Home Privacy policy for website users
Home Privacy policy for website users

Privacy policy for website users

Data Protection Information according to the EU General Data Protection Regulation - Status: April 2019

Scope

This privacy statement applies to all pages of our online network that link to this declaration. General information can be found on our main privacy page.

Purpose of data collection

The purpose of data collection is the optimization of the website, error analysis, individual customization according to your needs, offering the possibility of contact, and, if applicable, the sale of goods and services.

General data processing

We collect and use personal data of our users only to the extent necessary for providing a functional website as well as our content and services. The collection and use of personal data from our users are generally only carried out with the user's consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons, and the processing of data is permitted by legal regulations.

Legal basis for the processing of your data:

  • Where we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 lit. a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
  • When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 para. 1 lit. b) GDPR serves as the legal basis. 
  • This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
  • If the processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the first-mentioned interest, Art. 6 para. 1 lit. f GDPR serves as the legal basis for the processing.

Legitimate interests may include:

  • Responding to inquiries;
  • Conducting direct marketing measures;
  • Providing services and/or information intended for you;
  • Processing and transferring personal data for internal or administrative purposes;
  • Operating and managing our website;
  • Providing technical support to users;
  • Preventing and detecting fraud and criminal activities;
  • Ensuring network and data security, to the extent these interests are in line with applicable law and the rights and freedoms of the user;
  • Achieving efficiency gains by bundling services in individual group companies (especially marketing, IT, procurement).

Categories of recipients:

  • Service providers for website optimization, online marketing service providers and tools, service companies for information and communication technology, companies for software and device maintenance, partly described in more detail below
  • Social networks and communities as described below
  • Internal recipients according to the "need to know" principle

Usage data / server log files

Whenever you access our websites, our systems automatically collect data and information from the computer system of the calling computer.

The following types of data are collected: browser type, version used, user's operating system, internet service provider, user's IP address, date and time of access, websites from which the user's system reaches our website or to which the user's system goes from our website.

The legal basis for the temporary storage of data and log files is Art. 6 para. 1 lit. f GDPR with the aforementioned legitimate interests.

The temporary storage of the IP address by the system is necessary to enable the delivery of the website to the user's computer. For this purpose, the IP address of the user must be stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. In these purposes also lies our legitimate interest in data processing. The data will be deleted as soon as they are no longer necessary to achieve the purpose of their collection. In the case of data collection for the provision of the website, this is the case when the respective session is ended. We reserve the right to check the files if there are concrete indications of illegal use or a concrete attack on the pages. In this case, our legitimate interest is the processing for the purpose of clarification and criminal prosecution of such attacks and illegal uses.

Use of cookies

We use cookies. Cookies are text files that are stored by the internet browser on the user's computer system. When a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables a unique identification of the browser when the website is called up again. We use cookies to make our website more user-friendly. Some elements of our Internet page require that the calling browser can also be identified after a page change. The following data is stored and transmitted in the cookies: language settings, items in a shopping cart, log-in information, etc....

The purpose of using technically necessary or functional cookies is to enable the functionality of the website in the first place (necessary) or to simplify the use of websites for users (functional). Some functions of our Internet site cannot be offered without the use of cookies. For these, it is necessary that the browser can be recognized even after a page change. We need cookies for the provision of the shopping cart, adoption of language settings, remembering search terms, etc. The processing is therefore based on Art. 6 para. 1 lit. b) or f) GDPR.

On some of our websites, we also use cookies that enable an analysis of users' browsing behavior. In this way, entered search terms, frequency of page views, use of website functions, etc. are transmitted. The data collected in this way from users is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users.

Legal basis for data processing using cookies: The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a) GDPR, provided the user has given his consent for this.

Google Analytics web tracking

Some of our websites use Google Analytics, a web analytics service provided by Google Inc. ("Google"). Google Analytics uses so-called "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

The legal basis for the processing of users' personal data is Art. 6 Para. 1 lit. a GDPR. We use Google Analytics to analyze and regularly improve the use of our website. With the statistics obtained, we can improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. This website uses Google Analytics with the extension "_anonymizeIp()". As a result, IP addresses are processed in abbreviated form, so that a personal reference can be excluded. Insofar as the data collected about you has a personal reference, this is immediately excluded and the personal data is immediately deleted. Standard contractual clauses apply in cases where personal data is transferred to the USA.

Third-party information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, and the privacy policy: http://www.google.de/intl/de/policies/privacy.

You have the right to revoke your consent given in accordance with Art. 6 Para. 1 lit. a GDPR at any time. You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

To prevent Google Analytics from collecting data across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when you visit this website. You must carry out the opt-out on all systems and devices used so that it works comprehensively. For more information on terms of use and data protection, please visit https://www.google.com/analytics/terms/de.html or https://www.google.de/intl/de/policies/.

Google Tag Manager

This website uses Google Tag Manager. Google Tag Manager is a solution that enables marketers to manage website tags through an interface. The Tag Manager itself, which implements the tags, is a cookie-less domain that does not capture personally identifiable information. The tool triggers other tags that may, under certain circumstances, collect data. Google Tag Manager does not access this data. If deactivation is carried out at the domain or cookie level, it remains in effect for all tracking tags implemented with Google Tag Manager. The use of Google Tag Manager facilitates the easy use of our website. The deployment is based on the legitimate interest according to Art. 6 Para. 1 lit. f) GDPR.

Integration of Google maps

On this website, we utilize the services of Google Maps to provide interactive maps directly on the site, enhancing your experience with convenient map functionality.

By visiting the website, Google receives information that you have accessed the specific subpage of our website. Personal data, including IP address, time of the request, content of the request, amount of data transferred, website from which the request originates, language and version of the browser, and information about the operating system, is transmitted to Google. This occurs whether or not you have a Google account and whether you are logged into it. If you are logged into Google, your data will be directly associated with your account. If you do not wish this association with your Google profile, you must log out before activating the button. Google stores your data as user profiles and uses them for the purposes of advertising, market research, and/or tailoring its website to meet your needs. Such evaluation is carried out, in particular (even for users who are not logged in), for the provision of tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; however, to exercise this right, you must contact Google.

For more information on the purpose and scope of data collection and its processing by the plugin provider, please refer to the provider's privacy policies. There, you will also find further information about your rights in this regard and options for protecting your privacy: Google Privacy Policy. Standard contractual clauses are applied for exceptional cases where personal data is transferred to the USA.

DoubleClick by Google

We use the online marketing tool Campaign Manager by Google Inc. ("Google"). Campaign Manager utilizes cookies to display ads relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Google captures, through a cookie ID, information on which ads are displayed in which browser, preventing repeated displays. Additionally, Campaign Manager, using cookie IDs, can track conversions related to ad requests. This occurs when a user sees a Campaign Manager ad and later makes a purchase on the advertiser's website using the same browser. According to Google, Campaign Manager cookies do not contain personally identifiable information.

Due to the marketing tools employed, your browser automatically establishes a direct connection to Google's server. We have no control over the extent and further use of data collected by Google through the use of this tool. According to our knowledge, through the integration of Campaign Manager, Google receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or not logged in, there is a possibility that the provider may obtain and store your IP address.

You can prevent participation in this tracking procedure in various ways:

a) by adjusting your browser software accordingly, particularly suppressing third-party cookies to prevent third-party ads;

b) by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com," Google Ad Settings, with this setting being deleted when you clear your cookies;

c) by deactivating interest-based ads from providers participating in the self-regulation campaign "About Ads" via the link About Ads Choices, with this setting being deleted when you clear your cookies;

d) by permanently deactivating it in your browsers Firefox, Internet Explorer, or Google Chrome using the link Google Ad Settings Plugin. Please note that in this case, you may not be able to use all functions of this offer to their full extent.

The legal basis for processing your data is Art. 6(1)(a) GDPR.

For more information on DoubleClick by Google, visit Google DoubleClick and Google's privacy policy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at Network Advertising. Standard contractual clauses are applied for exceptional cases where personal data is transferred to the USA.

Facebook-Connect

On some of our websites, we offer the option to sign up for our service using Facebook-Connect, eliminating the need for additional registration. To sign up, you will be redirected to Facebook's page, where you can log in with your user data. This links your Facebook profile with our service, and we automatically receive certain data from Facebook Inc., including your name, email address, and birthdate. This information is essential for contract formation to identify you. For more details on Facebook-Connect and privacy settings, please refer to Facebook Inc.'s privacy policy and terms of use.

Facebook custom audiences

Additionally, the website utilizes Facebook Inc.'s "Custom Audiences" remarketing function, displaying interest-based ads (Facebook Ads) to users during visits to Facebook or other websites using the same procedure. This aims to show you ads that match your interests, making our website more appealing to you.

Due to the marketing tools employed, your browser automatically establishes a direct connection to Facebook's server. We have no control over the extent and further use of data collected by Facebook through the use of this tool. According to our knowledge, through the integration of Facebook Custom Audiences, Facebook receives information that you have visited the corresponding page on our website or clicked on an ad from us. If you are registered with a Facebook service, Facebook can associate the visit with your account. Even if you are not registered with Facebook or not logged in, the provider may obtain and store your IP address and other identification features.

You can deactivate the "Facebook Custom Audiences" function here for logged-in users.

The legal basis for processing your data is Art. 6(1)(f) GDPR. For more information on data processing by Facebook, visit Facebook Privacy.

Integration of YouTube videos

On some of our websites, we embed YouTube videos stored at http://www.YouTube.com that can be played directly from our website.

By visiting the website, YouTube is informed that you have accessed the corresponding subpage of our website. Additionally, personal data (browser type, browser version, IP address, operating system) is transmitted. This occurs whether or not YouTube provides a user account through which you are logged in. If you are logged in to Google, your data is directly associated with your account. If you do not want YouTube to associate your browsing behavior directly with your YouTube profile, you must log out before activating the button. YouTube stores your data as user profiles and uses them for advertising, market research, and/or to tailor its website to users' needs. Such evaluation is performed, especially for users not logged in, to provide tailored advertising and inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. To exercise this right, contact YouTube.

For more information on the purpose and scope of data collection and processing by YouTube, consult the Privacy Policy. Standard contractual clauses are applied for exceptional cases where personal data is transferred to the USA.

Integration Facebook button

Our services use Social Media Plugins ("Plugins") from the social network facebook.com, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins can be identified by one of the Facebook logos (white "f" on a blue tile, the terms "Like," "Gefällt mir," or a thumbs-up sign) or are marked with the addition "Facebook Social Plugin." The list and appearance of Facebook Social Plugins can be viewed here. When a user visits a webpage of this service that contains such a plugin, their browser establishes a direct connection to Facebook's servers. The content of the plugin is transmitted directly to your browser by Facebook and embedded into the webpage. The provider has no influence on the extent of the data that Facebook collects using this plugin and informs users according to its knowledge: By integrating the plugins, Facebook receives information that a user has accessed the corresponding page of the service. If the user is logged into Facebook, Facebook can assign the visit to their Facebook account. If users interact with the plugins, for example, by pressing the Like button or leaving a comment, the corresponding information is transmitted directly to Facebook by their browser and stored there. Even if a user is not a member of Facebook, there is still the possibility that Facebook will obtain and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany. The purpose and scope of data collection and the further processing and use of the data by Facebook, as well as the related rights and settings options for the protection of users' privacy, can be found in Facebook's privacy policy: Facebook Privacy Policy. If a user is a Facebook member and does not want Facebook to collect data about them via this service and link it to their stored Facebook member data, they must log out of Facebook before visiting the website. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: Facebook Ad Settings.

Integration of LinkedIn button

On some of our websites, we use plugins from the social network LinkedIn, operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). The plugin is recognizable by the LinkedIn logo or an equivalent "Recommend" label on the button. When you visit our websites, the plugin establishes a connection between your browser and LinkedIn. LinkedIn receives information about your visit through your IP address. If you click the LinkedIn button while logged into LinkedIn, you can link the content of our pages to your LinkedIn profile. LinkedIn can then associate the visit to our websites with your profile. As the provider of the websites, we have no knowledge of the content of the transmitted data or its use by LinkedIn. For more information on the purpose and scope of data collection, processing, or use, refer to LinkedIn's privacy policy: http://www.linkedin.com

Integration of XING share button

On some of our websites, the "XING Share-Button" is used. When you access this webpage, a short-term connection to servers of XING AG ("XING") is established via your browser to provide the "XING Share-Button" functions (especially calculating/displaying the counter value). XING does not store any personal data from you through accessing this webpage. XING does not store IP addresses, and there is no evaluation of your usage behavior through the use of cookies in connection with the "XING Share-Button." You can find the current data protection information on the "XING Share-Button" and additional information on this webpage.

Integration of Instagram plugin

Plugins of the social network Instagram, operated by Instagram Inc., 1601 Willow Road, Menlo Park, California, 94025, USA, are integrated into our website. You recognize the Instagram plugin by the “Instagram Button.” If you click the button while logged into your Instagram account, the visited page on our site will be linked to your Instagram profile. As the provider of the websites, we have no knowledge of the content of the transmitted data or its use by LinkedIn. For more information on the purpose and scope of data collection, processing, or use, refer to Instagram's privacy policy: http://instagram.com/about/legal/privacy.

Integration Twitter plugins

Some of our websites use plugins and services from Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA, and are connected by buttons or links with "Twitter" or "Follow" or an image of a blue bird. This allows sharing a post or page on Twitter or following an account or topic on Twitter. When you visit a webpage of this online presence that contains such a button, your browser establishes a connection with Twitter's servers to transmit the content of the button to your browser. We have no influence on the scope of the data that Twitter collects using these services and can only inform you to the best of our knowledge. After that, only your IP address and the URL of the respective webpage are transmitted when the button is retrieved. We cannot make any statements about whether Twitter uses this data for further purposes. For more information, please refer to Twitter's privacy policy: Twitter Privacy Policy.

Polyfill

Polyfills are used to retrofit browser functions. They facilitate the recognition of HTML5 elements for old browsers. Thus, the polyfill html5shiv makes elements known to Internet Explorer via JavaScript.

Content from external providers

On our website, we use active JavaScript content and fonts, which may also come from external providers such as Google. By accessing our website, these providers may receive information about your visit to our website, such as by transmitting your IP address. You can prevent this transmission by installing a JavaScript blocker such as the browser plugin 'NoScript' or by deactivating JavaScript in your browser. However, this can lead to functional limitations.

Some of our websites include third-party content within the offering, such as videos from YouTube, maps from Google Maps, images, texts, and multimedia files, RSS feeds, or other services from other websites. This always requires the transmission of your IP address to the providers of this content. We cannot provide information about the use of your data by these providers and also have no influence on further processing, especially not on whether the data is used for other purposes, such as profile creation. Please refer to the respective privacy policies of the respective third-party providers. You can protect yourself against further tracking by tracking pixels from these providers, for example, by disabling the acceptance of third-party cookies in your browser settings.

E-Mail contact

Contact can be made via the provided email address. In this case, the personal data transmitted by the user with the email will be stored. In this context, there is no disclosure of the data to third parties. The data is used exclusively for processing the conversation.

The legal basis for processing is:

  • For the processing of data transmitted in the course of sending an email, Art. 6 para. 1 lit. f GDPR with the above-mentioned legitimate interests.
  • If the email contact aims to conclude a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.

In the case of email contact, there is also the necessary legitimate interest in processing the data. The data is deleted as soon as it is no longer necessary for the purpose of its collection.

If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

Data collection during registration and registered usage

Some of our websites require or offer registration. The data collected during registration is used for the purposes of using the respective websites and services, unless otherwise described and explicitly consented to during registration. The collected data is obtained from the input mask during registration. All other data that you may provide later to complete your profile is optional and voluntary. After registration, we may inform you about relevant circumstances related to the offering for which you registered, using the provided email address.

Data in user-generated content

If you write comments or posts, upload files to our servers, publish images, or use other services, your IP addresses and, if you are logged in, your user data will be stored for our security. Due to the multitude of unlawful content posted on the internet daily, we reserve the right to use this information for defense in legal disputes or for law enforcement purposes. This means that we may also disclose this information to opposing parties, law enforcement authorities, and courts.

In the event of an in-procedure to verify that you are the rightful owner of the specified mailbox, we use the Double-Opt-In procedure. You can unsubscribe from the notifications at any time, and instructions for doing so are included in each of the emails. Registered users do not have to go through the Double-Opt-In procedure, as this occurs during registration.

Data transmission over the internet

Data transmission over the Internet is inherently associated with certain risks. No special encryption of the data is carried out, particularly messages from the contact form on our website and messages in the service chat are transmitted unencrypted. Please consider this when transmitting data. If you wish to communicate with us via encrypted email, this can be done through SMIME encryption. Please inform us of your desire for encryption, as we regularly send unencrypted emails due to the currently low market penetration of email encryption methods.

Data disclosure

If you provide us with personal data, it will only be disclosed to third parties if it is necessary for the processing of the contractual relationship or if another legal basis legitimizes this disclosure.

However, certain services are provided with the involvement of service providers. We have carefully selected these service providers and taken appropriate measures to protect your personal data.

Storage periods

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in union legal regulations, laws, or other provisions to which the data controller is subject. Blocking or deletion of data will also occur when a storage period prescribed by the mentioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract. If we cannot offer you a currently available position, your data and documents will be stored in our applicant management system for a maximum of 12 months if needed to revisit your application at a later date. If we include your data in our applicant pool, you will be informed and can object to the storage at any time. This also applies to all other forms of applications (email, diskette, CD, DVD, etc.).