec­tion to Fon­ti­cons, Inc. ser­vers is made.

For more infor­ma­ti­on on Font Awe­so­me, refer to the Font Awe­so­me pri­va­cy poli­cy at: https://fontawesome.com/privacy.

8. Own Services

Handling Applicant Data

We offer you the oppor­tu­ni­ty to app­ly with us (e.g., via email, pos­tal mail, or online appli­ca­ti­on form). Below, we inform you about the scope, pur­po­se, and use of your per­so­nal data coll­ec­ted during the appli­ca­ti­on pro­cess. We assu­re you that the coll­ec­tion, pro­ces­sing, and use of your data com­ply with appli­ca­ble data pro­tec­tion laws and all other legal pro­vi­si­ons, and your data will be trea­ted with strict confidentiality.

Scope and Purpose of Data Collection

If you send us an appli­ca­ti­on, we pro­cess your asso­cia­ted per­so­nal data (e.g., cont­act and com­mu­ni­ca­ti­on data, appli­ca­ti­on docu­ments, notes from inter­views, etc.) as far as it is neces­sa­ry for the decis­i­on on estab­li­shing an employ­ment rela­ti­onship. The legal basis for this is § 26 BDSG under Ger­man law (initia­ti­on of an employ­ment rela­ti­onship), Art. 6(1)(b) GDPR (gene­ral con­tract initia­ti­on), and – if you have given con­sent – Art. 6(1)(a) GDPR. Con­sent can be revo­ked at any time. Your per­so­nal data will only be shared within our com­pa­ny with tho­se invol­ved in pro­ces­sing your application.

If the appli­ca­ti­on is suc­cessful, the data you sub­mit­ted will be stored in our data pro­ces­sing sys­tems based on § 26 BDSG and Art. 6(1)(b) GDPR for the pur­po­se of car­ry­ing out the employ­ment relationship.

Data Retention Period

If we can­not offer you a posi­ti­on, if you reject a job offer, or if you with­draw your appli­ca­ti­on, we reser­ve the right to retain the data you sub­mit­ted based on our legi­ti­ma­te inte­rests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the appli­ca­ti­on pro­cess (rejec­tion or with­dra­wal of the appli­ca­ti­on). The data will then be dele­ted, and phy­si­cal appli­ca­ti­on docu­ments will be des­troy­ed. This reten­ti­on ser­ves par­ti­cu­lar­ly as evi­dence in case of a legal dis­pu­te. If it is evi­dent that the data will be requi­red after the 6‑month peri­od (e.g., due to a pen­ding or immi­nent legal dis­pu­te), dele­ti­on will occur only when the pur­po­se for fur­ther reten­ti­on no lon­ger applies.

Lon­ger reten­ti­on may also occur if you have given your con­sent (Art. 6(1)(a) GDPR) or if legal reten­ti­on obli­ga­ti­ons pre­vent deletion.

Inclusion in the Applicant Pool

If we do not offer you a posi­ti­on, the­re may be the pos­si­bi­li­ty of inclu­ding you in our appli­cant pool. If accept­ed, all docu­ments and infor­ma­ti­on from the appli­ca­ti­on will be trans­fer­red to the appli­cant pool to cont­act you in case of sui­ta­ble vacancies.

Inclu­si­on in the appli­cant pool is based sole­ly on your expli­cit con­sent (Art. 6(1)(a) GDPR). Pro­vi­ding con­sent is vol­un­t­a­ry and is not rela­ted to the ongo­ing appli­ca­ti­on pro­cess. The affec­ted indi­vi­du­al can revo­ke their con­sent at any time. In this case, the data from the appli­cant pool will be irre­vo­ca­bly dele­ted, pro­vi­ded the­re are no legal reten­ti­on reasons.

The data from the appli­cant pool will be irre­vo­ca­bly dele­ted no later than two years after con­sent has been given.

Source: eRecht24 / Sep­tem­ber 2023