Privacy Statement

Visitors of our website can find further information on privacy regulations here.

Data protection declaration in accordance with the GDPR  

Area of applicability and name and address of the controller  

The controller in accordance with the GDPR and other national data protection laws of the Member States, as well as other provisions under data protection legislation is:  

DAS Environmental Expert GmbH 
Goppelner Straße 44 
01219 Dresden  

Telephone:        


Fax:               
Email:             

This data protection declaration provides the user (hereinafter “you” or “user”) with information concerning the type, scope and purpose of the gathering and use of personal data by the controller, DAS Environmental Expert GmbH (hereinafter also referred to as “controller”) on this Internet site and also explains your rights under the data protection laws.  

Contact details of the data protection officer 

The data protection officer of the controller can be contacted as follows:  

Data protection officer
DAS Environmental Expert GmbH 
GoppelnerStraße 44 
01219 Dresden  

Telephone:         +49 351 40494–000 
Email:              

Should you have any queries and suggestions concerning data protection, you can get in touch with our data protection officer directly.  

General information concerning data protection  

1. Links to other websites   

By means of the judgement dates 12 September 1999 — 312 0 85/89 (liability for links), Hamburg Regional Court (Landgericht Hamburg) decided that when providing a link, a body may incur responsibility for the contents of the linked site. According to the Regional Court, this can only be prevented by expressly distancing oneself from these contents.  

Our online service contains links to websites of other providers. We have no influence over compliance with the applicable data protection provisions on the part of these providers. We are not responsible for the data protection precautions or content of other websites. We are hereby expressly distancing ourselves from all content of linked sites and are not claiming such content to be our own under any circumstances. Therefore, we would recommend that you also consult the respective data protection declarations of other websites.  

2. Objection to the use of contact data 

The use of the contact data published in accordance with the legal notice obligation to send advertising and information materials which have not been expressly requested is hereby being expressly objected to. We expressly reserve the right to take legal action in case of the unsolicited sending of advertising information, for example by means of spam emails.  

3. Amendments to the data protection declaration 

The date of the data protection declaration is stated below. We reserve the right to alter this data protection declaration at any time with effect for the future. A current version can be obtained directly via the online service. Please consult our online service regularly and familiarise yourself with the applicable data protection declaration.  

As of:  January 2019

Provision of the website and creation of logfiles 

1. Description and scope of the data processing 

Each time our Internet site is accessed, our system automatically records data and information from the computer system of the relevant device. During this process, the following data is gathered:  

  • Information concerning the browser type and version used
  • The operating system of the user
  • The Internet service provider of the user
  • The IP address of the user
  • Date and time of the access
  • Websites from which the system of the user accessed across our Internet site (referrer URL)
  • Websites which are accessed by the system of the user via our website

The data is also saved in the logfiles of our system. This data is not saved together with other personal data of the user.  

2. Legal basis for the data processing 

The legal basis for the temporary saving of the data and logfiles is Article 6 Paragraph 1 Letter f) GDPR.  

3. Purpose of the data processing 

The temporary saving of the IP address by the system is necessary in order to deliver the website to the computer of the user. For this purpose, the IP address of the user must remain saved for the duration of the session.  

The saving in logfiles takes place in order to ensure the functionality of the website. In addition, the data helps us optimise the website and ensure the security of our IT systems. During this process, the data is not analysed for marketing purposes.  

These purposes also represent our legitimate interest in the data processing in accordance with Article 6 Paragraph 1 Letter f) GDPR.  

4. Duration of the saving  

The data is deleted, once it is no longer necessary in order to attain the purpose for which it was gathered. In case the data is recorded in order to provide the website, this is the case once the respective session has come to an end.  

In case of the saving of data in logfiles, this is the case after a maximum of seven days. It is possible for the data to be saved beyond this time. In such a case, the IP addresses of the user will be deleted or disguised, so that it is no longer possible to trace these back to the accessing client.  

5. Right of objection and correction  

The recording of the data in order to provide the website and the saving of the data in logfiles is absolutely necessary for the operation of the Internet site. As a result, the user does not have a right of objection.  

Use of cookies 

1. Description and scope of the data processing  

Our website uses cookies. Cookies are text files which are saved in the Internet browser of the user. These are also saved on the computer system of the user by the Internet browser. Should a user access a website, a cookie can be saved in the operating system of the user. This cookie contains a character based letter sequence, which enables the browser to be clearly identified, next time the website is accessed.  

We use cookies in order to make our website more user friendly. Certain elements of our Internet site require the accessing browser to be identified also following a change of site.  

During this process, the following data is saved in the cookies and transferred:  

  • Language settings  
  • Log in information (identification as to whether login takes place as an administrator of the website)  
  • Case studies — most recently visited site 
     

An overview of all of our own cookies which are used on our website, as well as of cookies of third party providers can be found in our cookie declaration.  

Legal basis for the data processing  

The legal basis for the processing of personal data using cookies is Article 6 Paragraph 1 Letter f) and Article 6 Paragraph 1 Letter a) GDPR.  

Purpose of the data processing  

The purpose of the use of technically necessary cookies is to simplify the use of websites for the users. Certain functions of our Internet site cannot be provided without the use of cookies. For these, it is necessary for the browser to be able to be recognised once again after a change of site.  

We require cookies for the following applications:  

The user data which is gathered by means of technically necessary cookies is not used to create user profiles.  

These purposes also represent our legitimate interest in the processing of personal data in accordance with Article 6 Paragraph 1 Letter f) GDPR.  

Cookies which are not technically necessary are used in accordance with your consent to the processing of personal data in accordance with Article 6 Paragraph 1 Letter a) GDPR.  

Duration of the saving  

Cookies are saved on the computer and sent to our site from there. Your selection and consent or objection to the use of cookies is saved for one year using Cookiebot 

Right of objection and correction  

Therefore, you as a user also have full control over the use of cookies. By altering the settings in your Internet browser, you can de-activate or restrict the transfer of cookies. Cookies which have already been saved can be deleted at any time. This can also take place in automated form. Should cookies be de-activated for our website, it is possible that it will no longer be possible to fully use all of the functions of the website.  

 

Contact options via this Internet site 
 

1. Description and scope of the data processing  

Our Internet site contains a contact form, which can be used in order to get in touch with us electronically. Should a user make use of this option, the data provided in the entry mask will be transferred to us. This data includes:  

  • First name*  
  • Surname*  
  • Company*  
  • Country*  
  • Email address*  
  • Telephone number  
  • Subject*  
  • Description* 
     

At the time of sending the message, the following data is also saved:  

  • The IP address of the user  
  • Date and time of contact initiation / registration  
  • Websites from which the system of the user came across our Internet site (most recently visited site)  
  • Websites which are accessed by the system of the user via our website 
     

Alternatively, it is possible to get in touch with us via the provided email address. In such a case, the personal data of the user which is transmitted with the email will be saved.   

The data is not passed on to third parties during this process. The data is only used in order to process the conversation.  

2. Legal basis for the data processing  

The legal basis for the processing of the data is Article 6 Paragraph 1 Letter f) GDPR. Should the purpose of the contact be the conclusion of a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR.  

3. Purpose of the data processing  

The processing of the personal data from the entry mask and the data transferred with the email serves the sole purpose of processing by us of the contact initiation. In addition, this serves the purpose of assigning various enquiries and emails to a person within our company and, if applicable, to a subject matter, in order to enable efficient communication, also for purposes connected to direct advertising for our products (Article 6 Paragraph 1 Letter f) and EC 47). This also represents the necessary legitimate interest in the processing of the data.  

The purpose of the other personal data processed during the sending process is to prevent misuse of the contact form and to ensure the security of our IT systems.  

4. Duration of the saving 

The data is deleted, once it is no longer necessary in order to attain the purpose for which it was gathered. For the personal data from the entry form and that which is sent by email, this is the case once the respective conversation with the user has come to an end. The conversation is deemed to have come to a end once it is clear from the circumstances that the matter has been fully and finally clarified. Should we process data in order to ensure efficient communication, also for purposes connected to direct advertising for our products, we save this for a period of 6 months following the end of the final communication.   

Should the purpose of the contact initiation be the conclusion of a contract, the data will be saved for as long as is necessary in order to conclude and perform the contract or to determine the final completion of the contractual negotiations.   

Regardless of the above, it is possible to save the data for longer in accordance with Article 6 Paragraph 1 Sentence 1 Letter c) GDPR due to retention and documentation obligations under commercial law and tax laws (German Commercial Code, German Criminal Code or German Tax Code — HGB, StGB or AO), should you have issued your consent to longer saving in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR or in accordance with Article 17 Paragraph 3 Letter e) GDPR, should this be necessary in order to assert, exercise or defend legal claims. In individual cases, it is necessary to save the data for longer for the provision of proof within the framework of the statutory limitation period regulations. In accordance with §§ 195 ff of the German Civil Code (BGB), these limitation periods can last up to 30 years, whereby the regular limitation period is 3 years.  

The additional personal data which is gathered during the sending process is deleted after a period of seven days at the latest. 

5. Right of objection and correction  

At all times, the user has the option of revoking his or her consent to the processing of the personal data or to object to the processing, should this relate to Article 6 Paragraph 1 Letter f) GDPR. In such a case, the conversation cannot be continued.  

It is possible to issue the revocation or raise the objection informally. Sending us an email with the subject “revocation or objection to contact form / email data” to makes processing easier for us.   

All personal data which was saved in connection with the contact initiation will be deleted in such a case, unless otherwise prescribed by the retention obligations and rights referred to above.  

Should the processing be based on Article 6 Paragraph 1 Letter b) GDPR (conclusion of a contract), deletion is not possible.   

Applicant portal  

It is possible to apply for jobs at our company directly via our online service. More detailed information concerning the processing and use of your personal data in case of an application can be found in the reference to the data protection information for applicants in the application form for the respective position.   

Plugins and other services 

Google reCAPTCHA 

On this website we use the reCAPTCHA function of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). This function is primarily used to distinguish whether an entry is made by a natural person or is abused by machine and automated processing. The service also includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google; a transmission of personal data to Google servers in the USA cannot be ruled out. According to the assessment of the European Court of Justice, the USA offers an insufficient level of data protection according to EU standards.
The legal basis for the processing of personal data by us within the scope of the reCAPTCH service and the data transfer taking place in this context to the USA, which is an insecure third country according to the assessment of the ECJ, is the consent of the user, Art. 6 (1) lit. a DS-GVO.

As part of the consent to contact data processing, you will also be asked for consent to data processing and data transfer to the USA as part of the use of reCAPTCHA. In this context, a reference to this privacy policy is also made.

Unfortunately, it is not possible to use our contact form without consent to data processing by and transmission to Google within the framework of the reCAPTCHA service, as we place great importance on determining the individual intent of actions on the Internet and the prevention of misuse and spam.

Further information on Google reCAPTCHA as well as Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

Google Tag Manager  

This website uses Google Tag Manager. Google Tag Manager is a domain that does not set cookies and does not collect personal data.
It is used to integrate, implement and manage “web-site tags”, i.e. keywords, in HTML elements. Google Tag Manager allows us to automatically track which button, link or personalized image you have actively clicked on and can then record which content of our website is of particular interest to you.
The tool also triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have made a deactivation at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.
You have given your consent to this within the meaning of Art. 6 (1) lit. a DS-GVO via our opt-in cookie banner.

YouTube (video)  

In individual cases, YouTube videos are integrated on our website to make our website attractive for our users and to improve its content.
Youtube is a service of YouTube, LLC, a subsidiary of Google Inc, USA.
On this website, the extended data protection mode has been activated for embedding Youtube videos, so that no information about visitors to our website is transmitted or stored if they do not view the video. No cookies are set on your terminal device when viewing the video either.
As part of the Youtube service, when you view a video, information about your use of this website is transmitted to a server of Youtube and also shared with the Google advertising network Double-click. In this way, the following data may be transmitted (regardless of whether Youtube provides a user account through which you are logged in):

  • Browser type/version,
  • operating system used,
  • Host name of the accessing computer (IP address),
  • Time of the server request,
  • search terms entered
  • Frequency of page views
  • Viewed video

The transmission to Youtube and Doubleclick takes place on servers of Google LLC. in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). According to the European Court of Justice, the USA offers an insufficient level of data protection according to EU standards.
If you are logged in to Youtube, your data will be directly assigned to your account. If you do not want the assignment with your profile at Youtube, you must log out before activating the button. Youtube stores your data (even for users who are not logged in) as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such evaluation is carried out in particular (even for non-logged-in users) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Youtube to exercise this right.

When you click on the video thumbnail, you will be asked to give your consent to the data processing described above and to data transfer to the USA. The corresponding data processing is based on Art. 6 para. 1 lit. a) DS-GVO, the transfer to servers in the USA is based on your consent according to Art. 49 para. 1 lit. a DS-GVO. In this context, a reference to this privacy policy is also made

For more information on the purpose and scope of data collection and its processing, please refer to Google’s privacy policy (Youtube, as part of Google, does not have its own). There you will also receive further information on your rights in this regard and setting options for protecting your privacy.

Google Terms of Use: https://policies.google.com/terms?hl=de&gl=de
Privacy policy Google (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/
Terms of use Youtube: https://www.youtube.com/static?gl=DE&template=terms&hl=de

Cookiebot 

For the purpose of obtaining consent pursuant to Art. 6 (1) lit. a DS-GVO, we use the self-service cloud service Cookiebot for cookie consent, cookie monitoring and cookie control of website users in accordance with the EU ePrivacy Directive 2009/136/EC, as well as the EU General Data Protection Regulation. When accessing our website, the user is informed about the use of Cookiebot and the setting of cookies for verification purposes in this context and his consent is obtained for this. In this context, a reference to this data protection declaration is also made.

Cookiebot is a registered trademark of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (“Cybot”). Cybot is committed to complying with EU data protection requirements. You can view Cookiebot’s privacy policy here: https://www.cookiebot.com/de/privacy-policy/.
As part of the Cookiebot service, Cybot sets cookies on the requesting computer, as described below, so that the website can automatically read and take into account the user’s given consent for up to 12 months in all subsequent page requests and future user sessions. The information generated by the cookie about your use of this website is usually transmitted to and stored on a Cybot server in Denmark. In this way, the following data may be transmitted:

  • The user’s IP address in anonymized form (the last 3 characters are replaced by zeros “0”).
    the date and time of consent
    the user agent of the user’s browser
    the URL from which the consent was given
    an anonymous, random and encrypted key value
    the status of the user’s consent as proof of consent.

The key value is used as proof of the user’s consent. In addition, it is used to prove the unmodified status of consent, comparing the one stored in the user’s browser with the unmodified, original consent transmitted to Cybot.
The key value and consent status are also stored in the “first party” cookie “CookieConsent” in the user’s browser, so that for up to 12 months the website can automatically read and take into account the consent given by the user in all subsequent page views and future user sessions.
The aforementioned data processing by Cookiebot is technically necessary to achieve comprehensive functionality of our website, as it ensures that necessary consents are obtained for cookies and other tools, such as tracking or YouTube. The legal basis for the data processing is Art. 6 para. 1 lit. f DSGVO as well as § 25 para. 2 no. 2 TTDSG. The legitimate interest is the error-free functioning of our website, including the functions for which we require your consent.

The permanent cookie called “CookieConsent” by Cookiebot is automatically deleted after 12 months, unless you delete it beforehand via the browser setting. To change or revoke the cookie consent, the user can delete the already stored cookie “CookieConsent” or all cookies of the relevant domain in the settings of the Internet browser at any time.

Alternatively, you can change or revoke your consent at any time from the cookie declaration on our website. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

Web analysis services 

Google Analytics  

1. Description and scope of the data processing 

When visiting our website, the user is informed of the use of Google Analytics and the setting of cookies for analysis purposes in this context and his or her consent is obtained. During this process, reference is also made to this data protection declaration.  

Google Analytics is a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). You can read Google’s privacy policy here: https://www.google.com/intl/de_at/cloud/security/gdpr/. We have concluded a data processing agreement with Google in accordance with Art. 28 GDPR, i.e. Google only processes data transmitted by us on our instructions.

As part of the Google Analytics service, cookies are set by Google on the requesting computer, as described below. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The USA do not have an adequate level of data protection within the meaning of Article 45 subsection (2) GDPR, the transfer of data there is associated with corresponding risks, e.g. surreptitious data access by US authorities. When calling up our website, you also consented to the processing of your data in the USA, but you can revoke this consent at any time together with the consent to data processing and the setting of cookies by Google Analytics (see below). In this way, the following data may be transmitted to the USA:

  • Browser type and version,
  • operating system used,
  • Host name of the accessing computer (IP address),
  • Time of the server request,
  • Entered search terms
  • Frequency of page views
  • Use of website functions
  • Areas where the user clicks the most (heatmap)
  • Session duration (time spent on a website, after 20 minutes it ends, as it is assumed that the user has not closed the page).
  • Bounce rate (If someone comes to a page and leaves without interacting, this counts as a bounce).
  • View of contact details
  • View of ratings
  • Playing of media
  • Page update
  • Adding to favorites
  • Referrer URL (the previously visited page) for campaign tracking — analysis of the user’s origin (e.g. email, Google search)
  • Abbreviated IP addresses of the accessing computer 

IP anonymization has been activated on this website so that the IP address of users is shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Therefore, an assignment of the data to the calling user is no longer possible. The data, in particular the IP address transmitted by your browser within the scope of Google Analytics, will not be merged and stored together with other personal data of the users or other data of Google.
You may refuse the use of cookies by selecting the appropriate settings on your browser. However please note that if you do this you may not be able to use the full functionality of this website.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser add-on, especially with browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking on this link. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you may have to set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=de).

2. Legal basis for the data processing 

The legal basis for the processing of personal data when using cookies for analysis purposes is Article 6 Paragraph 1 Letter a) GDPR, should the consent of the user to such be present.  

3. Purpose of the data processing 

The purpose of the use of the analysis cookies is to make the design of our website more attractive for our users and to improve its contents. By means of the analysis cookies, we are informed as to how the website is being used and this enables us to constantly optimise our service.  

On behalf of the operator of this website, Google will compile reports concerning the website activities and provide additional services for the website operator connected to the use of the website and the use of the Internet.  

4. Duration of the saving 

Cookies are saved on the computer and sent to our site from there. Therefore, you as a user also have full control over the use of cookies. By altering the settings in your Internet browser, you can de-activate or restrict the transfer of cookies. Cookies which have already been saved can be deleted at any time. This can also take place in automated form. Should cookies be de-activated for our website, it is possible that it will no longer be possible to fully use all of the functions of the website.  

The data transferred from this website to Google will be deleted from the servers of Google after 14 months.  

5. Right of objection and correction 

At all times, the user has the option of revoking his or her consent to the processing of the personal data.  

The revocation can take place informally. You can make the speedy processing of a revocation easier for us by clicking on the opt out link above on each end device on which you do not wish the personal data to be processed by Google Analytics. This then sets an opt out cookie on your end device. A simple email to us is not sufficient in order to implement a revocation, as we do not know which end device you are using.  

All personal data which was saved when using Google Analytics will be deleted in such a case.  

Our listings in social networks 

We are listed on various so-called social media platforms. We have a listing with the following providers:

 

We use the technical platforms and services of the respective providers for these information services. We are not the original provider of these platforms. The above mentioned providers — except for Facebook or LinkedIn, with whom we are jointly responsible for data processing as part of the web analytics tool Page-Insights — are solely responsible for processing your personal data. 

We would like to point out that you are solely responsible for using our pages on the above mentioned social media platforms and the functions offered there. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our pages, the providers of the social media platforms also collect your IP address and other information that is present on your device in the form of cookies. This information is used to create user profiles based on your preferences and interests and to show you customised promotions (inside and outside the social media platforms), as well as to provide us, as the operator of the profile page, statistical information about your interaction with us. 

As operators of these company pages, we only use the services of the providers within the scope of the options offered by the respective provider and only process the data about your use of our respective service which you provide to us and which require interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with our general data processing guidelines, which we describe in this privacy policy. We can see the statistics using the Page-Insights function on Facebook or LinkedIn, which is available to us in our respective profile on the Facebook or LinkedIn platform. The legal basis for processing your data on the above mentioned social media platforms is Art. 6 para. 1 p. 1 lit. f GDPR. 

The platform operators are responsible for processing the data and usage content collected about you in this context for their own purposes. Service providers based in the EU (such as XING) are subject to the same data privacy requirements as we are. Moreover, according to their own statements, all other service providers comply with an adequate level of data privacy corresponding to the former EU-US Privacy Shield. We do not know and have no influence on how the respective providers use the data about your visit to our account and interaction with our posts for their own purposes , how long this data is stored and whether data is passed on to third parties and transferred to countries outside the European Union. Data processing may also differ depending on whether you are registered and logged in to the respective social network or visit the page as a non-registered and/or guest user. When you access a post or the account, the IP address of your device is sent to the social media platform provider. If you are currently logged in as a user, a cookie on your device can be used to track your movements around the network. Using buttons embedded in websites, which we do not currently use on our website, it is also possible for the platforms to record your visits to these websites and map them to your respective profile. This data can be used to offer content or customised promotions to you. If you wish to avoid this, you should log out and/or de-activate the “remain logged in” function, delete the cookies on your device, and restart your browser. 

Even as part of our agreement with Facebook or LinkedIn on jointly processing your personal data, we do not have access to the usage data that Facebook or LinkedIn collects to prepare the statistics. Facebook and LinkedIn are committed to take primary responsibility under the DS-GVO for processing this data, to comply with all obligations under the DS-GVO in respect of this data and to provide the important aspects of this commitment to the concerned persons. For more information about the contents of our joint responsibility agreement with Meta Platforms Ireland Ltd or LinkedIn Ireland Unlimited Company, please visit https://www.facebook.com/legal/terms/page_controller_addendum or https://de.linkedin.com/legal/l/dpa.

We use the technical platforms of the above-mentioned service providers for these information services in order to provide information about our company, our products and services, to share our job postings and to get in touch with interested parties. These purposes also represent our legitimate interest in the data processing in accordance with Article 6 Paragraph 1 Letter f) GDPR.

The personal data which you have provided to us yourself, from your use of our company page or which you actively disclose to us via a personal message on our profile page and which we save in order to respond to your query is deleted, once it is no longer necessary for achieving the purpose for which it was gathered. All public posts which you make on one of our social media pages remain in the timeline without any time limit, unless we delete these due to updates of the underlying topic, a legal infringement, a breach of our guidelines or you delete the post yourself.
We have no control over the duration for which your data is retained by the respective platform operator. Therefore, the data protection provisions of the respective operator apply additionally in this respect. In its data protection guidelines, Facebook states that the data is deleted, once it is no longer necessary to attain the purpose for which it was gathered or if you delete your profile.

To exercise your data subject rights, you can contact both us or the respective provider of the social media platform. If one party is not responsible for responding or needs to obtain the information from the other party, we or the provider will then forward your request to the relevant partner. Please contact the operator of the social media platform directly for queries about the profiling, processing of your data when using the website. If you have any questions about how your interaction with us is processed on our page, please write to the contact details provided above.

We enclose the privacy policy of the respective platforms below. You will also find information on contact options as well as on the setting options for promotions.

Facebook: https://www.facebook.com/about/privacy (English) https://de-de.facebook.com/about/privacy (German)
Instagram: https://www.facebook.com/about/privacy (English) https://de-de.facebook.com/about/privacy (German)
LinkedIn: https://www.linkedin.com/legal/privacy-policy
XING: https://privacy.xing.com/de/datenschutzerklaerung
Twitter: https://twitter.com/de/privacy
Youtube: https://policies.google.com/privacy

Rights of the data subject 

Should personal data relating to you be processed, you are a data subject as defined under the GDPR and you are entitled to the following rights vis a vis the controller:   

Right of information

You can request confirmation from the controller as to whether we are processing personal data relating to you.  

Should such processing be taking place, you can request the following information from the controller:  

  1. The purposes for which the personal data is being processed;  
  2. The categories of personal data which are being processed;  
  3. The recipients or categories of recipients to whom personal data relating to you has been disclosed or is being disclosed;  
  4. The planned duration of the saving of the personal data relating to you, or should it not be possible to provide concrete information in this respect, the criteria for determining the duration of the saving;  
  5. The existence of a right of rectification or erasure of the personal data relating to you, the right to have the processing restricted by the controller or a right to object to this processing;  
  6. The existence of a right to complain to a supervisory authority;  
  7. All available information concerning the origin of the data, should the personal data not be gathered from the data subject;  
  8. The existence of automated decision making, including profiling in accordance with Article 22 Paragraphs 1 and 4 GDPR and, at least in these cases, detailed information concerning the involved logic and the extent and intended effects of such processing for the data subject. 
     

You have the right to request information as to whether the personal data relating to you is being transferred to a third country or international organisation. In such a case, you can request to be informed of the suitable guarantees in accordance with Article 46 GDPR in connection with the transfer.  

Right of rectification

You have the right of rectification and/or completion vis a vis the controller, should the processed personal data which relates to you be incorrect or incomplete. The controller must carry out the correction immediately.  

Right to have the processing restricted

Subject to the requirements below, you can request that the processing of the personal data relating to you be restricted:  

  1. Should you dispute the correctness of the personal data relating to you for such a period of time which enables the controller to verify the correctness of the personal data;  
  2. Should the processing be unlawful and you reject the erasure of the personal data and instead request that the use of the personal data be restricted; 
  3. Should the controller no longer require the personal data for the purposes of the processing, but you require this in order to assert, exercise or defend legal claims;  
  4. Or should you have raised an objection against the processing in accordance with Article 21 Paragraph 1 GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh yours. 
     

Should the processing of the personal data relating to you be restricted, this data, apart from its saving may only be processed with your consent, in order to assert, exercise or defend legal claims, to protect the rights of another natural or legal person or for reasons connected to an important public interest of the European Union or a Member State.  

Should the restriction of the processing in accordance with the requirements above be limited, you will be informed by the controller before the restriction is lifted.  

Right of erasure
Erasure obligation 

You can request from the controller that the personal data relating to you be erased immediately and the controller is obliged to do so, should one of the following reasons be present:  

  1. The personal data relating to you is no longer necessary for the purposes for which it was gathered or otherwise processed.  
  2. You revoke your consent on which the processing in accordance with Article 6 Paragraph 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR was based and there is no other legal basis for the processing.  
  3. You raise an objection against the processing in accordance with Article 21 Paragraph 1 GDPR and there are no legitimate reasons for the processing which take precedence or you raise an objection against the processing in accordance with Article 21 Paragraph 2 GDPR.  
  4. The personal data relating to you has been processed unlawfully.  
  5. The erasure of the personal data is necessary in order to fulfil a legal obligation under EU law or the laws of the Member States to which the controller is subject.  
  6. The personal data relating to you was gathered in relation to services offered by the information company in accordance with Article 8 Paragraph 1 GDPR. 
     

Provision of information to third parties 

Should the controller have made the personal data relating to you public and should it be obliged to erase this in accordance with Article 17 Paragraph 1 GDPR, then taking the available technology and implementation costs into account, it will take reasonable measures, also of a technical nature, to inform the controllers which are processing the personal data that you, as the data subject, have requested the erasure of all links to this personal data or copies / reproductions of this personal data.  

Exceptions 

The right of erasure does not exist where the processing is necessary:  

  1. In order to exercise the right of freedom of opinion and information; 
  2. In order to fulfil a legal obligation which makes the processing necessary under EU law or the laws of the Member States to which the controller is subject, to fulfil a task which is in the public interest or which takes place in the exercising of public powers which have been assigned to the controller;  
  3. For reasons connected to the public interest in the area of public health in accordance with Article 9 Paragraph 2 Letters h) and i) and Article 9 Paragraph 3 GDPR;  
  4. For archiving purposes, scientific or historical research purposes or for statistical purposes in accordance with Article 89 paragraph 1 GDPR, should the right named under Section a) be expected to make the attainment of the objectives of this processing impossible or to significantly impair these;  

Or in order to assert, exercise or defend legal claims. 

Right to be informed

Should you have claimed the right of rectification or erasure or the right to have the processing restricted vis a vis the controller, the controller is obliged to notify all recipients to whom the personal data relating to you has been disclosed of this rectification or erasure of the data or the restriction of the processing, unless this is shown to be impossible or only feasible with disproportionate expense.  

You have the right vis a vis the controller to be informed of these recipients.  

Right of data portability

You have the right to receive the personal data which you have provided to the controller in a structured, up-to-date and machine readable format. You also have the right to transfer this data to another controller without hindrance on the part of the controller to whom the personal data was provided, if:  

  1. The processing is based on consent in accordance with Article 6 Paragraph 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR or is based on a contract in accordance with Article 6 Paragraph 1 Letter b) GDPR and 
  2. the processing takes place by means of automated procedures. 
     

When exercising this right, you are also entitled to have the personal data relating to you transferred from one controller directly to another, provided that this is technically feasible. Freedoms and rights of other persons may not be impaired as a result.  

The right of data portability does not apply to processing of personal data which is necessary to perform a task which is in the public interest or which takes place in the course of the exercising of public powers which were assigned to the controller.  

Right to revoke the declaration of consent under data protection laws

You have the right to revoke your declaration of consent under data protection laws at any time. The lawfulness of the processing which took place with consent prior to the revocation is not affected.  

Automated decision making, including profiling

You have the right not to be subjected to a decision which is based exclusively on automated processing, including profiling, which has legal effects on you or which otherwise impairs on you significantly in a similar manner. This does not apply, should the decision:  

  1. Be necessary in order to conclude or fulfil a contract between yourself and the controller; 
  2. Be permitted under legal regulations of the European Union or the Member States to which the controller is subject and should the said legal regulations contain reasonable measures in order to safeguard your rights and freedoms, as well as your legitimate interests; 
  3. Take place with your express consent. 
     

However, these decisions may not be based on special categories of personal data in accordance with Article 9 Paragraph 1 GDPR, unless Article 9 Paragraph 2 Letters a) or g) apply and reasonable measures have been taken to safeguard the rights and freedoms, as well as your legitimate interests.  

In relation to the cases named in 1 and 3, the controller will take reasonable measures to safeguard the rights and freedoms, as well as your legitimate interests, which includes the right to have a person intervene on the part of the controller, to set out one’s opinion and to contest the decision.  

Right to complain to a supervisory authority

Regardless of legal remedies elsewhere under administrative laws or before a court, you have the right to complain to a supervisory authority, in particular in the Member State of your place of residence, place of employment or location of the alleged breach, should you be of the opinion that the processing of the personal data relating to you breaches the GDPR.  

The supervisory authority to whom the complaint was submitted will inform the complainant of the status and result of the complaint, including the option to pursue remedies before a court in accordance with Article 78 GDPR.  

Right to object 

You have the right to raise an objection against the processing of personal data relating to you at any time for reasons connected to your specific situation where this processing takes place in accordance with Article 6 Paragraph 1 Letters e) or f) GDPR; this also applies to any profiling based on these provisions.  

The controller will no longer process the personal data, unless it can prove mandatory protectable reasons for the processing which outweigh your interests, rights or freedoms or unless the purpose of the processing is the assertion, exercising or defence of legal claims.  

Should the personal data relating you be processed in order to carry out direct advertising, you have the right to raise an objection at any time against the processing of the personal data relating to you for the purposes of such advertising; this also applies to the processing, should it be connected to such direct advertising.  

Should you object to the processing for purposes of direct advertising, the personal data relating to you will no longer be processed for these purposes.  

Regardless of Directive 2002/58/EC, you have the option in connection with the use of services of the information company of exercising your right of objection by means of automated procedures where technical specifications are used.  

Information concerning your right of objection in accordance with Article 21 GDPR 
Should the data processing be based on Article 6 Paragraph 1 Letter e) or Article 6 Paragraph 1 Letter f) GDPR, you can raise an objection to us at any time concerning the use of your data (Article 14 Paragraph 2 Letter c) and Article 21 GDPR). The objection can take place informally. It will help us make the speedy processing of your objection easier if you use our email address with the subject “objection”, stating your name and address.  

It must be differentiated as follows in relation to the legal consequences of your objection:  

  • Should you raise an objection for reasons connected to your specific situation, we will no longer process the personal data, unless we can prove mandatory protectable reasons for the processing which outweigh your interests, rights or freedoms or unless the purpose of the processing is the assertion, exercising or defence of legal claims.  
  • Should you object to the processing for purposes of direct advertising, we will no longer process your personal data for these purposes. 
     

Data protection information for customers (natural persons) and customer contact persons

Here you will find the data protection information on data collection in our logs (PDF).