Data Privacy Notice of HAURATON GmbH & Co. KG

HAURATON GmbH & Co. KG takes the protection of personal data very seriously. We would like you to know when we store what data, and how we use this data. We are subject to the provisions of the European General Data Protection Regulation (GDPR) and the supplementary provisions of the Bundesdatenschutzgesetz (BDSG) [German Federal Data Protection Act (GFDPA)]. To ensure that the provisions concerning data protection are observed by us as well as by our external service providers, we have taken suitable technical and organisational measures.

This Data Privacy Notice applies to our online presences. These include websites, features and content as well as our external online presences, for example in social media. This general Data Privacy Notice likewise serves to inform you of any further processing of your personal data and our compliance with the duties to inform you.

The terminology used in this Data Privacy Notice, for example controller or personal data, are used as defined in the GDPR. For reasons of readability, and therefore also for the purposes of comprehensible communication of information, we generally refrain from naming individual articles, paragraphs or the like.

The controller within the meaning of the GDPR and other national data protection laws of the Member States as well as other provisions of data protection law is

HAURATON GmbH & Co. KG
Werkstraße 13
76437 Rastatt
Germany
Telephone: +49 7222 958 0
Fax: +49 7222 958 100
info@hauraton.com

The controller has appointed a data protection officer. His contact details are:

Pascal Kohler
datenschutz@hauraton.com

For questions, suggestions or comments relating to data protection, and for enforcing your rights set out below, please contact our data protection officer.

As a rule, processing of personal data is not permitted under the provisions of data protection law, unless there is a legally permissible reason for allowing this. We are obliged to inform you of the legal bases of the data processing.

Where we obtain your consent to processing operations concerning personal data, this consent shall serve as the legal basis.

Where the processing of personal data is necessary for the performance of a contract to which you are party, the performance of the contract shall serve as the legal basis. This shall also apply to processing operations necessary for taking steps prior to entering into a contract.

Where processing of personal data is necessary for compliance with a legal obligation to which our company is subject, this shall serve as the legal basis.

Where vital interests of the data subject or of another natural person make it necessary to process personal data, this shall serve as the legal basis.

Where the processing is necessary for the protection of a legitimate interest pursued by our company or by a third party, and these interests and your fundamental rights and freedoms do not override the first-mentioned interest, this shall serve as the legal basis for the processing.

Generally, our service is aimed at adults. Persons under the age of 16 are not permitted to transfer personal data to us without the consent of their parents or legal guardians.

We shall erase or block your personal data as soon as the purpose for their storage ceases to exist. However, storage may extend beyond this period if this is necessary under legal provisions to which we are subject. This concerns, for example, data that is required to be stored for reasons relating to commercial or fiscal law, for example delivery notes or invoice data.

Your data shall be blocked or erased if a storage period prescribed by these provisions expires, unless it is necessary to continue storing the data for the purpose of entering into or performing a contract.

Within our company, we shall ensure that your data is received only by the persons who need this data for compliance with the contractual and statutory duties.

For processing your data, we shall sometimes use carefully selected external service providers. Where data is passed on to service providers as part of such commissioned processing, this shall take place on the basis of the provisions of the GDPR. Our processors are carefully selected, are bound by our instructions and are monitored at regular intervals. We only appoint processors who offer adequate safeguards that suitable technical and organisational measures will be implemented in such a way that the processing meets the requirements of the GDPR and the GFDPA and ensures the protection of your rights.

As a rule, we shall not pass on any personal data to third parties without your express consent. Where, in the course of the processing, we nevertheless disclose or transfer your data to third parties or otherwise grant third parties access to your data, this shall also take place exclusively on the basis of one of the aforementioned legal bases.

For example, we shall transfer data to payment service providers or suppliers if this is necessary for the performance of the contract. Where we are obliged by law or a court order to transfer your data, we shall transfer your data to the respective entities entitled to the information.

The GDPR ensures the same high level of data protection within the European Union. When selecting our service providers and cooperation partners, we shall therefore, if your personal data is to be processed, focus on European partners where possible. Only in exceptional cases shall we have your data processed outside of the European Union in the course of using third party services.

We shall allow your data to be processed in a third country only if the particular prerequisites under the GDPR are met. This means that the processing of your data shall then only take place on the basis of special safeguards. These safeguards include ascertainment of a level of data protection equivalent to that of the EU as officially recognised by the EU Commission, observance of officially recognised special contractual obligations (the so-called “standard contractual clauses”), or other agreements between the EU and third countries.

We refrain from using automated decision making or profiling.

Where your personal data is processed, you are the data subject within the meaning of the GDPR. In relation to us, you are entitled to the rights set out below.

To exercise these rights, please contact our data protection officer.

Where the processing of your personal data is based on consent given by you, you have the right to revoke this consent at any time. The lawfulness of the processing carried out until then shall not be affected by revocation.

You have the right to obtain from us confirmation of whether we process personal data concerning you. Where this is the case, you may obtain the following information:

• the purposes of the processing;
• the categories of personal data processed;
• the recipients, or categories of recipients, to whom the personal data have been disclosed or are yet to be disclosed;
• the planned period of storage of the personal data, or, if it is not possible to provide specific information on this, criteria for determining this storage period;
• the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of the processing by us, or a right to object to this processing;
• the existence of a right to complain to a supervisory authority;
• where the personal data are not collected from you, all available information concerning the origin of the data;
• the existence of automated decision making, including profiling, and – at least in those cases – meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

You have the right to to be informed of whether your personal data will be transferred to a third country or to an international organisation. In this context, you have the right to be informed of the suitable safeguards in connection with the transfer.

Within one month of receiving your request for information, we shall provide you with a copy of the personal data that is the subject matter of the processing. If you make such request electronically, we shall make the information available to you in a commonly used electronic format, unless you state otherwise.

You have the right to obtain from us, without delay, rectification of any of your personal data that is incorrect. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed.

You have the right to obtain from us, without delay, erasure of personal data concerning you, and we shall be obliged to erase personal data without delay where one of the following grounds applies:

• The personal data is no longer needed for the purposes for which it was processed.
• You revoke your consent on which the processing was based, and there is no other legal basis for the processing.
• You object to the processing, and there are no overriding legitimate grounds for the processing.
• The personal data has been unlawfully processed.
• Erasure of the personal data is necessary in order to comply with a legal obligation under Union or Member State law.
• The personal data was collected in relation to an offer of information society services.
• Where we have made the personal data concerning you public, and we are obliged to erase this personal data, we shall, taking account of the available technology and the cost of implementation, take appropriate measures, also of a technical nature, to inform controllers processing the personal data that you have requested the erasure by such controllers of any links to, or copies or replications of, that personal data.

The right to be forgotten shall not apply where the processing is necessary:

• for exercising the right to freedom of expression or to information;
• for compliance with a legal obligation to which we are subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in us;
• for reasons of public interest in the area of public health
• for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes, insofar as the right to erasure is likely to render impossible or seriously impair the attainment of the objectives of that processing; or
• for the assertion, exercise or defence of legal claims.

You have the right to obtain from us restriction of the processing of your personal data where one of the following applies:You contest the accuracy of the personal data, for a period enabling us to verify the accuracy of the personal data;

• the processing is unlawful, and, instead of erasure, you obtain restriction of the use of the personal data;
• we no longer need the personal data for the purposes of the processing, but the personal data is required by you for the assertion, exercise or defence of legal claims; or
• you have objected to the processing pending the verification of whether our legitimate grounds override those of yours.
• Where processing has been restricted under the aforementioned prerequisites, such personal data shall, with the exception of storage, only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

Where processing has been restricted under the aforementioned prerequisites, we shall inform you before the restriction is lifted.

You have the right to receive in a structured, commonly used and machine-readable format your personal data that you have provided to us, and you have the right to transfer this data to another controller without hindrance from us, where the processing is based on consent or on a contract and is carried out by automated means.

In exercising your right to data portability, you shall have the right to have the personal data transferred directly by us to another controller, insofar as this is technically feasible. Exercise of the right to data portability shall not affect the right to erasure (“right to be forgotten”). That right shall not apply to processing necessary for the performance of a task entrusted to us and carried out in the public interest or in exercise of official authority.

You have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data that is based on a balancing of interests. This shall also apply to any profiling based on these provisions. We shall no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes, you shall have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this shall also apply to profiling to the extent that profiling is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data shall no longer be processed for such purposes.

In the context of the use of information society services, you may exercise your right to object by automated means using technical specifications.

You have the right not to be subject to a decision that is based solely on automated processing, including profiling, and produces legal effects concerning you or similarly significantly affects you. This shall not apply where the decision:

• is necessary for entering into, or the performance of, a contract between you and us;
• is permissible under Union or Member State law to which we are subject and which lays down appropriate measures for safeguarding your rights and freedoms and legitimate interests; or
• is based on your express consent.

We shall take appropriate measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your own point of view and to contest the decision.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of your personal data infringes the GDPR.

Generally, you can use our online presence without disclosing your identity. In this section, we shall explain to you when, and in what context, we process data during use of our online presences, what services offered by service providers and cooperation partners we have implemented, how these function, and what happens to your data.

Where you use our websites only for information purposes, i.e. you do not register for a service, enter into a contract with us or otherwise disclose information to us, we shall only collect the personal data transmitted to our servers by your browser.

When our websites are accessed, we collect the following data that we technically need in order to be able to display our websites and to ensure stability and security:

• the visitor’s IP address
• the date and time of the request
• the content of the request (specific page)
• access status/HTTP status code
• the respective volume of data transmitted
• the website from which the request came
• the visitor’s operating system
• the language and version of the browser software.

This data is temporarily stored in our system’s log files for a period of 14 days. Storage beyond this period is possible; in these cases, however, the IP addresses are truncated or masked to prevent any association with the accessing client. The log files shall not be stored together with other personal data concerning you in this context. The legal basis for these processing operations is our legitimate interest.

Since the collection of the data for displaying the websites and storing the data in log files is absolutely essential for the operation of our websites and the maintenance of IT security, you have no possibility of objecting in this respect.

In order to optimally protect your data transmitted, we use so-called transport encryption. In order to ensure the security of your data during the transfer process, we use an SSL/TLS encryption method in accordance with the latest state of the art technology.

When you use our websites and visit our Internet presences, cookies will be stored on your device in addition to the aforementioned data. Cookies are small text packages that may be sent by a website to the browser and be stored and sent back by the browser. Cookies can be used to store various details, which are read by the entity that has placed the cookie. They generally contain a characteristic string of characters (ID) that allows unique identification of the browser in the event of renewed access to the website or a change of page. They are primarily used to make our online presence more user-friendly and more effective overall. The user data collected in cookies is pseudonymised by means of technical precautions, which generally makes it no longer possible to associate the data with the accessing user. Where identifiability is possible, for instance in the case of a login cookie whose session ID is necessarily linked to the user’s account, we point this out at the appropriate point.

We use different types of cookies:

• So-called “session cookies” are cookies that are deleted after you leave our online presence and close the browser. In the case of such cookies, language settings or the content of a shopping basket are stored, for example.
• “Permanent cookies” remain stored even after the browser has been closed. For example, the login status or entered search terms can be saved. We use such cookies for, among other things, range measurement or marketing purposes. Persistent cookies are automatically deleted after a pre-specified period, which may vary depending upon the cookie. However, you can delete these cookies at any time using your browser, among other methods.

In addition to so-called “first-party cookies” placed by us as the controller responsible for the data processing, “third-party cookies” offered by other providers are also used.

• “First-party cookies” are placed by us as the controller.

The legal basis for the processing of your personal data in this respect is our legitimate interest.

• External service providers that, for example, perform web tracking or range measurements for us may likewise place cookies.

The legal basis for the processing of your personal data is your consent.

For a multitude of services, a general objection to the use of cookies used for marketing purposes can be declared via the EU website https://www.youronlinechoices.com/de/ or the US website https://www.aboutads.info/choices/. Furthermore, you can make appropriate configurations in your browser settings and, for example, reject the acceptance of “third party cookies” or all cookies or activate the “Do Not Track” option. However, this may mean that not all features of our online presences are available to you.

Google Tag Manager
Cookie name: _gid_dc_gtm
Group: necessary

Google Analytics
Cookie name: _gs_gat
Group: statistics / usage analysis

LinkedIn Insight
Cookie name: _UserMatchHistory_bcookie_bscookie_lang_lidc
Group: Statistics / usage analysis

Google Ads:
Cookie name: DSID IDE SEARCH_SAMESITE 1P_JAR UULE NID APISID, HSID, SAPISID, SID and SSID cookies SIDCC
Group: marketing

Facebook
Cookie name: gr_fbp
Group: Marketing

Youtube
Cookie name: __Secure-SSID __Secure-3PSID SIDCC LOGIN_INFO YSC APISID HSID VISITOR_INFO1_LIVE __Secure-3PAPISID SSID __Secure-APISID __Secure-HSID SAPISID PREF SID
Group: Marketing

Our website uses Google Tags, a service from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter called “Google”). The Google Tag Manager is a solution that enables us to manage website tags via an interface. Tags are small code elements on our website which, among other things, serve to measure traffic and visitor behaviour.

The Tag Manager tracks a series of tags and triggering rules that determine when these tags should be used on our website. When you visit our website, the current tag configuration will be sent to your browser. It will contain instructions as to which tags are to be triggered. The Tag Manager ensures the triggering of tags that, in turn, may possibly collect data. The Tag Manager itself does not access this data, as it is operated via a cookie-less domain and does not collect personal data. If deactivation has been carried out at the domain or cookie level, this will remain in place for all tracking tags implemented with Google Tag Manager.

Google itself collects information on how the service is used, and what tags are implemented in what way. According to Google, this data is used to improve, maintain, protect and further develop the service.

Further information can be found in the usage guidelines for Google Tag Manager and Google’s data privacy statement.

Insofar as you have declared your consent, Google Analytics will be used on this website. This is a web analysis service from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter called “Google”). This makes it possible to associate data, sessions and interactions across multiple devices with a pseudonymous user ID and thus analyse a user’s activities across devices.

Google Analytics uses cookies that enable your use of the website to be analysed. Normally, the information generated by such cookie concerning your use of this website will be transferred to a Google server in the USA and be stored there. If IP anonymisation has been activated on this website, your IP address will, however, be truncated beforehand by Google within Member States of the European Union or the European Economic Area. Please note that IP anonymisation has been added to Google Analytics on this website to ensure anonymised collection of IP addresses. The IP address transmitted by your browser within Google Analytics will not be combined with other Google data.

• frequency of page views
• number of users
• bounce rate (page is closed again after a page view)
• session duration (average duration of all users)
• country from which the website was accessed
• use of website features
• which page is accessed, and how often
• the website from which the user came
• booking conversion rate (how many of the website’s users book a service)
• what region the user is from
• the device and device category from which the user visits our website

Google will, on our behalf, use this information in order to evaluate your use of the website, put together reports on the activities on our website and provide us with other services relating to usage.

The legal basis for the use of Google Analytics is your consent given voluntarily.

Further information relating to terms of use and data privacy at Google can be found here and here.

Google is the recipient of the data collected.

The data that we send and that is linked to cookies, user identifiers (e.g. user IDs) or marketing IDs are automatically erased after 14 months. The erasure of data which retention period has expired takes place automatically once a month.

Our website uses the web analysis and optimisation service “Google Optimize” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter “Google Optimize”). To enhance the attractiveness, content and functionality of our website, we use the Google Optimize service by displaying new features and content to a percentage of our users and statistically evaluating the change of use. Google Optimize is a sub-service of Google Analytics (see subsection “Google Analytics”). Google Optimize uses cookies that enable your use of our website to be optimised and analysed. Normally, the information generated by these cookies concerning your use of our website will be transferred to a Google server in the USA and be stored there. In this respect, we use Google Optimize with activated IP anonymisation so that your IP address is truncated beforehand by Google within Member States of the European Union or the European Economic Area. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and be truncated there. Google will use this information in order to evaluate your use of our website, put together reports on the optimisation test and the related website activities and provide us with other services relating to website and Internet usage. You can prevent the storage of these cookies by setting your Internet browser accordingly. Moreover, by downloading and installing the browser plug-in available at the following link, you can prevent data (including your IP address) generated by such cookie relating to your use of our website from being collected and transmitted to Google and being processed by Google: https://tools.google.com/dlpage/gaoptout?hl=de. Further information on the collection and processing of data by Google can be gathered from Google’s data privacy notice accessible at http://www.google.com/policies/privacy.

Insofar as you have declared your consent, Google Ads along with conversion tracking will be used on this website. This is a service from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter called “Google”). Google Ads is a web analysis service. We use the conversion tracking for the targeted advertising of our service:

If you click on an advertisement placed by Google, the conversion tracking that we use will save a cookie on your device. If you visit a specific page of our Internet presence, both we and Google will be able to evaluate that you have clicked on one of our advertisements placed on Google, and that you have then been redirected to our Internet presence.

The information collected in this way is used by Google to provide us with statistics concerning visits to our Internet presence. In addition, we thus receive information about the number of users who have clicked on our advertisement(s) as well as about the pages on our Internet presence that are subsequently visited. The information serves to generate conversion statistics for ads customers who have opted for conversion tracking. The customers, i.e. we as the website operator, receive information on the total number of users who have clicked on their advertisement and been redirected to a page containing a conversion tracking tag. However, they do not receive information that enables users to be personally identified.

The legal basis for the use of Google Analytics is your consent given voluntarily.

Google is the recipient of the data collected.

The cookies stored on your device will have a lifespan of up to 24 months.

Insofar as you have declared your consent, Facebook Pixel will be used on this website. This is a service from Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter called “Facebook“). Facebook Pixel enables Facebook to display our Facebook ads only to Facebook users who have visited our website, especially those who have shown interest in our online presence or certain topics or products. Facebook Pixel makes it possible to check whether a user was redirected to our website after clicking on our Facebook ads. We use Facebook Pixel for marketing and optimisation purposes, particularly in order to place on Facebook advertisements that are relevant and interesting for you and to thus improve our service, make it more interesting for you as a user and avoid nuisance advertising.

If you are logged into Facebook with your user account, your visit to our website will be noted in your user account. The data collected about you is anonymous to us and therefore does not allow us to draw any conclusions about your identity. We have no influence over the scope or further use of the data processed by Facebook as a result of the use of Facebook Pixel. If you have a user account with Facebook and are registered, Facebook may associate your visit with your user account. You can deactivate the remarketing feature “Custom Audiences” in the Ads Settings section in your Facebook account. Even if you are not registered with Facebook or have not logged in, it is possible that Facebook may find out and store your IP address and possibly other identifying features.

The legal basis for the use of Facebook Pixel is your consent given voluntarily.

Facebook is the recipient of the data collected.

The cookies stored on your device will have a lifespan of up to 24 months.

Insofar as you have declared your consent, Twitter conversion tracking will be used on this website. This is a service from Twitter International Company, Gordon House, One Cumberland Place, Fenian Street, Ireland, (hereinafter called “Twitter”). Twitter conversion tracking is a remarketing feature. We use the conversion tracking for the targeted advertising of our service:

With the aid of this feature, we can target you on the Twitter platform with advertising based on your interests. Twitter uses so-called “tags” for this. Via such tag, visits to our website as well as usage data are recorded in pseudonymous form. If you subsequently visit Twitter, ad impressions will be displayed to you on the basis of your interests. Twitter will thus be informed by your browser that our website has been accessed from your device.

As a result of the integration of tags, Twitter will be informed that you have accessed the corresponding website. We have no influence over the scope of the data transmitted or their further processing by Twitter: Where you are registered with a Twitter service, Twitter may associate your visit with your account. Even if you are not registered with Twitter or have not logged in, it is possible that the provider may find out and store your IP address and other identifying features. The information generated by these tags concerning your use of our services will be transferred to a Twitter server in the USA and be stored there.

If you nevertheless do not wish to have Twitter’s remarketing feature, you can deactivate this feature in the Ads Settings section of your Twitter account.

The legal basis for the use of Twitter conversion tracking is your consent given voluntarily.

Twitter is the recipient of the data collected.

The cookies stored on your device will have a lifespan of up to 60 months.

We use LinkedIn conversion tracking from LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn conversion tracking is a retargeting and analysis tool supported by the LinkedIn Insight Tag. The LinkedIn Insight Tag enables us to collect data about visits to our website, including the URL, referrer URL, IP address, device and browser characteristics as well as a timestamp. These data are encrypted, the IP addresses are truncated, and the members’ unique IDs are removed within seven days in order to pseudonymise the data.

LinkedIn does not share personal data with us, but only provides summarised reports about the website’s target audience and ad performance. LinkedIn additionally offers retargeting for website visitors so that we can use this data to display targeted advertising outside of our website without the member being identified.

The legal basis for the use of LinkedIn Insight Tag is your consent given voluntarily

Further information on data protection at LinkedIn can be found here.

LinkedIn is the recipient of the data collected.

The remaining pseudonymised data is erased within 24 months.

You can specifically opt out of the LinkedIn conversion tracking by placing an opt-out cookie, which will remain on your device until you delete cookies. To this end, you can deactivate the LinkedIn cookie at this link. LinkedIn members can control the use of their personal data for marketing purposes in their account settings.

We use Google Maps to display our location. This is a service from Google LLC, Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter called “Google”). To display the map, it is absolutely essential that the IP address be processed by Google.

The cooperation with Google in terms of data protection law is based on a concluded agreement on joint responsibility, which can be accessed here.

In all other respects, you enter into a user relationship with Google directly as a result of using Google Maps.

Further information relating to terms of use and data privacy at Google can be found here.

Google is the recipient of the data collected.

The data sent by us is automatically erased after 24 months. The erasure of data whose retention period has expired takes place automatically once a month.

To protect our Internet presence, we use the service reCAPTCHA from the company Google Inc. (Google) at points where you can enter data. The prompt serves to differentiate whether an entry was made by a person or maliciously by means of automated, machine-based processing. The prompt includes transmission, to Google, of the IP address and possibly additional data required by Google for the reCAPTCHA service. For this purpose, your entry will be transmitted to Google and be further used there. In Member States of the European Union or the European Economic Area, your IP address will however be truncated by Google beforehand. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and be truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. Your IP address transmitted by your browser within reCAPTCHA will not be combined with other Google data.

We offer online presences on various platforms in order to be able to provide information there and communicate with you.

We have no influence over the processing of personal data by the respective platform operator. When you access our presences there, cookies will usually be stored in your browser by the platform operator. Your usage behaviour or interests will be saved in these cookies for market research and advertising purposes.

The user profiles obtained in this way – usually across multiple devices – will be used by the platform operators to display personalised advertising to you. Persons not registered as users on the respective platform may also be data subjects of the data processing. Under certain circumstances, your data may be processed outside of the area of the European Union, which may make it difficult to enforce your rights. When selecting such platforms, however, we make sure that the operators are committed to compliance with the EU data protection standards.

The processing of your personal data collected when you access one of our social media presences will take place on the basis of our legitimate interests in the diverse public image of our company and the use of an effective source of information as well as in communication with you.

Detailed information on data processing in connection with the use of our presences on these platforms, opt-out options and the assertion of rights of access to personal data can be found in the data privacy statements of the corresponding platform operator.

Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

The processing is based on an agreement on the joint processing of personal data in accordance with the provisions of the GDPR.

The provider’s data privacy notice

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The provider’s data privacy notice

Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA

The provider’s data privacy notice

Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

The provider’s data privacy notice

LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

The provider’s data privacy notice

XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)

The provider’s data privacy notice

We offer you the option of subscribing to our email newsletter free of charge. We shall only send this newsletter with your consent. If you register for a newsletter, the data from the input mask (name and email address) will be sent to us and be stored for as long as the newsletter subscription is active.

Your consent to the processing of this data for the purpose of sending the newsletter will be obtained, and reference will be made to this Data Privacy Notice. For the registration process, we use the so-called “double opt-in procedure”. Following registration, you will receive an email in which you will have to click on a link in order to confirm your registration. This prevents unauthorised third parties from being able to register using your email address.

We shall record the registration process in order to be able to prove the process in accordance with the legal requirements. In this respect, the IP address of the accessing device as well as the date and time of registration will be stored. The data provided by you will be stored for as long as the newsletter subscription is active.

You can cancel the subscription at any time. For this purpose, every newsletter contains a corresponding unsubscribe link. This will likewise enable you to withdraw your consent. The legal basis for the processing of your data is your voluntarily given consent to receiving the newsletter.

If you acquire goods or services from us and provide your email address when doing so, we reserve the right to use this email address for sending newsletters along with direct marketing for similar goods or services of ours. This serves to protect our – on balance – overriding legitimate interests in the promotional targeting of our customers. You may opt out of this use of your data at any time by sending a message using the contact options stated below or by way of the unsubscribe link in the promotional email without incurring for this any charges other than the basic transmission charges. Where the newsletter is sent as a result of the sale of goods or services, we shall invoke the provisions of the Gesetz gegen den unlauteren Wettbewerb (UWG) [Act Against Unfair Competition].

If you make an enquiry to us, for example by using the contact form, we shall, in order to answer your contact request, process your personal data for:

• processing your matter communicated in the contact form
• processing your service request
• processing your return
• telephone and written (email) queries
• providing information on products and services.

Your data shall not be used by us for automated decision making or for profiling.

In the context of an application to us, the data that you provide – such as your contact details and qualifications – will be used exclusively for processing the application procedure.

Your data will be passed on internally to the divisional managers responsible. We shall process your personal data for the purpose of your application for a job to the extent that this is necessary for the decision on the establishment of an employment relationship with us.

Furthermore, we may process personal data about you to the extent that this is necessary to defend against legal claims asserted against us in connection with the application process.

As a rule, your data will be deleted 3 months after completion of the application process, unless otherwise agreed upon with the applicant (see also Inclusion in the applicant pool). If your application is followed by the conclusion of an employment contract, the data will then be included in the personnel files.

We shall store your personal data for as long as necessary for making a decision on your application. If an employment relationship between you and us does not materialise, we may also continue to store data to the extent that this is necessary for defending against possible legal claims. In this respect, the application documents will be deleted two months after notification of the decision to reject your application, unless retention for a longer period is required in connection with legal disputes.

We shall be happy to include your application in an applicant pool. This requires your consent. You can give this consent by activating the corresponding option before you send your application.

If your application documents in the applicant pool are not used by us within one year, your application documents shall be automatically deleted.

No automated individual decision making takes place; i.e. the decision on your application shall not be based solely on automated processing.

This Data Privacy Notice will be adapted from time to time. These adaptations are made if, for example, changes arise due to technical progress, legal requirements or other factors.

Last updated: June 2020