Personal data, in the context of the data protection information presented here, includes all data with reference to your person.
This covers in particular, contractual data including your contact data, your settlement data, plus details on communication with you (“personal data”). We process your personal data in accordance with the applicable statutory data protection requirements for the purposes listed below.

Some of the processes or services are performed by carefully selected and contracted service providers. We transmit or receive personal information about these service providers solely based on a processing agreement. If the seat of a service provider is located outside the European Union or the European Economic Area, a third country transmission takes place. With these service providers, data protection agreements that comply with the legal requirements are established in order to establish an adequate level of data protection and corresponding guarantees are agreed.

Information on your rights
You have the right

• to request confirmation from us as to whether your personal information is being processed;if this is the case, you are entitled to obtain details about this personal data; you may also receive the information specified in Art. 15 of the GDPR.
• to request that we correct your data if it is deemed to be incorrect, inapplicable and/or incomplete. Such rectification of data also covers duties of completion through explanation or notification.
• to request that we delete personal data relevant to you without delay if one of the reasons specified in Art. 17 of the GDPR applies. Unfortunately, we may not delete data that is subject to a legal retention period. If you would prefer that we never collect data from you or never contact you again in the future, we shall store such relevant contact details in a blacklist.
  to revoke any consent given by you with future effect and without any negative consequences for you.
• to request from us that processing be restricted if one of the prerequisites listed in Art. 18 of the GDPR is provided.
• to object at any time to the processing of personal data relevant to you on grounds relating to your particular situation. We shall no longer process personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds to do so, which override your interests, rights and freedoms, or such processing is required for the establishment, exercise or defence of legal claims (Art. 21 of the GDPR).
• to request that the data relevant to you be issued in a commonly used electronic and machine-readable format. This also covers the issuance (if possible) to another responsible party specified by you directly. (Art. 20 of the GDPR)
• without prejudice to another administrative or judicial remedy and if you believe that the processing of your personal data is in breach of the GDPR, to file a complaint with
• our data protection officer: datenschutz@gin.de or bypost (see Site Notice)
• to assertclaims vis-à-vis the supervisory authority in the member state of your place ofstay, your place of work or the location where the alleged violation tookplace.

If you have any questions or comments on data protection (for example,with regard to information about/updating your personal data), please send themto the following email address datenschutz@gin.de or by post (see Site Notice) using the keywords “Data Protection”.

Deletion of your data
Unless otherwise stipulated in the more detailed privacy statements, we will delete your personal information if the contractual relationship with you has terminated, you have exercised your right to cancellation, all mutual claims have been fulfilled and there are no other statutory retention requirements or legal justification for storage.

Changes to the privacy policy
We reserve the right to change our privacy policy if necessary and publish it here. Please check this page regularly. The updated statement will enter into force upon publication. If we have already collected data about you that are affected by the change and / or are subject to a statutory information obligation, we will also inform you about significant changes to our privacy policy.

We collect and use personal data from our users strictly only to the extent necessary for providing a functional website as well as our content and products/services. The collection and use of our users’ personal data generally only takes place with the user’s consent. An exception is made in cases where it is actually impossible to obtain priorconsent and the processing of the data is permitted by statutory regulations.

Legal basis for the processing of your data:

• In cases where we obtain consent from data subjects for processing operations on personal data, Art. 6 (1) a of the EU General Data Protection Regulation (GDPR) serves as the basis.
• When processing personal data necessary for the performance of a contract to which the data subject is party, Art. 6 (1) b of the GDPR serves as the legal basis. This also applies to processing operations which are necessary to carry out steps prior to entering into a contract.
• In cases where processing of personal data is necessary to comply with a legal obligation which our company is subject to, Art. 6 (1) c of the GDPR serves as the legal basis.
• In cases where vital interests of the data subject or another natural person make it necessary to process personal information, Art. 6 (1) d of the GDPR serves as the legal basis.
• If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and the interests, fundamental rights, and fundamental freedoms of the data subject do not override the interests of the former, Art. 6 (1) f of the GDPR shall serve as the legal basis for the processing.

 

In particular, legitimate interests may include:

• Replying to enquiries;
• Carrying out direct marketing measures;
• Provision of services and/or information intended for you;
• The processing and transfer of personal data for internal and/or administrative purposes;
• The operation and administration of our website;
• The technical support of users;
• Avoiding and detecting cases of fraud and crimes;
• Protecting against non-payment by obtaining credit reports in the case of enquiries regarding deliveries and performance; and or
• Ensuring network and datasecurity, provided that these interests comply with the corresponding applicable laws and the rights and freedoms of the user;

Usage data/server log files
Each time our webpages are accessed, our systems automatically collect data and information from the computer system of the accessing computer.
In this case, the following types of data are collected: Browser type, version used, operating system of the user, internet service provider, IP address of the user, date and time accessed, websites from which the user’s system are directed to our website or which the user is directed to from our website.

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) f of the GDPR with the aforementioned legitimate interests.
The temporary storage of the IP address by the system is necessary to make it possible for the website to be delivered to the user’s computer. For this purpose, the IP address of the user must remain saved for the duration of the session.

Storage in log files takes place to ensure the functionality of the website. Furthermore, we use the data to optimise the website and to ensure the safety of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. These purposes also justify our legitimate interests to perform data processing pursuant to Art. 6 (1) f of the GDPR. The data will be deleted assoon as they are no longer necessary to fulfil the purpose of their collection. In the case of the collection of the data for the provision of the website, this is the case when the respective session is terminated. The collection of the data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Furthermore, we reserve the right to review the files when concrete indications exist which point to a justified suspicion of unlawful use or a specific attack on the pages. In this case, it is within our legitimate interests to perform processing for the purposes of clarifying the issue and the criminal prosecution of such attacks and unlawful use.

Use of cookies
We use cookies. Cookies are text files which are stored in the internet browser and/or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters which makes it possible to uniquely identify the browser when the website is accessed again in future. We use cookies to make our website more user-friendly. A number of elements of our website make it necessary to be able to identify the accessing browser even after switching to a different page. In this case, the following data is stored in the cookies and transmitted: Language settings, items in a shopping cart, login information etc.

Furthermore, on some of our websites, we also use cookies which make it possible to analyse the surfing behaviour of users. In this manner, search terms entered, the frequency of pages accessed, the use of website functions etc. are transmitted. The data on users collected in this fashion are pseudonymised via technical measures. Hence, it is no longer possible to reference the data to the accessing user. The data will not be stored with the user’s other personal data.

Legal basis for data processing via cookies: The legal basis for the processing of personal data via the use of cookies is Art. 6 (1) f GDPR. The legal basis for the processing of personal data via the use of technically necessary cookies is Art. 6 (1) f GDPR. The legal basis for the processing of personal data via the use of cookies for purposes of analysis, provided that the corresponding consent has been obtained from the user, is Art. 6 (1) a GDPR.

The purpose of the use of technically necessary cookies is to simplify the use of websites for users. A number of the functions of our website cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognised again even after switching to a different page. We require cookies for the provision of the shopping cart, applying language settings, remembering search terms etc. The use of the analysis cookies takes places with the purpose of improving the quality of our website and its content. Via the analysis cookies, we find out how the website is used, allowing us to constantly optimise our offerings. These purposes also justify our legitimate interests to perform data processing. When our website is accessed, the user is informed of the use of cookies for the purposes of analysis and his consent obtained for the processing of the personal data used in this context. Reference to this privacy statement is also made in this context. Cookies are stored on the user’s computer and transmitted from it to our website. Hence, you as a user also have full control over the use of cookies. By modifying the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies which have already been saved can be deleted at any time. This can also take place in an automated fashion. If cookies are deactivated for our website, it may no longer be possible to use the full extent of all functions of the website. You can manage cookies from a number of US companies via the American website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/uk/your-ad-choices/.

Integration of Google Maps and YouTube
On this website we use the services of YouTube and Google Maps . This allows us to show you videos and interactive maps directly on the website and enables you to use the map function conveniently.
By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In the process, personal data is transmitted to Google (IP address, time of the request, content of the request, amount of data transmitted, website from which the request came, language and version of the browser, information on the operating system). This occurs regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.
The legal basis for the display of videos and maps is your consent pursuant to Art. 6 (1) a) GDPR.

Further information on the purpose and scope of the data collection and its processing can be found in the provider’s data protection declarations. There you will also find further information on your rights in this regard and setting options for protecting your privacy: http://www.google.de/intl/de/policies/privacy. In cases where personal data is transferred to the USA, standard contractual clauses apply.

Appointment booking software Calendly
We use the service Calendly from Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter “Calendly”) to make online appointments. Here you can book appointments with one of our employees through the link provided by us, via the website of Calendly. Booking metadata such as your IP address, the selected appointment request, if applicable your consultant preference, your name, your e-mail address and, if applicable, other contact data are collected. The legal basis for us in the case of pre-contractual or contractual measures is Art. 6 (1) lit. b) GDPR and in all other cases involving an appointment, there is a legitimate interest in an efficient appointment pursuant to Art. 6 (1) lit. f) GDPR. Data may be transferred to the USA. Standard contractual clauses serve as a guarantee for the third-country transfer of personal data. A transfer impact analysis based on the Schrems II decision of the EU Court of Justice did not reveal any increased risk potential. If you do not agree to this, you are free to make an appointment via the other specified contact channels. After the respective purpose has been achieved, your data will be deleted in compliance with the statutory retention periods.
Further information on data protection can be found at https://calendly.com/privacy.

Newsletter
Some of our websites allow you to subscribe to a free newsletter. Provided you give us your specific consent, we will send you e-mail newsletters with promotional information (hereinafter ‘newsletter’). Our newsletter contains information on our service offerings, promotions, events, prize draws, job offers, and articles.

After registration, the data subject receives a confirmation e-mail in which an activation link needs to be clicked on to complete the registration. This corresponds to the double opt-in procedure, which ensures that the data subject is not registered for the newsletter by a third party and for documentation purposes. The consent for receiving the newsletter can be revoked by sending an e-mail to the e-mail address specified in the ‘Imprint’/Legal notice or by clicking on the unsubscribe link in the newsletter.

However, messages without promotional information which are sent as part of our contractual or other business relationship do not constitute newsletters. This includes e.g. the sending of service e-mails with technical information and follow-up questions on orders, events, prize draw notifications, or similar messages.

For the newsletter, only the e-mail address of the data subject is collected and stored. The legal basis is Art. 6 (1) f GDPR with the aforementioned legitimate interests.

A statistical evaluation of the reading behaviour only takes place to the extent where it can be determined whether the recipients have opened the newsletter and clicked on the links. However, this is a function which we only use to review user activity and be able to perform the corresponding optimisations. For this purpose, the newsletter contains a web beacon, a pixel-sized file which is accessed from our server when the newsletter is opened.

You may revoke your consent to the storage of the data, the e-mail address, as well as its use to send the newsletter at any time. This revocation can be performed via a link in the newsletter itself, (in your profile area) or by sending a message to the following avenues of contact.

Contact
Alternatively, you can also get in touch via the e-mail address provided under the “contact” button. In this case, the personal data of the user transmitted with the e-mail will be saved. No disclosure of the data to third parties takes place in this context. The data will be used exclusively for processing the conversation.

The legal basis for the processing is:

• For the processing of data which is transmitted as part of the sending of an e-mail, Art. 6 (1) f GDPR with the aforementioned legitimate interests.
• If the e-mail contact serves the purpose of entering into a contract, Art. 6 (1) b of the GDPR serves as the additional legal basis for the processing.

In the case of the establishment of contact via e-mail, this also includes the required legitimate interest in the processing of the data. The other personal data processed during the sending procedure serve to prevent the abuse of the contact form and to ensure the security of our information technology systems.

The data will be deleted as soon as they are no longer necessary to fulfil the purpose of their collection. For the personal data from the input fields of the contact form and data that have been transmitted via e-mail, this is the case when the respective conversation with the user has terminated. The conversation is terminated when circumstances allow one to surmise that the respective issue has been conclusively resolved. The additional personal data collected during the sending procedure will be deleted no later than after a deadline of seven days.

The user has the option of revoking his consent for the processing of the personal data at any time. If the user establishes contact with us via e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

Data collection during registration and registered use
On our website, we offer users the opportunity to register by providing personal information. The data is entered into an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. The following data is collected during the registration process: the IP address of the user, date and time of registration, etc.
As part of the registration process, the consent of the user to process this data is obtained.

The legal basis for the processing of the data after the user has registered for the newsletter is in the presence of the user’s consent Art. 6 (1) lit. a GDPR.
If the registration is based of the fulfillment of a contract (if you are a customer of ours, you can always download the latest firmware versions and documentation for your device) of which the user is the contractor or the implementation of pre-contractual measures, there is the additional legal basis for the processing of the data Art. 6 para. 1 lit. b DSGVO.

User registration is required for the provision of certain content and services on our website and is required to fulfil a contract with the user or to perform pre-contractual action.
The data will be deleted as soon as it is no longer necessary for the purpose of its collection. This is the case for the data collected during the registration process when the registration on our website is canceled or modified.
As a user, you have the option of canceling the registration at any time. You can change the data stored about you at any time.

Transmission of data via the internet
The transmission of data via the internet generally involves certain risks. Deliberate encryption of the data does not take place; in particular, messages from the contact form of our website and messages in the service chat are transmitted unencrypted.

Please bear this in mind when transmitting data. If you would like to communicate with us via encrypted e-mail, this can be done via S/MIME encryption. Please specifically request this encryption from us, as we generally send messages unencrypted due to the currently low market penetration of e-mail encryption procedures.

Disclosure of data
When you provide us with personal data, it is only disclosed to third parties to the extent necessary for the performance of the contractual relationship or other legal grounds legitimise this disclosure.

However, we provide certain services with the assistance of service providers. We have carefully selected these service providers and taken corresponding measures to protect your personal data.

Storage durations
The personal data of the data subjects are deleted or rendered unavailable as soon as the purpose of storage no longer applies. Furthermore, storage may also take place when this is provided for via European or national legislation in Union regulations, laws, or other provisions which the controller is subject to. The data is also rendered unavailable or deleted when a prescribed storage duration mandated by the specified standards expires, unless there exists a necessity for the continued storage of the data for the conclusion of a contract or the fulfilment of a contract.

Privacy policy for the Youtube page

We operate one or more company websites on the social media network Youtube, in particular for self-presentation, but also for recruiting.

According to the judgement of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, the operator of social media pages is at least jointly responsible for the data processing of Facebook fanpages within the meaning of Art. 26 GDPR.
We suspect an analogous applicability of this decision to other social networks, including YouTube. So far, we are not aware that YouTube offers an agreement that meets the requirements of Art. 26.Please note that you use the Youtube channel offered here and its functions under your own responsibility. This applies in particular to the use of the interactive functions (e.g. to share, like or dislike a video or comment on it).

We only process your data if you contact us via the YouTube platform. In this case YouTube collects your data and makes it available to us.
Under certain circumstances, we may also store and further process your data. The processing of your personal data will then be governed by one of our other data protection declarations, depending on the group to which you belong.
Furthermore, we may collect data from visitors to our company website, provided that the advertisement can be defined as a visitor as processing. However, we do not store these data on our own systems, nor are they systematically further processed by occasional inspection.

The legal basis for the processing of personal data is, depending on the case constellation, the processing to initiate and execute a contract with you in accordance with Art. 6 para. 1 lit. b GDPR (e.g. for questions on products or services).
Or on the basis of our justified interest in communication with users and our external presentation for the purpose of advertising pursuant to Art. 6 para. 1 S. 1 lit. f GDPR.
If you have given the provider of the social network your consent to the above data processing with effect for us, the legal basis is Art. 6 para. 1 lit. a GDPR.
For these processing steps, our information regarding the responsible office, the data protection officer and the declaration of your rights as a data subject applies.

We would like to point out that the data protection declaration of Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 or, alternatively, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is applicable to any other processing on our YouTube channel.
We have no lasting knowledge of, and have no influence over, the nature or extent of the data processed by Google, the manner in which such data is processed and used, or the disclosure of such data to third parties. We do not have effective control over this.
Further information on the processing of personal data by YouTube can be found here:

User conditions:http://www.google.com/analytics/terms/de.html
On data protection:http://www.google.com/intl/de/analytics/learn/priv...
Privacy policy:http://www.google.de/intl/de/policies/privacy
Standart contractual clauses apply in cases where personal data is transferred to the USA.

Privacy policy for the LinkedIn page

Our company operates a social media channel on the platform LinkedIn. According to the judgment of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, is the operator of social media sites – at least on Facebook fan pages – partly responsible within the meaning of Art. 26 GDPR. So far, we do not know that LinkedIn offers an agreement that meets the requirements of Art. 26.
We only process your data when you contact our Human Resources department via the LinkedIn platform or when you contact us on LinkedIn for an advertised job. In that case, LinkedIn collects your information and makes it available to us. The legal basis for the processing of the personal data is depending on the case: The processing for the initiation and execution of a contract with you in accordance with Art. 6 (1) b GDPR or based on our legitimate interest in communicating with users and our external presentation for the purposes of advertising in accordance with Art. 6 (1). f GDPR. If you have given consent to the above-mentioned data processing with effect for us to the provider of the social network, the legal basis Art. 6 (1) a GDPR. Under certain circumstances, a storage and further processing by us can take place. The processing of your personal data in the case of an application is based on our application privacy policy. We may also collect data from visitors to our corporate site if the ad as a visitor can be defined as processing. However, we do not store these data on our own systems, nor are they systematically processed through an occasional notice.For these processing steps, our information regarding the responsible entity, the data protection officer and the declaration of your rights as the data subject apply.
For any processing beyond that, we point out that the LinkedIn Ireland Unlimited Company privacy policy, Wilton Place, Dublin 2, Ireland (LinkedIn), applies to our LinkedIn Company page. For more information on LinkedIn’s processing of personal information, visit https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy.

Privacy policy for the Xing page
We operate a company website on the professional social media network XING, in particular for self-presentation, but also for recruiting.
According to the judgment of the European Court of Justice (ECJ) of 05.06.2018, Az. C-210/16, is the operator of social media sites – at least on Facebook fan pages – partly responsible within the meaning of Art. 26 GDPR. We suspect an analogous applicability of this decision to other social networks, including XING. So far, we are not aware that XING offers an agreement that meets the requirements of Art. 26.
We process your data only if you contact our Human Resources department via the XING platform or apply for an advertised position via XING. In this case, XING will collect your data and make it available to us.Under certain circumstances, a storage and further processing by us can take place. The processing of your personal data in the case of an application is based on our application privacy policy.
The legal basis for the processing of the personal data is depending on the case: The processing for the initiation and execution of a contract with you in accordance with Art. 6 (1) b GDPR or based on our legitimate interest in communicating with users and our external presentation for the purposes of advertising in accordance with Art. 6 (1) f GDPR. If you have given consent to the above-mentioned data processing with effect for us to the provider of the social network, the legal basis Art. 6 (1) a GDPR.
If you have given consent to the above-mentioned data processing with effect for us to the provider of the social network, the legal basis Art. 6 (1) a GDPR.Under certain circumstances, a storage and further processing by us takes place. The processing of your personal data in the case of an application is based on our application privacy policy.
We may also collect data from visitors to our corporate site if the ad as a visitor can be defined as processing. However, we do not store these data on our own systems, nor are they systematically processed through an occasional notice.
For these processing steps, our information regarding the responsible entity, the data protection officer and the declaration of your rights as the data subject apply. We would like to point out that the data protection declaration of XING SE, Dammtorstr. 30, DE-20354 Hamburg, Germany, Tel .: +49 40 419 131-0, Fax: +49 40 419 131 applies for any further processing on our XING company website -11, E-Mail: info@xing.com, (hereinafter: XING).Further information on the processing of personal data by XING can be found here: https://privacy.xing.com/en/your-privacy.

Privacy policy for commercial Facebook fan pages
We operate one or more corporate web pages (“fan pages”) on the professional social media network Facebook, primarily for self-promotion and branding, but also for the purpose of customer communication and for recruiting.

According to the ruling of the European Court of Justice (ECJ) of 5 June 2018, Case C-210/16, the operator of social media pages is – at least in the case of Facebook fan pages – jointly responsible for data processing in terms of Art. 26 GDPR.
Facebook does provide such a declaration at https://www.facebook.com/legal/terms/page_controller_addendum, but we do not know whether this declaration now satisfies the requirements of the GDPR.
We shall only process your data – with the exception of any further procedures mentioned below – if you contact us via the platform. In this case, Facebook shall collect your data and make it available to us.
The data may also be stored and further processed by us. In the event of an enquiry or application, your personal data shall be processed on the basis of our other relevant privacy policies.
Depending on the situation, the legal basis for the processing of the personal data shall be processing for the initiation and performance of a contract with you in accordance with Art. 6 (1) b) GDPR or based on our legitimate interest in communication with the users and our external image for the purpose of advertising in accordance with Art. 6 (1) f) GDPR.
If you have given the provider of the social network your consent to the data processing described above with effect for us, the legal basis shall be Art. 6 (1) a) GDPR.
Furthermore, we may collect data from visitors to our corporate page insofar as the display as a visitor can be defined as processing. However, we shall not store this data – subject to the procedures listed below – on our own systems; nor shall it be systematically further processed through an occasional notice.
Our information with respect to the controller, the data protection officer and the declaration of your rights as the data subject shall apply to these processing steps.
Please note that the privacy policy of Meta Platforms, Inc. (1601 Willow Road Menlo Park, CA 94025 United States) or of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) shall apply to any other processing on our fan pages.
The transmission of data to third countries shall be based on the use of standard contractual clauses according to the European Commission: https://de-de.facebook.com/help/566994660333381.
You can find further, detailed information about data processing by Facebook and about the corresponding opt-out options at https://www.facebook.com/about/privacy/ and at https://www.facebook.com/legal/terms/dataprocessing. Facebook is the provider of this service and only Facebook can provide complete information about data processing on Facebook.
Please note that the assertion of data subject rights and requests for information are best addressed to Facebook. Only Facebook has access to your data and can take immediate action to delete, restrict, etc. the data, or to provide information. We shall, of course, support you in asserting your rights if necessary.
You can find opt-out options at: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com.

Additional information about Facebook Insight
On our fan pages, we use the analysis function “Facebook Insight”. The function is used for advertising and market research purposes to provide you with more relevant contents and develop new features that may be of interest to you.
Facebook uses cookies, which make it possible to analyse your visits to the fan pages. The information about your use of the fan pages that is generated by the cookies is usually transferred to Facebook servers in the USA, where it is stored. With regard to the transmission of data to third countries, Facebook relies on standard contractual clauses of the European Commission and thus undertakes to comply with the European data protection rules: https://de-de.facebook.com/help/566994660333381.

The processing shall take place on the basis of the legitimate interest in targeted advertising and the targeted design of the fan pages in accordance with Art. 6 (1) f). If you have given the provider of the social network your consent to the data processing described above with effect for us, the legal basis shall be Art. 6 (1) a) GDPR.
You can find more detailed information about the terms of use and data privacy at https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0. You can find detailed information about the respective processing and the opt-out options at https://www.facebook.com/legal/terms/page_controller_addendum and https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com/.

Privacy policy for commercial Instagram channels
We maintain one or more Instagram accounts in order to communicate with the users registered there and to provide information about our company and our products and services.
According to the ruling of the European Court of Justice (ECJ) of 5 June 2018, Case C-210/16, the operator of social media pages is – at least in the case of Facebook fan pages – jointly responsible for data processing in terms of Art. 26 GDPR.
So far, we are unaware of Instagram offering an agreement that satisfies the requirements of Art. 26.
We shall process your data that you send to us via these networks in order to communicate with you and to answer your messages there.
The data may also be stored and further processed by us. In the event of an application, your data shall be processed on the basis of our applicant data policy.
Furthermore, we may collect data from visitors to our corporate page insofar as the display as a visitor can be defined as processing. However, we shall not store this data on our own systems; nor shall it be systematically further processed through an occasional notice.
Our information with respect to the controller, the data protection officer and the declaration of your rights as the data subject shall apply to these processing steps.
The legal basis for the processing of the personal data shall be our legitimate interest in communication with the users and our external image for the purpose of advertising in accordance with Art. 6 (1) f).
If you have given the provider of the social network your consent to the data processing described above with effect for us, the legal basis shall be Art. 6 (1) a) GDPR.
Please note that the privacy policy of Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA shall apply to any other processing on our corporate page.
You can find further information about the purpose and scope of the data collection and the further processing and use of the data by Instagram, as well as your rights in this regard and the settings options for protecting your privacy, in the Instagram privacy policy: http://instagram.com/about/legal/privacy/ or https://help.instagram.com/155833707900388/.

Additional information about Instagram Insights
On our Instagram page, we use the analysis function “Instagram Insights” provided by Meta Platforms Inc. (1601 Willow Road Menlo Park, CA 94025 United States; “Facebook”). The function is used for advertising and market research purposes to provide you with more relevant contents and develop new features that may be of interest to you. Facebook uses cookies, which make it possible to analyse your visits to the fan page. The information about your use of the fan page that is generated by the cookies is usually transferred to Facebook servers in the USA, where it is stored. With regard to the transmission of data to third countries, Facebook relies on standard contractual clauses of the European Commission and thus undertakes to comply with the European data protection rules: https://de-de.facebook.com/help/566994660333381. The data shall be processed on the basis of Art. 6 (1) a) GDPR. We use Instagram Insights to create targeted advertising and a targeted design of the fan page.
You can find further, detailed information about data processing by Facebook and about the corresponding opt-out options at https://www.Facebook.com/about/privacy/. Facebook is the provider of this service and only Facebook can provide complete information about data processing on Instagram.
Please note that the assertion of data subject rights and requests for information are best addressed to Meta Platforms Inc. (“Facebook”). Only Facebook has access to your data and can take immediate action to delete, restrict, etc. the data, or to provide information. Of course, we shall support you in asserting your rights if necessary.

Privacy policy for commercial Twitter channels
We operate one or more corporate web pages on the professional social media network Twitter, primarily for self-promotion and branding, but also for recruiting.

According to the ruling of the European Court of Justice (ECJ) of 5 June 2018, Case C-210/16, the operator of social media pages is – at least in the case of Facebook fan pages – jointly responsible for data processing in terms of Art. 26 GDPR.
We are assuming that this ruling applies analogously to other social networks, such as Twitter. So far, we are unaware of Twitter offering an agreement that satisfies the requirements of Art. 26.
Please note that you use the Twitter short message service offered here and its functions on your own responsibility. This particularly applies to the use of the interactive functions (e.g. share, rate).
We shall only process your data if you contact us via the Twitter platform. In this case, Twitter shall collect your data and make it available to us.
The data may also be stored and further processed by us. In the event of an application, your data shall be processed on the basis of our applicant data policy.

We shall process your personal data to the extent that we re-tweet your tweets or reply to these, or compose tweets that refer to your account. Data that is freely published and disseminated by you on Twitter shall be embraced by us in this way and made accessible to third parties.
Depending on the situation, the legal basis for the processing of the personal data shall be processing for the initiation and performance of a contract with you in accordance with Art. 6 (1) b) GDPR (if it is a case of concrete requests for a quotation or an existing customer relationship with you) or based on our legitimate interest in communication with the users and our external image for the purpose of advertising in accordance with Art. 6 (1) Sentence 1 f) GDPR.
If you have given the provider of the social network your consent to the data processing described above with effect for us, the legal basis shall be Art. 6 (1) a) GDPR.
The data may also be stored and further processed by us. Your personal data shall then be processed on the basis of one of our other privacy policies, depending on the group of data subjects to which you belong.
Furthermore, we may collect data from people who “like” and comment on our channel if the mere display can be defined as processing. However, we shall not store this data on our own systems; nor shall it be systematically further processed through an occasional notice.
Our information with respect to the controller, the data protection officer and the declaration of your rights as the data subject shall apply to these processing steps.

Please note that the privacy policy of Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA) shall apply to any other processing on or via our Twitter channel.
The data controller is presumably Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.
We have no influence on the type and scope of the data processed by Twitter, the nature of the processing and use of this data or the forwarding thereof to third parties. We also have no effective control mechanisms in this regard.
Standard contractual clauses shall serve as a guarantee for the transfer of personal data to third countries. A transfer impact analysis conducted on the basis of the ECJ’s Shrems II ruling revealed no increased risk potential.

You can find further information about the processing of personal data here:

• https://support.twitter.com/articles/105576#
• https://help.twitter.com/de/search?q=datenschutz
• https://support.twitter.com/articles/20172711# (how to access your data)
• https://twitter.com/your_twitter_data (analysis of your Twitter data)
• https://twitter.com/personalization (personalisation options and opt-out)
• https://support.twitter.com/forms/privacy (data processing information)
• https://support.twitter.com/articles/20170320#

Please note that the assertion of data subject rights and requests for information are best addressed to Twitter Inc.
Only Twitter has access to your data and can take immediate action to delete, restrict, etc. the data, or to provide information. We shall, of course, support you in asserting your rights if necessary.

Information on data processing

Before joining our company, your personal data shall be processed by us exclusively for the purpose of establishing a contractual relationship to the extent necessary.

During the period of your employment and beyond, we shall process your personal data in order to execute and/or end the contractual relationship.

After the respective objective has been achieved, your data shall be deleted under observance of the statutory periods of retention, usually 6/10 years or 30 years and more with respect to different data categories such as occupational retirement provision.

Legal basis for processing

The legal basis for processing your personal data includes in particular:

• Art. 6 (1)(a) on the basis of consent given by you whereby, in principle, none is required in order to conclude a contract or proceed with an existing contract,
• Art. 6 (1)(b) to establish, execute and end a contractual relationship,
• Art. 6 (1)(c) to fulfil a legal obligation,
• Art. 6 (1)(f) to preserve a legitimate interest

Our legitimate interests in this regard include e.g. the:

• Implementation of electronic access controls,
• Optimisation of personnel planning,
• Safeguarding of compliance with safety regulations, requirements, industry standards and contractual obligations,
• Establishment, exercise or defence of legal claims,
• Avoidance of prejudice and/or liability of the company through corresponding measures.

Data collected by third parties

We use the ELSTAM procedure to collect data for payroll, provided to usby financial administration, to ensure correct settlement processes.

This affects the data for payroll accounting specified below in particular.

Types of data processed by us

The following personal data is processed:

• Applicant data; name, date of birth, CV, nationality/work permit, etc. for selection and recruitment procedures, onboarding and offboarding management;
• Private contact data; address, telephone number, email (for the purpose of making contact);
• Business contact details; e.g. telephone number, email, place of work, job title, photo (if applicable);
• Identification/payment details; identity card details, place of birth, civil status, tax ID number, health insurance membership, income tax bracket, allowances, denomination for church tax, account number (for the purpose of payroll accounting and for the fulfilment of social insurance, tax and statutory obligations);
• Time recording and access data, vacation time, working time accounts, shift plans (if applicable), closing times or access protocols, etc.;
• Data in the context of staff screening (e.g. clearance certificate, reliability check);
• Data for suitability and performance/behavioural monitoring; information on training and further education, data for the purpose of measuring goal attainment, e.g. for variable salary components;
• Other data in personnel management: ownership of driving licence, attachment of salary

Recipient categories

• Banking service providers, (if applicable) service providers for calculating pension provisions
• Service providers for settling remuneration (tax consultants), auditors
• Sickness insurance organisations, social insurance agencies, accident insurance institutions, other insurance companies
• Authorities such as e.g. financial authorities, social security funds, employment agencies, (if applicable) security, health and other authorities
• Company medical services
• Legally affiliated companies (group companies) with joint controllership:
  the important contents of task regulation in relation to the rights of thoseaffected can be requested at the address below, pursuant to Art. 26(3) of the GDPR, however, these rights can be claimed by affected parties in all companies involved.
• Business partners and customers (business contact details)

Your rights as an employee can be found in the superordinate privacy policy.

Privacy Policy for Zoom

Information on data processing

Hereby we would like to inform participants of video conferences initiated by us about the handling of personal data.

Purpose of data collection

The Zoom service is provided by Zoom Video Communications, Inc, Attention: Data Privacy Officer, 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA. We use this service to conduct video conferences and webinars.

Types of data processed by us

In the context of video conferencing with Zoom, the following types of data are processed by us:

• User data: User name, email address, profile photo (optional)
• Meeting meta-data: Date and time, IP address of the participants, meeting title, duration of the session, start and end times
• Text data: Communication entered in the chat, transcription of audio input if applicable
• Video and audio data: Audio and video recording of the hardware shared by the user

Categories of recipients

We send your personal data to the following recipients, e.g. in order to comply with legal obligations or obligations arising from the employment relationship:

• Service providers: Zoom Video Communications, Inc. in the course of providing the video conferencing service
• Participants of the video conference

Legal basis of processing

When processing your personal data, we naturally comply with applicable law. Therefore, processing is only carried out on a legal basis. The following legal bases come into consideration:

1. Art. 6 para. 1 lit. a) on the basis of consent from you, whereby none is required in principle for the conclusion of a contract or the continuation of an existing contract
2. Art. 6 para. 1 lit. b) for the implementation of pre-contractual and contractual measures
3. Art. 6 para. 1 lit. f) for the protection of a legitimate interest

Legitimate interests
If we process your data within the scope of our legitimate interest, this lies, for example, in

• the communication with you.

You have the right to object to the processing of personal data in the context of a legitimate interest on grounds relating to your particular situation. We will then no longer process your data unless we can demonstrate compelling legitimate grounds on our part that override your rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

We do not use the personal data provided by you to make automated decisions concerning you in accordance with Art. 22 GDPR.

Data transfer to third countries

Data may be transferred to the USA. Standard contractual clauses serve as a guarantee for the third-country transfer of personal data. In addition, only data centers within the EU and within secure third countries were selected.

Storage period

After the respective purpose has been achieved, your data will be deleted in compliance with the statutory retention periods.

Information on data processing

As a customer and an interested party, we primarily process your personal data for the establishment and fulfilment of a contractual relationship concluded with you.

Information on data processing

As a customer and an interested party, we primarily process your personal data for the establishment and fulfilment of a contractual relationship concluded with you.

Purposes of data processing

Furthermore, we process your personal data in order to achieve the following purposes:

• Processing of contract
• Solicitation of existing customers, usage as a selection criterion for direct marketing in order to be able to offer you a service adapted to your needs
  Dealer support
  Management of our supplier relationships
• Customer service
• Quality management
• Improvement and development of intelligent and innovative services
• Customer analysis for market and opinion research

Furthermore, we process your data only with your express declaration of consent.

Legal basis for processing

We process the following personal data in particular:

• Art. 6 (1)(a) on the basis of consent given by you whereby, in principle, none is required in order to conclude a contract or proceed with an existing contract
• Art. 6 (1)(b) to establish, execute and end a contractual relationship,
• Art. 6 (1)(c) to fulfil a legal obligation,
• Art. 6 (1)(f) to preserve a legitimate interest

Here, our legitimate interests include the achievement of the purposes specified above and in addition to that, for example, the:

• Appreciation of our business interest,
• including that of direct marketing
  Safeguarding of compliance with safety regulations, requirements, industry standards and contractual obligations,
• Establishment, exercise or defence of legal claims,
• Avoidance of prejudice and/or liability of the company through corresponding measures

Data collected by third parties
Data may be provided to us by third parties, e.g. in the form of recommendations. In such cases, this is usually contact information plus details relating to specific product or service requirements. Possibly, we collect profile data from professional social networks such as XING or LinkedIn.

Types of data processed by us

The following personal data is processed:

• Private contact data (if provided voluntarily)
• Official contact data
• If applicable, photographs and video recordings (please refer to our privacy policy for applicants and employees on the use of Zoom regarding video recordings)
• Identification/payment data
• Transaction Data

Correspondence data; Recipient categories

• Service providers such as Bank service providers, logistics companies, consulting firms such as legal, tax and compliance consultancy, IT service providers
• Authorities such as e.g. financial authorities
• Business partners and customers (business contact details)

Information on data collection

We use so-called door cameras at various entrances on our premises for visitor/entrance control. After pressing the bell button, depending on the door system, a live image of the person in front of the door is transmitted to our reception or an image proof is recorded.

We process your personal data through the use of our door cameras in the exercise of our legitimate interests.

Legal basis for video surveillance

The legal basis for the processing of your personal data in the context of video surveillance are in particular:

1. Art. 6 (1) lit. f) GDPR for the protection of a legitimate interest in conjunction with.

2. Art. 88 GDPR in connection with. §26 para.1 sentence 2 BDSG(new)

Legitimate interests

Our legitimate interests in this respect lie, for example, in

the assertion, exercise or defense of legal claims or the defense against unjustified claims in the context of the receipt/goods issue process

Purposes of data collection

The purpose of video surveillance is to safeguard one of the above-mentioned legitimate interests.

Duration of storage

There is only a storage of the image files made by pressing the bell button.
These image files are overwritten automatically, after reaching the storage capacity of the door camera (depending on the number of visitors, between 7-10 days).

Types of data that are processed

Categories of recipients

If on made image files, indications for the traceability of burglaries/property damage, etc., are possible, the image files are transmitted by us to law enforcement agencies. A transmission beyond this does not take place.