Data Privacy Statement
1. Name and address of the responsible party
The responsible party as defined by law is:
78056 Villingen-Schwenningen, Germany
Tel.: +49 7720 9732-0
1.1 Contact information of the data privacy officer
The data privacy officer of the responsible party is available via:
2. General information about data processing
"This website records a collection of general data and information each time the website is accessed by an affected person or an automated system.
The general data and information are saved to the log files of the webserver. The collected data can include the browser types and versions that are used, the operating system used by the accessing system, the website from which an accessing system reached our website (referrer), the sub-websites which can be activated by a system accessing our website, the date and time of access to the website, an internet protocol address (IP address), the internet service provider of the accessing system and other similar data and information used for the aversion of danger in case of attacks on our information technology systems."
With use of this general data and information, no conclusions can be drawn about the relevant person. This information is required to deliver the content on our website correctly, to optimise the content and the advertisement of the website, to guarantee permanent functionality of our information technology systems and the technology of our website, as well as to provide necessary information to law enforcement authorities for prosecution in case of a cyber-attack. This anonymously collected data and information is thus evaluated statistically and with the objective of increasing the data protection and security in the company in order to ultimately guarantee an optimal level of protection for the processed personal data. The anonymous data of the server log files is stored separately from all personal data provided by the affected person.
2.1 Scope of the processing of personal data
We collect and use personal data of our users exclusively insofar as it is necessary to provide a functional website and our content and services. The collection and use of personal data of our users normally only takes place after the user has given their consent. An exception applies in such cases where prior consent cannot be obtained due to the actual circumstances and the processing of data is permitted by statutory regulations.
2.2 Legal basis for the processing of personal data
If we have obtained the consent of the affected person for the processing of personal data, Art. 6, para. 1 (a) of the EU General Data Protection Regulation (GDPR) applies as the legal basis for the processing of personal data.
The processing of personal data which is necessary for fulfilment of a contract whose contractual party is the affected person, Art. 6, para. 1 (b) of the GDPR applies as the legal basis. This also applies to processing which is necessary for the implementation of pre-contractual activity. If processing of personal data is necessary for fulfilment of a legal obligation to which our company is subject, Art. 6, para. 1 (c) of the GDPR applies as the legal basis.
If the processing is necessary for protection of a legitimate interest of our company or a third party and does not outweigh the interests, basic rights and liberties of the affected person, Art. 6, para. 1 (f) of the GDPR applies as the legal basis for the processing.
2.3 Data deletion and retention period
Personal data of the affected person is deleted or blocked as soon as the purpose of the storage is no longer applicable. Storage can take place beyond that time if stipulated by European or national legislation in European Union Regulations, statutes or other regulations to which the responsible party is subject. Blocking or deletion of the data also takes place when a storage period prescribed by the aforementioned standards expires, unless it is necessary to continue storing the data for conclusion or fulfilment of a contract.
3. Provision of the website and creation of log files
3.1 Description and scope of data processing
Each time our website is accessed, our system records data and information from the computer system of the accessing computer automatically. The following data is collected in the process:
Information about the browser type and version
The user's operating system
The internet service provider of the user
The IP address of the user
Date and time of the access
Websites from which the user’s system reached our website
Websites which were accessed by the system of the user via our website
The log files contain IP addresses and other data which enables association with a user. This could be the case, for example, if the link to the website from which the user reached the website or the link to the website to which the user switched contains personal data.
The data is also stored in the log files of our system. Storage of this data together with other personal data of the user does not take place.
3.2 Legal basis for the data processing
The legal basis for the temporary storage of data and the log files is Art. 6, para. 1 (f) of the GDPR.
3.3 Purpose of data processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the computer of the user. For this purpose, the IP address of the user must remain stored for the duration of the session.
Storage takes place in log files in order to ensure the functionality of the website. In addition, the data serves the purpose of optimising the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this connection.
For these purposes, the data processing is also in our legitimate interest in accordance with Art. 6, para. 1 (f) of the GDPR.
3.4 Retention period
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of the recording of data for the provision of the website, this is the case when the relevant session has ended.
In the case of storage of the data in log files, this after the end of the seventh day at the latest. Storage beyond that time is possible. In this case, the IP addresses of the user are deleted or anonymised so that association of the accessing client is no longer possible.
3.5 Objection and disposal possibilities
The recording of data for provision of the website and storage of the data in log files is absolutely necessary for operation of the website. There is no right to objection on the part of the user.
The affected person can prevent the placement of cookies by our website at any time with an appropriate setting of the internet browser and thereby permanently refuse the placement of cookies. Moreover, cookies which have already been place can be deleted at any time with an internet browser or other software program. This is possible in all standard internet browsers. If the affected person deactivates the setting of cookies in the internet browser, it may not be possible to utilise all functions of our website to the full extent under certain circumstances.
4.1 Description and scope of data processing
If a user accesses a website, a cookie can be stored on the operating system of the user. This cookie contains a characteristic sequence of characters which enables unique identification of the browser the next time the website is accessed."
In the process, the following data is stored and determined:
The following data can be determined in this manner:
Search terms entered
Frequency of page access
Utilisation of website functions
"The user data collected in this manner is anonymised with technical precautions. Therefore, an association of the data with the accessing user is no longer possible.
The data is not stored together with other personal data of the user."
4.2 Legal basis for the data processing
4.3 Purpose of data processing
Adoption of language settings
Memory of search terms
The user data collected by technically required cookies is not used to create user profiles.
The use of analysis cookies takes place for the purpose of improving the quality of our website and its content. With the analysis cookies, we learn how the website is used and can thus continuously optimise our offering. For these purposes, the data processing is also in our legitimate interest in accordance with Art. 6, para. 1 (f) of the GDPR.
4.4 Retention period and objection and disposal possibilities
With a change of the settings in your internet browser, you can deactivate or limit the transmission of cookies. Cookies which have already been saved can be deleted at any time. This can also take place automatically. If cookies for our website are deactivated, it may no longer be possible to use all functions of the website to the full extent."
5. Contact form and email con tact
5.1 Description and scope of data processing
A contact form provided on our website can be used to contact us electronically. If a user utilises this possibility, the data entered in the input mask is transmitted to us and stored. This is the following data:
Surname, first name
At the time that the message is sent, the following data is also stored:
The IP address of the user
Date and time of the registration
You consent is obtained for the processing of the data in the scope of the submission process and reference is made to this data privacy statement.
Contact is also possible with the provided email address. In this case, the personal data of the user transmitted with the email is stored. No transfer of data to third parties takes place in this connection. The data is used exclusively to process the conversation.
5.2 Legal basis for the data processing
The legal basis for the processing of data with the consent of the user is Art. 6, para. 1 (a) of the GDPR.
The legal basis for the processing of data transmitted in the course of sending an email is Art. 6, para. 1 (f) of the GDPR. If the purpose of the email contact is to conclude a contract, the additional legal basis for the processing is Art. 6, para. 1 (b) of the GDPR.
5.3 Purpose of data processing
The processing of personal data from the input mask is intended solely for the processing of the initiated contact. In case contact is made by email, the website provider has the necessary legitimate interest in the processing of the data.
The other personal data processed during the submission process is intended to prevent misuse of the contact form and to ensure the security of our information technology systems.
5.4 Retention period
The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. For the personal data from the input mask of the contact form and any personal information sent via email, this is the case when the respective conversation with the user is finished. The conversation is finished when it can be concluded that the relevant matter has been clarified based on the circumstances.
The additional personal data collected during the submission process is deleted after a period of seven days at the latest.
5.5 Objection and disposal possibilities
The user has the right to revoke their consent to the processing of personal data. If the user contacts us via email, they can object to the storage of their personal data at any time via email. In such cases, the conversation cannot be continued.
All personal data that was collected in the course of the contact initiation will then be deleted.
6. Rights of the affected person
If your personal data is processed, you are an ‘affected person’ as defined by the GDPR and you are entitled to the following rights in your relation to us as the responsible party. You can assert your rights by contacting our data privacy officer or the service centre staff, indicating your concern.
6.1 Right to information
Every person affected by the processing of personal data has the right to receive information about the storage of their personal data and to receive a copy of said data free of charge at all times.
You can demand confirmation from the responsible party regarding whether personal data relating to you has been processed by us.
6.2 Right to correction
Every person affected by the processing of personal data has the right to immediate correction of incorrect personal data relating to them. Moreover, the affected person is entitled to the right to demand completion of incomplete personal data in consideration of the purposes of the processing – also by means of a supplementary explanation.
6.3 Right to limitation of the processing
Every person affected by the processing of personal data has the right to demand the limitation of processing by the responsible party if one of the requirements specified by statutes in Art. 18, para. 1 of the GDPR is fulfilled.
6.4 Right to deletion
Every person affected by the processing of personal data has the right to demand that the responsible party delete the affected person’s personal data immediately insofar as one of the reasons indicated in Art. 17, para. 1 of the GDPR applies.
6.5 Right to data transferability
Every person affected by the processing of personal data has the right to receive their personal data, which was prepared by the responsible party, in a structured, standard and machine-readable format. They also have the right to transfer the personal data, which was prepared by the responsible party, to a different responsible party without interference by the first responsible party, insofar as the processing is based on the consent in accordance with Art. 6, para. 1 (a) of the GDPR or Art. 9, para. 2 (a) of the GDPR is or is based on a contract in accordance with Art. 6, para. 1 (a) of the GDPR and the processing takes place in an automated process.
6.6 Right of objection
Every person affected by the processing of personal data has the right, at any time, to object, for reasons based on their specific situation, to the processing of their personal data, which takes place based on Art. 6, para. 1 (e) or (f) of the GDPR. This also applies for profiling supported by these provisions. In case of an objection, the company will no longer process the personal data unless we can prove that there are mandatory reasons for the processing that are worth protecting, which outweigh the interests, rights and liberties of the affected person, or the processing takes place in order to assert, exercise or defend legal claims.
If the company processes personal data for the purpose of direct advertising, the affected person has, at any time, the right to object to the processing of the personal data for the purpose of such advertising. This also applies for profiling insofar as it is related to direct advertisement. If the affected person objects to the processing for purposes of direct advertisement, the personal data will no longer be processed for these purposes.
6.7 Right to revoke to the declaration of consent under data protection law
Every person affected by the processing of personal data has the right to revoke consent to the processing of personal data at any time. They have the right to revoke their declaration of consent under data protection law at any time. With the revocation of consent, the legality of the processing taking place based on the consent until the time of revocation remains unaffected.
6.8 Right to file a complaint with a supervisory authority
Without prejudice to other legal remedies under administrative law or by court order, you have the right to file a complaint with a supervisory authority, particularly in the Member State in which you reside, work or the location of the presumed violation, if you believe that the processing of the personal data relating to you is in violation of the GDPR.
7. Data protection regulations for use of Google Analytics (with anonymisation function)
The party responsible for the processing has integrated the component Google Analytics (with anonymisation function) on this website. Google Analytics is a web analysis service. Web analysis is the collection, compiling and evaluation of data about the behaviour of visitors of websites. A web analysis services records, among other things, data about which website an affected person reaches a website from (referrer), which sub-page of the website have been accessed or how often and for how long a sub-page was viewed. A web analysis is used predominantly for optimisation of a website and for cost-benefit analysis of internet advertising.
The operating company of the Google Analytics Component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. The party responsible for the processing uses the ‘_gat._anonymizeIp’ add-on for the web analysis by Google Analytics. With this add-on, the IP address of the internet connection of the affected person is truncated and anonymised by Google when the access to our websites takes place from a Member State of the European Union or from another treaty state of the European Economic Area Agreement.
The purpose of the Google Analytics component is to analyse visitor flows to our website. Google use the collected data and information in order to evaluate the use of our website, in order to compile online reports for us which show the activities on our web pages and in order to provided us services associated with the use of our website, among other things. Google Analytics places a cookie on the information technology system of the affected person.
The definition of cookies was already provided above. With placement of the cookie, Google enables an analysis of the use of our website. Each time one of the individual pages of this website, which is operated by the party responsible for the processing, takes place and on which a Google Analytics component has been integrated, the internet browser on the information technology system of the affected person is automatically triggered by the relevant Google Analytics component to transmit data to Google for the purpose of online analysis. In the scope of this technical process, Google gains knowledge of personal data, such as the IP address of the affected person, which Google uses to verify the origin and clicks of the visitor, among other things, and to enable subsequent invoicing for commissions.
The cookie makes it possible to store personal information, such as the time of access, the location from which access originate and the frequency of visits to our website by the affected person. With each visit to our web pages, this personal data, including the IP address of the internet connection used by the affected person is transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google transfers this personal data collected via the technical process to third parties under certain circumstances.
The affected person can prevent the placement of cookies by our website at any time, as described above, with an appropriate setting of the internet browser and thereby permanently refuse the placement of cookies. Such a setting of the used internet browser would also prevent Google from placing a cookie in the information technology system of the affected person. In addition, a cookie already placed by Google Analytics can be deleted at any time via the internet browser or other software programs.
Furthermore, you also have the option of preventing future collection of your data when visiting this website by using the following opt-out cook
For further information and the application data protection regulations of Google, visit https://www.google.de/intl/de/policies/privacy/ and http://www.google.com/analytics/terms/de.html. Google Analytics is explained in further detail under this link:https://www.google.com/intl/de_de/analytics/.
8. Data protection regulations for use of Google Analytics
This page uses the map service Google Maps via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
To use the functions of Google maps, it is necessary to store your IP address. This information is normally transmitted to a server of Google in the USA and stored there. This provider of this page has no influence on this data transmission.
The use of Google Maps takes place in the interest of an attractive presentation of our online offering and to make the locations indicated by us on the website easier to find. This is a legitimate interest in accordance with Art. 6, para. 1 (f) of the GDPR. For more information about the handling of user data, refer to the data privacy statement of Google: www.google.de/intl/de/policies/privacy/.
9. Data privacy statement for online advertising
9.1 Application information
We collect various types of data in the scope of an application process. This includes, in particular, your personal contact data and information about your education, professional experience and skills. You also have the option of sending us electronically stored documents such as your CV, certificates or cover letter.
We do not require any information from you which is not usable (race, ethnic origin, gender, religion or ideology, disability, age or sexual identity) in accordance with the German General Equal Treatment Act. We also request that you do not send information about illnesses, pregnancy, ethnic origin, political ideologies, philosophical or religious convictions, membership in a trade union, physical or mental health or sexual life. The same applies for content that suitable to violate the rights of third parties (e.g. copyrights, press law or general rights of third parties).
9.2 Collection, processing, use and transfer of your data
In the scope of the application process, personal data is only collected, stored, processed and used for purposes to which we are entitled in association with your application and as necessary for the processing of your application.
If your application is successful, the specified data can be used for administrative matters in the scope of employment.
Your online application is processed by the necessary contact persons only. All employees entrusted with data processing are obligated to protect the confidentiality of your data. Third parties do not have access to your data. The processing of your data takes place exclusively in Germany.
9.3 Retention period
If we cannot offer you employment, the data transmitted by you will be saved for up to six months for the purpose of being able to respond to enquiries in connection with your application and rejection.
However, if your application documents are of fundamental interest to us and there are currently no available openings, you hereby grant us your consent to store your data for up to 24 months in order to consider you and contact you for future employment positions.
Participation in the DRD (‘Debitorenregister Deutschland’, Debtor Register Germany) payment information exchange system is based on our legitimate interest in assessing the risk of non-payment (art. 6, para. 1, clause 1, letter f of the GDPR.)