Privacy Policy

GENERAL INFORMATION ON DATA PROCESSING

As part of processing carried out on our behalf, third-party providers supply us with hosting and website display services. This serves to safeguard our legitimate interests, which prevail following a balancing of interests, in the correct presentation of our offering, in accordance with Article 6(1)(f) of the GDPR. All data collected whilst using this website or via the forms provided for this purpose, as described below, is processed on our service providers’ servers. Processing on other servers takes place only within the scope explained here.

Scope of the processing of personal data

As a general rule, we collect and use our users’ personal data only to the extent necessary to provide a fully functional website and our content and services. The collection and use of our users’ personal data generally takes place only with the user’s consent. An exception applies in cases where it is not possible, for practical reasons, to obtain consent in advance and where the processing of the data is permitted by statutory provisions.  

Legal basis for the processing of personal data 

Where we obtain the data subject’s consent for the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.  

Where the processing of personal data is necessary for the performance of a contract to which the data subject is a party, Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.

Where the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) of the GDPR serves as the legal basis.

Where the vital interests of the data subject or of another natural person necessitate the processing of personal data, Article 6(1)(d) of the GDPR serves as the legal basis.

Where processing is necessary to safeguard a legitimate interest of our company or a third party, and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Article 6(1)(f) of the GDPR serves as the legal basis for the processing.

Data erasure and retention period  

The data subject’s personal data shall be erased or blocked as soon as the purpose for which it was stored no longer applies. Data may also be retained if this is provided for by European or national legislators in EU regulations, laws or other provisions to which the controller is subject. Data will also be blocked or erased when a retention period prescribed by the aforementioned standards expires, unless there is a need to continue storing the data for the conclusion or performance of a contract.  

Purposes of data processing by the data controller and third parties

We process your personal data only for the purposes set out in this privacy policy. Your personal data will not be transferred to third parties for any purposes other than those specified. We will only disclose your personal data to third parties if:  

1. you have given your explicit consent,  

2. processing is necessary for the performance of a contract with you,  

3. processing is necessary to comply with a legal obligation,  

4. processing is necessary to safeguard legitimate interests and there is no reason to believe that you have an overriding legitimate interest in your data not being disclosed. 

Cookies  

Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser the next time you visit (persistent cookies). You can view the relevant storage periods in the overview within your web browser’s cookie settings. You can configure your browser so that you are notified when cookies are set and can decide on a case-by-case basis whether to accept them, or you can block the acceptance of cookies in specific cases or generally. Each browser manages its cookie settings differently. This is described in each browser’s help menu, which explains how you can change your cookie settings. You can find these for the respective browsers via the following links:

Apple Safari 

Brave

Google Chrome

Microsoft Edge

Mozilla Firefox

Opera

Of course, you can generally view our website without cookies. Web browsers are usually set to accept cookies. Generally speaking, you can disable the use of cookies at any time via your browser settings. Please use your web browser’s help functions to find out how to change these settings. Please note that certain features of our website may not work if you have disabled the use of cookies.

Careers portal / Applicant data

You have the option of applying (via our website) for advertised vacancies or sending us a speculative application. During the online application process, you provide us with personal data, which we process for the purposes of the application process. All personal data you provide as part of the application process is collected by us solely for the purpose of conducting the application process.

What information do we collect?

As part of the application process, we collect all the information you provide to us in your application, as well as, where applicable, any further data we obtain during an interview or online assessment, in particular assessments. 
Naturally, this assessment does not contain any defamatory or derogatory statements; only information that is directly relevant to the assessment, the recruitment process or your job profile is recorded.

Processing of your application data

All personal data that you provide as part of the application process is collected by us solely for the purpose of conducting the application process. It is irrelevant whether you are applying for a specific vacancy or sending us a speculative application.
Your application for a specific post or your unsolicited application for a particular role is received directly by the relevant HR department.

By submitting an unsolicited application, you are providing us with your personal data so that we can assess your suitability. Consequently, in addition to being processed by our HR department, your documents may be forwarded to several of our specialist departments where necessary.
In both cases, your application may also be forwarded to the works council.

Retention of your data, applicant pool

Once the application process has been completed, your data will be deleted in accordance with the applicable data protection regulations, in particular with regard to retention periods.
As part of the application process, you have the option to consent to your data being stored in our applicant pool. If you give your consent, your application data and documents will continue to be stored in our system and reviewed for suitability should any vacancies arise. If you do not give your consent or withdraw your consent, we will delete your personal data in accordance with legal requirements, unless we are legally obliged to retain your data. You may withdraw your consent at any time without formal notice.

Purpose of data processing, legal basis, retention period

We collect and process your personal data as part of a recruitment process for the purpose of establishing a potential employment relationship.

The legal basis for the processing of this data is Article 6(1)(b) of the GDPR, as well as Article 6(1)(a), insofar as you have given us your consent for a specific processing operation involving your data.

Your application data will generally be deleted or blocked as soon as the purpose for which it was stored – namely, the processing of an application or an employment relationship – no longer applies. However, deletion will not take place if European or national legislation stipulates an obligation to retain the data for a specific period following the end of the application process, or if you have voluntarily consented to your data being stored for a longer period. In such cases, the data will be deleted once the retention period has expired or once your consent has expired or been withdrawn. You may withdraw your consent at any time.

As soon as you access any subpages on which the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google’s servers in the USA and stored there. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before clicking the button. Google stores your data (even for users who are not logged in) as usage profiles and analyses them. The collection, storage and analysis are carried out in accordance with Article 6(1)(f) of the GDPR on the basis of Google’s legitimate interests in displaying personalised advertising, conducting market research and/or tailoring Google websites to user needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.

Google LLC, based in the USA, is certified under the US-EU ‘Privacy Shield’ data protection agreement, which ensures compliance with the data protection standards applicable in the EU.

If you do not consent to your data being transferred to Google in future when using Google Maps, you also have the option of completely disabling the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then no longer be available.

You can view Google’s Terms of Service at  https://www.google.de/intl/de/policies/terms/regional.html The additional terms of use for Google Maps can be found at  https://www.google.com/intl/de_US/help/terms_maps.html 

Detailed information on data protection in connection with the use of Google Maps can be found on Google’s website (‘Google Privacy Policy’): 
https://www.google.de/intl/de/policies/privacy/

Provided that you have given us your consent pursuant to Art. 6(1)(1)(a) of the GDPR, content from third-party providers is embedded on this website. This content is provided by Google (“Provider”). YouTube is a service provided by Google Ireland Limited, a company incorporated and operating under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland ([www.google.de](https://www.google.de)).

For YouTube videos embedded on our site, the extended data protection setting is enabled. This means that no information about website visitors is collected and stored by YouTube unless they play the video.

For the purpose and scope of the data collection, the further processing and use of the data by the Provider, and your rights and settings options in this regard to protect your privacy, please refer to Google’s privacy information.

Our presence on social networks and platforms serves to enable better and more active communication with our customers and prospective customers. We use these channels to provide information about our products, the company and current special promotions.

When you visit our online presences on social media, your data may be automatically collected and stored for market research and advertising purposes. Using pseudonyms, so-called user profiles are created from this data. These can be used, for example, to display advertisements within and outside the platforms that presumably correspond to your interests. For this purpose, cookies are generally used on your end device. These cookies store visitor behaviour and user interests. In accordance with Art. 6(1)(f) of the GDPR, this serves to safeguard our legitimate interests, which prevail following a balancing of interests, in an optimised presentation of our offering and effective communication with customers and prospective customers. If you are asked by the respective social media platform operators for consent to data processing, for example by means of a checkbox, the legal basis for the data processing is Art. 6(1)(a) of the GDPR.

Where the aforementioned social media platforms have their headquarters in the USA, the following applies: An adequacy decision of the European Commission exists for the USA. This is based on the EU-US Privacy Shield. A current certificate for the respective company can be viewed here: https://www.privacyshield.gov/list.

For detailed information on the processing and use of data by the providers on their sites, as well as a means of contact and your rights and settings options in this regard to protect your privacy, in particular opt-out options, please refer to the providers’ privacy information linked below. 

Facebook 

Google/ YouTube

Instagram

Pinterest

Right to object (opt-out):

Facebook

Google/ YouTube

For website analysis, this website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, a company incorporated and operating under Irish law, with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. This serves to safeguard our legitimate interests, which, following a balancing of interests, take precedence, in optimising the presentation of our website, Art. 6(1)(f) GDPR. Google (Universal) Analytics uses methods that enable an analysis of your use of the website, such as cookies. The information collected automatically about your use of this website is generally transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is truncated within the Member States of the European Union or in other signatory states to the Agreement on the European Economic Area prior to transmission. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The anonymised IP address transmitted by your browser as part of Google Analytics is never merged with other Google data.

Where information is transferred to and stored on Google’s servers in the USA, the US company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here. On the basis of this agreement between the USA and the European Commission, the latter has determined that companies certified under the Privacy Shield offer an adequate level of data protection.

You can prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: 
http://tools.google.com/dlpage/gaoptout?hl=de

Your rights as a data subject

You may exercise the following rights under Articles 12 to 23 of the GDPR at any time by contacting our Data Protection Officer using the contact details provided:  

• Access to your data stored by us and information on its processing,

• Rectification of inaccurate personal data,

• Erasure of your data stored by us,

• Restriction of data processing, provided that we are not yet permitted to erase your data due to legal obligations,

• Objection to the processing of your data by us and

• Data portability, provided you have consented to the data processing or have entered into a contract with us.

If you have given us your consent, you may withdraw it at any time with future effect.

You may lodge a complaint with your competent supervisory authority at any time. Your competent supervisory authority is determined by the federal state in which you reside, work or where the alleged infringement occurred. A list of supervisory authorities (for the non-public sector) with their addresses can be found at:  https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Changes to our Privacy Policy  

We reserve the right to amend this Privacy Policy to ensure it always complies with current legal requirements or to reflect changes to our services in the Privacy Policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.  

2026.41