Privacy policy
Responsible body within the meaning of § 13 para. 1 TMG
team neusta SE
Konsul-Smidt-Strasse 24
28217 Bremen
Phone: +49 421 20696-0
E-mail: info@neusta.de
Chairman of the Supervisory Board:
Dipl.-Ökonom (univers.) Frank Lotze
Board of Directors:
Carsten Meyer-Heder (Chairman)
Fabian Gutsche
Uwe Scheja
We take the protection and security of your personal data very seriously and collect, process, store and use your personal data exclusively in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the data protection laws in the Federal Republic of Germany.
To ensure that you have the best possible control over your data, we would like to inform you with our privacy policy which personal data we collect when you use our website "www.team-neusta.de" (hereinafter referred to as "website"), how we use this data and what rights and options you have.
Personal data is all information that relates to identified or identifiable natural persons, e.g. first name, surname, email address.
2. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA
2.1. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA WHEN USING OUR WEBSITE
2.1.1. LOG DATA WHEN ACCESSING OUR WEBSITE
Our website is available to everyone without prior registration. For technical reasons, your internet browser or mobile device automatically transmits the following data to our web server when you access our website:
- IP address of your device,
- Date and time of access,
- URL of the requesting website,
- http response code,
- Name of the retrieved file,
- Amount of data sent,
- browser type and version and
- operating system of your device.
This data is stored by our web server in log files. This data is not stored together with other personal data.
The legal basis for the storage of this data is Art. 6 para. 1 lit. f GDPR.
We use this data to enable the use of our website and its technical administration, to ensure the security of our information technology systems, to prevent the misuse of our website and to optimize our website. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.
We will delete the data as soon as it is no longer required to achieve the purpose for which it was collected. If the data is stored in log files, it will be deleted after seven days at the latest. Log data may be stored beyond this period if the IP address of your device is deleted or anonymized in such a way that it is no longer possible to assign the IP address to you.
2.1.2 COOKIES
We use cookies and other third-party services on our websites. Cookies are small files that are stored on the hard disk of the device you are using at the request of our web server. They enable your computer system to be uniquely identified when you visit our website again and can be used to analyze your use of our website. Cookies may also contain personal data.
We also use third-party services. When you use these services, your personal data is transferred to the third-party providers and used there to evaluate your user behavior.
You can also use our websites without consenting to the use of cookies or other services. You can refuse their use and delete cookies at any time by making the appropriate settings on your device. If you decide against the use of cookies or other services, certain functions of our website may not be available to you or only to a limited extent. The use of cookies and also their rejection or deletion is linked to the device used and also to the browser used. You must therefore make the cookie settings for each of your devices and, if you use multiple browsers, for each browser separately.
We use the following cookies and services:
Necessary:
These cookies are absolutely necessary for the websites to function. Without these cookies, we cannot offer you our services. We may also use these cookies without your consent.
Extended functions and statistics:
These cookies facilitate the operation and improve the functions of the websites, or they collect information about your use of our websites. They enable us to improve our services for you.
Personalization and marketing
These cookies are used by us or by third-party providers to store and/or retrieve data relating to your use of and interaction with their online services and to provide you with information that is specifically relevant to you.
Consent to the use of cookies and management of cookies via the cookie consent banner:
The legal basis for the processing of your data via cookies is Art. 6 para. 1 lit. a GDPR in conjunction with EU Directive 2002/58. Insofar as your consent is required for the use of certain cookies, we will only use these cookies when you use the website if you have given your prior consent.
In the cookie consent banner, you consent to the use of all cookies by clicking the "ACCEPT ALL" button. You can allow or reject the cookies in the respective categories using the "Advanced functions and statistics" or "Personalization and marketing" checkboxes and the "SAVE AND CONTINUE" button. You can select individual cookies via "Show more details". You can revoke or change your settings at any time via the "Cookie settings" link.
Please note that if you deactivate cookies, their functions (e.g. analyses) will no longer be executed.
2.2. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA FOR THE RECEIPT OF OUR NEWSLETTER
2.2.1. REGISTRATION FOR THE NEWSLETTER
You have the option of subscribing to our free newsletter via our website by entering your name and email address. After entering your email address, you will receive a welcome email from us to the email address you have provided. By clicking on the link contained in the email, you confirm that you are the person actually authorized to access the email address provided (so-called double opt-in procedure) and activate the newsletter subscription. When you register to receive our newsletter, we obtain your consent to the processing of your data.
The legal basis for the processing of your data after registration for our newsletter is Art. 6 para. 1 lit. a GDPR.
We will only use the email address you provide to send you our newsletter.
The email address you provide will only be stored by us for as long as you wish to receive our newsletter. You can revoke your consent to us at any time and thereby unsubscribe from the newsletter with effect for the future. You can also withdraw your consent by clicking on the unsubscribe link in the footer of each newsletter. The withdrawal of your consent does not affect the lawfulness of the processing of your data for the purpose of receiving the newsletter based on your consent before its withdrawal.
2.2.2. LOG DATA FOR NEWSLETTER REGISTRATION
When you access our website, the data in accordance with section 2.1. of this privacy policy is also automatically collected and stored.
2.3. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA WHEN YOU CONTACT US
2.3.1. CONTACTING US BY EMAIL
You have the option of contacting us via our email addresses
info@team-neusta.de
or
info@neusta.de
to contact us and send us a message (electronic contact). In this case, your personal data transmitted by email will be stored by us.
The legal basis for the processing of your personal data that you transmit to us in the course of contacting us electronically by email is Art. 6 para. 1 lit. f GDPR. If the electronic contact by email is aimed at the conclusion of a contract with us, the legal basis for the processing of your personal data is also Art. 6 para. 1 lit. b GDPR.
We use your data to process your request and to contact you. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.
Your data will be deleted by us - unless contractual or legal obligations prevent deletion - as soon as it is no longer required for the aforementioned purposes; this is the case when the facts on which your electronic contact is based have been fully clarified. If you conclude a contract with us on the basis of your electronic contact, your data will only be deleted when it is no longer required for the fulfillment of the contract or the implementation of pre-contractual measures. We would like to point out that it may be necessary to store your data even after the contract has been fulfilled in order to comply with contractual or legal obligations.
You can object to the use of your personal data at any time without incurring any costs other than the transmission costs. In such a case, your data stored in the context of electronic contact will be deleted; the processing of your request cannot be continued. If your data is required to fulfill a contract or to carry out pre-contractual measures, (premature) deletion of your data is only possible insofar as contractual or legal obligations do not prevent deletion.
2.3.2. LOG DATA WHEN CONTACTING US BY EMAIL
When you access our website, the data in accordance with section 2.1 of this privacy policy is also automatically collected and stored.
2.3.3. CONTACT VIA OUR CONTACT FORM
You have the option of contacting us by providing the mandatory data
Name and email address
to contact us via our contact form and send us a message.
The legal basis for the processing of your data that you transmit to us when contacting us is Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract with us, the legal basis for the processing of your data is also Art. 6 para. 1 lit. b GDPR.
We use your data exclusively to process your request, to process any contract and to contact you. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.
Unless contractual or legal obligations prevent deletion, we will delete your data as soon as it is no longer required for the aforementioned purposes. This is the case when your request has been answered and the facts underlying your contact have been fully clarified. If you conclude a contract with us on the basis of your contact, your data will only be deleted when it is no longer required for the fulfillment of the contract or the implementation of pre-contractual measures. We would like to point out that it may be necessary to store your data even after the contract has been fulfilled in order to comply with contractual or legal obligations.
You can object to the use of your personal data at any time without incurring any costs other than the transmission costs. In such a case, your data stored in the context of contacting us will be deleted; the processing of your request can then not be continued. If your data is required to fulfill a contract or to carry out pre-contractual measures, (premature) deletion of your data is only possible insofar as contractual or legal obligations do not prevent deletion.
2.4. COLLECTION, PROCESSING, STORAGE AND USE OF YOUR DATA FOR (UNSOLICITED) APPLICATIONS BY EMAIL
2.4.1. (UNSOLICITED) APPLICATION BY EMAIL
You have the option of applying via our email address
office@team-neusta.de
for a job advertisement or to send us an unsolicited application. In this case, your personal data transmitted by email will be stored by us.
The legal basis for the processing of your personal data that you send us as part of your (unsolicited) application by email is Art. 6 para. 1 lit. f GDPR. If your (unsolicited) application by email leads to the establishment of an employment relationship with us, the legal basis for the processing of your personal data is also Art. 6 para. 1 lit. b GDPR and Section 26 para. 1 BDSG (new).
We use your personal data to carry out the application process, to review and process your (unsolicited) application, to decide whether to establish an employment relationship with us and to respond to your inquiries and contact you. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.
Your data will be deleted by us 6 months after completion of the application process, unless contractual or legal obligations prevent deletion. If you conclude a contract with us on the basis of your (unsolicited) application, your data will only be deleted when it is no longer required for the performance of the contract or pre-contractual measures. We would like to point out that it may be necessary to store your personal data even after termination of the contract in order to comply with contractual or legal obligations.
You can object to the use of your personal data at any time without incurring any costs other than the transmission costs. In such a case, your data stored as part of your (unsolicited) application by email will be deleted; the processing of your (unsolicited) application cannot be continued. If your data is required for the performance of a contract or pre-contractual measures, (premature) erasure of your data is only possible insofar as contractual or legal obligations do not prevent erasure.
2.4.2. LOG DATA FOR (UNSOLICITED) APPLICATIONS BY EMAIL
When you access our website, the data in accordance with section 2.1 of this privacy policy is also automatically collected and stored.
2.4.3. APPLICATION VIA THE CAREER PORTAL
Please also note our privacy policy on the processing of application data.
3. DISCLOSURE OF PERSONAL DATA
3.1 Your personal data will not be passed on, sold or otherwise transferred to third parties unless this is necessary for the purpose of fulfilling a contract. Otherwise, we will only pass on your personal data to third parties within the framework of a legal permission or on the basis of your consent, which can be revoked at any time for the future, and only to the extent necessary to fulfill our contractual obligations.
3.2 Our service partners (e.g. hosting service providers) require your personal data and process it exclusively on our behalf within the framework of order processing, which is expressly provided for in accordance with Art. 28 para. 3 GDPR.
3.3 We only transfer your personal data to state institutions or authorities if we are obliged to do so by law.
4. ANALYSIS OF USE
4.1. GOOGLE ANALYTICS
On our website we use the services of Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
Google Analytics uses tracking code and “cookies”, small text files that are stored on the device you are using and that enable your use of our website to be analyzed. The information generated by the cookie about your use of our website is usually transmitted to a Google server in the USA and stored there. However, due to the activation of IP anonymization “anonymizeIp”, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR.
We use Google's web analysis service to design, continuously improve and optimize our website to meet your needs. Google uses the data and information obtained on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with other services relating to the use of our website and the Internet. These purposes are the legitimate interests pursued by us with the data processing in accordance with Art. 6 para. 1 lit. f GDPR.
You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of our website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of our website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:
http://tools.google.com/dlpage/gaoptout?hl=de
You can find more information on terms of use and data protection at:
http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/.
You can change your settings for the Google Analytics cookie at any time via the “Cookie settings” link. If the cookie is deactivated, you do not give your consent and its function will no longer be executed. Please note that this may limit the functionality of our website, so that you may not be able to use all the functions of our website.
4.2. GOOGLE ADWORDS CONVERSION TRACKING
We also use Google Adwords Conversion Tracking on our website, a web analytics service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Google Adwords uses tracking code and "cookies," small text files that are stored on the device you use if you accessed our website via a Google ad. The cookie expires after 30 days. If you visit our website again within these 30 days, Google can recognize that you clicked on a Google ad and were redirected to our website.
The legal basis for the processing of your data is Art. 6 (1) (a) GDPR.
We use Google's web analytics service to statistically record the use of our website and to continuously improve and optimize our website. On our behalf, Google uses the collected data and information to evaluate your use of our website and to compile reports (so-called conversion statistics) for us. Conversion statistics tell us how many users clicked on our ad and were redirected to our website, which has a conversion tracking tag.
You can prevent cookies from being saved by selecting the appropriate settings in your browser; however, please note that if you do this, you may not be able to use the full functionality of our website.
Further information on data protection can be found at:
https://services.google.com/sitestats/de.html
Sie können über den Link „Cookie-Einstellungen“ jederzeit Ihre Einstellungen für das Cookie zu Google Adwords Conversion Tracking ändern. Ist das Cookie deaktiviert, erteilen Sie keine Einwilligung, und seine Funktion wird nicht mehr ausgeführt. Bitte beachten Sie, dass dadurch der Funktionsumfang unserer Webseite eingeschränkt werden kann, so dass Sie ggf. nicht alle Funktionen unserer Website werden nutzen können.
4.3. FACEBOOK PIXEL
We use Facebook Pixel on our website, a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA; website: https://www.facebook.com.
With the help of the Facebook Pixel, Facebook is able to determine visitors to our online offering as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel to display the Facebook ads we place only to those users on Facebook and within the services of partners cooperating with Facebook (so-called "Audience Network" https://www.facebook.com/audiencenetwork/ ) who have also shown an interest in our online offering or who exhibit certain characteristics (e.g., interest in certain topics or products that can be determined from the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads match the potential interests of users. The Facebook pixel also allows us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion measurement").
Facebook Pixel transmits usage data (e.g., websites visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses), and location data (information on the geographical location of a device or person).
Facebook Pixel is only used with your consent. The legal basis for processing your data is Art. 6 (1) (a) GDPR. You can change your Facebook Pixel cookie settings at any time using the "Cookie Settings" link. If the cookie is deactivated, you do not give your consent, and its function will no longer be performed. Please note that this may limit the functionality of our website, meaning you may not be able to use all of its features.
Social media plug-ins ("plug-ins") from the social networks Facebook, Google+, and Instagram, the microblogging service Twitter, and the video portal YouTube ("providers") are integrated into our website on the basis of Art. 6 (1) (f) GDPR. To increase the protection of your data when you visit our website, we integrate the plugins into our website using the so-called "2-click solution." This integration ensures that no connection is established with the providers' servers when you visit our website. Only when you activate the plugins and thus consent to data transmission does your browser establish a direct connection to the providers' servers.
5. SOCIAL MEDIA PLUGINS
5.1. FACEBOOK
Our website incorporates social media plugins ("plugins") from the social network Facebook. Facebook is operated by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook"). An overview of Facebook plugins and their appearance can be found here:
https://developers.facebook.com/docs/plugins
When you visit our website and activate the plugin, a direct connection is established between your browser and the Facebook server via the plugin. Facebook thus receives the information that you have accessed our website with your browser, even if you do not have a Facebook profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugin, for example, by clicking the "Like" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on the social network and displayed to your contacts there.
For information about the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to Facebook's privacy policy at:
http://www.facebook.com/policy.php
If you do not want Facebook to be able to associate your visit to our website with your Facebook user account, please log out of your Facebook user account.
5.2. TWITTER
Our website incorporates social media plug-ins ("plug-ins") from the microblogging service Twitter. Twitter is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA ("Twitter"). An overview of the Twitter buttons and their appearance can be found here:
https://twitter.com/about/resources/buttons
When you visit our website and activate the plug-in, a direct connection is established between your browser and the Twitter server via the plug-in. By integrating the plug-in, Twitter receives the information that your browser has accessed our website, even if you do not have a Twitter profile or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a Twitter server in the USA and stored there. If you interact with the plug-in, for example, by clicking the "Tweet" button, the corresponding information is transmitted directly to a Twitter server and stored there. The information will also be published on your Twitter account and displayed to your contacts there.
For information on the purpose and scope of data collection, the further processing and use of your data by Twitter, as well as your rights and settings options for protecting your privacy, please refer to Twitter's privacy policy at:
If you do not want Twitter to directly assign the data collected via our website to your Twitter profile, you must log out of Twitter before activating the plugin.
5.3. GOOGLE +
Our website also includes social media plugins ("plugins") from the Google+ social network operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google+"). An overview of Google+ plugins can be found here:
https://developers.google.com/+/plugins
When you visit our website and activate the plugin, a direct connection is established between your browser and the Google servers in the USA, and the button is displayed on our website by notification to your browser. By integrating the plugin, Google receives the information that your browser has visited our website. This information (including your IP address) is transmitted directly from your browser to a Google server in the USA and stored there. This applies regardless of whether you are registered or logged in to Google+. Google stores this information for approximately two weeks for system maintenance and troubleshooting purposes.
If you interact with the plugin while logged into Google+, the corresponding information will be transmitted directly to a Google server and stored there. The collected information will also be linked to your Google+ account and shared with other users.
For more information about how Google collects and uses your data, your rights in this regard, and settings options for protecting your privacy, please see Google's privacy policy at:
http://www.google.com/intl/de/policies/privacy/
If you do not want Google to directly assign the collected information to your Google+ profile, you must log out of Google+ before visiting our website.
5.4. YOU TUBE
Our website also includes social media plugins ("plugins") from the video portal YouTube. YouTube is operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA ("YouTube").
When you visit our website and activate the plugin, a direct connection is established between your browser and the YouTube server. YouTube thus receives the information that you have accessed our website with your browser, even if you do not have a YouTube account or are not currently logged in. This information (including your IP address) is transmitted directly from your browser to a YouTube server in the USA and stored there. If you are logged in to YouTube, YouTube can directly associate your visit to our website with your YouTube account.
Further information on the collection and use of your data by YouTube, your rights in this regard, and settings options for protecting your privacy can be found in YouTube's privacy policy at:
https://www.google.de/intl/de/policies/privacy
If you do not want YouTube to directly assign the collected information to your YouTube account, you must log out of YouTube before visiting our website.
5.5. INSTAGRAM
Our website includes social media plugins ("plugins") from the Instagram service. Instagram is operated by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"). An overview of Instagram plugins can be found here:
http://blog.instagram.com/post/36222022872/introducing-instagram-badges
When you visit our website and activate the plugin, a direct connection is established between your browser and the Instagram servers, and the button is displayed on our website by notification to your browser. By integrating the plugin, Instagram receives the information that your browser has accessed our website. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there. This applies regardless of whether you have an Instagram profile or are logged in to Instagram.
If you interact with the plugin while logged into Instagram, the corresponding information will be transmitted directly to an Instagram server and stored there. The collected information will also be published on your Instagram profile and displayed to your contacts.
For more information about how Instagram collects and uses your data, your rights in this regard, and settings options for protecting your privacy, please see Instagram's privacy policy at:
https://help.instagram.com/155833707900388/
If you do not want Instagram to directly assign the collected information to your profile, you must log out of Instagram before visiting our website.
We use the services of Google Maps on our website, a map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
If you have JavaScript enabled in your browser but have not installed a JavaScript blocker, your browser will briefly establish a direct connection to Google's servers in the USA to deliver the map content to your browser and will transmit your IP address to Google. The map content is transmitted directly from Google to your browser, which then integrates it into the website. If you use the route planner function, the (starting) address you enter will also be transmitted to Google.
The legal basis for the processing of your data is Art. 6 (1) (f) GDPR.
We use the Google map service to display interactive maps, in particular to create directions so that you can easily find us. These purposes are the legitimate interests we pursue with data processing pursuant to Art. 6 (1) (f) GDPR.
You can deactivate JavaScript by selecting the appropriate settings in your browser software; however, please note that if you do this, you will not be able to use the map display.
Further information on terms of use and data protection can be found at:
https://www.google.com/intl/de_de/help/terms_maps.html and https://www.google.de/intl/de/policies/.
6. GOOGLE MAPS
We use Google Maps on our website, a map service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
If you have JavaScript enabled in your browser but have not installed a JavaScript blocker, your browser will briefly establish a direct connection to Google's servers in the USA to deliver the map content to your browser and transmit your IP address to Google. The map content is transmitted directly from Google to your browser, which then integrates it into the website. If you use the route planner function, the (starting) address you enter will also be transmitted to Google.
The legal basis for processing your data is Art. 6 (1) (f) GDPR.
We use Google's map service to display interactive maps, in particular to create directions so you can find us easily. These purposes are the legitimate interests we pursue with data processing in accordance with Art. 6 (1) (f) GDPR.
You can deactivate JavaScript by selecting the appropriate settings in your browser; however, please note that if you do this, you will not be able to use the map display.
Further information on terms of use and data protection can be found at:
https://www.google.com/intl/de_de/help/terms_maps.html and https://www.google.de/intl/de/policies/.
7. RESPONSIBLE PARTIES
The party responsible for processing your personal data is:
team neusta SE
Konsul-Smidt Strasse 24
28217 Bremen
Phone: +49 421 / 20 696 - 0
Fax: +49 421 / 20 696 - 99
Email: info@team-neusta.de
8. DATA PROTECTION OFFICER
We have appointed
Ms. Bärbel Rolfes
HEC GmbH
Konsul-Smidt-Straße 20
28217 Bremen, Germany
Phone: +49 421 / 20750-0
Email: datenschutz@neusta.de
as our data protection officer.
9. LOCATION OF YOUR DATA / DATA SECURITY
9.1. Our servers and data centers are located at infrastructure services GmbH. Data processing is carried out by team neusta GmbH.
9.2. We generally process your personal data within the European Union. However, we also use the services of some third-party providers. If these third-party providers are located in areas that do not guarantee a level of data protection equivalent to the regulations applicable within the European Union, we take all necessary steps to ensure that your personal data is adequately protected. We achieve this either by concluding data protection agreements or by ensuring that the third-party providers adhere to appropriate security standards.
9.3. We take various physical, technical, organizational, and administrative security measures to protect your data to the extent appropriate to the sensitivity of the data.
9.4. For security reasons, in particular to protect your personal data, we use SSL encryption on our website. You can recognize the encrypted connection by the lock symbol in the address bar of your browser, among other things.
10. YOUR RIGHTS
10.1. RIGHT TO INFORMATION
10.1.1. You have the right to request information from us at any time, free of charge, as to whether we process personal data concerning you. If this is the case, you have the right to information about this personal data and the following information:
- the purposes for which the personal data concerning you are processed;
- the categories of personal data being processed;
- the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
- the planned duration for which the personal data concerning you will be stored, or, if this is not possible, the criteria used to determine that period;
- the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by us as the controller, and a right to object to processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- all available information on the origin of the data if the personal data are not collected from you;
- the existence of automated decision-making, including profiling, referred to in Article 22 (1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject.
You also have the right to request information from us as to whether your personal data will be transferred to a third country or to an international organization. In this context, you can request that we inform you of the appropriate safeguards pursuant to Art. 46 GDPR.
10.1.2. To protect your data, we reserve the right to request proof of identity.
10.1.3. We can provide the data protection information in a common electronic format.
10.2. RIGHT TO CORRECTION
You also have the right to request that we correct inaccurate personal data. Furthermore, taking into account the purposes for which your personal data is processed, you have the right to request that we complete incomplete personal data.
10.3. RIGHT TO RESTRICTION OF PROCESSING
10.3.1. You have the right to request that we restrict the processing of your personal data if one of the following conditions applies:
- if you contest the accuracy of the personal data concerning you, for a period enabling us to verify the accuracy of the personal data;
- if the processing is unlawful and you refuse to delete the personal data concerning you and instead request that their use be restricted;
- we no longer need the personal data concerning you for the purposes of processing, but you require it to assert, exercise, or defend legal claims;
or
- you have objected to the processing pursuant to Art. 21 (1) GDPR and it has not yet been determined whether our legitimate reasons outweigh yours.
10.3.2. If the processing of your personal data has been restricted, this data – with the exception of its storage – may only be processed with your consent or for the establishment, exercise, or defense of legal claims or to protect the rights of another natural or legal person, or for reasons of important public interest of the Union or a Member State.
10.3.3. If you have obtained a restriction on the processing of your personal data, we will inform you before the restriction is lifted.
10.4. RIGHT TO ERASURE (“RIGHT TO BE FORGOTTEN”)
10.4.1. You have the right to request that we delete your personal data without undue delay if one of the following reasons applies:
- The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed;
- You withdraw your consent on which the processing is based according to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, and there is no other legal ground for the processing;
- You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR;
- The personal data concerning you have been processed unlawfully;
- The erasure of the personal data concerning you is necessary to fulfill a legal obligation under Union or Member State law to which we are subject;
- The personal data concerning you were collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
10.4.2. If we have made personal data public and are obliged to delete it pursuant to Art. 17 (1) GDPR, we will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to inform data controllers who process your personal data that you have requested that we delete all links to your personal data or copies or replications of your personal data.
10.4.3. The right to delete your personal data does not exist if processing is necessary.
- to exercise the right to freedom of expression and information;
- to fulfill a legal obligation required by Union or Member State law to which we are subject or to perform a task carried out in the public interest or in the exercise of official authority vested in us;
- for reasons of public interest in the area of public health pursuant to Art. 9 (2) (h) and (i) and Art. 9 (3) GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89 (1) GDPR, insofar as the right to erasure is likely to make the achievement of the objectives of this processing impossible or seriously compromises it;
or
- to assert, exercise or defend legal claims.
10.4.4. If you have asserted your right to rectification, erasure, or restriction of processing of your personal data, we are obliged to inform all recipients to whom your personal data was disclosed of the rectification, erasure, or restriction of processing of your personal data, unless doing so proves impossible or involves disproportionate effort. You have the right to be informed by us of the recipients of your personal data.
10.5. RIGHT TO DATA PORTABILITY
10.5.1. You have the right to receive the personal data you have provided to us in a structured, common, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, provided that
- the processing is based on consent pursuant to Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR or on a contract pursuant to Art. 6 (1) (b) GDPR and
- the processing is carried out using automated procedures.
10.5.2. In exercising your right to data portability, you also have the right to have your personal data transmitted directly from us to another controller, without hindrance from us, where technically feasible. The freedoms and rights of others must not be adversely affected.
10.5.3. The right to data portability does not apply to the processing of your personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.
10.6. RIGHT OF OBJECTION
10.6.1. You have the right to object at any time to the processing of your personal data based on Art. 6 (1) (e) or (f) GDPR, for reasons related to your particular situation; this also applies to profiling based on these provisions.
10.6.2. We will no longer process your personal data after your objection unless we can demonstrate compelling legitimate grounds for the continued processing of your personal data that override your interests, rights, and freedoms, or the continued processing of your personal data serves to assert, exercise, or defend legal claims.
10.7. RIGHT TO WITHDRAW CONSENT UNDER DATA PROTECTION LAW
You have the right to withdraw your consent under data protection law at any time. Your revocation will not affect the legality of the processing of your personal data based on your consent until the revocation.
10.8. RIGHT TO COMPLAIN
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement, if you believe that the processing of your personal data violates the provisions of the GDPR. The supervisory authority to which you have submitted your complaint will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.
11. UPDATES
11.1. We reserve the right to change this Privacy Policy from time to time. We will notify you in advance of any material changes to the Privacy Policy.
11.2. The use of your personal data is subject to the most current version of the Privacy Policy, which can be accessed via "PRIVACY" on our websites. By continuing to access our websites after the changes come into effect, you consent to the updated Privacy Policy.
If you have any questions or comments regarding the above Privacy Policy, please send an email to
As of: August 2023