Privacy Policy

For more information on terms of use and privacy, please visit http://www.google.com/analytics/terms/de.html or https://www.google.com/policies/privacy/.
Please note that the code "gat._anonymizeIp();" has been added to Google Analytics on this website to ensure that IP addresses are recorded anonymously.

Google Tag Manager
This website uses "Google Tag Manager". Google Tag Manager is a tool for managing website tags. The tool is a cookieless domain and does not collect any personal data. The tool activates other tags that may, in turn, collect data under certain circumstances. Google Tag Manager does not access this data. If the domain or cookie is deactivated, they remain in place for all tracking tags that are used with Google Tag Manager (http://www.google.de/tagmanager/use-policy.html). The legal basis for the data processing is Art. 6 (1) (a) GDPR.

16. Social media
We maintain publicly available profiles on social networks. The individual social networks we use can be found below.
Social networks such as Facebook etc. can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (such as Like buttons or banner ads). By visiting our social media presences, numerous data protection-relevant processing operations are triggered. Specifically:
If you are logged in to your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, however, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, data is collected, for example, via cookies, which are stored on your device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way you can be shown interest-based advertising within and outside of the particular social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot reconstruct all processing processes on the social media portals. Depending on the provider, therefore, additional processing operations may possibly be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal basis
Our social media presences are designed to provide an informative presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (for example, consent within the meaning of Article 6 (1) (a) GDPR).

Responsible entity and assertion of rights
If you visit any of our social media sites, together with the social media platform operator we are jointly responsible for the data processing operations triggered during this visit. As a matter of principle, you can assert your rights (access, rectification, erasure, restriction of processing, data portability and complaint) both to us and to the operator of the respective social media portal.

Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Duration of storage
The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose of storage no longer exists, you ask us to delete it, you withdraw your consent to the storage or the purpose for the data storage no longer exists. Saved cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.
We have no control over the duration of storage of your data stored by the social network operators for their own purposes. For details, please refer to the social network operators directly (e.g. in their privacy notice, see below).

Social networks in detail

Facebook
We have a profile on Facebook. The operating company of Facebook is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. You can customize your advertising settings yourself in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads 
It cannot be ruled out that your personal data will also be transferred to Meta Platforms Inc., based in the U.S.A. Meta has certified itself under the EU-U.S. Data Privacy Framework to comply with the level of data protection applicable in the EU. The certificate can be viewed at https://www.dataprivacyframework.gov/s/. Further information on data protection can be found in Facebook's privacy policy: https://www.facebook.com/about/privacy/

Kununu
Social media plugins from Kununu are used on our website. For this we use the "Kununu" button. This is a service provided by Kununu. When you visit a page on our website containing one of these plugins, your browser establishes a direct connection to the Kununu servers. The content of the plugin is transmitted by Kununu directly to your browser, which integrates it into the website.
By integrating the plugin, Kununu receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Kununu account or are not currently logged in to Kununu. This information (including your IP address) is transmitted from your browser directly to a Kununu server in Europe and stored there.
If you are logged in to Kununu, Kununu can associate your visit to our website directly with your Kununu account. If you interact with the plugins, the corresponding information is also transmitted directly to a Kununu server and stored there. The information is also published on Kununu and displayed to your Kununu contacts.
Kununu may use this information for the purposes of advertising, market research and for tailoring Kununu pages to user needs. For this purpose, Kununu creates usage, interest and relationship profiles, e.g. to evaluate your use of our website with regard to the advertisements displayed to you on Kununu, to inform other Kununu users about your activities on our website and to provide other services related to the use of Kununu.
If you do not want Kununu to associate the data collected via our website with your Kununu account, you must log out of Kununu before visiting our website. The purpose and scope of data collection and the further processing and use of the data by Kununu as well as your related rights and settings options to protect your privacy can be found (in German) in Privacy policy kununu's privacy policy: http://www.kununu.com/info/agb. 

Stepstone
We use the services of the recruiting platform Stepstone. The service provider is Stepstone Deutschland GmbH, Völklinger Strasse 1, 40219 Düsseldorf, Germany. You can find out more about data protection at Stepstone at https://www.stepstone.de/e-recruiting/rechtliches/datenschutzerklarung/

XING
We have a profile on XING. The operating company of XING is XING AG, Dammtorstrasse 29-32, 20354 Hamburg, Germany. For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn
We have a profile on LinkedIn. The operating company of LinkedIn is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy

17. Other functions and content
If we use additional functions and content (e.g. map or font services) on our website, by means of which we or the provider of the services process personal data from you, we will inform you about this here.

unpkg
We use a service on our website provided by Npm, Inc, 1999 Harrison Street #1150, CA 94612 Oakland, U.S.A.: "unpkg". unpkg enables shorter and more stable loading times of data and information even with higher access rates. The legal basis for the data processing is Art. 6 (1) (a) GDPR. The legitimate interest is to ensure the functionality of our website. For more information about unpkg, see the provider's privacy policy at https://www.npmjs.com/policies/privacy. You can prevent unpkg collecting and processing your data by disabling the execution of script code in your browser or installing a script blocker in your browser (you can find one e.g. at www.noscript.net or  www.noscript.net or www.ghostery.com).

18. Recipients and data transfer
We have bundled certain data processing operations within our company. These can be used centrally by individual areas of our company, e.g. for processing inquiries. External contractors and service providers (e.g. logistics companies or IT service providers) may also be used to ensure our responsibilities are met and to fulfill contracts. In addition, data may go to recipients to whom we are obligated or entitled to disclose data due to contractual or legal obligations or due to your consent.

19. Data transfer to third countries
Data is only transferred to third countries (countries outside the EU and the European Economic Area EEA) if this is necessary for the execution of a contract/order/business relationship, including the initiation thereof, or if it is permissible due to our legitimate interest or your consent, and only in compliance with the data protection requirements stipulated for this purpose.

Note on data transfer to the U.S.A
Services from companies based in the U.S.A. are integrated into our website or we link to these services. In connection with the use of these services, personal data may be transmitted to U.S. servers of the respective service providers. 

As part of the so-called "Data Privacy Framework" (DPF), the EU Commission has recognized the level of data protection for certain companies from the U.S.A. as secure within the framework of the adequacy decision of July 10, 2023. The list of certified companies and further information about the DPF can be found on the website of the U.S. Department of Commerce at www.dataprivacyframework.gov. In this privacy policy, for the respective services we inform you which of the service providers we use are certified under the DPF.

20. Deletion of your data
We process your personal data only for as long as this is necessary to fulfill the respective purpose or until there is no longer a legal basis for processing (e.g. revocation of consent to data processing). In doing so, we observe the existing statutory retention and storage periods. 

21. Your rights 
You have the following rights:

• to gain access free of charge to the personal data concerning you that are stored by us (right to access)
• to obtain confirmation whether we are processing personal data concerning you (right to confirmation)
• to request us to immediately delete the personal data concerning you if the processing is no longer required and the other requirements for the erasure pursuant to GDPR have been fulfilled (right to erasure)
• to the immediate rectification and completion of inaccurate personal data concerning (right to rectification)
• to request restriction of processing of your personal data (right to restriction of processing)
• to receive the personal data concerning you in a structured, commonly used and machine-readable format (right to data portability)
• to object to the processing of your personal data (right to object)
• You have the right not to be subject to a decision that is based solely on an automated processing of data, including profiling, and that may have a legal effect on you or any similarly significant restrictive effect (right to individual decision-making).
• to revoke your consent to the processing of your personal data with effect for the future at any time.
• to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is in violation of GDPR (right to lodge a complaint). 
  
  For more information on your rights, please contact our Data Protection Officer.

22. Changes to our privacy policy
In order to ensure our privacy policy always complies with the current statutory requirements, we reserve the right to make changes at any time. This also applies in the event that the privacy policy needs to be adapted due to new or revised offerings, for example new service offerings. The new privacy policy will then take effect the next time you visit our site.

23. Information for customers, suppliers and other third parties according to Art. 13 / Art. 14 GDPR
This information can be found in this PDF.