All information you transmit to us is stored on servers located within the European Union. Unfortunately, the transmission of information over the internet is not completely secure. Therefore, we cannot guarantee the security of data transmitted to our website via the internet. However, we secure our website and other systems through technical and organizational measures to protect your data against loss, destruction, unauthorized access, modification, or distribution by unauthorized persons.

In particular, your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption protocols for this purpose.

6. Use of the consent Management tool "Cookiebot"

6.1

We use the consent management tool "Cookiebot" (www.cookiebot.com) provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, on our website to obtain consent for data processing and the use of cookies or similar technologies.
With the help of Cookiebot, you can consent to specific functionalities of our website, such as the integration of external content, streaming services, statistical analysis, reach measurement, and personalized advertising.
You can give or refuse your consent for all functionalities or choose specific purposes or features.
You can also change the settings you have selected at any time later via the icon at the bottom left of the website.

6.2

The purpose of integrating "Cookiebot" is to give users of our website the ability to make informed decisions regarding the aforementioned categories and to allow them to modify their preferences at any time during further use of the website.

When using "Cookiebot", personal data and device-related information (such as IP address, language, browser, etc.) are processed and transmitted to Usercentrics A/S.
The consent settings you make are also stored on your device.

6.3

The legal basis for processing is Article 6(1)(c), Article 6(3)(a), Article 25, and Article 5(2) of the GDPR, and additionally Article 6(1)(f) GDPR where applicable.
We store the cookie necessary to document your consent based on § 25(2)(2) TDDDG.

Cookiebot helps us fulfill our legal obligations, such as obtaining informed consent and documenting that consent.
Our legitimate interests in any further processing beyond the mere collection and documentation of consent include the analysis of consent rates and the use of additional functionalities provided by the tool.

6.4

Cookiebot stores your data for as long as your user settings remain active.
One year after you initially set your preferences, your consent will be requested again.
The settings you make will then be saved again for the same duration, unless you manually delete the stored information on your device beforehand.

We have concluded a data processing agreement with Cookiebot.

6.5

You have the right to object to the processing of your data if the processing is based on Article 6(1)(f) GDPR.
Your right to object applies in particular if there are reasons arising from your specific situation.

To exercise your right to object, please contact:
mail@cookiebot.com

7. No disclosure of your personal data

We do not share your personal data with third parties unless: you have given your explicit consent to the disclosure, we are legally permitted or obliged to do so, or we are required to disclose the data by official or court order. this may particularly apply to disclosures for purposes of criminal prosecution, averting danger, or enforcing intellectual property rights.

8. Data protection and third-party websites

Our website may contain hyperlinks to and from third-party websites.
If you follow a hyperlink to any of these websites, please note that we cannot accept any responsibility or liability for external content or data protection practices.
Before submitting any personal data to these websites, please make sure to review their respective privacy policies.

9. Use of features on our website

9.1 

In addition to purely informational use of our website, we offer various services that you may use if interested. To do so, you will typically need to provide additional personal data that we use to provide the respective service. If the provision of information is voluntary, this will be indicated accordingly.
 

9.2

When you contact us by e-mail or via the contact form, we store your e-mail address and, if provided, your name and telephone number in order to respond to your inquiry.
(The legal basis is Article 6(1)(b) GDPR.)

10. Application process

10.1 

We process the data you provide in connection with your application to assess your suitability for the position (or, if applicable, for other open positions within our company) and to conduct the application process.

10.1.1

The primary legal basis for processing your personal data during the application process is Article 6(1)(b) GDPR and § 26 BDSG (German Federal Data Protection Act).
According to these provisions, the processing of data is permitted if it is necessary for the decision on the establishment of an employment relationship.
If the data is needed after the application process to pursue legal claims, processing may occur based on the requirements of Article 6 GDPR, particularly to safeguard legitimate interests under Article 6(1)(f) GDPR. In such cases, our interest lies in asserting or defending legal claims.

10.2

In the event of a rejection, applicant data will be deleted after six months.

10.3

If you have given your consent to further storage of your personal data, we will include your data in our applicant pool. Data in the applicant pool will be deleted after two years.

10.4

If you are offered a position as part of the application process, your data will be transferred from the applicant management system to our human resources information system.

10.5

Once we receive your application, your data will be reviewed by our HR department. Suitable applications will then be forwarded internally to the managers responsible for the respective position. Only those persons within the company who are involved in the proper handling of the application process will have access to your data.

11. Social media profiles

11.1

We maintain several profiles on social media platforms. These profiles are operated on the following platforms:

11.1.1

Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy notice: https://www.facebook.com/privacy/center

11.1.2

Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Privacy notice: https://privacycenter.instagram.com/policy

11.2

We use the technical platform and services of these providers to offer our information services. Please note that you use these social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive features such as commenting, sharing, or rating. When you visit our profiles, the platform providers may collect data such as your IP address and other information stored in cookies on your device. These details are used to provide us, as account operators, with statistical insights into interactions with our content. The legal basis for setting cookies is your consent under § 25(1) TDDDG; the subsequent data processing is based on Article 6(1)(a) GDPR.

11.3

The data collected about you in this context is processed by the respective platforms and may also be transferred to countries outside the European Union, especially the USA. The providers are certified under the EU-US Transatlantic Data Privacy Framework. We have also concluded standard contractual clauses with these providers to ensure an adequate level of data protection in third countries.

We do not know exactly how the social media platforms use the data from your visit to our profile or your interaction with our posts for their own purposes, how long they store this data, or whether it is shared with third parties. Data processing may also vary depending on whether you are logged in to the platform or visiting as a non-registered or logged-out user.

When you view a post or visit our profile, your device's IP address is transmitted to the platform provider. If you are logged in, your activities can be linked to your profile via cookies.
Platforms can also track your activity across websites using embedded buttons and associate this with your profile. This data may be used to serve personalized content or advertising. If you want to prevent this, log out, disable the “stay signed in” feature, delete cookies, and restart your browser.

11.4

As the operator of these accounts, we only process the data you provide when you interact with us. For example, if you send us a message or comment that requires a response via email, we will store your information in accordance with the general data processing principles outlined in this privacy policy. The legal basis for processing your data on these platforms is Article 6(1)(f) GDPR.

11.5

To exercise your data subject rights, you may contact either us or the respective social media platform. If one party is not responsible or requires information from the other, your inquiry will be forwarded accordingly. If you have questions about profiling or how your data is processed when using the platform, please contact the platform provider directly. For questions related to your interaction with us, please contact us using the contact details provided above.

11.6

You can find detailed information about the data collected by each platform and its use in their respective privacy policies (see links above). These also contain contact details and information about ad preferences and settings. Further information on social networks and how to protect your data is available at www.youngdata.de.

12. Third-party tools

12.1 Use of Google Tag Manager

12.1.1

This website uses Google Tag Manager, a cookie-free domain that does not collect personal data itself.

12.1.1.2

The tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If deactivation has been carried out at the domain or cookie level, it remains in effect for all tracking tags implemented via Google Tag Manager.

12.1.1.3

We use Google Tag Manager in the interest of simplifying the administration and development of our website. The tool helps us manage content across pages efficiently, reduce errors, avoid outdated processes, and ensure a secure user experience. The legal basis for this use is Article 6(1)(a) GDPR.
 

12.2 Use of Google Analytics

12.2.1 

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").
The purpose of using this tool is to analyze your interactions with our website and apps so we can improve our offering and make it more relevant for you.

12.2.2

User interactions are primarily tracked via cookies, device/browser data, IP addresses, and website or app activity. Google Analytics also records your IP address to ensure service security and to provide us with insights about your general location (country, region, or city). To protect your privacy, we use the anonymization function ("IP masking"), which truncates IP addresses within the EU/EEA.
 

12.2.3

Google acts as our data processor, and we have entered into a data processing agreement with them. Information generated by the cookie and the (usually truncated) IP address are transmitted to a Google server in the USA and processed there. Google is certified under the EU-US Transatlantic Data Privacy Framework. We have also concluded standard contractual clauses to ensure an adequate level of data protection in third countries. 

12.2.4

The legal basis for the collection and further processing of this data (which is stored for a maximum of 14 months) is your consent under Article 6(1)(a) GDPR. Required cookies are also only set with your consent under § 25(1) TDDDG. You can withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. In apps, you can reset the advertising ID in your Android or iOS settings. The easiest way to withdraw consent is via our consent manager or by installing Google’s browser add-on:
tools.google.com/dlpage/gaoptout?hl=en

12.2.5

More information about the scope of Google Analytics is available at:
marketingplatform.google.com/about/analytics/terms

For Google's privacy information regarding Analytics:
support.google.com/analytics/answer/6004245
 

Google's general privacy policy:
www.google.com/policies/privacy

12.3 Embedding YouTube videos

12.3.1

We embed YouTube videos into our online offering that are stored on YouTube.com and can be played directly from our website.
[These videos are embedded using "enhanced privacy mode", which means that no data about you as a user is transmitted to YouTube unless you actively play a video. Only when you play a video will the data mentioned in section 12.3.2 be transmitted. We have no influence over this data transmission.]
 

12.3.2

When you visit a page with an embedded video, YouTube receives information that you have accessed the respective subpage of our website. In addition, the previously mentioned basic data such as IP address and timestamp are transmitted. This happens regardless of whether you are logged into a YouTube or Google account. If you are logged in, your data is directly associated with your account. If you do not want this association, you must log out before clicking the video.

YouTube stores your data as user profiles and uses it for advertising, market research, and/or customization of its website.
This analysis occurs even for users who are not logged in and serves the purpose of providing personalized advertising and informing other users of your activity on our site.
You have the right to object to the creation of these user profiles, and must contact YouTube to exercise this right.

12.3.3

The collected data is stored on Google servers, including servers located in the USA. Google is certified under the EU-US Transatlantic Data Privacy Framework. We have also signed standard contractual clauses with Google to ensure an adequate level of data protection.
 

12.3.4

More information about the purpose and scope of data collection and its processing by YouTube is available in Google’s privacy policy. This also provides further information about your rights and how to manage your privacy settings: www.google.com/policies/privacy
 

12.4 Use of Elfsight