Privacy policy

The protection of your personal data is very important to us. We therefore process your personal data strictly in accordance with data protection regulations. These are the European Data Protection Regulation (DSGVO), the German Federal Data Protection Act (BDSG) and other legal provisions. The following notes provide a simple overview of what happens to your personal data when you visit our website or our social media profiles, contact us or how we process your personal data as part of the business relationship.

Contact details

‍

Note on the responsible entity

‍

aiio GmbH

Klausener street 10a

39112 Magdeburg

Phone: 0391 251 948 79

E-mail: info@aiio.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Data Protection Officer

‍

Mandy Herrmann

LGD Data Protection Ltd.

Rogätzer street 8

39106 Magdeburg

Phone: 0391 5568632-2

E-mail: datenschutz@lgd-data.de

1. when you contact us with concerns

‍

You can contact us with your concerns at any time. You can do this by phone, letter, e-mail or in person. We also provide a contact form on our website. The data that you send us with your request, you always give us voluntarily.

Personal data:

- Name

- Company

- E-mail address

- Message

Purposes of processing:

- Processing your request

Legal basis:

- Art. 6 para. 1 lit. b DSGVO in the context of the contract or pre-contractual measures

- Art. 6 para. 1 lit. f DSGVO for the protection of legitimate interests (processing of the request)

Recipient of the data:

- Internal departments

- Entities to which we will forward the data at your request

Retention period:

- After the processing is finished, the data is archived

- Data that is subject to the statutory retention obligation is deleted after 6 years

Opposition:

- If the data processing serves the protection of our legitimate interests, you have the right to object to the processing. Please send your objection in writing to the above address or by e-mail to info@aiio.de. In the event of an objection, no processing of your request can take place.

2. data collection on the website

‍

When you visit our website, the following data is automatically processed:

2.1 Server log files

When you visit our website, you automatically transmit information to our web server. The provider is Amazon Web Service (AWS). The data centers of this provider are located in Ireland. It may nevertheless happen that personal data is also stored on servers in the USA. There is no adequacy decision of the European Commission for the USA. The processing of personal data is therefore based on standard data protection clauses of the European Commission. The following data is recorded during the browser session:

Personal data:

- Browser type and version

- Operating system used

- Referrer URL

- Host name of the accessing computer

- Date and time of the server request

- IP address

Purposes of processing:

- Operation of the website, evaluation of malfunctions

Legal basis:

- Art. 6 para. 1 lit. f DSGVO (legitimate interest in the correct presentation of our website).

Recipient of the data:

- AWS

Retention period:

- 14 days

Opposition:

- The collection of data for the provision of the website and the storage of data in server log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

2.2 Cookies

Our website uses so-called "cookies". Cookies are small data sets and do not cause any damage to your end device. They are stored temporarily, for example for the duration of a session (session cookies), on your end device. This is technically necessary. It is automatically deleted by your browser after you leave our website.

Personal data:

- Session cookies do not store any reference that serves to identify the website visitor.

- The server generates a "session ID" that is transmitted to the client. This ID is a randomly generated number that the session cookie stores temporarily. It is only used to assign the website visitor to a specific session.

Purposes of processing:

- Operation of the website, evaluation of malfunctions

Legal basis:

- Art. 6 para. 1 lit. f DSGVO (legitimate interest in the correct presentation of our website).

Recipient of the data:

- None

Retention period:

- Cookies are deleted after the end of the browser session.

Opposition:

- Technical cookies are stored on your computer and transmitted from it to our site. Therefore, you have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

2.3 Finsweet Cookie Consent

We use the Finsweet consent technology to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in accordance with data protection law. The provider is Finsweet Inc, 2774 Harbor Rd Merrick, NY,11566-4608, USA. In doing so, we process your personal data as follows:

Personal data:

- Date and time of the server request

- Browser type and version

- Operating system used

- Referrer URL

- IP address

- Information on consent behavior

Purposes of processing:

- Obtaining, managing and documenting consent behavior.

Legal basis:

- Art. 6 para. 1 lit. c DSGVO

Recipient of the data:

- Internal departments

- Finsweet

Retention period:

Finsweet sets a cookie in your browser in order to be able to assign the consents granted to you or their revocation. The data collected in this way is stored until you delete the cookie yourself or deleted after 180 days at the latest.

Revocation:

- You can change your setting in the cookie settings at any time

2.4 Google Tag Manager

We manage website tags (website code) with Google Tag Manager. The use of Google Tag Manager is in accordance with Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in managing and continuously improving our services and reducing your loading time. Google TagManager only implements a website code. Google Tag Manager itself does not generate cookies and does not collect any personal data. It only integrates the website code that we have stored elsewhere and that can be used to collect data. It is therefore only used to facilitate the management of the code in question, but does not itself access the data processed by the code.

2.5 Google Analytics

On this website we use Google Analytics for website analysis. Google Analytics is provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google about your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. We have concluded standard contractual clauses with Google that guarantee compliance with an appropriate level of data protection. We have activated the IP anonymization function on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Personal data:

- IP address

- Referrer URL

- Website access (frequency and dwell time)

Purposes of processing:

- Analysis of the flow of visitors to our website

- Evaluation of website usage

Legal basis:

- Art. 6 para. 1 lit. a DSGVO

Recipient of the data:

- Internal departments

- Google Ireland Ltd. and Google LLC

Retention period:

- 24 months

Revocation:

- You can change your setting at any time in the privacy settings.

You can find more information about Google Analytics here: https://policies.google.com/privacy?hl=de

2.6 Google Ads

We use "Google Ads Conversion Tracking" feature of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google AdsConversion tracking uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site when they click on a Google ad. The information collected by Google is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. We have concluded an order processing agreement and standard data protection clauses with Google, with which Google undertakes to process the data received only in accordance with our instructions and to comply with the EU level of data protection.

Personal data:

- IP address

- Referrer URL

- Website access (frequency and dwell time)

Purposes of processing:

- Analysis of the flow of visitors to our website

- Evaluation of website usage

- Evaluation of the advertising measures carried out (online marketing measures)

Legal basis:

- Art. 6 para. 1 lit. a DSGVO

Recipient of the data:

- Internal departments

- Google

Retention period:

- The cookies are stored for 90 days and then automatically deleted.

Revocation:

- You can change your setting at any time in the privacy settings.

You can find more information about Google Ads here: https://policies.google.com/privacy?hl=de and https://support.google.com/adwords/answer/93148?ctx=tltp respectively.

2.7 YouTube video integration

On our website we have embedded videos of the portal YouTube. The operator is YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA. YouTube belongs to the Google Group, in this case Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The following data is processed in the process:

Personal data:

- IP address

- Information that your browser automatically transmits (operating system of your device, browser type and version, date and time of server request).

- Language settings, login information, location/surrounding area information

Purposes and legal basis of the processing:

- The data processing is carried out in the interest of an appealing presentation of our online offers according to Art. 6 para. 1 lit. f DSGVO.

Recipient of the data:

- By embedding the video, a connection to Google servers is established so that Google receives your personal data. Google also processes your personal data in the USA.

- In addition, a connection is established to the "Double Click" advertising network of Google in the USA.

Retention period:

- The lifetime of the cookies depends on their respective purpose. The purpose and lifetime of each cookie can be found in the following list:

NID

The NID cookie contains a unique ID that Google uses to store your preferred settings and other information.

6 months

CONSENT

This cookie is used to store cookie consent settings regarding YouTube.

400 days

‍

VISITOR_INFO1_LIVE

This is a cookie that YouTube sets to calculate the user's bandwidth. This information is used to determine whether the user should use the new or old user interface of the player.

6 months

‍

YSC

This cookie is set by YouTube on websites with embedded YouTube videos.

Session

‍

IDE

390 days

‍

Nextid, requests

Registers a unique ID to keep statistics of the videos from YouTube that the user has watched.

1 year

‍

remote_sid

Are set as soon as a Youtube video is embedded in our page and played. Enables the correct functionality of this

Youtube videos.

Session

For more information on the purpose and scope of data collection and processing by YouTube, please refer to Google's privacy policy. There you can find out about your rights vis-à-vis Google and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy

2.8 Google Maps

On this website we use Google Maps. This allows us to show you interactive maps directly in the website and provide you with the comfortable use of the map function.

Personal data:

- Browser type and version

- Operating system used

- Referrer URL

- Host name of the accessing computer

- Date and time of the server request

- IP address

Purposes and legal basis of the processing:

- The data processing is carried out in the interest of an appealing presentation of our online offers and in an easy findability of the places indicated by us on the website due to our legitimate interest according to Art. 6 para. 1 lit. f DSGVO.

Recipient of the data:

- The integration of Google Maps establishes a connection to Google servers, so that Google receives your personal data. Google also processes your personal data in the USA.

Retention period:

- Cookies set by Google Maps are deleted after 2 years at the latest. You can find the specific lifetime of the cookies in our cookie settings.

2.9 Meta Pixel

On our website we use Meta Pixel of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Meta Pixel is an analytics tool that allows us to measure the effectiveness of our advertising by analyzing the actions users take on our website. With the help of the Meta Pixel, we also want to make sure that our Facebook Ads match the potential interest of users and do not annoy them. With the help of the meta pixel, we can also track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

Personal data:

- IP address

- Information that your browser automatically transmits (operating system of your device, browser type and version, date and time of the server request).

- Language settings, login information, location/surrounding area information

- Surfing behavior

Purposes of processing:

- Analysis of website usage

- Display of user-related advertising

- Measuring the effectiveness of Facebook ads

Legal basis:

- Art. 6 para. 1 lit. a DSGVO

Recipient of the data:

- Meta stores cookies on users' devices. If users subsequently log in to Facebook, for example, or visit Facebook while logged in, the visit to our online offering is noted in the Facebook profile. The data collected is anonymous for us, so we cannot draw any conclusions about the identity of the user.

- The collected data is transferred to a Meta server in the USA and stored there.

Retention period:

The lifetime of the cookies depends on their respective purpose. The purpose and lifetime of each cookie can be found in the following list:

This cookie stores browser details.

2 years

This cookie is used to read the screen resolution.

1 week

‍

datr

This is a cookie for evaluating usage data for statistical purposes for users who are not logged in.

1 week

‍

presence

This cookie is used to store the chat status of the user.

Session

This cookie is used to deliver advertisements and to measure and improve their relevance.

3 months

‍

This cookie is used to stop users from seeing advertisements from Meta based on activity on third-party websites.

5 years

‍

This cookie stores a unique session ID.

1 year

c_user

This cookie stores the unique Facebook account number for logged in users.

1 year

usida

A Facebook cookie that collects a combination of the user's browser and a unique identifier and is used to target ads to users.

Session

For more information about the purpose and scope of data collection and processing by Meta, please see Meta's privacy policy at https://www.facebook.com/about/privacy/legal_bases and Facebook's data policy.

Revocation:

- You can change your setting at any time in thePrivacy settings.

‍

2.10 Lead Forensics

To optimize our services, we use Lead Forensics on our website, a service provided by Lead Forensics, Building 3000, Lakeside, North Harbour, Portsmouth, PO6 3EN, UK.

Lead Forensics does not use cookies. When you visit our website, Lead Forensics collects the IP address and transmits it to Lead Forensics, where the IP address is then compared with its own databases in a global database of companies and business information. This includes processing data about your company and the decision-makers stored in the database. Personal data such as first name, surname, email address, social profiles (limited to LinkedIn) and the business IP address may also be stored here. This data is not compared with the specific IP address. Lead Forensics does not assign the IP address to the personal data stored in the database. As soon as the data has been matched, the IP address is anonymized by Lead Forensics.

After data matching, we receive the information from Lead Forensics' database that has been assigned to the IP address in question. This allows us to see who is interested in our products. We receive the actual history of your visit to our website from Lead Forensics. This also includes an overview of all the pages you have visited and how long you have been on this page. This will only be used with your prior express consent. Further information can be found at: https://www.leadforensics.com/privacy-policy/. The legal basis for the use of Lead Forensics is Art. 6 para. 1 lit. a GDPR. Consent is voluntary and can be revoked at any time. We store and process the data until consent is withdrawn, unless further processing is covered by another legal basis.

‍

3. social media appearances

‍

3.1 Facebook

Meta (Meta Platforms Ireland Ltd, 4Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as Meta) as the operating company of Facebook is solely responsible for the processing of personal data when visiting our Facebook presence (hereinafter referred to as Fanpage). We would like to point out that you use our Fanpage and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, liking, sharing). When you visit our Facebook page, your data is processed as follows:

Personal data:

- When you visit our fan page, we do not process any personal data. In particular, we do not operate the servers on which the contents of the fan page and the associated communication are stored and processed.

- If you communicate with us via the Fanpage, we process your message and can view your username and current profile picture.

- When you access our fan page, your IP address is transmitted to Meta. According to information from Meta, this IP address is anonymized. Meta also stores information about the end devices of the users (e.g. as part of the "registration notification" function). The data may also be transferred by Meta to countries outside the European Union. In particular, it is conceivable that some of the personal data collected may also be processed outside the European Union by Meta Platforms, Inc. based in the USA. We do not pass on any personal data ourselves.

- Meta describes in detail which data it processes for which purposes and on which legal basis, and which contact and configuration options exist, in the legal basis for processing data at https://www.facebook.com/about/privacy/legal_bases and in the Facebook data policy. This applies to all offers of Meta products.

- We are not aware of how Meta uses the personal data generated from visits to fan pages for its own purposes and to what extent certain data may be assigned to specific users by Meta.

Purposes and legal basis of the processing:

- We operate the fan page in order to present content to you so that you can communicate with us or to link you to other interesting online content. The legal basis for the processing is Art. 6 para. 1 lit. fDSGVO.

Storage period:

- We delete the messages transmitted in connection with our fan page as soon as the purpose of storage has been fulfilled, you request us to delete them or the purpose for storage no longer applies. Messages that are subject to retention periods under commercial or tax law are stored for 6 years.

Page Insights Processing:

- Meta provides us with anonymized page summaries for our fan page (so-called page insights). Page insights are an overview of all key figures within a certain period of time. For example, we can learn more about our target group and find out which content is best received.

- With Insights, we can only perform anonymous evaluations based on aggregated data on the use of our Fanpage. Beyond that, we do not collect any further data from the visit to our fan page. This processing of personal data is carried out by Meta and us as joint controllers.

- If you are logged in to Facebook, a cookie with your Facebook ID is stored on your device. This enables Meta to track that you have visited our fan page and how you have used it.

- If you want to avoid this, you should log out of Facebook or disable the "stay logged in" feature and delete the cookies present on your device. In this way, Facebook information through which you can be directly identified will be deleted. This will allow you to use our Fanpage without revealing your Facebook identifier. When you access interactive features of the fan page ("Like" press, comment, share, send messages, etc.), a Facebook login screen will appear. After any login, you will again be recognizable to Facebook as a specific user.

Purposes and legal basis of the processing:

- The processing is carried out according to Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in evaluating visits to our Fanpage and improving our Fanpage based on these findings.

- We have reached an agreement with Meta on processing as joint controllers, which specifies the distribution of data protection obligations between us and Meta. From the agreements with Meta on joint responsibility it essentially follows that requests for information and the assertion of further data subject rights, in particular objections, are sensibly asserted directly with Meta. This is because as the provider of the social network, Meta alone has direct access to the necessary information and can also take any necessary measures and provide information immediately. Should our support nevertheless be required, we can be contacted at any time.

- Your right to assert corresponding claims also directly against us remains unaffected.

- For details about the processing of personal data for the creation of Page Insights and the main contents of the agreement concluded between us and Meta, please refer to the information on Page Insights.

If you have any further questions regarding the processing of your personal data, please contact Meta's data protection officer using the form provided or our data protection officer using the contact information above.

For more information, see Facebook's data policy.

3.2 Instagram

Meta (Meta Platforms Ireland Ltd, 4Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as Meta) as the operator of Instagram is solely responsible for the processing of personal data when visiting our Instagram presence (hereinafter referred to as Fanpage). We would like to point out that you use our fan page and its functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, liking, sharing). When you visit our Instagram account, your data is processed as follows:

Personal data:

- If you communicate with us via the Fanpage, we process your message and can view your username and current profile picture.

- Meta describes in detail which data Meta processes for which purposes and on which legal basis and which contact and configuration options exist in the legal basis for the processing of data at https://www.facebook.com/about/privacy/legal_bases and in the privacy policy of Instagram. This applies to all offers of Meta products.

- We are not aware of how Meta uses the personal data generated from visits to fan pages for its own purposes and to what extent certain data may be assigned to specific users by Meta.

Purposes and legal basis of the processing:

Storage period:

Page Insights Processing:

- If you are logged into Instagram, a cookie with your Instagram identifier is located on your end device. This enables Meta to track that you have visited our fan page and how you have used it.

- If you want to avoid this, you should log out of Instagram or disable the "stay logged in" feature and delete the cookies present on your device. In this way, Instagram information through which you can be directly identified will be deleted. This will allow you to use our Fanpage without revealing your Instagram account. When you access interactive features of the fan page (like, comment, share, send messages, etc.), an Instagram login screen will appear. After any login, you will again be recognizable to Instagram as a specific user.

Purposes and legal basis of the processing:

- The processing is carried out according to Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in evaluating visits to our Fanpage and improving our Fanpage based on these findings.

- Your right to assert corresponding claims also directly against us remains unaffected.

For more information, see Instagram's privacy policy.

3.3 YouTube

Responsible for our YouTube channel is YouTube LLC, 901 Cherry Ave, San Bruno, CA94066, USA. YouTube LLC belongs to the Google group and is represented by Google LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We do not process any personal data when you visit our YouTube channel. In particular, we do not operate the servers on which the content of the channel and the associated communication are stored and processed.

Should you communicate with us via the YouTube channel, we will receive your message including your username.

You can find more information about the processing of your personal data by YouTube or Google here: https://policies.google.com/privacy?hl=de&gl=de

Personal data:

- When simply visiting our YouTube channel, no personal data is processed by us. In particular, we do not operate the servers on which the contents of the YouTube channel and the associated communication are stored and processed.

- Insofar as you communicate with us via the YouTube channel, we process your message and can view your username.

- When accessing our YouTube channel or playing the videos, your IP address is transmitted to YouTube. YouTube also stores information about the end devices of the users. The data will also be transmitted by YouTube to countries outside the European Union. Thus, the personal data collected will be processed outside the European Union by Google LLC. based in the USA. We ourselves do not pass on any personal data.

- Which data YouTube processes in detail for which purposes and on which legal basis and which contact and configuration options exist can be found in Google's privacy policy.

Purposes and legal basis of the processing:

- We operate the YouTube channel to present content to you so that you can communicate with us or to link you to other interesting online content. The legal basis for the processing is Art. 6Abs. 1 lit. f DSGVO.

Storage period:

- We delete the messages transmitted to us as soon as the purpose of storage has been fulfilled, you request us to delete them or the purpose for storage no longer applies. Messages that are subject to retention periods under commercial or tax law are stored for 6 years.

3.4 Twitter

We use the technical platform and services of Twitter, Inc.,1355 Market Street, Suite 900, San Francisco, CA94103, USA for the short message service offered here. We would like to point out that you use the Twitter short message service offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. sharing, rating).

Personal data:

- When simply visiting our Twitter channel, no personal data is processed by us. In particular, we do not operate the servers on which the contents of the Twitter channel and the associated communication are stored and processed.

- If you communicate with us via the Twitter channel, we process your message and can view your username.

- The data collected about you when using the service is processed by Twitter and may be transferred to countries outside the EU. This includes, among other things, your IP address, the application you use, information about the terminal device you use (including device ID and application ID), information about websites you have visited and your location.

- This data is assigned to the data of your Twitter account. We have no influence on the type and scope of the data processed by Twitter, the type of processing and use or the transfer of this data to third parties.

- You have options for restricting the processing of your data in the general settings of your Twitter account and under the item "Privacy and security". In addition, you can restrict Twitter's access to contact and calendar data, photos, location data, etc. on mobile devices (smartphones, tablet computers) in the settings options there. However, this depends on the operating system used. You can find more information about these in the Twitter Help Center: https://support.twitter.com/articles/105576#

Purposes and legal basis of the processing:

- We operate the Twitter channel to present content to you so that you can communicate with us or to link you to other interesting online content. The legal basis for the processing is Art. 6Abs. 1 lit. f DSGVO.

Storage period:

For more information on the processing of personal data by Twitter, please see Twitter's privacy policy.

3.5 LinkedIn

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, is in principle solely responsible for the processing of personal data when you visit our LinkedIn page. By visiting our LinkedIn page, your personal data will be processed by LinkedIn as follows:

Personal data:

- We do not process any personal data when you visit our LinkedIn page. In particular, we do not operate the servers on which the contents of the profile and the associated communication are stored and processed.

- Should you communicate with us via LinkedIn, we will receive your message including your profile.

Page Insights Processing

When you visit, follow, or engage with our LinkedIn page, LinkedIn provides us with anonymized statistics and insights for our page that help us gain insight into the types of actions people take on our page (called "Page Insights"). We do not obtain any personal data through the Page Insights, nor can we attribute any information obtained to individual accounts. This processing of personal data is done by LinkedIn and us as joint controllers.

Purpose of processing:

- The processing serves our legitimate interest to evaluate the visit of our site and to improve our site based on these findings.

Legal basis:

- Art. 6 para. 1 lit. f DSGVO.

We have entered into a joint controller agreement with LinkedIn, which specifies the distribution of data protection obligations between us and LinkedIn. Details about the processing of personal data for the creation of Page Insights and the main contents of the agreement concluded between us and LinkedIn can be found here: https://legal.linkedin.com/pages-joint-controller-addendum

You can find more information about how LinkedIn processes your personal data here: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

4. customers

The execution of our contractual relationship requires the processing of data of our customers and their employees. Due to your obligations to cooperate, it is unavoidable to provide the personal data requested by us, otherwise we will not be able to fulfill our contractual obligations. We process the data as follows:

Personal data:

- Name

- Company, address

- Function, activity

- Phone number, fax number

- E-mail address

- Order if necessary

- Information about the services/deliveries provided

Purposes of processing:

- Agreements on commissioned services/deliveries

- Fulfillment of contractual obligations, e.g. support

Legal basis:

- Art. 6 para. 1lit. b DSGVO

Source of data:

- Communication by the contact person himself

- Communication by another entity of the customer

Recipient of the data:

- Internal departments

- Service providers who support us in the execution of the contract

Retention period:

- After order fulfillment the data are archived

- The data in the archive will be deleted after 10 years

5. business partners, service providers and suppliers

Most of our business partners, service providers and suppliers name one of their employees as a contact person. There is no obligation to transmit this data. The processing is also not absolutely necessary for the service or delivery. However, the effort for agreements is disproportionately high without a defined contact person and there is a risk of misunderstandings. Therefore, there is a legitimate interest in this processing. The contact details of the contact persons are processed by us as follows:

Personal data:

- Names

- Company, address

- Function, activity

- Phone number, fax number

- E-mail address

- Order if necessary

Purposes of processing:

- Agreements on commissioned services/deliveries

Legal basis:

- Art. 6 para. 1lit. f DSGVO

Source of data:

- Communication by the contact person himself

- Notification by another entity of the business partner, service provider and supplier

Recipient of the data:

- Internal departments

Retention period:

- After order fulfillment the data are archived

- The data in the archive will be deleted after 10 years

6. applicant

Applicants can send us their application in paper form or as an e-mail. When you apply to us, we process the following data from you:

Personal data:

- Data you send with the application

- We process the personal data that we receive from you ourselves as part of your application. This is the data that you provide to us as part of your application, in particular by submitting the application documents and your statements in job interviews.

- The processing of the data is necessary for the application procedure. Participation in this is not possible without the provision of the data.

Purposes of processing:

- Decision on the setting

Legal basis:

- Art. 88 DSGVO in conjunction with. §26 BDSG

- Art. 6 para. 1 lit. a DSGVO (consent to longer storage of documents)

Recipient of the data:

- Management and internal departments

Retention period:

- when you are hired: usually 10 years after the end of your employment with us

- In case of rejection: 6 months after rejection (if you do not agree to a longer retention)

7. your rights

You have the following rights regarding this processing of your personal data:

- Information about the data stored about you (Art. 15 DSGVO)

- Correction of incorrect data (Art. 16 DSGVO)

- Deletion, if legally permitted (Art. 17 DSGVO)

- Restriction of processing (Art. 18 DSGVO)

- Receipt of your data in a structured, common and machine-readable format (Art. 20 DSGVO)

- Objection to processing (Art. 21 DSGVO)

- Complaint to a supervisory authority (Art. 77 GDPR)

- Withdrawal of consent (Art. 7 (3) DSGVO)

‍