Privacy Policy

1. Name and address of the controller

2. Name and address of the data protection officer

3. General principles of processing and its purpose

In order to meet the requirements of a precise, transparent and comprehensible form (Art. 12 para. 1 GDPR), we would like to provide you with clear and (hopefully) understandable information about the nature, scope and purpose of data processing in the following sections.

The purpose of processing data is fundamentally to operate our website with information and to present our company, our competencies and our services. With our website, we aim to inspire you as a visitor and prospective client and to win you as a new customer or new employee.

Our website can generally be used without providing any personal data. However, if you wish to make use of services offered by our company via our website, processing of personal data may be required. Where processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain the consent of the data subject.

4. Collection of usage data

Each time our website is accessed, a series of general data and information is collected. This information is stored in the log files of the web server. It provides information about your IP address, the time of access, the pages or files accessed, the so-called referrer (the previously visited page), the volume of data transferred, and the device and browser used. The data is collected without any action on your part and stored until it is automatically deleted.

This information is essentially required to (1) correctly deliver the content of our website to the user’s computer, (2) ensure the ongoing functionality and security of our website, and (3) for other administrative purposes.

The aforementioned purposes constitute our legitimate interest in the temporary storage of data and log files pursuant to Art. 6 para. 1 lit. f GDPR. We will not draw any conclusions about your identity from this information.

5. Hosting of our website

Our website was and is created and maintained using Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel (“Wix”), and is also hosted on their servers. We are aware that this involves a transfer of data to a third country.

Wix.com Ltd. is headquartered in Israel, and Israel is considered by the European Commission to be a country that provides an adequate level of protection for personal data. In addition, Wix is a certified participant in the EU-US Privacy Shield agreement. According to a decision of the EU Commission, companies listed on the “Privacy Shield List” are generally assumed to provide an “adequate level of data protection” when processing personal data. Further information can be found in the Wix privacy policy.

6. Contact form and email

Our website offers the option of contacting us directly via a contact form or the email addresses provided. If you contact us as a user via the contact form or by email, the information you provide in the contact form or the personal data transmitted with your email will be stored automatically.

We use your data to process your enquiry and may contact you for this purpose using the contact details provided. This data will not be used for advertising purposes or passed on to third parties.

The legal basis for processing the data transmitted during your contact via the contact form or email is our legitimate interest in responding to your enquiry pursuant to Art. 6 para. 1 lit. f GDPR. If the email contact aims at the conclusion of a contract, Art. 6 para. 1 lit. b GDPR is an additional legal basis for the processing. Your data will be deleted once your enquiry has been fully processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided there are no statutory retention obligations to the contrary.

7. Data protection in applications and the application process

We collect and process the personal data of applicants for the purpose of handling the application process. Processing may also take place electronically. This is particularly the case when an applicant submits application documents electronically, for example by email. If we conclude an employment contract with you as an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in accordance with statutory provisions. If no employment contract is concluded with the applicant, the application documents will generally be deleted four months after notification of the rejection decision, provided there are no other legitimate interests that preclude deletion.

8. Newsletter

We regularly send newsletters and other circulars (hereinafter “newsletter”) in digital form. The content consists essentially of information about our company, our services and solutions, as well as press releases. We generally send newsletters only with your consent pursuant to Art. 6 para. 1 lit. a GDPR or, where consent is not required, on the basis of our legitimate interest in direct marketing pursuant to Art. 6 para. 1 lit. f GDPR, to the extent permitted by law, e.g. when addressing existing customers. Where we engage a service provider for sending newsletters, this is based on our legitimate interest in a secure and efficient delivery system. Our legitimate interest also forms the basis for logging the registration process in order to fulfil our documentation obligation pursuant to Art. 7 para. 1 GDPR.

To sign up for our newsletter, it is generally sufficient to provide your email address. However, for personalised communication, we may ask you to also provide your name. During the registration process, we generally use the so-called double opt-in procedure. This means that after registering, you will receive an email asking you to confirm your registration. This confirmation is necessary to ensure that registration is only possible for the owner of the email address. The registration including your confirmation is logged so that we can fulfil our documentation obligation. The time of registration and confirmation as well as your IP address are stored.

You may withdraw your consent to receive the newsletter at any time with effect for the future pursuant to Art. 7 para. 3 GDPR. Please notify us of your withdrawal by email or simply use the unsubscribe link included in every newsletter.

To optimise and improve our newsletters, we carry out performance measurement, so-called tracking. Technical information is collected, such as details about the system you are using, your IP address and the time of retrieval. This information is used on the one hand for the technical improvement of the newsletter, and on the other hand to determine whether the newsletters are opened at all and which links within the newsletter are clicked. With these analyses, we aim to identify reading habits and adapt our content accordingly in order to perfect it for your benefit and continue to meet your expectations. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. We would like to point out that it is not possible to object separately to the performance measurement. If you do not agree with the performance measurement, the newsletter must be cancelled or objected to as a whole.

For the distribution of our newsletters, we use the service provider Mailchimp. Your email address and further information relating to the sending and analysis of newsletters are stored with Mailchimp. The service provider of Mailchimp is the Rocket Science Group, LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Mailchimp is certified under the EU-US Privacy Shield, ensuring that the data protection standard of the GDPR is also maintained when processing data in the USA. Further information on data processing by Mailchimp can be found in the privacy policy.

9. Cookies

We use so-called cookies on our website. Cookies are small text files that are placed and stored on your device by the web server via your internet browser when you visit our website. The browser can only store what it already knows, such as your current IP address or language settings. The next time you access our web server, the relevant data from the cookie file is transmitted. However, this does not mean that we thereby obtain direct knowledge of your identity.

The cookies used on our website are technical and functional cookies that serve to make the use of our offering more pleasant for you and to optimise user-friendliness. We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimising our offering. These purposes constitute our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.

Cookies are stored on the user’s device and transmitted from there to our website. As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time, including automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

10. Use of services for analytical purposes

With the tracking measures listed below, we find out which pages are most helpful to our users and can also statistically record and monitor the general interest in our website. We can also identify and promptly resolve technical problems in the use of our website. This ensures that our pages function optimally and that we continuously improve our offering for our visitors. These purposes constitute our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f GDPR.

Google Analytics

For the purpose of needs-based design and ongoing optimisation of our website, we have integrated the Google Analytics component (with anonymisation function). Google Analytics is a web analytics service. Web analytics involves the collection, gathering and evaluation of data on the behaviour of visitors to websites. The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA.

In this context, pseudonymised usage profiles are created and cookies are used (see section “Cookies” under item 8). The information generated by the cookies about your use of our website, such as the access time, the location from which access was made, and the frequency of visits to our website, is transmitted to Google servers in the USA and stored there. This information is used, among other things, to evaluate the use of our website, to compile online reports for us showing activity on our website, and to provide other services associated with the use of our website. This information may also be transmitted to third parties where required by law or where third parties process such data on our behalf.

IP addresses are anonymised so that they cannot be attributed to you personally. You can prevent the installation of cookies by adjusting your browser software settings. However, please note that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting and processing the data generated by the cookie relating to your use of the website (including your IP address) by downloading and installing a browser add-on.

As an alternative to the browser add-on, particularly for browsers on mobile devices, you can prevent collection by Google Analytics by clicking on https://tools.google.com/dlpage/gaoptout. An opt-out cookie will be set that prevents future collection of your data when you visit our website. The opt-out cookie applies only to the browser you are currently using and only to our website. If you delete cookies in this browser, you will need to set the opt-out cookie again.

Through its certification under the EU-US Privacy Shield, Google guarantees that the EU data protection requirements are also met when processing data in the USA. Further information on data protection in connection with Google Analytics can be found in the Google Analytics help.

WIX Visitor Analytics

We use WIX Visitor Analytics on our website, a web analytics service provided by Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel (“WIX”). WIX Visitor Analytics uses cookies (see section “Cookies” under item 8), text files stored on your computer that enable analysis of your use of our website. The information generated by the cookie about your use of our website is generally transmitted to and stored on a WIX server. If IP anonymisation is activated on this website, however, your IP address will first be shortened by WIX within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a WIX server and shortened there.

WIX will use this information to evaluate the use of our website, to compile online reports for us showing activity on our website, and to provide other services associated with the use of our website. The IP address transmitted by your browser in the context of WIX Visitor Analytics will not be merged with other WIX data.

You can prevent the storage of cookies by adjusting your browser software settings. Please note, however, that in this case you may not be able to use all functions of our website to their full extent. You can also prevent WIX from collecting and processing the data generated by the cookie relating to your use of our website (including your IP address) by adjusting your browser settings.

11. Social media links

We use links to our accounts on the social networks listed below on our website. We maintain these accounts in order to present our services and to communicate with interested parties, customers and other users active there. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

The integration is carried out as a link, meaning that you are only redirected to the respective social network’s service when you click on the link. After being redirected, information is collected by the respective network. We would like to point out that your data may be processed outside the European Union, in particular in the USA.

This is likely to include at least data such as your IP address, date, time and the pages you visited. If you are logged into your user account on the respective network at the time, the network operator may be able to assign the collected information from your visit to your personal account. If you wish to prevent such assignment, you must log out of the respective network before clicking the link.

The following social networks are integrated on our website via links. For detailed information on the processing operations and options for objection, please refer to the information provided by the services linked below. If you wish to submit an access request or assert your data subject rights, please note that these requests must be directed to the respective providers. Only the providers of the respective service have access to your data and can therefore take direct action and provide information.

Facebook

The data controller is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, a subsidiary of Facebook Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Facebook Inc. is certified under the EU-US Privacy Shield data protection agreement. Facebook privacy policy: https://www.facebook.com/policy.php. You can reach the data protection officer via the linked contact form. You can adjust your personal settings at the following link: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

Twitter

The service provider and data controller is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. Twitter Inc. is certified under the EU-US Privacy Shield and has thereby committed to complying with European data protection standards. Twitter privacy policy: https://twitter.com/de/privacy. You can adjust your personal settings at the following link: https://twitter.com/settings/account/personalization.

12. Duration of storage of personal data

We process and store personal data of data subjects generally only for the period necessary to achieve the purpose of storage, or as provided for by laws or regulations to which the controller is subject (e.g. commercial and tax retention periods). After the expiry of the retention period, the relevant data is routinely deleted, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in continued storage.

13. Data security

We use the widely used SSL (Secure Socket Layer) procedure on our website in conjunction with the highest level of encryption supported by your browser. This is generally 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether our website is being transmitted in encrypted form by the closed or green padlock symbol in the address bar of your browser.

In addition, as the controller, we have implemented further technical and organisational measures to ensure the most comprehensive protection possible of personal data processed via our website. Nevertheless, internet-based data transmissions may generally have security vulnerabilities, so that absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, for example by telephone.

14. Data subject rights

If personal data concerning you is being processed, you are a data subject within the meaning of the GDPR. You have comprehensive rights vis-à-vis the controller, which we inform you of below:

• Right of access: You have the right to obtain free information about your personal data stored by us, in particular its origin and recipients as well as the purpose of data processing and the planned storage period (Art. 15 GDPR).
• Right to rectification: You have the right to obtain without undue delay the rectification of inaccurate data concerning you and/or the completion of incomplete data stored by us (Art. 16 GDPR).
• Right to erasure: You have the right to request the immediate erasure of your personal data where the conditions of Art. 17 para. 1 GDPR are met. However, this right does not exist in particular where processing is necessary for compliance with a legal obligation to which our company is subject (Art. 17 para. 3 GDPR).
• Right to restriction of processing: You have the right to request the restriction of processing of your personal data where one of the conditions set out in Art. 18 para. 1 applies.
• Right to notification: Where you have exercised the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to notify all recipients to whom the personal data concerning you has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients (Art. 19 GDPR).
• Right to data portability: Art. 20 GDPR grants you the right to receive the personal data concerning you, which you have provided to us as the controller, in a structured, commonly used and machine-readable format, where one of the conditions set out in Art. 20 para. 1 applies.
• Right to object: Furthermore, Art. 21 GDPR guarantees you the right to object at any time to the processing of personal data concerning you where such processing is based on Art. 6 para. 1 lit. e or f. Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing. If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for such purposes.
• Right to withdraw consent: You have the right pursuant to Art. 7 para. 3 GDPR to withdraw any consent you have given to the processing of data at any time with effect for the future. In the event of withdrawal, we will immediately delete the data concerned, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint with a supervisory authority: If you consider that the processing of personal data concerning you infringes the GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work or place of the alleged infringement (Art. 77 GDPR).

15. Automated decision-making

As a responsible company, we refrain from automated decision-making or profiling.

16. Changes to this privacy policy

We reserve the right to amend this privacy policy as occasion demands and without prior notice. We therefore ask you to regularly check this page for any changes to this privacy policy.