Privacy Policy

With this privacy policy, we would like to inform you about the nature, scope, and purpose of the processing of personal data (hereinafter also referred to as "data"). Personal data are all data that have a personal reference to you, e.g., name, address, email address, or your user behavior. The privacy policy applies to all data processing operations carried out by us both within the framework of our core business and for the online media we maintain.

Who is responsible for data processing at our company

Responsible for data processing is:

Processing of your data within the framework of our company's core business

If you are our customer or business partner or are interested in our services, the nature, scope, and purpose of processing your data is determined by the contractual or pre-contractual relationships existing between us. In this sense, the data processed by us includes all data that is provided or has been provided by you for the purpose of using the contractual or pre-contractual services and that is needed to process your request or the contract concluded between us. Unless otherwise specified in the further notes of this privacy policy, the processing of your data as well as its disclosure to third parties is limited to those data that are necessary and appropriate to answer your requests and/or to fulfill the contract concluded between you and us, to safeguard our rights, and to fulfill legal obligations. Which data is required for this purpose, we will inform you before or during the data collection. To the extent that we use third-party providers to provide our services, the privacy notices of the respective third-party providers apply.

Affected data:

Inventory data (e.g., names, addresses)
Payment data (e.g., bank account details, invoices)
Contact data (e.g., email address, phone number, postal address)
Contract data (e.g., subject matter of contract, contract duration)

Affected persons: Interested parties, business and contract partners

Purpose of processing: Processing of contractual services, communication as well as answering contact requests, office and organizational procedures

Legal basis: Contract fulfillment and pre-contractual requests, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Your rights under the GDPR

Under the GDPR, you have the following rights, which you can assert at any time with the controller named in section 1. of this privacy policy:

Right to information: You have the right to request information from us about whether and which data we process from you.
Right to rectification: You have the right to request the correction of incorrect or completion of incomplete data.
Right to deletion: You have the right to request the deletion of your data.
Right to restriction: You have the right in certain cases to request that we only process your data in a restricted manner.
Right to data portability: You have the right to request that we transmit your data to you or another controller in a structured, commonly used, and machine-readable format.
Right to lodge a complaint: You have the right to lodge a complaint with a supervisory authority. The supervisory authority of your usual place of residence, your workplace, or our company headquarters is responsible.

Right of withdrawal

You have the right to withdraw your consent to data processing at any time.

Right to object

You have the right to object at any time to the processing of your data, which we base on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. If you make use of your right to object, we ask you to state the reasons. We will then no longer process your personal data, unless we can demonstrate to you that compelling legitimate reasons for the data processing override your interests and rights.

Regardless of the foregoing, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.

Please direct your objection to the contact address of the controller specified above.

When do we delete your data?

We delete your data when we no longer need it or when you instruct us to do so. This means that - unless otherwise specified in the individual privacy notices of this privacy policy - we delete your data,

when the purpose of data processing has ceased to exist and thus the respective legal basis mentioned in the individual privacy notices no longer exists, e.g.
- after termination of the contractual or membership relationships existing between us (Art. 6 para. 1 lit. a GDPR) or
- after our legitimate interest in further processing or storage of your data has ceased to exist (Art. 6 para. 1 lit. f GDPR),
when you make use of your right of withdrawal and no other legal basis for processing within the meaning of Art. 6 para. 1 lit. b-f GDPR applies,
when you make use of your right to object and no compelling legitimate reasons oppose the deletion.

However, if we must retain (certain parts of) your data for other purposes, because this is required, for example, by tax retention periods (usually 6 years for business correspondence or 10 years for booking documents) or the assertion, exercise, or defense of legal claims from contractual relationships (up to four years) or the data is needed to protect the rights of another natural or legal person, we delete (the part of) your data only after these periods have expired. Until these periods expire, we restrict the processing of this data to these purposes (fulfillment of retention obligations).

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored on your device. Cookies primarily serve to exchange information between your device and our website. This includes, among other things, language settings on a website, login status, or the position where a video was watched.

When visiting our websites, two types of cookies are used:

Temporary cookies (session cookies): These store a so-called session ID, which can be used to assign various requests from your browser to the common session. Session cookies are deleted when you log out or close your browser.
Permanent cookies: Permanent cookies remain stored even after closing the browser. This allows our website to recognize your computer again when you return to our website. Information such as language settings or login information is stored in these cookies. In addition, your surfing behavior can be documented and stored with these cookies. This data can be used for statistics, marketing, and personalization purposes.

In addition to the above classification, cookies can also be distinguished with regard to their purpose of use:

Necessary cookies: These are cookies that are absolutely necessary for the operation of our website, to store logins or shopping carts for the duration of your session, or cookies that are set for security reasons.
Statistics, marketing, and personalization cookies: These are cookies that are used for analysis purposes or reach measurement. Such "tracking" cookies can store information about entered search terms or the frequency of page views. In addition, the surfing behavior of an individual user (e.g., viewing certain content, using functions, etc.) can be stored in a user profile. Such profiles are used to display content to users that corresponds to their potential interests. To the extent that we use services through which cookies are stored on your device for statistics, marketing, and personalization purposes, we inform you separately about this in the following sections of our privacy policy or in the context of obtaining your consent.

Affected data:

Usage data (e.g., access times, clicked websites)
Communication data (e.g., information about the device used, IP address).

Affected persons: Users of our online services

Purpose of processing: Display of our websites, ensuring the operation of our websites, improvement of our internet offering, communication and marketing

Legal basis:
Legitimate interest, Art. 6 para. 1 lit. f GDPR
If we do not obtain consent from you for setting cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, especially the content and functions. You can object to the use of cookies set by us within the framework of our legitimate interest through the security settings of your browser. There you have the option to specify whether you accept no cookies or only cookies on request from the outset, or to specify that cookies are deleted after each closing of your browser. If cookies are disabled for our website, it may no longer be possible to use all functions of the website to their full extent.

Web hosting

We use a provider to maintain our websites, on whose servers our websites are stored and made available for retrieval on the internet (hosting). In this context, the provider can process all data transmitted via your browser that arises when using our websites. This includes in particular your IP address, which the provider needs to deliver our online offering to your browser, as well as all inputs you make via our website. In addition, the provider we use can

the date and time of access to our website
time zone difference to Greenwich Mean Time (GMT)
access status (HTTP status)
the amount of data transferred
the internet service provider of the accessing system
the browser type and version you use
the operating system you use
the website from which you may have accessed our website
the pages or subpages you visit on our website.

collect. The aforementioned data is stored as log files on the servers of our provider. This is necessary to ensure the stability and security of the operation of our website.

Affected data:

Content data (e.g., posts, photos, videos)
Usage data (e.g., access times, clicked websites)
Communication data (e.g., information about the device used, IP address)

Affected persons: Users of our internet presence

Purpose of processing: Display of our websites, ensuring the operation of our websites

Legal basis: Legitimate interest, Art. 6 para. 1 lit. f GDPR

Web host commissioned by us:

Hetzner Online

Service provider: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen
Website: https://www.hetzner.de/
Privacy policy: https://www.hetzner.de/rechtliches/datenschutz

Contact

To the extent that you contact us via email, social media, telephone, fax, mail, our contact form, or otherwise and provide us with personal data such as your name, phone number, or email address or make other information about your person or your concern, we process this data to answer your request within the framework of the pre-contractual or contractual relationships existing between us.

Affected data:

Inventory data (e.g., names, addresses)
Contact data (e.g., email address, phone number, postal address)
Content data (texts, photos, videos)
Contract data (e.g., subject matter of contract, contract duration)

Affected persons: Interested parties, customers, business and contract partners

Purpose of processing: Communication as well as answering contact requests, office and organizational procedures

Legal basis: Contract fulfillment and pre-contractual requests, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Handling of your data in the application process

If you apply to us, we process the personal data you transmit to us in the application process, such as your name, address, place of residence, age, application photo, email and phone number, professional background including schools, education, studies. If you send the data by email or via a contact form on our online presence, the processing is done electronically. When sending your application via the contact form, the transmission of your data is encrypted according to the state of the art. If you send your data by email, we point out that the transmission usually takes place unencrypted. If an employment contract is concluded after the application process, we store your data for the purpose of processing the employment relationship in compliance with legal requirements.

Affected data:

Inventory data (e.g., names, addresses)
Payment data (e.g., bank account details, invoices)
Contact data (e.g., email address, phone number, postal address)
Contract data (e.g., subject matter of contract, contract duration)

Affected persons: Applicants

Purpose of processing: Processing of the application process

Legal basis: Contract fulfillment and pre-contractual requests, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR

Deletion: If no employment contract is concluded, your data will be deleted after completion of the application process or at the latest 2 months after its completion. This does not apply if legal provisions oppose the deletion or if further storage of your data is required for the purpose of evidence, for example in proceedings under the General Equal Treatment Act (AGG). The application process is considered completed with the sending of the rejection to you.

Online advertising

We use services to display internet advertising. Through the services we use, certain user data is collected via a cookie or pixel. This includes in particular information about which website you came to our internet presence from (so-called referrer), which pages of our internet presence you accessed, how long you visited our pages, and which interactions you performed there. In addition, data about the browser, computer system, and device type you use is collected. Furthermore, demographic information such as age or gender can be captured as pseudonymous values via such a service. If you have consented to the collection of your location data, this can also be processed depending on the provider. To collect and store this data, the respective service sets a cookie or so-called counting pixel on your device, with which the IP address assigned to you is also collected. However, this is shortened via a so-called IP masking procedure, so that the IP address can no longer be assigned to your visit to our website. In principle, no plain data such as names or email addresses are stored when using the respective service. This is only the case if you are a member of a social network that offers one of the services mentioned below and merges your profile with the aforementioned data material.

The data is evaluated by the service we use to create a report with statistical statements about the number of visitors generated through the advertising and the success of the advertising measure. The reports show, among other things, the total number of users who were redirected to our website via our ads. In addition, the reports contain information about the devices and browsers of the users, where the users were located, at what times the ad was clicked. However, the reports do not contain any information with which you as a user of our page could be personally identified.

We would like to point out that depending on the location of the service provider, the data collected via the service may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR is not maintained and the enforcement of your rights cannot or can only be enforced with difficulty.

Affected data:

Usage data (e.g., access times, clicked websites)
Communication data (e.g., information about the device used, IP address)

Affected persons: Users of our online services

Purpose of processing: Reach measurement, success control of campaigns, remarketing as well as interest- and behavior-based marketing

Legal basis: If we have asked for your consent before using the respective service, this constitutes the legal basis, Art. 6 para. 1 lit. a GDPR. Otherwise, we use the respective service based on our legitimate interest in directing visitor flows to our website, analyzing these visitor flows to continuously improve the functions, offerings, and user experience, Art. 6 para. 1 lit. f GDPR.

We use the following service providers for online advertising:

Google Ads

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Location in Europe: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://ads.google.com/home/
Privacy policy: http://www.google.de/intl/de/policies/privacy

Newsletter

We send a newsletter at regular intervals to inform our customers and business partners and interested parties about our offerings and related news. You have the option to subscribe to our newsletter on our website and to consent to receiving the newsletter as part of the registration. When you subscribe to our newsletter, providing your email address is mandatory. We store the email address to be able to send you the newsletter. As soon as you register for our newsletter, you will receive a confirmation email to the email address provided during registration in the so-called double opt-in procedure. This email contains a link. When you click on this link, you confirm that you want to receive the newsletter. This ensures that your email address was not misused by a third party during registration. For the same reason, we store the date and time of registration as well as the IP address assigned to you during registration. We do not pass on the aforementioned data to third parties.

Affected data:

Content data (e.g., posts, photos, videos)
Usage data (e.g., access times, clicked websites)
Communication data (e.g., information about the device used, IP address)

Affected persons: Users of our internet presence

Purpose of processing: Display of our websites, ensuring the operation of our websites

Legal basis: Consent, Art. 6 para. 1 lit. a GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR

Deletion: The deletion of the email address occurs either if you have not clicked the confirmation link in the double opt-in procedure 1 month after sending the confirmation email or immediately after you unsubscribe from our newsletter.

Withdrawal: You can withdraw your consent to receive the newsletter at any time and unsubscribe from the newsletter subscription. We offer the following options through which you can declare the withdrawal:

Click on the link provided for this purpose in the newsletter

Mailchimp

Service provider: "Mailchimp" - Rocket Science Group LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA
Website: https://mailchimp.com
Privacy policy: https://mailchimp.com/legal/privacy/

Web analytics and statistics

To capture and statistically evaluate visitor flows on our internet presence, we use web analytics services. Such services collect, among other things, data about which website you came to our internet presence from (so-called referrer), which pages of our internet presence you accessed, how long you visited our pages, and which interactions you performed there. In addition, data about the browser, computer system, and device type you use is collected. Furthermore, demographic information such as age or gender can be captured as pseudonymous values via such a service. If you have consented to the collection of your location data, this can also be processed depending on the provider.

To collect and store this data, the web analytics service we use typically sets a cookie on your device, with which the IP address assigned to you is also collected. However, this is shortened via a so-called IP masking procedure, so that the IP address can no longer be assigned to your visit to our website. Otherwise, no plain data such as names or email addresses are stored. Neither we nor the service we use knows the identity of visitors to our websites.

When collecting the data, the service provider can, however, create pseudonymous usage profiles with information from the use of various devices through the use of cookies.

We would like to point out that depending on the location of the service provider mentioned below, the data collected via the service may be transferred and processed outside the European Union. In this case, there is a risk that the level of data protection prescribed by the GDPR is not maintained and the enforcement of your rights cannot or can only be enforced with difficulty.

Affected data:

Usage data (e.g., access times, clicked websites)
Communication data (e.g., information about the device used, IP address).

Affected persons: Users of our online services

Purpose of processing: Reach measurement, success control of campaigns, remarketing as well as interest- and behavior-based marketing

Legal basis: If we have asked for your consent before using the respective service, this constitutes the legal basis, Art. 6 para. 1 lit. a GDPR. Otherwise, we use the respective service based on our legitimate interest in analyzing visitor flows to our websites to continuously improve the functions, offerings, and user experience, Art. 6 para. 1 lit. f GDPR.

We use the following web analytics services:

Google Analytics 4

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Location within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Privacy policy: https://policies.google.com/privacy?hl=de
Note on data transfer to Google Analytics servers: When accessing our website within the EU (based on the geographical location according to IP address), the IP address assigned to you is collected exclusively via servers in the EU and used as geolocation data, then immediately deleted. It is neither logged nor used in any other way. The further measurement data is then forwarded to Google Analytics servers to be evaluated there.
Opt-out option: If you do not want your data to be used by Google Analytics, you can set a so-called opt-out plugin, which will prevent data from you being collected on our website in the future. You can get this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de

Google Universal Analytics

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Location within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://marketingplatform.google.com/intl/de/about/analytics/
Privacy policy: https://policies.google.com/privacy?hl=de
Cross-device tracking: With cross-device tracking, data from the websites you visit as well as data from other devices can be evaluated with the help of a user ID, and the user can be recognized again on the other device. The user ID is assigned by us. It serves as a pseudonym. Identification of the internet user is excluded in this case.
Opt-out option: If you do not want your data to be used by Google Analytics, you can set a so-called opt-out plugin, which will prevent data from you being collected on our website in the future. You can get this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de

Security measures

We also take technical and organizational security measures according to the state of the art to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or against unauthorized access by third parties.

Currency and changes to this privacy policy

This privacy policy is currently valid and has the status of July 2025. Due to changed legal or official requirements, it may become necessary to adapt this privacy policy.

This privacy policy was created with the help of the privacy policy generator from SOS Recht. SOS Recht is an offering of Mueller.legal Rechtsanwälte Partnerschaft based in Berlin.