Pri­va­cy Po­li­cy

For us, tax ad­vice me­ans pro­vi­ding you with fo­re­sight and proac­ti­ve sup­port. We take on all tasks re­la­ting to the ful­fill­ment of tax ob­li­ga­ti­ons and the pro­tec­tion of your rights – re­lia­bly and com­pre­hen­si­ve­ly. Our fo­cus is al­ways on your in­te­rests, be­cau­se we work for you and not for the tax of­fice. With sound ex­per­ti­se, a sure in­stinct for cur­rent case law and con­sis­tent stead­fast­ness in deal­ing with the tax aut­ho­ri­ties, we work tog­e­ther to achie­ve op­ti­mum re­sults.

Pri­va­cy Po­li­cy

1. An over­view of data pro­tec­tion

Ge­ne­ral in­for­ma­ti­on

The fol­lo­wing in­for­ma­ti­on will pro­vi­de you with an easy to na­vi­ga­te over­view of what will hap­pen with your per­so­nal data when you vi­sit this web­site. The term “per­so­nal data” com­pri­ses all data that can be used to per­so­nal­ly iden­ti­fy you. For de­tail­ed in­for­ma­ti­on about the sub­ject mat­ter of data pro­tec­tion, plea­se con­sult our Data Pro­tec­tion De­cla­ra­ti­on, which we have in­cluded be­neath this copy.

Data re­cor­ding on this web­site

Who is the re­spon­si­ble par­ty for the re­cor­ding of data on this web­site (i.e., the “con­trol­ler”)?

The data on this web­site is pro­ces­sed by the ope­ra­tor of the web­site, who­se cont­act in­for­ma­ti­on is available un­der sec­tion “In­for­ma­ti­on about the re­spon­si­ble par­ty (re­fer­red to as the “con­trol­ler” in the GDPR)” in this Pri­va­cy Po­li­cy.

How do we re­cord your data?

We coll­ect your data as a re­sult of your sha­ring of your data with us. This may, for in­s­tance be in­for­ma­ti­on you en­ter into our cont­act form.

Other data shall be re­cor­ded by our IT sys­tems au­to­ma­ti­cal­ly or af­ter you con­sent to its re­cor­ding du­ring your web­site vi­sit. This data com­pri­ses pri­ma­ri­ly tech­ni­cal in­for­ma­ti­on (e.g., web brow­ser, ope­ra­ting sys­tem, or time the site was ac­ces­sed). This in­for­ma­ti­on is re­cor­ded au­to­ma­ti­cal­ly when you ac­cess this web­site.

What are the pur­po­ses we use your data for?

A por­ti­on of the in­for­ma­ti­on is ge­ne­ra­ted to gua­ran­tee the er­ror free pro­vi­si­on of the web­site. Other data may be used to ana­ly­ze your user pat­terns. If con­tracts can be con­cluded or in­itia­ted via the web­site, the trans­mit­ted data will also be pro­ces­sed for con­tract of­fers, or­ders or other or­der en­qui­ries.

What rights do you have as far as your in­for­ma­ti­on is con­cer­ned?

You have the right to re­cei­ve in­for­ma­ti­on about the source, re­ci­pi­ents, and pur­po­ses of your ar­chi­ved per­so­nal data at any time wi­t­hout ha­ving to pay a fee for such dis­clo­sures. You also have the right to de­mand that your data are rec­ti­fied or era­di­ca­ted. If you have con­sen­ted to data pro­ces­sing, you have the op­ti­on to re­vo­ke this con­sent at any time, which shall af­fect all fu­ture data pro­ces­sing. Mo­reo­ver, you have the right to de­mand that the pro­ces­sing of your data be rest­ric­ted un­der cer­tain cir­cum­s­tances. Fur­ther­mo­re, you have the right to log a com­plaint with the com­pe­tent su­per­vi­sing agen­cy.

Plea­se do not he­si­ta­te to cont­act us at any time if you have ques­ti­ons about this or any other data pro­tec­tion re­la­ted is­sues.

Ana­ly­sis tools and tools pro­vi­ded by third par­ties

The­re is a pos­si­bi­li­ty that your brow­sing pat­terns will be sta­tis­ti­cal­ly ana­ly­zed when your vi­sit this web­site. Such ana­ly­ses are per­for­med pri­ma­ri­ly with what we re­fer to as ana­ly­sis pro­grams.

For de­tail­ed in­for­ma­ti­on about the­se ana­ly­sis pro­grams plea­se con­sult our Data Pro­tec­tion De­cla­ra­ti­on be­low.

2. Hos­ting

We are hos­ting the con­tent of our web­site at the fol­lo­wing pro­vi­der:

Ex­ter­nal Hos­ting

This web­site is hos­ted ex­tern­al­ly. Per­so­nal data coll­ec­ted on this web­site are stored on the ser­vers of the host. The­se may in­clude, but are not li­mi­t­ed to, IP ad­dres­ses, cont­act re­quests, me­ta­da­ta and com­mu­ni­ca­ti­ons, con­tract in­for­ma­ti­on, cont­act in­for­ma­ti­on, names, web page ac­cess, and other data ge­ne­ra­ted th­rough a web site.

The ex­ter­nal hos­ting ser­ves the pur­po­se of ful­fil­ling the con­tract with our po­ten­ti­al and exis­ting cus­to­mers (Art. 6(1)(b) GDPR) and in the in­te­rest of se­cu­re, fast, and ef­fi­ci­ent pro­vi­si­on of our on­line ser­vices by a pro­fes­sio­nal pro­vi­der (Art. 6(1)(f) GDPR). If ap­pro­pria­te con­sent has been ob­tai­ned, the pro­ces­sing is car­ri­ed out ex­clu­si­ve­ly on the ba­sis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, in­so­far the con­sent in­cludes the sto­rage of coo­kies or the ac­cess to in­for­ma­ti­on in the user’s end de­vice (e.g., de­vice fin­ger­prin­ting) wi­thin the mea­ning of the TDDDG. This con­sent can be re­vo­ked at any time.

Our host(s) will only pro­cess your data to the ext­ent ne­ces­sa­ry to ful­fil its per­for­mance ob­li­ga­ti­ons and to fol­low our in­s­truc­tions with re­spect to such data.

We are using the fol­lo­wing host(s):

NorthC Deutsch­land GmbH
Am Tower 5
90475 Nürn­berg

Data pro­ces­sing

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the abo­ve-men­tio­ned ser­vice. This is a con­tract man­da­ted by data pri­va­cy laws that gua­ran­tees that they pro­cess per­so­nal data of our web­site vi­si­tors only ba­sed on our in­s­truc­tions and in com­pli­ance with the GDPR.

3. Ge­ne­ral in­for­ma­ti­on and man­da­to­ry in­for­ma­ti­on

Data pro­tec­tion

The ope­ra­tors of this web­site and its pa­ges take the pro­tec­tion of your per­so­nal data very se­rious­ly. Hence, we hand­le your per­so­nal data as con­fi­den­ti­al in­for­ma­ti­on and in com­pli­ance with the sta­tu­to­ry data pro­tec­tion re­gu­la­ti­ons and this Data Pro­tec­tion De­cla­ra­ti­on.

When­ever you use this web­site, a va­rie­ty of per­so­nal in­for­ma­ti­on will be coll­ec­ted. Per­so­nal data com­pri­ses data that can be used to per­so­nal­ly iden­ti­fy you. This Data Pro­tec­tion De­cla­ra­ti­on ex­plains which data we coll­ect as well as the pur­po­ses we use this data for. It also ex­plains how, and for which pur­po­se the in­for­ma­ti­on is coll­ec­ted.

We here­wi­th ad­vi­se you that the trans­mis­si­on of data via the In­ter­net (i.e., th­rough e‑mail com­mu­ni­ca­ti­ons) may be pro­ne to se­cu­ri­ty gaps. It is not pos­si­ble to com­ple­te­ly pro­tect data against third-par­ty ac­cess.

In­for­ma­ti­on about the re­spon­si­ble par­ty (re­fer­red to as the “con­trol­ler” in the GDPR)

The data pro­ces­sing con­trol­ler on this web­site is:

REDONIS PartG
Steu­er­be­ra­tung Rechts­be­ra­tung Wirt­schafts­prü­fung
Ki­no­weg 4
D‑94209 Re­gen

Pho­ne: 09921–954‑0
E‑mail: info@​redonis.​de

The con­trol­ler is the na­tu­ral per­son or le­gal en­ti­ty that sin­gle-han­dedly or joint­ly with others makes de­cis­i­ons as to the pur­po­ses of and re­sour­ces for the pro­ces­sing of per­so­nal data (e.g., names, e‑mail ad­dres­ses, etc.).

Sto­rage du­ra­ti­on

Un­less a more spe­ci­fic sto­rage pe­ri­od has been spe­ci­fied in this pri­va­cy po­li­cy, your per­so­nal data will re­main with us un­til the pur­po­se for which it was coll­ec­ted no lon­ger ap­pli­es. If you as­sert a ju­s­ti­fied re­quest for de­le­ti­on or re­vo­ke your con­sent to data pro­ces­sing, your data will be de­le­ted, un­less we have other le­gal­ly per­mis­si­ble re­asons for sto­ring your per­so­nal data (e.g., tax or com­mer­cial law re­ten­ti­on pe­ri­ods); in the lat­ter case, the de­le­ti­on will take place af­ter the­se re­asons cea­se to ap­p­ly.

Ge­ne­ral in­for­ma­ti­on on the le­gal ba­sis for the data pro­ces­sing on this web­site

If you have con­sen­ted to data pro­ces­sing, we pro­cess your per­so­nal data on the ba­sis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial ca­te­go­ries of data are pro­ces­sed ac­cor­ding to Art. 9 (1) DSGVO. In the case of ex­pli­cit con­sent to the trans­fer of per­so­nal data to third count­ries, the data pro­ces­sing is also ba­sed on Art. 49 (1)(a) GDPR. If you have con­sen­ted to the sto­rage of coo­kies or to the ac­cess to in­for­ma­ti­on in your end de­vice (e.g., via de­vice fin­ger­prin­ting), the data pro­ces­sing is ad­di­tio­nal­ly ba­sed on § 25 (1) TDDDG. The con­sent can be re­vo­ked at any time. If your data is re­qui­red for the ful­fill­ment of a con­tract or for the im­ple­men­ta­ti­on of pre-con­trac­tu­al me­a­su­res, we pro­cess your data on the ba­sis of Art. 6(1)(b) GDPR. Fur­ther­mo­re, if your data is re­qui­red for the ful­fill­ment of a le­gal ob­li­ga­ti­on, we pro­cess it on the ba­sis of Art. 6(1)(c) GDPR. Fur­ther­mo­re, the data pro­ces­sing may be car­ri­ed out on the ba­sis of our le­gi­ti­ma­te in­te­rest ac­cor­ding to Art. 6(1)(f) GDPR. In­for­ma­ti­on on the re­le­vant le­gal ba­sis in each in­di­vi­du­al case is pro­vi­ded in the fol­lo­wing pa­ra­graphs of this pri­va­cy po­li­cy.

De­si­gna­ti­on of a data pro­tec­tion of­fi­cer

We have ap­poin­ted a data pro­tec­tion of­fi­cer.

REDONIS PartG
Steu­er­be­ra­tung Rechts­be­ra­tung Wirt­schafts­prü­fung
– Da­ten­schutz­be­auf­trag­ter -
Ki­no­weg 4
D‑94209 Re­gen

Pho­ne: 09921–954‑0
E‑mail: datenschutz@​redonis.​de

Re­ci­pi­ents of per­so­nal data

In the scope of our busi­ness ac­ti­vi­ties, we co­ope­ra­te with va­rious ex­ter­nal par­ties. In some ca­ses, this also re­qui­res the trans­fer of per­so­nal data to the­se ex­ter­nal par­ties. We only dis­c­lo­se per­so­nal data to ex­ter­nal par­ties if this is re­qui­red as part of the ful­fill­ment of a con­tract, if we are le­gal­ly ob­li­ga­ted to do so (e.g., dis­clo­sure of data to tax aut­ho­ri­ties), if we have a le­gi­ti­ma­te in­te­rest in the dis­clo­sure pur­su­ant to Art. 6 (1)(f) GDPR, or if an­o­ther le­gal ba­sis per­mits the dis­clo­sure of this data. When using pro­ces­sors, we only dis­c­lo­se per­so­nal data of our cus­to­mers on the ba­sis of a va­lid con­tract on data pro­ces­sing. In the case of joint pro­ces­sing, a joint pro­ces­sing agree­ment is con­cluded.

Re­vo­ca­ti­on of your con­sent to the pro­ces­sing of data

A wide ran­ge of data pro­ces­sing tran­sac­tions are pos­si­ble only sub­ject to your ex­press con­sent. You can also re­vo­ke at any time any con­sent you have al­re­a­dy gi­ven us. This shall be wi­t­hout pre­ju­di­ce to the lawful­ness of any data coll­ec­tion that oc­cur­red pri­or to your re­vo­ca­ti­on.

Right to ob­ject to the coll­ec­tion of data in spe­cial ca­ses; right to ob­ject to di­rect ad­ver­ti­sing (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a com­plaint with the com­pe­tent su­per­vi­so­ry agen­cy

In the event of vio­la­ti­ons of the GDPR, data sub­jects are en­tit­led to log a com­plaint with a su­per­vi­so­ry agen­cy, in par­ti­cu­lar in the mem­ber sta­te whe­re they usual­ly main­tain their do­mic­i­le, place of work or at the place whe­re the al­le­ged vio­la­ti­on oc­cur­red. The right to log a com­plaint is in ef­fect re­gard­less of any other ad­mi­nis­tra­ti­ve or court pro­cee­dings available as le­gal re­cour­ses.

Right to data por­ta­bi­li­ty

You have the right to have data that we pro­cess au­to­ma­ti­cal­ly on the ba­sis of your con­sent or in ful­fill­ment of a con­tract han­ded over to you or to a third par­ty in a com­mon, ma­chi­ne-re­a­da­ble for­mat. If you should de­mand the di­rect trans­fer of the data to an­o­ther con­trol­ler, this will be done only if it is tech­ni­cal­ly fe­a­si­ble.

In­for­ma­ti­on about, rec­ti­fi­ca­ti­on and era­di­ca­ti­on of data

Wi­thin the scope of the ap­pli­ca­ble sta­tu­to­ry pro­vi­si­ons, you have the right to de­mand in­for­ma­ti­on about your ar­chi­ved per­so­nal data, their source and re­ci­pi­ents as well as the pur­po­se of the pro­ces­sing of your data at any time. You may also have a right to have your data rec­ti­fied or era­di­ca­ted. If you have ques­ti­ons about this sub­ject mat­ter or any other ques­ti­ons about per­so­nal data, plea­se do not he­si­ta­te to cont­act us at any time.

Right to de­mand pro­ces­sing rest­ric­tions

You have the right to de­mand the im­po­si­ti­on of rest­ric­tions as far as the pro­ces­sing of your per­so­nal data is con­cer­ned. To do so, you may cont­act us at any time. The right to de­mand rest­ric­tion of pro­ces­sing ap­pli­es in the fol­lo­wing ca­ses:

  • In the event that you should dis­pu­te the cor­rect­ness of your data ar­chi­ved by us, we will usual­ly need some time to ve­ri­fy this cla­im. Du­ring the time that this in­ves­ti­ga­ti­on is on­go­ing, you have the right to de­mand that we rest­rict the pro­ces­sing of your per­so­nal data.
  • If the pro­ces­sing of your per­so­nal data was/is con­duc­ted in an un­lawful man­ner, you have the op­ti­on to de­mand the rest­ric­tion of the pro­ces­sing of your data in­s­tead of de­man­ding the era­di­ca­ti­on of this data.
  • If we do not need your per­so­nal data any lon­ger and you need it to exer­cise, de­fend or cla­im le­gal en­tit­le­ments, you have the right to de­mand the rest­ric­tion of the pro­ces­sing of your per­so­nal data in­s­tead of its era­di­ca­ti­on.
  • If you have rai­sed an ob­jec­tion pur­su­ant to Art. 21(1) GDPR, your rights and our rights will have to be weig­hed against each other. As long as it has not been de­ter­mi­ned who­se in­te­rests pr­e­vail, you have the right to de­mand a rest­ric­tion of the pro­ces­sing of your per­so­nal data.

If you have rest­ric­ted the pro­ces­sing of your per­so­nal data, the­se data – with the ex­cep­ti­on of their ar­chi­ving – may be pro­ces­sed only sub­ject to your con­sent or to cla­im, exer­cise or de­fend le­gal en­tit­le­ments or to pro­tect the rights of other na­tu­ral per­sons or le­gal en­ti­ties or for im­portant pu­blic in­te­rest re­asons ci­ted by the Eu­ro­pean Uni­on or a mem­ber sta­te of the EU.

SSL and/or TLS en­cryp­ti­on

For se­cu­ri­ty re­asons and to pro­tect the trans­mis­si­on of con­fi­den­ti­al con­tent, such as purcha­se or­ders or in­qui­ries you sub­mit to us as the web­site ope­ra­tor, this web­site uses eit­her an SSL or a TLS en­cryp­ti­on pro­gram. You can re­co­gni­ze an en­crypt­ed con­nec­tion by che­cking whe­ther the ad­dress line of the brow­ser swit­ches from “http://” to “https://” and also by the ap­pearance of the lock icon in the brow­ser line.

If the SSL or TLS en­cryp­ti­on is ac­ti­va­ted, data you trans­mit to us can­not be read by third par­ties.

Re­jec­tion of un­so­li­ci­ted e‑mails

We here­wi­th ob­ject to the use of cont­act in­for­ma­ti­on pu­blished in con­junc­tion with the man­da­to­ry in­for­ma­ti­on to be pro­vi­ded in our Site No­ti­ce to send us pro­mo­tio­nal and in­for­ma­ti­on ma­te­ri­al that we have not ex­press­ly re­ques­ted. The ope­ra­tors of this web­site and its pa­ges re­ser­ve the ex­press right to take le­gal ac­tion in the event of the un­so­li­ci­ted sen­ding of pro­mo­tio­nal in­for­ma­ti­on, for in­s­tance via SPAM mes­sa­ges.

4. Re­cor­ding of data on this web­site

Coo­kies

Our web­sites and pa­ges use what the in­dus­try re­fers to as “coo­kies.” Coo­kies are small data packa­ges that do not cau­se any da­ma­ge to your de­vice. They are eit­her stored tem­po­r­a­ri­ly for the du­ra­ti­on of a ses­si­on (ses­si­on coo­kies) or they are per­ma­nent­ly ar­chi­ved on your de­vice (per­ma­nent coo­kies). Ses­si­on coo­kies are au­to­ma­ti­cal­ly de­le­ted once you ter­mi­na­te your vi­sit. Per­ma­nent coo­kies re­main ar­chi­ved on your de­vice un­til you ac­tively de­le­te them, or they are au­to­ma­ti­cal­ly era­di­ca­ted by your web brow­ser.

Coo­kies can be is­sued by us (first-par­ty coo­kies) or by third-par­ty com­pa­nies (so-cal­led third-par­ty coo­kies). Third-par­ty coo­kies enable the in­te­gra­ti­on of cer­tain ser­vices of third-par­ty com­pa­nies into web­sites (e.g., coo­kies for hand­ling pay­ment ser­vices).

Coo­kies have a va­rie­ty of func­tions. Many coo­kies are tech­ni­cal­ly es­sen­ti­al sin­ce cer­tain web­site func­tions would not work in the ab­sence of the­se coo­kies (e.g., the shop­ping cart func­tion or the dis­play of vi­de­os). Other coo­kies may be used to ana­ly­ze user be­ha­vi­or or for pro­mo­tio­nal pur­po­ses.

Coo­kies, which are re­qui­red for the per­for­mance of elec­tro­nic com­mu­ni­ca­ti­on tran­sac­tions, for the pro­vi­si­on of cer­tain func­tions you want to use (e.g., for the shop­ping cart func­tion) or tho­se that are ne­ces­sa­ry for the op­ti­miza­ti­on (re­qui­red coo­kies) of the web­site (e.g., coo­kies that pro­vi­de me­a­sura­ble in­sights into the web au­di­ence), shall be stored on the ba­sis of Art. 6(1)(f) GDPR, un­less a dif­fe­rent le­gal ba­sis is ci­ted. The ope­ra­tor of the web­site has a le­gi­ti­ma­te in­te­rest in the sto­rage of re­qui­red coo­kies to en­su­re the tech­ni­cal­ly er­ror-free and op­ti­mi­zed pro­vi­si­on of the operator’s ser­vices. If your con­sent to the sto­rage of the coo­kies and si­mi­lar re­co­gni­ti­on tech­no­lo­gies has been re­ques­ted, the pro­ces­sing oc­curs ex­clu­si­ve­ly on the ba­sis of the con­sent ob­tai­ned (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this con­sent may be re­vo­ked at any time.

You have the op­ti­on to set up your brow­ser in such a man­ner that you will be no­ti­fied any time coo­kies are pla­ced and to per­mit the ac­cep­tance of coo­kies only in spe­ci­fic ca­ses. You may also ex­clude the ac­cep­tance of coo­kies in cer­tain ca­ses or in ge­ne­ral or ac­ti­va­te the de­le­te-func­tion for the au­to­ma­tic era­di­ca­ti­on of coo­kies when the brow­ser clo­ses. If coo­kies are de­ac­ti­va­ted, the func­tions of this web­site may be li­mi­t­ed.

Which coo­kies and ser­vices are used on this web­site can be found in this pri­va­cy po­li­cy.

Con­sent with Borlabs Coo­kie

Our web­site uses the Borlabs con­sent tech­no­lo­gy to ob­tain your con­sent to the sto­rage of cer­tain coo­kies in your brow­ser or for the use of cer­tain tech­no­lo­gies and for their data pri­va­cy pro­tec­tion com­pli­ant do­cu­men­ta­ti­on. The pro­vi­der of this tech­no­lo­gy is Borlabs GmbH, Rü­ben­kamp 32, 22305 Ham­burg, Ger­ma­ny (her­ein­af­ter re­fer­red to as Borlabs).

When­ever you vi­sit our web­site, a Borlabs coo­kie will be stored in your brow­ser, which ar­chi­ves any de­cla­ra­ti­ons or re­vo­ca­ti­ons of con­sent you have en­te­red. The­se data are not shared with the pro­vi­der of the Borlabs tech­no­lo­gy.

The re­cor­ded data shall re­main ar­chi­ved un­til you ask us to era­di­ca­te them, de­le­te the Borlabs coo­kie on your own or the pur­po­se of sto­ring the data no lon­ger exists. This shall be wi­t­hout pre­ju­di­ce to any re­ten­ti­on ob­li­ga­ti­ons man­da­ted by law. To re­view the de­tails of Borlabs’ data pro­ces­sing po­li­ci­es, plea­se vi­sit https://​de​.borlabs​.io/​k​b​/​w​e​l​c​h​e​-​d​a​t​e​n​-​s​p​e​i​c​h​e​r​t​-​b​o​r​l​a​b​s​-​c​o​o​k​ie/

We use the Borlabs coo­kie con­sent tech­no­lo­gy to ob­tain the de­cla­ra­ti­ons of con­sent man­da­ted by law for the use of coo­kies. The le­gal ba­sis for the use of such coo­kies is Art. 6(1)(c) GDPR.

Ser­ver log files

The pro­vi­der of this web­site and its pa­ges au­to­ma­ti­cal­ly coll­ects and stores in­for­ma­ti­on in so-cal­led ser­ver log files, which your brow­ser com­mu­ni­ca­tes to us au­to­ma­ti­cal­ly. The in­for­ma­ti­on com­pri­ses:

  • The type and ver­si­on of brow­ser used
  • The used ope­ra­ting sys­tem
  • Re­fer­rer URL
  • The host­na­me of the ac­ces­sing com­pu­ter
  • The time of the ser­ver in­quiry
  • The IP ad­dress

This data is not mer­ged with other data sources.

This data is re­cor­ded on the ba­sis of Art. 6(1)(f) GDPR. The ope­ra­tor of the web­site has a le­gi­ti­ma­te in­te­rest in the tech­ni­cal­ly er­ror free de­pic­tion and the op­ti­miza­ti­on of the operator’s web­site. In or­der to achie­ve this, ser­ver log files must be re­cor­ded.

Cont­act form

If you sub­mit in­qui­ries to us via our cont­act form, the in­for­ma­ti­on pro­vi­ded in the cont­act form as well as any cont­act in­for­ma­ti­on pro­vi­ded the­r­ein will be stored by us in or­der to hand­le your in­quiry and in the event that we have fur­ther ques­ti­ons. We will not share this in­for­ma­ti­on wi­t­hout your con­sent.

The pro­ces­sing of the­se data is ba­sed on Art. 6(1)(b) GDPR, if your re­quest is re­la­ted to the exe­cu­ti­on of a con­tract or if it is ne­ces­sa­ry to car­ry out pre-con­trac­tu­al me­a­su­res. In all other ca­ses the pro­ces­sing is ba­sed on our le­gi­ti­ma­te in­te­rest in the ef­fec­ti­ve pro­ces­sing of the re­quests ad­dres­sed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been re­ques­ted; the con­sent can be re­vo­ked at any time.

The in­for­ma­ti­on you have en­te­red into the cont­act form shall re­main with us un­til you ask us to era­di­ca­te the data, re­vo­ke your con­sent to the ar­chi­ving of data or if the pur­po­se for which the in­for­ma­ti­on is be­ing ar­chi­ved no lon­ger exists (e.g., af­ter we have con­cluded our re­spon­se to your in­quiry). This shall be wi­t­hout pre­ju­di­ce to any man­da­to­ry le­gal pro­vi­si­ons, in par­ti­cu­lar re­ten­ti­on pe­ri­ods.

Re­quest by e‑mail, te­le­pho­ne, or fax

If you cont­act us by e‑mail, te­le­pho­ne or fax, your re­quest, in­clu­ding all re­sul­ting per­so­nal data (name, re­quest) will be stored and pro­ces­sed by us for the pur­po­se of pro­ces­sing your re­quest. We do not pass the­se data on wi­t­hout your con­sent.

The­se data are pro­ces­sed on the ba­sis of Art. 6(1)(b) GDPR if your in­quiry is re­la­ted to the ful­fill­ment of a con­tract or is re­qui­red for the per­for­mance of pre-con­trac­tu­al me­a­su­res. In all other ca­ses, the data are pro­ces­sed on the ba­sis of our le­gi­ti­ma­te in­te­rest in the ef­fec­ti­ve hand­ling of in­qui­ries sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the ba­sis of your con­sent (Art. 6(1)(a) GDPR) if it has been ob­tai­ned; the con­sent can be re­vo­ked at any time.

The data sent by you to us via cont­act re­quests re­main with us un­til you re­quest us to de­le­te, re­vo­ke your con­sent to the sto­rage or the pur­po­se for the data sto­rage lap­ses (e.g. af­ter com­ple­ti­on of your re­quest). Man­da­to­ry sta­tu­to­ry pro­vi­si­ons – in par­ti­cu­lar sta­tu­to­ry re­ten­ti­on pe­ri­ods – re­main un­af­fec­ted.

5. Ana­ly­sis tools and ad­ver­ti­sing

Ma­to­mo

This web­site uses the open-source web ana­ly­sis ser­vice Ma­to­mo.

Th­rough Ma­to­mo, we are able to coll­ect and ana­ly­ze data on the use of our web­site-by-web­site vi­si­tors. This en­ables us to find out, for in­s­tance, when which page views oc­cur­red and from which re­gi­on they came. In ad­di­ti­on, we coll­ect va­rious log files (e.g. IP ad­dress, re­fer­rer, brow­ser, and ope­ra­ting sys­tem used) and can me­a­su­re whe­ther our web­site vi­si­tors per­form cer­tain ac­tions (e.g. clicks, purcha­ses, etc.).

The use of this ana­ly­sis tool is ba­sed on Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a le­gi­ti­ma­te in­te­rest in the ana­ly­sis of user pat­terns, in or­der to op­ti­mi­ze the operator’s web of­fe­rings and ad­ver­ti­sing. If ap­pro­pria­te con­sent has been ob­tai­ned, the pro­ces­sing is car­ri­ed out ex­clu­si­ve­ly on the ba­sis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, in­so­far the con­sent in­cludes the sto­rage of coo­kies or the ac­cess to in­for­ma­ti­on in the user’s end de­vice (e.g., de­vice fin­ger­prin­ting) wi­thin the mea­ning of the TDDDG. This con­sent can be re­vo­ked at any time.

Hos­ting

We host Ma­to­mo ex­clu­si­ve­ly on our own ser­vers so that all ana­ly­sis data re­mains with us and is not pas­sed on.

6.Plug-ins and Tools

You­Tube with ex­pan­ded data pro­tec­tion in­te­gra­ti­on

This web­site in­te­gra­tes vi­de­os from the You­Tube web­site. The ope­ra­tor of the web­site is Goog­le Ire­land Li­mi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land.

When you vi­sit one of the­se web­sites on which You­Tube is in­te­gra­ted, a con­nec­tion to the You­Tube ser­vers is es­tab­lished. This tells the You­Tube ser­ver which of our pa­ges you have vi­si­ted. If you are log­ged into your You­Tube ac­count, you enable You­Tube to as­sign your sur­fing be­ha­vi­or di­rect­ly to your per­so­nal pro­fi­le. You can pre­vent this by log­ging out of your You­Tube ac­count.

We use You­Tube in ex­ten­ded data pro­tec­tion mode. Ac­cor­ding to You­Tube, vi­de­os that are play­ed in ex­ten­ded data pro­tec­tion mode are not used to per­so­na­li­ze brow­sing on You­Tube. Ads that are play­ed in ex­ten­ded data pro­tec­tion mode are also not per­so­na­li­zed. No coo­kies are set in ex­ten­ded data pro­tec­tion mode. In­s­tead, so-cal­led lo­cal sto­rage ele­ments are stored in the user’s brow­ser, which con­tain per­so­nal data si­mi­lar to coo­kies and can be used for re­co­gni­ti­on. De­tails on the ex­ten­ded data pro­tec­tion mode can be found here: https://​sup​port​.goog​le​.com/​y​o​u​t​u​b​e​/​a​n​s​w​e​r​/​1​7​1​780.

Af­ter ac­ti­vat­ing a You­Tube vi­deo, fur­ther data pro­ces­sing ope­ra­ti­ons may be trig­ge­red over which we have no in­fluence.

The use of You­Tube is ba­sed on our in­te­rest in pre­sen­ting our on­line con­tent in an ap­pe­al­ing man­ner. Pur­su­ant to Art. 6(1)(f) GDPR, this is a le­gi­ti­ma­te in­te­rest. If ap­pro­pria­te con­sent has been ob­tai­ned, the pro­ces­sing is car­ri­ed out ex­clu­si­ve­ly on the ba­sis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, in­so­far the con­sent in­cludes the sto­rage of coo­kies or the ac­cess to in­for­ma­ti­on in the user’s end de­vice (e.g., de­vice fin­ger­prin­ting) wi­thin the mea­ning of the TDDDG. This con­sent can be re­vo­ked at any time.

For more in­for­ma­ti­on on how You­Tube hand­les user data, plea­se con­sult the You­Tube Data Pri­va­cy Po­li­cy un­der: https://​po​li​ci​es​.goog​le​.com/​p​r​i​v​a​c​y​?​h​l​=en.

The com­pa­ny is cer­ti­fied in ac­cordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Eu­ro­pean Uni­on and the US, which is in­ten­ded to en­su­re com­pli­ance with Eu­ro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the US. Every com­pa­ny cer­ti­fied un­der the DPF is ob­li­ged to com­ply with the­se data pro­tec­tion stan­dards. For more in­for­ma­ti­on, plea­se cont­act the pro­vi­der un­der the fol­lo­wing link: https://​www​.da​ta​pri​va​cy​frame​work​.gov/​p​a​r​t​i​c​i​p​a​n​t​/​5​780.

Goog­le Fonts

To en­su­re that fonts used on this web­site are uni­form, this web­site uses so-cal­led Goog­le Fonts pro­vi­ded by Goog­le. When you ac­cess a page on our web­site, your brow­ser will load the re­qui­red fonts into your brow­ser cache to cor­rect­ly dis­play text and fonts.

To do this, the brow­ser you use will have to es­tab­lish a con­nec­tion with Google’s ser­vers. As a re­sult, Goog­le will learn that your IP ad­dress was used to ac­cess this web­site. The use of Goog­le Fonts is ba­sed on Art. 6(1)(f) GDPR. The web­site ope­ra­tor has a le­gi­ti­ma­te in­te­rest in a uni­form pre­sen­ta­ti­on of the font on the operator’s web­site. If ap­pro­pria­te con­sent has been ob­tai­ned, the pro­ces­sing is car­ri­ed out ex­clu­si­ve­ly on the ba­sis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, in­so­far the con­sent in­cludes the sto­rage of coo­kies or the ac­cess to in­for­ma­ti­on in the user’s end de­vice (e.g., de­vice fin­ger­prin­ting) wi­thin the mea­ning of the TDDDG. This con­sent can be re­vo­ked at any time.

If your brow­ser should not sup­port Goog­le Fonts, a stan­dard font in­stal­led on your com­pu­ter will be used.

For more in­for­ma­ti­on on Goog­le Fonts, plea­se fol­low this link: https://​de​ve​lo​pers​.goog​le​.com/​f​o​n​t​s​/​faq and con­sult Google’s Data Pri­va­cy De­cla­ra­ti­on un­der: https://​po​li​ci​es​.goog​le​.com/​p​r​i​v​a​c​y​?​h​l​=en.

The com­pa­ny is cer­ti­fied in ac­cordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Eu­ro­pean Uni­on and the US, which is in­ten­ded to en­su­re com­pli­ance with Eu­ro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the US. Every com­pa­ny cer­ti­fied un­der the DPF is ob­li­ged to com­ply with the­se data pro­tec­tion stan­dards. For more in­for­ma­ti­on, plea­se cont­act the pro­vi­der un­der the fol­lo­wing link: https://​www​.da​ta​pri​va​cy​frame​work​.gov/​p​a​r​t​i​c​i​p​a​n​t​/​5​780.

Goog­le Maps

This web­site uses the map­ping ser­vice Goog­le Maps. The pro­vi­der is Goog­le Ire­land Li­mi­t­ed (“Goog­le”), Gor­don House, Bar­row Street, Dub­lin 4, Ire­land. With the me­ans of this ser­vice, we can in­te­gra­te map ma­te­ri­al on our web­site.

To enable the use of the Goog­le Maps fea­tures, your IP ad­dress must be stored. As a rule, this in­for­ma­ti­on is trans­fer­red to one of Google’s ser­vers in the United Sta­tes, whe­re it is ar­chi­ved. The ope­ra­tor of this web­site has no con­trol over the data trans­fer. In case Goog­le Maps has been ac­ti­va­ted, Goog­le has the op­ti­on to use Goog­le Fonts for the pur­po­se of the uni­form de­pic­tion of fonts. When you ac­cess Goog­le Maps, your brow­ser will load the re­qui­red web fonts into your brow­ser cache, to cor­rect­ly dis­play text and fonts.

We use Goog­le Maps to pre­sent our on­line con­tent in an ap­pe­al­ing man­ner and to make the lo­ca­ti­ons dis­c­lo­sed on our web­site easy to find. This con­sti­tu­tes a le­gi­ti­ma­te in­te­rest as de­fi­ned in Art. 6(1)(f) GDPR. If ap­pro­pria­te con­sent has been ob­tai­ned, the pro­ces­sing is car­ri­ed out ex­clu­si­ve­ly on the ba­sis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, in­so­far the con­sent in­cludes the sto­rage of coo­kies or the ac­cess to in­for­ma­ti­on in the user’s end de­vice (e.g., de­vice fin­ger­prin­ting) wi­thin the mea­ning of the TDDDG. This con­sent can be re­vo­ked at any time.

Data trans­mis­si­on to the US is ba­sed on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Eu­ro­pean Com­mis­si­on. De­tails can be found here: https://​pri​va​cy​.goog​le​.com/​b​u​s​i​n​e​s​s​e​s​/​g​d​p​r​c​o​n​t​r​o​l​l​e​r​t​e​r​ms/ and https://​pri​va​cy​.goog​le​.com/​b​u​s​i​n​e​s​s​e​s​/​g​d​p​r​c​o​n​t​r​o​l​l​e​r​t​e​r​m​s​/​s​c​cs/.

For more in­for­ma­ti­on on the hand­ling of user data, plea­se re­view Google’s Data Pri­va­cy De­cla­ra­ti­on un­der: https://​po​li​ci​es​.goog​le​.com/​p​r​i​v​a​c​y​?​h​l​=en.

The com­pa­ny is cer­ti­fied in ac­cordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Eu­ro­pean Uni­on and the US, which is in­ten­ded to en­su­re com­pli­ance with Eu­ro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the US. Every com­pa­ny cer­ti­fied un­der the DPF is ob­li­ged to com­ply with the­se data pro­tec­tion stan­dards. For more in­for­ma­ti­on, plea­se cont­act the pro­vi­der un­der the fol­lo­wing link: https://​www​.da​ta​pri​va​cy​frame​work​.gov/​p​a​r​t​i​c​i​p​a​n​t​/​5​780.

7. On­line-ba­sed Au­dio and Vi­deo Con­fe­ren­ces (Con­fe­rence tools)

Data pro­ces­sing

We use on­line con­fe­rence tools, among other things, for com­mu­ni­ca­ti­on with our cus­to­mers. The tools we use are lis­ted in de­tail be­low. If you com­mu­ni­ca­te with us by vi­deo or au­dio con­fe­rence using the In­ter­net, your per­so­nal data will be coll­ec­ted and pro­ces­sed by the pro­vi­der of the re­spec­ti­ve con­fe­rence tool and by us. The con­fe­ren­cing tools coll­ect all in­for­ma­ti­on that you provide/access to use the tools (email ad­dress and/or your pho­ne num­ber). Fur­ther­mo­re, the con­fe­rence tools pro­cess the du­ra­ti­on of the con­fe­rence, start and end (time) of par­ti­ci­pa­ti­on in the con­fe­rence, num­ber of par­ti­ci­pan­ts and other “con­text in­for­ma­ti­on” re­la­ted to the com­mu­ni­ca­ti­on pro­cess (me­ta­da­ta).

Fur­ther­mo­re, the pro­vi­der of the tool pro­ces­ses all the tech­ni­cal data re­qui­red for the pro­ces­sing of the on­line com­mu­ni­ca­ti­on. This in­cludes, in par­ti­cu­lar, IP ad­dres­ses, MAC ad­dres­ses, de­vice IDs, de­vice type, ope­ra­ting sys­tem type and ver­si­on, cli­ent ver­si­on, ca­me­ra type, mi­cro­pho­ne or loud­spea­k­er and the type of con­nec­tion.

Should con­tent be ex­ch­an­ged, uploa­ded, or other­wi­se made available wi­thin the tool, it is also stored on the ser­vers of the tool pro­vi­der. Such con­tent in­cludes, but is not li­mi­t­ed to, cloud re­cor­dings, chat/ in­stant mes­sa­ges, voice­mail uploa­ded pho­tos and vi­de­os, files, white­boards, and other in­for­ma­ti­on shared while using the ser­vice.

Plea­se note that we do not have com­ple­te in­fluence on the data pro­ces­sing pro­ce­du­res of the tools used. Our pos­si­bi­li­ties are lar­ge­ly de­ter­mi­ned by the cor­po­ra­te po­li­cy of the re­spec­ti­ve pro­vi­der. Fur­ther in­for­ma­ti­on on data pro­ces­sing by the con­fe­rence tools can be found in the data pro­tec­tion de­cla­ra­ti­ons of the tools used, and which we have lis­ted be­low this text.

Pur­po­se and le­gal ba­ses

The con­fe­rence tools are used to com­mu­ni­ca­te with pro­s­pec­ti­ve or exis­ting con­trac­tu­al part­ners or to of­fer cer­tain ser­vices to our cus­to­mers (Art. 6(1)(b) GDPR). Fur­ther­mo­re, the use of the tools ser­ves to ge­ne­ral­ly sim­pli­fy and ac­ce­le­ra­te com­mu­ni­ca­ti­on with us or our com­pa­ny (le­gi­ti­ma­te in­te­rest in the mea­ning of Art. 6(1)(f) GDPR). In­so­far as con­sent has been re­ques­ted, the tools in ques­ti­on will be used on the ba­sis of this con­sent; the con­sent may be re­vo­ked at any time with ef­fect from that date.

Du­ra­ti­on of sto­rage

Data coll­ec­ted di­rect­ly by us via the vi­deo and con­fe­rence tools will be de­le­ted from our sys­tems im­me­dia­te­ly af­ter you re­quest us to de­le­te it, re­vo­ke your con­sent to sto­rage, or the re­ason for sto­ring the data no lon­ger ap­pli­es. Stored coo­kies re­main on your end de­vice un­til you de­le­te them. Man­da­to­ry le­gal re­ten­ti­on pe­ri­ods re­main un­af­fec­ted.

We have no in­fluence on the du­ra­ti­on of sto­rage of your data that is stored by the ope­ra­tors of the con­fe­rence tools for their own pur­po­ses. For de­tails, plea­se di­rect­ly cont­act the ope­ra­tors of the con­fe­rence tools.

Con­fe­rence tools used

We em­ploy the fol­lo­wing con­fe­rence tools:

Mi­cro­soft Teams

We use Mi­cro­soft Teams. The pro­vi­der is the Mi­cro­soft Ire­land Ope­ra­ti­ons Li­mi­t­ed, One Mi­cro­soft Place, South Coun­ty Busi­ness Park, Leo­pard­stown, Dub­lin 18, Ire­land. For de­tails on data pro­ces­sing, plea­se re­fer to the Mi­cro­soft Teams pri­va­cy po­li­cy: https://​pri​va​cy​.mi​cro​soft​.com/​e​n​-​u​s​/​p​r​i​v​a​c​y​s​t​a​t​e​m​ent.

The com­pa­ny is cer­ti­fied in ac­cordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Eu­ro­pean Uni­on and the US, which is in­ten­ded to en­su­re com­pli­ance with Eu­ro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the US. Every com­pa­ny cer­ti­fied un­der the DPF is ob­li­ged to com­ply with the­se data pro­tec­tion stan­dards. For more in­for­ma­ti­on, plea­se cont­act the pro­vi­der un­der the fol­lo­wing link: https://​www​.da​ta​pri​va​cy​frame​work​.gov/​p​a​r​t​i​c​i​p​a​n​t​/​6​474.

Data pro­ces­sing

We have con­cluded a data pro­ces­sing agree­ment (DPA) for the use of the abo­ve-men­tio­ned ser­vice. This is a con­tract man­da­ted by data pri­va­cy laws that gua­ran­tees that they pro­cess per­so­nal data of our web­site vi­si­tors only ba­sed on our in­s­truc­tions and in com­pli­ance with the GDPR.

8. Cus­tom Ser­vices

Hand­ling ap­pli­cant data

We of­fer web­site vi­si­tors the op­por­tu­ni­ty to sub­mit job ap­pli­ca­ti­ons to us (e.g., via e‑mail, via pos­tal ser­vices on by sub­mit­ting the on­line job ap­pli­ca­ti­on form). Be­low, we will brief you on the scope, pur­po­se and use of the per­so­nal data coll­ec­ted from you in con­junc­tion with the ap­pli­ca­ti­on pro­cess. We assu­re you that the coll­ec­tion, pro­ces­sing, and use of your data will oc­cur in com­pli­ance with the ap­pli­ca­ble data pri­va­cy rights and all other sta­tu­to­ry pro­vi­si­ons and that your data will al­ways be trea­ted as strict­ly con­fi­den­ti­al.

Scope and pur­po­se of the coll­ec­tion of data

If you sub­mit a job ap­pli­ca­ti­on to us, we will pro­cess any af­fi­lia­ted per­so­nal data (e.g., cont­act and com­mu­ni­ca­ti­ons data, ap­pli­ca­ti­on do­cu­ments, no­tes ta­ken du­ring job in­ter­views, etc.), if they are re­qui­red to make a de­cis­i­on con­cer­ning the es­tab­lish­ment or an em­ploy­ment re­la­ti­onship. The le­gal grounds for the afo­re­men­tio­ned are § 26 BDSG ac­cor­ding to Ger­man Law (Nego­tia­ti­on of an Em­ploy­ment Re­la­ti­onship), Art. 6(1)(b) GDPR (Ge­ne­ral Con­tract Nego­tia­ti­ons) and – pro­vi­ded you have gi­ven us your con­sent – Art. 6(1)(a) GDPR. You may re­vo­ke any con­sent gi­ven at any time. Wi­thin our com­pa­ny, your per­so­nal data will only be shared with in­di­vi­du­als who are in­vol­ved in the pro­ces­sing of your job ap­pli­ca­ti­on.

If your job ap­pli­ca­ti­on should re­sult in your re­cruit­ment, the data you have sub­mit­ted will be ar­chi­ved on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the pur­po­se of im­ple­men­ting the em­ploy­ment re­la­ti­onship in our data pro­ces­sing sys­tem.

Data Ar­chi­ving Pe­ri­od

If we are unable to make you a job of­fer or you re­ject a job of­fer or wi­th­draw your ap­pli­ca­ti­on, we re­ser­ve the right to re­tain the data you have sub­mit­ted on the ba­sis of our le­gi­ti­ma­te in­te­rests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the ap­pli­ca­ti­on pro­ce­du­re (re­jec­tion or wi­th­dra­wal of the ap­pli­ca­ti­on). Af­ter­wards the data will be de­le­ted, and the phy­si­cal ap­pli­ca­ti­on do­cu­ments will be de­s­troy­ed. The sto­rage ser­ves in par­ti­cu­lar as evi­dence in the event of a le­gal dis­pu­te. If it is evi­dent that the data will be re­qui­red af­ter the ex­piry of the 6‑month pe­ri­od (e.g., due to an im­pen­ding or pen­ding le­gal dis­pu­te), de­le­ti­on will only take place when the pur­po­se for fur­ther sto­rage no lon­ger ap­pli­es.

Lon­ger sto­rage may also take place if you have gi­ven your agree­ment (Ar­tic­le 6(1)(a) GDPR) or if sta­tu­to­ry data re­ten­ti­on re­qui­re­ments pre­clude the de­le­ti­on.

Ad­mis­si­on to the ap­pli­cant pool

If we do not make you a job of­fer, you may be able to join our ap­pli­cant pool. In case of ad­mis­si­on, all do­cu­ments and in­for­ma­ti­on from the ap­pli­ca­ti­on will be trans­fer­red to the ap­pli­cant pool in or­der to cont­act you in case of sui­ta­ble va­can­ci­es.

Ad­mis­si­on to the ap­pli­cant pool is ba­sed ex­clu­si­ve­ly on your ex­press agree­ment (Art. 6(1)(a) GDPR). The sub­mis­si­on agree­ment is vol­un­t­a­ry and has no re­la­ti­on to the on­go­ing ap­pli­ca­ti­on pro­ce­du­re. The af­fec­ted per­son can re­vo­ke his agree­ment at any time. In this case, the data from the ap­pli­cant pool will be ir­re­vo­ca­bly de­le­ted, pro­vi­ded the­re are no le­gal re­asons for sto­rage.

The data from the ap­pli­cant pool will be ir­re­vo­ca­bly de­le­ted no la­ter than two ye­ars af­ter con­sent has been gran­ted.

9. Ex­ter­nal Ser­vices

Use of DATEV My­Mar­ke­ting con­tent

This web­site also uses con­tent from the DATEV My Mar­ke­ting ap­pli­ca­ti­on of DATEV eG.

This con­tent is pro­vi­ded by DATEV eG. The data pro­tec­tion prin­ci­ples of DATEV My Mar­ke­ting ap­p­ly to the use of this con­tent, see: https://​www​.da​tev​-my​mar​ke​ting​.de/​p​r​i​v​a​c​y​.​h​tml

Data pro­tec­tion in­for­ma­ti­on for
the cli­ents of

REDONIS PartG
Steu­er­be­ra­tung Rechts­be­ra­tung Wirt­schafts­prü­fung

1. This data pro­tec­tion no­ti­ce in­forms you about data pro­ces­sing in our tax con­sul­tancy firm.

The con­trol­ler wi­thin the mea­ning of data pro­tec­tion law is:

REDONIS PartG
Steu­er­be­ra­tung Rechts­be­ra­tung Wirt­schafts­prü­fung
Ki­no­weg 4
94209 Re­gen
Te­le­fon 09921–954‑0
info@​redonis.​de

Cont­act de­tails of the data pro­tec­tion of­fi­cer:

REDONIS PartG
Steu­er­be­ra­tung Rechts­be­ra­tung Wirt­schafts­prü­fung
Da­ten­schutz­be­auf­trag­ter
Ki­no­weg 4
94209 Re­gen
Te­le­fon 09921–954‑0

The fir­m’s data pro­tec­tion of­fi­cer can be cont­ac­ted at the abo­ve ad­dress and at datenschutz@​redonis.​de

2. We pro­cess the fol­lo­wing per­so­nal data:

  • First and last name, form of ad­dress, title if ap­pli­ca­ble
  • Pos­tal address/s
  • Te­le­pho­ne number/s
  • Fax number/s if ap­pli­ca­ble
  • E‑mail address/s
  • In­for­ma­ti­on re­qui­red for the ap­pro­pria­te exe­cu­ti­on of the or­der and man­da­te

3. We pro­cess per­so­nal data for the pur­po­ses of:

  • Exe­cu­ti­on and hand­ling of the man­da­te and cli­ent re­la­ti­onship in­clu­ding the ne­ces­sa­ry cor­re­spon­dence,
  • Ful­fill­ment of our con­trac­tu­al and le­gal ob­li­ga­ti­ons as tax con­sul­tants and
  • Pro­ces­sing wi­thin the scope of mu­tu­al claims ari­sing from the tax con­sul­tancy con­tract (e.g. in­voi­cing, claims for per­for­mance, re­mu­ne­ra­ti­on and lia­bi­li­ty, etc.).

4. Pro­ces­sing of per­so­nal data in the con­text of an au­dit

  • As part of the au­dit, per­so­nal data of the cli­ent or third par­ties is also coll­ec­ted and pro­ces­sed.
  • The pro­ces­sing of per­so­nal data may be ba­sed on Art. 6 (1) (c), (3) (b) in con­junc­tion with Sec­tions 316, 320 (2) HGB.
  • In the con­text of cer­tain en­ga­ge­ments (in par­ti­cu­lar the au­dit of an­nu­al fi­nan­cial state­ments), the data is also pro­ces­sed on the ba­sis of Art. 6 (1) (c) GDPR, as Lei­del Part­ners Wirt­schafts­prü­fungs GmbH must in some ca­ses pro­cess data in the­se ca­ses due to le­gal re­qui­re­ments for the au­dits of an­nu­al fi­nan­cial state­ments.
  • Cor­re­spon­ding data may also be stored for the du­ra­ti­on of the sta­tu­to­ry re­ten­ti­on pe­ri­ods (Sec­tion 51 b (1) WPO as a more spe­ci­fic stan­dard ta­kes pre­ce­dence over the BDSG)

5. The le­gal ba­ses for data pro­ces­sing in our tax con­sul­tancy are

  • Art. 6 para. 1 sub­pa­ra. 1 let­ter b GDPR to ful­fil the man­da­te agree­ment,
  • Art. 6 para. 1 sub­pa­ra. 1 let­ter c GDPR to ful­fil the le­gal ob­li­ga­ti­ons to which we are sub­ject as tax con­sul­tants,
  • Art. 6 para. 1 sub­pa­ra. 1 let­ter f GDPR, in­so­far as the data pro­ces­sing is ne­ces­sa­ry to safe­guard the le­gi­ti­ma­te in­te­rests of us or a third par­ty; in par­ti­cu­lar, the on­go­ing busi­ness re­la­ti­onship with our cli­ents is in our le­gi­ti­ma­te in­te­rest,
  • Art. 6 para. 1 sub­pa­ra. 1 let­ter a GDPR, in­so­far as you have gi­ven us your con­sent to pro­cess the per­so­nal data con­cer­ning you for spe­ci­fic pur­po­ses.

6. The trans­fer of per­so­nal data to third par­ties only ta­kes place on your be­half and with your con­sent. We pass on per­so­nal data to the fol­lo­wing re­ci­pi­ents wi­thin the scope of the cli­ent re­la­ti­onship:

  • Tax aut­ho­ri­ties and courts
  • So­cial insu­rance pro­vi­ders
  • Bun­des­an­zei­ger Ver­lag GmbH
  • Banks, cre­dit in­sti­tu­ti­ons, insu­rance com­pa­nies and em­ploy­ers‘ lia­bi­li­ty insu­rance as­so­cia­ti­ons
  • Pro­ces­sors (e.g. data cen­tres, IT ser­vice pro­vi­ders, print ser­vice pro­vi­ders, te­le­pho­ne ser­vice pro­vi­ders, was­te dis­po­sal com­pa­nies, etc.) who­se ser­vices we only use if they are ob­li­ged to main­tain our pro­fes­sio­nal se­c­re­cy as a co­ope­ra­ting per­son in ac­cordance with Sec­tion 203 (3) of the Ger­man Cri­mi­nal Code
  • De­pen­ding on the or­der, to other re­ci­pi­ents that we agree with you.

7. Data trans­fer to third count­ries

Data will only be trans­fer­red to third count­ries (count­ries out­side the Eu­ro­pean Eco­no­mic Area – EEA) if this is ne­ces­sa­ry for the exe­cu­ti­on of the man­da­te agree­ment (e.g. pay­ment or­ders) or if you have gi­ven us your con­sent or if this is other­wi­se per­mit­ted by law. In this case, we take me­a­su­res to en­su­re the pro­tec­tion of your data, for ex­am­p­le th­rough con­trac­tu­al re­gu­la­ti­ons. We only trans­fer data to re­ci­pi­ents who en­su­re the pro­tec­tion of your data in ac­cordance with the pro­vi­si­ons of the GDPR for the trans­fer to third count­ries (Art. 44 to 49 GDPR).

8. Re­ten­ti­on pe­ri­ods

We store per­so­nal data for the du­ra­ti­on of the sta­tu­to­ry re­ten­ti­on pe­ri­ods. As a rule, this is 10 ye­ars plus a wai­ting pe­ri­od of a fur­ther 4 ye­ars to co­ver ca­ses of a pos­si­ble sus­pen­si­on of ex­piry. Af­ter 14 ye­ars, we check whe­ther the­re are re­asons for fur­ther sto­rage.

9. Rights of data sub­jects

You have the fol­lo­wing rights as a ‘data sub­ject’ who­se data we pro­cess:

  • Right of ac­cess pur­su­ant to Art. 15 GDPR
  • Right to rec­ti­fi­ca­ti­on pur­su­ant to Art. 16 GDPR
  • Right to era­su­re (‘to be for­got­ten’) pur­su­ant to Art. 17 GDPR
  • Right to rest­ric­tion of pro­ces­sing pur­su­ant to Art. 18 GDPR
  • Right to re­cei­ve your data in a struc­tu­red, com­mon­ly used and ma­chi­ne-re­a­da­ble for­mat pur­su­ant to Art. 20 GDPR

In­so­far as we pro­cess your per­so­nal data for cer­tain pur­po­ses on the ba­sis of your con­sent, you have the right to wi­th­draw your con­sent at any time in ac­cordance with Art. 7 (3) GDPR. Af­ter re­cei­ving your re­vo­ca­ti­on, we will cea­se data pro­ces­sing for the pur­po­ses for which you have gi­ven us your con­sent. The lawful­ness of the pro­ces­sing pri­or to re­ceipt of your wi­th­dra­wal re­mains un­af­fec­ted.

Right to ob­ject: If we pro­cess your per­so­nal data to pro­tect le­gi­ti­ma­te in­te­rests wi­thin the mea­ning of Art. 6 para. 1 sub­pa­ra. 1 let­ter f GDPR, you have the right un­der Art. 21 para. 1 GDPR to ob­ject to this pro­ces­sing on grounds re­la­ting to your par­ti­cu­lar si­tua­ti­on. You can ob­ject to pro­ces­sing for di­rect mar­ke­ting pur­po­ses at any time wi­t­hout gi­ving re­asons in ac­cordance with Art. 21 para. 2 GDPR. To exer­cise your right to ob­ject, sim­ply send us an in­for­mal mes­sa­ge (e.g. by email to datenschutz@​redonis.​de sta­ting which data pro­ces­sing you ob­ject to.

If you are of the opi­ni­on that the pro­ces­sing of per­so­nal data con­cer­ning you vio­la­tes the Ge­ne­ral Data Pro­tec­tion Re­gu­la­ti­on, you have the right to lodge a com­plaint with a su­per­vi­so­ry aut­ho­ri­ty for data pro­tec­tion (usual­ly the Sta­te Com­mis­sio­ner for Data Pro­tec­tion and Free­dom of In­for­ma­ti­on) in ac­cordance with Art. 77 para. 1 GDPR. The com­plaint can be lodged in par­ti­cu­lar with the su­per­vi­so­ry aut­ho­ri­ty re­spon­si­ble for your ha­bi­tu­al re­si­dence, place of work or place of the al­le­ged in­f­rin­ge­ment.

10. Re­ser­va­ti­on

This in­for­ma­ti­on cor­re­sponds to the le­gal sta­tus as of 25 May 2018. We re­ser­ve the right to ad­apt our data pro­tec­tion in­for­ma­ti­on to ch­an­ges in re­gu­la­ti­ons or case law.

Data pro­tec­tion in­for­ma­ti­on for ap­pli­cants

in ac­cordance with Art. 13, 14, 21 of the Ge­ne­ral Data Pro­tec­tion Re­gu­la­ti­on (GDPR)

Sta­tus: July 2020

We are plea­sed that you are in­te­res­ted in us and that you are ap­p­ly­ing or have ap­pli­ed for a po­si­ti­on in our com­pa­ny. We would like to in­form you be­low about the pro­ces­sing of your per­so­nal data in con­nec­tion with your ap­pli­ca­ti­on.

1. Who is re­spon­si­ble for data pro­ces­sing?

The con­trol­ler wi­thin the mea­ning of data pro­tec­tion law is

REDONIS PartG
Steu­er­be­ra­tung Rechts­be­ra­tung Wirt­schafts­prü­fung, (im Fol­gen­den: Un­ter­neh­men)
ver­tre­ten durch
Herrn Dr. Pe­ter Lei­del, Herr Ru­dolf Stett­mer, Herr Ja­kob Ei­sen­reich, Ki­no­weg 4, 94209 Re­gen, Deutsch­land
E‑Mail: info@​redonis.​de
Tel.: +49 (0) 9921–954‑0

You can reach our data pro­tec­tion of­fi­cer at
E‑Mail: datenschutz@​redonis.​de

2. Pro­ces­sing pur­po­ses and le­gal ba­sis

We pro­cess your per­so­nal data to the ext­ent ne­ces­sa­ry to ve­ri­fy the es­tab­lish­ment of an em­ploy­ment re­la­ti­onship. The le­gal ba­sis for this is ge­ne­ral­ly Art. 6 para. 1 lit. b GDPR in con­junc­tion with Sec­tion 26 of the Fe­de­ral Data Pro­tec­tion Act (BDSG).

We only coll­ect the per­so­nal data (in par­ti­cu­lar first name, sur­na­me, ad­dress, e‑mail, po­si­ti­on ap­pli­ed for, in­for­ma­ti­on from the ap­pli­ca­ti­on) from you that is re­qui­red for the ap­pli­ca­ti­on pro­cess. In or­der to ful­ly as­sess your ap­pli­ca­ti­on, it is ne­ces­sa­ry that you also pro­vi­de us with in­for­ma­ti­on about your pre­vious pro­fes­sio­nal care­er.

In the case of an on­line ap­pli­ca­ti­on, you en­ter this data yours­elf in the on­line form; for any other form of ap­pli­ca­ti­on, we coll­ect the re­le­vant in­for­ma­ti­on from the ap­pli­ca­ti­on and scan the ap­pli­ca­ti­on do­cu­ments if ne­ces­sa­ry.

As part of your ap­pli­ca­ti­on, we only use data that co­mes di­rect­ly from you or a per­son aut­ho­ri­sed by you. In the cour­se of the ap­pli­ca­ti­on pro­cess, fur­ther per­so­nal data may be coll­ec­ted from you per­so­nal­ly, from ge­ne­ral­ly ac­ces­si­ble sources or from for­mer em­ploy­ers and trai­ners. This may also in­clude data that you make available on­line for the pur­po­se of pro­fes­sio­nal pre­sen­ta­ti­on (e.g. in busi­ness net­works). We do not car­ry out any fur­ther re­se­arch on your per­son, e.g. using on­line search en­gi­nes.

When fil­ling cer­tain po­si­ti­ons, in par­ti­cu­lar ma­nage­ment po­si­ti­ons, we may in­vol­ve per­son­nel con­sul­tants to car­ry out as­sess­ment cen­tres or po­ten­ti­al ana­ly­ses, sub­ject to your ex­press con­sent.

If we ask you for your gen­der as part of the ap­pli­ca­ti­on pro­cess in the form of the de­si­red form of ad­dress, this is so­le­ly be­cau­se we want to wri­te or speak to you in the cor­rect man­ner. The re­ason for pro­vi­ding your age or en­te­ring your date of birth is that a mi­ni­mum age is re­qui­red by law for some of our ac­ti­vi­ties.

2.1. Con­sent (Art. 6 para. 1 lit. a GDPR)

If and in­so­far as you have gi­ven us your con­sent to pro­cess data for spe­ci­fic pur­po­ses, for ex­am­p­le to ac­tively cont­act you in or­der to of­fer you fur­ther va­can­ci­es with us, the pro­ces­sing pe­ri­od is de­ter­mi­ned by the pur­po­se of the con­sent gi­ven. Plea­se note the in­for­ma­ti­on pro­vi­ded in con­nec­tion with the de­cla­ra­ti­on of con­sent.

2.2. Im­ple­men­ta­ti­on of pre-con­trac­tu­al me­a­su­res and ful­film­ent of con­trac­tu­al ob­li­ga­ti­ons (Art. 6 para. 1 lit. b GDPR)

We pro­cess your per­so­nal data to car­ry out me­a­su­res and ac­ti­vi­ties in the con­text of pre-con­trac­tu­al re­la­ti­onships, in par­ti­cu­lar for con­tract nego­tia­ti­ons.

2.3. Ful­film­ent of le­gal ob­li­ga­ti­ons (Art. 6 para. 1 lit. c GDPR)

We pro­cess your per­so­nal data in­so­far as this is le­gal­ly re­qui­red for the ful­film­ent of re­ten­ti­on ob­li­ga­ti­ons un­der com­mer­cial and tax law or other­wi­se due to le­gal norms. (e.g. in ac­cordance with the Mo­ney Laun­de­ring Act).

2.4. Safe­guar­ding the le­gi­ti­ma­te in­te­rests of us or a third par­ty (Art. 6 para. 1 lit. f GDPR)

We pro­cess your per­so­nal data in­so­far as this is ne­ces­sa­ry for the de­fence of le­gal claims as­ser­ted against us in the ap­pli­ca­ti­on pro­cess. The le­gi­ti­ma­te in­te­rest is, for ex­am­p­le, a bur­den of pro­of in pro­cee­dings un­der the Ge­ne­ral Equal Tre­at­ment Act (AGG).

3. Ca­te­go­ries of per­so­nal data that we pro­cess and whe­re it co­mes from

We pro­cess the per­so­nal data that we re­cei­ve from you as part of your ap­pli­ca­ti­on. This is the data that you pro­vi­de to us as part of your ap­pli­ca­ti­on, in par­ti­cu­lar by sub­mit­ting ap­pli­ca­ti­on do­cu­ments and your de­tails in job in­ter­views. We also vi­sit the pro­files of ap­pli­cants on XING and Lin­ke­dIn or other pro­fes­sio­nal­ly ori­en­ta­ted so­cial net­works, if the­se exist. We do not vi­sit pro­files on pri­va­te so­cial net­works.

We may also re­cei­ve data from re­cruit­ment agen­ci­es to which you have sub­mit­ted your ap­pli­ca­ti­on do­cu­ments and which you sug­gest to us as can­di­da­tes for a po­si­ti­on.

4. Who will re­cei­ve your data?

You have the right to com­plain to a data pro­tec­tion su­per­vi­so­ry aut­ho­ri­ty about the pro­ces­sing of per­so­nal data by us.

Your data will of cour­se be trea­ted con­fi­den­ti­al­ly and only made ac­ces­si­ble to tho­se per­sons in the com­pa­ny who are in­vol­ved in the re­cruit­ment de­cis­i­on-ma­king pro­cess (e.g. HR de­part­ment, spe­cia­list de­part­ment, works coun­cil).

Fur­ther­mo­re, re­le­vant data may be trans­fer­red to third par­ties in in­di­vi­du­al ca­ses on the ba­sis of le­gal pro­vi­si­ons or con­trac­tu­al agree­ments. The­se may be pro­ces­sors, e.g. soft­ware pro­vi­ders, IT ser­vice pro­vi­ders. We have con­cluded a so-cal­led or­der pro­ces­sing con­tract with the­se pro­vi­ders, which en­su­res that the data pro­ces­sing is car­ri­ed out in an aut­ho­ri­sed man­ner.

5. Trans­fer of your data to a re­ci­pi­ent in a third coun­try or to an in­ter­na­tio­nal or­ga­ni­sa­ti­on

If we trans­fer per­so­nal data to ser­vice pro­vi­ders out­side the Eu­ro­pean Eco­no­mic Area (EEA), the trans­fer will only take place if the third coun­try has been con­firm­ed by the EU Com­mis­si­on to have an ade­qua­te le­vel of data pro­tec­tion or if other ap­pro­pria­te data pro­tec­tion gua­ran­tees (e.g. bin­ding in­ter­nal com­pa­ny data pro­tec­tion re­gu­la­ti­ons or EU stan­dard con­trac­tu­al clau­ses) are in place, un­less the­re is a le­gal ex­cep­ti­on to com­pli­ance with the le­vel of data pro­tec­tion (Art. 49 GDPR), in par­ti­cu­lar your ex­press con­sent un­der data pro­tec­tion law.

6. How long do we store your data?

We store your per­so­nal data for as long as is ne­ces­sa­ry to ful­fil the pro­ces­sing pur­po­ses and/or to com­ply with sta­tu­to­ry re­ten­ti­on ob­li­ga­ti­ons.

If you are not sel­ec­ted for the po­si­ti­on for which you have ap­pli­ed, we will de­le­te your data if you wi­th­draw your ap­pli­ca­ti­on, six months af­ter the wi­th­dra­wal of your ap­pli­ca­ti­on and, if we re­ject you, af­ter six months from the date of re­jec­tion. In the event that an em­ploy­ment con­tract is con­cluded bet­ween you and us, your ap­pli­ca­ti­on do­cu­ments will be in­cluded in your per­son­nel file and stored for at least the du­ra­ti­on of the em­ploy­ment re­la­ti­onship.

7. To what ext­ent is the­re au­to­ma­ted de­cis­i­on-ma­king in in­di­vi­du­al ca­ses (in­clu­ding pro­fil­ing)?

We do not use any pu­rely au­to­ma­ted de­cis­i­on-ma­king pro­ces­ses in ac­cordance with Ar­tic­le 22 GDPR. Should we use the­se pro­ce­du­res in in­di­vi­du­al ca­ses, we will in­form you of this se­pa­ra­te­ly

8. Scope of your ob­li­ga­ti­ons to pro­vi­de us with your data

An ap­pli­ca­ti­on to us is vol­un­t­a­ry. The pro­vi­si­on of your per­so­nal data re­gar­ding your pre­vious pro­fes­sio­nal and/or edu­ca­tio­nal back­ground, your qua­li­fi­ca­ti­ons, your skills and in­for­ma­ti­on about yours­elf and how you can be cont­ac­ted is ne­ces­sa­ry so that we can find out whe­ther you as an ap­pli­cant and the po­si­ti­on to be fil­led are a good match and so that we can make a per­son­nel sel­ec­tion. Wi­t­hout the pro­vi­si­on of per­so­nal data by you as an ap­pli­cant, it is na­tu­ral­ly not pos­si­ble to car­ry out any per­son­nel sel­ec­tion or ap­pli­ca­ti­on pro­cess.

Con­se­quent­ly, fail­ure to pro­vi­de per­so­nal data sim­ply me­ans that you can­not be con­side­red as a can­di­da­te for the va­can­cy.

9. Rights of data sub­jects

You can use the abo­ve ad­dress and un­der cer­tain con­di­ti­ons

  • in ac­cordance with Art. 15 GDPR, to re­quest in­for­ma­ti­on about your per­so­nal data pro­ces­sed by us. In par­ti­cu­lar, you can re­quest in­for­ma­ti­on about the pur­po­ses of pro­ces­sing, the ca­te­go­ry of per­so­nal data, the ca­te­go­ries of re­ci­pi­ents to whom your data has been or will be dis­c­lo­sed, the plan­ned sto­rage pe­ri­od, the exis­tence of a right to rec­ti­fi­ca­ti­on, era­su­re, rest­ric­tion of pro­ces­sing or ob­jec­tion, the exis­tence of a right of ap­peal, the ori­gin of your data if it was not coll­ec­ted by us, as well as the exis­tence of au­to­ma­ted de­cis­i­on-ma­king in­clu­ding pro­fil­ing and, if ap­pli­ca­ble, meaningful in­for­ma­ti­on on its de­tails;
  • in ac­cordance with Art. 16 GDPR, to im­me­dia­te­ly re­quest the cor­rec­tion of in­cor­rect or in­com­ple­te per­so­nal data stored by us;
  • to de­mand the era­su­re of your per­so­nal data stored by us in ac­cordance with Art. 17 GDPR, un­less the pro­ces­sing is ne­ces­sa­ry for exer­cis­ing the right of free­dom of ex­pres­si­on and in­for­ma­ti­on, for com­pli­ance with a le­gal ob­li­ga­ti­on, for re­asons of pu­blic in­te­rest or for the es­tab­lish­ment, exer­cise or de­fence of le­gal claims;
  • in ac­cordance with Art. 18 GDPR, to de­mand the rest­ric­tion of the pro­ces­sing of your per­so­nal data if the ac­cu­ra­cy of the data is dis­pu­ted by you, the pro­ces­sing is un­lawful but you re­fu­se to de­le­te it and we no lon­ger need the data, but you need it for the as­ser­ti­on, exer­cise or de­fence of le­gal claims or you have lodged an ob­jec­tion to the pro­ces­sing in ac­cordance with Art. 21 GDPR;
  • in ac­cordance with Art. 20 GDPR, to re­cei­ve your per­so­nal data that you have pro­vi­ded to us in a struc­tu­red, com­mon­ly used and ma­chi­ne-re­a­da­ble for­mat or to re­quest that it be trans­mit­ted to an­o­ther con­trol­ler;
  • in ac­cordance with Ar­tic­le 7(3) of the GDPR, you have the right to wi­th­draw your con­sent at any time. As a re­sult, we will no lon­ger be per­mit­ted to con­ti­nue any data pro­ces­sing that was ba­sed on this con­sent in the fu­ture.

Should you wish to exer­cise any of the­se rights, plea­se cont­act us or, whe­re ap­pro­pria­te, our Data Pro­tec­tion Of­fi­cer.

In­for­ma­ti­on on Your Right to Ob­ject pur­su­ant to Ar­tic­le 21 GDPR

You have the right to ob­ject to the pro­ces­sing of your per­so­nal data whe­re such pro­ces­sing is car­ri­ed out on the ba­sis of Ar­tic­le 6(1)(f) GDPR (data pro­ces­sing for the pur­po­ses of le­gi­ti­ma­te in­te­rests) or Ar­tic­le 6(1)(e) GDPR (data pro­ces­sing for the per­for­mance of a task car­ri­ed out in the pu­blic in­te­rest).

Should you ob­ject, we will no lon­ger pro­cess your per­so­nal data un­less we can de­mons­tra­te com­pel­ling le­gi­ti­ma­te grounds for the pro­ces­sing which over­ri­de your in­te­rests, rights, and free­doms, or whe­re the pro­ces­sing ser­ves the es­tab­lish­ment, exer­cise, or de­fence of le­gal claims.

In­for­ma­ti­on on Your Right to Wi­th­draw Con­sent pur­su­ant to Ar­tic­le 7(3) GDPR

Whe­re we pro­cess your per­so­nal data for spe­ci­fic pur­po­ses on the ba­sis of your con­sent, you have the right un­der Ar­tic­le 7(3) GDPR to wi­th­draw that con­sent at any time. Upon re­ceipt of your wi­th­dra­wal, we will cea­se pro­ces­sing your data for the pur­po­ses to which your con­sent ap­pli­ed. The lawful­ness of any pro­ces­sing car­ri­ed out pri­or to the wi­th­dra­wal of con­sent re­mains un­af­fec­ted.

Plea­se note that your wi­th­dra­wal of con­sent ap­pli­es only to fu­ture pro­ces­sing. Any data pro­ces­sing that oc­cur­red pri­or to the wi­th­dra­wal will not be af­fec­ted.

Ob­jec­tion to Pro­ces­sing for Di­rect Mar­ke­ting Pur­po­ses

In ca­ses whe­re your data is pro­ces­sed for di­rect mar­ke­ting pur­po­ses, you have the right to ob­ject at any time to the pro­ces­sing of your per­so­nal data for such mar­ke­ting, in­clu­ding pro­fil­ing to the ext­ent that it is re­la­ted to such di­rect mar­ke­ting.

If you ob­ject to pro­ces­sing for di­rect mar­ke­ting pur­po­ses, we will no lon­ger pro­cess your per­so­nal data for tho­se pur­po­ses.

Ob­jec­tions may be sub­mit­ted wi­t­hout any spe­ci­fic for­mal re­qui­re­ments and should pre­fer­a­b­ly be ad­dres­sed to:

REDONIS PartG
Steu­er­be­ra­tung Rechts­be­ra­tung Wirt­schafts­prü­fung
Ki­no­weg 4
D‑94209 Re­gen
Te­le­fon: 09921/954–0
info@​redonis.​de

10. Your right to lodge a com­plaint with the com­pe­tent su­per­vi­so­ry aut­ho­ri­ty

You have the right to lodge a com­plaint with the data pro­tec­tion su­per­vi­so­ry aut­ho­ri­ty if you be­lie­ve that the pro­ces­sing of your per­so­nal data vio­la­tes the GDPR (Ar­tic­le 77 GDPR). The su­per­vi­so­ry aut­ho­ri­ty re­spon­si­ble for us is:
Baye­ri­sches Lan­des­amt für Da­ten­schutz­auf­sicht, Pro­me­na­de 18, 91522 Ans­bach, Te­le­fon: +49 (0) 981 180093–0, E‑Mail: poststelle@​lda.​bayern.​de

This pri­va­cy po­li­cy ap­pli­es to the fol­lo­wing so­cial me­dia pre­sence

Data pro­ces­sing th­rough so­cial net­works

We main­tain pu­blicly available pro­files in so­cial net­works. The in­di­vi­du­al so­cial net­works we use can be found be­low.

So­cial net­works such as Face­book, X etc. can ge­ne­ral­ly ana­ly­ze your user be­ha­vi­or com­pre­hen­si­ve­ly if you vi­sit their web­site or a web­site with in­te­gra­ted so­cial me­dia con­tent (e.g., like but­tons or ban­ner ads). When you vi­sit our so­cial me­dia pa­ges, num­e­rous data pro­tec­tion-re­le­vant pro­ces­sing ope­ra­ti­ons are trig­ge­red. In de­tail:

If you are log­ged in to your so­cial me­dia ac­count and vi­sit our so­cial me­dia page, the ope­ra­tor of the so­cial me­dia por­tal can as­sign this vi­sit to your user ac­count. Un­der cer­tain cir­cum­s­tances, your per­so­nal data may also be re­cor­ded if you are not log­ged in or do not have an ac­count with the re­spec­ti­ve so­cial me­dia por­tal. In this case, this data is coll­ec­ted, for ex­am­p­le, via coo­kies stored on your de­vice or by re­cor­ding your IP ad­dress.

Using the data coll­ec­ted in this way, the ope­ra­tors of the so­cial me­dia por­tals can crea­te user pro­files in which their pre­fe­ren­ces and in­te­rests are stored. This way you can see in­te­rest-ba­sed ad­ver­ti­sing in­si­de and out­side of your so­cial me­dia pre­sence. If you have an ac­count with the so­cial net­work, in­te­rest-ba­sed ad­ver­ti­sing can be dis­play­ed on any de­vice you are log­ged in to or have log­ged in to.

Plea­se also note that we can­not re­trace all pro­ces­sing ope­ra­ti­ons on the so­cial me­dia por­tals. De­pen­ding on the pro­vi­der, ad­di­tio­nal pro­ces­sing ope­ra­ti­ons may the­r­e­fo­re be car­ri­ed out by the ope­ra­tors of the so­cial me­dia por­tals. De­tails can be found in the terms of use and pri­va­cy po­li­cy of the re­spec­ti­ve so­cial me­dia por­tals.

Le­gal ba­sis

Our so­cial me­dia ap­pearan­ces should en­su­re the wi­dest pos­si­ble pre­sence on the In­ter­net. This is a le­gi­ti­ma­te in­te­rest wi­thin the mea­ning of Art. 6 (1) lit. f GDPR. The ana­ly­sis pro­ces­ses in­itia­ted by the so­cial net­works may be ba­sed on di­ver­gent le­gal ba­ses to be spe­ci­fied by the ope­ra­tors of the so­cial net­works (e.g., con­sent wi­thin the mea­ning of Art. 6 (1) (a) GDPR).

Re­spon­si­bi­li­ty and as­ser­ti­on of rights

If you vi­sit one of our so­cial me­dia sites (e.g., Face­book), we, tog­e­ther with the ope­ra­tor of the so­cial me­dia plat­form, are re­spon­si­ble for the data pro­ces­sing ope­ra­ti­ons trig­ge­red du­ring this vi­sit. You can in prin­ci­ple pro­tect your rights (in­for­ma­ti­on, cor­rec­tion, de­le­ti­on, li­mi­ta­ti­on of pro­ces­sing, data por­ta­bi­li­ty and com­plaint) vis-à-vis us as well as vis-à-vis the ope­ra­tor of the re­spec­ti­ve so­cial me­dia por­tal (e.g., Face­book).

Plea­se note that de­spi­te the shared re­spon­si­bi­li­ty with the so­cial me­dia por­tal ope­ra­tors, we do not have full in­fluence on the data pro­ces­sing ope­ra­ti­ons of the so­cial me­dia por­tals. Our op­ti­ons are de­ter­mi­ned by the com­pa­ny po­li­cy of the re­spec­ti­ve pro­vi­der.

Sto­rage time

The data coll­ec­ted di­rect­ly from us via the so­cial me­dia pre­sence will be de­le­ted from our sys­tems as soon as you ask us to de­le­te it, you re­vo­ke your con­sent to the sto­rage or the pur­po­se for the data sto­rage lap­ses. Stored coo­kies re­main on your de­vice un­til you de­le­te them. Man­da­to­ry sta­tu­to­ry pro­vi­si­ons – in par­ti­cu­lar, re­ten­ti­on pe­ri­ods – re­main un­af­fec­ted.

We have no con­trol over the sto­rage du­ra­ti­on of your data that are stored by the so­cial net­work ope­ra­tors for their own pur­po­ses. For de­tails, plea­se cont­act the so­cial net­work ope­ra­tors di­rect­ly (e.g., in their pri­va­cy po­li­cy, see be­low).

Your rights

You have the right to re­cei­ve in­for­ma­ti­on about the ori­gin, re­ci­pi­ent and pur­po­se of your stored per­so­nal data at any time and free of char­ge. You also have the right to ob­ject, the right to data por­ta­bi­li­ty and the right to file a com­plaint with the re­spon­si­ble re­gu­la­to­ry agen­cy. Fur­ther­mo­re, you can re­quest the cor­rec­tion, blo­cking, de­le­ti­on and, un­der cer­tain cir­cum­s­tances, the rest­ric­tion of the pro­ces­sing of your per­so­nal data.

In­di­vi­du­al so­cial net­works

Face­book

We have a pro­fi­le on Face­book. The pro­vi­der of this ser­vice is Meta Plat­forms Ire­land Li­mi­t­ed, Mer­ri­on Road, Dub­lin 4, D04 X2K5, Ire­land (her­ein­af­ter Meta). Ac­cor­ding to Meta’s state­ment the coll­ec­ted data will also be trans­fer­red to the USA and to other third-par­ty count­ries.

We have si­gned an agree­ment with Meta on shared re­spon­si­bi­li­ty for the pro­ces­sing of data (Con­trol­ler Ad­den­dum). This agree­ment de­ter­mi­nes which data pro­ces­sing ope­ra­ti­ons we or Meta are re­spon­si­ble for when you vi­sit our Face­book Fan­page. This agree­ment can be view­ed at the fol­lo­wing link: https://​www​.face​book​.com/​l​e​g​a​l​/​t​e​r​m​s​/​p​a​g​e​_​c​o​n​t​r​o​l​l​e​r​_​a​d​d​e​n​dum.

You can cus­to­mi­ze your ad­ver­ti­sing set­tings in­de­pendent­ly in your user ac­count. Click on the fol­lo­wing link and log in: https://​www​.face​book​.com/​s​e​t​t​i​n​g​s​?​t​a​b​=​ads.

Data trans­mis­si­on to the US is ba­sed on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Eu­ro­pean Com­mis­si­on. De­tails can be found here: https://​www​.face​book​.com/​l​e​g​a​l​/​E​U​_​d​a​t​a​_​t​r​a​n​s​f​e​r​_​a​d​d​e​n​dum and https://​de​-de​.face​book​.com/​h​e​l​p​/​5​6​6​9​9​4​6​6​0​3​3​3​381.

De­tails can be found in the Face­book pri­va­cy po­li­cy: https://​www​.face​book​.com/​a​b​o​u​t​/​p​r​i​v​a​cy/.

The com­pa­ny is cer­ti­fied in ac­cordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Eu­ro­pean Uni­on and the US, which is in­ten­ded to en­su­re com­pli­ance with Eu­ro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the US. Every com­pa­ny cer­ti­fied un­der the DPF is ob­li­ged to com­ply with the­se data pro­tec­tion stan­dards. For more in­for­ma­ti­on, plea­se cont­act the pro­vi­der un­der the fol­lo­wing link: https://​www​.da​ta​pri​va​cy​frame​work​.gov/​p​a​r​t​i​c​i​p​a​n​t​/​4​452

In­sta­gram

We have a pro­fi­le on In­sta­gram. The pro­vi­der of this ser­vice is Meta Plat­forms Ire­land Li­mi­t­ed, Mer­ri­on Road, Dub­lin 4, D04 X2K5, Ir­land.

Data trans­mis­si­on to the US is ba­sed on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Eu­ro­pean Com­mis­si­on. De­tails can be found here: https://​www​.face​book​.com/​l​e​g​a​l​/​E​U​_​d​a​t​a​_​t​r​a​n​s​f​e​r​_​a​d​d​e​n​dum and https://​de​-de​.face​book​.com/​h​e​l​p​/​5​6​6​9​9​4​6​6​0​3​3​3​381.

For de­tails on how they hand­le your per­so­nal in­for­ma­ti­on, see the In­sta­gram Pri­va­cy Po­li­cy: https://​pri​va​cy​cen​ter​.in​sta​gram​.com/​p​o​l​i​cy/.

The com­pa­ny is cer­ti­fied in ac­cordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Eu­ro­pean Uni­on and the US, which is in­ten­ded to en­su­re com­pli­ance with Eu­ro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the US. Every com­pa­ny cer­ti­fied un­der the DPF is ob­li­ged to com­ply with the­se data pro­tec­tion stan­dards. For more in­for­ma­ti­on, plea­se cont­act the pro­vi­der un­der the fol­lo­wing link: https://​www​.da​ta​pri​va​cy​frame​work​.gov/​p​a​r​t​i​c​i​p​a​n​t​/​4​452

XING

We have a pro­fi­le on XING. The pro­vi­der is New Work SE, Am Strand­kai 1, 20457 Ham­burg, Ger­ma­ny. De­tails on their hand­ling of your per­so­nal data can be found in the XING Pri­va­cy Po­li­cy: https://​pri​va​cy​.xing​.com/​d​e​/​d​a​t​e​n​s​c​h​u​t​z​e​r​k​l​a​e​r​ung.

Lin­ke­dIn

We have a Lin­ke­dIn pro­fi­le. The pro­vi­der is the Lin­ke­dIn Ire­land Un­li­mi­t­ed Com­pa­ny, Wil­ton Pla­za, Wil­ton Place, Dub­lin 2, Ire­land. Lin­ke­dIn uses ad­ver­ti­sing coo­kies.

If you want to di­sable Lin­ke­dIn ad­ver­ti­sing coo­kies, plea­se use the fol­lo­wing link: https://​www​.lin​ke​din​.com/​p​s​e​t​t​i​n​g​s​/​g​u​e​s​t​-​c​o​n​t​r​o​l​s​/​r​e​t​a​r​g​e​t​i​n​g​-​o​p​t​-​out.

Data trans­mis­si­on to the US is ba­sed on the Stan­dard Con­trac­tu­al Clau­ses (SCC) of the Eu­ro­pean Com­mis­si­on. De­tails can be found here: https://​www​.lin​ke​din​.com/​l​e​g​a​l​/​l​/​dpa and https://​www​.lin​ke​din​.com/​l​e​g​a​l​/​l​/​e​u​-​s​ccs.

For de­tails on how they hand­le your per­so­nal in­for­ma­ti­on, plea­se re­fer to Lin­ke­dIn’s pri­va­cy po­li­cy: https://​www​.lin​ke​din​.com/​l​e​g​a​l​/​p​r​i​v​a​c​y​-​p​o​l​icy.

The com­pa­ny is cer­ti­fied in ac­cordance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment bet­ween the Eu­ro­pean Uni­on and the US, which is in­ten­ded to en­su­re com­pli­ance with Eu­ro­pean data pro­tec­tion stan­dards for data pro­ces­sing in the US. Every com­pa­ny cer­ti­fied un­der the DPF is ob­li­ged to com­ply with the­se data pro­tec­tion stan­dards. For more in­for­ma­ti­on, plea­se cont­act the pro­vi­der un­der the fol­lo­wing link: https://​www​.da​ta​pri​va​cy​frame​work​.gov/​p​a​r​t​i​c​i​p​a​n​t​/​5​448