Choose your language :

Data Protection Declaration.

1. Data Protection at a Glance

General information

The following notes provide a simple overview of what happens to personal data when you visit this website. Personal data is any data with which you may be personally identified. For detailed information on the subject of data protection, please refer to our Data Protection Declaration below.
 

Data Collection on this Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. For contact details of the website operators see ‘Information on Responsible Body’ in this Data Protection Declaration.
 

How is your data collected?

Data is collected when you provide us with respective details. This may be data, for example, that you enter in a contact form.

Other data is collected by our IT systems automatically or with your consent when you visit the website. This is predominantly technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.
 

What is your data used for?

Part of the data is collected to ensure faultless provision of the website. Other data may be used to analyse your behaviour as a user.
 

What are your rights regarding your data?

You may request information about your personal data stored, its origin and recipient, and purpose of data processing at any time, and free of charge. You also have a right to demand correction or deletion of this data. If you have consented to data processing, you can revoke given consent with future effect at any time You also have the right, under certain circumstances, to demand restriction of processing of personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

For further information in regards to personal data feel free to contact us at any time.
 

Analysis Tools and Tools by Third-Parties

When visiting this website, your browsing habits may be statistically analysed. This is primarily done by use of so-called analysis programmes.

For detailed information about these analysis programmes see the following Data Protection Declaration.

2. Hosting

External Hosting

This website is hosted by an external service provider (host). Personal data collected on this website is stored on the host's servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website access and other data generated via a website.

The host is used for the purpose of contract fulfilment vis-à-vis potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of secure, fast and efficient provision of our online offering by a professional provider (Art. 6 (1) lit. f GDPR). If consent to the storage has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; insofar as the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

Our host will only process your data to the extent necessary for the fulfilment of its service obligations and will follow our instructions with regard to this data.

Our host is:

ITM design GmbH, Hauptstraße 43, 48712 Gescher
 

Order Processing Agreement

We have signed an Order Processing Agreement with above-mentioned provider. This agreement is required by data protection regulations, which ensures that named company only processes personal data collected on our website in accordance with our instructions and in compliance with GDPR.

 

3. General and Mandatory Information

Data Protection

The provider of this site is committed to protecting the security of your personal data. We treat any personal data as confidential and according to statutory Data Protection Provisions as well as this Data Protection Declaration

When you use this website, various personal data is collected. Personal data is data with which you may be personally identified. This Data Protection Declaration explains what data is collected and what it is used for. It also explains how and for what purpose this is done.

Please note that data transfer on the internet such as communication by e-mail may be subject to security breaches. Complete protection of data from access by third parties is not possible.
 

Note on Responsible Body

The data controller for this website is

noltewerk GmbH & Co. KG
Mergenthalerstraße 15
48268 Greven, Germany
Germany

Phone: +49 (2571) 16-0
E-mail: info@noltewerk.de

Data Controller means the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data such as names, e-mail addresses, etc.
 

Storage Period

Unless a more specific storage period is stated within this data protection declaration, we will continue to store your personal data until the purpose for processing such data no longer applies. If you assert a legitimate request for deletion or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once such reasons no longer apply.
 

General Information on the Legal Basis for Data Processing on this Website

If you have consented to data processing, we process your personal data pursuant Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR if special categories of data are processed in accordance with Art. 9 (1) GDPR. Insofar as you have consented to storage of cookies or access to information on your terminal device (e.g. device fingerprinting) data processing is additionally carried out pursuant Art. 25 (1) TTDSG. Consent may be revoked at any time. If your data is required contractual performance or implementation of pre-contractual measures, we process your data pursuant Art. 6 (1) lit. b GDPR. In addition, we process your data if necessary for the fulfilment of a legal obligation pursuant Art. 6 (1) lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant Art. 6 (1) lit. f GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this data protection declaration.
 

Data Protection Officer

We have appointed a Data Protection Officer for our company.

Mr Matthias Brüggemeier, Mergenthalerstr. 15, 48268 Greven, Germany

Phone: +49 (2571)/16-270
E-mail: datenschutz@noltewerk.de
 

Note on Data Transfer to the USA and Other Third Countries

Among other things, we use tools from companies located in the USA or other third countries that are, according to data protection law, non-safe. If such tools are in operation, your personal data may be transferred to and processed in such third countries. It should be noted that in these countries a level of data protection comparable to the level in the EU cannot be guaranteed. For example, companies in the US are obligated to provide personal data to security authorities without you as a data subject being able to take legal action against this. Therefore, it may be possible that US authorities (e.g. intelligence services) process, evaluate and permanently store your data which is stored on servers in the US for surveillance purposes. We have no influence over such processing operations.
 

Revocation of Consent to Data Processing

Many data processing operations are only possible with your explicit consent. You may revoke given consent at any time. Lawfulness of data processing carried out until revocation remains unaffected by the revocation.
 

Right of Objection to the Collection of Data in specific cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING IS CARRIED OUT PURSUANT ART. 6 (1) LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR REASONS RELATED TO YOUR PARTICULAR SITUATION INCLUDING PROFILING BASED ON THOSE PROVISIONS AT ANY TIME. RESPECTIVE LEGAL BASIS ON WHICH PROCESSING TAKES PLACE CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS FOR THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES; YOU SHALL HAVE THE RIGHT TO OBJECT TO PROCESSING OF SUCH PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; INCLUDING PROFILING; INSOFAR AS IT IS CONNECTED TO SUCH DIRECT MARKETING AT ANY TIME. IF YOU OBJECT TO PROCESSING FOR PURPOSES OF DIRECT MARKETING, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR SUCH PURPOSES (OBJECTION PURSUANT ART. 21 (2) GDPR).
 

Right of Appeal to Competent Supervisory Authority

In case of breaches of the GDPR, data subjects shall have a Right of Appeal to a supervisory authority, in particular in the Member State of their regular residence, place of work or the place of alleged breach. The right of appeal exists irrespective of any other administrative or judicial remedy.
 

Right to Data Portability

You have the right to request provision of data - that we process automatically based on your consent or contractual performance - to be issued to you or a third party in a common, machine-readable format. If you request direct transfer of data to another controller, this will only be done as far as technically feasible.
 

SSL or TLS Encryption

This website uses SSL or TLS encryption for reasons of security and to protect the transmission of confidential content such as orders or enquiries to us as website operator. An encrypted connection can be recognized in the browser bar when the string changes from ‘http://‘ to ‘https://‘ and the symbol of a lock.

If SSL or TLS encryption is activated, data transmit to us cannot be read by third parties.
 

Disclosure, Deletion, Correction

Within applicable statutory provisions, you may request information about your personally identifiable data stored, its origin and recipient, and purpose of data processing at any time and free of charge. You may, where applicable, also have the right to have such data deleted and corrected. For further information in regards to personal data feel free to contact us at any time.
 

Right to Restriction of Processing

You have the right to demand restriction of processing of your personal data. To exercise such right please contact us at any time. Right to Restriction of Processing exists in the following cases:

  • If the accuracy of personal data held by us is disputed, we will usually need time to verify. For the duration of verification, you have the right to demand restriction of processing of your personal data.
  • If processing of your personal data was/is unlawful, you may demand the restriction of data processing instead of deletion.
  • If we no longer need your personal data, but you need it to exercise, defend or enforce legal claims, you have the right to demand restriction of processing of your personal data instead of deletion.
  • If you have lodged an objection pursuant Art. 21 (1) GDPR, your interests and ours must be considered. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If processing of your personal data has been restricted, such personal data shall - besides its storage - not be processed, except with the consent of the data subject or for the assertion, exercise or defence of legal claims or the protection of rights of another natural or legal person or reasons of substantial public interest of the European Union or a Member State.

4. Data Collection on this Website

Cookies

Our internet pages use so-called cookies. Cookies are small text files and do not cause damage to your terminal device. Such are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of a session. Permanent cookies remain stored on your terminal device until they are manually deleted or until they are automatically deleted by your web browser.

In some cases, cookies by third-party companies (third-party cookies) may also be stored on your terminal device when you enter our site. These enable us or you to make use of certain services of third-party company (e.g. cookies for processing payment services).

Cookies have several functions. Many cookies are required for technical reasons, as certain website functions would not work without them (e.g. the shopping cart or the display of videos). Other cookies are used to analyse user behaviour or to display adverts.

Cookies necessary to carry out electronic communication processes or to provide certain functions that you have requested (e.g. the shopping cart) or to optimize the website (e.g. cookies to measure web audience) (necessary cookies) are stored pursuant Art. 6 (1) lit. f GDPR, unless any other legal basis is stated. The website operator has a legitimate interest in storing necessary cookies for technically error-free and optimum provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of such consent (Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; consent can be revoked at any time.

If you do not wish to receive cookies, you can configure your Internet browser to receive a warning before a cookie is stored and store such cookies on a case-by-case basis, to exclude acceptance of cookies in specific cases or in general or activate automatic deletion of cookies upon closing the browser. Deactivating cookies may limit the functionality of the website.

If cookies are used by third-party companies or for analysis purposes, we will provide separate information within the scope of this Data Protection Declaration and, if necessary, request your consent.
 

Consent by Usercentrics

This website uses the consent technology by Usercentrics to obtain your consent to the storage of certain cookies on your terminal device or the use of certain technologies and to document such in accordance with data protection compliance. Provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, website: https://usercentrics.com/de/ (hereinafter ‘Usercentrics‘).

When you enter our website, the following personal data is transferred to Usercentrics:

  • your consent(s) or revocation of consent(s)
  • your IP address
  • information about your browser
  • information about your device
  • time when you visited the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to attribute consent granted or revoked to you. Data collected in this manner is stored until you request for its deletion, you delete cookies by Usercentrics yourself or if purpose for storing such data no longer exists. Mandatory statutory retention periods remain unaffected.

Usercentrics is used to obtain consent as required by law for the use of certain technologies. Legal basis: Art. 6 (1) lit. b GDPR.
 

Order Processing Agreement

We have signed an Order Processing Agreement with above-mentioned provider. This agreement is required by data protection regulations, which ensures that named company only processes personal data collected on our website in accordance with our instructions and in compliance with GDPR.
 

Server-Log-Files

The provider of the website automatically collects and saves information in so-called server log-files, which are made available to us by your browser. This is data such as

  • browser type and browser version
  • operating system used
  • referrer URL
  • host name of accessing computer
  • time of server inquiry
  • IP address

Consolidation of this data with other data sources is not undertaken.

The data is collected based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in technically error-free and optimum provision of its website. For this reason server logfiles have to be recorded.
 

Contact form

In case of enquiry by contact form, the information provided on the form, including contact data, is stored for the purpose of processing the enquiry and in case of further questions. Such data is not passed on without your consent.

Processing of such data is based on Art. 6 (1) lit. b GDPR, insofar as your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing takes place based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6 (1) lit. f GDPR) or your consent (Art. 6 (1) lit. a GDPR) if such has been requested.

Data entered in the contact form will be stored by us until you request its deletion, revoke consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory statutory provisions - in particular, retention periods - remain unaffected.
 

Request by E-mail, Phone or Fax

If you contact us by e-mail, telephone or fax, your enquiry including all personal data (name, enquiry) resulting therefrom will be stored and processed by us for the purpose of processing your request. Such data is not passed on without your consent.

Processing of such data is based on Art. 6 (1) lit. b GDPR, insofar as your request is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing takes place based on our legitimate interest in effectively handling enquiries addressed to us (Art. 6 (1) lit. f GDPR) or your consent (Art. 6 (1) lit. a GDPR) if such has been requested.

Data provided by contact enquiry will be stored by us until you request its deletion, revoke consent to store it or the purpose for storing the data no longer applies (e.g. after we have completed processing your enquiry). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

5. Social media

Social Media Plugins with Shariff

Social media plugins such as Facebook, Twitter, Instagram, Pinterest, XING, LinkedIn, Tumblr are used on this website.

These plugins can usually be recognized by respective social media logos. To ensure data protection on this website, we only use such plugins along with the so-called ‘Shariff‘ solution. This application prevents the plugins integrated on this website from transmitting data to respective provider when you first enter the page.

Only when you activate respective plugin by clicking on the associated button will a direct connection to the provider's server be established (consent). As soon as you activate the plugin, respective provider receives the information that you have visited this website along with your IP address. If you are logged into your respective social media account (e.g. Facebook) at the same time, particular provider can attribute your visit to this website to your user account.

Activating the plugin constitutes consent within the scope of Art. 6 (1) lit. a GDPR and Art. 25 (1) TTDSG. You may revoke given consent with future effect at any time.

 

Facebook Plugins (Like & Share Button)

Plugins by the social network Facebook are integral part of this website. Provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, data collected is also transferred to the USA and other third countries.

Facebook plugins are recognizable by the Facebook logo or the ‘Like‘ button on this website. For an overview of the Facebook plugins see: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When visiting this website, a direct connection is by the plugin is established between your browser and the Facebook server. Facebook thereby receives the information that you have visited this website along with your IP address. If you click the Facebook ‘Like‘ button whilst logged into your Facebook account, you can link content of this website on your Facebook profile. This allows Facebook to attribute your visit to this website with your user account. Please note that we, as the provider of the pages, have no knowledge of the content of data transmitted or its use by Facebook. For more information, please see Facebook's privacy policy: https://de-de.facebook.com/privacy/explanation.

If you do not wish for Facebook to be able to attribute your visit to this website with your Facebook user account, please log out of your Facebook user account.

Facebook plugins are used pursuant Art. 6 (1) lit. f GDPR. The operator of this website has a legitimate interest in the greatest possible visibility on social media. If consent to the storage has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; insofar as the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

Insofar as personal data is collected by means of the tool described here on our website and transmitted to Facebook, Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and ourselves are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is exclusively limited to the collection of data and its transfer to Facebook. Processing by Facebook occurring after transmission is not part of such joint responsibility. Joint obligations were set out in a joint processing agreement. For the text of the agreement see https://www.facebook.com/legal/controller_addendum. In accordance with this agreement, we are responsible for providing privacy information when using the Facebook tool and for implementing the tool on our website in a manner required by data protection law. Facebook is responsible for the data security of Facebook products. You may assert rights as data subject (e.g. request for information) regarding data processed by Facebook directly with Facebook. If you assert rights as data subject with us, we are obligated to refer such to Facebook.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. For details see https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

 

Instagram Plugin

Functions by Instagram are integral part of this website. These functions are provided by Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

If you click the Instagram ‘Like‘ button whilst logged into your Instagram account, you can link content of this website on your Instagram profile. This allows Instagram to attribute your visit to this website with your user account. Please note that we, as the provider of the pages, have no knowledge of the content of data transmitted or its use by Instagram.

Storage and analysis of such data is based on Art. 6 (1) lit. f GDPR. The operator of this website has a legitimate interest in the greatest possible visibility on social media. If consent to the storage has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; insofar as the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

Insofar as personal data is collected by means of the tool described here on our website and transmitted to Facebook and Instagram respectively, Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and ourselves are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is exclusively limited to the collection of data and its transfer to Facebook and Instagram, respectively. Processing by Facebook and Instagram respectively occurring after transmission is not part of joint responsibility. Joint obligations were set out in a joint processing agreement. For the text of the agreement see https://www.facebook.com/legal/controller_addendum. In accordance with this agreement, we are responsible for providing privacy information when using the Facebook and Instagram tool respectively and for implementing the tool on our website in a manner required by data protection law. Facebook is responsible for the data security of Facebook and Instagram products. You may assert rights as data subject (e.g. request for information) regarding data processed by Facebook and Instagram respectively directly with Facebook. If you assert rights as data subject with us, we are obligated to refer such to Facebook.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. For details see https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/566994660333381.

For more information, please see Instagram's privacy policy: https://instagram.com/about/legal/privacy/.

6. Analysis Tools and Advertising

Google Analytics

This website uses Google Analytics. Provider is Google Ireland Limited (‘Google‘), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse behaviour of website visitors. In doing so, the website operator obtains various usage data, such as  page views, dwell time, operating systems used and origin of users. Such data is summarized in a user ID and assigned to respective terminal device of the website visitor.

In addition, Google Analytics allows us to record, among other things, mouse and scroll movements as well as clicks. Furthermore, Google Analytics uses various modelling approaches to augment data sets collected and use machine learning technologies in data analysis.

Google Analytics uses technologies that enable recognition of users for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google in regards to how this website was used is generally transmitted to and stored on a Google server in the USA.

Use of such analysis-tools is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimize both its website and its advertising. If consent to the storage has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act]; insofar as the consent includes storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. For details see https://privacy.google.com/businesses/controllerterms/mccs/.
 

Browser Plugin

You may prevent compilation and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information on how Google Analytics handles user data see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de .
 

Order Processing Agreement

We have signed an Order Processing Agreement with Google and fully implement the strict requirements by German data protection authorities when using Google Analytics.
 

Storage Period

Data at user and event level stored by Google which is linked to cookies, user identifiers (e.g. user ID) or advertising IDs (e.g. double-click cookies, android advertising ID) is anonymized or deleted after 14 months. For more details see the following link: https://support.google.com/analytics/answer/7667196?hl=de

7. Newsletter

Newsletter Data

If you would like to receive the newsletter as offered on the website, we require your e-mail address as well as information that allows us to verify that you are the owner of such e-mail address and that you agree to receipt of the newsletter. Further data is not collected or only collected on a voluntary basis. For handling of the newsletters, we use newsletter service providers described below.<br/>  

MailChimp

This website uses services by MailChimp for sending newsletters. Provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service with which, amongst other things, sending of newsletters may be organized and analysed. If you enter data for the purpose of receiving the newsletter (e.g. e-mail address), this data is stored on MailChimp's servers in the USA.

With the help of MailChimp, we are able to analyse our newsletter campaigns. When opening an e-mail sent by MailChimp, a file contained in the e-mail (so-called web beacon) connects to MailChimp’s servers in the USA. This makes it possible to track whether a newsletter message has been opened and which links, if any, have been clicked on. Also collected is technical information (e.g. time of access, IP address, browser type and operating system). Such information cannot be attributed to respective newsletter recipient. They are used exclusively for statistical analysis of newsletter campaigns. Results of these analyses can be used to better adapt future newsletters to the interests of recipients.

If you do not wish for any analysis by MailChimp, it is imperative to unsubscribe from the newsletter. In order to do so we provide a link in every newsletter message.

The data processing is based on your consent (Art. 6 (1) lit. a GDPR). You may revoke given consent by unsubscribing from the newsletter at any time. Lawfulness of data processing operations already carried out remains unaffected by the revocation.

Data provided for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. For details see https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.

After you have unsubscribed from the newsletter distribution list, your e-mail address will be stored, if required, by us or the newsletter service provider in a blacklist to prevent future mailings. Data from the blacklist will only be used for this purpose and not be merged with other data. This serves your interest as well as our interest in complying with legal requirements when sending newsletters (legitimate interest in line with Art. 6 (1) lit. f GDPR). Storage in the blacklist is not subject to a time limit. You may object to storage if your interests outweigh our legitimate interest.

For more details, please refer to MailChimp's privacy policy: https://mailchimp.com/legal/terms/.<br/>  

Order Processing Agreement

We have signed an Order Processing Agreement with above-mentioned provider. This agreement is required by data protection regulations, which ensures that named company only processes personal data collected on our website in accordance with our instructions and in compliance with GDPR.

8. Plugins and Tools

YouTube with Enhanced Data Protection

This website embeds videos by YouTube. The operator of the site is Google Ireland Limited (‘Google‘), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode entails that YouTube does not store any information about visitors to this website before they watch the video. However, disclosure of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, YouTube - regardless of whether you watch a video - establishes a connection to the Google double-click network.

As soon as you start a YouTube video on this website, a connection to YouTube's servers is established. This provides the YouTube server with information as to which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to attribute your surfing behaviour directly to your personal profile. You may prevent this by logging out of your YouTube account.

Furthermore, YouTube may store various cookies on your terminal device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In doing so, YouTube may obtain information about visitors to this website. Such information is used, amongst other things, to collect video statistics, improve user experience and prevent scamming attempts.

If applicable, further data processing operations may be triggered after the start of a YouTube video over which is beyond our control.

YouTube is used in the interest of appealing presentation of our online offers. This constitutes a legitimate interest in line with Art. 6 (1) lit. f GDPR. If consent to the storage has been requested, processing is carried out exclusively on the basis of (Art. 6 (1) lit. a GDPR and Art 25 (1) TTDSG = Telekommunikation-Telemedien-Datenschutz-Gesetz [Telecommunications - Telemedia Data Protection Act); insofar as the consent includes storage of cookies or access to information on the user's terminal device (e.g. device fingerprinting) in line with TTDSG. Consent may be revoked at any time.

For more information in regard to Data protection by YouTube, please see its privacy policy: https://policies.google.com/privacy?hl=de.

9. Own Services

Handling of Applicant Data

We offer you the opportunity to submit a job application (e.g. by e-mail, mail or online application form). Hereafter, we provide you with information about scope, purpose and use of your personal data collected within the application process. We assure you that collection, processing and use of your data will be carried out in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strictest confidence.
 

Scope and Purpose of Data Collection

When submitting an application, we process your associated personal data (e.g. contact and communication data, application documents, notes in the context of job interviews, etc.), insofar as this is necessary for the decision on establishing an employment relationship. Legal basis for this is Art. 26 of the Federal Data Protection Act (BDSG) under German law (initiation of an employment relationship), Art. 6 (1) lit. b GDPR (general contract initiation) and - if you have provided consent - Art. 6 (1) lit. a GDPR. Consent may be revoked at any time. Within our company personal data will only be passed on to persons involved in the processing of your application.

If application is successful, data submitted by you will be stored in our data processing systems on the basis of Art. 26 Federal Data Protection Act and Art. 6 (1) lit. b GDPR for the purpose of implementing the employment relationship.
 

Retention Period for Data

If we are unable to offer you a job, if you reject a job offer or withdraw your application, we reserve the right to retain provided data on the basis of our legitimate interests (Art. 6 (1) lit. f GDPR) for up to 6 months after the end of the application process (rejection or withdrawal of the application). Data is then deleted, and the physical application documents destroyed. Storage particularly serves as evidence in the event of a legal dispute. If it is evident that data will be required after six-month period has expired (e.g. due to an impending or pending legal dispute), such data will only be deleted when the purpose for continued storage no longer applies.

Longer storage may also occur if you have given consent (Art. 6 (1) lit. a GDPR) or if legal storage obligations prevent deletion.
 

Admission to the Applicant Pool

If we do not offer you a job, we may be able to admit you to our pool of applicants. In case of acceptance, all documents and details from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Admission to the applicant pool is exclusively based on your express consent (Art. 6 (1) lit. a GDPR). Giving consent is voluntary and not related to the current application process. The data subject may revoke consent at any time. In such case, data will be irrevocably deleted from the applicant pool unless there are legal reasons for its retention.

Data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.