Pri­va­cy Pol­i­cy

1. An overview of data pro­tec­tion

Gen­er­al infor­ma­tion

The fol­low­ing infor­ma­tion will pro­vide you with an easy to nav­i­gate overview of what will hap­pen with your per­son­al data when you vis­it this web­site. The term “per­son­al data” com­pris­es all data that can be used to per­son­al­ly iden­ti­fy you. For detailed infor­ma­tion about the sub­ject mat­ter of data pro­tec­tion, please con­sult our Data Pro­tec­tion Dec­la­ra­tion, which we have includ­ed beneath this copy.

Data record­ing on this web­site

Who is the respon­si­ble par­ty for the record­ing of data on this web­site (i.e., the “con­troller”)?

The data on this web­site is processed by the oper­a­tor of the web­site, whose con­tact infor­ma­tion is avail­able under sec­tion “Infor­ma­tion about the respon­si­ble par­ty (referred to as the “con­troller” in the GDPR)” in this Pri­va­cy Pol­i­cy.

How do we record your data?

We col­lect your data as a result of your shar­ing of your data with us. This may, for instance be infor­ma­tion you enter into our con­tact form.

Oth­er data shall be record­ed by our IT sys­tems auto­mat­i­cal­ly or after you con­sent to its record­ing dur­ing your web­site vis­it. This data com­pris­es pri­mar­i­ly tech­ni­cal infor­ma­tion (e.g., web brows­er, oper­at­ing sys­tem, or time the site was accessed). This infor­ma­tion is record­ed auto­mat­i­cal­ly when you access this web­site.

What are the pur­pos­es we use your data for?

A por­tion of the infor­ma­tion is gen­er­at­ed to guar­an­tee the error free pro­vi­sion of the web­site. Oth­er data may be used to ana­lyze your user pat­terns. If con­tracts can be con­clud­ed or ini­ti­at­ed via the web­site, the trans­mit­ted data will also be processed for con­tract offers, orders or oth­er order enquiries.

What rights do you have as far as your infor­ma­tion is con­cerned?

You have the right to receive infor­ma­tion about the source, recip­i­ents, and pur­pos­es of your archived per­son­al data at any time with­out hav­ing to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or erad­i­cat­ed. If you have con­sent­ed to data pro­cess­ing, you have the option to revoke this con­sent at any time, which shall affect all future data pro­cess­ing. More­over, you have the right to demand that the pro­cess­ing of your data be restrict­ed under cer­tain cir­cum­stances. Fur­ther­more, you have the right to log a com­plaint with the com­pe­tent super­vis­ing agency.

Please do not hes­i­tate to con­tact us at any time if you have ques­tions about this or any oth­er data pro­tec­tion relat­ed issues.

Analy­sis tools and tools pro­vid­ed by third par­ties

There is a pos­si­bil­i­ty that your brows­ing pat­terns will be sta­tis­ti­cal­ly ana­lyzed when your vis­it this web­site. Such analy­ses are per­formed pri­mar­i­ly with what we refer to as analy­sis pro­grams.

For detailed infor­ma­tion about these analy­sis pro­grams please con­sult our Data Pro­tec­tion Dec­la­ra­tion below.

2. Host­ing

We are host­ing the con­tent of our web­site at the fol­low­ing provider:

Host Europe

The provider is the Host Europe GmbH, Hans­es­traße 111, 51149 Köln, Ger­many (here­inafter referred to as: Host Europe). When­ev­er you vis­it our web­site, Host Europe will record a vari­ety of log­files, includ­ing your IP address­es.

For details, please refer to the Data Pri­va­cy Pol­i­cy of Host Europe: https://www.hosteurope.de/AGB/Datenschutzerklaerung/.

We use Host Europe on the basis of Art. 6(1)(f) GDPR. We have a legit­i­mate inter­est in mak­ing the depic­tion of our web­site as depend­able as pos­si­ble. If you have been asked for your respec­tive con­sent, pro­cess­ing shall occur exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, if the con­sent com­pris­es the archiv­ing of cook­ies or access to infor­ma­tion on the user’s device (e.g., device fin­ger print­ing) as defined in the TDDDG. Such con­sent may be revoked at any time.

Data pro­cess­ing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

3. Gen­er­al infor­ma­tion and manda­to­ry infor­ma­tion

Data pro­tec­tion

The oper­a­tors of this web­site and its pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. Hence, we han­dle your per­son­al data as con­fi­den­tial infor­ma­tion and in com­pli­ance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this Data Pro­tec­tion Dec­la­ra­tion.

When­ev­er you use this web­site, a vari­ety of per­son­al infor­ma­tion will be col­lect­ed. Per­son­al data com­pris­es data that can be used to per­son­al­ly iden­ti­fy you. This Data Pro­tec­tion Dec­la­ra­tion explains which data we col­lect as well as the pur­pos­es we use this data for. It also explains how, and for which pur­pose the infor­ma­tion is col­lect­ed.

We here­with advise you that the trans­mis­sion of data via the Inter­net (i.e., through e‑mail com­mu­ni­ca­tions) may be prone to secu­ri­ty gaps. It is not pos­si­ble to com­plete­ly pro­tect data against third-par­ty access.

Infor­ma­tion about the respon­si­ble par­ty (referred to as the “con­troller” in the GDPR)

The data pro­cess­ing con­troller on this web­site is:

in.vent Diag­nos­ti­ca GmbH
Neuen­dorf­s­traße 17
16761 Hen­nigs­dorf

Phone: +49 3302 55199–0
E‑mail: info@inventdiagnostica.de

The con­troller is the nat­ur­al per­son or legal enti­ty that sin­gle-hand­ed­ly or joint­ly with oth­ers makes deci­sions as to the pur­pos­es of and resources for the pro­cess­ing of per­son­al data (e.g., names, e‑mail address­es, etc.).

Stor­age dura­tion

Unless a more spe­cif­ic stor­age peri­od has been spec­i­fied in this pri­va­cy pol­i­cy, your per­son­al data will remain with us until the pur­pose for which it was col­lect­ed no longer applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­cess­ing, your data will be delet­ed, unless we have oth­er legal­ly per­mis­si­ble rea­sons for stor­ing your per­son­al data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, the dele­tion will take place after these rea­sons cease to apply.

Gen­er­al infor­ma­tion on the legal basis for the data pro­cess­ing on this web­site

If you have con­sent­ed to data pro­cess­ing, we process your per­son­al data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial cat­e­gories of data are processed accord­ing to Art. 9 (1) DSG­VO. In the case of explic­it con­sent to the trans­fer of per­son­al data to third coun­tries, the data pro­cess­ing is also based on Art. 49 (1)(a) GDPR. If you have con­sent­ed to the stor­age of cook­ies or to the access to infor­ma­tion in your end device (e.g., via device fin­ger­print­ing), the data pro­cess­ing is addi­tion­al­ly based on § 25 (1) TDDDG. The con­sent can be revoked at any time. If your data is required for the ful­fill­ment of a con­tract or for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures, we process your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­more, if your data is required for the ful­fill­ment of a legal oblig­a­tion, we process it on the basis of Art. 6(1)© GDPR. Fur­ther­more, the data pro­cess­ing may be car­ried out on the basis of our legit­i­mate inter­est accord­ing to Art. 6(1)(f) GDPR. Infor­ma­tion on the rel­e­vant legal basis in each indi­vid­ual case is pro­vid­ed in the fol­low­ing para­graphs of this pri­va­cy pol­i­cy.

Des­ig­na­tion of a data pro­tec­tion offi­cer

We have appoint­ed a data pro­tec­tion offi­cer.

Dr. Diana Pos­selt

Phone: +49 3302 55199–300
E‑mail: datenschutz@inventdiagnostica.de

Recip­i­ents of per­son­al data

In the scope of our busi­ness activ­i­ties, we coop­er­ate with var­i­ous exter­nal par­ties. In some cas­es, this also requires the trans­fer of per­son­al data to these exter­nal par­ties. We only dis­close per­son­al data to exter­nal par­ties if this is required as part of the ful­fill­ment of a con­tract, if we are legal­ly oblig­at­ed to do so (e.g., dis­clo­sure of data to tax author­i­ties), if we have a legit­i­mate inter­est in the dis­clo­sure pur­suant to Art. 6 (1)(f) GDPR, or if anoth­er legal basis per­mits the dis­clo­sure of this data. When using proces­sors, we only dis­close per­son­al data of our cus­tomers on the basis of a valid con­tract on data pro­cess­ing. In the case of joint pro­cess­ing, a joint pro­cess­ing agree­ment is con­clud­ed.

Revo­ca­tion of your con­sent to the pro­cess­ing of data

A wide range of data pro­cess­ing trans­ac­tions are pos­si­ble only sub­ject to your express con­sent. You can also revoke at any time any con­sent you have already giv­en us. This shall be with­out prej­u­dice to the law­ful­ness of any data col­lec­tion that occurred pri­or to your revo­ca­tion.

Right to object to the col­lec­tion of data in spe­cial cas­es; right to object to direct adver­tis­ing (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PRO­CESS­ING OF YOUR PER­SON­AL DATA BASED ON GROUNDS ARIS­ING FROM YOUR UNIQUE SIT­U­A­TION. THIS ALSO APPLIES TO ANY PRO­FIL­ING BASED ON THESE PRO­VI­SIONS. TO DETER­MINE THE LEGAL BASIS, ON WHICH ANY PRO­CESS­ING OF DATA IS BASED, PLEASE CON­SULT THIS DATA PRO­TEC­TION DEC­LA­RA­TION. IF YOU LOG AN OBJEC­TION, WE WILL NO LONGER PROCESS YOUR AFFECT­ED PER­SON­AL DATA, UNLESS WE ARE IN A POSI­TION TO PRESENT COM­PELLING PRO­TEC­TION WOR­THY GROUNDS FOR THE PRO­CESS­ING OF YOUR DATA, THAT OUT­WEIGH YOUR INTER­ESTS, RIGHTS AND FREE­DOMS OR IF THE PUR­POSE OF THE PRO­CESS­ING IS THE CLAIM­ING, EXER­CIS­ING OR DEFENCE OF LEGAL ENTI­TLE­MENTS (OBJEC­TION PUR­SUANT TO ART. 21(1) GDPR).

IF YOUR PER­SON­AL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVER­TIS­ING, YOU HAVE THE RIGHT TO OBJECT TO THE PRO­CESS­ING OF YOUR AFFECT­ED PER­SON­AL DATA FOR THE PUR­POS­ES OF SUCH ADVER­TIS­ING AT ANY TIME. THIS ALSO APPLIES TO PRO­FIL­ING TO THE EXTENT THAT IT IS AFFIL­I­AT­ED WITH SUCH DIRECT ADVER­TIS­ING. IF YOU OBJECT, YOUR PER­SON­AL DATA WILL SUB­SE­QUENT­LY NO LONGER BE USED FOR DIRECT ADVER­TIS­ING PUR­POS­ES (OBJEC­TION PUR­SUANT TO ART. 21(2) GDPR).

Right to log a com­plaint with the com­pe­tent super­vi­so­ry agency

In the event of vio­la­tions of the GDPR, data sub­jects are enti­tled to log a com­plaint with a super­vi­so­ry agency, in par­tic­u­lar in the mem­ber state where they usu­al­ly main­tain their domi­cile, place of work or at the place where the alleged vio­la­tion occurred. The right to log a com­plaint is in effect regard­less of any oth­er admin­is­tra­tive or court pro­ceed­ings avail­able as legal recours­es.

Right to data porta­bil­i­ty

You have the right to have data that we process auto­mat­i­cal­ly on the basis of your con­sent or in ful­fill­ment of a con­tract hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you should demand the direct trans­fer of the data to anoth­er con­troller, this will be done only if it is tech­ni­cal­ly fea­si­ble.

Infor­ma­tion about, rec­ti­fi­ca­tion and erad­i­ca­tion of data

With­in the scope of the applic­a­ble statu­to­ry pro­vi­sions, you have the right to demand infor­ma­tion about your archived per­son­al data, their source and recip­i­ents as well as the pur­pose of the pro­cess­ing of your data at any time. You may also have a right to have your data rec­ti­fied or erad­i­cat­ed. If you have ques­tions about this sub­ject mat­ter or any oth­er ques­tions about per­son­al data, please do not hes­i­tate to con­tact us at any time.

Right to demand pro­cess­ing restric­tions

You have the right to demand the impo­si­tion of restric­tions as far as the pro­cess­ing of your per­son­al data is con­cerned. To do so, you may con­tact us at any time. The right to demand restric­tion of pro­cess­ing applies in the fol­low­ing cas­es:

• In the event that you should dis­pute the cor­rect­ness of your data archived by us, we will usu­al­ly need some time to ver­i­fy this claim. Dur­ing the time that this inves­ti­ga­tion is ongo­ing, you have the right to demand that we restrict the pro­cess­ing of your per­son­al data.
• If the pro­cess­ing of your per­son­al data was/is con­duct­ed in an unlaw­ful man­ner, you have the option to demand the restric­tion of the pro­cess­ing of your data instead of demand­ing the erad­i­ca­tion of this data.
• If we do not need your per­son­al data any longer and you need it to exer­cise, defend or claim legal enti­tle­ments, you have the right to demand the restric­tion of the pro­cess­ing of your per­son­al data instead of its erad­i­ca­tion.
• If you have raised an objec­tion pur­suant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each oth­er. As long as it has not been deter­mined whose inter­ests pre­vail, you have the right to demand a restric­tion of the pro­cess­ing of your per­son­al data.

If you have restrict­ed the pro­cess­ing of your per­son­al data, these data – with the excep­tion of their archiv­ing – may be processed only sub­ject to your con­sent or to claim, exer­cise or defend legal enti­tle­ments or to pro­tect the rights of oth­er nat­ur­al per­sons or legal enti­ties or for impor­tant pub­lic inter­est rea­sons cit­ed by the Euro­pean Union or a mem­ber state of the EU.

SSL and/or TLS encryp­tion

For secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as pur­chase orders or inquiries you sub­mit to us as the web­site oper­a­tor, this web­site uses either an SSL or a TLS encryp­tion pro­gram. You can rec­og­nize an encrypt­ed con­nec­tion by check­ing whether the address line of the brows­er switch­es from “http://” to “https://” and also by the appear­ance of the lock icon in the brows­er line.

If the SSL or TLS encryp­tion is acti­vat­ed, data you trans­mit to us can­not be read by third par­ties.

Rejec­tion of unso­licit­ed e‑mails

We here­with object to the use of con­tact infor­ma­tion pub­lished in con­junc­tion with the manda­to­ry infor­ma­tion to be pro­vid­ed in our Site Notice to send us pro­mo­tion­al and infor­ma­tion mate­r­i­al that we have not express­ly request­ed. The oper­a­tors of this web­site and its pages reserve the express right to take legal action in the event of the unso­licit­ed send­ing of pro­mo­tion­al infor­ma­tion, for instance via SPAM mes­sages.

4. Record­ing of data on this web­site

Cook­ies

Our web­sites and pages use what the indus­try refers to as “cook­ies.” Cook­ies are small data pack­ages that do not cause any dam­age to your device. They are either stored tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or they are per­ma­nent­ly archived on your device (per­ma­nent cook­ies). Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed once you ter­mi­nate your vis­it. Per­ma­nent cook­ies remain archived on your device until you active­ly delete them, or they are auto­mat­i­cal­ly erad­i­cat­ed by your web brows­er.

Cook­ies can be issued by us (first-par­ty cook­ies) or by third-par­ty com­pa­nies (so-called third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain ser­vices of third-par­ty com­pa­nies into web­sites (e.g., cook­ies for han­dling pay­ment ser­vices).

Cook­ies have a vari­ety of func­tions. Many cook­ies are tech­ni­cal­ly essen­tial since cer­tain web­site func­tions would not work in the absence of these cook­ies (e.g., the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies may be used to ana­lyze user behav­ior or for pro­mo­tion­al pur­pos­es.

Cook­ies, which are required for the per­for­mance of elec­tron­ic com­mu­ni­ca­tion trans­ac­tions, for the pro­vi­sion of cer­tain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are nec­es­sary for the opti­miza­tion (required cook­ies) of the web­site (e.g., cook­ies that pro­vide mea­sur­able insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­fer­ent legal basis is cit­ed. The oper­a­tor of the web­site has a legit­i­mate inter­est in the stor­age of required cook­ies to ensure the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of the operator’s ser­vices. If your con­sent to the stor­age of the cook­ies and sim­i­lar recog­ni­tion tech­nolo­gies has been request­ed, the pro­cess­ing occurs exclu­sive­ly on the basis of the con­sent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this con­sent may be revoked at any time.

You have the option to set up your brows­er in such a man­ner that you will be noti­fied any time cook­ies are placed and to per­mit the accep­tance of cook­ies only in spe­cif­ic cas­es. You may also exclude the accep­tance of cook­ies in cer­tain cas­es or in gen­er­al or acti­vate the delete-func­tion for the auto­mat­ic erad­i­ca­tion of cook­ies when the brows­er clos­es. If cook­ies are deac­ti­vat­ed, the func­tions of this web­site may be lim­it­ed.

Which cook­ies and ser­vices are used on this web­site can be found in this pri­va­cy pol­i­cy.

Con­sent with Bor­labs Cook­ie

Our web­site uses the Bor­labs con­sent tech­nol­o­gy to obtain your con­sent to the stor­age of cer­tain cook­ies in your brows­er or for the use of cer­tain tech­nolo­gies and for their data pri­va­cy pro­tec­tion com­pli­ant doc­u­men­ta­tion. The provider of this tech­nol­o­gy is Bor­labs GmbH, Rübenkamp 32, 22305 Ham­burg, Ger­many (here­inafter referred to as Bor­labs).

When­ev­er you vis­it our web­site, a Bor­labs cook­ie will be stored in your brows­er, which archives any dec­la­ra­tions or revo­ca­tions of con­sent you have entered. These data are not shared with the provider of the Bor­labs tech­nol­o­gy.

The record­ed data shall remain archived until you ask us to erad­i­cate them, delete the Bor­labs cook­ie on your own or the pur­pose of stor­ing the data no longer exists. This shall be with­out prej­u­dice to any reten­tion oblig­a­tions man­dat­ed by law. To review the details of Bor­labs’ data pro­cess­ing poli­cies, please vis­it https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use the Bor­labs cook­ie con­sent tech­nol­o­gy to obtain the dec­la­ra­tions of con­sent man­dat­ed by law for the use of cook­ies. The legal basis for the use of such cook­ies is Art. 6(1)© GDPR.

Request by e‑mail, tele­phone, or fax

If you con­tact us by e‑mail, tele­phone or fax, your request, includ­ing all result­ing per­son­al data (name, request) will be stored and processed by us for the pur­pose of pro­cess­ing your request. We do not pass these data on with­out your con­sent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is relat­ed to the ful­fill­ment of a con­tract or is required for the per­for­mance of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the data are processed on the basis of our legit­i­mate inter­est in the effec­tive han­dling of inquiries sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your con­sent (Art. 6(1)(a) GDPR) if it has been obtained; the con­sent can be revoked at any time.

The data sent by you to us via con­tact requests remain with us until you request us to delete, revoke your con­sent to the stor­age or the pur­pose for the data stor­age laps­es (e.g. after com­ple­tion of your request). Manda­to­ry statu­to­ry pro­vi­sions — in par­tic­u­lar statu­to­ry reten­tion peri­ods — remain unaf­fect­ed.

5. Analy­sis tools and adver­tis­ing

Mato­mo

This web­site uses the open-source web analy­sis ser­vice Mato­mo.

Through Mato­mo, we are able to col­lect and ana­lyze data on the use of our web­site-by-web­site vis­i­tors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addi­tion, we col­lect var­i­ous log files (e.g. IP address, refer­rer, brows­er, and oper­at­ing sys­tem used) and can mea­sure whether our web­site vis­i­tors per­form cer­tain actions (e.g. clicks, pur­chas­es, etc.).

The use of this analy­sis tool is based on Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the analy­sis of user pat­terns, in order to opti­mize the operator’s web offer­ings and adver­tis­ing. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

IP anonymiza­tion

For analy­sis with Mato­mo we use IP anonymiza­tion. Your IP address is short­ened before the analy­sis, so that it is no longer clear­ly assign­a­ble to you.

Host­ing

We host Mato­mo exclu­sive­ly on our own servers so that all analy­sis data remains with us and is not passed on.

6. Newslet­ter

Newslet­ter data

If you would like to receive the newslet­ter offered on the web­site, we require an e‑mail address from you as well as infor­ma­tion that allows us to ver­i­fy that you are the own­er of the e‑mail address pro­vid­ed and that you agree to receive the newslet­ter. Fur­ther data is not col­lect­ed or only on a vol­un­tary basis. For the han­dling of the newslet­ter, we use newslet­ter ser­vice providers, which are described below.

Mailchimp

This web­site uses the ser­vices of Mailchimp to send out its newslet­ters. The provider is the Rock­et Sci­ence Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Among oth­er things, Mailchimp is a ser­vice that can be deployed to orga­nize and ana­lyze the send­ing of newslet­ters. When­ev­er you enter data for the pur­pose of sub­scrib­ing to a newslet­ter (e.g. your e‑mail address), the infor­ma­tion is stored on Mailchimp servers in the Unit­ed States.

With the assis­tance of the Mailchimp tool, we can ana­lyze the per­for­mance of our newslet­ter cam­paigns. If you open an e‑mail that has been sent through the Mailchimp tool, a file that has been inte­grat­ed into the e‑mail (a so-called web-bea­con) con­nects to Mailchimp’s servers in the Unit­ed States. As a result, it can be deter­mined whether a newslet­ter mes­sage has been opened and which links the recip­i­ent pos­si­bly clicked on. Tech­ni­cal infor­ma­tion is also record­ed at that time (e.g. the time of access, the IP address, type of brows­er and oper­at­ing sys­tem). This infor­ma­tion can­not be allo­cat­ed to the respec­tive newslet­ter recip­i­ent. Their sole pur­pose is the per­for­mance of sta­tis­ti­cal analy­ses of newslet­ter cam­paigns. The results of such analy­ses can be used to tai­lor future newslet­ters to the inter­ests of their recip­i­ents more effec­tive­ly.

If you do not want to per­mit an analy­sis by Mailchimp, you must unsub­scribe from the newslet­ter. We pro­vide a link for you to do this in every newslet­ter mes­sage.

The data is processed based on your con­sent (Art. 6(1)(a) GDPR). You may revoke any con­sent you have giv­en at any time by unsub­scrib­ing from the newslet­ter. This shall be with­out prej­u­dice to the law­ful­ness of any data pro­cess­ing trans­ac­tions that have tak­en place pri­or to your revo­ca­tion.

The data deposit­ed with us for the pur­pose of sub­scrib­ing to the newslet­ter will be stored by us until you unsub­scribe from the newslet­ter or the newslet­ter ser­vice provider and delet­ed from the newslet­ter dis­tri­b­u­tion list after you unsub­scribe from the newslet­ter. Data stored for oth­er pur­pos­es with us remain unaf­fect­ed.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.

After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, your e‑mail address may be stored by us or the newslet­ter ser­vice provider in a black­list, if such action is nec­es­sary to pre­vent future mail­ings. The data from the black­list is used only for this pur­pose and not merged with oth­er data. This serves both your inter­est and our inter­est in com­ply­ing with the legal require­ments when send­ing newslet­ters (legit­i­mate inter­est with­in the mean­ing of Art. 6(1)(f) GDPR). The stor­age in the black­list is indef­i­nite. You may object to the stor­age if your inter­ests out­weigh our legit­i­mate inter­est.

For more details, please con­sult the Data Pri­va­cy Poli­cies of Mailchimp at: https://mailchimp.com/legal/terms/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/7693.

Newslet­ter mail­ing to exist­ing cus­tomers

If you order goods or ser­vices from us and enter your e‑mail address, this e‑mail address may sub­se­quent­ly be used by us to send you newslet­ters, pro­vid­ed we inform you of this in advance. In such a case, only direct adver­tis­ing for our own sim­i­lar goods or ser­vices will be sent via the newslet­ter. You can unsub­scribe from this newslet­ter at any time. There is a cor­re­spond­ing link in every newslet­ter for this pur­pose. In this case, the legal basis for send­ing the newslet­ter is Art. 6 (1)(f) GDPR in con­junc­tion with Sec­tion 7 (3) UWG.

After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, we may store your email address in a black­list to pre­vent future mail­ings to you. The data from the black­list will only be used for this pur­pose and will not be merged with oth­er data. This serves both your inter­est and our inter­est in com­ply­ing with the legal require­ments when send­ing newslet­ters (legit­i­mate inter­est with­in the mean­ing of Art. 6 (1)(f) GDPR). Stor­age in the black­list is not lim­it­ed in time. You can object to the stor­age if your inter­ests out­weigh our legit­i­mate inter­est.

7. Plug-ins and Tools

YouTube with expand­ed data pro­tec­tion inte­gra­tion

This web­site inte­grates videos from the YouTube web­site. The oper­a­tor of the web­site is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

When you vis­it one of these web­sites on which YouTube is inte­grat­ed, a con­nec­tion to the YouTube servers is estab­lished. This tells the YouTube serv­er which of our pages you have vis­it­ed. If you are logged into your YouTube account, you enable YouTube to assign your surf­ing behav­ior direct­ly to your per­son­al pro­file. You can pre­vent this by log­ging out of your YouTube account.

We use YouTube in extend­ed data pro­tec­tion mode. Accord­ing to YouTube, videos that are played in extend­ed data pro­tec­tion mode are not used to per­son­al­ize brows­ing on YouTube. Ads that are played in extend­ed data pro­tec­tion mode are also not per­son­al­ized. No cook­ies are set in extend­ed data pro­tec­tion mode. Instead, so-called local stor­age ele­ments are stored in the user’s brows­er, which con­tain per­son­al data sim­i­lar to cook­ies and can be used for recog­ni­tion. Details on the extend­ed data pro­tec­tion mode can be found here: https://support.google.com/youtube/answer/171780.

After acti­vat­ing a YouTube video, fur­ther data pro­cess­ing oper­a­tions may be trig­gered over which we have no influ­ence.

The use of YouTube is based on our inter­est in pre­sent­ing our online con­tent in an appeal­ing man­ner. Pur­suant to Art. 6(1)(f) GDPR, this is a legit­i­mate inter­est. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

For more infor­ma­tion on how YouTube han­dles user data, please con­sult the YouTube Data Pri­va­cy Pol­i­cy under: https://policies.google.com/privacy?hl=en.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Google Maps

This web­site uses the map­ping ser­vice Google Maps. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land. With the means of this ser­vice, we can inte­grate map mate­r­i­al on our web­site.

To enable the use of the Google Maps fea­tures, your IP address must be stored. As a rule, this infor­ma­tion is trans­ferred to one of Google’s servers in the Unit­ed States, where it is archived. The oper­a­tor of this web­site has no con­trol over the data trans­fer. In case Google Maps has been acti­vat­ed, Google has the option to use Google Fonts for the pur­pose of the uni­form depic­tion of fonts. When you access Google Maps, your brows­er will load the required web fonts into your brows­er cache, to cor­rect­ly dis­play text and fonts.

We use Google Maps to present our online con­tent in an appeal­ing man­ner and to make the loca­tions dis­closed on our web­site easy to find. This con­sti­tutes a legit­i­mate inter­est as defined in Art. 6(1)(f) GDPR. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more infor­ma­tion on the han­dling of user data, please review Google’s Data Pri­va­cy Dec­la­ra­tion under: https://policies.google.com/privacy?hl=en.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Google reCAPTCHA

We use “Google reCAPTCHA” (here­inafter referred to as “reCAPTCHA”) on this web­site. The provider is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

The pur­pose of reCAPTCHA is to deter­mine whether data entered on this web­site (e.g., infor­ma­tion entered into a con­tact form) is being pro­vid­ed by a human user or by an auto­mat­ed pro­gram. To deter­mine this, reCAPTCHA ana­lyzes the behav­ior of the web­site vis­i­tors based on a vari­ety of para­me­ters. This analy­sis is trig­gered auto­mat­i­cal­ly as soon as the web­site vis­i­tor enters the site. For this analy­sis, reCAPTCHA eval­u­ates a vari­ety of data (e.g., IP address, time the web­site vis­i­tor spent on the site or cur­sor move­ments ini­ti­at­ed by the user). The data tracked dur­ing such analy­ses are for­ward­ed to Google.

reCAPTCHA analy­ses run entire­ly in the back­ground. Web­site vis­i­tors are not alert­ed that an analy­sis is under­way.

Data are stored and ana­lyzed on the basis of Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the pro­tec­tion of the operator’s web­sites against abu­sive auto­mat­ed spy­ing and against SPAM. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

For more infor­ma­tion about Google reCAPTCHA please refer to the Google Data Pri­va­cy Dec­la­ra­tion and Terms Of Use under the fol­low­ing links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

8. Cus­tom Ser­vices

Han­dling appli­cant data

We offer web­site vis­i­tors the oppor­tu­ni­ty to sub­mit job appli­ca­tions to us (e.g., via e‑mail, via postal ser­vices on by sub­mit­ting the online job appli­ca­tion form). Below, we will brief you on the scope, pur­pose and use of the per­son­al data col­lect­ed from you in con­junc­tion with the appli­ca­tion process. We assure you that the col­lec­tion, pro­cess­ing, and use of your data will occur in com­pli­ance with the applic­a­ble data pri­va­cy rights and all oth­er statu­to­ry pro­vi­sions and that your data will always be treat­ed as strict­ly con­fi­den­tial.

Scope and pur­pose of the col­lec­tion of data

If you sub­mit a job appli­ca­tion to us, we will process any affil­i­at­ed per­son­al data (e.g., con­tact and com­mu­ni­ca­tions data, appli­ca­tion doc­u­ments, notes tak­en dur­ing job inter­views, etc.), if they are required to make a deci­sion con­cern­ing the estab­lish­ment or an employ­ment rela­tion­ship. The legal grounds for the afore­men­tioned are § 26 BDSG accord­ing to Ger­man Law (Nego­ti­a­tion of an Employ­ment Rela­tion­ship), Art. 6(1)(b) GDPR (Gen­er­al Con­tract Nego­ti­a­tions) and – pro­vid­ed you have giv­en us your con­sent – Art. 6(1)(a) GDPR. You may revoke any con­sent giv­en at any time. With­in our com­pa­ny, your per­son­al data will only be shared with indi­vid­u­als who are involved in the pro­cess­ing of your job appli­ca­tion.

If your job appli­ca­tion should result in your recruit­ment, the data you have sub­mit­ted will be archived on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the pur­pose of imple­ment­ing the employ­ment rela­tion­ship in our data pro­cess­ing sys­tem.

Data Archiv­ing Peri­od

If we are unable to make you a job offer or you reject a job offer or with­draw your appli­ca­tion, we reserve the right to retain the data you have sub­mit­ted on the basis of our legit­i­mate inter­ests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the appli­ca­tion pro­ce­dure (rejec­tion or with­draw­al of the appli­ca­tion). After­wards the data will be delet­ed, and the phys­i­cal appli­ca­tion doc­u­ments will be destroyed. The stor­age serves in par­tic­u­lar as evi­dence in the event of a legal dis­pute. If it is evi­dent that the data will be required after the expiry of the 6‑month peri­od (e.g., due to an impend­ing or pend­ing legal dis­pute), dele­tion will only take place when the pur­pose for fur­ther stor­age no longer applies.

Longer stor­age may also take place if you have giv­en your agree­ment (Arti­cle 6(1)(a) GDPR) or if statu­to­ry data reten­tion require­ments pre­clude the dele­tion.