DATA PRIVACY

Data protection declaration for our website


Basics

We provide this information in order to transparently explain to you how your personal data is handled (according to highest court rulings, this also includes the IP address) when you visit our website. According to Art. 4 No. 1 GDPR, personal data is all information that relates to an identified or identifiable natural person.


Privacy policy and information

We take the protection of your data and your privacy very seriously and comply with our data protection obligations. We collect and process your personal data in accordance with European and national legal regulations. We expressly explain to you in this data protection declaration how and in what form we process your data.

When you visit our website, we are forced to collect various personal data - this serves, on the one hand, to ensure the functionality of our website and, on the other hand, to increase the attractiveness of our website through the use of various tools.

Why do we need your data?

Your data is collected so that we can display our website error-free. Other data may be used to analyze your user behavior.

Furthermore, the data collection takes place on a legal basis:

If you have consented to data processing, we will process your personal data on the basis of Article 6 Paragraph 1 subparagraph 1 lit Art. 9 Para. 1 GDPR are processed. The processing of data in accordance with Art. 9 GDPR is only permitted in certain cases.

If you have consented to the storage of cookies or to accessing information on your device, for example through device fingerprinting, the data processing will be carried out on the basis of Section 25 Paragraph 1 TTDSG.

Consent can be revoked at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

If we collect your data to fulfill a contract or to carry out pre-contractual measures, your data will be processed on the basis of Article 6 Paragraph 1 Subparagraph 1 Letter b GDPR. If your data is required to fulfill a legal obligation, we process your data on the basis of Article 6 Paragraph 1 Subparagraph 1 Letter c GDPR.

Data processing can also be carried out on the basis that we exercise our legitimate interest in data processing. In this case, data processing is possible provided that your interests or the interests of third parties do not conflict with the data processing. Data is then processed in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter f of the GDPR.

We will specify the relevant legal basis in each individual case in the relevant section.


Who is responsible?

As website operators, we are responsible for data processing on our website in accordance with Art. 4 No. 7 GDPR. You can reach us using the contact details provided.

Ulrich Dick, Andreas Haas, Mark Heutig, Rainer Rogg, Jürgen Rogg

Augsburger Straße 55
87700 Memmingen
Email: info@kutter.de


How to contact our data protection officer

We have appointed a data protection officer for our company. If you have any questions about data protection, please contact the following email: datenschutz@kutter.de


How long do we store your data?

We adhere to the respective statutory retention period for the maximum duration of storage of your personal data. We will only store your data until we no longer need it for our data processing. When storing your data, we are bound to the purpose for which we collected your data. Unless a specific storage period is specified in this information, your personal data will remain with us until the purpose for data processing no longer applies.

If you make a legitimate request for deletion or revoke your consent to data processing, we must delete your data in the event that there are no other legally permissible reasons for further storage of your data, such as commercial and tax law retention periods. We can only comply with your deletion request if these reasons no longer apply.

Where do we get your data from?

We collect your data because you provide us with the data via a contact form or in another way. There is additional data that is collected automatically or only after your consent when you visit our website. This mainly concerns technical data such as your operating system and the time the page was accessed.

Who do we provide your data to?

We use tools from third-party companies based in and outside the EU and EEA. Your personal data may be transferred to these third-party companies if you have activated these tools - unless these are necessary for the functionality of the website.

We also use tools from companies based in the USA or other third countries that are not secure in terms of data protection. Your personal data can also be transferred to them if you have activated the relevant tools. The countries do not have a level of data protection comparable to that of the EU.

Such a data transfer requires an adequacy decision issued by the EU Commission, which guarantees a comparable level of protection for your personal data. In the event that there is no such adequacy decision, other appropriate guarantees must be taken in accordance with Art. 44 ff. GDPR.


What rights do you have? – Your data subject rights

You can assert your rights according to Art. 12 ff. GDPR.


Revocation of consent to data processing

We sometimes process your data with your express consent. You can revoke any consent you have already given at any time with effect for the future. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.


Objection in special cases / against direct advertising, Art. 21 GDPR

If the data processing is carried out on the basis of Article 6 Paragraph 1 Subparagraph 1 Letter f GDPR, then you can object to the processing of your personal data for reasons arising from your particular situation. This also applies to any profiling - the legal basis on which this is carried out can be seen from this information. If you exercise your right to object, your affected personal data will no longer be processed unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims Art. 21 Paragraph 1 GDPR.

If we process your personal data for direct advertising, you have the right to object to the processing of your personal data for the purpose of such advertising. This also applies to profiling insofar as it is related to direct advertising. If you object, your personal data will no longer be sent for direct advertising purposes in accordance with Article 21 (2) GDPR.


Right to data portability

You have the right to have data that we process automatically handed over to you or to a third party in a common machine-readable format. If you request the data to be transferred to another person responsible, this will only take place if it is technically possible.


Right to information, deletion and correction

Within the framework of Article 15 Para. 1 GDPR, you can exercise the right to receive free information about your stored personal data, its origin, recipient and the purpose of data processing. Furthermore, you could, if necessary, assert the right to correct or delete this data. If you have any questions about your rights, you can contact us or our data protection officer at any time.


Right to restriction of processing

You can still request the restriction of the processing of your personal data. If you have any questions about this right, you can contact us or our data protection officer at any time. There is a right to restriction in the cases specified by law. If you dispute the accuracy of your data, we need time to verify this. For this period, you have the right to request that your data be restricted. In the event that the processing of your data is unlawful, you can request that the processing be restricted instead of the data being deleted. If we no longer need your personal data, but you would like to exercise, defend or assert legal claims, you have the right to at least request that data processing be restricted. If you have lodged an objection in accordance with Article 21 Para. 1 GDPR, we must weigh up your interests and ours; during this time you have the right to request the restriction of the data.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.


Right to lodge a complaint with a responsible supervisory authority

As a data subject, you still have the right to lodge a complaint with a supervisory authority in the event of violations of the GDPR. This must be the responsible data protection supervisory authority in your federal state. You always have the right to complain, regardless of what other measures you take.


Further information

We expressly object to the sending of unsolicited advertising and information materials to our contact details. We expressly reserve the right to take legal action against unsolicited advertising, such as sending spam emails.

For security reasons and to protect the transmission of confidential content, we use an SSL or TLS connection. You can recognize an encrypted connection by the browser address line changing from http:// to https:// and by the lock symbol in your browser line.


Server log files

The site provider collects and stores information in server log files that your browser automatically transmits to us. This includes the following data: browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request and also your IP address.

Your data will not be merged with data from other data sources. The legal basis for data processing is Article 6 Paragraph 1 Subparagraph 1 Letter f GDPR, as we as site operators have a legitimate interest in the technically error-free presentation and optimization of our website. For this purpose, server log files must be recorded.


Hosting our website

We host our website with an external provider:

Host Europe GmbH
Friesenplatz 4
50672 Cologne

All personal data collected on the website - such as your IP address, meta and communication data, contract data, contact details, names, access and other data generated via a website - are stored on the host's servers.

The legal basis for the processing of your personal data is Article 6 Paragraph 1 Subparagraph 1 Letter f GDPR. Our legitimate interest lies in ensuring that our website is presented as reliably as possible.

In the event that we have requested your consent, your data will be processed on the basis of Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR and Section 25 Paragraph 1 TTDSG, if the use of the data corresponds to the consent to the storage of Cookies or access to information on the user's end device, such as device fingerprinting, within the meaning of the TTDSG. Consent can be revoked at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

To provide evidence of data protection-compliant processing and to describe our respective obligations, we have concluded an agreement on order processing. This is a contract required by data protection law in accordance with Article 28 Paragraph 3 of the GDPR, which ensures that our processor processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.


Setting cookies

We use cookies on our website. These are small text files and data packets that are placed on the end devices but do not cause any damage there. The cookies are stored on your device either temporarily for a session as session cookies or permanently as persistent cookies. Session cookies are automatically deleted at the end of the session, whereas permanent cookies are stored on the device until you delete them yourself or their web browser automatically deletes them.

In some cases, cookies from third-party companies could also be stored on your devices; these are third-party cookies. They enable the use of this company's services, such as cookies to process payment services.

Cookies fulfill different functions. In some cases they are technically necessary so that certain applications on the website function at all, such as the shopping cart function. Other cookies are used to evaluate user behavior on our site or to display advertising. Cookies that are technically absolutely necessary and are therefore to be viewed as necessary cookies are stored on the basis of Section 25 Paragraph 2 TTDSG, unless another legal basis is explicitly stated. Cookie storage is absolutely necessary in order to create the technical requirements for an error-free and optimized website. For cookies that are not technically absolutely necessary, consent is requested in accordance with Section 25 Paragraph 1 TTDSG. The cookies will then only be stored based on this consent. Consent can be revoked at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

You can set your browser so that you are informed about the setting of cookies and only allow them in individual cases. You can also generally exclude the storage of cookies and activate automatic deletion of cookies when you close the browser. We would recommend this approach to you. If you generally deactivate cookies, the functionality of our website and its display may be restricted. We will inform you separately about the use of cookies from third-party companies and for analysis purposes. In this case we will also ask for consent.

Cookie banner on the homepage:

Our cookie banner on the homepage (consent query) comes from a third party. The provider of the cookie banner is Medienblick e.K. Bavariaring 24 87600 Kaufbeuren (hereinafter: “Medienblick e.K.”). Using the cookie banner, we obtain your consent that certain cookies that are not necessary for the technical display of the website may be stored on your device. We need this consent in order to be able to demonstrate a legal basis for storage.

When you enter our website, personal data is transmitted to our cookie banner provider. This includes the following data: your reaction to our consent request i.e. cookie banner, your IP address, information about your browser and your device as well as the time of your visit to our website.

When you enter our website, a connection is established to the provider's servers so that your consent or other declarations regarding the setting of cookies can be obtained. Once the declaration has been made, our provider stores a cookie in your internet browser so that it can determine whether you have consented to the cookie being set or rejected it. It also serves to assign any revocation that may have occurred later. This data will be stored until you request us to delete the data, delete the cookie yourself or the purpose for data processing no longer applies. If deletion conflicts with statutory retention periods, these remain unaffected.

The legal basis for obtaining consent is Section 25 Paragraph 1 TTDSG. You can revoke your consent at any time with future effect. If you would like to change your settings, please contact us or follow the instructions on our website. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

To provide evidence of data protection-compliant processing and to describe our respective obligations, we have concluded an agreement on order processing. This is a contract required by data protection law in accordance with Article 28 Paragraph 3 of the GDPR, which ensures that our processor processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.


Contact options on our website

We offer various options on our website to get in touch with us.


Possibility to register on our website

You have the option of registering on our website. You can use this registration to activate additional functions on our site. We only use the data you enter in the registration mask for the purposes for which you registered. We can only carry out the registration if all information that is absolutely necessary for registration is provided. Otherwise we will unfortunately have to reject the registration. If changes are absolutely necessary, we will use the email address you provided so that we can contact you.

We process the data you enter based on your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR. You can revoke your consent at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation. We will store your data for as long as you are registered on our website. Your data will then be deleted, although statutory retention periods remain unaffected.


Inquiries via contact form

You can use our contact form at any time to send us inquiries. We process the data that you provided in the contact form as well as your email address in order to be able to process your request and in the event that we have any follow-up questions for you. However, we will not pass on your data to third parties without your consent.

The legal basis for the processing of your data is Article 6 Paragraph 1 Subparagraph 1 Letter b GDPR, provided your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In other cases, the processing is based on our legitimate interest in effectively processing your request in accordance with Art. 6 Para. 1 Sub-Paragraph 1 Letter f of the GDPR or on your consent in accordance with Article 6 Para -GMO, if this was requested by us. You can revoke your consent at any time with future effect. All you need to do is send us an informal email. However, the lawfulness of our data processing is not affected until the revocation is made.

The data you provide will remain with us until you request us to delete it or revoke your consent to storage. Mandatory legal provisions such as statutory retention periods remain unaffected.


Inquiries by email, telephone and fax

You can contact us at any time by email, telephone and fax. We process the data that you have provided to us in order to be able to process your request. However, we will not pass on your data to third parties without your consent.

The legal basis for the processing of your data is Article 6 Paragraph 1 Subparagraph 1 Letter b GDPR, provided your request is related to the fulfillment of a contract or is necessary to carry out pre-contractual measures. In other cases, the processing is based on our legitimate interest in effectively processing your request in accordance with Art. 6 Para. 1 Sub-Paragraph 1 Letter f of the GDPR or on your consent in accordance with Article 6 Para -GMO, if this was requested by us. You can revoke your consent at any time with future effect. All you need to do is send us an informal email. However, the lawfulness of our data processing is not affected until the revocation is made.

The data you provide will remain with us until you request us to delete it or revoke your consent to storage. Mandatory legal provisions such as statutory retention periods remain unaffected.


Sending postal advertising

We use your address to send you postal advertising.

The legal basis for the processing of your data is our legitimate interest in direct advertising in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter f GDPR in conjunction with EW 47 of the GDPR. In the event that we have requested consent, data processing will only take place on the basis of Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR. You can revoke your consent at any time with future effect. All you need to do is send us an informal email. However, the lawfulness of our data processing is not affected until the revocation is made.

The data you provide will remain with us until you request us to delete it or revoke your consent to storage. Mandatory legal provisions such as statutory retention periods remain unaffected.

We use a service provider to send our postal advertising: Name, Str; Postal code and city


Data processing through social networks

We use a publicly accessible profile on various social networks.

The social networks may analyze your behavior when you visit our website because we have integrated social network plug-ins or other links. Personal data is collected even if you are not logged in as a user or do not have an account with the respective provider. Your data is collected via cookies that are stored in your device or by recording your IP address.

Social networks create user profiles. They store your interests and preferences in these profiles so that interest-based advertising is shown to you. If you maintain a profile with the respective provider, the advertising will be displayed on all devices on which you are or were logged in.

The data you provide will remain with us until you request us to delete it or revoke your consent to storage. Mandatory legal provisions such as statutory retention periods remain unaffected. Saved cookies, unless they are session cookies, remain on your device until you delete them.

To provide evidence of data protection-compliant processing and to demonstrate our respective obligations, we have concluded an order processing agreement with the respective provider. This is a contract required by data protection law in accordance with Article 28 Paragraph 3 of the GDPR, which ensures that our processor processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.


Meta Plug-In and Meta Profile

We maintain a profile on Meta (formerly Facebook). The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: “Meta”). We have also integrated a plug-in from Meta on our website. You can recognize this by the meta profile button or the “Like” button. You can find an overview of the Facebook/Meta plug-ins at: https://developers.facebook.com/docs/plugins/?locale=de_DE.

Merely integrating the plug-in does not result in a direct data transfer to Meta. Personal data is only processed when information is accessed that goes beyond the homepage of a meta profile. This processing is no longer attributable to us as the operator, since with your consent you voluntarily take over data sovereignty using the “two-click solution”. from Meta.

The legal basis for our data processing is our legitimate interest in achieving the greatest possible visibility on social media in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter f of the GDPR. If appropriate consent has been requested, Meta's data processing is based on your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR. You can revoke your consent at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

The use of a meta profile does not result in any joint responsibility for any data processing of personal data in accordance with Art. 26 GDPR. Through the “two-click solution” we have introduced, you voluntarily decide to place yourself in Meta’s data sovereignty. Contrary to the ECJ ruling of June 5th, 2018, C-210/16, there is no responsibility based on a joint decision on the purposes and means of data processing, since Meta only processes personal data when you have already voluntarily consented to data sovereignty Meta have issued. The processing of personal data that occurs after it has been forwarded to Meta is not attributable to us. Furthermore, if there is joint responsibility, the necessary agreement in accordance with Article 26 Para. 3 GDPR can be found in the addendum provided by Meta: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are obliged to provide the data protection information in accordance with Art. 13 f. GDPR and to integrate the meta tool on our website in accordance with data protection regulations. You can assert your data subject rights directly at Meta. If you assert your data subject rights with us regarding the use of Meta, we are obliged to forward your request to Meta.

The data processed by Meta is also transferred to the USA and other third countries. The data transfer to the USA is again based on an adequacy decision by the EU Commission. Meta is a certified partner for the EU-US Privacy Framework. Details can be found at: https://facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://facebook.com/policy.php. For more information, see the Terms of Use and Privacy Policy. You can find these at: https://de-de.facebook.com/about/privacy/ and https://de-de.facebook.com/legal/terms/.


Instagram plug-in and Instagram profile

We maintain a profile on Instagram. The provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: “Meta”). We have also integrated a plug-in from Instagram on our website. You can recognize this by the Instagram profile button.


LinkedIn

We use LinkedIn. The provider is LinkedIn Ireland Limited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter: “LinkedIn”).

If you access LinkedIn content on this website, a connection will be established to LinkedIn servers. LinkedIn receives the information that you have visited our website. If you click on the LinkedIn button, the visit can be assigned to your profile.

The legal basis for our data processing is our legitimate interest in achieving the greatest possible visibility on social media in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter f of the GDPR. If appropriate consent has been requested, LinkedIn's data processing is based on your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR. You can revoke your consent at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

The data processed by LinkedIn is also transferred to the USA and other third countries. The data transfer to the USA is again based on an adequacy decision by the EU Commission. LinkedIn is a certified partner for the EU-US Privacy Framework. Details can be found at: https://www.linkedin.com/help/linkedin/answer/a1343190/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de. Further information can be found in LinkedIn's privacy policy at: https://www.linkedin.com/legal/privacy-policy.


XING

We use XING. The provider is New York SE, Dammtorstraße 30, 20354 Hamburg (hereinafter: “XING”).

If you access XING content on this website, a connection will be established to XING servers. XING does not store any personal data, in particular no user's IP address.

The legal basis for our data processing is our legitimate interest in achieving the greatest possible visibility on social media in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter f of the GDPR. If appropriate consent has been requested, XING's data processing is based on your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR. You can revoke your consent at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

Further information about data protection and the XING Share button can be found in the XING data protection declaration at: https://www.xing.com/app/share?op=data_protection.


Integration of Google Analytics

We use the web analysis services from Google Analytics to carry out user analysis. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

To analyze user behavior, Google collects personal data that is stored on our server, whereby the IP address is only stored anonymously. Google helps us to collect data about when our site was accessed and from which region, as well as whether and which purchases were made via the website. In order to carry out this analysis, Google stores log files such as the IP address, referrer, browser used and operating system. In addition, Google can also record your mouse and scroll movements as well as your clicks.

The legal basis for data processing is our legitimate interest in an anonymized analysis to improve our services in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter f GDPR. If appropriate consent has been requested, Google's data processing is based on your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR. You can revoke your consent at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

The data processed by Google is also transferred to the USA and other third countries. The data transfer to the USA is again based on an adequacy decision by the EU Commission. Google is a certified partner for the EU-US Privacy Framework. Details can be found at: https://privacy.google.com/businesses/controllerterms/mccs/

Google stores the data for two months, after which it is anonymized. You can view details on this at the following link: https://support.google.com/analytics/answer/7667196?hl=de

Use of Google Signals: When using Google Signals, Google Analytics also collects your location, search history and, if applicable, your YouTube history as well as demographic data such as visitor data. Google Signals uses this data to provide you with personalized advertising. If you have a Google account and are logged in to it, Google Signals will also pull your data from the Google account. Google also uses the data to create anonymized user profiles and to display user behavior in statistics.

“E-commerce measurement”: We use this measurement to analyze the purchasing behavior of our website visitors in order to improve our offerings on our website. Google stores information such as orders placed, average order values, shipping costs and the time from viewing a product to purchasing it. Google then summarizes these and assigns them to the respective user.


Integration of YouTube

We use YouTube videos for visual representation. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

YouTube transmits data to its partners and establishes a connection to Google due to its integration on our website, regardless of whether a video is viewed or not. However, if you watch a video, YouTube connects to YouTube's servers, which tells you which page you are visiting. If you are logged into your account, YouTube will profile you. To prevent this, you must log out of your account.

After starting a video, various cookies are stored on your device in order to obtain information about our website visitors. We have no influence on data processing by YouTube.

The legal basis for data processing is our legitimate interest in an appealing and uniform presentation of our online offering in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter f GDPR. If appropriate consent has been requested, data processing is based on your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR. You can revoke your consent at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

The data processed by YouTube is also transferred to the USA and other third countries. The data transfer to the USA is again based on an adequacy decision by the EU Commission. Google is a certified partner for the EU-US Privacy Framework. Details can be found at: https://privacy.google.com/businesses/controllerterms/mccs/. Further information can be found at the following link: https://policies.google.com/privacy?hl=de.


Audio and video conferences

We use audio and video conferencing tools to communicate with our customers.


General information

Both we and our tool provider process your personal data. Our provider processes data that is absolutely necessary, such as your email address and your telephone number. Our provider also processes metadata. These are the following data: duration of the conference, start and end of the conference, number of participants and context information. Ultimately, technical data that is necessary to provide the respective service is also processed. These are the IP address, MAC addresses, device IDs, operating system, client version, camera type, speakers and the type of connection. All content, such as cloud recordings, chat messages, voicemails, uploaded photos and videos, files and whiteboards, that you share, upload or otherwise provide during the conference will be stored by our provider. We do not have complete influence over which data is processed by our provider and for what purpose.

The legal basis for data processing is Article 6 Paragraph 1 Subparagraph 1 Letter b GDPR, provided our communication relates to our contractual partners or specific services to our customers. Furthermore, the data processing is in our legitimate interest in simplifying and speeding up communication with us in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter f GDPR. If you have given your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR, your email address will be passed on to our transport company so that you can track the shipping status of your order. You can revoke your consent at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

The data we store will remain with us until you request us to delete it or revoke your consent to storage. Mandatory legal provisions such as statutory retention periods remain unaffected. The cookies you set also remain on your device until you delete them yourself.

We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Conference provider

If the respective provider also transfers the processed data to the USA and other third countries, this data transfer to the USA is based on an adequacy decision by the EU Commission. The decisive factor is whether the respective partner is certified for the EU-US Privacy Framework. Details can be found in the information about the respective provider.

To provide evidence of data protection-compliant processing and to demonstrate our respective obligations, we have concluded an order processing agreement with the respective provider. This is a contract required by data protection law in accordance with Article 28 Paragraph 3 of the GDPR, which ensures that our processor processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

We use the following providers:

TeamViewer

We use the conference tool TeamViewer. The provider is TeamViewer Germany GmbH, Jahnstr. 30, 73037 Göppingen. Details of the data protection declaration: https://www.teamviewer.com/de/datenschutzerklaerung

Microsoft Teams

We use the conference tool Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Details about the data protection declaration: https://privacy.microsoft.com/de-de/privacystatement


Our own services – dealing with applicants

You have the opportunity to apply to us on your own initiative or for an advertised position at any time. We accept applications by email, post and via our online application form. Below we would like to inform you about data processing as part of the application process.

We process your personal data such as contact and communication data, application documents and notes during job interviews to the extent that they are necessary to establish an employment relationship. The legal basis for our data processing is Article 6 Paragraph 1 Subparagraph 1 Letter b GDPR in conjunction with Section 26 BDSG. If you have given your consent in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR, data processing will take place on the basis of your consent. You can revoke your consent at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.

If we introduce you into an employment relationship, your data will be further processed to carry out your employment relationship.

If we are unable to offer you a position, you reject our offer or withdraw your application, we reserve the right to keep your documents for up to six months after the end of the application process. After the deadline, your data will be deleted and destroyed. Mandatory statutory retention periods remain unaffected. If you have given us your consent to store it for a longer period of time, your data may be stored for a longer period of time.

You have the option of having us add you to our applicant pool. This includes all documents and information from your application so that we can contact you if there are suitable vacancies. The legal basis for this data processing is your express consent in accordance with Article 6 Paragraph 1 Subparagraph 1 Letter a GDPR. You can revoke your consent at any time with future effect. You can revoke your consent by sending us an informal email. You can also contact our data protection officer, who will inform us of your concerns. However, the lawfulness of the data processing carried out up to the time of revocation remains unaffected by your revocation.