Privacy Policy

​  

1. Data protection at a glance

  

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to any data that can be used to identify you personally. For detailed information on data protection, please refer to this Privacy Policy.

​

Data collection on this website

 

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. You can find the operator’s contact details in the legal notice on this website.

 

How do we collect your data?

On the one hand, your data is collected when you provide it to us. This may include, for example, data that you enter into a contact form.

Other data is collected automatically by our IT systems when you visit the website. This consists primarily of technical data (e.g. internet browser, operating system or time of page visit). This data is collected automatically as soon as you access this website.

 

What do we use your data for?

Some of the data is collected to ensure the website functions correctly. Other data may be used to analyse your user behaviour.

 

What rights do you have regarding your data?

You have the right, at any time and free of charge, to obtain information about the origin, recipients and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. You may contact us at any time at the address given in the legal notice regarding this and any other questions on the subject of data protection. Furthermore, you have the right to lodge a complaint with the relevant supervisory authority.

You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Please refer to the ‘Right to restriction of processing’ section of this privacy policy for further details.

​

Analytics tools and third-party tools

When you visit this website, your browsing behaviour may be analysed statistically. This is primarily done using cookies and so-called analytics programmes. The analysis of your browsing behaviour is generally carried out anonymously; your browsing behaviour cannot be traced back to you.

You may object to this analysis or prevent it by not using certain tools. Detailed information on these tools and your options for objecting can be found in sections 3 and 4 of this privacy policy.

​

​

2. Hosting

  

External hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact enquiries, meta and communication data, contractual data, contact details, names, website visits, the browser used, the operating system, as well as the date and time of the visit and other data generated via a website. In addition, all data that you enter on our website (e.g. in a contact form) is processed on the hosting provider’s servers.

The hosting provider is used for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Article 6(1)(b) of the GDPR) and in the interests of ensuring the secure, fast and efficient provision of our online services by a professional provider (Article 6(1)(f) of the GDPR).

Our hosting provider is a global company. Your data may therefore be stored and processed on servers in the European Union (e.g. Ireland), in Israel, the USA or other countries worldwide.

• In the case of Israel, there is an adequacy decision by the European Commission which guarantees a high standard of data protection.

• For transfers to the USA and other third countries, our hosting provider uses the European Commission’s Standard Contractual Clauses. This means that the hosting provider is contractually obliged to comply with European data protection standards even outside the EU.

We have entered into a Data Processing Agreement (DPA) with our hosting provider. This ensures that our hosting provider processes the data of our website visitors only in accordance with our strict instructions and in compliance with the GDPR.

.

​

3. General Information and Mandatory Disclosures

  

Data Protection

    

Introduction

We (“we”, “us”, “our”) take the protection of the data of users (“users” or “you”) of our website and/or our mobile app (the “website” or the “mobile app”) very seriously and undertake to protect the information that users provide to us in connection with the use of our website and/or our mobile app (collectively: “digital assets”) to us. Furthermore, we undertake to protect and use your data in accordance with applicable law.

This Privacy Policy explains our practices regarding the collection, use and disclosure of your data through your use of our digital assets (the “Services”) when you access the Services via your devices.

Please read this Privacy Policy carefully and ensure that you fully understand our practices regarding your data before using our Services. If you have read and fully understood this Privacy Policy and do not agree with our practices, you must cease using our digital assets and Services. By using our Services, you accept the terms of this Privacy Policy. Continued use of the services constitutes your consent to this Privacy Policy and any amendments thereto.

In this Privacy Policy, you will learn:

• How we collect data

• What data we collect

• Why we collect this data

• To whom we disclose the data

• Where the data is stored

• How long the data is retained

• How we protect the data

• The purposes for which we use the data

• What rights you have

• Updates or changes to the Privacy Policy

 

What data do we collect?

Below is an overview of the data we may collect:

• Non-identified and non-identifiable information that you provide during the registration process or that is collected through your use of our services (‘non-personal data’). Non-personal data does not allow any conclusions to be drawn as to the identity of the person from whom it was collected. The non-personal data we collect consists mainly of technical and aggregated usage information.

• Individually identifiable information, i.e. any information that can be used to identify you or with which you could be identified with reasonable effort (‘personal data’). The personal data we collect via our services may include information requested from time to time, such as names, email addresses, postal addresses, telephone numbers, IP addresses and more. Where we combine personal data with non-personal data, we treat the combined data as personal data for as long as it remains combined.

How do we collect data?

The main methods we use to collect data are listed below:

• We collect data when you use our services. This means that when you visit our digital assets and use our services, we may collect, record and store information relating to your usage, sessions and associated details.

• We collect data that you provide to us yourself, for example, when you contact us directly via a communication channel (e.g. an email containing a comment or feedback).

• We may collect data from third-party sources, as described below.

• We collect data that you provide to us when you log in to our services via a third-party provider such as LinkedIn or Google.

​

​Why do we collect this data?

We may use your data for the following purposes:

• to provide and operate our services;

• to develop, customise and improve our services;

• to respond to your feedback, enquiries and requests, and to offer assistance;

• to analyse demand and usage patterns;

• for other internal, statistical and research purposes;

• to improve our data security and fraud prevention capabilities;

• to investigate breaches and to comply with applicable law, regulations or regulatory orders;

• to send you updates, news, promotional material and other information relating to our services.

​

​Who do we share this data with?

​We may share your data with our service providers in order to operate our services (e.g. storing data via third-party hosting services, providing technical support, etc.).

We may also disclose your data in the following circumstances: (i) to investigate, detect, prevent or take action against unlawful activities or other misconduct; (ii) to establish or exercise our rights of defence; (iii) to protect our rights, property or personal safety, as well as the safety of our users or the public; (iv) in the event of a change of control affecting us or any of our affiliated companies (by way of a merger, acquisition or purchase of (substantially) all assets, amongst other things); (v) to collect, store and/or manage your data through authorised third-party service providers (e.g. cloud service providers), insofar as this is reasonable for business purposes; (vi) to work with third-party providers to improve your user experience. To avoid any misunderstanding, we would like to point out that we may not transfer, disclose or otherwise use non-personal data to third parties at our own discretion.

When you visit or access our services, we authorise third parties to use web beacons, cookies, pixel tags, scripts and other technologies and analytics services (‘tracking technologies’). These tracking technologies may enable third parties to automatically collect your data in order to improve the browsing experience on our digital assets, optimise their performance and ensure a personalised user experience, as well as for security and fraud prevention purposes. Further details can be found in sections 4 and 5 of this Privacy Policy.

 

Where do we store the data?​

​Personal data may be maintained, processed and stored in the United States, Ireland, South Korea, Taiwan, Israel and, where necessary for the proper provision of our services and/or as required by law (as further explained below), in other jurisdictions.

​

​How long is the data retained?

Please note that we retain the data collected for as long as is necessary to provide our services, to comply with our legal and contractual obligations towards you, to resolve disputes and to enforce our agreements.

We may correct, supplement or delete inaccurate or incomplete data at any time at our sole discretion.

​

​How do we protect the data?

The hosting service for our digital assets provides us with the online platform through which we can offer you our services. Your data may be stored via our hosting provider’s data storage systems, databases and general applications. They store your data on secure servers behind a firewall and provide secure HTTPS access to most areas of their services.

Notwithstanding the measures and efforts taken by us and our hosting provider, we cannot and will not guarantee absolute protection or security of the data that you upload, publish or otherwise disclose to us or others.

For this reason, we would ask you to set strong passwords and, where possible, refrain from sending us or others any confidential information which, in your opinion, could cause you significant or lasting harm if disclosed. As email and instant messaging are not considered secure forms of communication, we also ask you not to disclose any confidential information via these channels

Please note that data transmission over the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to provide complete protection of data against access by third parties.

​

The purposes for which we use your data​

We use your personal data only for the purposes set out in this privacy policy and only where we are satisfied that:

• the use of your personal data is necessary to fulfil or enter into a contract (e.g. to provide you with the services themselves or to provide customer service or technical support);

• the use of your personal data is necessary to comply with relevant legal or regulatory obligations; or

• the use of your personal data is necessary to support our legitimate business interests (provided that this is always done in a manner that is proportionate and respects your data protection rights).

​

What rights you have

As an EU resident, you may:

• request confirmation as to whether or not personal data concerning you is being processed, and request access to your stored personal data as well as certain additional information;

• request to receive the personal data you have provided to us in a structured, commonly used and machine-readable format;

• request the rectification of your personal data held by us;

• request the erasure of your personal data;

• object to our processing of your personal data;

• request the restriction of the processing of your personal data; or

• lodge a complaint with a supervisory authority.

Please also refer to the following sections of this Privacy Policy for further details.

Please note, however, that these rights are not absolute and may be subject to our own legitimate interests and regulatory requirements. If you have any general questions regarding the personal data we collect and how we use it, please contact us as set out below.

In the course of providing the services, we may transfer data across borders to affiliated companies or other third parties, and from your country/jurisdiction to other countries/jurisdictions worldwide. By using the services, you consent to the transfer of your data outside the EEA.

If you are resident in the EEA, your personal data will only be transferred to locations outside the EEA if we are satisfied that an adequate or comparable level of protection for personal data exists. We will take appropriate steps to ensure that we have adequate contractual arrangements in place with our third parties to guarantee that appropriate safeguards are in place, thereby minimising the risk of unauthorised use, alteration, deletion, loss or theft of your personal data, and that these third parties act in accordance with applicable laws at all times.

​

Updates or changes to the Privacy Policy

We may revise this Privacy Policy from time to time at our sole discretion; the version published on the website is always the most up-to-date (see the ‘Date’ section). We ask that you check this Privacy Policy regularly for any changes. In the event of significant changes, we will publish a notice to this effect on our website. If you continue to use the services after notification of changes on our website, this shall be deemed to constitute your confirmation and consent to the changes to the Privacy Policy and your agreement to be bound by the terms of such changes.

​

Information on the data controller

The data controller responsible for data processing on this website is:

AUXILIUS Rechtsanwaltsgesellschaft Steuerberatungsgesellschaft mbH

Glücksteinallee 36

68163 Mannheim

Telephone: +49 (151) 21756134

Email: office@AUXILIUS-rsg.de

The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

​

Withdrawal of your consent to data processing

Many data processing operations are only possible with your explicit consent. You may withdraw any consent you have already given at any time. To do so, simply send us an informal email. The lawfulness of the data processing carried out prior to the withdrawal remains unaffected by the withdrawal.

​

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(e) OR (f) OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME, FOR REASONS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RELEVANT LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, exercise or defence of legal claims (objection under Article 21(1) of the GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) OF THE GDPR).

​

Right to lodge a complaint with the competent supervisory authority

In the event of breaches of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work or the place where the alleged breach occurred. This right to lodge a complaint is without prejudice to any other administrative or judicial remedies.

​

Right to data portability

You have the right to have data which we process automatically on the basis of your consent or in fulfilment of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another data controller, this will only take place to the extent that it is technically feasible.

​

SSL or TLS encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the website operator. You can recognise an encrypted connection by the fact that the address bar of your browser changes from ‘http://’ to ‘https://’ and by the padlock symbol in your browser bar.

When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

​

Right of access, erasure and rectification

In accordance with the applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients, and the purpose of the data processing, and, where applicable, the right to have this data rectified or erased. For this and any further questions regarding personal data, you may contact us at any time at the address given in the legal notice.

​

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. To do so, you may contact us at any time at the address provided in the legal notice. The right to restriction of processing applies in the following cases:

• If you dispute the accuracy of your personal data stored by us, we generally require time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.

• If the processing of your personal data has been or is being carried out unlawfully, you may request the restriction of data processing instead of erasure.

• If we no longer require your personal data, but you require it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of erasure.

• If you have lodged an objection under Article 21(1) of the GDPR, a balancing of interests between yours and ours must be carried out. Until it is determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data – apart from its storage – may only be processed with your consent, or for the purpose of establishing, exercising or defending legal claims, or to protect the rights of another natural or legal person, or for reasons of an important public interest of the European Union or a Member State.

​

​

4. Data collection on this website

Cookies

Some of the web pages on this site use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called ‘session cookies’. They are automatically deleted at the end of your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit.

You can configure your browser to notify you when cookies are set and to allow cookies only on a case-by-case basis, to block the acceptance of cookies in specific cases or generally, and to enable the automatic deletion of cookies when you close your browser. If you disable cookies, the functionality of this website may be restricted.

Cookies that are necessary for carrying out the electronic communication process or for providing specific functions requested by you (e.g. the shopping basket function) are stored on the basis of Article 6(1)(f) of the GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error-free and optimised provision of its services. Where consent has been sought (e.g. consent to the storage of cookies), processing takes place exclusively on the basis of Article 6(1)(a) of the GDPR; consent may be withdrawn at any time.

Where other cookies (e.g. cookies used to analyse your browsing behaviour) are stored, these are dealt with separately in this privacy policy.

​

Cookie Consent Banner (Consent Management)

To comply with data protection regulations, we use our host’s integrated cookie consent banner. This banner appears automatically when you visit our website for the first time. Here, you can decide for yourself which categories of cookies you wish to allow.

• Essential cookies: These cookies are strictly necessary (e.g. to secure the website or to save your language selection). They cannot be deselected via the banner. The legal basis for this processing is Article 6(1)(f) of the GDPR (legitimate interest in a functioning website).

• Functional, analytics and marketing cookies: These cookies are only loaded if you actively consent via the banner. The legal basis for this is your explicit consent in accordance with Article 6(1)(a) of the GDPR.

Withdrawal of your consent

You may change your cookie settings – and thus withdraw the consent you have previously given – at any time with effect for the future, or withdraw it completely. To do so, you can access the cookie banner again via the ‘Cookie settings’ (...) link in the footer of our website and adjust your selection. Alternatively, you can manually delete cookies at any time via your web browser’s settings.

​

List of cookies requiring consent

You can view a detailed and up-to-date list of all cookies requiring consent that we use, their exact purpose and their respective retention periods at any time directly via the settings in our cookie consent banner.

​

Collection of server log files

Our website host automatically collects and stores information in so-called server log files, which your browser automatically transmits to our host’s servers when you visit our website.

This includes the following data:

• The browser type and version

• The operating system used on your device

• The referrer URL (the website from which you arrived at our site)

• The hostname of the accessing computer

• The IP address of your device (in anonymised form where applicable)

• The date and time of the server request

This data is not combined with other data sources.

The processing of this data is strictly necessary for technical reasons. It serves to display our website to you in a stable and error-free manner, to ensure system security, and to detect and ward off cyber-attacks (e.g. DDoS attacks).

Data processing is carried out on the basis of Article 6(1)(f) of the GDPR. We have a legitimate interest in the technically flawless display, stability and security of our website.

For security reasons, the server log files are stored by our host for a limited period (usually for a few days to weeks) and are then automatically deleted or anonymised, unless longer retention is required by law for evidential purposes (e.g. in the event of an attack on the IT infrastructure)

​

Contact form

If you submit enquiries to us via the contact form, the details you provide in the enquiry form – including the contact details you specify there – will be stored by us for the purpose of processing your enquiry and in the event of any follow-up questions. We will not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of enquiries addressed to us (Article 6(1)(f) of the GDPR) or on your consent (Article 6(1)(a) of the GDPR), provided that this has been requested.

The data you enter in the contact form will be retained by us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

​

Enquiries by email, telephone or fax

If you contact us by email, telephone or fax, your enquiry – including any personal data it contains (name, enquiry details) – will be stored and processed by us for the purpose of dealing with your request. We will not pass on this data without your consent.

The processing of this data is based on Article 6(1)(b) of the GDPR, provided that your enquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Article 6(1)(a) of the GDPR) and/or on our legitimate interests (Article 6(1)(f) of the GDPR), as we have a legitimate interest in the effective processing of enquiries addressed to us.

The data you send to us via contact enquiries will remain with us until you request us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. once your enquiry has been fully processed). Mandatory legal provisions – in particular statutory retention periods – remain unaffected.

​

Comment function on this website

For the comment function on this site, in addition to your comment, details of the time the comment was posted, your email address and, if you are not posting anonymously, the username you have chosen are stored.

Storage of IP addresses

Our comment function stores the IP addresses of users who post comments. As we do not review comments on this website before they are published, we require this data to be able to take action against the author in the event of legal infringements such as insults or propaganda.

Subscribing to comments

As a user of the site, you can subscribe to comments once you have logged in. You will receive a confirmation email to verify that you are the owner of the email address provided. You can unsubscribe from this service at any time via a link in the information emails. In this case, the data entered when subscribing to comments will be deleted; however, if you have provided this data to us for other purposes and elsewhere (e.g. when subscribing to a newsletter), it will remain with us.

Retention period for comments

The comments and associated data (e.g. IP address) are stored and remain on this website until the content to which the comment relates has been completely deleted or the comments must be deleted for legal reasons (e.g. offensive comments).

Legal basis

Comments are stored on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw any consent you have given at any time. To do so, simply send us an informal email. The lawfulness of any data processing operations that have already taken place remains unaffected by the withdrawal.

​

​

5. Analytics Tools and Advertising

   

Wix Analytics

We use the ‘Wix Analytics’ analytics tool from Wix.com Ltd., Nemal St. 40, Tel Aviv, Israel, on our website. This tool collects statistical data on the use of our website in order to continuously optimise our service and make it more user-friendly. The data collected includes, amongst other things, the number of page views, the time spent on individual sub-pages, visitors’ click paths, as well as information about the device used and the location (at country or regional level). During this processing, cookies are also set or comparable technical data is read.

Data processing takes place exclusively on the basis of your explicit consent in accordance with Article 6(1)(a) of the GDPR. You give this consent voluntarily via the cookie consent banner the first time you visit our website.

Wix is an international company. The analytics data collected may be stored and processed on Wix’s servers worldwide (including in the EU, Israel and the USA). An adequacy decision has been issued by the European Commission regarding Israel. For transfers to the USA and other third countries, Wix uses standard contractual clauses approved by the European Commission to ensure an adequate level of data protection.

You may withdraw your consent to the collection of your data by Wix Analytics at any time with future effect. To do so, simply access the cookie settings again via the link in the footer of our website and adjust your selection.

 

6. Newsletter

   

CleverReach

This website uses CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that enables the organisation and analysis of newsletter distribution. The data you provide to subscribe to the newsletter (e.g. your email address) is stored on CleverReach’s servers in Germany or Ireland.

The newsletters we send via CleverReach enable us to analyse the behaviour of newsletter recipients. Among other things, this allows us to analyse how many recipients opened the newsletter and how often each link in the newsletter was clicked. With the help of so-called conversion tracking, it is also possible to analyse whether a predefined action (e.g. the purchase of a product on this website) took place after clicking on a link in the newsletter. Further information on data analysis via CleverReach newsletters is available at: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

Data processing is carried out on the basis of your consent (Article 6(1)(a) of the GDPR). You may withdraw this consent at any time by unsubscribing from the newsletter. The lawfulness of any data processing operations that have already taken place remains unaffected by the withdrawal.

If you do not wish to have your data analysed by CleverReach, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. You can also unsubscribe from the newsletter directly on the website.

The data you have provided to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list once you have unsubscribed. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your email address may be stored on our systems or those of the newsletter service provider on a blacklist, if necessary, to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with any other data. This serves both your interests and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Article 6(1)(f) of the GDPR). There is no time limit on storage on the blacklist. You may object to this storage provided that your interests override our legitimate interest.

For further details, please refer to CleverReach’s privacy policy at: https://www.cleverreach.com/de/datenschutz/.

​

​

7. Plugins and Tools

   

Google Maps

This website uses the Google Maps mapping service via an API. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer.

The use of Google Maps is in the interests of presenting our online services in an appealing manner and ensuring that the locations specified on our website can be easily found. This constitutes a legitimate interest within the meaning of Article 6(1)(f) of the GDPR.

Further information on the handling of user data can be found in Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.

​

​

8. Our own services

   

Handling of applicant data

We offer you the opportunity to apply for a job with us (e.g. by email, post or via the online application form) . Below, we provide information on the scope, purpose and use of your personal data collected as part of the application process. We assure you that the collection, processing and use of your data are carried out in accordance with applicable data protection law and all other statutory provisions, and that your data will be treated as strictly confidential.

Scope and purpose of data collection

When you submit an application to us, we process your associated personal data (e.g. contact and communication details, application documents, notes taken during interviews, etc.) to the extent necessary to decide whether to enter into an employment relationship. The legal basis for this is Section 26 of the BDSG-neu under German law (initiation of an employment relationship), Article 6(1)(b) of the GDPR (general pre-contractual processing) and – provided you have given your consent – Article 6(1)(a) of the GDPR. Consent may be withdrawn at any time. Your personal data will be disclosed within our company exclusively to those persons involved in processing your application.

Should your application be successful, the data you have submitted will be stored in our data processing systems on the basis of Section 26 of the BDSG-neu and Article 6(1)(b) of the GDPR for the purpose of carrying out the employment relationship.

Data retention period

If we are unable to make you a job offer, if you decline a job offer, or if you withdraw your application, we reserve the right to retain the data you have provided for up to 6 months from the end of the application process (rejection or withdrawal of the application) on the basis of our legitimate interests (Article 6(1)(f) of the GDPR). The data will then be deleted and the physical application documents destroyed. The data is retained in particular for evidential purposes in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for its continued retention no longer applies.

Data may also be retained for a longer period if you have given your consent (Article 6(1)(a) of the GDPR) or if statutory retention obligations prevent deletion.

Inclusion in the candidate pool

If we do not make you a job offer, there may be the option of including you in our candidate pool. Should you be included, all documents and details from your application will be transferred to the candidate pool so that we can contact you should suitable vacancies arise.

Inclusion in the candidate pool is based solely on your express consent (Article 6(1)(a) of the GDPR). The provision of consent is voluntary and is not linked to the current recruitment process. The data subject may withdraw their consent at any time. In this case, the data in the candidate pool will be irrevocably deleted, provided there are no statutory grounds for retaining it.

The data in the candidate pool will be irrevocably deleted no later than two years after consent is given.