Privacy policy

I. General information

(1) Below we inform you about the collection of personal data when using our website.

(2) With reference to the definition in Art. 4 No. 1 of Regulation (EU) 2016/679 (hereinafter referred to as the ‘General Data Protection Regulation’ or ‘GDPR’ for short), the term ‘personal data’ means all data that can be related to you personally. This includes, for example, name, address, email address and user behaviour. With regard to further terminology, in particular the terms ‘processing’, ‘controller’, ‘processor’ and ‘consent’, we refer to the statutory data protection definitions in Art. 4 GDPR.

(3) In principle, we process personal data only to the extent necessary to provide a functioning website as well as the content and services we offer. As a rule, personal data is only processed if you have given us consent within the meaning of Art. 6 (1) (a) GDPR or if the processing is permitted by statutory provisions, in particular by one of the legal bases set out in Art. 6 (1) (b) to (f) GDPR.

(4) Your personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data may also be stored if this is provided for by national or European provisions to which we are subject. In this case, the data will be blocked or deleted once the storage period prescribed by the respective provisions has expired. The latter does not apply if further storage of the data is necessary for the conclusion or performance of a contract.

(5) Insofar as we use commissioned service providers for individual functions of our website or wish to use your data for advertising purposes, we will inform you in detail about the respective processes below.

II. Controller

(1) Details of the controller can be found in our legal notice.

III. Your rights

(1) You have the following rights against us with regard to the personal data concerning you:

• the right of access,
• the right to rectification and erasure,
• the right to restriction of processing,
• the right to object to processing,
• the right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about our processing of your personal data.

IV. Processing of personal data when using our website for information purposes

(1) If you visit our website without registering or otherwise providing us with information (‘use for information purposes’), we only collect the personal data that your web browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security: IP address, date and time of the request, time zone difference from GMT, content of the website, access status (HTTP status), volume of data transferred, requesting website, web browser, operating system, language and version of the browser

(2) The aforementioned data is also stored in so-called log files on our servers. This data is not stored together with any other personal data of yours.

(3) Storing the above data in log files serves to ensure the functionality and to optimise our website, as well as to ensure the security of our information technology systems.

(4) This data is not evaluated for marketing purposes. Our legitimate interest in the data processing lies in the purposes set out above. The legal basis for the collection and temporary storage of the aforementioned data and the log files is Art. 6 (1) sentence 1 (f) GDPR. The above data used to provide our website is deleted once the respective session has ended. Collecting the above data to provide our website is strictly necessary for the operation of our website. There is no possibility to object.

V. Processing of personal data through cookies and comparable technologies

(1) On our website we use cookies and comparable technologies such as your web browser's local storage. Cookies are small text files that are stored on your device's storage medium, for example on a hard drive; in your browser's local storage we can store information on your device in a comparable way. These technologies cannot execute programs or transfer viruses to your device. Below we explain the scope and functioning of the technologies we use.

(2) Information we store on your device:

• Consent settings: In order to store the decision you make via our cookie settings banner (consent to or rejection of embedded third-party content), we place an entry in your browser's local storage. This entry is technically necessary so that your choice is taken into account on subsequent visits and the banner is not displayed to you again on every page view. It does not expire automatically but remains on your device until you delete it via your web browser's settings.

(3) The sole purpose of storing this information is to preserve your data protection decision and to provide our website in a user-friendly way. Some functions of our website – in particular the embedding of third-party content – cannot be offered in line with your wishes without storing your choice accordingly. The stored information is not used to create user profiles; your usage behaviour is not evaluated for analytics or marketing purposes as a result.

(4) Insofar as storage is strictly technically necessary – as is the case for preserving your consent settings – it takes place on the basis of our legitimate interest in a functioning website and in the proper implementation of your decision pursuant to Art. 6 (1) (f) GDPR. Cookies and other technologies that are not strictly technically necessary – for example in the context of embedded third-party content – are only used with your prior consent, which you can withdraw at any time with effect for the future; the legal basis for this is Art. 6 (1) (a) GDPR.

(5) You can control the storage of cookies and of information in local storage yourself. You can make the corresponding configurations in your web browser's settings and, for example, reject third-party cookies or cookies altogether, as well as delete cookies and local storage that have already been saved. In this context we would like to point out that you may then not be able to use all functions of our website properly. In addition, we recommend regularly deleting stored data and your browser history manually.

VI. Further functions and offerings on our website

(1) In addition to the use of our website for information purposes described above, we offer various services that you can use if you are interested. As a rule, this requires the provision of further personal data. We need this data in order to provide the respective service. The above principles on data processing apply.

(2) In some cases we use external service providers to process this data, who have been carefully selected and commissioned by us. These service providers are bound by our instructions and are checked by us regularly. Insofar as personal data is passed on to third parties in the course of services that we offer together with partners, you can find further information in the descriptions of the individual services below. Insofar as these third parties are based in a country outside the European Economic Area, you can find further information about the consequences of this in the descriptions of the individual services below.

VII. Contacting us

(1) If you contact us by email, the personal data you transmit to us with your email will be stored.

(2) We also provide a contact form on our website that you can use to get in touch with us. The data you enter in the input form is transmitted to us and stored: salutation, first name, surname, email address, telephone.

(3) The data is used exclusively to answer your questions. Unless explicitly stated in this privacy policy, the data is not passed on to third parties. In addition, we record your IP address and the time of submission.

(4) The processing of the above personal data serves solely to handle your enquiries.

(5) The processing of further personal data arising from the use of the contact form provided on our website serves to prevent misuse and to ensure the security of our information technology systems.

(6) This also constitutes our legitimate interest in processing your personal data. Insofar as you have given us consent for this, the legal basis for processing this data is Art. 6 (1) (a) GDPR. Otherwise, the legal basis for processing this data is Art. 6 (1) (f) GDPR, in particular in the event that the data is transmitted to us by you sending an email. Insofar as you intend your email to lead to the conclusion of a contract, Art. 6 (1) (b) GDPR constitutes an additional legal basis.

(7) Subject to statutory retention periods, the data will be deleted as soon as we have conclusively processed your enquiry. If you contact us by email, you can object to the storage of your personal data at any time. We would like to point out that in this case your enquiry cannot be processed further. You can declare the withdrawal or objection by sending an email to the email address given in our legal notice.

VIII. Job listings and applications (Connectoor)

On our careers page we show you our open positions via the Connectoor service. You can also apply to us directly through it. The job listings are only displayed once you have consented to the embedding.

As soon as the job listings are displayed, they are loaded directly from the provider. In doing so, technically necessary information is transmitted to the provider – in particular your IP address, the date and time of access, the type of your browser and the page you previously visited. If you apply via Connectoor, you additionally provide personal data such as your name, your contact details and your application documents (for example your CV). This data is transmitted to the provider and to us.

The legal basis for displaying the job listings is your consent pursuant to Art. 6 (1) (a) GDPR, which you give via our cookie settings banner and which you can withdraw at any time with effect for the future. The legal basis for processing your application data is Art. 6 (1) (b) GDPR (establishment of an employment relationship) as well as § 26 BDSG.

Connectoor is a product of jobEconomy GmbH. You can find further information about the provider and about data protection here:

IX. Instagram posts (Elfsight)

On our careers page we show you current posts from our Instagram profile. These posts are only displayed once you have consented to the embedding.

As soon as the posts are displayed, they are loaded directly from the provider Elfsight and from Instagram. In doing so, technically necessary information is transmitted both to Elfsight and to the operator of Instagram, Meta Platforms Inc. – in particular your IP address, the date and time of access, the type of your browser and the page you previously visited. Cookies from the provider may also be stored on your device in this context.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you give via our cookie settings banner and which you can withdraw at any time with effect for the future. Following a withdrawal, the posts will no longer be displayed.

You can find further information about the provider and about data protection here:

X. Appointment booking via Calendly

For simple, fast and straightforward appointment booking we use the Calendly tool. Calendly is only loaded on our contact pages once you have consented to the embedding and actively call up the function.

When using the tool, personal data such as your name, email address and telephone number is requested from you. You also have the option of describing your enquiry and providing us with further information. The data you enter is transmitted to Calendly and stored there. In addition, technically necessary data (in particular IP address, date and time of the request, browser type, referrer URL) is transmitted to the provider when the widget is embedded.

The legal basis is your consent pursuant to Art. 6 (1) (a) GDPR, which you give via our cookie settings banner.

This privacy policy and the provider's privacy policy apply to the handling of the data collected through the use of Calendly:

XI. Performance and error analysis via Datadog

To ensure a stable and high-performing website we use Datadog's real user monitoring (RUM). Datadog is only loaded if you have expressly consented to the processing via our cookie settings banner. Without consent, no data is collected or transmitted.

With your consent, anonymised usage data is collected: pages visited, load times and web vitals, JavaScript errors that occurred, browser, device and operating system information, approximate geographic origin based on the truncated IP address, as well as click and scroll behaviour. Entries in form fields are masked by the Datadog SDK by default and are not transmitted. Datadog sets a session cookie for the duration of a session. The data is transmitted to Datadog servers in the European Union.

Datadog Inc. is a US company; a data processing agreement (DPA) pursuant to Art. 28 GDPR is in place with the provider. Any transfers to third countries take place on the basis of the EU standard contractual clauses. The legal basis for the processing is your consent pursuant to Art. 6 (1) (a) GDPR, which you can withdraw at any time with effect for the future via the “Cookie settings” link in the footer.

This privacy policy and the provider's privacy policy apply to the handling of the data collected by Datadog: