1. processing of log files

1.1 Scope of processing
Each time you visit our website, our system automatically collects data and information from the computer system with which you as the data subject access our website. This data is stored and processed on our server in a log file (so-called log files). The following personal data is collected:

(1) Browser type and version used
(2) Operating system of the user
(3) Internet service provider of the user
(4) IP address of the user
(5) Date and time of access
(6) Websites from which the user’s computer system accessed our website
(7) Websites that are accessed by the user’s computer system via our website

1.2 Purpose of processing
The IP address is a string of numbers that uniquely identifies your computer system at the time you access our website. The IP address is used to receive and SEND data packets and enables a user to access a website. The temporary storage of the IP address on our server is necessary in order to transmit the page content to the user’s computer system after accessing our website so that the user can perceive the content.

Storage in log files takes place to ensure the functionality of the website and to be able to detect any transmission errors that may occur. We also use this data to optimize the website and to ensure the security of our information technology systems. The data is not analyzed for marketing purposes in this context.

1.3 Legal basis for processing
The processing is based on our legitimate interests in accordance with Art. 6 para. 1 p. 1 lit. f GDPR.

1.4 Legitimate interests
If the processing is based on Art. 6 para. 1 p. 1 lit. f GDPR, we are obliged to inform you of the legitimate interests pursued by us. We have a legitimate interest in processing the above-mentioned personal data for the above-mentioned purposes in order to optimize the public image of our company and our affiliated companies.

1.5 Recipients or categories of recipients
Your personal data will be passed on to our IT department and to our contractors who are commissioned to host and provide the IT resources for the operation of the website.

1.6 Transfer to third countries
We do not intend to transfer your personal data abroad.

1.7 Duration of storage
Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. The user’s IP address must remain stored for the duration of the session in order to enable use of the website.

If your data is stored in the log file, the data collected therein will be deleted after seven days at the latest. Storage beyond this is possible. In this case, however, the IP addresses of the users are deleted or anonymized so that it is no longer possible to identify the calling computer system.

1.8 Right to object and right to erasure
As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) GDPR. 1 p. 1 lit. e or f GDPR (Art. 21 (1) GDPR). In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject, or the processing serves the establishment, exercise or defense of legal claims.

The processing of personal data for the provision of the website and for the creation of the log file is absolutely necessary for the operation of the website. The user can therefore not object to this type of processing.

2. data processing through cookies

2.1 Scope of processing

We use so-called cookies on our website. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system as soon as a user accesses our website. Cookies contain characteristic character strings that enable the browser to be uniquely identified when the website is called up again.

2.2 Purpose of the processing

We use cookies to make our website more user-friendly. Some page elements of our website require that the accessing Internet browser can be identified even after a page change within our website.

The purpose of using these technically necessary cookies (in contrast to cookies that are only used for the purpose of analysis and the creation of user profiles for advertising, see section IV below) is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. This requires the Internet browser to be recognized even after a page change. In these technically necessary cookies, data is collected, stored and transmitted to us in order to enable the provision of the website on the basis of our WordPress system, to be able to display YouTube videos as animations in the page background if necessary and to store whether you agree to the use of your personal data for analysis, advertising and transmission purposes.

The user data collected by technically necessary cookies is not used to create user profiles.

2.3 Legal basis of the processing

The processing is based on our legitimate interests in accordance with Art. 6 para. 1 p. 1 lit. f GDPR.

2.4 Legitimate interests

We have a legitimate interest in processing the personal data (Section 2.1) for the purposes (Section 2.2) in order to round off our external presentation and our market presence with a website that complies with the current state of the art and the requirements of the General Data Protection Regulation. This includes providing a website that offers users the greatest possible ease of use and provides information and multimedia content about us that is easy to use and tailored to their interests and needs.

2.5 Recipients or categories of recipients

Your cookie data is passed on to our IT department and to our contractors who are commissioned to host and provide the IT resources.

2.6 Transfer to third countries

We do not intend to transfer your personal data abroad.

2.7 Duration of storage

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of the processing of data for the provision of the website, this is the case when the respective session has ended. Cookies are stored on the user’s computer system and transmitted by it to our server. As a user, you therefore also have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be automated.

2.8 Possibility of objection and removal

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) GDPR. 1 p. 1 lit. e or f GDPR (Art. 21 (1) GDPR). In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject, or the processing serves the establishment, exercise or defense of legal claims.

If the transmission of cookies for our website is deactivated, it may no longer be possible to use all functions of the website to their full extent.

3. processing of inquiries by post, e-mail, fax, phone, SMS

3.1 Scope of processing

You can reach us by post, e-mail, fax, phone or SMS. Simple requests that do not require you to be identified can be made anonymously. If your identification is required, we may collect the following data: First name, surname, street and house number, zip code and town, phone number, your message to us, as well as technical information about the transmission and the time of SENDing.

3.2 Purpose of the processing

Your personal data will be processed in order to identify you, to assign your message to an existing contract or other business relationship, to store it, to reply to it or, if necessary, to forward it. Your personal data that you transmit to us via the above-mentioned electronic communication channels will only be processed for the purpose of processing and responding to your inquiry.

3.3 Legal basis of the processing

The processing of your above-mentioned personal data may be necessary in individual cases for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken at your request, Art. 6 para. 1 p. 1 lit. b GDPR.

The processing of personal data may also be based on our legitimate interests in accordance with Art. Art. 6 para. 1 p. 1 lit. f GDPR must take place.

3.4 Legitimate interests

We have a legitimate economic interest in being available via our electronic means of communication for processing and responding to inquiries with an interest in our services or other contracts. We also have a legitimate interest in processing your data if, for example, you are a managing director, employee or other representative of our contractual partner. We also process your data for the purpose of fulfilling the contract, asserting or defending against claims.

3.5 Recipients or categories of recipients

Your personal data is generally processed by us. We only pass on your personal data that we have received via electronic means of communication to external recipients if this is necessary in individual cases in order to process your request.

3.6 Transfer to third countries

We do not transfer your personal data abroad unless you agree to this.

3.7 Duration of storage

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected and due to contractual, commercial or tax retention obligations. Invoice documents are kept for 10 years, commercial letters for 6 years.

3.8 Possibility of objection and removal

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) GDPR. 1 p. 1 lit. e or f GDPR (Art. 21 (1) GDPR). In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as the data subject, or the processing serves the establishment, exercise or defense of legal claims.

3.9 Obligation to make data available (Art. 13 II lit. e GDPR)

If your personal data is required to conclude a contract using electronic means of communication, your data is required to conclude a contract. Otherwise, the provision of your personal data is voluntary. If you do not provide your personal data, we may not be able to process or respond to your inquiries, applications or requests.

4. processing through newsletters and instant messaging

4.1 Scope of processing

There are various ways to subscribe to our newsletter or become a member of an instant messaging group (henceforth: group). When you first register to receive a newsletter, the data from the input screen is transmitted to us: Title, first name, surname, e-mail address, details of which newsletters are requested, date of access and the IP address of the data subject’s computer system.

When we invite you to become a member of a group, we collect your first and last name and your phone number. Groups can be provided via SMS services, e-mail distribution lists, WhatsApp, Facebook and other providers.

4.2 Purpose of the processing

Personal data is collected and processed during the initial registration for newsletters or when registering for a group in order to SEND the data subject a confirmation message. In addition, the information set out in para. 4.1 in order to SEND the newsletter or group messages.

4.3 Legal basis of the processing

Before the processing of your data begins, you will be informed in detail about the collection of your data. Registration for the newsletter or registration for a group requires your express consent. The legal basis for the processing of data when registering for a newsletter or group is Art. 6 para. 1 p. 1 lit. a GDPR.

4.4 Recipients or categories of recipients

Your data will be passed on to our IT department and to our contractors who are commissioned to host and provide the IT resources.

4.5 Transfer to third countries

Your personal data will only be transferred to third countries if you register for a group.

If you have given us your consent to process your data, in particular to pass it on to other networks, we will transfer your personal data to service providers of the groups using these applications. The service providers Facebook Inc., WhatsApp Inc. and LinkedIn Corp. are based in the USA. The USA is a third country without an adequate level of data protection. However, the adequate level of protection for the transfer of personal data to the USA is guaranteed by an adequacy decision of the Commission pursuant to Art. 45 para. 9 GDPR. The adequacy decision (EU-US Privacy Shield) requires self-certification by the US companies subject to this decision. The controllers Facebook Inc, WhatsApp Inc and LinkedIn Corporation have submitted to this decision.

4.6 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. Your e-mail address will therefore only be stored for as long as your subscription to the newsletter is active. As soon as the user withdraws their consent, their personal data will be deleted. The other personal data collected during the registration process is generally deleted after a period of seven days.

If you withdraw your consent for us to process your data for membership of a group, we will delete your personal data from our end devices. The service provider of the group is solely responsible for deleting your user account.

4.7 Technical and organizational measures

Our website has transport encryption (SSL) so that personal data entered on our website, e.g. when registering for a newsletter, cannot be viewed by unauthorized third parties during transport.

4.8 Possibility of objection and removal; revocation of consent under data protection law

You can cancel your subscription to the newsletter at any time. For this purpose, you will find a corresponding link in every newsletter.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a data subject, or the processing serves the establishment, exercise or defense of legal claims.

By leaving the group, you will no longer receive group messages from us. You can revoke your consent to the processing, in particular the storage of your data on our end devices, at any time. To do so, please contact our data protection officer, stating the name of the group.

5. processing by Google Web Fonts

5.1 Scope of processing

On our website, we have used fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is responsible for the so-called Google Web Fonts. More information: https://www.google.com/policies/privacy/.

According to Google, when web fonts are used, the IP address and information about the websites last visited by users of our site are transmitted. However, this data is only aggregated so that Google cannot draw any conclusions about individual users.

5.2 Purpose of the processing

We use Google Web Fonts because we like the fonts and we want to present our users with an appealingly designed website in order to increase interest in our services.

5.3 Legal basis of the processing

The legal basis for the processing of data by Google Web Fonts is Art. 6 para. 1 p. 1 lit. f. GDPR.

5.4 Legitimate interests

We have a legitimate, economic interest in integrating Google Web Fonts in order to round off our external presentation and our market presence with a website that corresponds to the current state of the art and our ideas of an aesthetic website.

5.5 Recipients or categories of recipients

We do not process any personal data that is collected in the context of Google Web Fonts. By integrating Google Web Fonts, personal data is transmitted to Google.

5.6 Transfer to third countries

Your personal data will be transferred to Google Inc. in the USA.

The USA is a third country without an adequate level of data protection. However, the appropriate level of protection for the transfer of personal data to the USA is determined by an adequacy decision of the Commission pursuant to Art. 6 para. 1 lit. a GDPR. Art. 45 para. 9 GDPR is guaranteed. The adequacy decision (EU-US Privacy Shield) requires self-certification by the US companies subject to this decision. Google Inc. has submitted to this resolution.

5.7 Duration of storage

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. We do not process any data from Google Web Fonts. You can find more information on how long data from Google Web Fonts is stored at Google at: https://www.google.com/policies/privacy/.

5.8 Possibility of objection and removal; revocation of consent under data protection law

You have the right to object to the processing by Google Web Fonts. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a data subject, or the processing serves the establishment, exercise or defense of legal claims.

The objection must be asserted against Google. Please click here: Google opt-out: https://adssettings.google.com/authenticated.

6 Social media

6.1 Social media wall plugin

We use a plugin of the internet service walls.io on our website.
is operated by Social Software Development GmbH, Andreasgasse 6, Top 1, 1070 Vienna, Austria, Europe
When these plugins are called up, the IP address and session cookie information are transmitted to Walls.io, exclusively due to technical necessities for offering the service.
This data is only stored by Walls.io in Europe and is not passed on to third parties.
For more information on data processing by walls.io, please refer to walls.io’s privacy policy at https://walls.io/privacy.

7 Data processing with Borlabs

1. a) Scope of the processing

The controller uses the services of the company.
Borlabs, Benjamin A. Bornschein (owner), Rübenkamp 32, 22305 Hamburg, Germany, a cookie banner.
Cookies and IP addresses are processed through the use of a cookie banner.

Borlabs’ data protection information is available at: https://de.borlabs.io/datenschutz/.

The Borlabs Data Protection Officer can be contacted via datenschutz@borlabs.io or the Borlabs support ticket system (https://de.borlabs.io/support/).

1. b) Purpose of the processing

By using the cookie banner, the user gives consent to the controller to process their data.

1. c) Legal basis of the processing

The processing of the data is based on the protection of legitimate interests, Art. 6 para. 1 p. 1 lit. f GDPR.

1. d) Legitimate interests

The cookie banner is used because the controller has a legitimate economic interest in asking you to allow it to process data, including for analysis and marketing applications, so that the controller can optimize its website.

1. e) Recipients or categories of recipients

The personal data will be transferred to the contractor, Fa.
Borlabs, Benjamin A. Bornschein (owner), Rübenkamp 32, 22305 Hamburg, Germany.

1. f) Transfer to third countries

The controller will not transfer your personal data abroad unless you consent to this.

1. g) Duration of storage

Your data will be deleted as soon as you request the controller to delete it or delete the Borlabs cookie yourself or if it is not required to achieve the purpose for which it was collected.
Statutory retention periods remain unaffected.

1. h) Possibility of objection and removal

As a user, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 p. 1 lit. e or f GDPR (Art. 21 (1) GDPR).

In this case, the controller will no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms as a user or for the establishment, exercise or defense of legal claims.

1. i) Obligation to make available

The provision of your personal data is voluntary.
If you do not provide it, you may not be able to click away the cookie banner.

8 Data processing with Google Maps

1. a) Scope of the processing

We use the Google Maps service from Google on our website.
The company is responsible for this.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for this.

Google Maps is a web service for the visual display of interactive (land) maps and geographical information.
We can make our location information available to the users of our website and thus make it easier for them to find us.

The following data is processed when the sub-page in which the maps from Google Maps are integrated is accessed: IP address, time spent on the website and mouse movements made by the user.
The processing takes place regardless of whether the user is logged into a Google user account or whether such an account exists at all.

Google’s privacy policy is available at: http://policies.google.com/privacy.

The additional terms of use for Google Maps are available at https://www.google.com/intl/de_US/help/terms_maps/.

You can contact Google’s data protection officer at: https://support.google.com/policies/contact/general_privacy_form.

1. b) Purposes of the processing

We use the Google Maps service to provide users of our website with convenient use of the map function, including the option of creating directions.

1. c) Legal bases of the processing

Data processing is carried out on the basis of Art. 6 para.
1 lit.
a and f GDPR.

1. d) Legitimate interests

We have a legitimate interest in providing our clients with directions and giving them the option of conveniently integrating this information into a route plan.

1. e) Recipients or categories of recipients

Your personal data, unless they are already anonymous by means of IP anonymization, will only be processed by us and by Google.

1. f) Transfer to third countries

The service provider is also based in the USA. The USA is a third country without an adequate level of data protection. However, the appropriate level of protection for the transfer of personal data to the USA is determined by an adequacy decision of the Commission pursuant to Art. 6 para. 1 lit. a GDPR. Art. 45 para. 9 GDPR is guaranteed. The adequacy decision requires self-certification by the US companies subject to this decision.
The service provider is certified accordingly.
The third country transfer is also based on the standard contractual clauses of the EU Commission, https://privacy.google.com/businesses/controllerterms/mccs/.

The USA is a third country without an adequate level of data protection. However, the adequate level of protection for the transfer of personal data to the USA is guaranteed by the Commission’s adequacy decision pursuant to Art. 45 GDPR.
The current adequacy decision, the EU-US Data Privacy Framework, requires self-certification by the US companies subject to this decision.
Google LLC has submitted to this decision.

1. g) Duration of storage

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected and due to contractual, commercial or tax retention obligations.

1. h) Possibility of objection and removal

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) GDPR. 1 p. 1 lit. e or f GDPR (Art. 21 (1) GDPR). In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a user, or the processing serves the establishment, exercise or defense of legal claims.

Insofar as we base the processing of your data on your consent or on a contract, you do not have the right to object.

9 Data processing with YouTube

The controller uses Google services and processes your personal data by integrating Google plugins. Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is responsible for this.

The service is used to embed videos from the website www.youtube.com. The operator of the website is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA.

When plugins are integrated, your IP address is transmitted to the respective plugin provider.
In addition, if you use a plugin, e.g. by playing a video, the provider may store cookies on your end device.
However, Google will also process personal data for web analysis and reach measurement and for marketing and advertising purposes via this plugin.
The following data is processed: Cookies, IP addresses and information in connection with the use of the website, e.g. device information or metadata.

Google is primarily responsible for the processing of its users’ personal data, as it is primarily Google that decides on the purposes and means of processing.

Google’s privacy policy is available at: http://policies.google.com/privacy.

You can contact Google’s data protection officer at: https://support.google.com/policies/contact/general_privacy_form.

1. b) Purpose of the processing

As a rule, Google processes your personal data for market research and advertising purposes and, if necessary, to fulfill the user contract concluded with you in order to provide and maintain the services.
The controller uses the above-mentioned Google services to present its website in an appealing manner.

1. c) Legal basis of the processing

If you are a user of Google’s services, you have given Google your consent to the processing of your personal data for one or more specific purposes as part of your user contract.
In this case, this consent constitutes the legal basis in accordance with Art. Art. 6 para. 1 p. 1 lit. a GDPR.
Google may process your personal data to the extent necessary for the conclusion and fulfillment of your user contract in accordance with. Art. 6 para. 1 p. 1 lit. b GDPR is required.

The data processing is also based on the legitimate interests of the controller in accordance with. Art. 6 para. 1 lit.
f GDPR is based.

1. d) Legitimate interests

The controller has a legitimate interest in an appealing presentation of its online offer in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 lit. f GDPR.

1. e) Recipients or categories of recipients

This data is transmitted to the processors, Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland and, if applicable, to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America.

1. f) Transfer to third countries

The service provider is also based in the USA. The USA is a third country without an adequate level of data protection. However, the appropriate level of protection for the transfer of personal data to the USA is determined by an adequacy decision of the Commission pursuant to Art. 6 para. 1 lit. a GDPR. Art. 45 para. 9 GDPR is guaranteed. The adequacy decision requires self-certification by the US companies subject to this decision.
The service provider is certified accordingly.
The third country transfer is also based on the standard contractual clauses of the EU Commission, https://privacy.google.com/businesses/controllerterms/mccs/.

The USA is a third country without an adequate level of data protection. However, the adequate level of protection for the transfer of personal data to the USA is guaranteed by the Commission’s adequacy decision pursuant to Art. 45 GDPR.
The current adequacy decision, the EU-US Data Privacy Framework, requires self-certification by the US companies subject to this decision.
Google LLC has submitted to this decision.

1. g) Duration of storage

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected and due to contractual, commercial or tax retention obligations.

1. h) Possibility of objection and removal

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) GDPR. 1 p. 1 lit. e or f GDPR (Art. 21 (1) GDPR). In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a user, or the processing serves the establishment, exercise or defense of legal claims.

Insofar as we base the processing of your data on your consent or on a contract, you do not have the right to object.

Data processing with Vimeo

1. a) Scope of the processing

The controller uses services of the provider Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA (“Vimeo”). As soon as you visit the controller’s website equipped with a Vimeo plugin, the Vimeo servers are informed of your IP address, technical information about your browser type, your operating system or basic device information as well as which website (equipped with a Vimeo plugin) you have visited and what activities you have carried out there. The information about your web activities includes the session duration, the bounce rate or which button with a built-in Vimeo function you clicked. This information is transmitted to Vimeo even if you do not have a Vimeo account or are not logged in to Vimeo. If you are logged in to Vimeo, you enable Vimeo to assign your surfing behavior directly to your personal profile.

Vimeo’s privacy policy is available at https://vimeo.com/privacy.

You can contact Vimeo’s data protection officer at Privacy@vimeo.com.

1. b) Purposes of the processing

Vimeo is used to play videos and embed them in the website.

1. c) Legal bases of the processing

Data processing is carried out on the basis of Art. 6 para.
1 lit.
a and f GDPR.

1. d) Legitimate interests

We have a legitimate interest in presenting video content.

1. e) Recipients or categories of recipients

Your personal data will be processed by us and Vimeo.

1. f) Transfer to third countries

The service provider is also based in the USA. The USA is a third country without an adequate level of data protection. However, the appropriate level of protection for the transfer of personal data to the USA is determined by an adequacy decision of the Commission pursuant to Art. 6 para. 1 lit. a GDPR. Art. 45 para. 9 GDPR is guaranteed. The adequacy decision requires self-certification by the US companies subject to this decision.
The service provider is certified accordingly.

1. g) Duration of storage

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected and due to contractual, commercial or tax retention obligations.

1. h) Possibility of objection and removal

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) GDPR. 1 p. 1 lit. e or f GDPR (Art. 21 (1) GDPR). In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a user, or the processing serves the establishment, exercise or defense of legal claims.

Insofar as we base the processing of your data on your consent or on a contract, you do not have the right to object.

10 Data processing with Google ReCapture

1. a) Scope of the processing

We use the ReCapture service from Google on our website.
The company is responsible for this.
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for this.

Google Maps is a web service for the visual display of interactive (land) maps and geographical information.
We can make our location information available to the users of our website and thus make it easier for them to find us.

Google reCAPTCHA is used to check whether the data input on the controller’s website is made by a human or by an automated program.
For this purpose, Google reCAPTCHA analyzes the user’s behavior based on various characteristics.

The following data is processed: IP address, time spent on the website and mouse movements made by the user.

Google’s privacy policy is available at: http://policies.google.com/privacy.

You can contact Google’s data protection officer at: https://support.google.com/policies/contact/general_privacy_form.

1. b) Purposes of the processing

We use the Google Maps service to provide users of our website with convenient use of the map function, including the option of creating directions.

1. c) Legal bases of the processing

Data processing is carried out on the basis of Art. 6 para.
1 lit.
a and f GDPR.

1. d) Legitimate interests

We have a legitimate interest in providing our clients with directions and giving them the option of conveniently integrating this information into a route plan.

1. e) Recipients or categories of recipients

Your personal data, unless they are already anonymous by means of IP anonymization, will only be processed by us and by Google.

1. f) Transfer to third countries

The service provider is also based in the USA. The USA is a third country without an adequate level of data protection. However, the appropriate level of protection for the transfer of personal data to the USA is determined by an adequacy decision of the Commission pursuant to Art. 6 para. 1 lit. a GDPR. Art. 45 para. 9 GDPR is guaranteed. The adequacy decision requires self-certification by the US companies subject to this decision.
The service provider is certified accordingly.
The third country transfer is also based on the standard contractual clauses of the EU Commission, https://privacy.google.com/businesses/controllerterms/mccs/.

The USA is a third country without an adequate level of data protection. However, the adequate level of protection for the transfer of personal data to the USA is guaranteed by the Commission’s adequacy decision pursuant to Art. 45 GDPR.
The current adequacy decision, the EU-US Data Privacy Framework, requires self-certification by the US companies subject to this decision.
Google LLC has submitted to this decision.

1. g) Duration of storage

Your personal data will be deleted as soon as it is no longer required for the purpose for which it was collected and due to contractual, commercial or tax retention obligations.

1. h) Possibility of objection and removal

As the data subject, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Article 6 (1) GDPR. 1 p. 1 lit. e or f GDPR (Art. 21 (1) GDPR). In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a user, or the processing serves the establishment, exercise or defense of legal claims.

Insofar as we base the processing of your data on your consent or on a contract, you do not have the right to object.

11 Data processing for job advertisements and applicants (Personio)

1. a) Scope of the processing

The controller receives applications via its career website, by e-mail or by post.
As part of the application process, the controller processes the personal data that identifies you.
These are
in particular
Name (first name and surname), e-mail address, phone number(s), LinkedIn profile if applicable, information from or via the channel how you became aware of the controller.
In addition, the controller stores information on when you would be available for the vacant position, salary expectations and the data you have provided containing your application documents,
including
Date of birth, information about your professional and, if applicable, private career (certificates, reference letters, portrait pictures, information about your marital status or private situation).

1. b) Purpose of the processing

The controller processes the above-mentioned personal data in order to identify you, to check your application, to contact you or, if necessary, to hire you as an employee.

1. c) Legal basis of the processing

Data processing is necessary in order to enter into an employment contract with you in accordance with Art. Art. 6 para. 1 p. 1 lit. b GDPR. By SENDing your documents, you also implicitly give the controller your consent to process your data for these purposes.
This data processing is based on your consent, Art. 6 para. 1 p. 1 lit. a GDPR.

In the event that you are not (or no longer) considered for the vacant position, you can give your consent to the controller to store your personal data in its database (“Talent Pool”) until you withdraw your consent so that it can consider you for subsequent application procedures on the basis of your application documents and contact you as a potential applicant (Art. 6 para. 1 sentence 1 lit. a GDPR).
This consent is voluntary and can be revoked at any time by SENDing an email to info@lobeco.de.

Your application documents will also be stored until it has been ensured that there are no legal claims preventing deletion.
This data processing is based on the exercise of legitimate interests in accordance with Art. Art. 6 para. 1 p. 1 lit. f GDPR is supported.

1. d) Legitimate interests

The controller has a legitimate interest in transmitting your documents to its professional secrecy officers for the purpose of examining the legal situation in order to defend against or assert claims.

1. e) Recipients or categories of recipients

Only authorized employees from the HR department of the controller or, e.g. in the case of interviews, the employees involved in the application process have access to your personal data. The employees of the controller who deal with HR issues have undertaken in writing to maintain data secrecy and have been informed of the legal consequences of violations. In the event that it is necessary to examine the legal situation or to defend against or assert (labor) law claims, the controller’s lawyers will be granted access to your data as holders of professional secrecy and will process it accordingly.

Application procedures are handled by the controller’s contractor, Personio SE & Co KG, Seidlstraße 3, 80335 Munich, Germany.

1. f) Duration of storage

The controller will retain your documents, insofar as this is necessary, for as long as it is subject to retention obligations in the respective individual case, Art. 6 para. 1 p. 1 lit. c GDPR.
Personal data is stored exclusively for the purpose of filling the vacant position for which you have applied.
Your data will be stored for a period of 180 days after the end of the application process.
This is usually done to fulfill legal obligations or to defend against any claims arising from legal regulations.
The controller is then obliged to delete or anonymize your data.
In this case, the data will only be available to him as so-called metadata without direct personal reference for statistical evaluations (e.g. proportion of women or men in applications, number of applications per period, etc.).

If the controller unfortunately had to decide against employment, your personal data will be restricted (Art. 18 GDPR).
In the restricted form, your data will be stored for a period of 6 months from receipt of the rejection.

If you receive an offer of employment with the controller as part of the application process and accept it, the controller will store the personal data collected as part of the application process for the duration of the employment relationship and beyond for as long as required by statutory retention obligations.

12 Use of SalesViewer® technology

This website uses SalesViewer® technology from SalesViewer® GmbH to collect and store data for marketing, market research and optimization purposes on the basis of the website operator’s legitimate interests (Art. 6 (1) (f) GDPR).

For this purpose, a javascript-based code is used to collect company-related data and use it accordingly.
The data collected with this technology is encrypted using a non-reversible one-way function (so-called hashing).
The data is immediately pseudonymized and is not used to personally identify the visitor to this website.

The data stored within the framework of Salesviewer® will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

You can object to the collection and storage of data at any time with effect for the future by clicking on this link https://www.salesviewer.com/opt-out to prevent the collection by SalesViewer® within this website in the future.
An opt-out cookie for this website will be stored on your device.
If you delete your cookies in this browser, you will need to click this link again.