PRIVACY POLICE

We are pleased that you are visiting our website. Protecting and securing your personal information during your use of our website is very important to us. Therefore, we would like to inform you here about which of your personal data we collect when you visit our website and for what purposes it is used. Personal data refers to individual details about the personal or factual circumstances of a specific or identifiable natural person (data subject), such as name, address, email addresses, and user behaviour. These are data that can be used to identify you. Additionally, you will find occasional information here about data processing activities outside of this website (e.g., video conferences or newsletters).

Responsible for Data Processing

Controller

For the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)

Haus Rabenhorst O. Lauffs GmbH & Co. KG
Rabenhorststraße 1
53572 Unkel
Phone: +49 (0)2224-18 05 0

Data Protection Officer

COMDOK GmbH (Mr Jörg Seibert)
Reinhardtstraße 14
D-10117 Berlin

Phone: +49 (0)2241 349 102
Email: dsb-hr(at)rabenhorst.de

General Information

In addition to the data you actively provide to us on this page (e.g., via our contact form), we collect some technical data. These so-called metadata are automatically transmitted from your computer to our servers as soon as you access our website (including browser, operating system, or timestamp). Such data help us ensure the error-free display of our website. Additionally, we may collect data through integrated third-party providers (e.g., for external media such as map services or analytics tools). We will inform you about the specific purposes and legal bases throughout this privacy policy.

Retention Period

Unless a specific retention period is stated within this privacy policy, we retain your personal data for as long as the purpose of the data processing is applicable. If you submit a legitimate request for deletion or withdraw your consent, we will delete your data. Statutory retention obligations remain unaffected.

Legal Bases for Data Processing

If you have consented to data processing, your personal data will be processed based on Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR if special categories of data are processed according to Art. 9(1) GDPR. In cases of explicit consent for the transfer of personal data to third countries, the data will also be processed in accordance with Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g., through device fingerprinting), data processing will also occur based on s. 25(1) TDDDG / applicable national law. Your consent can be withdrawn at any time. If your data are necessary for contract fulfilment or pre-contractual measures, we process your data according to Art. 6(1)(b) GDPR. Furthermore, we process your data if necessary to fulfil a legal obligation based on Art. 6(1)(c) GDPR. Data processing may also occur due to our legitimate interests in accordance with Art. 6(1)(f) GDPR. In the following sections of this privacy policy, you will be informed about the respective legal bases in individual cases.

Notice on Data Transfer to Third Countries and US Companies without DPF Certification

Please note that we use tools from companies based in third countries or the USA that are not covered by the EU-US Data Privacy Framework (DPF). When using these tools, your personal data may be transferred to and processed in these countries. Please be aware that in these insecure third countries, a level of data protection comparable to that of the EU cannot be guaranteed.

We wish to clarify that the USA generally offers a level of data protection comparable to that of the EU. Data transfer to the USA is permitted if the recipient has DPF certification or provides appropriate additional guarantees. Information about data transfers to third countries, including data recipients, can be found in our privacy policy.

Automated Decision-Making

Your personal data will not be processed for the purpose of automated decision-making.

Your Rights

As a data subject under the General Data Protection Regulation (GDPR), you have the following rights:

Right of access: You have the right to request confirmation from us as to whether your personal data are being processed and, if so, to obtain further information about the processing and copies of the processed data (Art. 15 GDPR).
Right to rectification: You have the right to request the immediate correction of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data (Art. 16 GDPR).
Right to erasure: You have the right to request the immediate deletion of personal data concerning you if the legal requirements are met, particularly if the data are no longer necessary for the purposes pursued and the processing is unlawful (Art. 17 GDPR).
Right to restriction of processing: You have the right to request the restriction of processing of your personal data from us if the legal requirements are met, particularly if you contest the accuracy of the data, the processing is unlawful, and you oppose the deletion (Art. 18 GDPR).
Right to data portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, where technically feasible (Art. 20 GDPR).
Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you if the processing is based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR).
Right to withdraw consent: You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal (Art. 7(3) GDPR).
Right to lodge a complaint with a supervisory authority: You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR).

Further Data Processing Procedures

General Information Obligations

This information is directed at customers, prospective clients, suppliers, and employees. We process your personal data for the following purposes:

To fulfil our contractual obligations to you (Art. 6(1)(b) GDPR).
To carry out pre-contractual obligations (Art. 6(1)(b) GDPR).
To respond to enquiries (Art. 6(1)(b) GDPR).
If you have given us consent to process your personal data for specific purposes (such as receiving our newsletter), the data processing is based on your consent (Art. 6(1)(a) GDPR).
To comply with legal obligations to which our company is subject (Art. 6(1)(c) GDPR).
Where necessary, we also process your data to safeguard our legitimate interests, particularly for asserting legal claims and defending in legal disputes, ensuring IT security, consulting and exchanging data with credit agencies to determine creditworthiness and default risks, direct marketing and market research unless you have objected to the use of your data for this purpose, business management measures and the development of services and products, product and sales optimisation measures, risk management measures, and the prevention or investigation of criminal offences (Art. 6(1)(f) GDPR).

Categories of Recipients of Personal Data

Within our company, only those employees who need the data to fulfil their tasks have access to it (need-to-know principle). Individual processes and services are carried out by carefully selected service providers who are commissioned in compliance with data protection regulations and are based within the EEA. If service providers commissioned by us gain access to personal data while performing their services, data processing agreements have been concluded with them in accordance with Art. 28(3) GDPR.

Duration of Data Storage

The data we process is stored for the duration of the existence and execution of the contractual relationship and in compliance with statutory retention periods. These are particularly the commercial and tax retention obligations under the German Commercial Code (HGB) and the Fiscal Code (AO). The regular retention or documentation periods are up to ten years. If no contractual relationship is established, we process the data only as long as the specific purpose requires.

Cookies

Cookies are small text files stored by your browser on your device to retain certain information during your use of the website. Cookies enable us to enhance various aspects of our website and make your visit more comfortable.

There are different types of cookies serving various purposes. Temporary cookies, also known as session cookies, are stored only for the duration of your website visit and are automatically deleted when you close your browser. Persistent cookies, on the other hand, remain on your device for a longer period, allowing us to recognise you and your preferences during repeated visits to the website.

Cookies can also be categorised into first-party cookies and third-party cookies. First-party cookies are set by our website, while third-party cookies are set by other websites or service providers whose content is integrated into our website, such as plugins or analytics tools.

The use of cookies serves various purposes, such as ensuring the website functions properly, saving user settings, creating anonymous statistics about user behaviour, or displaying personalised content and advertising. The legal basis for using cookies varies depending on their purpose. In some cases, the setting of cookies is based on your legitimate interest under Art. 6(1)(f) GDPR, to make our website functional and user-friendly. As website operators, we have a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of our services. When we obtain your consent for the use of cookies, processing is based on Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. Your consent can be withdrawn at any time.

Cookie Consent with Usercentrics

Nature and Scope of Processing

We use the consent technology from Usercentrics to obtain your consent for storing certain cookies on your device or for using certain technologies and to document this in compliance with data protection regulations. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich (hereinafter "Usercentrics").

When you visit our website, the following personal data is transmitted to Usercentrics:

Your consent(s) or the withdrawal of your consent(s)
Your IP address
Information about your browser
Information about your device
The time of your visit to the website

To assign and document your consent or withdrawal, the provider sets a cookie in your browser. This data is stored until you delete the cookie, request us to delete the data, or the purpose for data processing no longer applies. Statutory retention obligations remain unaffected.

The use of Usercentrics is to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6(1)(c) GDPR.

Data Processing Agreement

To ensure that personal data is processed according to our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.

Data Processing in Detail

Below, we provide information on the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective retention period. Automated decision-making, including profiling, does not take place.

Provision of the website

When you access and use our website, we collect personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by us directly but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR for the purpose of providing the website.

The use of the host is for the purpose of fulfilling contracts with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6(1)(f) GDPR).

We use the following host:
Mittwald CM Service GmbH & Co. KG
Königsberger Straße 4-6
32339 Espelkamp

Contact Form

Nature and Scope of Processing

If you send us enquiries (e.g. via contact form, email, or telephone), we store all data arising from this (e.g. name, email address, subject of the enquiry, etc.). We require this data to process your enquiry and to respond to any follow-up questions. We do not share this data without your consent.

Purpose and Legal Basis

The processing of this data is based on Art. 6(1)(b) GDPR, provided your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. Otherwise, the processing is based on our legitimate interest in effectively handling enquiries directed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if you have given it previously.

Retention Period

The data you enter in the contact form remains with us until you request its deletion, withdraw your consent for storage, or the purpose for data storage no longer applies (e.g. after your enquiry has been processed). Mandatory legal provisions – especially retention periods – remain unaffected.

Contact Form for Applicants

Nature and Scope of Processing

We collect and process personal data from applicants. Such data processing may also occur electronically, for example, when applicants submit application documents via email or through a web form available on our website. We offer you the option to submit applications for advertised job vacancies via email on our website.

Purpose and Legal Basis

We process applicants" personal data in accordance with legal requirements for the purpose of initiating an employment relationship (Art. 6(1)(b) GDPR). You are not obliged to provide us with this data. However, without this data, we cannot conduct an application process with you.

If the application is successful, the data you submitted will be stored in our data processing systems based on Art. 6(1)(b) GDPR, and if you provide us with special categories of personal data such as health information, based on Art. 9(2)(b) for the purpose of conducting the employment relationship.

For the purpose of contacting potential applicants, we also use services from professional networks LinkedIn and XING. The operators of these networks act as processors on our behalf according to our instructions. The legal basis for data processing when contacting potential applicants on our behalf is Art. 6(1)(f) GDPR (our legitimate interests). If you send us your application following such contact, we process your data for the purpose of initiating an employment relationship as described above based on Art. 6(1)(b) GDPR.

Retention Period

In the event of a rejection, your data will be stored for a period of 6 months beyond the conclusion of the application process. This is to protect our legitimate interests, to assess whether we need the data to defend against any claims related to the application process. Subsequently, we are obliged to delete or anonymise your data. In this case, the data will only be available to us as so-called metadata without direct personal reference for statistical evaluations (e.g., the proportion of female or male applicants, the number of applications per period, etc.).

If it is apparent that further storage of the data beyond the 6-month period is necessary to protect our legitimate interests (e.g., due to a pending or threatened legal dispute), deletion will only occur when the purpose for further retention ceases. The legal basis for this further data storage is our legitimate interests in asserting, exercising, or defending civil law claims (Art. 6(1)(f) GDPR in conjunction with s. 24(1)(2) BDSG or, where special categories of personal data are stored, Art. 9(2)(f) GDPR in conjunction with s. 24(2) BDSG).

Inclusion in the Applicant Pool

As part of the application process, we offer applicants the opportunity to be included in our "Talent Pool" for a period of 24 months based on consent in accordance with Art. 6(1)(a), Art. 9(2)(a) GDPR. If you have provided special categories of personal data in your application, such as health information, your consent also extends to this data. You are not obliged to provide us with your application data for our Talent Pool. However, without this data, we cannot consider you for future advertised positions unless you submit a new application.

Consent to the inclusion of application data in the Talent Pool is voluntary and can be withdrawn at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of data processing carried out based on the consent until the withdrawal.

Your application documents in the Talent Pool will be deleted at the latest after the storage period expires, or in the event of a withdrawal or acceptance of a job offer with one of the companies responsible for the Talent Pool.

If you receive and accept an offer for employment with us during the application process, we or the respective company will store the personal data collected during the application process for the purpose of conducting the employment relationship. The legal basis for this data processing is Art. 6(1)(b) GDPR or, if you provide us with special categories of personal data such as health information, Art. 9(2)(b).

We offer our newsletter on this website. If you wish to subscribe, we require your email address and additional data to verify that it is your email address and that you consent to receiving the newsletter. No further personal data is collected unless you voluntarily provide it (e.g., name, phone number, place of residence, etc.).

When processing the data you provide upon subscribing to the newsletter, we rely solely on your consent as the legal basis, in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent to the processing and storage of your personal data at any time (e.g., via the "unsubscribe" link in the newsletter) with effect for the future.

We retain your personal data provided for the purpose of receiving the newsletter until you unsubscribe from the newsletter with us or the mailing service provider. This does not apply to data we have stored for other purposes.

If you unsubscribe from the newsletter distribution list, your email address will be stored on a blacklist by us or the mailing service provider for an indefinite period to prevent future mailings to you. The data on the blacklist is used solely for this purpose and is not combined with other data. This is in both your interest and our legitimate interest under Art. 6(1)(f) GDPR to comply with legal obligations when sending newsletters. You may object to this storage if your personal interests outweigh our legitimate interest.

Brevo

This website uses Brevo for sending newsletters. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo is a service for organising and analysing newsletter distribution. The data you provide for newsletter subscription is stored on Brevo"s servers in Germany.

With Brevo, we can analyse our newsletter campaigns, for example, to see if a newsletter message was opened and which links were clicked. This allows us to determine which links were clicked the most.

Brevo also allows us to segment newsletter recipients into different categories ("clustering"), such as by age, gender, or place of residence. This enables us to tailor newsletters more effectively to target audiences.

If you do not wish for Brevo to conduct an analysis, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message.

Further information on Brevo"s features can be found here: https://www.brevo.com/de/newsletter-software/.

Data processing is based on your consent (Art. 6(1)(a) GDPR). You can withdraw this consent at any time. The legality of data processing operations already carried out remains unaffected by the withdrawal.

The data stored with us for the purpose of newsletter subscription will be retained until you unsubscribe from the newsletter with us or the newsletter service provider and will be deleted from the distribution list after you unsubscribe. Data stored with us for other reasons remains unaffected.

After you unsubscribe from the newsletter list, your email address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest under Art. 6(1)(f) GDPR). Storage in the blacklist is not time-limited. You may object to this storage if your interests outweigh our legitimate interest.

Further information on data protection at Brevo can be found here: https://www.brevo.com/de/legal/privacypolicy/.

To ensure that personal data is processed according to our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.

Video Conferences

Data Processing

We use online conferencing tools to communicate with our clients. The specific tools we use are listed below. When you communicate with us via video or audio conference, your personal data is collected and processed by us and the provider of the respective tool.

The tools collect the data you provide, including your email address and telephone number. They also process the duration of the conference, when you participated, the number of participants, and other metadata.

Additionally, the provider of the tool processes all technical data necessary for conducting the conference. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.

If you share content using this service, it will be stored on the provider"s servers. This includes cloud recordings, chat messages, voice messages, as well as photos and videos you have shared during the use of this service.

Please note that we do not have full control over the data processing operations of the tools used. For more detailed information on data processing by the conferencing tools, please refer to the privacy policies of the respective tools used.

Purpose and Legal Basis

The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to our clients (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR). If you have previously given consent for data processing, your data will be processed solely on the basis of Art. 6(1)(a) GDPR; consent can be withdrawn at any time.

Retention Period

The data directly collected by us through video and conferencing tools will be deleted from our systems as soon as you request us to delete it, withdraw your consent for storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the retention period of your data, which is stored by the operators of the conferencing tools for their own purposes. For details, please refer directly to the operators of the conferencing tools.

Video Conferencing Tools Used:

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in the Microsoft Teams privacy policy: https://privacy.microsoft.com/en-gb/privacystatement.

Data transfer to the USA is based on the EU Commission"s standard contractual clauses. Details can be found here: https://privacy.microsoft.com/en-gb/privacystatement.

Data Processing Agreement

To ensure that personal data is processed according to our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider. Website visitors are processed only according to our instructions and in compliance with the GDPR.

Third-Party Services and Tools

Gstatic

We use functions from Gstatic on this website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Nature and Scope of Data Processing

Gstatic is a service provided by Google to accelerate the loading of web pages. Gstatic stores website resources such as images, CSS, and JavaScript files on its servers to deliver them more quickly to users upon subsequent page visits. During this data processing, technical information such as your IP address and technical details of your browser are transmitted to Gstatic.

The user profiles created by Gstatic are pseudonymised and cannot be directly traced back to you as an individual.

Further information can be found in Google"s privacy policy: https://policies.google.com/privacy.

Legal Basis

The use of Gstatic on this website is based on your consent in accordance with Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG. You have the right to withdraw your consent at any time.

The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the USA aimed at ensuring compliance with European data protection standards in data processing in the USA. Certification under the DPF obliges companies to adhere to these data protection standards. Further information can be found at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?id=a2zt000000001L5AAI&status=Active

Data Processing Agreement

To ensure that personal data is processed according to our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.

YouTube Video

This website integrates videos from YouTube. The operator is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that no information about visitors is stored on the website before they watch the video. However, the enhanced privacy mode does not necessarily prevent data from being shared with YouTube partners. YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

When you start a YouTube video on this website, a connection to YouTube"s servers is established. The YouTube server is informed about which of our pages you have visited. If you are logged into your YouTube account, you also enable YouTube to associate your browsing behaviour with your personal profile. You can prevent this by logging out of your account. Once a video starts, YouTube may store various cookies on your device or use similar recognition technologies, such as device fingerprinting. This allows YouTube to gather information about visitors to this website. This information is used, among other things, to compile video statistics, improve user-friendliness, and prevent fraud attempts. It is not excluded that further data processing operations may occur after a video starts, over which we have no control.

Legal Basis

The use of YouTube is based on our legitimate interest in an appealing presentation of our online offerings (Art. 6(1)(f) GDPR). If consent has been requested, data processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law. This consent can be withdrawn at any time.

For more information on data protection at YouTube, please refer to their privacy policy: https://policies.google.com/privacy?hl=en.

Google Analytics

We use services and features from Google Analytics on this website, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Nature and Scope of Data Processing

With the help of Google Analytics, we as website operators can determine how our website is used. Through the analysis, we learn how often our website is accessed, how long visitors stay on the site, and which devices or systems they use to access the website. We can also track your mouse movements and clicks. Google Analytics uses machine learning and other technologies to analyse and enhance your data. The processing of the collected data usually takes place on Google"s servers in the USA.

Legal Basis

When using Google Analytics, we rely on Art. 6(1)(f) GDPR as the legal basis for storing and analysing personal data, as we have a legitimate interest in analysing the use of our website. This allows us to optimise our online offering for you. If you have previously given consent for data processing by Google Analytics on this website, your data will be processed solely on the legal basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time.

The transfer of your personal data to the USA is based on the EU Commission"s Standard Contractual Clauses. Further information can be found at https://privacy.google.com/businesses/controllerterms/mccs/.

Data Processing Agreement

To ensure that personal data is processed according to our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.

Retention Period

Google stores data linked to cookies, user IDs, or advertising IDs for two months, after which they are anonymised or deleted. Further information on the retention period or the deletion of your data can be found at https://support.google.com/analytics/answer/7667196?hl=en.

Google Tag Manager

We use services and features from Google Tag Manager on this website, which are offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The Google Tag Manager is a tool that allows us to deploy other tools on our website. It does not create user profiles, store cookies, or conduct independent analyses. However, your IP address is collected and may be transmitted to the USA. The Google Tag Manager itself is only used for managing these tools that are integrated through it.

Purpose & Legal Basis

When using the Google Tag Manager on this website, we rely on Art. 6(1)(f) GDPR as the legal basis, as we have a legitimate interest in implementing and managing tracking tools on this website easily and quickly. If you have previously given consent for data processing on this website through the Google Tag Manager, your data will be processed solely on the legal basis of Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG / applicable national law. You can withdraw your consent at any time.

The company is certified under the "EU-US Data Privacy Framework" (DPF), an agreement between the European Union and the USA aimed at ensuring compliance with European data protection standards when processing data in the USA. Certification under the DPF obliges companies to adhere to these data protection standards. Further information is available at: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Google DoubleKlick

We use services and features from Google DoubleClick on this website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Nature and Scope of Data Processing

Google DoubleClick allows us to display targeted advertisements in Google applications that match users" interests. To offer relevant advertising, Google DoubleClick needs to identify users and associate their website visits, clicks, and other information with their user behaviour. For this purpose, Google DoubleClick uses cookies and technologies to recognise users and creates pseudonymised user profiles based on the collected data.

You can disable this personalised advertising in your personal Google account at https://policies.google.com/technologies/ads and https://adssettings.google.com/authenticated.

Legal Basis

When using Google DoubleClick, we rely on Art. 6(1)(f) GDPR as the legal basis, as we have a legitimate interest in analysing the use of our website. This enables us to optimise our online presence and offerings for you. If you have previously given consent for data processing by Google DoubleClick on this website, your data will be processed on the legal basis of Art. 6(1)(a) GDPR in conjunction with s. 25(1) TDDDG / applicable national law. You can withdraw your consent at any time.

Google API

On our website, we use the services and functions of Google APIs, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Nature and Scope of Data Processing

Google APIs allow us to access additional services and data from Google. When using these services, your IP address is transmitted to Google Ireland Limited. Please note that for each additional Google service we use, we provide specific information in our privacy policy. Further information on Google APIs and data protection can be found in Google"s privacy policy: https://policies.google.com/privacy.

Legal Basis

We use Google APIs based on our legitimate interests (i.e., the interest in optimising our online offering) in accordance with Art. 6(1)(f) GDPR. If we obtain consent (e.g., consent to store cookies), data processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; you can withdraw this consent at any time.

Data Processing Agreement

To ensure that personal data is processed according to our instructions and in compliance with the GDPR, we have concluded a data processing agreement with the provider.

Meta Platforms Ireland Limited

We use the Meta Pixel on this website, which is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

The Meta Pixel allows us to analyse the behaviour of our website visitors when they are redirected to our website by clicking on a Facebook advertisement. We use the user data to measure the success of our advertisements on Facebook and to optimise the ads. As the website operator, we only receive anonymised data, so we cannot identify you as a user.

Meta, on the other hand, processes the data in a way that it can be associated with a specific user and used for its own advertising purposes. This enables Meta to display personalised advertisements on Meta and other websites. We, as the website operator, have no influence over this. Further information on data processing can be found in Meta"s privacy policy at https://www.facebook.com/about/privacy/.

Legal Basis

When using the Meta Pixel, we rely on your consent in accordance with Art. 6(1)(a) GDPR and s. 25(1) TDDDG / applicable national law. You can withdraw your consent at any time.

The transfer of your personal data to the USA is based on the EU Commission"s standard contractual clauses. Further information can be found at https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

If personal data is collected on this website and transferred to Meta through this service, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, share joint responsibility for the processing of your personal data (Art. 26 GDPR). However, we are only responsible for collecting your data and transmitting it to Meta, while Meta is responsible for what happens to the data thereafter. The obligations we impose on each other under joint responsibility are set out in a joint data processing agreement. You can find the exact text of the agreement at the following link: https://www.facebook.com/legal/controller_addendum. Accordingly, we must provide you with information on data protection when using the Meta tool and ensure that the tool is implemented on our website in compliance with data protection regulations.

Meta itself is responsible for the security of its own products. If you wish to exercise your data subject rights, such as requesting information about the data processed by Meta about you, you can contact Meta directly. If you assert your rights as a data subject with us, we are obliged to forward your request to Meta.

jQuery CDN

Type and Scope of Processing

We use jQuery CDN to properly provide the content of our website. jQuery CDN is a service by jQuery that functions as a Content Delivery Network (CDN) on our website.

A CDN helps to deliver content from our online offering, particularly files such as graphics or scripts, more quickly using regionally or internationally distributed servers. When you access this content, you establish a connection to jQuery"s servers, during which your IP address and possibly browser data such as your user agent are transmitted. These data are processed solely for the aforementioned purposes and to maintain the security and functionality of jQuery CDN.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e., the interest in a secure and efficient provision as well as the optimisation of our online offering in accordance with Art. 6(1)(f) GDPR.

Retention Period

The specific retention period of the processed data is not within our control but is determined by jQuery. Further information can be found in the privacy policy for jQuery CDN: https://www.stackpath.com/legal/privacy-statement/.

exkulpa gmbh

HTML-basiertes Embed für die Datenschutzerklärung

To display our privacy policy, an external HTML code snippet from the provider exkulpa gmbh, Waldfeuchterstr. 266, 52525 Heinsberg, Germany, is integrated into our website.

When you access the page displaying the privacy policy, the necessary content is retrieved from the provider"s servers.

This integration is based on our legitimate interest in providing a user-friendly and technically up-to-date presentation of our privacy policy (Art. 6(1)(f) GDPR).

For more information on data processing by exkulpa gmbh, please refer to their privacy policy: https://exkulpa.de/datenschutzerklaerung/

PRIVACY POLICE

Responsible for Data Processing

Controller

Data Protection Officer

General Information

Retention Period

Legal Bases for Data Processing

Notice on Data Transfer to Third Countries and US Companies without DPF Certification

Automated Decision-Making

Your Rights

Further Data Processing Procedures

General Information Obligations

Categories of Recipients of Personal Data

Duration of Data Storage

Cookies

Cookie Consent with Usercentrics

Nature and Scope of Processing

Data Processing Agreement

Data Processing in Detail

Provision of the website

Contact Form

Nature and Scope of Processing

Purpose and Legal Basis

Retention Period

Contact Form for Applicants

Nature and Scope of Processing

Purpose and Legal Basis

Retention Period

Inclusion in the Applicant Pool

Newsletter

Brevo

Video Conferences

Data Processing

Purpose and Legal Basis

Retention Period

Video Conferencing Tools Used:

Microsoft Teams

Data Processing Agreement

Third-Party Services and Tools

Gstatic

Nature and Scope of Data Processing

Legal Basis

Data Processing Agreement

YouTube Video

Legal Basis

Google Analytics

Nature and Scope of Data Processing

Legal Basis

Data Processing Agreement

Retention Period

Google Tag Manager

Purpose & Legal Basis

Google DoubleKlick

Nature and Scope of Data Processing

Legal Basis

Google API

Nature and Scope of Data Processing

Legal Basis

Data Processing Agreement

Meta Platforms Ireland Limited

Legal Basis

jQuery CDN

Type and Scope of Processing

Purpose and Legal Basis

Retention Period

exkulpa gmbh