1. DATA PROTECTION AT A GLANCE

​

General Information. The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can be used to personally identify you. Detailed information on data protection can be found in our full data privacy statement below this text.

​

​How do we collect your data? Your data is collected when you provide it to us. This may include, for example, data entered into a contact form. Other data is collected automatically or after you consent to it during your visit to the website. This includes technical data (e.g., internet browser, operating system, or the time of the page visit). This data is collected automatically as soon as you access the website.

​

What do we use your data for? Part of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.

​

What rights do you have regarding your data? You have the right at any time to obtain information free of charge about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of your data. If you have consented to data processing, you can revoke this consent at any time for the future. Furthermore, you have the right to request the restriction of the processing of your personal data under certain circumstances. Additionally, you have the right to file a complaint with the competent supervisory authority.

You can contact us at any time regarding this and other questions on the topic of data protection.

​

2. HOSTING​

​

We host the contents of our website with the following provider:

Wix.com Ltd., Nemal St. 40, 6350671 Tel Aviv, Israel.

Details on the data privacy policy of Wix.com Ltd. can be found at: https://de.wix.com/about/privacy.

​

Legal Basis for Use. The use of Wix.com Ltd. is based on Art. 6 (1)(f) GDPR. We have a legitimate interest in the reliable presentation of our website. If explicit consent has been requested, data processing is carried out exclusively based on Art. 6 (1)(a) GDPR and § 25 (1) of the Telecommunications Telemedia Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information in the user's device (e.g., device fingerprinting) within the meaning of TTDSG. Consent can be revoked at any time.

​

Data Processing Agreement. We have entered into a Data Processing Agreement (DPA) with the above provider. This is a data protection contract required by law, ensuring that the provider processes the personal data of our website visitors only following our instructions and in compliance with GDPR.

​

3. GENERAL INFORMATION AND MANDATORY DISCLOSURES​

​

Data Protection. The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this data privacy statement. When you use this website, various personal data is collected. Personal data refers to data that can be used to personally identify you. This data privacy statement explains what data we collect and what we use it for. It also explains how and for what purpose this happens. Please note that data transmission over the internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

 

Information on the Responsible Party. The responsible party for data processing on this website is:

 

Langendorf Consulting
Adrian Langendorf
Weisser Hauptstr. 101
D-50999 Cologne
Email: info@langendorf-consulting.com

​

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

​

Retention Period. Unless a specific retention period has been mentioned in this data privacy statement, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted after these reasons no longer apply.

​

General Information on the Legal Basis for Data Processing on This Website. If you have consented to data processing, we process your personal data based on Art. 6 (1)(a) GDPR or Art. 9 (2)(a) GDPR if special categories of data are processed under Art. 9 (1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If the processing of personal data is necessary for the performance of a contract or pre-contractual measures, we process your data based on Art. 6 (1)(b) GDPR. If the processing is necessary to comply with a legal obligation, it is based on Art. 6 (1)(c) GDPR. The processing may also be carried out based on our legitimate interest under Art. 6 (1)(f) GDPR. Information on the specific legal basis for each case is provided in this data privacy statement.

​

Notice Regarding Data Transfer to the USA and Other Third Countries. We use tools from companies located in the USA or other data protection non-compliant third countries. When these tools are active, your personal data may be transferred to and processed in these third countries. We point out that these countries may not provide a data protection level comparable to that in the EU. For example, U.S. companies are required to release personal data to security authorities without you being able to take legal action against this. We cannot influence these processing activities.

​

Revocation of Your Consent to Data Processing. Many data processing operations are only possible with your explicit consent. You can revoke an already given consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. 

 

Right to Object to Data Collection in Special Cases and Direct Advertising (Art. 21 GDPR). If data processing is based on Art. 6 (1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your specific situation. This also applies to profiling based on these provisions. The respective legal basis for processing can be found in this data privacy statement. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection under Art. 21 (1) GDPR).

If your personal data is processed for direct advertising purposes, you have the right to object at any time to the processing of your personal data for such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection under Art. 21 (2) GDPR).

​

Right to File Complaints with Regulatory Authorities. In the event of violations of the GDPR, data subjects have the right to file a complaint with a supervisory authority, particularly in the member state of their habitual residence, workplace, or the location of the alleged violation. The right to file a complaint exists without prejudice to other administrative or judicial remedies.

​

Right to Data Portability. You have the right to have data that we process automatically based on your consent or in fulfillment of a contract delivered to you or a third party in a standard, machine-readable format. If you request the direct transfer of the data to another responsible party, this will only be done to the extent technically feasible.

 

Information, Correction, and Deletion. Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, its origin and recipient, and the purpose of the data processing and, if applicable, a right to correction or deletion of this data. You can contact us at any time for this purpose or with other questions on the topic of personal data.

​

Right to Restrict Processing. You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time. The right to restrict processing applies in the following cases:

• If you dispute the accuracy of your personal data stored with us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.

• If we no longer need your personal data, but you need it to exercise, defend, or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.

• If you have filed an objection under Art. 21 (1) GDPR, a balance must be struck between your and our interests. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may only be processed (apart from being stored) with your consent or for the assertion, exercise, or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a member state.

 

SSL or TLS Encryption. This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection in the browser's address line when it switches from "http://" to "https://" and by the lock icon in your browser's address bar. If SSL or TLS encryption is activated, the data you transfer to us cannot be read by third parties.

​

4. DATA COLLECTION ON THIS WEBSITE​

​

Cookies. Our website uses "cookies." Cookies are small data packages that do not cause any harm to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are automatically deleted after your visit. Persistent cookies remain stored on your device until you delete them yourself or they are automatically removed by your web browser. Cookies may originate from us (first-party cookies) or third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services provided by third-party companies within websites (e.g., cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., the shopping cart function or displaying videos). Other cookies may be used to analyze user behavior or for advertising purposes.

​

Cookies required for electronic communication, providing specific functions requested by you (e.g., the shopping cart function), or optimizing the website (e.g., cookies to measure web audience) are stored based on Art. 6 (1)(f) GDPR, provided no other legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimized provision of its services. If consent for storing cookies and similar recognition technologies has been requested, processing is carried out exclusively based on this consent (Art. 6 (1)(a) GDPR and § 25 (1) TTDSG); consent can be revoked at any time.

​

You can configure your browser to inform you about the placement of cookies, only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when closing the browser. Deactivating cookies may limit the functionality of this website.

​

Server Log Files. The provider of this site automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

• Browser type and version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Time of the server request

• IP address

This data will not be merged with other data sources. The collection of this data is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this, the server log files must be recorded. 

​

Contact Form. If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide, will be stored by us for processing the inquiry and in case of follow-up questions. We will not share this data without your consent. The processing of this data is based on Art. 6 (1)(b) GDPR if your request is related to the performance of a contract or necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6 (1)(f) GDPR) or on your consent (Art. 6 (1)(a) GDPR) if this has been requested; the consent can be revoked at any time. The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions – particularly retention periods – remain unaffected.

​

Inquiries by Email, Phone, or Fax. If you contact us by email, phone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of processing your request. We do not share this data without your consent. The processing of this data is based on Art. 6 (1)(b) GDPR if your inquiry is related to the performance of a contract or necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries directed to us (Art. 6 (1)(f) GDPR) or on your consent (Art. 6 (1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

​

The data you send to us via contact inquiries remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions – particularly statutory retention periods – remain unaffected.

 

Google Forms. We have integrated Google Forms on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter "Google"). Google Forms allows us to create online forms to collect messages, inquiries, and other input from website visitors in a structured manner. All inputs you make are processed on Google servers. Google Forms stores a cookie in your browser containing a unique ID (NID cookie). This cookie stores various information, such as your language settings. The use of Google Forms is based on our legitimate interest in effectively collecting inquiries (Art. 6 (1)(f) GDPR). If consent has been requested, processing is based exclusively on Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, provided the consent includes the storage of cookies or access to information in the user's device (e.g., device fingerprinting) under the TTDSG. The consent can be revoked at any time. The data you enter in the form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed). Mandatory legal provisions – particularly retention periods – remain unaffected. For further details, refer to Google's privacy policy: https://policies.google.com/.

 

Google Calendar. Our website allows you to schedule appointments with us. For scheduling, we use Google Calendar. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

To schedule an appointment, you will enter the requested data and your preferred date into the appropriate form. The entered data will be used for planning, implementing, and possibly following up on the appointment. The appointment data is stored on Google Calendar servers. You can view Google's privacy policy here: https://policies.google.com/privacy.

Your entered data remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory legal provisions – particularly retention periods – remain unaffected.

The legal basis for data processing is Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in providing a simple appointment scheduling process for interested parties and customers. If consent has been requested, the processing is based exclusively on Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, provided the consent includes the storage of cookies or access to information in the user's device (e.g., for device fingerprinting) under TTDSG. The consent can be revoked at any time.

​

The data transfer to the USA is based on the EU Commission's standard contractual clauses. Details are available here: https://workspace.google.com/terms/dpa_terms.html and https://cloud.google.com/terms/sccs.

 

Data Processing Agreement. We have entered into a Data Processing Agreement (DPA) for the use of the aforementioned service. This is a legally required contract ensuring that Google processes the personal data of our website visitors solely in accordance with our instructions and in compliance with GDPR.

​

5. ANALYSIS TOOLS AND ADVERTISING​

​

Google Tag Manager. We use Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that allows us to integrate tracking and analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or carry out independent analyses. It is solely used to manage and deliver the tools integrated through it. However, Google Tag Manager does process your IP address, which may also be transmitted to Google’s parent company in the United States.

The use of Google Tag Manager is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in the quick and easy integration and management of various tools on the website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, provided that consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) under the TTDSG. Consent can be revoked at any time.

​

Google Analytics. This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows the website operator to analyze the behavior of website visitors. In doing so, the website operator receives various usage data, such as page views, time spent on the site, operating systems used, and the user’s origin. This data may be compiled into a user ID and assigned to the respective device of the website visitor. Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to enhance the collected datasets and applies machine learning technologies for data analysis. Google Analytics uses technologies that enable the recognition of users for the purpose of analyzing their behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transmitted to a Google server in the United States and stored there. The use of this service is based on your consent under Art. 6 (1)(a) GDPR and § 25 (1) TTDSG. Consent can be revoked at any time. Data transfer to the United States is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

 

IP Anonymization. We have activated the IP anonymization feature on this website. As a result, your IP address is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission to the United States. Only in exceptional cases will the full IP address be sent to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet use to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

​

Browser Plugin. You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. 

 

For more information on how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

 

Google Signals. We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history, and YouTube history as well as demographic data (visitor data). This data may be used for personalized advertising with Google Signals. If you have a Google account, your visitor data from Google Signals will be linked to your Google account and used for personalized advertising. The data is also used to create anonymized statistics about user behavior on our website. 

​

Demographic Features with Google Analytics. This website uses the "demographic features" feature of Google Analytics to show visitors appropriate advertisements within the Google advertising network. This allows reports to be created that contain information about the age, gender, and interests of website visitors. This data comes from interest-based advertising by Google as well as visitor data from third-party providers. This data cannot be associated with a specific individual. You can disable this feature at any time through the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section "Objection to Data Collection."

​

Data Processing Agreement. We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

​

Google Analytics E-Commerce Tracking. This website uses the “e-commerce tracking” feature of Google Analytics. With the help of e-commerce tracking, the website operator can analyze the buying behavior of website visitors to improve online marketing campaigns. Information such as completed orders, average order values, shipping costs, and the time from viewing a product to purchasing it is recorded. This data can be compiled by Google under a transaction ID that is associated with the respective user or their device.

​

Google Conversion Tracking. This website uses Google Conversion Tracking. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With the help of Google Conversion Tracking, Google and we can recognize whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked, how often, and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they performed. We do not receive any information that personally identifies the user. Google itself uses cookies or similar recognition technologies for identification. The use of this service is based on your consent under Art. 6 (1)(a) GDPR and § 25 (1) TTDSG. Consent can be revoked at any time. For more information about Google Conversion Tracking, see Google’s privacy policy: https://policies.google.com/privacy?hl=en.

​

6. NEWSLETTER​

​

Newsletter Data. If you wish to subscribe to the newsletter offered on this website, we require your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No additional data will be collected or only on a voluntary basis. We use this data solely for sending the requested information and do not share it with third parties. The processing of the data entered into the newsletter subscription form is based exclusively on your consent (Art. 6 (1)(a) GDPR). You can revoke your consent to the storage of your data, email address, and their use for sending the newsletter at any time, for example, via the “unsubscribe” link in the newsletter. The legality of the data processing already carried out remains unaffected by the revocation.

The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe or after the purpose has ceased. We reserve the right to delete or block email addresses from our newsletter distribution list at our own discretion within the framework of our legitimate interest as per Art. 6 (1)(f) GDPR.

Data that has been stored by us for other purposes remains unaffected by this. After you unsubscribe from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider to prevent future mailings. The data from the blacklist is only used for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements for sending newsletters (legitimate interest under Art. 6 (1)(f) GDPR). The storage in the blacklist is indefinite. You can object to the storage if your interests outweigh our legitimate interest.

​

7. PLUGINS AND TOOLS​

​

YouTube with Enhanced Privacy. This website embeds videos from YouTube. The operator of the site is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We use YouTube in enhanced privacy mode. According to YouTube, this mode ensures that YouTube does not store information about visitors to this website before they watch the video. However, data sharing with YouTube partners is not necessarily excluded by the enhanced privacy mode. For example, YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video. As soon as you start a YouTube video on this website, a connection to YouTube’s servers is established. Here, the YouTube server is informed about which of our pages you visited. If you are logged into your YouTube account, you allow YouTube to directly associate your browsing behavior with your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, after starting a YouTube video, YouTube may store various cookies on your device or use comparable recognition technologies (e.g., device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve user experience, and prevent fraud attempts. If necessary, additional data processing operations may be triggered after starting a YouTube video, over which we have no influence. The use of YouTube is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest as per Art. 6 (1)(f) GDPR. If consent has been requested, processing is based exclusively on Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, provided the consent includes the storage of cookies or access to information in the user’s device (e.g., device fingerprinting) as defined in the TTDSG. Consent can be revoked at any time. For more information on YouTube’s privacy practices, please visit: https://policies.google.com/privacy.

​

Vimeo without Tracking (Do-Not-Track). This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit one of our pages featuring Vimeo videos, a connection to Vimeo’s servers is established. Here, the Vimeo server is informed about which of our pages you have visited. Additionally, Vimeo obtains your IP address. However, we have configured Vimeo in such a way that it does not track your user activities and does not set cookies. The use of Vimeo is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest as per Art. 6 (1)(f) GDPR. If consent has been requested, processing is based exclusively on Art. 6 (1)(a) GDPR; consent can be revoked at any time. The data transfer to the USA is based on the EU Commission’s standard contractual clauses and, according to Vimeo, on “legitimate business interests.” Details can be found here: https://vimeo.com/privacy. For more information on how Vimeo handles user data, please see Vimeo’s privacy policy: https://vimeo.com/privacy.

​

Google Fonts (Local Hosting). This site uses so-called Google Fonts, provided by Google, for uniform font representation. The Google Fonts are installed locally. No connection to Google servers is established. For more information about Google Fonts, visit: https://developers.google.com/fonts/faq and Google’s privacy policy: https://policies.google.com/privacy.

Google Maps

​

This site uses the map service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To use the functions of Google Maps, it is necessary to store your IP address. This information is typically transferred to and stored on a Google server in the United States. The operator of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Fonts for the uniform representation of fonts. When accessing Google Maps, your browser loads the required web fonts into its browser cache to correctly display texts and fonts. The use of Google Maps is in the interest of an appealing presentation of our online offerings and to make it easier to find locations indicated by us on the website. This constitutes a legitimate interest as per Art. 6 (1)(f) GDPR. If consent has been requested, processing is based exclusively on Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, provided the consent includes the storage of cookies or access to information in the user’s device (e.g., device fingerprinting) as defined in the TTDSG. Consent can be revoked at any time. The data transfer to the USA is based on the EU Commission’s standard contractual clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

​

For more information on how Google handles user data, see Google’s privacy policy: https://policies.google.com/privacy.

 

Google reCAPTCHA. We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is used to check whether the data entered on this website (e.g., in a contact form) is by a human or an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various data (e.g., IP address, time spent on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place. The storage and analysis of data are based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in protecting its web services from abusive automated spying and SPAM. If consent has been requested, processing is based exclusively on Art. 6 (1)(a) GDPR and § 25 (1) TTDSG, provided the consent includes the storage of cookies or access to information in the user’s device (e.g., device fingerprinting) as defined in the TTDSG. Consent can be revoked at any time. For more information about Google reCAPTCHA, see Google’s privacy policy and terms of use at the following links: https://policies.google.com/privacy and https://policies.google.com/terms.

​

8. AUDIO AND VIDEO CONFERENCES​

​

Data Processing. For communication with our customers, we use various online conferencing tools. The specific tools we use are listed below. When you communicate with us via video or audio conference over the Internet, your personal data is collected and processed by both us and the provider of the respective conferencing tool. The conferencing tools collect all data that you provide or use to access the tools (e.g., email address and/or phone number). The tools also process the duration of the conference, start and end times (time stamps), the number of participants, and other "context information" related to the communication process (metadata). In addition, the provider of the tool processes all technical data required to handle online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.

If content is exchanged, uploaded, or otherwise provided within the tool, it is also stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the service. Please note that we do not have full control over the data processing procedures of the tools used. Our influence is primarily determined by the corporate policies of the respective providers. Further information on data processing by the conferencing tools can be found in the privacy policies of the respective tools listed below.

​

Purpose and Legal Basis. The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 (1)(b) GDPR). Furthermore, the tools serve to simplify and expedite general communication with us or our company (legitimate interest according to Art. 6 (1)(f) GDPR). If consent has been requested, the tools are used based on this consent; consent may be revoked at any time with effect for the future. 

 

Storage Duration. The data collected directly by us via video and conferencing tools is deleted from our systems as soon as you request us to delete it, revoke your consent to its storage, or the purpose for data storage ceases to apply. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.

We have no influence on the storage duration of your data stored by the operators of the conferencing tools for their own purposes. For details, please refer to the privacy policies of the respective conferencing tool providers.

 

Conferencing Tools Used: Zoom. We use Zoom. The provider of this service is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA. For details on data processing, please refer to Zoom's privacy policy: https://zoom.us/de-de/privacy.html.

Data transfer to the USA is based on the EU Commission's standard contractual clauses. Details can be found here: https://zoom.us/de-de/privacy.html.

 

Data Processing Agreement. We have entered into a data processing agreement (DPA) with the provider mentioned above. This is a contract required under data protection law, ensuring that this provider processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

​

TeamViewer. We use TeamViewer. The provider is TeamViewer Germany GmbH, Jahnstr. 30, 73037 Göppingen. For details on data processing, please refer to TeamViewer's privacy policy: https://www.teamviewer.com/de/datenschutzerklaerung/.

 

Data Processing Agreement. We have entered into a data processing agreement (DPA) with the provider mentioned above. This is a contract required under data protection law, ensuring that this provider processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

 

Microsoft Teams. We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. For details on data processing, please refer to Microsoft Teams' privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

 

Data Processing Agreement. We have entered into a data processing agreement (DPA) with the provider mentioned above. This is a contract required under data protection law, ensuring that this provider processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

​

9. OWN SERVICES​

​

Handling Applicant Data. We offer you the opportunity to apply to us (e.g., via email, postal mail, or online application form). Below, we provide information about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data will occur in compliance with applicable data protection laws and all other statutory provisions and that your data will be treated with strict confidentiality. 

​

Scope and Purpose of Data Collection. If you send us an application, we process your associated personal data (e.g., contact and communication data, application documents, notes during interviews, etc.) to the extent necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 (1)(b) GDPR (general contract initiation), and—if you have given consent—Art. 6 (1)(a) GDPR. Consent can be revoked at any time. Your personal data will only be shared within our company with individuals involved in processing your application. If the application is successful, the data you submit will be stored in our data processing systems based on § 26 BDSG and Art. 6 (1)(b) GDPR for the purpose of implementing the employment relationship. 

​

Retention Period of Data. If we cannot offer you a position, you reject a job offer, or withdraw your application, we reserve the right to retain the data you submitted based on our legitimate interests (Art. 6 (1)(f) GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). Afterward, the data will be deleted, and physical application documents will be destroyed. Retention serves particularly as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period (e.g., due to impending or ongoing legal disputes), deletion will only take place once the purpose for extended retention no longer applies. 

​

Longer retention may also occur if you have given your explicit consent (Art. 6 (1)(a) GDPR) or if statutory retention obligations preclude deletion. 

 

Inclusion in the Applicant Pool. If we do not offer you a position, we may include you in our applicant pool. If accepted, all documents and information from the application will be transferred to the applicant pool to contact you in case of suitable vacancies. Inclusion in the applicant pool is exclusively based on your explicit consent (Art. 6 (1)(a) GDPR). The submission of consent is voluntary and unrelated to the ongoing application process. The data subject may revoke their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool unless there are legal reasons for retention. The data in the applicant pool will be irrevocably deleted no later than two years after consent is given.