Home page Privacy policy

Privacy Policy

Introduction and General Information

Thank you for your interest in our website. Protecting your personal data is very important to us. Below you will find information on how we handle your data collected through your use of our website. We process your data in accordance with the statutory data‑protection regulations.

Controller within the Meaning of the GDPR

LSS Lewens Sonnenschutz-Systeme GmbH & Co.KG
Bauernallee 13
19288 Ludwigslust
Telefon: +49 3874 2502 0
E-Mail: info@lewens.de

Contact Details of the Data Protection Officer

Proliance GmbH / www.datenschutzexperte.de
Datenschutzbeauftragter
Leopoldstr. 21
80802 München
datenschutzbeauftragter@datenschutzexperte.de

When contacting the Data Protection Officer, please state the company to which your request relates. Please refrain from attaching sensitive information to your request, such as a copy of an ID document.

Definitions

We want this privacy policy to be easy for everyone to understand. As a rule, we use the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Art. 4 GDPR.

Access to and Storage of Information on End Devices

Using our website may involve accessing information (e.g., IP address) or storing information (e.g., cookies) on your end devices. Such access or storage may be linked to further processing of personal data within the meaning of the GDPR.

Where access to or storage of information is strictly necessary for the technically error‑free provision of our services, this is carried out on the basis of Section 25(1) sentence 1, (2) no. 2 TDDDG.

Where such processes serve other purposes (e.g., designing our website to meet demand), they are carried out on the basis of Section 25(1) TDDDG only with your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. The GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.

Further information on the processing of your personal data and the relevant legal bases can be found in the sections below describing the specific processing activities on our website.

Web Hosting

This website is hosted by an external service provider (IONOS SE). The hosting of this website takes place in Germany. Personal data collected on this website are stored on the host’s servers. This may include, in particular, IP addresses, contact requests, metadata and communication data, website access data and other data generated via a website.

We collect the listed data to ensure a smooth connection setup for the website and an error‑free technical provision of our services. Processing these data is strictly necessary in order to provide you with the website. The legal basis is our legitimate interest in the correct presentation and functionality of our website pursuant to Art. 6(1)(f) GDPR.

We have concluded a data‑processing agreement with the provider in accordance with Art. 28 GDPR, under which the provider is obliged to protect our customers’ data and not to pass them on to third parties.

Server Log Files

When you access our website, it is technically necessary that data are transmitted from your internet browser to our web server. The following data are recorded during an ongoing connection for communication between your browser and our web server:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status
  • Browser used and operating system
  • (Full) IP address of the requesting computer
  • Amount of data transferred

We collect these data to ensure a smooth connection setup for the website and an error‑free technical provision of our services. Processing these data is strictly necessary in order to provide you with the website. The log files serve to evaluate system security and stability as well as for administrative purposes. The legal basis is our legitimate interest in protecting and ensuring the functionality of our website pursuant to Art. 6(1)(f) GDPR.

For technical security reasons, in particular to defend against attacks on our web server, we store these data for a short period of time.

In anonymized form, the data may also be processed for statistical purposes. At no time are these data stored together with other personal data of the user, matched with other data stocks, or passed on to third parties.

Cookies

Our website uses so‑called “cookies”. Cookies are small text files that are stored on your end device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted when your visit ends. Persistent cookies remain stored on your end device until you delete them yourself or your browser deletes them automatically.

Cookies have various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., shopping cart function or language settings). Other cookies are used to analyze user behavior or to display advertising.

Data processing through the use of strictly necessary cookies is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR in the technically error‑free provision of our services. Details of the processing purposes and legitimate interests can be found in the explanations of the specific data processing operations.

Processing of personal data through the use of other cookies is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. If such cookies are used for analysis or optimization, we will inform you separately within this privacy policy and obtain your consent pursuant to Art. 6(1)(a) GDPR

You can configure your browser so that you:

  • are informed about the setting of cookies,
  • allow cookies only on a case‑by‑case basis,
  • exclude the acceptance of cookies for certain cases or generally,
  • activate automatic deletion of cookies when closing the browser.

Cookie settings can be managed using the following links for the respective browsers:

You can also manage cookies from many companies and functions used for advertising individually. Use the user tools available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a so‑called “Do Not Track” function. When enabled, the respective browser tells advertising networks, websites and applications that you do not want to be tracked for behavioral advertising and similar purposes.

You can find information and instructions on how to edit this function, depending on your browser provider, at the links below:

In addition, you can standardly prevent the loading of so‑called scripts. “NoScript” allows the execution of JavaScripts, Java and other plug‑ins only for trustworthy domains of your choice. Information and instructions on how to edit this function can be obtained from your browser provider (e.g., for Mozilla Firefox at https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that disabling cookies may limit the functionality of our website.

Changing Cookie Settings

You can withdraw or change your cookie settings at any time. To do so, open the cookie settings again via our integrated fingerprint icon, which you can find at any time on the lower right of the website.

External Links

Social networks (Facebook, Instagram, YouTube, LinkedIn) are integrated on our website only as links to the respective services. After clicking the integrated text/image link, you are redirected to the website of the respective provider. Only after the redirection are user information transmitted to the respective provider. For information on how these websites handle your personal data, please refer to the privacy policies of the providers you use.

Data Transfer and Recipients

We do not transfer your personal data to third parties unless:

  • we have explicitly pointed this out in the description of the respective data processing,
  • you have given your explicit consent pursuant to Art. 6(1) sentence 1(a) GDPR,
  • disclosure pursuant to Art. 6(1) sentence 1(f) GDPR is required for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
  • there is a legal obligation to disclose pursuant to Art. 6(1) sentence 1(c) GDPR, or
  • disclosure pursuant to Art. 6(1) sentence 1(b) GDPR is necessary for the performance of contractual relationships with you.

In addition, we use external service providers for the performance of our services. We select them carefully, commission them in writing, and, where necessary, conclude data‑processing agreements pursuant to Art. 28 GDPR. These providers are bound by our instructions and are monitored regularly. This includes, among others, service providers for hosting, sending emails, and maintenance and servicing of our IT systems. The service providers will not pass these data on to third parties.

External Services

Google Analytics

Our website uses Google Analytics, an internet analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so‑called “cookies”.

Google will use this information on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity and provide further services related to website and internet use to the website operator. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other Google data. Processing is carried out pursuant to Art. 6(1)(a) GDPR on the basis of the consent you have given.

We use Google Analytics only with IP anonymization activated. This means that your IP address is shortened by Google before further processing.

We have concluded a data‑processing agreement with the service provider under which it undertakes to protect our customers’ data and not to pass them on to third parties.

Since Google may transfer personal data to affiliated companies and sub‑processors in countries outside the EU and the EEA, additional safeguards are required to ensure GDPR‑level protection. An adequacy decision of the EU Commission pursuant to Art. 45(1) GDPR exists for the USA for companies certified under the EU‑U.S. Data Privacy Framework. Google LLC is certified under the EU‑U.S. Data Privacy Framework and is therefore obliged to comply with appropriate data‑protection standards. This can be verified at https://www.dataprivacyframework.gov/s/participant-search.

For possible transfers to other third countries outside the EU and the EEA for which no adequacy decision exists, we have additionally agreed standard contractual clauses pursuant to Art. 46(2)(c) GDPR with the provider. These oblige the recipient in the third country to process the data in line with the level of protection in Europe.

The terms of use of Google Analytics and information on data protection are available at:

http://www.google.com/analytics/terms/de.htmlhttps://www.google.de/intl/de/policies

The data are deleted as soon as they are no longer required for the purpose for which they were collected. Deletion of user‑ and event‑level data linked to cookies, user IDs (e.g., user ID) and advertising IDs (e.g., DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) takes place no later than 14 months after collection.

You can prevent cookies from being stored by adjusting your browser software settings. Please note that in this case you may not be able to use all functions of this website in full. You can also prevent Google from collecting and processing the data generated by the cookie and relating to your use of the website (including your IP address) by downloading and installing the browser plug‑in available at https://tools.google.com/dlpage/gaoptout?hl=de.

Google Tag Manager

This website uses Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This service allows website tags to be managed via an interface. Google Tag Manager only implements tags. This means: no cookies are used and only the user’s IP address is transmitted to Google to establish the connection. Google Tag Manager triggers other tags that may collect data. However, Google Tag Manager does not access these data. Deactivations made at the domain or cookie level remain in place for all tracking tags implemented via Google Tag Manager.

We use Google Tag Manager on the basis of your consent pursuant to Art. 6(1)(a) GDPR.

Since Google may transfer personal data to affiliated companies and sub‑processors in countries outside the EU and the EEA, additional safeguards are required to ensure GDPR‑level protection. An adequacy decision of the EU Commission pursuant to Art. 45(1) GDPR exists for the USA for companies certified under the EU‑U.S. Data Privacy Framework. Google LLC is certified under the EU‑U.S. Data Privacy Framework and is therefore obliged to comply with appropriate data‑protection standards. This can be verified at https://www.dataprivacyframework.gov/s/participant-search.

For possible transfers to other third countries outside the EU and the EEA for which no adequacy decision exists, we have additionally agreed standard contractual clauses pursuant to Art. 46(2)(c) GDPR with the provider. These oblige the recipient in the third country to process the data in line with the level of protection in Europe.

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you have given us your consent, this function allows advertising audiences created with Google Ads Remarketing to be linked with the cross‑device functions of Google Ads and Google Marketing Platform. The legal basis is your consent pursuant to Art. 6(1) sentence 1(a) GDPR and Section 25(1) TTDSG. In this way, interest‑based, personalized advertising messages that were adapted to you based on your previous usage and browsing behavior on one end device (e.g., mobile phone) can also be displayed on another of your end devices (e.g., tablet or PC).

If you have given the relevant consent, Google links your web and app browser history with your Google Account for this purpose. This allows the same personalized advertising messages to be displayed on every end device on which you sign in with your Google Account.

To support this function, Google Analytics collects authenticated IDs of users that are temporarily linked with our Google Analytics data to define and create audiences for cross‑device advertising.

You can permanently object to cross‑device remarketing/targeting by disabling personalized advertising in your Google Account, via this link: https://adssettings.google.com/.

Since Google may transfer personal data to affiliated companies and sub‑processors in countries outside the EU and the EEA, additional safeguards are required to ensure GDPR‑level protection. An adequacy decision of the EU Commission pursuant to Art. 45(1) GDPR exists for the USA for companies certified under the EU‑U.S. Data Privacy Framework. Google LLC is certified under the EU‑U.S. Data Privacy Framework and is therefore obliged to comply with appropriate data‑protection standards (see https://www.dataprivacyframework.gov/s/participant-search).

For possible transfers to other third countries outside the EU and the EEA for which no adequacy decision exists, we have additionally agreed standard contractual clauses pursuant to Art. 46(2)(c) GDPR with the provider. These oblige the recipient in the third country to process the data in line with the level of protection in Europe.

Further information and Google’s privacy policy can be found at: https://www.google.com/policies/technologies/ads/.

Google Maps

Our homepage uses the online map service Google Maps via an interface. This allows us to show interactive maps directly on the website and enables you to use the map function conveniently. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Using Google Maps requires your IP address to be stored.

Google uses cookies to collect information about user behavior. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Since Google may transfer personal data to affiliated companies and sub‑processors in countries outside the EU and the EEA, additional safeguards are required to ensure GDPR‑level protection. An adequacy decision of the EU Commission pursuant to Art. 45(1) GDPR exists for the USA for companies certified under the EU‑U.S. Data Privacy Framework. Google LLC is certified under the EU‑U.S. Data Privacy Framework and is therefore obliged to comply with appropriate data‑protection standards. This can be verified at https://www.dataprivacyframework.gov/s/participant-search.

For possible transfers to other third countries outside the EU and the EEA for which no adequacy decision exists, we have additionally agreed standard contractual clauses pursuant to Art. 46(2)(c) GDPR with the provider. These oblige the recipient in the third country to process the data in line with the level of protection in Europe.

Further information on the handling of user data can be found in Google’s privacy policy:
https://www.google.de/intl/de/policies/privacy/
Opt‑out: https://www.google.com/settings/ads/

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

reCAPTCHA is used to check whether data entered on our website (e.g., in a contact form) are made by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the visitor enters the website. For the analysis, reCAPTCHA evaluates various information, e.g.:

  • IP address
  • length of time the visitor stays on the website
  • mouse movements made by the user

The data collected during the analysis are forwarded to Google.

The reCAPTCHA analyses run fully in the background. Website visitors are not informed that an analysis takes place. Data processing is based on Art. 6(1)(f) GDPR. We have a legitimate interest in protecting our web offering from abusive automated spying and unwanted automated submissions (spam).

Since Google may transfer personal data to affiliated companies and sub‑processors in countries outside the EU and the EEA, additional safeguards are required to ensure GDPR‑level protection. An adequacy decision of the EU Commission pursuant to Art. 45(1) GDPR exists for the USA for companies certified under the EU‑U.S. Data Privacy Framework. Google LLC is certified under the EU‑U.S. Data Privacy Framework and is therefore obliged to comply with appropriate data‑protection standards. This can be verified at https://www.dataprivacyframework.gov/s/participant-search.

For possible transfers to other third countries outside the EU and the EEA for which no adequacy decision exists, we have additionally agreed standard contractual clauses pursuant to Art. 46(2)(c) GDPR with the provider. These oblige the recipient in the third country to process the data in line with the level of protection in Europe.

We do not store personal data as a result of using reCAPTCHA. In general, personal data are deleted or blocked as soon as the purpose for storage no longer applies.

Further information on Google reCAPTCHA and Google’s privacy policy can be found at:
https://www.google.com/intl/de/policies/privacy/
https://www.google.com/recaptcha/intro/v3beta.html

YouTube

We embed videos from “YouTube”, a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter “Google”), on our website. The legal basis for processing your personal data in this context is your consent pursuant to Art. 6(1)(a) GDPR.

When playback of embedded YouTube videos is started by your consent, a server request is made—usually to a Google server in the USA. This transmits which page you visited and the IP address of the browser of the visitor’s end device to Google, where it is stored.

In addition, if you consent, YouTube uses cookies to collect information about user behavior. According to YouTube, this serves, among other things, to record video statistics, improve user friendliness and prevent abusive practices. If you are logged in to Google, your data may be assigned to your account when you click on a video. If you do not want such assignment, please log out before activating the button. Google stores these data as usage profiles and uses them for advertising, market research and/or demand‑oriented design of its websites. Such evaluation takes place in particular (also for users who are not logged in) to provide demand‑oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.

Since Google may transfer personal data to affiliated companies and sub‑processors in countries outside the EU and the EEA, additional safeguards are required to ensure GDPR‑level protection. An adequacy decision of the EU Commission pursuant to Art. 45(1) GDPR exists for the USA for companies certified under the EU‑U.S. Data Privacy Framework. Google LLC is certified under the EU‑U.S. Data Privacy Framework and is therefore obliged to comply with appropriate data‑protection standards. This can be verified at https://www.dataprivacyframework.gov/s/participant-search.

For possible transfers to other third countries outside the EU and the EEA for which no adequacy decision exists, we have additionally agreed standard contractual clauses pursuant to Art. 46(2)(c) GDPR with the provider. These oblige the recipient in the third country to process the data in line with the level of protection in Europe.

Further information on data protection and Google’s use of data can be found at: https://policies.google.com/privacy?hl=de&gl=de

YouTube (No Cookies)

We embed videos from “YouTube”, a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter “Google”), on our website. The legal basis for processing your personal data in this context is your consent pursuant to Art. 6(1)(a) GDPR.

When playback of embedded YouTube videos is started by your consent, a server request is made—usually to a Google server in the USA. This transmits which page you visited and the IP address of the browser of the visitor’s end device to Google, where it is stored.

If you are logged in to Google, your data may be assigned to your account when you click on a video. If you do not want such assignment, please log out before activating the button. Google stores these data as usage profiles and uses them for advertising, market research and/or demand‑oriented design of its websites. You have the right to object to the creation of these user profiles. Please contact Google directly for this purpose.

Since Google may transfer personal data to affiliated companies and sub‑processors in countries outside the EU and the EEA, additional safeguards are required to ensure GDPR‑level protection. An adequacy decision of the EU Commission pursuant to Art. 45(1) GDPR exists for the USA for companies certified under the EU‑U.S. Data Privacy Framework. Google LLC is certified under the EU‑U.S. Data Privacy Framework and is therefore obliged to comply with appropriate data‑protection standards. This can be verified at https://www.dataprivacyframework.gov/s/participant-search.

For possible transfers to other third countries outside the EU and the EEA for which no adequacy decision exists, we have additionally agreed standard contractual clauses pursuant to Art. 46(2)(c) GDPR with the provider. These oblige the recipient in the third country to process the data in line with the level of protection in Europe.

Further information on data protection and Google’s use of data can be found at: https://policies.google.com/privacy?hl=de&gl=de

Meta Pixel

We use the “Meta Pixel”, a service of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Meta/Facebook”), on our website.

If you have given us your consent pursuant to Art. 6(1)(a) GDPR, we use Meta Pixel for marketing and optimization purposes, in particular to show you relevant and interesting ads on Facebook and to improve our offering, make it more interesting for you as a user and avoid annoying ads.

Meta Pixel enables Meta to display our ads on Facebook (“Facebook Ads”) only to Facebook users who have visited our website, especially those who have shown interest in our online offering. It also enables us to check whether a user was redirected to our website after clicking on our Facebook Ads. Meta Pixel uses cookies among other things, i.e., small text files stored locally in your browser’s cache on your end device. If you are logged in to Facebook, the visit to our online offering is noted in your Facebook account. The data collected about you are anonymous to us and do not allow any conclusions about your identity. However, Facebook may link these data to your Facebook account. If you have a Facebook account and are registered, Facebook can assign the visit to your user account.

Since Meta may transfer personal data to affiliated companies and sub‑processors in countries outside the EU and the EEA, additional safeguards are required to ensure GDPR‑level protection. An adequacy decision of the EU Commission pursuant to Art. 45(1) GDPR exists for the USA for companies certified under the EU‑U.S. Data Privacy Framework. Meta Platforms, Inc. is certified under the EU‑U.S. Data Privacy Framework and is therefore obliged to comply with appropriate data‑protection standards. This can be verified at https://www.dataprivacyframework.gov/s/participant-search.

For possible transfers to other third countries outside the EU and the EEA for which no adequacy decision exists, we have additionally agreed standard contractual clauses pursuant to Art. 46(2)(c) GDPR with the provider. These oblige the recipient in the third country to process the data in line with the level of protection in Europe.

Further information from Facebook on data protection can be found at: https://www.facebook.com/about/privacy.
Information on Meta Pixel can be found at: https://www.facebook.com/business/help/651294705016616.
Settings for what kinds of ads are shown to you on Facebook are available at: https://www.facebook.com/settings?tab=ads.

Please note that this setting is deleted if you delete your cookies. You can also deactivate cookies used for reach measurement and advertising purposes at:
http://optout.networkadvertising.org/
http://www.aboutads.info/choices
http://www.youronlinechoices.com/uk/your-ad-choices/
Please note that these settings are also deleted if you delete your cookies.

Contact Form and Contact by E‑mail

If you send us inquiries via contact form or e‑mail, we store the information you provide in the inquiry form or your e‑mail, including the personal data you provide there, to process your request and in case of follow‑up questions. Providing your first and last name and an e‑mail address is required for contacting you; providing a message is voluntary. We never pass these data on without your consent. The legal basis is our legitimate interest in answering your request pursuant to Art. 6(1)(f) GDPR and, if applicable, Art. 6(1)(b) GDPR if your inquiry aims at concluding a contract. We delete your data after final processing of your inquiry unless statutory retention obligations prevent this. You may object to the processing of your personal data at any time under Art. 6(1)(f) GDPR.

Dealer Search

Within our inquiry process we process personal data to provide you with personalized results on our website. For this purpose, we collect your postal code and e‑mail address via a form on our website.

After submitting the form, you will receive an e‑mail with an individual link containing a hash code. This link leads to a results page generated for you. Your e‑mail address is pseudonymized and stored in our database to technically control the number of inquiries per user and prevent misuse. These data do not allow any inference about your identity.

For recognition, we additionally store a technical token locally in your browser (local storage). When you revisit via the same link, this token makes it unnecessary to enter your e‑mail address again. The token does not contain directly identifiable information and serves exclusively functional purposes in connection with displaying your individualized results. The token is automatically deleted at 24:00 of the respective day.

We do not pass your data on to third parties or recipients in third countries.

We process your data on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, as storing data in the browser and recognizing you via technical means requires consent.

You may withdraw your consent at any time with effect for the future, for example by an informal message to: datenschutzbeauftragter@datenschutzexperte.de.

Newsletter

If you want to receive the newsletter offered on the website with regular information on our offers and products, we require your e‑mail address as mandatory information.

You may provide additional data so that we can address you personally within the newsletter and/or identify you if you exercise your rights as a data subject.

We use the double‑opt‑in procedure to send the newsletter. This means that we will send you our newsletter by e‑mail only after you have expressly confirmed that you consent to receiving newsletters. First, you receive an e‑mail with a link through which you confirm that, as the owner of the respective e‑mail address, you want to receive newsletters in the future. By confirming, you give your consent pursuant to Art. 6(1)(a) GDPR for us to use your personal data for the desired newsletter dispatch.

When you subscribe to the newsletter, we store the e‑mail address required for sending, the IP address from which you subscribed, and the date and time of subscription and confirmation in order to be able to trace possible misuse later. The legal basis is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

You can unsubscribe from the newsletter at any time via the link included in every newsletter or by e‑mail to the controller named above. After unsubscribing, we delete your e‑mail address from our newsletter distribution list without delay unless you have expressly consented to further use of the collected data or further processing is otherwise legally permitted.

Submission of Applications

If you apply via our contact form or by e‑mail, we collect personal data. This includes in particular your contact details (such as first and last name, telephone number and e‑mail address) and other data you provide about your career (e.g., CV, qualifications, degrees and work experience) and your person (e.g., cover letter, personal interests). This may include special categories of personal data (e.g., information about a severe disability).

Your personal data are generally collected directly from you as part of the application process and are encrypted during electronic transmission. The primary legal basis is Section 26(1) BDSG. In addition, consents pursuant to Art. 6(1)(a) GDPR in conjunction with Section 26(2) BDSG may be used as a legal basis. If processing is based on consent, you may withdraw this consent at any time with effect for the future.

Within our company, only those persons and departments (e.g., HR) have access to your personal data that need them to carry out the application process or to fulfill our legal obligations. Your application may be forwarded to the responsible persons for review. We do not pass your personal data on to third parties without authorization.

Your application data for a specific job posting are stored and processed during the ongoing application process. After the application process ends (e.g., acceptance or rejection), the application including all personal data is deleted from the system no later than six months after the end of the process. Data of selected applicants are stored securely for up to 1 year if the applicants have given their consent pursuant to Art. 6(1) sentence 1(a) GDPR in conjunction with Section 26(2) BDSG. You may withdraw your consent at any time with effect for the future by sending an informal e‑mail to the controller’s contact details listed above. In the event of employment, your application documents are transferred to your personnel file.

Data Security

Unless this privacy policy specifies a more specific storage period, we keep your personal data until the purpose for processing no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, we delete your data unless other legally relevant reasons for retention apply (e.g., tax or commercial retention periods). In the latter case, deletion takes place after these reasons cease to apply.

Storage Period for Personal Data

Unless this privacy policy specifies a more specific storage period, we keep your personal data until the purpose for processing no longer applies. If you assert a legitimate request for deletion or withdraw your consent to data processing, we delete your data unless other legally relevant reasons for retention apply (e.g., tax or commercial retention periods). In the latter case, deletion takes place after these reasons cease to apply.

Your Rights

Below you will find information on the rights granted to you as a data subject under applicable data‑protection law with regard to the processing of your personal data by the controller:

  • Right of access pursuant to Art. 15 GDPR to obtain information about your personal data processed by us. In particular, you may obtain information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if not collected from you, and the existence of automated decision‑making including profiling, and, where applicable, meaningful information about its details.
  • Right to rectification pursuant to Art. 16 GDPR to have inaccurate personal data corrected or completed without delay.
  • Right to erasure pursuant to Art. 17 GDPR to have your personal data erased, unless processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
  • Right to restriction of processing pursuant to Art. 18 GDPR, where you contest the accuracy of the data, processing is unlawful but you oppose erasure, we no longer need the data but you need them for legal claims, or you have objected pursuant to Art. 21 GDPR.
  • Right to data portability pursuant to Art. 20 GDPR to receive your personal data in a structured, commonly used and machine‑readable format or to request transfer to another controller.
  • Right to lodge a complaint pursuant to Art. 77 GDPR with a supervisory authority. As a rule, you can contact the supervisory authority of the federal state of our registered office or, if applicable, of your habitual residence or workplace.
  • Right to withdraw consent pursuant to Art. 7(3) GDPR. You may withdraw consent at any time with effect for the future. In the event of withdrawal, we delete the affected data without delay unless further processing can be based on another legal basis. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before withdrawal.

Right to Object

Where we process your personal data on the basis of legitimate interests pursuant to Art. 6(1) sentence 1(f) GDPR, you have the right under Art. 21 GDPR to object to such processing for reasons arising from your particular situation. Where the objection is directed against processing for direct marketing purposes, you have a general right to object without the need to state a particular situation.

To exercise your right of withdrawal or objection, simply send an e‑mail to datenschutzbeauftragter@datenschutzexperte.de.

Statutory Obligations

Providing personal data for deciding on conclusion of a contract, performance of a contract or pre‑contractual measures is voluntary. We can make decisions within the scope of contractual measures only if you provide personal data that are necessary for conclusion and performance of the contract or pre‑contractual measures.

Automated Decision‑Making

We do not use automated decision‑making or profiling pursuant to Art. 22 GDPR.

Right to Amend

We reserve the right to adapt or update this privacy policy where necessary in compliance with applicable data‑protection regulations. This allows us to adapt it to current legal requirements and reflect changes to our services, e.g., when introducing new services. The current version applies to your visit.

Status of this Privacy Policy: 28 November 2025