(Last updated on October 18, 2022)
The correct handling of your data with attention for your personal rights and the observance of your right to informational self-determination in the use of your personal data is an important concern for us, the operators of this website. The processing of your personal data is governed by the relevant legal provisions, in particular the General Data Protection Regulation (GDPR) and other European or national laws on data protection.
1. General information
Responsible for the processing of personal data for this website is:
79098 Freiburg im Breisgau
Tel.: 0800 454 02345
The responsible party is also referred to as the “Controller”, “we” or “us” in the following.
2. Your Rights
As a data subject, you have, under the respective legal conditions, the following rights with regard to the personal data concerning you:
- the right to information;
- the right to rectification or deletion;
- the right to restriction of processing;
- the right to object to processing;
- the right to data portability.
Consents that you have given us to process your data can be revoked at any time with effect for the future. This means that your revocation can only relate to future processing and processing that has already taken place thus continues to comply with data protection regulations.
To exercise your rights, please contact us using the contact details provided in the above.
You also have the right to contact a supervisory authority with complaints about our processing of your data.
3. Automatic collection, processing and use of personal data when visiting the website
When you access our website, the data transmitted by your browser to our server and necessary for the operation of the website (i.e. display, stability, security, etc.) is collected.
This concerns the following data:
- the name of your browser,
- the name of your Internet Service Providers,
- the IP-address of your device,
- the address of the page from which you accessed our website (Referrer-URL),
- the name of your operating system,
- the web pages you visit on our site,
- the date, time and duration of your visit,
- the access status/HTTP-status code,
- the amount of data transferred in each case.
This data is temporarily stored in the log files. The legal basis is Art. 6(1)f GDPR.
When contacting us by e-mail or via our contact form, the data you provide (your e-mail address and your first and last name, possibly other voluntary information) will be stored by us in order to respond to your inquiries. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal retention obligations.
4. Data processing when creating a costumer account and using our services
4.1 Creating a costumer account
We will create a costumer account for you if you have explicitly requested this. On the form “Create new costumer account” we collect the information necessary for a setup (your name, e-mail address and password). As a registered customer you will get access to your customer account by means of your user name and the password have assigned.
Your data will be stored as long as your registration as a costumer is valid. Legal storage obligations, for example due to commercial or tax law requirements, remain unaffected.
If you have any questions regarding your costumer account or if you wish to have it deleted, please contact email@example.com.
4.2 Data processing, storage and legal basis
We process your personal data in inquiries, orders and everything else that is necessary for the fulfillment of the contractual relationship with us on the legal basis of Art. 6(1)b GDPR. This concerns in particular customer master data, contract data and invoice data.
Insofar as we are responsible for processing data as part of our cloud services, this is done on the basis of Art. 6(1)b GDPR. This concerns data that is necessary for the performance of the contract, in particular user master data as well as contract and invoice data.
The data collected in this way is subject, insofar as it is relevant under commercial or tax law, to retention obligations that may extend significantly beyond the time of fulfillment of the contract. The storage due to legal storage obligations is based on Art. 6(1)c GDPR.
Beyond the time of fulfillment of the contract, we store your order history in your customer account, insofar as you have registered as a customer.
As far as necessary, the data may be passed on to companies involved in the contractual performance (suppliers, logistics, shipping) and, if applicable, to order processors bound by instructions.
If we use external service providers to process personal data, these service providers have been carefully selected, commissioned in writing and are bound by our instructions. The service providers will not pass this data on to third parties but will delete it once the contract has been fulfilled and the statutory storage periods have been completed unless consent has been given to store it beyond this.
Cookies are small text files that a web server stores in a specific area of a user´s browser on a website. Cookies are harmless to your computer and do not store personal information such as names, addresses, or payment information. Instead, they provide information to improve the user experience on our website, to manage a shopping cart, or to display advertising tailored to the user.
On the one hand, cookies are differentiated according to their validity period. So-called session cookies are deleted when you close your browser. If you call up our site again, these cookies are set again. However, no reference can be made to a previous session. However, this possible with persistent cookies, which are stored in your browser for a period of time determined by our web server and can therefore store information from previous sessions.
We only set cookies that are absolutely necessary to navigate the website, use basic functions and ensure the security of the website; this is our legitimate interest (Art. 6(1)f GDPR). These cookies do not collect information about you for marketing purposes, nor do they store which websites you have visited.
6. Processing of data of applicants
If you apply to us by e-mail, via contact form, post or by any other means, we will store your details for the purpose of carrying out and for the duration of the application process. This concerns the personal data you provide in your application documents, usually name, address, e-mail address, telephone number, and possibly also sensitive data such as religious affiliation or severely disabled status. If you apply to us via portals operated by third parties, we will receive your data from the source to which you have declared your consent to the transfer of data. You can obtain more information on data collection from the source in question.
The provision of your personal data is necessary in order to carry out the application process. The legal basis for the mentioned data processing is Art. 6(1)b GDPR and Sec. 26 BDSG.
As part of the application process, we will also check whether we can offer you another vacancy that matches your application. If we are interested in retaining your application documents for a later date, we will ask you for separate consent to this effect. Otherwise, we will store your application data for a period of six months after the conclusion of an unsuccessful application process, insofar as this does not conflict with statutory retention obligations. The legal basis for the mentioned data processing is Art. 6(1)c and f GDPR.
As matter of principle, your data will be processed exclusively by us and will not be passed on to third parties. Exceptions concern cases in which the legislator requires or provides for the disclosure of data (for example, in the context of tax audits by the tax authorities). In certain cases, the disclosure of your data to third parties is necessary to protect your or our interests or to fulfill our contractual obligations. This occurs in particular when we use external service providers. In these cases, the service provider is bound by instructions and receives personal data only to the extent and for the period that is necessary for the provision of the services in question. A transfer abroad does not take place and is not intended.
7. Further information
7.1 Responsibility under data protection law
7.2 Social Media
Our website offers buttons on the main page and on various product pages that link to the social media on which we are present. A connection to the servers of the social media is only established when you click on one of the links.
When you access our profiles, your personal data will be collected, used and stored not only by us, but also by the operators of the respective social network. This happens even if you do not have a profile in the respective social network. The individual data processing operations and their scope differ depending on the operator of the respective social network and they are not necessarily traceable for us. For details about the collection and storage of your personal data as well as about the type, scope and purpose of their use by the operator of the respective social network, please refer to the data protection declarations of the respective operator.
If you use our profiles on social networks to contact us (for example, by creating your own posts, responding to one of our posts or by sending us private message), the data you provide us with will be processed solely for the purpose of contacting you. The legal basis for the data collection is Art. 6(1)b GDPR.
7.3 Data security
Personal data is protected by us by means of suitable technical and organizational measures in order to ensure an appropriate level of protection and to safeguard the personal rights of the persons concerned. The measures taken serve, among other things, to prevent unauthorized access to the technical equipment used by us and to protect personal data form unauthorized disclosure by third parties.
7.4 Updating the data protection notice