Data protection

Privacy policy

We, the Allianz Industrie 4.0 Baden-Württemberg, are pleased that you are visiting our website www.i40-bw.de. Your privacy is an important concern for us. We are committed to protecting your personal data and treating it confidentially. Your personal data is processed exclusively within the framework of the applicable statutory provisions of data protection law, in particular the General Data Protection Regulation (hereinafter “GDPR”).

We process personal data of employees, interested parties and business partners. This personal data is the subject of this data protection information. This document is intended to inform you about the scope of the processing of your personal data and about your data protection rights.

 

1. Person responsible for data processing and data protection officer; contact

The person responsible for data processing within the meaning of the data protection laws is:

Coordination office
Allianz Industrie 4.0 Baden-Württemberg
at VDMA e. V. Baden-Württemberg

Kronenstraße 3
70173 Stuttgart
Tel: +49 711 22801-20
Email: info@i40-bw.de

If you have any questions or suggestions regarding data protection, please do not hesitate to contact us.

Data Protection Officer:

Scheja & Partner Rechtsanwälte mbB
Data Protection Officer
Adenauerallee 136
53113 Bonn
Contact: www.scheja-partner.de/kontakt

 

2. Your data subject rights

As the person whose data is being processed, you have recourse to a number of rights. In detail:

  • Right to information
    You have the right to obtain information about the personal data stored by us relating to you.
  • Right of rectification and erasure
    You have the right to request the rectification of incorrect data and – insofar as the legal prerequisites are fulfilled – the erasure of your data.
  • Restriction of processing
    You have the right – insofar as the legal prerequisites are fulfilled – to request that we restrict the processing of your data.
  • Data portability
    If you have provided us with data on the basis of an agreement and/or a contract or consent, you can request, if you have the legal grounds to do so, that you receive the data that you have provided in a structured, commonly used and machine-readable format or that we transmit this to another controller.
  • Withdrawal of consent
    If you have provided us with consent to process your data, you may withdraw this at any time with future effect. The lawfulness of processing your data up until such withdrawal shall remain unaffected hereby.
  • Right to lodge a complaint with a supervisory authority
    You can also lodge a complaint with the responsible supervisory authority if you are of the opinion that your data has been processed in breach of the applicable law. To this end, you may contact the data protection officer who is responsible for your city or your state or the data protection authorities responsible for us. A list of the supervisory authorities (for the non-public sector) with addresses can be found at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

 

3. Right to object

Right to object on a case-by-case basis     

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data which is carried out on the basis of Article 6 (1) sentence 1 e) GDPR or Article 6 (1) sentence 1 f) GDPR; this also applies to profiling based on these provisions. We will then no longer process this personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to object to processing of data for direct marketing purposes              

In some cases, we process your data in order to carry out direct advertising. You have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.  This also applies to profiling, insofar as it is connected with such direct advertising. If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

 

4. Your contact with us and exercise of your rights

You may contact us, free of charge, if you have any questions regarding your personal data, your rights as a data subject and any consent that may have been granted. To exercise any of your aforementioned rights, please contact us at datenschutz@vdma.org or by post to the address given in Point 1 above. Please ensure we are able to unambiguously identify you personally. When withdrawing consent, you can also choose the contact channel you used when giving consent.

 

5. Purposes of data processing by the responsible body and third parties

In principle, our website content is available to all users of the website without collecting personal data. Personal data will only be requested, processed and used to the extent necessary to provide the services requested by you or to make content available. This is mainly data that you enter in a contact form. We will only process your personal data for the purposes set out in this privacy policy. Your personal data will not be transferred to third parties for purposes other than those mentioned. We will only share your personal information with third parties if:

  • You have given your express consent to this,
  • the processing is necessary for the performance of a contract with you,
  • the processing is necessary for compliance with a legal obligation,

the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.

As the controller, Allianz Industrie 4.0 Baden-Württemberg has implemented numerous technical and organisational measures to protect the personal data we have under our control against accidental or intentional manipulation, loss, destruction or against access by unauthorised persons. Our security measures are continuously improved in line with technological developments. Nevertheless, internet-based data transmissions can always have security gaps, so absolute protection cannot be guaranteed. For this reason, every data subject is free to submit personal data to us by alternative means, for example by telephone.

The subject of data protection is personal data. This is any information relating to an identified or identifiable natural person (known as a data subject). This includes, for example, information such as name, postal address, email address or telephone number, but also information that necessarily arises during the visit to our website, such as information about the beginning, end and scope of use.

 

6. Collection, processing and use of personal data

We use your personal data exclusively to provide you with a comprehensive service via the website or to comply with your contact requests and to carry out anonymous evaluations for statistical surveys.

It is also possible to use our website without revealing your identity to us. However, if you sign up for one of our personalised services (e.g. ordering an infoletter), we will ask you for the information required to provide it, such as your name, email address and telephone, as well as company and company address. It is your own personal decision whether or not you provide this data. However, without this information we may not be able to provide the requested service or process your request.

Log files

Data category:
URL accessed, IP address of the user, time and date of access, volume of data transferred, Internet page from which the user accessed the requested page (so-called „referrer“), Internet page accessed by the user’s system via our website, http status, information on the browser type and version used, user’s operating system, user’s Internet service provider

Purpose:
Statistical evaluations, improvement of the website, system security (e.g. prevention of misuse), error diagnosis

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):
No

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Data source:
Direct collection when calling up the website

The log files are deleted automatically at the legally required intervals by our provider WebhostONE, with whom we have concluded an order processing agreement.

Where is the data processed?

The data is processed exclusively in data centres in the Federal Republic of Germany. The duration of the storage depends on the legal requirements and can be found in the respective functionalities in this privacy policy.

 

7. Consent to further use

The use of certain offers on our website, such as infoletters or application forms, may require prior registration and further processing of personal data, for example longer-term storage of email addresses. Such data will only be used if you have transmitted it to us and expressly consented to its use in advance. In the following cases, for example, we ask you for your consent at a separate point.

 

8. Cookies

We use cookies on our website www.i40-bw.de to offer a comprehensive range of functions, to make the site more convenient to use and to be able to optimise our offers. Cookies are small text files that are generated by a web server and stored on your computer by the web browser used during the online visit. We predominantly use so-called „session cookies“. These are automatically deleted after the end of your browser session. We also use long-term cookies, which are primarily used to provide you, as a visitor to our website, with permanently recurring settings. This allows us to adapt our website individually to your wishes. Long-term cookies also allow us to analyse the usage behaviour of visitors, but only within the scope of the cookie’s validity period. Furthermore, in connection with the integration of certain third-party services (see above), additional cookies may be set by their providers (so-called „third-party cookies“).

If you do not wish cookies to be used, you can prevent cookies from being stored on your device by selecting the appropriate settings in your internet browser. Please note that the functionality and scope of functions of our offer may be limited as a result. Furthermore, we will only set certain cookies if you have previously consented to this (see below). You can also make use of separate objection options for certain cookies (see below). Please refer to the information in the tables below for detailed information on the type, scope, purposes, legal basis and options for objecting to data processing in connection with these cookies.

First Party Cookies

  • JSESSIONID-LANG

Data category:
First and last name of the person seeking contact, postal address, telephone number, email address, content of the message

Purpose:
Receiving and processing enquiries, complaints or other feedback

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

If applicable, guarantees for third country transfers and access to these:

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Exercise of withdrawal, if applicable:

Data source:
Direct collection when calling up the website/service

  • JSESSIONID-ACCOUNT

Data category:
First and last name of the person seeking contact, postal address, telephone number, email address, content of the message

Purpose:
Receiving and processing enquiries, complaints or other feedback

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

If applicable, guarantees for third country transfers and access to these:

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Exercise of withdrawal, if applicable:

Data source:
Direct collection when calling up the website/service

  • _track

Data category:
First and last name of the person seeking contact, postal address, telephone number, email address, content of the message

Purpose:
Receiving and processing enquiries, complaints or other feedback

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

If applicable, guarantees for third country transfers and access to these:

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Exercise of withdrawal, if applicable:

Data source:
Direct collection when calling up the website/service

Third Party Cookies

  • Google Maps
    Data category:
    URL accessed, IP address of the user, time and date of access, volume of data transferred, Internet page from which the user accessed the requested page (so-called „referrer“), Internet page accessed by the user’s system via our website, http status, information on the browser type and version used, user’s operating system, user’s Internet service provider

Purpose:
Statistical evaluations, improvement of the website, system security (e.g. prevention of misuse), error diagnosis

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

If applicable, guarantees for third country transfers and access to these:

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Exercise of withdrawal, if applicable:

Data source:
Direct collection when calling up the website/service

  • _Google_Ad-Sense
    Data category:
    URL accessed, IP address of the user, time and date of access, volume of data transferred, Internet page from which the user accessed the requested page (so-called „referrer“), Internet page accessed by the user’s system via our website, http status, information on the browser type and version used, user’s operating system, user’s Internet service provider

Purpose:
Statistical evaluations, improvement of the website, system security (e.g. prevention of misuse), error diagnosis

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

If applicable, guarantees for third country transfers and access to these:

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Exercise of withdrawal, if applicable:

Data source:
Direct collection when calling up the website/service

  • Matomo cookies

This website uses the open source web analytics service Matomo. Matomo uses so-called „cookies“. These are text files that are stored on your computer and enable an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymised before storage. Matomo cookies remain on your terminal device until you delete them.

Matomo cookies are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in the anonymised analysis of user behaviour in order to optimise both its website and its advertising. The information generated by the cookie about the use of this website is not passed on to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. If you do not agree to the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie is stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, this will also have the effect of deleting the Matomo opt-out cookie. The opt-out cookie must be reactivated when you visit our site again.

 

9. IP anonymisation

We have activated the IP anonymisation function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

 

10. Infoletter Registration

On the Allianz Industrie 4.0 Baden-Württemberg website, users are given the opportunity to subscribe to our company’s infoletter. The personal data that is transmitted to the controller when ordering the infoletter is determined by the input screen used for this purpose.

Allianz Industrie 4.0 Baden-Württemberg periodically informs its customers and business partners about company offers by means of an infoletter. The infoletter of our company can only be received by the data subject if (1) the data subject has a valid email address and (2) the data subject registers to receive the infoletter. For legal reasons, a confirmation email is sent to the email address entered by a data subject when sending out the infoletter for the first time using the double opt-in procedure. This confirmation email is used to verify that the owner of the email address, as the data subject, has authorised receipt of the infoletter.

When subscribing to the infoletter, we also store the IP address of the computer system used by the data subject at the time of subscription, as assigned by the internet service provider (ISP), as well as the date and time of subscription. The collection of this data is necessary in order to be able to trace the (possible) misuse of a data subject’s email address at a later date and therefore serves as a legal safeguard for the controller. This is carried out on the basis of Article 6 (1)(a) of the GDPR.

No personal data collected as part of the infoletter service will be passed on to third parties. The subscription to our infoletter can be cancelled by the data subject at any time.

Data category:
First and last name of the person seeking contact, postal address, telephone number, email address, content of the message

Purpose:
Receiving and processing enquiries, complaints or other feedback

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

If applicable, guarantees for third country transfers and access to these:

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Exercise of withdrawal, if applicable:

Data source:
Direct collection when calling up the website/service

Infoletter tracking

Allianz Industrie 4.0 Baden-Württemberg’s info letters contain so-called tracking pixels. A tracking pixel is a thumbnail graphic that is embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Allianz Industrie 4.0 Baden-Württemberg can use the embedded tracking pixel to see whether and when an email was opened by a data subject and which links in the email were clicked on by the data subject.

Personal data collected via the tracking pixels contained in the infoletters are stored and analysed by the controller in order to optimise the sending of infoletters and to better adapt the content of future infoletters to the interests of the data subject. This is carried out on the basis of Article 6 (1)(a) of the GDPR. This personal data will not be passed on to third parties. Data subjects are entitled at any time to withdraw separate declaration of consent given in this regard via the double opt-in procedure. After withdrawal, these personal data will be deleted by the controller. If there is no withdrawal, this personal data will be deleted after 3 years. Allianz Industrie 4.0 Baden-Württemberg automatically deems a cancellation of the infoletter to be a withdrawal.

 

11. Contact option via the website

The Allianz Industrie 4.0 Baden-Württemberg website contains, on the basis of statutory provisions, information that enables quick electronic contact to our company as well as direct communication with us, which also includes a general address for so-called electronic mail (email address). If a data subject contacts the controller by email or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data provided on a voluntary basis by a data subject to the controller shall be stored for the purposes of processing or contacting the data subject. This personal data will not be passed on to third parties. The legal basis for this processing is Article 6(1)(a), (b) and (f) of the GDPR. The data will be deleted after the request has been processed.

Contact form

Data category:
First and last name of the person seeking contact, postal address, telephone number, email address, content of the message

Purpose:
Receiving and processing enquiries, complaints or other feedback

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Data source:
Direct collection when calling up the website/service

 

12. Links to websites of other providers

Our websites may contain links to websites of other providers. We would like to point out that this privacy policy applies exclusively to the websites of the Allianz Industrie 4.0 Baden-Württemberg. We have no influence on and do not control that other providers comply with the applicable data protection regulations.

 

13. Routine deletion and blocking of personal data

The controller shall process and store personal data of the data subject only for the time necessary to achieve the purpose of storage or where provided for by the European Directive and Regulation or other legislator in laws or regulations to which the controller is subject.

If the purpose of storage no longer applies or if a storage period prescribed by the European Directive and Regulation or another competent legislator expires, the personal data will be routinely blocked or deleted in accordance with the statutory provisions.

 

14. Integration of third-party services and content

It is possible that third party content, such as videos from YouTube, maps from Google Maps, RSS feeds or graphics from other websites may be integrated within this online offer. This always assumes that the providers of this content (hereinafter referred to as „third-party providers“) are aware of the IP address of the users. This is because without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is thus required for the display of this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence if the third-party providers store the IP address, e.g. for statistical purposes. As far as this is known to us, we inform the users about it.

  • Google Maps data category:
    URL accessed, IP address of the user, time and date of access, volume of data transferred, Internet page from which the user accessed the requested page (so-called „referrer“), Internet page accessed by the user’s system via our website, http status, information on the browser type and version used, user’s operating system, user’s Internet service provider

Purpose:
Statistical evaluations, improvement of the website, system security (e.g. prevention of misuse), error diagnosis

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

If applicable, guarantees for third country transfers and access to these:

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Exercise of withdrawal, if applicable:

Data source:
Direct collection when calling up the website/service

Further notes: To prevent a connection to Google Maps, you can deactivate JavaScript in the browser settings.

  • Facebook Social Plugin data category:
    First and last name of the person seeking contact, postal address, telephone number, email address, content of the message

Purpose:
Receiving and processing enquiries, complaints or other feedback

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

If applicable, guarantees for third country transfers and access to these:

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Exercise of withdrawal, if applicable:

Data source:
Direct collection when calling up the website/service

  • YouTube videos data category:
    First and last name of the person seeking contact, postal address, telephone number, email address, content of the message

Purpose:
Receiving and processing enquiries, complaints or other feedback

Legal basis:
Article 6(1)(b) and (f) GDPR

Legitimate interests pursued, if any:
see purposes

Recipients or categories of recipients:
Hosting provider, internal departments, external service provider for technical support, government agencies on request

Third country transfer; appropriateness decision (yes/no):

If applicable, guarantees for third country transfers and access to these:

Storage periods or criteria for determining them:
7 days after creation

Obligation to provide personal data and, if applicable, the consequences of not providing it:
No obligation to provide, automatically collected when calling the service

Exercise of withdrawal, if applicable:

Data source:
Direct collection when calling up the website/service

Further notes: The integration is carried out by the „extended data protection mode“ of YouTube.

 

15. Social PlugIns

On some of our websites, we also use social plugins, for example those of the social networks LinkedIn, Twitter, YouTube or Xing. These are often technically operated in the USA or other countries outside Germany and the EU and are sometimes offered via national companies in the EU. The plug-ins are marked, for example, with the logo of the companies, comment fields or a so-called „Like“, „Like“ or „+1“ button.

When you open a page of our website in your web browser that contains such a plug-in, your web browser establishes a direct connection with the servers of the respective provider in the respective country.

By integrating the plug-ins, the provider receives at least the information that you have visited a certain page of our website, and possibly also further information that your web browser or the device you are using disclose. The content of the plug-in is loaded by your web browser directly from the provider and integrated into our website. If you are registered and logged in to the provider in question, your visit can also be assigned to your user account.

If you interact with a plug-in, e.g. click on the „Like“ button or enter a comment in a form field, this information is also transmitted directly from your browser to the provider and stored there and, if necessary, further used and published.

Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must connect to Google’s servers. This enables Google to know that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR. If your browser does not support web fonts, a standard font is used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy https://www.google.com/policies/privacy/.

Google Maps

This site uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. Google Maps is used in the interest of an attractive presentation of our online offers and to make it easy to find the places we indicate on the website. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

More information on the handling of user data can be found in Google’s privacy policy https://www.google.de/intl/de/policies/privacy/.

The purpose and scope of the described data collection and use are primarily marketing measures of the provider and the Allianz Industrie 4.0 Baden-Württemberg. You can read details about this and your rights and setting options for protecting your privacy directly from the respective provider in their privacy policy.

If you do not want a provider to collect data about you via our websites, you must deactivate plug-ins in your web browser. If you want to avoid a link with a possibly existing user account, you must log out before visiting our websites. By visiting our websites, you agree to the above terms and conditions.

LinkedIn

The controller has integrated components of the LinkedIn Corporation on this website. LinkedIn is an internet-based social network that allows users to connect with existing business contacts and make new business contacts. Over 400 million registered people use LinkedIn in more than 200 countries. This makes LinkedIn currently the largest platform for business contacts and one of the most visited websites in the world.

The operating company of LinkedIn is LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. For data protection matters outside the USA, LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible.

For each individual call-up of our website that is equipped with a LinkedIn component (LinkedIn plug-in), this component causes the browser used by the data subject to download a corresponding representation of the component from LinkedIn. Further information on LinkedIn plug-ins can be found at https://developer.linkedin.com/plugins. As part of this technical procedure, LinkedIn receives information about which specific sub-page of our website is visited by the data subject.

If the data subject is logged in to LinkedIn at the same time, LinkedIn recognises which specific sub-page of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the LinkedIn component and assigned by LinkedIn to the respective LinkedIn account of the person concerned. If the data subject activates a LinkedIn button integrated on our website, LinkedIn assigns this information to the personal LinkedIn user account of the data subject and stores this personal data.

LinkedIn always receives information via the LinkedIn component that the data subject has visited our website if the data subject is logged into LinkedIn at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the LinkedIn component or not. If the data subject does not want this information to be transmitted to LinkedIn, they can prevent the transmission by logging out of their LinkedIn account before accessing our website.

LinkedIn offers the ability to unsubscribe from email messages, SMS messages and targeted ads, as well as manage ad settings at https://www.linkedin.com/psettings/guest-controls. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, which may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy. LinkedIn’s applicable privacy policy is available at https://www.linkedin.com/legal/privacy-policy. LinkedIn’s cookie policy is available at https://www.linkedin.com/legal/cookie-policy.

Twitter

The controller has integrated Twitter components on this website. Twitter is a multilingual publicly accessible microblogging service on which users can publish and disseminate so-called tweets, i.e. short messages limited to 140 characters. These short messages can be accessed by anyone, including people who are not registered with Twitter. However, the tweets are also displayed to the so-called followers of the respective user. Followers are other Twitter users who follow a user’s tweets. Furthermore, Twitter makes it possible to address a broad audience via hashtags, links or retweets.

The operating company of Twitter is Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Each time a data subject accesses one of the individual pages of this website operated by the data controller on which a Twitter component (Twitter button) has been integrated, the internet browser on the information technology system of the data subject is automatically caused by the respective Twitter component to download a representation of the corresponding Twitter component from Twitter. Further information on the Twitter buttons can be found at https://about.twitter.com/de/resources/buttons. As part of this technical procedure, Twitter receives information about which specific sub-page of our website is visited by the data subject. The purpose of integrating the Twitter component is to enable our users to distribute the content of this website, to make this website known in the digital world and to increase our visitor numbers.

If the data subject is logged into Twitter at the same time, Twitter recognises which specific sub-page of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Twitter component and assigned by Twitter to the respective Twitter account of the person concerned. If the data subject activates one of the Twitter buttons integrated on our website, the data and information thus transmitted will be assigned to the personal Twitter user account of the data subject and stored and processed by Twitter.

Twitter always receives information via the Twitter component that the data subject has visited our website if the data subject is logged into Twitter at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the Twitter component or not. If the data subject does not want this information to be transmitted to Twitter, they can prevent the transmission by logging out of their Twitter account before accessing our website.

Twitter’s applicable privacy policy is available at https://twitter.com/privacy?lang=de.

Xing

The controller has integrated components of Xing on this website. Xing is an internet-based social network that allows users to connect with existing business contacts and make new business contacts. Individual users can create a personal profile of themselves on Xing. Companies can, for example, create company profiles or publish job offers on Xing.

The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

Each time a data subject accesses one of the individual pages of this website operated by the data controller on which a Xing component (Xing plug-in) has been integrated, the internet browser on the information technology system of the data subject is automatically prompted by the respective Xing component to download a representation of the corresponding Xing component from Xing. Further information on the Xing plug-ins can be found at https://dev.xing.com/plugins. Within the scope of this technical procedure, Xing receives information about which specific sub-page of our website is visited by the data subject.

If the data subject is logged in to Xing at the same time, Xing recognises which specific sub-page of our website the data subject is visiting each time the data subject calls up our website and for the entire duration of the respective stay on our website. This information is collected by the Xing component and assigned by Xing to the respective Xing account of the person concerned. If the data subject activates one of the Xing buttons integrated on our website, for example the „Share“ button, Xing assigns this information to the data subject’s personal Xing user account and stores this personal data.

Xing always receives information via the Xing component that the data subject has visited our website if the data subject is logged into Xing at the same time as calling up our website; this takes place regardless of whether the data subject clicks on the Xing component or not. If the data subject does not want this information to be transmitted to Xing, they can prevent the transmission by logging out of their Xing account before accessing our website.

The data protection provisions published by Xing, which can be accessed at https://www.xing.com/privacy, provide information on the collection, processing and use of personal data by Xing. Furthermore, Xing has published privacy notices for the XING Share button at https://www.xing.com/app/share?op=data_protection.

YouTube

The controller has integrated YouTube components on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all kinds of videos, which is why complete film and television programmes, but also music videos, trailers or videos made by users themselves can be accessed via the internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA, USA.

Each time a data subject accesses one of the individual pages of this website operated by the data controller on which a YouTube component (YouTube video) has been integrated, the internet browser on the data subject’s information technology system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. Further information on YouTube can be found at https://www.youtube.com/yt/about/de/. As part of this technical procedure, YouTube and Google receive information about which specific sub-page of our website is visited by the data subject.

If the data subject is logged into YouTube at the same time, YouTube recognises which specific sub-page of our website the data subject is visiting when a sub-page containing a YouTube video is called up. This information is collected by YouTube and Google and assigned to the respective YouTube account of the person concerned.

YouTube and Google always receive information via the YouTube component that the data subject has visited our website if the data subject is logged into YouTube at the same time as calling up our website; this takes place regardless of whether the data subject clicks on a YouTube video or not. If the data subject does not want this information to be transmitted to YouTube and Google, they can prevent the transmission by logging out of their YouTube account before accessing our website.

The privacy policy published by YouTube, which can be accessed at https://www.google.de/intl/de/policies/privacy/, provides information on the collection, processing and use of personal data by YouTube and Google.

 

16. Data protection in applications and the application process

The controller collects and processes the personal data of applicants for the purpose of managing the application procedure. The processing may also be carried out electronically. This is particularly the case if an applicant sends the relevant application documents to the controller electronically, for example by email or via a web form on the website. If the data controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application files shall be automatically deleted two months after the notification of the rejection decision, unless otherwise justified by the controller. Other legitimate interest in this sense is, for example, a duty to provide evidence in proceedings under the German General Equal Treatment Act (AGG).

 

17. Legal basis of the processing

Art. 6 (I)(a) GDPR serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Article 6 (I)(b) of the GDPR. The same applies to processing operations that are necessary for the implementation of pre-contractual measures, for example in the case of enquiries about our products or services. If our company is subject to a legal obligation by which the processing of personal data becomes necessary, such as for the fulfilment of tax obligations, the processing is based on Article 6 (I)(c) of the GDPR. In rare cases, the processing of personal data might become necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured on our premises and as a result their name, age, health insurance details or other vital information needed to be passed on to a doctor, hospital or other third party. Then the processing would be based on Article 6 (I)(d) of the GDPR. Ultimately, processing operations could be based on Article 6 (I)(f) of the GDPR. Processing operations which are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and freedoms of the data subject are not overridden. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. The legislator took the view that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, Sentence 2 of the GDPR).

 

18. Legitimate interests in the processing pursued by the controller or a third party

If the processing of personal data is based on Article 6 (I)(f) of the GDPR, our legitimate interest is the performance of our business activities for the benefit of the wellbeing of all our employees and our shareholders.

 

19. Existence of automated decision making

As a responsible company, we do not use automatic decision-making or profiling.

 

20. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from „http://“ to „https://“ and by the lock symbol in your browser bar. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

 

21. Legal or contractual requirements to provide the personal data; necessity for the conclusion of the contract; obligation of the data subject to provide the personal data; possible consequences of non-provision

We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or may also result from contractual regulations (e.g. information on the contractual partner). Sometimes, in order to conclude a contract, it may be necessary for a data subject to provide us with personal data which must subsequently be processed by us. For example, the data subject is obliged to provide us with personal data if our company concludes a contract with him or her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before providing personal data by the data subject, the data subject must contact our data protection officer. Our data protection officer will inform the data subject on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.

 

22. Objection to advertising mails

The use of contact data published within the framework of the imprint obligation for the transmission of advertising and information material not expressly requested is herewith objected to. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam e-mails.

 

23. Current version

The most current version of this privacy policy applies. Last updated 25.05.2018.