Privacy Policy
1.
An overview of data protection
General
information
The following information will provide
you with an easy to navigate overview of what will happen with your personal
data when you visit this website. The term “personal data” comprises all data
that can be used to personally identify you. For detailed information about the
subject matter of data protection, please consult our Data Protection
Declaration, which we have included beneath this copy.
Data
recording on this website
Who
is the responsible party for the recording of data on this website (i.e., the
“controller”)?
The data on this website is processed by
the operator of the website, whose contact information is available under
section “Information about the responsible party (referred to as the
“controller” in the GDPR)” in this Privacy Policy.
How
do we record your data?
We collect your data as a result of your
sharing of your data with us. This may, for instance be information you enter
into our contact form.
Other data shall be recorded by our IT
systems automatically or after you consent to its recording during your website
visit. This data comprises primarily technical information (e.g., web browser,
operating system, or time the site was accessed). This information is recorded
automatically when you access this website.
What
are the purposes we use your data for?
A portion of the information is
generated to guarantee the error free provision of the website. Other data may
be used to analyze your user patterns.
What
rights do you have as far as your information is concerned?
You have the right to receive
information about the source, recipients, and purposes of your archived
personal data at any time without having to pay a fee for such disclosures. You
also have the right to demand that your data are rectified or eradicated. If
you have consented to data processing, you have the option to revoke this
consent at any time, which shall affect all future data processing. Moreover,
you have the right to demand that the processing of your data be restricted
under certain circumstances. Furthermore, you have the right to log a complaint
with the competent supervising agency.
Please do not hesitate to contact us at
any time if you have questions about this or any other data protection related
issues.
Analysis
tools and tools provided by third parties
There is a possibility that your
browsing patterns will be statistically analyzed when your visit this website.
Such analyses are performed primarily with what we refer to as analysis
programs.
For detailed information about these
analysis programs please consult our Data Protection Declaration below.
2.
Hosting and Content Delivery Networks (CDN)
We are hosting the content of our
website at the following provider:
External
Hosting
This website is hosted externally.
Personal data collected on this website are stored on the servers of the host.
These may include, but are not limited to, IP addresses, contact requests,
metadata and communications, contract information, contact information, names,
web page access, and other data generated through a web site.
The external hosting serves the purpose
of fulfilling the contract with our potential and existing customers (Art.
6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of
our online services by a professional provider (Art. 6(1)(f) GDPR). If
appropriate consent has been obtained, the processing is carried out
exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar the
consent includes the storage of cookies or the access to information in the
user's end device (e.g., device fingerprinting) within the meaning of the
TDDDG. This consent can be revoked at any time.
Our host(s) will only process your data
to the extent necessary to fulfil its performance obligations and to follow our
instructions with respect to such data.
We are using the following host(s):
Continum AG
Bismarckallee 17
D-79098 Freiburg
Data
processing
We have concluded a data processing
agreement (DPA) for the use of the above-mentioned service. This is a contract
mandated by data privacy laws that guarantees that they process personal data
of our website visitors only based on our instructions and in compliance with
the GDPR.
Google
Cloud CDN
We use the Google Cloud CDN content
delivery network. The provider is Google Ireland Limited (“Google”), Gordon
House, Barrow Street, Dublin 4, Ireland.
Google offers a globally distributed
content delivery network. Technically, the transfer of information between your
browser and our website is routed through the Google network. This enables us
to increase the global accessibility and performance of our website.
The use of Google Cloud CDN is based on
our legitimate interest in the most error-free and secure provision of our
website (Art. 6(1)(f) GDPR).
Data transmission to the US is based on
the Standard Contractual Clauses (SCC) of the European Commission. Details can
be found here: https://cloud.google.com/terms/eu-model-contract-clause.
You can find more information about
Google Cloud CDN here: https://cloud.google.com/cdn/docs/overview?hl=en.
Amazon
CloudFront CDN
We use the Content Delivery Network
Amazon CloudFront CDN. The provider is Amazon Web Services EMEA SARL, 38 avenue
John F. Kennedy, L-1855, Luxembourg (hereinafter referred to as “Amazon”).
Amazon CloudFront CDN is a globally
distributed Content Delivery Network. During these transactions, the
information transfer between your browser and our website is technically routed
via the Content Delivery Network. This enables us to boost the global
availability and performance capabilities of our website.
The use of Amazon CloudFront CDN is
based on our legitimate interest in keeping the presentation of our web
services as error free and secure as possible (Art. 6(1)(f) GDPR).
The data transfer to the United States
is based on the Standard Contract Clauses of the EU Commission. You can
find the details here: https://aws.amazon.com/de/blogs/security/aws-gdpr-data-processing-addendum/.
For more information on Amazon
CloudFront CDN please follow this link: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation.pdf.
3.
General information and mandatory information
Data
protection
The operators of this website and its
pages take the protection of your personal data very seriously. Hence, we
handle your personal data as confidential information and in compliance with
the statutory data protection regulations and this Data Protection Declaration.
Whenever you use this website, a variety
of personal information will be collected. Personal data comprises data that
can be used to personally identify you. This Data Protection Declaration
explains which data we collect as well as the purposes we use this data for. It
also explains how, and for which purpose the information is collected.
We herewith advise you that the
transmission of data via the Internet (i.e., through e-mail communications) may
be prone to security gaps. It is not possible to completely protect data
against third-party access.
Information
about the responsible party (referred to as the “controller” in the GDPR)
The data processing controller on this
website is:
Perigon GmbH
Kreuzauer Straße 33
D-52355 Düren
Phone: +49 2421 597 500
E-mail: info@perigon3d.com
The controller is the natural person or
legal entity that single-handedly or jointly with others makes decisions as to
the purposes of and resources for the processing of personal data (e.g., names,
e-mail addresses, etc.).
Storage
duration
Unless a more specific storage period
has been specified in this privacy policy, your personal data will remain with
us until the purpose for which it was collected no longer applies. If you
assert a justified request for deletion or revoke your consent to data
processing, your data will be deleted, unless we have other legally permissible
reasons for storing your personal data (e.g., tax or commercial law retention
periods); in the latter case, the deletion will take place after these reasons
cease to apply.
General
information on the legal basis for the data processing on this website
If you have consented to data
processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or
Art. 9 (2)(a) GDPR, if special categories of data are processed according to
Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal
data to third countries, the data processing is also based on Art. 49 (1)(a)
GDPR. If you have consented to the storage of cookies or to the access to
information in your end device (e.g., via device fingerprinting), the data
processing is additionally based on § 25 (1) TDDDG. The consent can be revoked
at any time. If your data is required for the fulfillment of a contract or for
the implementation of pre-contractual measures, we process your data on the
basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the
fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c)
GDPR. Furthermore, the data processing may be carried out on the basis of our
legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant
legal basis in each individual case is provided in the following paragraphs of
this privacy policy.
Designation
of a data protection officer
We have appointed a data protection
officer.
Sabine Thomas
Ing.-Büro Dr.Plesnik GmbH
Kaiserstraße 100
D-52134 Herzogenrath
Phone: +49 (0) 241 / 14946 98
E-mail: datenschutz@plesnik.de
Information
on data transfer to the USA and other non-EU countries
Among other things, we use tools of
companies domiciled in the United States or other from a data protection
perspective non-secure non-EU countries. If these tools are active, your
personal data may potentially be transferred to these non-EU countries and may
be processed there. We must point out that in these countries, a data
protection level that is comparable to that in the EU cannot be guaranteed. For
instance, U.S. enterprises are under a mandate to release personal data to the
security agencies and you as the data subject do not have any litigation
options to defend yourself in court. Hence, it cannot be ruled out that U.S.
agencies (e.g., the Secret Service) may process, analyze, and permanently
archive your personal data for surveillance purposes. We have no control over
these processing activities.
Revocation
of your consent to the processing of data
A wide range of data processing
transactions are possible only subject to your express consent. You can also
revoke at any time any consent you have already given us. This shall be without
prejudice to the lawfulness of any data collection that occurred prior to your
revocation.
Right
to object to the collection of data in special cases; right to object to direct
advertising (Art. 21 GDPR)
IN THE EVENT THAT DATA ARE PROCESSED ON
THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT
TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR
UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS.
TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE
CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO
LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO
PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA,
THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE
PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS
(OBJECTION PURSUANT TO ART. 21(1) GDPR).
IF YOUR PERSONAL DATA IS BEING PROCESSED
IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE
PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING
AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED
WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL
SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION
PURSUANT TO ART. 21(2) GDPR).
Right
to log a complaint with the competent supervisory agency
In the event of violations of the GDPR,
data subjects are entitled to log a complaint with a supervisory agency, in
particular in the member state where they usually maintain their domicile,
place of work or at the place where the alleged violation occurred. The right
to log a complaint is in effect regardless of any other administrative or court
proceedings available as legal recourses.
Right
to data portability
You have the right to demand that we
hand over any data we automatically process on the basis of your consent or in
order to fulfil a contract be handed over to you or a third party in a commonly
used, machine readable format. If you should demand the direct transfer of the
data to another controller, this will be done only if it is technically
feasible.
Information
about, rectification and eradication of data
Within the scope of the applicable
statutory provisions, you have the right to at any time demand information
about your archived personal data, their source and recipients as well as the
purpose of the processing of your data. You may also have a right to have your
data rectified or eradicated. If you have questions about this subject matter
or any other questions about personal data, please do not hesitate to contact
us at any time.
Right
to demand processing restrictions
You have the right to demand the
imposition of restrictions as far as the processing of your personal data is
concerned. To do so, you may contact us at any time. The right to demand
restriction of processing applies in the following cases:
- In the event that you should dispute the correctness of your data
archived by us, we will usually need some time to verify this claim.
During the time that this investigation is ongoing, you have the right to
demand that we restrict the processing of your personal data.
- If the processing of your personal data was/is conducted in an
unlawful manner, you have the option to demand the restriction of the
processing of your data in lieu of demanding the eradication of this data.
- If we do not need your personal data any longer and you need it to exercise,
defend or claim legal entitlements, you have the right to demand the
restriction of the processing of your personal data instead of its
eradication.
- If you have raised an objection pursuant to Art. 21(1) GDPR, your
rights and our rights will have to be weighed against each other. As long
as it has not been determined whose interests prevail, you have the right
to demand a restriction of the processing of your personal data.
If you have restricted the processing of
your personal data, these data – with the exception of their archiving – may be
processed only subject to your consent or to claim, exercise or defend legal
entitlements or to protect the rights of other natural persons or legal
entities or for important public interest reasons cited by the European Union
or a member state of the EU.
SSL
and/or TLS encryption
For security reasons and to protect the
transmission of confidential content, such as purchase orders or inquiries you
submit to us as the website operator, this website uses either an SSL or a TLS
encryption program. You can recognize an encrypted connection by checking
whether the address line of the browser switches from “http://” to “https://”
and also by the appearance of the lock icon in the browser line.
If the SSL or TLS encryption is
activated, data you transmit to us cannot be read by third parties.
Rejection
of unsolicited e-mails
We herewith object to the use of contact
information published in conjunction with the mandatory information to be
provided in our Site Notice to send us promotional and information material
that we have not expressly requested. The operators of this website and its
pages reserve the express right to take legal action in the event of the
unsolicited sending of promotional information, for instance via SPAM messages.
4.
Recording of data on this website
Cookies
Our websites and pages use what the
industry refers to as “cookies.” Cookies are small data packages that do not
cause any damage to your device. They are either stored temporarily for the duration
of a session (session cookies) or they are permanently archived on your device
(permanent cookies). Session cookies are automatically deleted once you
terminate your visit. Permanent cookies remain archived on your device until
you actively delete them, or they are automatically eradicated by your web
browser.
In some cases, it is possible that
third-party cookies are stored on your device once you enter our site
(third-party cookies). These cookies enable you or us to take advantage of
certain services offered by the third party (e.g., cookies for the processing
of payment services).
Cookies have a variety of functions.
Many cookies are technically essential since certain website functions would
not work in the absence of the cookies (e.g., the shopping cart function or the
display of videos). The purpose of other cookies may be the analysis of user
patterns or the display of promotional messages.
Cookies, which are required for the
performance of electronic communication transactions, or for the provision of
certain functions you want to use (e.g., for the shopping cart function) or
those that are necessary for the optimization (required cookies) of the website
(e.g., cookies that provide measurable insights into the web audience), shall
be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is
cited. The operator of the website has a legitimate interest in the storage of
required cookies to ensure the technically error free and optimized provision
of the operator’s services. If your consent to the storage of the cookies and
similar recognition technologies has been requested, processing occurs
exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25
(1) TDDDG); this consent may be revoked at any time.
You have the option to set up your
browser in such a manner that you will be notified any time cookies are placed
and to permit the acceptance of cookies only in specific cases. You may also
exclude the acceptance of cookies in certain cases or in general or activate
the delete function for the automatic eradication of cookies when the browser
closes. If cookies are deactivated, the functions of this website may be
limited.
In the event that third-party cookies
are used or if cookies are used for analytical purposes, we will separately
notify you in conjunction with this Data Protection Policy and, if applicable,
ask for your consent.
Consent
with Klaro
Our website uses Klaro's open source
consent technology to obtain your consent to the storage of certain cookies in
your browser or to the use of certain technologies, and to document this
consent in a privacy-compliant manner.
When you enter our website, a cookie is
stored in your browser, in which the consents you have given or the revocation
of these consents are stored. This data will not be passed on.
The collected data will be stored until
you request us to delete it or delete the Klaro cookie yourself, or until the
purpose for storing the data no longer applies. Mandatory legal retention
periods remain unaffected. Details on Klaro Cookie data processing can be found
at https://heyklaro.com/.
The use of Klaro Cookie consent
technology takes place in order to obtain the legally required consent for the
use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.
Server
log files
The provider of this website and its
pages automatically collects and stores information in so-called server log
files, which your browser communicates to us automatically. The information
comprises:
- The type and version of browser used
- The used operating system
- Referrer URL
- The hostname of the accessing computer
- The time of the server inquiry
- The IP address
This data is not merged with other data
sources.
This data is recorded on the basis of
Art. 6(1)(f) GDPR. The operator of the website has a legitimate interest in the
technically error free depiction and the optimization of the operator’s
website. In order to achieve this, server log files must be recorded.
Contact
form
If you submit inquiries to us via our
contact form, the information provided in the contact form as well as any
contact information provided therein will be stored by us in order to handle
your inquiry and in the event that we have further questions. We will not share
this information without your consent.
The processing of these data is based on
Art. 6(1)(b) GDPR, if your request is related to the execution of a contract or
if it is necessary to carry out pre-contractual measures. In all other cases
the processing is based on our legitimate interest in the effective processing
of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement (Art.
6(1)(a) GDPR) if this has been requested; the consent can be revoked at any
time.
The information you have entered into
the contact form shall remain with us until you ask us to eradicate the data,
revoke your consent to the archiving of data or if the purpose for which the
information is being archived no longer exists (e.g., after we have concluded
our response to your inquiry). This shall be without prejudice to any mandatory
legal provisions, in particular retention periods.
Request
by e-mail, telephone, or fax
If you contact us by e-mail, telephone
or fax, your request, including all resulting personal data (name, request) will
be stored and processed by us for the purpose of processing your request. We do
not pass these data on without your consent.
These data are processed on the basis of
Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract
or is required for the performance of pre-contractual measures. In all other
cases, the data are processed on the basis of our legitimate interest in the
effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the
basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent
can be revoked at any time.
The data sent by you to us via contact
requests remain with us until you request us to delete, revoke your consent to
the storage or the purpose for the data storage lapses (e.g. after completion
of your request). Mandatory statutory provisions - in particular statutory
retention periods - remain unaffected.
5.
Social media
Instagram
We have integrated functions of the
public media platform Instagram into this website. These functions are being
offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal
Harbour, Dublin 2, Ireland.
If the social media element has been
activated, a direct connection between your device and Instagram’s server will
be established. As a result, Instagram will receive information on your visit
to this website.
If you are logged into your Instagram
account, you may click the Instagram button to link contents from this website
to your Instagram profile. This enables Instagram to allocate your visit to
this website to your user account. We have to point out that we as the provider
of the website and its pages do not have any knowledge of the content of the
data transferred and its use by Instagram.
If your approval (consent) has been
obtained the use of the abovementioned service shall occur on the basis of Art.
6(1)(a) GDPR and § 25 TDDDG (German Telecommunications Act). Such consent may
be revoked at any time. If your consent was not obtained, the use of the
service will occur on the basis of our legitimate interest in making our
information as comprehensively visible as possible on social media.
Insofar as personal data is collected on
our website with the help of the tool described here and forwarded to Facebook
or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square,
Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data
processing (Art. 26 DSGVO). The joint responsibility is limited exclusively to
the collection of the data and its forwarding to Facebook or Instagram. The
processing by Facebook or Instagram that takes place after the onward transfer
is not part of the joint responsibility. The obligations incumbent on us
jointly have been set out in a joint processing agreement. The wording of the
agreement can be found under: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for
providing the privacy information when using the Facebook or Instagram tool and
for the privacy-secure implementation of the tool on our website. Facebook is
responsible for the data security of Facebook or Instagram products. You can
assert data subject rights (e.g., requests for information) regarding data
processed by Facebook or Instagram directly with Facebook. If you assert the
data subject rights with us, we are obliged to forward them to Facebook.
Data transmission to the US is based on
the Standard Contractual Clauses (SCC) of the European Commission. Details can
be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.
For more information on this subject,
please consult Instagram’s Data Privacy Declaration at: https://instagram.com/about/legal/privacy/.
LinkedIn
This website uses elements of the
LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton
Plaza, Wilton Place, Dublin 2, Ireland.
Any time you access a page of this
website that contains elements of LinkedIn, a connection to LinkedIn’s servers
is established. LinkedIn is notified that you have visited this website with
your IP address. If you click on LinkedIn’s “Recommend” button and are logged
into your LinkedIn account at the time, LinkedIn will be in a position to
allocate your visit to this website to your user account. We have to point out
that we as the provider of the websites do not have any knowledge of the
content of the transferred data and its use by LinkedIn.
If your approval (consent) has been
obtained the use of the abovementioned service shall occur on the basis of Art.
6 (1)(a) GDPR and § 25 TDDDG (German Telecommunications Act). Such consent may
be revoked at any time. If your consent was not obtained, the use of the
service will occur on the basis of our legitimate interest in making our
information as comprehensively visible as possible on social media.
Data transmission to the US is based on
the Standard Contractual Clauses (SCC) of the European Commission. Details can
be found here: https://www.linkedin.com/help/linkedin/answer/a1343190/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en-US
For further information on this subject,
please consult LinkedIn’s Data Privacy Declaration at: https://www.linkedin.com/legal/privacy-policy.
6.
Analysis tools and advertising
Google
Tag Manager
We use the Google Tag Manager. The
provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland
The Google Tag Manager is a tool that
allows us to integrate tracking or statistical tools and other technologies on
our website. The Google Tag Manager itself does not create any user profiles,
does not store cookies, and does not carry out any independent analyses. It
only manages and runs the tools integrated via it. However, the Google Tag
Manager does collect your IP address, which may also be transferred to Google’s
parent company in the United States.
The Google Tag Manager is used on the
basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in
the quick and uncomplicated integration and administration of various tools on
his website. If appropriate consent has been obtained, the processing is
carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG,
insofar the consent includes the storage of cookies or the access to
information in the user’s end device (e.g., device fingerprinting) within the
meaning of the TDDDG. This consent can be revoked at any time.
Google
Analytics
This website uses functions of the web
analysis service Google Analytics. The provider of this service is Google
Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website
operator to analyze the behavior patterns of website visitors. To that end, the
website operator receives a variety of user data, such as pages accessed, time
spent on the page, the utilized operating system and the user’s origin. This
data is assigned to the respective end device of the user. An assignment to a
user-ID does not take place.
Furthermore, Google Analytics allows us
to record your mouse and scroll movements and clicks, among other things.
Google Analytics uses various modeling approaches to augment the collected data
sets and uses machine learning technologies in data analysis.
Google Analytics uses technologies that
make the recognition of the user for the purpose of analyzing the user behavior
patterns (e.g., cookies or device fingerprinting). The website use information
recorded by Google is, as a rule transferred to a Google server in the United
States, where it is stored.
The use of these services occurs on the
basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may
revoke your consent at any time.
Data transmission to the US is based on
the Standard Contractual Clauses (SCC) of the European Commission. Details can
be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Browser
plug-in
You can prevent the recording and
processing of your data by Google by downloading and installing the browser
plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
For more information about the handling
of user data by Google Analytics, please consult Google’s Data Privacy Declaration
at: https://support.google.com/analytics/answer/6004245?hl=en.
7.
Plug-ins and Tools
YouTube
with expanded data protection integration
Our website embeds videos of the website
YouTube. The website operator is Google Ireland Limited (“Google”), Gordon
House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the expanded data
protection mode. According to YouTube, this mode ensures that YouTube does not
store any information about visitors to this website before they watch the
video. Nevertheless, this does not necessarily mean that the sharing of data
with YouTube partners can be ruled out as a result of the expanded data
protection mode. For instance, regardless of whether you are watching a video,
YouTube will always establish a connection with the Google DoubleClick network.
As soon as you start to play a YouTube
video on this website, a connection to YouTube’s servers will be established.
As a result, the YouTube server will be notified, which of our pages you have
visited. If you are logged into your YouTube account while you visit our site,
you enable YouTube to directly allocate your browsing patterns to your personal
profile. You have the option to prevent this by logging out of your YouTube
account.
Furthermore, after you have started to
play a video, YouTube will be able to place various cookies on your device or
comparable technologies for recognition (e.g. device fingerprinting). In this
way YouTube will be able to obtain information about this website’s visitors.
Among other things, this information will be used to generate video statistics
with the aim of improving the user friendliness of the site and to prevent
attempts to commit fraud.
Under certain circumstances, additional
data processing transactions may be triggered after you have started to play a
YouTube video, which are beyond our control.
The use of YouTube is based on our
interest in presenting our online content in an appealing manner. Pursuant to
Art. 6(1)(f) GDPR, this is a legitimate interest. If appropriate consent has
been obtained, the processing is carried out exclusively on the basis of Art.
6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of
cookies or the access to information in the user’s end device (e.g., device
fingerprinting) within the meaning of the TDDDG. This consent can be revoked at
any time.
For more information on how YouTube
handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.
Google
Fonts (when using Youtube)
With your consent to play videos from Youtube
on this website, Youtube uses so-called Google Fonts,
which are provided by Google, for the uniform
display of fonts. When you call up the page,
your browser loads the required fonts into its browser cache
in order to display texts and fonts correctly.
For this purpose,
the browser you are using must connect
to Google's servers. Through this, Google
obtains knowledge that this website was accessed via your
IP address. The use of Google Fonts in
the context of Youtube videos is based on Art. 6
para. 1 lit. a DSGVO. and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information
in the user's terminal device (e.g. device fingerprinting)
within the meaning of the TDDDG. The
consent can be revoked at any time.
If your browser does not
support Google Fonts, a standard font will
be used by your computer.
You can find
more information about Google Fonts at
https://developers.google.com/fonts/faq and in
Google's privacy policy:
https://policies.google.com/privacy?hl=de
8.
Custom Services
Handling
applicant data
We offer website visitors the
opportunity to submit job applications to us (e.g., via e-mail, via postal
services on by submitting the online job application form). Below, we will
brief you on the scope, purpose and use of the personal data collected from you
in conjunction with the application process. We assure you that the collection,
processing, and use of your data will occur in compliance with the applicable
data privacy rights and all other statutory provisions and that your data will always
be treated as strictly confidential.
Scope
and purpose of the collection of data
If you submit a job application to us,
we will process any affiliated personal data (e.g., contact and communications
data, application documents, notes taken during job interviews, etc.), if they
are required to make a decision concerning the establishment or an employment
relationship. The legal grounds for the aforementioned are § 26 BDSG according
to German Law (Negotiation of an Employment Relationship), Art. 6(1)(b) GDPR
(General Contract Negotiations) and – provided you have given us your consent –
Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our
company, your personal data will only be shared with individuals who are
involved in the processing of your job application.
If your job application should result in
your recruitment, the data you have submitted will be archived on the grounds
of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of implementing the
employment relationship in our data processing system.
Data
Archiving Period
If we are unable to make you a job offer
or you reject a job offer or withdraw your application, we reserve the right to
retain the data you have submitted on the basis of our legitimate interests
(Art. 6(1)(f) GDPR) for up to 6 months from the end of the application
procedure (rejection or withdrawal of the application). Afterwards the data
will be deleted, and the physical application documents will be destroyed. The
storage serves in particular as evidence in the event of a legal dispute. If it
is evident that the data will be required after the expiry of the 6-month
period (e.g., due to an impending or pending legal dispute), deletion will only
take place when the purpose for further storage no longer applies.
Longer storage may also take place if
you have given your agreement (Article 6(1)(a) GDPR) or if statutory data
retention requirements preclude the deletion.