Private policy

1. Data protection at a glance

Gene­ral infor­ma­ti­on
The fol­lo­wing infor­ma­ti­on pro­vi­des a simp­le over­view of what hap­pens to your per­so­nal data when you visit this web­site. Per­so­nal data is all data with which you can be per­so­nal­ly iden­ti­fied. Detail­ed infor­ma­ti­on on the sub­ject of data pro­tec­tion can be found in our pri­va­cy poli­cy included below this text.

Data recor­ding on this web­site
Who is respon­si­ble for data coll­ec­tion on this web­site?
Data pro­ces­sing on this web­site is car­ri­ed out by the web­site ope­ra­tor. You can find their cont­act details in the “Infor­ma­ti­on on the con­trol­ler” sec­tion in this pri­va­cy poli­cy.

How do we record your data?
On the one hand, your data is coll­ec­ted when you pro­vi­de it to us. This may, for exam­p­le, be data that you enter in a cont­act form. Other data is recor­ded auto­ma­ti­cal­ly or with your con­sent by our IT sys­tems when you visit the web­site. This is pri­ma­ri­ly tech­ni­cal data (e.g. inter­net brow­ser, ope­ra­ting sys­tem or time of the page view). This data is coll­ec­ted auto­ma­ti­cal­ly as soon as you enter this web­site.

What do we use your data for?
Some of the data is coll­ec­ted to ensu­re that the web­site is pro­vi­ded wit­hout errors. Other data may be used to ana­ly­se your user beha­viour.

What rights do you have with regard to your data?
You have the right to recei­ve infor­ma­ti­on about the ori­gin, reci­pi­ent and pur­po­se of your stored per­so­nal data free of char­ge at any time. You also have the right to request the rec­ti­fi­ca­ti­on or era­su­re of this data. If you have given your con­sent to data pro­ces­sing, you can with­draw this con­sent at any time for the future. You also have the right to request the rest­ric­tion of pro­ces­sing of your per­so­nal data under cer­tain cir­cum­s­tances. Fur­ther­mo­re, you have the right to lodge a com­plaint with the com­pe­tent super­vi­so­ry aut­ho­ri­ty.
You can cont­act us at any time if you have fur­ther ques­ti­ons on the sub­ject of data pro­tec­tion.

Ana­ly­sis tools and tools of third-par­ty pro­vi­ders
When you visit this web­site, your sur­fing beha­viour can be sta­tis­ti­cal­ly eva­lua­ted. This is main­ly done with so-cal­led ana­ly­sis pro­grams.
Detail­ed infor­ma­ti­on on the­se ana­ly­sis pro­grams can be found in the fol­lo­wing pri­va­cy poli­cy.

2. Hosting

We host the con­tent of our web­site with the fol­lo­wing pro­vi­der: Hetz­ner.
The pro­vi­der is Hetz­ner Online GmbH, Indus­trie­str. 25, 91710 Gun­zen­hau­sen (her­ein­af­ter refer­red to as Hetz­ner).
Details can be found in Hetz­ner’s pri­va­cy poli­cy: https://www.hetzner.com/de/rechtliches/datenschutz.

The use of Hetz­ner is based on Art. 6 para. 1 lit. f GDPR. We have a legi­ti­ma­te inte­rest in ensu­ring that our web­site is dis­play­ed as relia­bly as pos­si­ble. If a cor­re­spon­ding con­sent has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG (Ger­man Tele­com­mu­ni­ca­ti­on Digi­tal Ser­vices Data Pro­tec­tion Act), inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on in the user’s ter­mi­nal device (e.g. device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be with­drawn at any time.

Pro­ces­sing
We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the abo­ve-men­tio­ned ser­vice. This is a con­tract pre­scri­bed by data pro­tec­tion law, which ensu­res that the pro­ces­sor pro­ces­ses the per­so­nal data of our web­site visi­tors only in accordance with our ins­truc­tions and in com­pli­ance with the GDPR.

3. General notes and mandatory information

Data pro­tec­tion
The ope­ra­tors of the­se pages take the pro­tec­tion of your per­so­nal data very serious­ly. We tre­at your per­so­nal data con­fi­den­ti­al­ly and in accordance with the sta­tu­to­ry data pro­tec­tion regu­la­ti­ons and this pri­va­cy poli­cy.
When you use this web­site, various per­so­nal data is coll­ec­ted. Per­so­nal data is data that can be used to iden­ti­fy you per­so­nal­ly. This pri­va­cy poli­cy explains what data we coll­ect and what we use it for. It also explains how and for what pur­po­se this is done.
We would like to point out that data trans­fer over the inter­net, e.g. when com­mu­ni­ca­ting by email, may be sub­ject to secu­ri­ty vul­nerabi­li­ties. Com­ple­te pro­tec­tion of data against access by third par­ties is not pos­si­ble.

Note on the con­trol­ler
The con­trol­ler respon­si­ble for data pro­ces­sing on this web­site is
Visa­ll GmbH
Hart­mat­ten­stra­ße 19
79539 Lör­rach
Ger­ma­ny
Pho­ne: +49 7621 91490–0
Email: service@visall.de

The con­trol­ler is the natu­ral or legal per­son who alo­ne or joint­ly with others deter­mi­nes the pur­po­ses and means of the pro­ces­sing of per­so­nal data (e.g. names, email addres­ses, etc.).

Sto­rage peri­od
Unless a more spe­ci­fic sto­rage peri­od has been spe­ci­fied in this pri­va­cy poli­cy, your per­so­nal data will remain with us until the pur­po­se of the data pro­ces­sing no lon­ger appli­es. If you assert a jus­ti­fied request for era­su­re or with­draw your con­sent to data pro­ces­sing, your data will be dele­ted unless we have other legal­ly per­mis­si­ble reasons for sto­ring your per­so­nal data (e.g. reten­ti­on peri­ods under tax or com­mer­cial law); in the lat­ter case, dele­ti­on will take place after the­se reasons no lon­ger app­ly.

Gene­ral infor­ma­ti­on on the legal basis for data pro­ces­sing on this web­site
If you have con­sen­ted to data pro­ces­sing, we pro­cess your per­so­nal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, inso­far as spe­cial cate­go­ries of data are pro­ces­sed in accordance with Art. 9 para. 1 GDPR. In case of express con­sent to the trans­fer of per­so­nal data to third count­ries, data pro­ces­sing is also car­ri­ed out on the basis of Art. 49 para. 1 lit. a GDPR. If you have con­sen­ted to the sto­rage of coo­kies or access to infor­ma­ti­on in your end device (e.g. via device fin­ger­prin­ting), the data pro­ces­sing is also car­ri­ed out on the basis of Sec­tion 25 para. 1 TDDDG. Con­sent can be with­drawn at any time. If your data is requi­red for the per­for­mance of the con­tract or for the imple­men­ta­ti­on of pre­con­trac­tu­al mea­su­res, we pro­cess your data on the basis of Art. 6 para. 1 lit. b GDPR. Fur­ther­mo­re, we pro­cess your data if this is neces­sa­ry to ful­fil a legal obli­ga­ti­on on the basis of Art. 6 para. 1 lit. c GDPR. Data pro­ces­sing may also be car­ri­ed out on the basis of our legi­ti­ma­te inte­rest in accordance with Art. 6 para. 1 lit. f GDPR. Infor­ma­ti­on on the rele­vant legal bases in each indi­vi­du­al case is pro­vi­ded in the fol­lo­wing para­graphs of this pri­va­cy poli­cy.

Data pro­tec­tion offi­cer
We have appoin­ted a data pro­tec­tion offi­cer.
Visa­ll GmbH
Hart­mat­ten­stra­ße 19
79539 Lör­rach
Ger­ma­ny
Pho­ne: +49 7621 91490–0
Email: service@visall.de

Reci­pi­ents of per­so­nal data
As part of our busi­ness acti­vi­ties, we work tog­e­ther with various exter­nal orga­ni­sa­ti­ons. In some cases, it is also neces­sa­ry to trans­fer per­so­nal data to the­se exter­nal orga­ni­sa­ti­ons. We only pass on per­so­nal data to exter­nal orga­ni­sa­ti­ons if this is neces­sa­ry for the per­for­mance of a con­tract, if we are legal­ly obli­ged to do so (e.g. pas­sing on data to tax aut­ho­ri­ties), if we have a legi­ti­ma­te inte­rest in pas­sing on data in accordance with Art. 6 para. 1 lit. f GDPR or if ano­ther legal basis per­mits the trans­fer of data. When using pro­ces­sors, we only trans­fer our cus­to­mers’ per­so­nal data on the basis of a valid data pro­ces­sing agree­ment. In the case of joint pro­ces­sing, a joint pro­ces­sing agree­ment is con­cluded.

With­dra­wal of your con­sent to data pro­ces­sing
Many data pro­ces­sing ope­ra­ti­ons are only pos­si­ble with your express con­sent. You can with­draw any con­sent you have alre­a­dy given at any time. The lega­li­ty of the data pro­ces­sing car­ri­ed out until the with­dra­wal remains unaf­fec­ted by the with­dra­wal.

Right to object to the coll­ec­tion of data in spe­cial cases and to direct mar­ke­ting (Art. 21 GDPR)
If the data pro­ces­sing is car­ri­ed out on the basis of Art. 6 para. 1 lit. E or F GDPR, you have the right to object to the pro­ces­sing of your per­so­nal data at any time for reasons ari­sing from your par­ti­cu­lar situa­ti­on; this also appli­es to pro­fil­ing based on the­se pro­vi­si­ons. The respec­ti­ve legal basis on which pro­ces­sing is based can be found in this pri­va­cy poli­cy. If you lodge an objec­tion, we will no lon­ger pro­cess your per­so­nal data con­cer­ned unless we can demons­tra­te com­pel­ling legi­ti­ma­te grounds for the pro­ces­sing which over­ri­de your inte­rests, rights and free­doms or the pro­ces­sing ser­ves the estab­lish­ment, exer­cise or defence of legal claims (objec­tion pur­su­ant to Art. 21 (1) GDPR).
Whe­re your per­so­nal data is pro­ces­sed for direct mar­ke­ting pur­po­ses, you have the right to object at any time to pro­ces­sing of per­so­nal data con­cer­ning you for such mar­ke­ting, which includes pro­fil­ing to the ext­ent that it is rela­ted to such direct mar­ke­ting. If you object, your per­so­nal data will no lon­ger be used for the pur­po­se of direct mar­ke­ting (objec­tion pur­su­ant to Art. 21 (2) GDPR).

Right to lodge a com­plaint with the com­pe­tent super­vi­so­ry aut­ho­ri­ty
In the event of inf­rin­ge­ments of the GDPR, data sub­jects have the right to lodge a com­plaint with a super­vi­so­ry aut­ho­ri­ty, in par­ti­cu­lar in the Mem­ber Sta­te of their habi­tu­al resi­dence, place of work or place of the alle­ged inf­rin­ge­ment. The right of appeal exists wit­hout pre­ju­di­ce to any other admi­nis­tra­ti­ve or judi­cial reme­dies.

Right to data por­ta­bi­li­ty
You have the right to have data that we pro­cess auto­ma­ti­cal­ly on the basis of your con­sent or in per­for­mance of a con­tract han­ded over to you or to a third par­ty in a com­mon­ly used, machi­ne-rea­da­ble for­mat. If you request the direct trans­fer of the data to ano­ther con­trol­ler, this will only be done to the ext­ent that it is tech­ni­cal­ly fea­si­ble.

Infor­ma­ti­on, rec­ti­fi­ca­ti­on and era­su­re
Within the frame­work of the appli­ca­ble legal pro­vi­si­ons, you have the right at any time to free infor­ma­ti­on about your stored per­so­nal data, its ori­gin and reci­pi­ents and the pur­po­se of the data pro­ces­sing and, if neces­sa­ry, a right to rec­ti­fi­ca­ti­on or era­su­re of this data. You can cont­act us at any time if you have fur­ther ques­ti­ons on the sub­ject of per­so­nal data.

Right to rest­ric­tion of pro­ces­sing
You have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data. You can cont­act us at any time for this pur­po­se. The right to rest­ric­tion of pro­ces­sing exists in the fol­lo­wing cases:

• If you con­test the accu­ra­cy of your per­so­nal data stored by us, we usual­ly need time to check this. For the dura­ti­on of the review, you have the right to request that the pro­ces­sing of your per­so­nal data be rest­ric­ted.
• If the pro­ces­sing of your per­so­nal data was/is unlawful, you can request the rest­ric­tion of data pro­ces­sing ins­tead of era­su­re.
• If we no lon­ger need your per­so­nal data, but you need it for the exer­cise, defence or asser­ti­on of legal claims, you have the right to request the rest­ric­tion of the pro­ces­sing of your per­so­nal data ins­tead of its era­su­re.
• If you have lodged an objec­tion in accordance with Art. 21 (1) GDPR, a balan­ce must be struck bet­ween your inte­rests and ours. As long as it has not yet been deter­mi­ned who­se inte­rests are over­ri­ding, you have the right to demand the rest­ric­tion of the pro­ces­sing of your per­so­nal data.

If you have rest­ric­ted the pro­ces­sing of your per­so­nal data, this data — apart from its sto­rage — may only be pro­ces­sed with your con­sent or for the estab­lish­ment, exer­cise or defence of legal claims or for the pro­tec­tion of the rights of ano­ther natu­ral or legal per­son or for reasons of important public inte­rest of the Euro­pean Uni­on or of a Mem­ber Sta­te.

SSL or TLS encryp­ti­on
This site uses SSL or TLS encryp­ti­on for secu­ri­ty reasons and to pro­tect the trans­fer of con­fi­den­ti­al con­tent, such as orders or enqui­ries that you send to us as the site ope­ra­tor. You can reco­g­ni­se an encrypt­ed con­nec­tion by the fact that the address line of the brow­ser chan­ges from “http://” to “https://” and by the lock sym­bol in your brow­ser bar.

If SSL or TLS encryp­ti­on is acti­va­ted, the data you trans­fer to us can­not be read by third par­ties.

4. Data recording on this website

Coo­kies
Our Inter­net pages use so-cal­led “coo­kies”. Coo­kies are small data packets and do not cau­se any dama­ge to your ter­mi­nal device. They are eit­her stored tem­po­r­a­ri­ly for the dura­ti­on of a ses­si­on (ses­si­on coo­kies) or per­ma­nent­ly (per­ma­nent coo­kies) on your ter­mi­nal device. Ses­si­on coo­kies are auto­ma­ti­cal­ly dele­ted at the end of your visit. Per­ma­nent coo­kies remain stored on your ter­mi­nal device until you dele­te them yours­elf or they are auto­ma­ti­cal­ly dele­ted by your web brow­ser.
Coo­kies may ori­gi­na­te from us (first-par­ty coo­kies) or from third-par­ty com­pa­nies (so-cal­led third-par­ty coo­kies). Third-par­ty coo­kies enable the inte­gra­ti­on of cer­tain ser­vices from third-par­ty com­pa­nies within web­sites (e.g. coo­kies for pro­ces­sing pay­ment ser­vices).
Coo­kies have various func­tions. Many coo­kies are tech­ni­cal­ly neces­sa­ry, as cer­tain web­site func­tions would not work wit­hout them (e.g. the shop­ping bas­ket func­tion or the dis­play of vide­os). Other coo­kies can be used to ana­ly­se user beha­viour or for adver­ti­sing pur­po­ses.
Coo­kies that are requi­red to car­ry out the elec­tro­nic com­mu­ni­ca­ti­on pro­cess, to pro­vi­de cer­tain func­tions that you have reques­ted (e.g. for the shop­ping bas­ket func­tion) or to opti­mi­se the web­site (e.g. coo­kies to mea­su­re the web audi­ence) (neces­sa­ry coo­kies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless ano­ther legal basis is sta­ted. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the sto­rage of neces­sa­ry coo­kies for the tech­ni­cal­ly error-free and opti­mi­sed pro­vi­si­on of their ser­vices. If con­sent to the sto­rage of coo­kies and com­pa­ra­ble reco­gni­ti­on tech­no­lo­gies has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of this con­sent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); the con­sent can be with­drawn at any time.
You can set your brow­ser so that you are infor­med about the set­ting of coo­kies and only allow coo­kies in indi­vi­du­al cases, exclude the accep­tance of coo­kies for cer­tain cases or in gene­ral and acti­va­te the auto­ma­tic dele­ti­on of coo­kies on clo­sing the brow­ser. If coo­kies are dis­ab­led, the func­tions of this web­site may be rest­ric­ted.
You can find out which coo­kies and ser­vices are used on this web­site in this pri­va­cy poli­cy.

Con­sent with Borlabs Coo­kie
Our web­site uses Borlabs Coo­kie con­sent tech­no­lo­gy to obtain your con­sent to the sto­rage of cer­tain coo­kies in your brow­ser or to the use of cer­tain tech­no­lo­gies and to docu­ment the­se in com­pli­ance with data pro­tec­tion regu­la­ti­ons. The pro­vi­der of this tech­no­lo­gy is Borlabs GmbH, Rüben­kamp 32, 22305 Ham­burg (her­ein­af­ter refer­red to as Borlabs).
When you enter our web­site, a Borlabs Coo­kie is stored in your brow­ser, in which the cons­ents you have given or the with­dra­wal of the­se cons­ents are stored. This data is not pas­sed on to the pro­vi­der of the Borlabs Coo­kie.
The data coll­ec­ted will be stored until you ask us to dele­te it or dele­te the Borlabs Coo­kie yours­elf or until the pur­po­se for sto­ring the data no lon­ger appli­es. Man­da­to­ry sta­tu­to­ry reten­ti­on peri­ods remain unaf­fec­ted. Details on the data pro­ces­sing of Borlabs Coo­kie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.
Borlabs Coo­kie con­sent tech­no­lo­gy is used to obtain the legal­ly requi­red con­sent for the use of coo­kies. The legal basis for this is Art. 6 para. 1 lit. c GDPR.

Ser­ver log files
The pro­vi­der of the pages auto­ma­ti­cal­ly coll­ects and stores infor­ma­ti­on in so-cal­led ser­ver log files, which your brow­ser auto­ma­ti­cal­ly trans­mits to us. The­se are:

• Brow­ser type and brow­ser ver­si­on
• Ope­ra­ting sys­tem used
• Refer­rer URL
• Host name of the acces­sing com­pu­ter
• Time of the ser­ver request
• IP address

This data is not mer­ged with other data sources.
This data is coll­ec­ted on the basis of Art. 6 para. 1 lit. f GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the tech­ni­cal­ly error-free pre­sen­ta­ti­on and opti­mi­sa­ti­on of their web­site — the ser­ver log files must be recor­ded for this pur­po­se.

Cont­act form
If you send us enqui­ries via the cont­act form, your details from the enquiry form, inclu­ding the cont­act details you pro­vi­de the­re, will be stored by us for the pur­po­se of pro­ces­sing the enquiry and in case of fol­low-up ques­ti­ons. We do not pass on this data wit­hout your con­sent.
This data is pro­ces­sed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is rela­ted to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre­con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the enqui­ries addres­sed to us (Art. 6 para. 1 lit. f GDPR) or on your con­sent (Art. 6 para. 1 lit. a GDPR) if this has been reques­ted; the con­sent can be with­drawn at any time.
We will retain the data you pro­vi­de on the cont­act form until you request its dele­ti­on, with­draw your con­sent to its sto­rage, or the pur­po­se for its sto­rage no lon­ger appli­es (e.g. after pro­ces­sing your request). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons — in par­ti­cu­lar reten­ti­on peri­ods — remain unaf­fec­ted.

Enquiry by email, tele­pho­ne or fax
If you cont­act us by email, tele­pho­ne or fax, your enquiry inclu­ding all resul­ting per­so­nal data (name, enquiry) will be stored and pro­ces­sed by us for the pur­po­se of pro­ces­sing your request. We do not pass on this data wit­hout your con­sent.
This data is pro­ces­sed on the basis of Art. 6 para. 1 lit. b GDPR if your enquiry is rela­ted to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre­con­trac­tu­al mea­su­res. In all other cases, the pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of the enqui­ries addres­sed to us (Art. 6 para. 1 lit. f GDPR) or on your con­sent (Art. 6 para. 1 lit. a GDPR) if this has been reques­ted; the con­sent can be with­drawn at any time.
The data you send to us via cont­act requests will remain with us until you ask us to dele­te it, with­draw your con­sent to sto­rage or the pur­po­se for data sto­rage no lon­ger appli­es (e.g. after your request has been pro­ces­sed). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons — in par­ti­cu­lar sta­tu­to­ry reten­ti­on peri­ods — remain unaf­fec­ted.

Regis­tra­ti­on on this web­site
You can regis­ter on this web­site to use addi­tio­nal func­tions on the site. We only use the data ente­red for the pur­po­se of using the respec­ti­ve offer or ser­vice for which you have regis­tered. The requi­red infor­ma­ti­on reques­ted on regis­tra­ti­on must be pro­vi­ded in full. Other­wi­se we will reject the regis­tra­ti­on.
In the event of important chan­ges, for exam­p­le to the scope of the offer or tech­ni­cal­ly neces­sa­ry chan­ges, we will use the email address pro­vi­ded on regis­tra­ti­on to inform you in this way.
The data ente­red on regis­tra­ti­on is pro­ces­sed for the pur­po­se of imple­men­ting the usa­ge arran­ge­ment estab­lished by the regis­tra­ti­on and, if neces­sa­ry, for initia­ting fur­ther agree­ments (Art. 6 para. 1 lit. b GDPR).
The data recor­ded during regis­tra­ti­on will be stored by us for as long as you are regis­tered on this web­site and will then be dele­ted. Sta­tu­to­ry reten­ti­on peri­ods remain unaf­fec­ted.

5. Analysis tools and advertising

Goog­le Tag Mana­ger
We use the Goog­le Tag Mana­ger. The pro­vi­der is Goog­le Ire­land Limi­t­ed, Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.
Goog­le Tag Mana­ger is a tool that allows us to inte­gra­te track­ing or sta­tis­tics tools and other tech­no­lo­gies on our web­site. The Goog­le Tag Mana­ger its­elf does not crea­te any user pro­files, does not store any coo­kies and does not car­ry out any inde­pen­dent ana­ly­ses. It is only used to mana­ge and deploy the tools inte­gra­ted via it. Howe­ver, Goog­le Tag Mana­ger records your IP address, which may also be trans­mit­ted to Goo­g­le’s parent com­pa­ny in the United Sta­tes.
The Goog­le Tag Mana­ger is used on the basis of Art. 6 para. 1 lit. f GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the fast and uncom­pli­ca­ted inte­gra­ti­on and manage­ment of various tools on their web­site. If a cor­re­spon­ding con­sent has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG (Ger­man Tele­com­mu­ni­ca­ti­on Digi­tal Ser­vices Data Pro­tec­tion Act), inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on in the user’s ter­mi­nal device (e.g. device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be with­drawn at any time.
The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every DPF-cer­ti­fied com­pa­ny under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.

Goog­le Ana­ly­tics
This web­site uses func­tions of the web ana­ly­sis ser­vice Goog­le Ana­ly­tics. The pro­vi­der is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.
Goog­le Ana­ly­tics enables the web­site ope­ra­tor to ana­ly­se the beha­viour of web­site visi­tors. The web­site ope­ra­tor recei­ves various usa­ge data, such as page views, length of visit, ope­ra­ting sys­tems used and ori­gin of the user. This data is assi­gned to the user’s respec­ti­ve ter­mi­nal device. The­re is no assign­ment to a user ID.
We can also use Goog­le Ana­ly­tics to record your mou­se and scroll move­ments and clicks, among other things. Goog­le Ana­ly­tics also uses various model­ling approa­ches to sup­ple­ment the coll­ec­ted data records and uses machi­ne lear­ning tech­no­lo­gies for the data ana­ly­sis.
Goog­le Ana­ly­tics uses tech­no­lo­gies that enable the reco­gni­ti­on of the user for the pur­po­se of ana­ly­sing user beha­viour (e.g. coo­kies or device fin­ger­prin­ting). The infor­ma­ti­on coll­ec­ted by Goog­le about the use of this web­site is gene­ral­ly trans­mit­ted to a Goog­le ser­ver in the USA and stored the­re.
The use of this ser­vice is based on your con­sent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Con­sent can be with­drawn at any time.
Data trans­fer to the USA is based on the stan­dard con­trac­tu­al clau­ses of the EU Com­mis­si­on. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every DPF-cer­ti­fied com­pa­ny under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.

Brow­ser Plug­in
You can pre­vent the coll­ec­tion and pro­ces­sing of your data by Goog­le by down­loa­ding and instal­ling the brow­ser plug-in available at the fol­lo­wing link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more infor­ma­ti­on on how Goog­le Ana­ly­tics hand­les user data in Goo­g­le’s pri­va­cy poli­cy: https://support.google.com/analytics/answer/6004245?hl=de.

Pro­ces­sing
We have con­cluded a data pro­ces­sing agree­ment with Goog­le and ful­ly imple­ment the strict requi­re­ments of the Ger­man data pro­tec­tion aut­ho­ri­ties when using Goog­le Ana­ly­tics.

Goog­le con­ver­si­on track­ing
This web­site uses Goog­le con­ver­si­on track­ing. The pro­vi­der is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.
With the help of Goog­le con­ver­si­on track­ing, Goog­le and we can reco­g­ni­se whe­ther the user has car­ri­ed out cer­tain actions. For exam­p­le, we can ana­ly­se which but­tons on our web­site are cli­cked how often and which pro­ducts are view­ed or purcha­sed par­ti­cu­lar­ly fre­quent­ly. This infor­ma­ti­on is used to crea­te con­ver­si­on sta­tis­tics. We find out the total num­ber of users who have cli­cked on our adverts and what actions they have taken. We do not recei­ve any infor­ma­ti­on with which we can per­so­nal­ly iden­ti­fy the user. Goog­le its­elf uses coo­kies or com­pa­ra­ble reco­gni­ti­on tech­no­lo­gies for iden­ti­fi­ca­ti­on pur­po­ses. The use of this ser­vice is based on your con­sent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Con­sent can be with­drawn at any time.
You can find more infor­ma­ti­on about Goog­le con­ver­si­on track­ing in Goo­g­le’s pri­va­cy poli­cy: https://policies.google.com/privacy?hl=de.
The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every DPF-cer­ti­fied com­pa­ny under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on can be obtai­ned from the pro­vi­der at the fol­lo­wing link https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.

6. Plugins and tools

You­Tube
This web­site embeds vide­os from the You­Tube web­site. The ope­ra­tor of the web­site is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.
When you visit one of our web pages on which You­Tube is inte­gra­ted, a con­nec­tion to the You­Tube ser­vers is estab­lished. This tells the You­Tube ser­ver which of our pages you have visi­ted. You­Tube may also store various coo­kies on your device or use com­pa­ra­ble reco­gni­ti­on tech­no­lo­gies to (e.g. device fin­ger­prin­ting). In this way, You­Tube can obtain infor­ma­ti­on about visi­tors to this web­site. This infor­ma­ti­on is used, among other things, to record video sta­tis­tics, impro­ve user-fri­end­li­ne­ss and pre­vent fraud attempts.
If you are log­ged into your You­Tube account, you enable You­Tube to assign your sur­fing beha­viour direct­ly to your per­so­nal pro­fi­le. You can pre­vent this by log­ging out of your You­Tube account.
The use of You­Tube is in the inte­rest of an appe­al­ing pre­sen­ta­ti­on of our online offers. This con­sti­tu­tes a legi­ti­ma­te inte­rest within the mea­ning of Art. 6 para. 1 lit. f GDPR. If a cor­re­spon­ding con­sent has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG (Ger­man Tele­com­mu­ni­ca­ti­on Digi­tal Ser­vices Data Pro­tec­tion Act), inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on in the user’s ter­mi­nal device (e.g. device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be with­drawn at any time.
Fur­ther infor­ma­ti­on on the hand­ling of user data can be found in You­Tube’s pri­va­cy poli­cy at https://policies.google.com/privacy?hl=de.

The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every DPF-cer­ti­fied com­pa­ny under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.

Ado­be Fonts
This web­site uses Ado­be web fonts for the uni­form dis­play of cer­tain fonts. The pro­vi­der is Ado­be Sys­tems Incor­po­ra­ted, 345 Park Ave­nue, San Jose, CA 95110–2704, USA (Ado­be).
When you access this web­site, your brow­ser loads the requi­red fonts direct­ly from Ado­be in order to dis­play them cor­rect­ly on your device. Your brow­ser estab­lishes a con­nec­tion to the Ado­be ser­vers in the USA. This gives Ado­be know­ledge that this web­site has been acces­sed via your IP address. Accor­ding to Ado­be, no coo­kies are stored when the fonts are pro­vi­ded.
The data is stored and ana­ly­sed on the basis of Art. 6 para. 1 lit. f GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the uni­form pre­sen­ta­ti­on of the type­face on their web­site. If a cor­re­spon­ding con­sent has been reques­ted, the pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG (Ger­man Tele­com­mu­ni­ca­ti­on Digi­tal Ser­vices Data Pro­tec­tion Act), inso­far as the con­sent includes the sto­rage of coo­kies or access to infor­ma­ti­on in the user’s ter­mi­nal device (e.g. device fin­ger­prin­ting) within the mea­ning of the TDDDG. Con­sent can be with­drawn at any time.
Data trans­fer to the USA is based on the stan­dard con­trac­tu­al clau­ses of the EU Com­mis­si­on. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html.
You can find more infor­ma­ti­on about Ado­be Fonts at: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.
You can find Ado­be’s pri­va­cy poli­cy at: https://www.adobe.com/de/privacy/policy.html.

The com­pa­ny is cer­ti­fied in accordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Euro­pean Uni­on and the USA that is inten­ded to ensu­re com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the USA. Every DPF-cer­ti­fied com­pa­ny under­ta­kes to com­ply with the­se data pro­tec­tion stan­dards. Fur­ther infor­ma­ti­on can be obtai­ned from the pro­vi­der at the fol­lo­wing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TNo9AAG&status=Active.

7. Own services

Hand­ling appli­cant data
We offer you the oppor­tu­ni­ty to app­ly to us, e.g. by email, by post or via the online appli­ca­ti­on form. In the fol­lo­wing we inform you about the scope, pur­po­se and use of your per­so­nal data coll­ec­ted as part of the appli­ca­ti­on pro­cess. We assu­re you that the coll­ec­tion, pro­ces­sing and use of your data is car­ri­ed out in accordance with appli­ca­ble data pro­tec­tion law and all other sta­tu­to­ry pro­vi­si­ons and that your data will be trea­ted in strict con­fi­dence.

Scope and pur­po­se of data coll­ec­tion
If you send us an appli­ca­ti­on, we pro­cess your asso­cia­ted per­so­nal data, e.g. cont­act and com­mu­ni­ca­ti­on details, appli­ca­ti­on docu­ments, notes in the con­text of job inter­views, inso­far as this is neces­sa­ry for the decis­i­on on the estab­lish­ment of an employ­ment rela­ti­onship. The legal basis for this is § 26 BDSG under Ger­man law (initia­ti­on of an employ­ment rela­ti­onship), Art. 6 para. 1 lit. b GDPR (gene­ral con­tract initia­ti­on) and — if you have given your con­sent — Art. 6 para. 1 lit. a GDPR. Con­sent can be with­drawn at any time. Your per­so­nal data will only be pas­sed on within our com­pa­ny to per­sons who are invol­ved in pro­ces­sing your appli­ca­ti­on.
If the appli­ca­ti­on is suc­cessful, the data sub­mit­ted by you will be stored in our data pro­ces­sing sys­tems on the basis of § 26 BDSG and Art. 6 para. 1 lit. b GDPR for the pur­po­se of imple­men­ting the employ­ment rela­ti­onship.

Data reten­ti­on peri­od
If we are unable to make you a job offer, you reject a job offer or with­draw your appli­ca­ti­on, we reser­ve the right to retain the data you have sub­mit­ted on the basis of our legi­ti­ma­te inte­rests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the appli­ca­ti­on pro­cess (rejec­tion or with­dra­wal of the appli­ca­ti­on). The data is then dele­ted and the phy­si­cal appli­ca­ti­on docu­ments are des­troy­ed. The sto­rage ser­ves in par­ti­cu­lar as evi­dence in the event of a legal dis­pu­te. If it is evi­dent that the data will be requi­red after the expiry of the 6‑month peri­od (e.g. due to an impen­ding or pen­ding legal dis­pu­te), dele­ti­on will only take place when the pur­po­se of fur­ther sto­rage no lon­ger appli­es.
Data may also be stored for lon­ger if you have given your con­sent (Art. 6 para. 1 lit. a GDPR) or if sta­tu­to­ry reten­ti­on obli­ga­ti­ons pre­vent dele­ti­on.

Inclu­si­on in the appli­cant pool
If we do not make you a job offer, you may be able to join our appli­cant pool. If you are accept­ed, all docu­ments and details from your appli­ca­ti­on will be trans­fer­red to the appli­cant pool so that you can be cont­ac­ted in the event of sui­ta­ble vacan­ci­es.
Inclu­si­on in the appli­cant pool is based exclu­si­ve­ly on your express con­sent (Art. 6 para. 1 lit. a GDPR). The gran­ting of con­sent is vol­un­t­a­ry and is not rela­ted to the cur­rent appli­ca­ti­on pro­cess. The data sub­ject may with­draw their con­sent at any time. In this case, the data will be irre­vo­ca­bly dele­ted from the appli­cant pool, pro­vi­ded the­re are no legal grounds for reten­ti­on.
The data from the appli­cant pool will be irre­vo­ca­bly dele­ted no later than two years after con­sent has been given.