1. Pri­va­cy at a Glan­ce

Gene­ral Infor­ma­ti­on

The fol­lo­wing infor­ma­ti­on pro­vi­des a simp­le over­view of what hap­pens to your per­so­nal data when you visit this web­site. Per­so­nal data refers to any data that can be used to per­so­nal­ly iden­ti­fy you. For detail­ed infor­ma­ti­on on data pro­tec­tion, plea­se refer to our Pri­va­cy Poli­cy lis­ted below this text.

Data Coll­ec­tion on This Web­site

Who is respon­si­ble for data coll­ec­tion on this web­site?

Data pro­ces­sing on this web­site is car­ri­ed out by the web­site ope­ra­tor. You can find the operator’s cont­act infor­ma­ti­on in the legal noti­ce sec­tion of this web­site.

How do we coll­ect your data?

Your data is coll­ec­ted, on the one hand, when you pro­vi­de it to us. This may include, for exam­p­le, data you enter into a cont­act form.

Other data is coll­ec­ted auto­ma­ti­cal­ly by our IT sys­tems when you visit the web­site. This con­sists pri­ma­ri­ly of tech­ni­cal data (e.g., inter­net brow­ser, ope­ra­ting sys­tem, or time of page view). This data is coll­ec­ted auto­ma­ti­cal­ly as soon as you access this web­site.

What do we use your data for?

Some of the data is coll­ec­ted to ensu­re the web­site func­tions pro­per­ly. Other data may be used to ana­ly­se your user beha­viour.

What rights do you have regar­ding your data?

You have the fol­lo­wing rights in rela­ti­on to your per­so­nal data, which you may exer­cise by cont­ac­ting us:
Right of access (Art. 15 GDPR),
Right to recei­ve the data in a struc­tu­red, com­mon­ly used, machi­ne-rea­da­ble for­mat (‘data por­ta­bi­li­ty’) and the right to have the data trans­mit­ted to ano­ther con­trol­ler, pro­vi­ded the con­di­ti­ons set out in Art. 20(1)(a) and (b) GDPR are met (Art. 20 GDPR),
• Right to rec­ti­fi­ca­ti­on (Art. 16 GDPR) or era­su­re (Art. 17 GDPR),
• Right to rest­ric­tion of pro­ces­sing (Art. 18 GDPR),
• Right to object to pro­ces­sing (Art. 21 GDPR),
• Right to with­draw your con­sent (Artic­le 7(3) of the GDPR).

You may exer­cise your rights by cont­ac­ting us using the cont­act details pro­vi­ded below or else­whe­re on this web­site, e.g.:

ORISA Soft­ware GmbH
Tele­pho­ne: +49 3641 28440
Email: in**@***sa.de

or

Email: po**@******************tz.de

You also have the right to lodge a com­plaint with a data pro­tec­tion super­vi­so­ry aut­ho­ri­ty regar­ding our pro­ces­sing of your per­so­nal data (Artic­le 77 of the GDPR). The right to object can be exer­cis­ed, in par­ti­cu­lar, with the super­vi­so­ry aut­ho­ri­ty respon­si­ble for us: Thu­rin­gi­an Sta­te Com­mis­sio­ner for Data Pro­tec­tion and Free­dom of Infor­ma­ti­on (TLf­DI), Häß­ler­stra­ße 8, 99096 Erfurt, tele­pho­ne: +49 361 57311–200, email: po********@*************en.de, www.tlfdi.de. This right to sub­mit a com­plaint is wit­hout pre­ju­di­ce to any other legal reme­dies.

Manage­ment of Coo­kies and Your Con­sent to Our Ser­vices

We use the con­sent tool “Real Coo­kie Ban­ner” to mana­ge the coo­kies and simi­lar tech­no­lo­gies we use, as well as the rela­ted cons­ents. Details on how “Real Coo­kie Ban­ner” works can be found here.

The sto­rage and rea­ding of coo­kies and simi­lar tech­no­lo­gies on your device is car­ri­ed out on the basis of Sec­tion 25(1) of the TTDSG (coo­kies requi­ring con­sent) in con­junc­tion with Artic­le 6(1), first sen­tence, point (a) of the GDPR, or Sec­tion 25(2)(2) of the TTDSG (tech­ni­cal­ly neces­sa­ry coo­kies) in con­junc­tion with Artic­le 6(1), first sen­tence, point (f) of the GDPR. The sub­se­quent pro­ces­sing of the per­so­nal data coll­ec­ted in this way is gover­ned by Artic­le 6(1), point (a) of the GDPR (whe­re con­sent has been given) or Artic­le 6(1), points © and (f) of the GDPR. Our legi­ti­ma­te inte­rest is the legal­ly com­pli­ant manage­ment of the coo­kies used and the asso­cia­ted cons­ents. The evi­dence of con­sent coll­ec­ted as part of con­sent manage­ment (time stamp, con­sent ver­si­on, tech­ni­cal iden­ti­fier) is stored for a peri­od of 2 years in order to ful­fil our obli­ga­ti­on to pro­vi­de evi­dence in accordance with Artic­le 7(1) of the GDPR. Our legi­ti­ma­te inte­rest is the manage­ment of the coo­kies and simi­lar tech­no­lo­gies used and the rela­ted cons­ents.

The pro­vi­si­on of per­so­nal data is neither con­trac­tual­ly requi­red nor neces­sa­ry for the con­clu­si­on of a con­tract. You are not requi­red to pro­vi­de per­so­nal data. If you do not pro­vi­de per­so­nal data, we will not be able to mana­ge your cons­ents.

Chan­ge pri­va­cy set­tings Histo­ry of pri­va­cy set­tings With­draw cons­ents

Ana­ly­tics tools and third-par­ty tools

When you visit this web­site, your brow­sing beha­viour may be ana­ly­sed for sta­tis­ti­cal pur­po­ses. This is pri­ma­ri­ly done using coo­kies and so-cal­led ana­ly­tics pro­grams. The ana­ly­sis of your brow­sing beha­viour is gene­ral­ly anony­mous; your brow­sing beha­viour can­not be tra­ced back to you.

You can object to this ana­ly­sis or pre­vent it by not using cer­tain tools. Detail­ed infor­ma­ti­on about the­se tools and your opti­ons for objec­ting can be found in the fol­lo­wing pri­va­cy poli­cy.

2. Hos­ting

Exter­nal Hos­ting

This web­site is hos­ted by Digi­tal­werk Jena | IKS Ser­vice GmbH, Rudol­städ­ter Stra­ße 41, 07745 Jena (Ger­ma­ny). Per­so­nal data coll­ec­ted on this web­site is stored on the host’s ser­vers. This may pri­ma­ri­ly include IP addres­ses, cont­act enqui­ries, meta and com­mu­ni­ca­ti­on data, con­trac­tu­al data, cont­act details, names, web­site visits and other data gene­ra­ted via a web­site.

The use of the host is for the pur­po­se of ful­fil­ling our con­trac­tu­al obli­ga­ti­ons towards our poten­ti­al and exis­ting cus­to­mers (Art. 6(1)(b) GDPR) and in the inte­rest of a secu­re, fast and effi­ci­ent pro­vi­si­on of our online ser­vices by a pro­fes­sio­nal pro­vi­der (Art. 6(1)(f) GDPR).

Our hos­ting pro­vi­der will only pro­cess your data to the ext­ent neces­sa­ry to ful­fil its ser­vice obli­ga­ti­ons and will fol­low our ins­truc­tions regar­ding this data.

Con­clu­si­on of a data pro­ces­sing agree­ment

To ensu­re data pro­ces­sing com­pli­es with data pro­tec­tion regu­la­ti­ons, we have con­cluded a data pro­ces­sing agree­ment with our hos­ting pro­vi­der.

3. Gene­ral infor­ma­ti­on and man­da­to­ry noti­ces

Data Pro­tec­tion

The ope­ra­tors of this web­site take the pro­tec­tion of your per­so­nal data very serious­ly. We tre­at your per­so­nal data con­fi­den­ti­al­ly and in accordance with sta­tu­to­ry data pro­tec­tion regu­la­ti­ons and this pri­va­cy poli­cy.

When you use this web­site, various per­so­nal data is coll­ec­ted. Per­so­nal data is data that can be used to iden­ti­fy you per­so­nal­ly. This pri­va­cy poli­cy explains what data we coll­ect and what we use it for. It also explains how and for what pur­po­se this is done.

Plea­se note that data trans­mis­si­on over the inter­net (e.g. when com­mu­ni­ca­ting by email) may be sub­ject to secu­ri­ty vul­nerabi­li­ties. It is not pos­si­ble to pro­vi­de com­ple­te pro­tec­tion of data against access by third par­ties.

Infor­ma­ti­on on the data con­trol­ler

The data con­trol­ler respon­si­ble for data pro­ces­sing on this web­site is:

ORISA Soft­ware GmbH
Hum­boldt­stra­ße 13
07743 Jena

Pho­ne: +49 3641 28440
Email: in**@***sa.de

The con­trol­ler is the natu­ral or legal per­son who, alo­ne or joint­ly with others, deter­mi­nes the pur­po­ses and means of the pro­ces­sing of per­so­nal data (e.g. names, email addres­ses, etc.).

Sta­tu­to­ry Data Pro­tec­tion Offi­cer

We have appoin­ted a Data Pro­tec­tion Offi­cer for our com­pa­ny. You can reach them as fol­lows:

Land­graf Daten­schutz GmbH
Markt 22
07743 Jena

Pho­ne: +49 3641 3161182
Email: ds*@******************tz.de

With­dra­wal of your con­sent to data pro­ces­sing

Many data pro­ces­sing ope­ra­ti­ons are only pos­si­ble with your expli­cit con­sent. You may with­draw any con­sent you have alre­a­dy given at any time. To do so, sim­ply send us an infor­mal email. The lawful­ness of the data pro­ces­sing car­ri­ed out pri­or to the with­dra­wal remains unaf­fec­ted by the with­dra­wal.

Right to object to data coll­ec­tion in spe­ci­fic cases and to direct mar­ke­ting (Art. 21 GDPR)

IF DATA PROCESSING IS BASED ON ART. 6(1)(e) E OR F OF THE GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. YOU CAN FIND THE RELEVANT LEGAL BASIS ON WHICH PROCESSING IS BASED IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, exer­cise or defence of legal claims (objec­tion under Artic­le 21(1) of the GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

SSL or TLS encryp­ti­on

This web­site uses SSL or TLS encryp­ti­on for secu­ri­ty reasons and to pro­tect the trans­mis­si­on of con­fi­den­ti­al con­tent, such as orders or enqui­ries that you send to us as the web­site ope­ra­tor. You can reco­g­ni­se an encrypt­ed con­nec­tion by the fact that the address bar of your brow­ser chan­ges from “http://” to “https://” and by the pad­lock sym­bol in your brow­ser bar.

When SSL or TLS encryp­ti­on is acti­ve, the data you trans­mit to us can­not be read by third par­ties

4. Data coll­ec­tion on this web­site

Ser­ver log files

The web­site pro­vi­der auto­ma­ti­cal­ly coll­ects and stores infor­ma­ti­on in so-cal­led ser­ver log files, which your brow­ser auto­ma­ti­cal­ly trans­mits to us. This includes:

• Brow­ser type and ver­si­on
• Ope­ra­ting sys­tem used
• Refer­rer URL
• Host name of the acces­sing com­pu­ter
• Time of the ser­ver request
• IP Address

This data is not com­bi­ned with other data sources. For secu­ri­ty reasons, ser­ver log files are stored for a peri­od of 30 days and then dele­ted. Data that needs to be retai­ned for the pur­po­ses of pre­ser­ving evi­dence will be kept until the inci­dent in ques­ti­on has been ful­ly resol­ved.

The coll­ec­tion of this data is based on Artic­le 6(1)(f) of the GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the tech­ni­cal­ly error-free pre­sen­ta­ti­on and opti­mi­sa­ti­on of its web­site – to this end, the ser­ver log files must be coll­ec­ted.

Cont­act form

If you send us enqui­ries via the cont­act form, the details you pro­vi­de in the form, inclu­ding the cont­act details you enter the­re, will be stored by us for the pur­po­se of pro­ces­sing your enquiry and in case of any fol­low-up ques­ti­ons. We will not pass on this data wit­hout your con­sent.

The pro­ces­sing of this data is based on Artic­le 6(1)(b) of the GDPR, pro­vi­ded that your enquiry rela­tes to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res. In all other cases, pro­ces­sing is based on our legi­ti­ma­te inte­rest in the effec­ti­ve hand­ling of enqui­ries addres­sed to us (Artic­le 6(1)(f) of the GDPR) or on your con­sent (Artic­le 6(1)(a) of the GDPR), pro­vi­ded this has been reques­ted.

The data you enter in the cont­act form will remain with us until you request its dele­ti­on, with­draw your con­sent to its sto­rage, or the pur­po­se for sto­ring the data no lon­ger appli­es (e.g. once your enquiry has been pro­ces­sed). Pro­vi­ding your per­so­nal data in the cont­act form is vol­un­t­a­ry. The fields mark­ed with an aste­risk (*) are man­da­to­ry and must be com­ple­ted in order for us to pro­cess your enquiry. Wit­hout this infor­ma­ti­on, we will be unable to cont­act you or deal with your enquiry. Man­da­to­ry legal pro­vi­si­ons – in par­ti­cu­lar reten­ti­on peri­ods – remain unaf­fec­ted.

Enqui­ries by email, tele­pho­ne or fax

If you cont­act us by email, tele­pho­ne or fax, your enquiry, inclu­ding all per­so­nal data con­tai­ned the­r­ein (name, enquiry), will be stored and pro­ces­sed by us for the pur­po­se of deal­ing with your request. We will not dis­c­lo­se this data wit­hout your con­sent.

The pro­ces­sing of this data is based on Artic­le 6(1)(b) of the GDPR, pro­vi­ded that your enquiry rela­tes to the per­for­mance of a con­tract or is neces­sa­ry for the imple­men­ta­ti­on of pre-con­trac­tu­al mea­su­res. In all other cases, pro­ces­sing is based on your con­sent (Artic­le 6(1)(a) of the GDPR) and/or on our legi­ti­ma­te inte­rests (Artic­le 6(1)(f) of the GDPR), as we have a legi­ti­ma­te inte­rest in the effec­ti­ve pro­ces­sing of enqui­ries addres­sed to us.

The data you send to us via cont­act enqui­ries will remain with us until you request its dele­ti­on, with­draw your con­sent to its sto­rage, or the pur­po­se for sto­ring the data no lon­ger appli­es (e.g. once your enquiry has been ful­ly pro­ces­sed). Man­da­to­ry legal pro­vi­si­ons – in par­ti­cu­lar sta­tu­to­ry reten­ti­on peri­ods – remain unaf­fec­ted.

5. Ana­ly­tics Tools and Adver­ti­sing

Goog­le Ana­ly­tics 4

This web­site uses Goog­le Ana­ly­tics 4 (GA4), a web ana­ly­tics ser­vice pro­vi­ded by Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.
GA4 uses tech­no­lo­gies (inclu­ding coo­kies and device iden­ti­fiers) that enable the ana­ly­sis of how this web­site is used. The infor­ma­ti­on coll­ec­ted in this pro­cess is gene­ral­ly trans­mit­ted to a Goog­le ser­ver in the USA and stored the­re. Goog­le Ana­ly­tics 4 does not store IP addres­ses per­ma­nent­ly; they are anony­mi­sed befo­re being stored.
The use of GA4 is based sole­ly on your expli­cit con­sent (Sec­tion 25(1) of the Ger­man Tele­me­dia Act (TTDSG) in con­junc­tion with Artic­le 6(1)(a) of the GDPR). You may with­draw your con­sent at any time with future effect via our pri­va­cy set­tings.
Trans­fers to third count­ries: Data is trans­fer­red to the USA on the basis of the EU Commission’s ade­quacy decis­i­on regar­ding the EU-US Data Pri­va­cy Frame­work (Artic­le 45 of the GDPR), as Goog­le LLC is cer­ti­fied under the EU-US Data Pri­va­cy Frame­work. In addi­ti­on, we have ente­red into an agree­ment with Goog­le cove­ring EU Stan­dard Con­trac­tu­al Clau­ses in accordance with Artic­le 46(2)© of the GDPR.
Data pro­ces­sing on behalf of a con­trol­ler: We have ente­red into a data pro­ces­sing agree­ment with Goog­le.
Reten­ti­on peri­od: Data at user and event level is anony­mi­sed or dele­ted after 14 months.

Demo­gra­phic cha­rac­te­ristics: This web­site uses the ‘demo­gra­phic cha­rac­te­ristics’ fea­ture of GA4. This enables reports to be gene­ra­ted on the age, gen­der and inte­rests of web­site visi­tors. This con­sti­tu­tes pro­fil­ing within the mea­ning of Artic­le 4(4) of the GDPR. This fea­ture is used sole­ly on the basis of your con­sent and can be dis­ab­led at any time via Google’s ad set­tings: https://www.google.com/settings/ads.
Fur­ther infor­ma­ti­on: https://support.google.com/analytics/answer/6004245?hl=de

Word­Press Stats

This web­site uses the Word­Press Stats tool to ana­ly­se visi­tor traf­fic sta­tis­ti­cal­ly. The pro­vi­der is Auto­mat­tic Inc., 60 29th Street #343, San Fran­cis­co, CA 94110–4929, USA.

Word­Press Stats uses coo­kies that are stored on your com­pu­ter and enable an ana­ly­sis of web­site usa­ge. The infor­ma­ti­on gene­ra­ted by the coo­kies regar­ding the use of this web­site is stored on ser­vers in the USA. Your IP address is anony­mi­sed after pro­ces­sing and befo­re sto­rage.

“Word­Press Stats” coo­kies remain on your device until you dele­te them.

The sto­rage of “Word­Press Stats” coo­kies and the use of this ana­ly­tics tool are based on Artic­le 6(1)(f) of the GDPR. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in the anony­mi­sed ana­ly­sis of user beha­viour in order to opti­mi­se both its web­site and its adver­ti­sing. Whe­re rele­vant con­sent has been sought (e.g. con­sent to the sto­rage of coo­kies), pro­ces­sing takes place exclu­si­ve­ly on the basis of Artic­le 6(1)(a) of the GDPR; con­sent may be with­drawn at any time.

You can con­fi­gu­re your brow­ser so that you are noti­fied when coo­kies are set and only allow coo­kies on a case-by-case basis, exclude the accep­tance of coo­kies in spe­ci­fic cases or gene­ral­ly, and enable the auto­ma­tic dele­ti­on of coo­kies when you clo­se your brow­ser. If you disable coo­kies, the func­tion­a­li­ty of this web­site may be rest­ric­ted.

You can object to the coll­ec­tion and use of your data in future by visi­ting the Jet­pack Pri­va­cy Cent­re at https://jetpack.com/support/privacy/ and using the rele­vant opt-out opti­on the­re.

If you dele­te the coo­kies on your com­pu­ter, you will need to set the opt-out coo­kie again.

Word­Press stats data is stored on ser­vers ope­ra­ted by Auto­mat­tic Inc. in the USA. Data is trans­fer­red to the USA on the basis of the Euro­pean Commission’s ade­quacy decis­i­on regar­ding the EU-US Data Pri­va­cy Frame­work (Artic­le 45 of the GDPR), as Auto­mat­tic Inc. is cer­ti­fied under the EU-US Data Pri­va­cy Frame­work.

Goog­le Ana­ly­tics Remar­ke­ting

This web­site uses the func­tions of Goog­le Ana­ly­tics Remar­ke­ting in con­junc­tion with the cross-device func­tions of Goog­le Ads and Goog­le Dou­ble­Click. The pro­vi­der is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

This func­tion enables the adver­ti­sing audi­en­ces crea­ted with Goog­le Ana­ly­tics Remar­ke­ting to be lin­ked to the cross-device func­tions of Goog­le Ads and Goog­le Dou­ble­Click. In this way, inte­rest-based, per­so­na­li­sed adver­ti­sing mes­sa­ges, which have been tail­o­red to you based on your pre­vious usa­ge and brow­sing beha­viour on one device (e.g. mobi­le pho­ne), can also be dis­play­ed on ano­ther of your devices (e.g. tablet or PC).

If you have given your con­sent, Goog­le will link your web and app brow­sing histo­ry to your Goog­le Account for this pur­po­se. This allows the same per­so­na­li­sed adver­ti­sing mes­sa­ges to be dis­play­ed on any device on which you sign in with your Goog­le Account.

To sup­port this func­tion, Goog­le Ana­ly­tics coll­ects Goog­le-authen­ti­ca­ted user IDs, which are tem­po­r­a­ri­ly lin­ked to our Goog­le Ana­ly­tics data to defi­ne and crea­te audi­en­ces for cross-device adver­ti­sing.

You can per­ma­nent­ly opt out of cross-device remarketing/targeting by dis­ab­ling per­so­na­li­sed adver­ti­sing; to do so, fol­low this link: https://www.google.com/settings/ads/onweb/.

The con­so­li­da­ti­on of the coll­ec­ted data in your Goog­le Account is based sole­ly on your con­sent, which you may give or with­draw via Goog­le (Art. 6(1)(a) GDPR). Data pro­ces­sing is car­ri­ed out sole­ly on the basis of your expli­cit con­sent (Sec­tion 25(1) of the TTDSG in con­junc­tion with Artic­le 6(1)(a) of the GDPR). You may with­draw your con­sent at any time.

The legi­ti­ma­te inte­rest ari­ses from the fact that the web­site ope­ra­tor has an inte­rest in the anony­mi­sed ana­ly­sis of web­site visi­tors for adver­ti­sing pur­po­ses.

Fur­ther infor­ma­ti­on and the pri­va­cy poli­cy can be found in Google’s pri­va­cy poli­cy at: https://policies.google.com/technologies/ads?hl=en.

Note on pro­fil­ing: The use of Goog­le Ana­ly­tics Remar­ke­ting con­sti­tu­tes a form of pro­fil­ing within the mea­ning of Artic­le 4(4) of the GDPR. Inte­rest pro­files are crea­ted on the basis of your usa­ge and brow­sing beha­viour in order to dis­play per­so­na­li­sed adver­ti­sing to you on other web­sites. No auto­ma­ted decis­i­ons with legal effect (Artic­le 22 of the GDPR) are made in this pro­cess.
Data is trans­fer­red to the USA on the basis of the Euro­pean Commission’s ade­quacy decis­i­on regar­ding the EU-US Data Pri­va­cy Frame­work and on the basis of EU Stan­dard Con­trac­tu­al Clau­ses (Artic­le 46(2)© of the GDPR).

Goog­le Ads and Goog­le Con­ver­si­on-Track­ing

This web­site uses Goog­le Ads. Goog­le Ads is an online adver­ti­sing pro­gram­me pro­vi­ded by Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

As part of Goog­le Ads, we use what is known as con­ver­si­on track­ing. When you click on an advert dis­play­ed by Goog­le, a coo­kie is set for con­ver­si­on track­ing. Coo­kies are small text files that the inter­net brow­ser stores on the user’s com­pu­ter. The­se coo­kies expi­re after 30 days and are not used to per­so­nal­ly iden­ti­fy users. If the user visits cer­tain pages on this web­site and the coo­kie has not yet expi­red, Goog­le and we can reco­g­ni­se that the user cli­cked on the advert and was redi­rec­ted to that page.

Each Goog­le Ads cus­to­mer recei­ves a dif­fe­rent coo­kie. The coo­kies can­not be tra­cked across the web­sites of Goog­le Ads cus­to­mers. The infor­ma­ti­on coll­ec­ted using the con­ver­si­on coo­kie is used to gene­ra­te con­ver­si­on sta­tis­tics for Goog­le Ads cus­to­mers who have opted for con­ver­si­on track­ing. Cus­to­mers are infor­med of the total num­ber of users who cli­cked on their ad and were redi­rec­ted to a page tag­ged with a con­ver­si­on track­ing tag. Howe­ver, they do not recei­ve any infor­ma­ti­on that can be used to per­so­nal­ly iden­ti­fy users. If you do not wish to par­ti­ci­pa­te in track­ing, you can object to this use by easi­ly deac­ti­vat­ing the Goog­le con­ver­si­on track­ing coo­kie via your inter­net brow­ser under user set­tings. You will then not be included in the con­ver­si­on track­ing sta­tis­tics.

Con­ver­si­on coo­kies are stored on your device sole­ly on the basis of your pri­or con­sent in accordance with Sec­tion 25(1) of the TTDSG. The sub­se­quent pro­ces­sing of data is based on Artic­le 6(1)(a) of the GDPR. You may with­draw your con­sent at any time with future effect. The web­site ope­ra­tor has a legi­ti­ma­te inte­rest in ana­ly­sing user beha­viour in order to opti­mi­se both its web­site and its adver­ti­sing. Whe­re rele­vant con­sent has been reques­ted (e.g. con­sent to the sto­rage of coo­kies), pro­ces­sing takes place exclu­si­ve­ly on the basis of Artic­le 6(1)(a) of the GDPR; con­sent may be with­drawn at any time.

Fur­ther infor­ma­ti­on on Goog­le Ads and Goog­le Con­ver­si­on Track­ing can be found in Google’s pri­va­cy poli­cy: https://policies.google.com/privacy?hl=en.

You can con­fi­gu­re your brow­ser so that you are noti­fied when coo­kies are set and only allow coo­kies on a case-by-case basis, exclude the accep­tance of coo­kies in spe­ci­fic cases or gene­ral­ly, and enable the auto­ma­tic dele­ti­on of coo­kies when you clo­se your brow­ser. If you disable coo­kies, the func­tion­a­li­ty of this web­site may be rest­ric­ted.

6. News­let­ter

News­let­ter details

If you would like to sub­scri­be to the news­let­ter offe­red on the web­site, we requi­re your email address and infor­ma­ti­on that allows us to veri­fy that you are the owner of the email address pro­vi­ded and that you con­sent to recei­ving the news­let­ter. No fur­ther data is coll­ec­ted, or only on a vol­un­t­a­ry basis. We use this data exclu­si­ve­ly for sen­ding the reques­ted infor­ma­ti­on and do not pass it on to third par­ties.

The pro­ces­sing of the data ente­red in the news­let­ter regis­tra­ti­on form is car­ri­ed out exclu­si­ve­ly on the basis of your con­sent (Art. 6(1)(a) GDPR). You may with­draw your con­sent to the sto­rage of your data and email address, as well as their use for sen­ding the news­let­ter, at any time, for exam­p­le via the “Unsub­scri­be” link in the news­let­ter. The lawful­ness of any data pro­ces­sing ope­ra­ti­ons that have alre­a­dy taken place remains unaf­fec­ted by this with­dra­wal.

We use the fol­lo­wing ser­vice pro­vi­der to send out our news­let­ters: Cle­ver­Reach GmbH & Co. KG, //CRASH Buil­ding, Schaf­jü­cken­weg 2, 26180 Ras­tede (Ger­ma­ny). We have ente­red into a data pro­ces­sing agree­ment with this ser­vice pro­vi­der. Data stored by us for other pur­po­ses remains unaf­fec­ted by this.

After you unsub­scri­be from the news­let­ter dis­tri­bu­ti­on list, your email address may be stored by us or the news­let­ter ser­vice pro­vi­der on a black­list to pre­vent future mai­lings. The data from the black­list is used sole­ly for this pur­po­se and is not mer­ged with other data. This ser­ves both your inte­rests and our inte­rest in com­ply­ing with legal requi­re­ments when sen­ding news­let­ters (legi­ti­ma­te inte­rest within the mea­ning of Artic­le 6(1)(f) of the GDPR). Sto­rage on the black­list is not time-limi­t­ed. You may object to this sto­rage pro­vi­ded that your inte­rests over­ri­de our legi­ti­ma­te inte­rest.

7. Plug­ins and Tools

You­Tube with enhan­ced pri­va­cy set­tings

This web­site embeds You­Tube vide­os. The ope­ra­tor of the site is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

We use You­Tube in enhan­ced pri­va­cy mode. Accor­ding to You­Tube, this mode ensu­res that You­Tube does not store any infor­ma­ti­on about visi­tors to this web­site befo­re they watch the video. Howe­ver, the enhan­ced pri­va­cy mode does not neces­s­a­ri­ly pre­vent data from being pas­sed on to You­Tube part­ners. Thus, You­Tube estab­lishes a con­nec­tion to the Goog­le Dou­ble­Click net­work regard­less of whe­ther you watch a video.

As soon as you start a You­Tube video on this web­site, a con­nec­tion is estab­lished with YouTube’s ser­vers. In doing so, the You­Tube ser­ver is infor­med which of our pages you have visi­ted. If you are log­ged into your You­Tube account, you allow You­Tube to link your brow­sing beha­viour direct­ly to your per­so­nal pro­fi­le. You can pre­vent this by log­ging out of your You­Tube account.

Fur­ther­mo­re, after start­ing a video, You­Tube may store various coo­kies on your device. With the help of the­se coo­kies, You­Tube can obtain infor­ma­ti­on about visi­tors to this web­site. This infor­ma­ti­on is used, among other things, to coll­ect video sta­tis­tics, impro­ve user-fri­end­li­ne­ss and pre­vent fraud attempts. The coo­kies remain on your device until you dele­te them.

Whe­re appli­ca­ble, fur­ther data pro­ces­sing ope­ra­ti­ons may be trig­ge­red after start­ing a You­Tube video, over which we have no con­trol.

The use of You­Tube is in the inte­rest of pre­sen­ting our online ser­vices in an appe­al­ing man­ner. This con­sti­tu­tes a legi­ti­ma­te inte­rest within the mea­ning of Artic­le 6(1)(f) of the GDPR. Whe­re con­sent has been sought (e.g. con­sent to the sto­rage of coo­kies), pro­ces­sing is car­ri­ed out exclu­si­ve­ly on the basis of Artic­le 6(1)(a) of the GDPR; con­sent may be with­drawn at any time.

Fur­ther infor­ma­ti­on on data pro­tec­tion at You­Tube can be found in their pri­va­cy poli­cy at: https://policies.google.com/privacy?hl=en.

Note on exten­ded pri­va­cy mode: Even in exten­ded pri­va­cy mode, You­Tube estab­lishes a con­nec­tion to the Goog­le Dou­ble­Click net­work when the page loads (even befo­re a video is play­ed). Coo­kies may be set during this pro­cess for mar­ke­ting and track­ing pur­po­ses. The embed­ding of You­Tube vide­os is the­r­e­fo­re car­ri­ed out exclu­si­ve­ly on the basis of your con­sent (Sec­tion 25(1) of the Ger­man Tele­me­dia Act (TTDSG) in con­junc­tion with Artic­le 6(1)(a) of the Gene­ral Data Pro­tec­tion Regu­la­ti­on (GDPR)).
Data is trans­fer­red to the USA on the basis of the EU Commission’s ade­quacy decis­i­on regar­ding the EU-US Data Pri­va­cy Frame­work (Artic­le 45 of the GDPR), as Goog­le LLC is cer­ti­fied under the EU-US Data Pri­va­cy Frame­work, and on the basis of EU Stan­dard Con­trac­tu­al Clau­ses (Artic­le 46(2)© of the GDPR).

Goog­le Web Fonts

Goog­le Fonts are embedded local­ly on this web­site. No con­nec­tion is made to Google’s ser­vers.

Goog­le Maps (with con­sent)

This web­site uses the Goog­le Maps map ser­vice via an API. The pro­vi­der is Goog­le Ire­land Limi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

To ensu­re data pro­tec­tion on this web­site, Goog­le Maps is dis­ab­led when you first visit this web­site. A direct con­nec­tion to Google’s ser­vers is only estab­lished once you acti­va­te Goog­le Maps yours­elf (con­sent pur­su­ant to Artic­le 6(1)(a) of the GDPR). This pre­vents your data from being trans­mit­ted to Goog­le the moment you first visit the site.

Once acti­va­ted, Goog­le Maps will store your IP address. This is then usual­ly trans­mit­ted to a Goog­le ser­ver in the USA and stored the­re. The pro­vi­der of this site has no influence over this data trans­mis­si­on once Goog­le Maps has been acti­va­ted.

Fur­ther infor­ma­ti­on on the hand­ling of user data can be found in Google’s pri­va­cy poli­cy: https://policies.google.com/privacy?hl=en .

Goog­le reCAPTCHA

Wir nut­zen „Goog­le reCAPTCHA“ (im Fol­gen­den „reCAPTCHA“) auf die­ser Web­site. Anbie­ter ist die Goog­le Ire­land Limi­t­ed („Goog­le“), Gor­don House, Bar­row Street, Dub­lin 4, Irland.

Mit reCAPTCHA soll über­prüft wer­den, ob die Daten­ein­ga­be auf die­ser Web­site (z. B. in einem Kon­takt­for­mu­lar) durch einen Men­schen oder durch ein auto­ma­ti­sier­tes Pro­gramm erfolgt. Hier­zu ana­ly­siert reCAPTCHA das Ver­hal­ten des Web­site­be­su­chers anhand ver­schie­de­ner Merk­ma­le. Die­se Ana­ly­se beginnt auto­ma­tisch, sobald der Web­site­be­su­cher die Web­site betritt. Zur Ana­ly­se wer­tet reCAPTCHA ver­schie­de­ne Infor­ma­tio­nen aus (z. B. IP-Adres­se, Ver­weil­dau­er des Web­site­be­su­chers auf der Web­site oder vom Nut­zer getä­tig­te Maus­be­we­gun­gen). Die bei der Ana­ly­se erfass­ten Daten wer­den an Goog­le wei­ter­ge­lei­tet.

Die reCAPTCHA-Ana­ly­sen lau­fen voll­stän­dig im Hin­ter­grund. Web­site­be­su­cher wer­den nicht dar­auf hin­ge­wie­sen, dass eine Ana­ly­se statt­fin­det.

Die Daten­ver­ar­bei­tung erfolgt auf Grund­la­ge von Art. 6 Abs. 1 lit. f DSGVO. Der Web­site­be­trei­ber hat ein berech­tig­tes Inter­es­se dar­an, sei­ne Web­an­ge­bo­te vor miss­bräuch­li­cher auto­ma­ti­sier­ter Aus­spä­hung und vor SPAM zu schüt­zen.

Wei­te­re Infor­ma­tio­nen zu Goog­le reCAPTCHA ent­neh­men Sie den Goog­le-Daten­schutz­be­stim­mun­gen und den Goog­le Nut­zungs­be­din­gun­gen unter fol­gen­den Links: https://policies.google.com/privacy?hl=de und https://policies.google.com/terms?hl=de.

8. Our own ser­vices

Hand­ling of appli­cant data

We offer you the oppor­tu­ni­ty to app­ly for a job with us (e.g. by email, post or via our online appli­ca­ti­on form). Below, we pro­vi­de infor­ma­ti­on on the scope, pur­po­se and use of the per­so­nal data coll­ec­ted from you during the appli­ca­ti­on pro­cess. We assu­re you that the coll­ec­tion, pro­ces­sing and use of your data is car­ri­ed out in accordance with appli­ca­ble data pro­tec­tion law and all other legal pro­vi­si­ons, and that your data will be trea­ted as strict­ly con­fi­den­ti­al.

Scope and pur­po­se of data coll­ec­tion

When you sub­mit an appli­ca­ti­on to us, we pro­cess your asso­cia­ted per­so­nal data (e.g. cont­act and com­mu­ni­ca­ti­on details, appli­ca­ti­on docu­ments, notes taken during inter­views, etc.) to the ext­ent neces­sa­ry to deci­de on the estab­lish­ment of an employ­ment rela­ti­onship. The legal basis for this is Sec­tion 26 of the BDSG-neu under Ger­man law (initia­ti­on of an employ­ment rela­ti­onship), Artic­le 6(1)(b) of the GDPR (gene­ral con­tract initia­ti­on) and – pro­vi­ded you have given your con­sent – Artic­le 6(1)(a) of the GDPR. Con­sent may be with­drawn at any time. Your per­so­nal data will be pas­sed on within our com­pa­ny exclu­si­ve­ly to tho­se per­sons invol­ved in pro­ces­sing your appli­ca­ti­on.

If your appli­ca­ti­on is suc­cessful, the data you have sub­mit­ted will be stored in our data pro­ces­sing sys­tems on the basis of Sec­tion 26 of the BDSG-neu and Artic­le 6(1)(b) of the GDPR for the pur­po­se of car­ry­ing out the employ­ment rela­ti­onship.

Data reten­ti­on peri­od

If we are unable to offer you a posi­ti­on, you decli­ne a job offer or with­draw your appli­ca­ti­on, we reser­ve the right to retain the data you have pro­vi­ded for up to 6 months from the end of the appli­ca­ti­on pro­cess (rejec­tion or with­dra­wal of the appli­ca­ti­on) on the basis of our legi­ti­ma­te inte­rests (Artic­le 6(1)(f) of the GDPR). The data will then be dele­ted and the phy­si­cal appli­ca­ti­on docu­ments des­troy­ed. The reten­ti­on ser­ves, in par­ti­cu­lar, as evi­dence in the event of a legal dis­pu­te. If it is appa­rent that the data will be requi­red after the expiry of the 6‑month peri­od (e.g. due to an impen­ding or pen­ding legal dis­pu­te), dele­ti­on will only take place once the pur­po­se for fur­ther reten­ti­on no lon­ger appli­es.

Data may also be retai­ned for a lon­ger peri­od if you have given your con­sent (Art. 6(1)(a) GDPR) or if sta­tu­to­ry reten­ti­on obli­ga­ti­ons pre­vent dele­ti­on.