Privacy Policy

1. General information and mandatory information

We at RVT Process Equipment GmbH take the protection of your personal data very seriously. Your privacy is important to us, which is why we treat your personal data confidentially and in accordance with statutory data protection regulations.

As new technologies and the continuous development of this website may result in changes to this privacy policy, we recommend that you read the privacy policy again at regular intervals.

The following provisions serve to inform you about the processing of personal data in accordance with the requirements of the General Data Protection Regulation (GDPR), in particular taking into account the information obligations under Articles 12 to 14 GDPR, as well as to clarify the data subject rights under the GDPR in accordance with Articles 15 to 22, 34 and 77 GDPR.

Personal data is information that allows the identification of a natural person. This includes, in particular, name, date of birth, address, telephone number, email address, IP address, as well as user behavior on this website. Definitions of the terms used (e.g., "personal data" or "processing") can be found in Art. 4 GDPR.

You are not required to provide any personal information to use our website. However, in certain cases, we may require your name, address, and other information to provide the requested services.
The same applies, for example, to sending information material or to answering individual questions.

If you use our services, we generally only collect the data we need to provide the services.

2. Below, we provide information about the purpose, type, and scope of data processing

This privacy policy applies to RVT Process Equipment GmbH ( www.rvtpe.com ) and to the personal data collected via this website.

The data controller responsible for the processing of personal data is:
RVT Process Equipment GmbH, Im Gries 15, 96364 Marktrodach, Germany
Phone: +49 (0) 9261 55235 – 0, E-Mail: [email protected], Website: https://www.rvtpe.com 

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

For websites of other providers to which links are provided, for example, the data protection information and declarations on those websites apply.

3. Data Protection Officer

Our Data Protection Officer can be contacted at the above address, marked for the attention of "Data Protection Officer", or via: phone: +49 (0) 9261 55235 -755 or E-Mail: [email protected] 

4. Categories of personal data

The data we process is determined by the respective context. Please note that we provide information for specific processing situations separately here and in the appropriate place.

Data protection notice for applicant procedures https://www.rvtpe.com/global/en/applicant-privacy/ 
Data protection notice for reporting system (HinSchG) and form https://www.rvtpe.com/global/en/whistleblower-privacy/ 

5. Purpose and legal basis of personal data processing

When processing your personal data, we comply with the provisions of the GDPR and all other applicable data protection regulations.

We use your data for business development, to fulfill contractual and legal obligations, to execute contractual relationships, to offer products and services, to provide the website and its content, and to strengthen customer relationships, which may also include analysis for marketing purposes and direct advertising.

In addition, we process your personal data to fulfill legal obligations, such as retention periods under commercial and tax law or to compare your data with so-called sanctions lists to comply with the legal provisions of the EU Regulation on combating terrorism (including EC881/2002; 2580/2001 and 753/2011).

The processing of personal data is based on Article 6 (1) (a) consent, (b) performance of a contract, (c) legal obligations and (f) legitimate interest GDPR.

Processing of special categories of personal data within the meaning of Art. 9 GDPR only takes place if this is required by law and there is no reason to assume that your legitimate interest in excluding processing outweighs it, Art. 9 Para. 2 lit. a) consent, lit. b) fulfilment of employment law obligations and rights, lit. c) protection of vital interests, lit. h) healthcare.

6. Data Security

To protect the data stored with us as effectively as possible against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons, we implement appropriate technical and organizational security measures in accordance with Article 32 of the GDPR. Our security measures are continuously improved in line with technological developments. Security levels are regularly reviewed in collaboration with security experts and adapted to new security standards.

Data exchange to and from our website is always encrypted. For our web presence, we offer HTTPS as the transmission protocol, using the latest encryption standards.

7. Storage and Retention of Personal Data

The duration of storage of personal data is determined based on the respective legal basis, the purpose of the processing and – where applicable – also on the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data in accordance with Art. 6 (1) (a) GDPR on the basis of express consent, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that is processed within the framework of legal transactions or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, this data will be deleted after the retention periods have expired, provided that it is no longer required for the fulfilment or initiation of a contract and/or we no longer have a legitimate interest in continuing to store it.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data will be stored until you exercise your right of objection in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

8. Recipient of the data

Within our company, we ensure that only those people who need your data to fulfill contractual and legal obligations receive it. In cases where service providers support our specialist departments in performing their tasks, the necessary data protection agreements have been concluded with them.

9. Disclosure of Personal Data

We will only share your data with third parties within the scope of legal regulations or with your consent. In addition, we will share personal data with third parties in individual cases if this serves the purpose of asserting, exercising, or defending legal claims. Possible recipients in such cases may include law enforcement authorities, lawyers, auditors, courts, etc.

10. Transfer to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs as part of the use of third-party services or disclosure or transmission of data to third parties, this will only occur if it is necessary to fulfill our (pre)contractual obligations, on the basis of your consent, due to a legal obligation or on the basis of our legitimate interests.

11. Rights of data subjects

At this point, we would like to inform you about your rights as a data subject. You can access the full scope of your rights under the GDPR at the following link : dsgvo-gesetz.de

The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the controller regarding the processing of your personal data, whereby reference is made to the legal basis stated for the respective conditions for exercising them:

• Right to information pursuant to Art. 15 GDPR
• Right to rectification pursuant to Art. 16 GDPR
• Right to erasure (to be forgotten) according to Art. 17 GDPR
• Right to restriction of processing pursuant to Art. 18 GDPR
• Right to information pursuant to Art. 19 GDPR
• Right to data portability pursuant to Art. 20 GDPR
• Right to object according to Art. 21 GDPR
• Right to revoke consent given in accordance with Art. 7 (3) GDPR
• Right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR. Contact information: 

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18, 91522 Ansbach, Germany
Phone: +49 (0) 981 180093-0, Fax: +49 (0) 981 180093-800
Email: [email protected], Website: https://www.lda.bayern.de/de/kontakt.html 

If you have any questions regarding data protection, you may also contact our Data Protection Officer.

The restrictions under Sections 34 and 35 of the Federal Data Protection Act (BDSG) apply to the right to information and the right to erasure.

Right of objection:
Please note the following in connection with the right of objection:

If we process your personal data based on our overriding interest, you have the right to object to this processing at any time, with future effect, for reasons related to your particular situation. If you exercise your right of objection, we will stop processing the data in question unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such advertising purposes. If you exercise your right of objection, we will stop processing the data concerned for advertising purposes.

The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

If you have any questions about the use of your personal data or wish to withdraw your consent to the processing of your personal data, please contact our data protection officer directly; you will find their contact details above. The same applies to the assertion of the rights with regard to your data. If you do not submit a written request for information, we ask for your understanding that we may then require you to provide evidence that you are the person you claim to be.

12. Collection of general data and information - log files

If you use our website without otherwise transmitting data to us (e.g. by registering or using the contact form), we collect technically necessary data that is automatically transmitted to our server, these are:

• IP address
• IP provider
• Names of the pages you visit
• browser used / type / version
• operating system used
• Date and time of visit to our website
• Requested files, transferred data volumes, names of downloaded files
• Referrer URL ( URL of the website from which a user accessed another website)

The processing is carried out to protect our overriding legitimate interest in the correct display of our website and ensuring security and stability on the basis of Art. 6 (1) (f) GDPR. The collection of data and its storage in log files is essential for the operation of the website to present you with a website optimized for your browser and to enable communication between our server and your device. For the latter, the processing of your IP address is particularly necessary.

We evaluate this technical data anonymously and solely for statistical purposes in order to further optimize our website. This data is stored separately from other personal information on secure systems. No conclusions are drawn about individual persons.

The provider reserves the right to subsequently review the log data if there is reasonable suspicion of illegal use based on concrete evidence.

The data will be stored for the duration of use or to ensure IT security (e.g. log files).

Provifiles)ain hosting – united-domain GmbH:

Our website is not hosted by us, but by a service provider who processes the aforementioned data on our behalf as a processor in accordance with Art. 28 GDPR.

We use a domain hosting provider for our website, which provides and manages a domain name (domain registration) and provides hosting services, including DNS configuration. This provider provides us with the necessary infrastructure to host our website. The service provider is united-domain GmbH , Gautinger Straße 10, 82319 Starnberg, Germany.

When you visit our website, united-domain GmbH processes personal data. This involves technical connection data in the Apache log format (IP address, target domain, date, time, method, referrer , client version), which is deleted after 7 days, including backups.

Data processing is carried out on the basis of your consent in accordance with Art. 6 (1) (a) GDPR, which you grant via the cookie banner on our website. Furthermore, processing is carried out for the purpose of fulfilling the contract in accordance with Art. 6 (1) (b) GDPR with our potential and existing customers and the overriding legitimate interest in correctly displaying our website and ensuring security and stability on the basis of Art. 6 (1) (f) GDPR. The collection of data and storage in log files is essential for the operation of the website in order to present you with a website optimized for your browser and to enable communication between our server and your device.

We have concluded a data processing agreement (DPA) with united-domains GmbH. This agreement is required by data protection law and guarantees that the company will only process personal data to the extent necessary to fulfill its service obligations or to operate according to our instructions and in compliance with the GDPR.

Further information on data protection can be found in the privacy policy of united-domains GmbH: https://www.united-domains.de/unternehmen/datenschutz/

Web hosting – netcup GmbH 

We use a web hosting provider for our website, which provides us with its web server and the necessary storage space for our website so that our website can be accessed 24/7 from anywhere in the world.

We use the following service provider for web hosting: netcup GmbH, Daimlerstaße 25, 76185 Karlsruhe, Germany.

When you visit our website, netcup GmbH processes personal data. This includes technical connection data for server access (IP address, date, time, requested page, browser information).

netcup GmbH is used to monitor the technical functions and increase the operational reliability of our web server, for the delivery and provision of the website, anonymization, and creation of statistics. Data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR, which you grant via the cookie banner on our website. Furthermore, processing is carried out for the purpose of fulfilling the contract in accordance with Art. 6 (1) (b) GDPR with our potential and existing customers and the overriding legitimate interest in accordance with Art. 6 (1) (f) GDPR. The legitimate interest is the strong economic interest in the correct display of our website and in ensuring the security and stability of the technical systems.

We have concluded a data processing agreement (DPA) with netcup GmbH. This agreement is required by data protection law and guarantees that the company will only process personal data to the extent necessary to fulfill its service obligations or to operate according to our instructions and in compliance with the GDPR. Further information on data protection can be found in the privacy policy of netcup GmbH: www.netcup.com/de/kontakt/ datenschutzerklaerung

Content Delivery Network (CDN) – Cloudflare Germany GmbH
Our website uses services from Cloudflare to optimize the security and performance (delivery speed) of our website. A content delivery network (CDN) is a network of (globally) distributed servers capable of delivering optimized content to website users. For this purpose, personal data may be processed in server log files. We use the content delivery network from Cloudflare Germany GmbH. Cloudflare is operated by Cloudflare Germany GmbH, Rosental 7, 80331 Munich, Germany, and Cloudflare, Inc., 101 Townsend Street, San Francisco, CA 94107, USA .

Cloudflare provides a content delivery network and security services that protect our website from cyberattacks such as DDoS attacks and improve page load times. Cloudflare analyzes the traffic between your browser and our website to block malicious activity.
When you access our website, personal data may be processed in Cloudflare server log files.

The legal basis for using Cloudflare is our legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Our legitimate interest lies in the fact that we do not operate a content delivery network ourselves, in protecting our website against unauthorized access, and in optimizing loading times.

We have concluded a data processing agreement (DPA) with Cloudflare Inc. This is a contract required by data protection law, which guarantees that Cloudflare will only process personal data to the extent necessary to fulfill its service obligations or to operate according to our instructions and in compliance with the GDPR.

However, since Cloudflare is a US company, data may be transferred to servers in the US. Cloudflare is certified under the EU-US Data Privacy Framework and is committed to complying with European data protection standards.

For further information, please see Cloudflare’s privacy policy: https://www.cloudflare.com/de-de/privacypolicy/. 

13. Cookies

Cookies are small text files that are sent to the browser of your device and stored there when you visit our website. Alternatively, to the use of cookies, information can also be stored in local storage ( local storage ) of your browser. Some functions of our website can be stored without the use of cookies or local storage are not offered (technically necessary cookies). Other cookies, on the other hand, enable us to carry out various analyses so that we are, for example, able to recognize the browser you use when you visit our website again and to transmit various information to us (non-necessary cookies). With the help of cookies, we can, among other things, make our internet offering more user-friendly, effective and secure for you by, for example, understanding your use of our website and determining your preferred settings (e.g. country and language settings). We use cookies to personalize content and ads, to offer social media functions and to analyses access to our website. We also share information about your use of our website with our social media, advertising and analytics partners. If third parties process information through cookies, they collect the information directly through your browser. Our partners may combine this information with other data that you have provided them or that they have collected as part of your use of the services. Cookies do not cause any damage to your device. They cannot run programs and do not contain viruses.

By law, we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we require your permission. This site uses different types of cookies. Some cookies are placed by third parties who appear on our pages.

Cookies that are necessary to carry out the electronic communication process or to provide certain functions you have requested are stored based on Art. 6 (1) (f) GDPR, as there is a legitimate interest in storing cookies for the technically error-free and optimized provision of our services.

If non-essential cookies are used, this only happens with your consent. The legal basis for this is Art. 6 (1) (a) GDPR. You can change or revoke your consent at any time from the cookie policy on our website.

Provider:

Cookie Manger ( Consent Management Platform / CMP) – Cookiebot by Usercentrics
We obtain your consent to data protection through a cookie manager (Consent Management Platform - CMP). We use Cookiebot by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, acts as a consent management service. This enables us to obtain, manage, and document website users' consent to data processing via banners or pop-ups in accordance with the General Data Protection Regulation (GDPR). When you visit our website, Cookiebot checks whether and which cookies require consent and displays a corresponding banner to obtain your consent.

The following personal data is collected and transmitted to Cookiebot.

• IP address, shortened (anonymized form)
• Date and time of your consent
• Consent ID
• Consent status
• Browser information
• Browser language
• URL
• Evidence of consent
• Geolocation

This data is used to verify consent and is not used to identify the user.
The legal basis for the use of Cookiebot is consent to the use of cookies in accordance with Art. 6 (1) (a) GDPR. Consent must be obtained before processing non-essential cookies. Only technically necessary cookies may be used without consent. With a consent management platform, effective consent can be obtained from users through a preliminary query upon first access.

Another basis for using Cookiebot is contractual performance pursuant to Art. 6 (1) (b) GDPR. As our service provider, Cookiebot ensures that we fulfill our legal obligations to obtain consent by obtaining it for us.

The fulfillment of legal obligations (consent management) according to Art. 6 (1) (c) GDPR is another basis for the use of Cookiebot, since website operators are legally obliged to obtain the consent of users.

Furthermore, we have a legitimate interest in the legally compliant documentation and verifiability of consent in accordance with Art. 6 (1) (f) GDPR.

We have concluded a data processing agreement (DPA) with Cookiebot. This is a contract required by data protection law, which guarantees that Cookiebot will only process personal data to the extent necessary to fulfill its service obligations or to operate according to our instructions and in compliance with the GDPR.

Your data will be deleted every 12 months or immediately after termination of the contract between us and Cookiebot.

When using Cookiebot, it is possible that personal data will be transferred to servers of subcontractors or service providers in the USA. According to the GDPR, the USA is considered a third country that does not guarantee a level of data protection comparable to that of the EU. To protect data, Cookiebot has taken measures such as the conclusion of standard contractual clauses (SCCs). Please note, however, that complete protection against access by US authorities cannot be guaranteed.

Further information on data protection can be found at Usercentrics privacy policy: www.cookiebot.com/de/privacy-policy
Our website also contains links to the websites of other companies. Where links to third-party websites are present, we have no influence on their content. Therefore, we cannot assume any liability or responsibility for these contents. The respective provider or operator of these pages is always responsible for the content of these websites.

14. Contact us

If you contact us via our contact form or by other means (telephone, email, letter), we will process your information, including the contact details you provide there, for the purpose of processing your enquiry and in case of follow-up questions.

Data processing for establishing contact is carried out in accordance with Art. 6 (1) (f) GDPR. We have a legitimate interest in the effective processing of your inquiry and, in the case of inquiries related to contracts, in enabling the initiation and implementation of the respective contractual relationship.

If your inquiry relates to an existing contractual relationship with us, the processing will be carried out for the purpose of fulfilling the contract on the basis of Art. 6 (1) (b) GDPR.

Furthermore, your personal data will be processed with your consent in accordance with Art. 6 (1 ) (a) GDPR. You can revoke this consent at any time. To do so, simply send an informal email to [email protected] . The legality of the data processing operations carried out up to the time of revocation remains unaffected by the revocation. Your personal data will remain with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies. Mandatory statutory provisions—in particular retention periods—remain unaffected.

15. Newsletter

If you register on our website to receive our newsletter, the data in the respective input mask will be transmitted to the person responsible for processing. Registration for our newsletter is carried out using a so-called double opt -in procedure, i.e. after registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can register using someone else's email address. When you register for the newsletter, we collect your title (voluntary information), your name, the company, the email address and store this information together with the date and time of registration and your IP address. This serves to prevent misuse of the services or the email address of the data subject. The data will not be passed on to third parties. An exception exists if there is a legal obligation to pass on the data. The data will be used exclusively for sending the newsletter. The subscription to the newsletter can be canceled by the data subject at any time. Likewise, the consent to the storage of personal data can be revoked at any time. For this purpose, there is an unsubscribe link in every newsletter.

The legal basis for processing data after the user has registered for the newsletter is Art. 6 (1) (a) GDPR, provided the user has given their consent. We process your data for the purpose of sending the newsletter exclusively based on your consent in accordance with Art. 6 (1) (a) GDPR. By unsubscribing from the newsletter, you can revoke your consent at any time with future effect in accordance with Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data; however, sending the newsletter is not possible without providing your data. Furthermore, we have a legitimate interest in accordance with Art. 6 (1) (f) GDPR to analyze user behavior in order to improve the newsletter (if pseudonymized and voluntary).

Provider

rapidmail GmbH:

To send the newsletter we use: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg i.Br., Germany.
rapidmail is used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on rapidmail 's servers in Germany. If you do not want rapidmail to analyze your data, you must unsubscribe from the newsletter. We provide a corresponding link in every newsletter message for this purpose. For the purpose of analysis, the emails sent with rapidmail contain a so called tracking pixel that connects to the rapidmail servers when the email is opened. This makes it possible to determine whether a newsletter message has been opened. Furthermore, with the help of rapidmail we can determine whether and which links in the newsletter message are clicked. All links in the email are so-called tracking links, which can be used to count your clicks.

We process your data for the purpose of sending the newsletter exclusively based on your consent in accordance with Art. 6 (1) (a) GDPR. By unsubscribing from the newsletter, you can revoke your consent at any time with future effect in accordance with Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data; however, sending the newsletter is not possible without it. Furthermore, we have a legitimate interest in analyzing user behavior to improve the newsletter (provided pseudonymized and voluntary) in accordance with Art. 6 (1) (f) GDPR.

The data you have stored with us as part of your consent for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter. After you unsubscribe from the newsletter, the data will be deleted from both our servers and the rapidmail servers. Data stored with us for other purposes (e.g., email addresses for the members' area) remains unaffected. You have the option of revoking your consent to data processing at any time with future effect. The legality of the data processing operations already carried out remains unaffected by the revocation.

We have concluded a data processing agreement (DPA) with rapidmail GmbH. This agreement is required by data protection law and guarantees that the company will only process personal data to the extent necessary to fulfill its service obligations or to operate according to our instructions and in compliance with the GDPR.

Further information on data protection can be found at rapidmail privacy policy: https://www.rapidmail.de/datenschutz or https:// www.rapidmail.de / data security For more information about rapidmail 's analysis functions, please visit the following link: https://www.rapidmail.de/wissen-und-hilfe 

Google Maps (link):

On our website we use links to the map service Google Maps of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of the process is to provide a geographical location to help customers, partners or interested parties find their way to or from the company location. The link is created in a data protection-friendly manner, i.e. no map is directly integrated/embedded (e.g. via iFrame), but merely an external link to the corresponding map view on Google Maps is provided. A connection to Google servers is only established when the link is clicked. A notice appears on the website that a connection to Google Maps will be established after the click and that personal data will be processed by Google in the process. If the link is clicked, the IP address and other technical data are transmitted to Google.

Since no personal data is processed during the linking process before the user clicks the link, no data processing is carried out by the company itself. Therefore, no justification is necessary.

Process:

• User visits website – no content is loaded from Google because no map is embedded
• User clicks on the link with the destination: https:// www.google.de / maps /dir//.. (a separate window opens) – Google Maps opens in a new browser window.  From now on, data processing by Google takes place (IP address, location, language, browser data, etc.).
• RVT is not responsible for the downstream processing of data

Please note that when using Google Maps, Google's privacy policy applies.

We would like to point out that we as the provider of these pages, have no knowledge of the content of the data or how it is used. However, since Google is a US company, data will be transmitted to servers in the US. Google has implemented appropriate safeguards in accordance with the standard contractual clauses (SCCs) pursuant to Art. 46 (2) (c) GDPR to ensure an appropriate level of data protection. You can learn more about the data processed through Google's use of the website in Google's privacy policy : policies.google.com

16. Analysis tools

When you visit our website, your browsing behavior may be statistically analyzed. This is done primarily with cookies and so-called analysis programs. The analysis of your browsing behavior is generally anonymous; your browsing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools.

Google Analytics
Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is typically transferred to and stored by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

We use Google Analytics to analyze user behavior on our website. The data obtained is used to optimize our website and our advertising efforts. Google will use this information on our behalf to evaluate website usage, to compile reports on website activity, and to provide us with other services related to website and internet usage.

The information generated by the cookie about your use of this website is:

• IP address (abbreviated)
• Browser information (type/version)
• operating system used
• Device information
• Usage data (previously visited pages, referrer URL, length of stay, interactions, location, time of server requests)

We have activated IP anonymization on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google. You can prevent cookies from being saved by setting your browser software accordingly; however, we would like to point out that if you do this, you may not be able to use all of the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link : https://tools.google.com/dlpage/gaoptout. 

Data processing is based on your consent in accordance with Art. 6 (1) (a) GDPR, which you grant via the cookie banner on our website. You can revoke your consent at any time with future effect. Furthermore, processing is based on Art. 6 (1) (f) GDPR. The legitimate interest lies in optimizing the website and improving the user experience.

We would like to point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or how it is used. However, since Google is a US company, data is transmitted to servers in the US. Google has implemented appropriate safeguards in accordance with the standard contractual clauses (SCCs) pursuant to Art. 46 (2) (c) GDPR to ensure an appropriate level of data protection. You can learn more about the data processed through Google's use of the website in Google's privacy policy: https://policies.google.com/?hl=de and in the terms of use : https://www.google.com/analytics/terms/de.html 

17. Social media, plugins and tools

General information on data protection on social media platforms
Because we take protection of your personal data very seriously, we would like to inform you about the processing of personal data when you use our social media presence and the integrated plugins. For the processing of data on the respective platforms, the operators of the platforms are also considered joint controllers in accordance with Art. 26 GDPR.

We maintain public profiles on the following social media platforms:

• Juicer io
• Facebook (Meta Platforms Ireland Ltd.)
• Instagram (Meta Platforms Ireland Ltd.)
• YouTube (Google Ireland Limited)
• X (formerly Twitter) (X Corp.)
• LinkedIn (LinkedIn Ireland Unlimited Company)
• Xing (New Work SE)
• Kununu (New Work SE)

When you visit our profiles, personal data may be processed by the platform operators. This includes, in particular:

• Profile data (e.g. name, pictures, public information)
• Interactions (e.g. likes, comments, messages)
• Usage data (e.g. IP address, device information)
• Statistical analysis of reach and interactions (e.g. through Facebook Insights)

The processing of personal data is based on our legitimate interest in communicating with users in accordance with Art. 6 (1) (f) GDPR. If consent to process personal data is required, this data will be processed after consent has been granted in accordance with Art. 6 (1) (a) GDPR. The platform operators use their own data processing methods (e.g., cookies, tracking) to analyze user behavior. We have no influence over this. Further information can be found in the privacy policies of the respective providers.

The purpose of processing personal data on social media platforms is a legitimate interest in presenting oneself publicly and interacting with customers in the form of:

• Public relations, corporate communications and customer interaction
• Providing information about products, services and events
• Receiving
• Evaluation of reach and interactions (required data is prepared and provided by the social media platform. We have no influence on the creation and presentation).
• Processing by social media platforms for market research and advertising purposes (creation of user profiles for advertisements that match your interests, which are then displayed to you both within and outside the platform). Storage and analysis also occur across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.

Our website uses plugins from the following social media services:

• Facebook plug-in
• Instagram plugin
• YouTube plugin
• X (Twitter) Plugin
• LinkedIn plugin
• XING plugin
• Kununu plugin

These plugins enable a direct connection between your browser and the social media provider's servers. This allows data such as your IP address, pages visited, and interactions to be transmitted. If you are logged into one of these networks, your activities can be assigned to your user account.

The legal basis for data processing is the user's consent (cookie banner) pursuant to Art. 6 (1) (a) GDPR. A further legal basis for the use of plugins is the legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in optimizing our website and providing social media content for our visitors, communicating with users, and effective and targeted advertising.

The storage of personal data is governed by legal requirements and the guidelines of social media platforms. We only store data for as long as necessary for the respective purpose.

We use technical and organizational measures to protect data from loss, misuse, or unauthorized access. Please note, however, that data transmission over the Internet may be subject to security gaps.

Social Media Aggregator – Juicer

On our website, we use the social media aggregator Juicer, which aggregates content from our various social media platforms (e.g., Instagram, Facebook, Twitter) and presents it in a unified feed on our website. This tool allows you to curate content such as posts, hashtags, images, and photos from the various social media channels and then integrate them into your own website. Personal data (e.g., IP address) may be processed in the process. The service provider is the American company Juicer. saas.group Inc., 304 S. Jones Blvd '1205, Las Vegas Nevada 89107, USA .

Social media platforms offer the opportunity to aggregate social media activity into a social media feed and integrate it into your website as a social wall. This allows you to integrate posts from numerous social media channels based on hashtags, or alternatively, display all posts from an account on the social wall. The social wall is accessible to everyone, even those who aren't logged into the social media platform.

Juicer processes personal data when you interact with the social media feed on our website or view the embedded content. The following data may be collected:

• IP address of the requested computer,
• Date and time of interaction with the feed,
• Information about the social media content viewed,
• Information about the browser and operating system used.

The personal data collected by Juicer will be stored for as long as necessary to provide the social media feed or until you withdraw your consent.

The legal basis for data processing is the user's consent (cookie banner) pursuant to Art. 6 (1) (a) GDPR. A further legal basis for the use of Juicer is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Our legitimate interest lies in optimizing our website and providing aggregated social media content for our visitors, communicating with users, and implementing effective and targeted advertising measures.

Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or how it is used. However, since Juicer is a US company, data may be transferred to servers in the US. Juicer has implemented appropriate safeguards in accordance with the standard contractual clauses (SCCs) pursuant to Art. 46 (2) (c) GDPR to ensure an appropriate level of data protection.

You can learn more about the data processed through the use of Juicer in Juicer's privacy policy: https :// www.Juicer / eu-privacy?tid =138906921

Facebook (Meta Platforms Ireland Ltd.)

We have a public profile on the Facebook social media platform (Meta Platforms Ireland Ltd.). We would like to point out that you use the Facebook page and its features at your own risk. This applies to the use of interactive features (e.g., ratings, liking, commenting). In your own interest, please carefully consider what information you wish to disclose and share with other users.

Facebook is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For users in the USA and Canada, Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA , the operator of Facebook and the parent company.

We operate this page under joint controllership with Facebook pursuant to Art. 26 GDPR. The joint controllership agreement ("Page Controller Addendum") can be found at : https://www.facebook.com/legal/terms/page_controller_addendum 

When you use our Facebook page, personal data is processed. This occurs in particular through:

• Visiting the page: Facebook automatically collects technical data such as IP addresses, browser information, and user behavior. Even if you are not registered with Facebook and visit our Facebook page, Facebook may collect pseudonymous usage data from you.
• Interactions (likes, comments, messages): When you interact with our site, the data you provide will be processed.
• Use of Facebook Insights: Through Insights, a range of personal data is collected directly from users by Facebook for its own purposes. This data is processed regardless of whether the page visitor is logged into Facebook or not, and regardless of whether the page visitors are members of the Facebook network. Insights are aggregated statistics logged by the Facebook server when people interact with pages and the content associated with them. As the page operators, we ourselves have no access to the personal data being processed, but only to the aggregated, anonymized page insights (statistical evaluations of the use of our page, e.g., reach, follower numbers , and interactions). Further information on this data processing can be found at: https://www.facebook.com/legal/terms/information_about_page_insights_data 

The legal basis for processing the data is the user's consent (cookie banner) pursuant to Art. 6 (1) (a) GDPR. Another legal basis for processing your data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR, as we have a legitimate interest in obtaining information about the reach and interaction on our Facebook page and in analyzing the activities in order to improve our offering.

We do not share any personal data with Facebook. However, Facebook may share data with affiliated companies and partners. Because Facebook is a US company, data may be transferred to servers in the US or countries outside the European Union. Facebook is certified under the EU-US Data Privacy Framework and is committed to adhering to European data protection standards.

You can assert your rights both with us and directly with Facebook. You can object to the processing of your data or revoke your consent at any time.

We point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Facebook. We do not have full access to the stored data. Facebook may use your data for advertising purposes, profiling, or market research. Further information on data protection can be found in Facebook 's privacy policy : www.facebook.com/about/privacy/

Instagram (Meta Platform)

For our information service, we also access the technical platform and services of Instagram. Instagram is an online service for sharing photos and videos. Instagram is offered by Meta Platforms Ireland Limited., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. For users in the USA and Canada, the Meta Platforms, Inc., 1601 Willow Road Menlo Park, CA 94025, USA, the operator of Instagram and the parent company.

We operate this Instagram page under joint controllership with Meta pursuant to Art. 26 GDPR. The corresponding agreement can be found here: https://www.facebook.com/legal/terms/page_controller_addendum 

We would like to point out that you use the Instagram page and its features at your own risk. This applies to the use of interactive features (e.g., rating, liking, commenting). In your own interest, please carefully consider what information you wish to disclose and share with other users.

When you visit our Instagram page, Instagram processes various personal data, including:

• Your IP address,
• Information about your device (e.g. cookies),
• Your usage behavior on our site (e.g. interactions, length of stay).

When you visit our website, the plugin establishes a direct connection between your browser and the Instagram servers. Instagram thus receives the information that you have visited our page using your IP address. If you click the Instagram "Like" button while logged into your Instagram account, you can link the content of our pages to your Instagram profile. This allows Instagram to associate your visit to our pages with your user account. Even if you are not registered with Instagram and visit our Instagram page, Instagram may collect pseudonymous data from you.

Data processing is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in improving our website by integrating social media plugins and increasing our reach.

We use the Instagram Insights feature. This feature provides us with aggregated, anonymized statistical data about the use of our Instagram page. This data is provided by Instagram and is based on the processing of information that Instagram collects from users of our page through the use of its services. This data includes, for example, the number of page views, reach and interaction rates, democratic characteristics, and follower count. Processing occurs regardless of whether page visitors are logged in to Instagram or not, and regardless of whether page visitors are members of the Instagram network. Further information about cookies can be found at : https://www.facebook.com/policies/cookies/. 

This data is processed based on Art. 6 (1) (f) GDPR, as we have a legitimate interest in obtaining information about the reareachteractions on our Instagram page and in analyzing the activities on our Instagram page to improve our offering.

We do not share any personal data with Instagram. The data collected in this context will be processed by Instagram and, if necessary, transferred to countries outside the European Union. Since Instagram is a US company, data may be transferred to servers in the US. Instagram is certified under the EU-US Data Privacy Framework and is committed to complying with European data protection standards.

Please note that, as the provider of these pages, we have no knowledge of the content of the transmitted data or how it is used by Instagram. You can learn more about the data processed through the use of Instagram in Instagram 's data usage policy:
https://help.instagram.com/519522125107875 and https://www.facebook.com/help/instagram/788388387972460 or in the full data policy : https://help.instagram.com/581066165581870/?helpref=hc_fnav 

X (formerly Twitter) (X Corp.)

For our information service, we also use the technical platform and services of X (formerly Twitter). X is a microblogging service through which users can receive/publish SMS-like text messages. The service provider is the American company X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. For the European region, Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, is responsible for processing personal data.

We would like to point out that you use the X-Page and its features at your own risk. This applies to the use of interactive features (e.g., retweeting, liking). In your own interest, please carefully consider what information you wish to disclose and share with other users.

We operate this X-page under joint controllership pursuant to Art. 26 GDPR. The corresponding agreement can be found here: gdpr.twitter.com/en/controller-to-controller-transfers.html .

When you visit our X-page, we process personal data, including:

• Profile data (e.g. name, email, telephone number, address book contacts, etc.)
• IP address,
• Information about your device (e.g. cookies),
• Browser
• Information about the device
• Location
• Your usage behavior on our site (e.g. interactions, length of stay).

When you visit our website, the plugin establishes a direct connection between your browser and the X server. X thus receives the information that you have visited our site using your IP address. If you click the X "Tweet button" while logged into your X account, you can link the content of our pages to your X profile. This allows X to associate your visit to our pages with your user account. Even if you are not registered with X and visit our X site, X can collect pseudonymous usage data from you. X thus receives the information that you have visited our site using your IP address.

Data processing is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in improving our website by integrating social media plugins and increasing our reach.

Through X buttons or widgets integrated into websites and the use of cookies, X can record your visits to these websites and assign them to your X profile. Based on this data, content or advertising can be tailored to you.

We operate an X-page and use the X-Analytics feature. This feature provides us with statistical data about the use of our X-page. This data is provided by X and is based on the processing of information that X collects from users of our page through the use of its services. This data includes, for example, reach, follower numbers, and interactions and is used to analyze the use of our page.

This data is processed based on Art. 6 (1) (f) GDPR, as we have a legitimate interest in obtaining information about the reach and interaction on our X-page and in analyzing the activities on our X-page to improve our offering.

We ourselves do not share any personal data with X. The data collected in this context is processed by X and, if necessary, transferred to countries outside the European Union. Since X is a US company, data is transferred to servers in the US. X is certified under the EU-US Data Privacy Framework and is committed to complying with European data protection standards.

We would like to point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by X. Further information can be found in X's privacy policy: https://x.com/de/privacy and in the Cookie Policy: https://help.x.com/rules-and-policies/x-cookies 

YouTube (Google LLC)

YouTube videos are embedded on our website. We use the platform to upload our own videos and make them publicly available. YouTube is used for public relations purposes. YouTube is a video portal and part of Google LLC. Responsible is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you access a YouTube video on our site, your browser automatically connects to YouTube or Google servers. Depending on your settings and whether you are logged in or not, various data is transferred.

We use YouTube's enhanced privacy mode to display and play videos on our website. This ensures that no cookies are initially set. Data about you is only collected when you actively click on and play the video.

Google stores your IP address and our URL. If you are logged in, YouTube can associate your interactions on our website with your profile. This includes data such as:

• Personal data in videos (e.g. image, voice, information provided by overlay)
• Communication data (e.g. likes, comments, messages)
• Tracking data (e.g. embedded on the company website)
• Usage data (e.g. IP address, device information, location data)
• Statistical analysis of reach and interactions

When you are not signed in, Google stores data with a unique identifier associated with your device, browser, or app.

The legal basis for processing the data is the user's consent (cookie banner) pursuant to Art. 6 (1) (a) GDPR. If individuals are clearly recognizable in the video, the individual's consent is also present. A further legal basis for processing your data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR for corporate communications and marketing purposes, to make multimedia content accessible to our visitors. Furthermore, we have a legitimate interest in obtaining information about reach and interaction and in analyzing activities in order to improve our offering.

The data YouTube receives and processes from you is stored on Google servers. Most of the servers are located in the USA (a third country). Google stores the collected data for varying lengths of time. Some data can be deleted at any time, some are automatically deleted after a limited period, and still others are stored by Google for a longer period. Data can generally be deleted manually in your Google account.

We do not share any personal data with YouTube. The data collected in this context is processed by YouTube and may be transferred to countries outside the European Union. Since YouTube is a US company, data is transferred to servers in the US. Google (YouTube) is certified under the EU-US Data Privacy Framework and is committed to complying with European data protection standards.

We would like to point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by YouTube. Further information can be found in YouTube's privacy policy: https://policies.google.com/privacy?hl=de 

LinkedIn

We use the LinkedIn social network. This is a network focused on professional contacts and career development. The company uses LinkedIn for external representation, customer communication, advertising, recruiting, and networking. This includes managing a company profile as well as targeted interaction with user profiles (e.g., through contact requests, comments, likes, posts, and messages).

LinkedIn is operated by LinkedIn Corporation, 1000 W. Maude Ave., Sunnyvale, CA 94085, USA. For users residing in the European Economic Area and Switzerland, LinkedIn is represented by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland ("LinkedIn Ireland ").

We maintain the company page to introduce ourselves, inform ourselves about developments and communicate with users.

As part of the use of LinkedIn, we receive aggregated evaluations (e.g., analytics data from visitors, updates, followers, etc.) regarding the use of our LinkedIn page. These evaluations help us better understand interests, provide relevant content, and address our target groups more specifically. The data is available to us in aggregate form and does not allow us to draw conclusions about individual users. The data collected by LinkedIn is also used for market research and advertising purposes by LinkedIn itself, over which we have no control. This is done with cookies.

The legal basis for the processing of data is Art. 6 (1) (a) GDPR when making direct contact with potential applicants or customers in accordance with Art. 6 (1) (b) GDPR regarding participation in advertising measures. In the context of initiating and conducting business relationships, processing takes place in accordance with Art. 6 (1) (c) GDPR and to comply with statutory retention periods. Art. 6 (1) (f) GDPR represents our legitimate interest in external representation, customer communication, network maintenance, marketing and employer branding. We have a legitimate interest in presenting our company as comprehensively as possible on social media and in informing applicants and business partners. Furthermore, our legitimate interest lies in improving the reach of our content and promoting interaction through the integration of LinkedIn functions.

Each time you access our website, a connection is established to LinkedIn's servers. LinkedIn thus receives information that you have visited our website using your IP address. If you are logged into your LinkedIn account and click the "LinkedIn button" on our website, LinkedIn can associate your visit to our website with you and your user account. Even if you are not registered with LinkedIn and visit our LinkedIn page, LinkedIn can collect pseudonymous usage data from you. LinkedIn thus receives the information that you have visited our site using your IP address.

We do not share any personal data with LinkedIn. The data collected in this context is processed by LinkedIn and may be transferred to countries outside the European Union. Since LinkedIn is a US company, data is transferred to servers in the US. LinkedIn is certified under the EU-US Data Privacy Framework and is committed to complying with European data protection standards.

We would like to point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by LinkedIn. Further information can be found in LinkedIn's privacy policy (worldwide): de.linkedin.com/legal/privacy-policy , and in the European privacy policy:
https://de.linkedin.com/legal/privacy/eu or in the cookie policy: https://de.linkedin.com/legal/cookie-policy 

Xing and kununu (New Work SE)

We use the social networks Xing and kununu. These are networks focused on professional contacts and career development. The company uses the sites to present the company, to communicate (with interested parties, applicants, and business partners), for recruiting, to publish job openings, and to respond to reviews and feedback on kununu. They also use these sites to manage a company profile and to interact specifically with user profiles (e.g., through contact requests, comments, likes, posts, and messages).

Xing and kununu are operated by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

When you visit our profiles on XING or kununu, personal data is processed by the platform operators. This includes, among other things:

• Basic/mandatory information (e.g. name, position, employer)
• Communication data (e.g. messages, comments, likes)
• Usage data (e.g. IP address, device information, location data)
• Tracking information (aggregated evaluations of reach and interactions)

When you visit our website, the plugin establishes a direct connection between your browser and the XING servers. XING thus receives the information that you have visited our site using your IP address. If you click the XING "Like" button while logged into your XING account, you can link the content of our pages to your XING profile. This allows XING to associate your visit to our pages with your user account. Even if you are not registered with XING and visit our XING page, XING may collect pseudonymous usage data from you. XING thus receives the information that you have visited our site using your IP address.

Data processing is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in presenting our company as comprehensively as possible on social media and providing information to applicants and business partners. Furthermore, we have a legitimate interest in improving our website through the integration of social media plugins and increasing our reach.

If you apply directly for one of our job postings via the XING platform, your personal application data will initially be processed via the infrastructure of New York SE (operator). The platform will then send us your application documents by email. The following data is generally processed:

• Name,
• contact details,
• Professional background
• if applicable, profile information (if you have authorized it for transmission)
• if applicable, additional application documents (if uploaded by you)

If the position is published in cooperation with the Federal Employment Agency (cross posting), the application documents will not be submitted to the Federal Employment Agency. They will not be passed on to third parties unless we are legally obligated to do so or you have expressly consented.

The application data is processed to initiate an employment relationship in accordance with Art. 6 (1) (b) GDPR and Section 26 BDSG.

Your personal data will be stored for as long as necessary to decide on your application. If no employment relationship is established, your application documents will be deleted at the latest six months after completion of the application process (to defend against legal claims or against possible AGG allegations), unless you have given us your consent to longer storage or statutory retention periods prevent this. If you give us your consent to be included in our applicant pool, we will store your application data for a maximum of 12 months in order to contact you about future suitable job offers. If accounting-relevant processing has been carried out, such as the reimbursement of travel expenses, the data required for this will be deleted in compliance with the statutory retention periods, which are usually 6 or 10 years. If the application is successful and we conclude a contract with you, we will transfer the data collected as part of the application process to your personnel file.

We also use XING Insights to analyze our site usage and understand user interactions. This helps us improve our communication strategies. XING Insights is an analytics tool that collects and processes anonymized data to provide us with detailed information about our target audience.

This data is processed based on Art. 6 (1) (f) GDPR, as we have a legitimate interest in obtaining information about the reach and interactions on our XING page and in analyzing the activities on our XING page in order to improve our offering.

We do not share any personal data with Xing and kununu. The data collected in this context is processed by them and, if necessary, transferred to countries outside the European Union. However, since XING and kununu are German companies, the data is processed in accordance with European data protection regulations.

We would like to point out that, as the provider of these pages, we have no knowledge of the content of the transmitted data or its use by Xing and kununu. Further information can be found in XING's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung 

18. Scope and changes to this privacy policy

This privacy policy applies exclusively to the use of the websites we provide. It does not apply to the websites of other service providers to which we merely refer via a link. We assume no responsibility or liability for third-party statements and policies unrelated to our website.

We reserve the right to change, update or supplement the privacy policy at any time.

It is important to us to inform you about the processing of personal data to the best of our knowledge and belief. If you have any questions about data protection on our website, please do not hesitate to contact the responsible person or our data protection officer.

As of August 2026