PRIVACY POLICY

Thank you for your interest in our website.

The protection of your personal data during collection, processing, and use during your visit to our website is very important to us. Your data is protected in accordance with legal regulations.
Please take a moment to read the following information. It will tell you how we handle your personal data, how and for what purpose this data is used, to whom we pass on this data, and how we protect your personal data.
Your personal rights are our top priority, and we make every effort to protect and guarantee these rights.

The controller for the processing of your personal data within the meaning of the European General Data Protection Regulation (GDPR) is:

PONTON GmbH

Dorotheenstraße 64
22301 Hamburg
Germany
Phone: +49 40 866 275 340

E-Mail: info@ponton.de

Data Protection Officer

If you have any questions regarding data protection, please contact our data protection officer at Dr. Bittner Consulting GmbH & Co. KG, Podbielskistraße 386, 30659 Hannover, Germany (datenschutzteam080@drbg.de).

Collection and processing of data

Every access to our website and every retrieval of a file stored on the website is logged. The storage serves internal system-related and statistical purposes.

The following is logged:

  • Name of the file accessed,
  • Date and time of access,
  • Amount of data transferred,
  • Notification of successful access,
  • Operating system used,
  • browser and browser type,
  • the website from which you were redirected,
  • the Internet service provider,
  • pages visited, and
  • requesting domain.

In addition, the IP addresses of the requesting computers are logged. However, the controller does not draw any conclusions about a person.
This data is only required to display the content of our website correctly, to optimize the content for you on a permanent basis, and to support criminal prosecution in the event of hacker attacks. The data is processed on the basis of our legitimate interest in accordance with Art. 6 (1) (f) GDPR. The processing of the data is necessary for the operation of the website.
The data is stored for as long as it is needed to fulfill the purpose and is then automatically deleted.

Rights of data subjects

Pursuant to Art. 15 GDPR, you have the right to obtain information about the processing of your personal data.
In addition, you are free to exercise your rights to rectification, erasure or, if erasure is not possible, restriction of processing and data portability in accordance with Articles 16–18, 20 GDPR. If you wish to exercise this right, please contact our data protection officer.
You also have the right to lodge a complaint with the competent supervisory authority at any time. If you believe that the processing of your personal data does not comply with data protection laws, we kindly ask you to contact our data protection officer.
Furthermore, you have the right to object to the processing of your personal data at any time.

Protection of stored data

We use technical and organizational security measures to protect the personal data you provide us from manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved and adapted in line with the latest technology. It cannot be ruled out that data transmitted by you in unencrypted form may be viewed by third parties during transmission. Please note that no conclusively secure transmission can be guaranteed with regard to data transmission via the Internet (e.g., when communicating by email). Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL) over the Internet.

Protection of minors

Consent to the processing of personal data can only be given by an adult. For information society services, the consent of a child is permissible from the age of sixteen in accordance with Art. 8 GDPR.

Contact form

All personal data and other information that you provide to us via the contact form on our website will only be collected and processed for the purpose of processing and responding to your enquiries.
By contacting us, you consent to the processing of your data in accordance with Art. 6 (1) (a) GDPR.
If you are interested in an offer, your personal data will be processed for the purpose of initiating a contract in accordance with Art. 6 (1) (b) GDPR.
Your data will be forwarded to us by email via our provider. If you do not provide this information, we will unfortunately not be able to contact you and process your request.
No automated decision-making is carried out.

Your personal data will not be passed on to external third parties.
The personal data you provide will not be transferred to a third country or an international organization, nor is this planned.

You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected.
Your personal data, which you provide to us via the contact form, will be stored by us for the duration of the processing of your request and retained until the expiry of the relevant statutory periods.

Email contact, telephone

You can contact us via the email address provided on our website. You can also contact us via the telephone number provided on the website. If you use these options, the personal data transmitted will be stored and collected and processed solely for the purpose of processing and responding to your enquiry.

By contacting us, you consent to data processing in accordance with Art. 6 (1) (a) GDPR.
If you are interested in an offer, your personal data will be processed for the purpose of initiating a contract in accordance with Art. 6 (1) (b) GDPR
If you do not provide this data, we will unfortunately not be able to process your request. No automated decision-making is carried out.

Your personal data will not be passed on to external third parties.
The personal data you provide will not be transferred to a third country or an international organization, nor is this planned.

You have the right to withdraw your consent at any time with future effect. The legality of the data processing carried out until the withdrawal remains unaffected.
The personal data you provide us with will be stored by us for the duration of the processing of your request until the expiry of the relevant statutory periods.

Online application

The personal data you provide will be collected, processed, and used for the purpose of deciding whether to establish an employment relationship in accordance with Art. 6 (1) (b) GDPR. The provision of your personal data is necessary for the application process and for deciding whether to establish an employment relationship. If you do not provide this data, we will unfortunately not be able to consider you for the advertised position.
No automated decision-making is carried out.

We process the personal data you provide exclusively for the application process. Your data is transmitted to us in encrypted form using Transport Layer Security (TLS).
Your personal data will not be passed on to external third parties. In order to evaluate your documents, they will be forwarded to the relevant employees in the Human Resources department and to the relevant contact persons/department heads in the respective specialist department for which the application is intended.

The personal data you provide will not be transferred to a third country or an international organization, nor are there any plans to do so.
Your application documents will be stored by us for the duration of the application process and retained for a further three months so that we can answer any questions you may have and to enforce and defend legal claims. Both of these constitute our legitimate interest in accordance with Art. 6 (1) (f) GDPR. The documents will be deleted after this period has expired. Documents sent by post will be returned or destroyed after the three-month period has expired. If you are hired by our company, your application documents will be transferred to your personnel file.

Your personal data will not be passed on to external third parties.

The personal data you provide will not be transferred to a third country or an international organization, nor are there any plans to do so.
You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing until withdrawal remains unaffected.

Newsletter

If you subscribe to our electronic newsletter, your personal data will only be processed for the purpose of regularly sending you our newsletter on the basis of Art. 6 (1) (a) GDPR. After you subscribe, we will send you a confirmation email that allows us to verify your identity and reconfirm your consent.
The registration process is logged on the basis of our legitimate interests pursuant to Art. 6 (1) (1) (f) GDPR and serves as proof of consent to receive the newsletter.
Your data will be forwarded to us by email via our provider. If you do not provide this data, we will unfortunately not be able to provide you with our newsletter, contact you, or process your request. No automated decision-making is carried out.

Online registration for the webinar

All personal data and other information that you provide to us when registering for our webinars will be collected and processed solely for the purpose of registering for our webinars on the basis of Art. 6 (1) (b) GDPR.
Your data will be forwarded to us by email via our provider. If you do not provide this data, we will unfortunately not be able to register you for one of our webinars.
No automated decision-making is carried out.
This data is transmitted to us as the organizer of the webinar by the provider in encrypted form. When you register to participate, you will receive further information and reminders by email before and after the webinar.
Your personal registration data will be stored by us for the duration of the contractual relationship and for the duration of the statutory retention period and then deleted or blocked.

Your personal data will not be passed on to external third parties.
The personal data you provide will not be transferred to a third country or an international organization, nor is this planned.

Cookies

Technically necessary cookies (session cookies)

We use technical cookies on our website to make it more user-friendly. For technical reasons, it is therefore necessary to allow session cookies in order to use the full functionality of our website.

The purpose of using such cookies is to give you the opportunity to use the website in a simplified and more user-friendly manner. It is therefore necessary for the browser to be able to identify you even after you change pages.

The data is not used to create a user profile of you. The legal basis for the use of technical cookies is § 25 (2) TDDDG. It is not possible to use the website without session cookies.

Cookies for evaluation (tracking cookies)

In addition to technical cookies, this website also uses tracking cookies. Cookies are text files that are stored on your computer and enable analysis of your use of the website. However, these cookies collect and store data exclusively in pseudonymous form. They are not used to identify you personally and are not merged with data about the bearer of the pseudonym. We use this information to determine the attractiveness of our website and to continuously improve its content.
The legal basis for the use of tracking cookies is the consent you have given in accordance with § 25 (1) TDDDG.
You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until revocation remains unaffected.
You can adjust your cookie settings at any time.

Detailed information about the cookies and analysis services used, as well as the purpose and legal basis of data processing, is described in detail in the privacy policy.

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “Google”), which uses cookies. Cookies are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by cookies about your use of this website is usually transferred to a Google server in the European Union (EU) or the European Economic Area (EEA). However, since this website uses IP anonymization, your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.

In exceptional cases, the full IP address is transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google uses this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.

Data collection within the scope of this service only takes place after you have given your express consent. The legal basis for this is Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until revocation remains unaffected.

The purpose of the collection is to evaluate the use of our website. Furthermore, by using Google Analytics, we can create reports on website activity and thus improve our website. In addition to us, Google is also a recipient of the data.

The data will be deleted as soon as it is no longer needed for our recording purposes. You can prevent Google Analytics from collecting your data at any time, even after you have given your consent.

Data transfer by Google to the US is based on the EU standard contractual clauses, details of which can be found here: https://privacy.google.com/businesses/controllerterms/mccs/
Further information can be found at: https://support.google.com/analytics/answer/6004245?hl=de

Google LLC is certified under the EU-US Data Privacy Framework (DPF). This is an agreement between the European Union and the US that aims to ensure that European data protection standards are upheld when data is processed in the US. Every company that has received DPF certification undertakes to comply with these data protection standards. Further detailed information on this can be found at the following link: https://www.dataprivacyframework.gov/participant/5780

HubSpot

We use HubSpot’s service for our online marketing and sales activities. This is an integrated software solution that allows us to cover various aspects of our online marketing. The following data, as well as the content of our website, is stored on HubSpot’s servers.
HubSpot can also track customer journeys using cookies and IP addresses.
HubSpot is a software company based in the United States (25 First Street, Cambridge, MA 02141 USA) with offices in Ireland (2nd Floor 30 North Wall Quay, Dublin 1, Ireland) and Germany (Koppenstraße 93, 10234 Berlin). As part of data processing via HubSpot, data may be transferred to the USA. In addition to the data processing agreement, standard contractual clauses and other appropriate safeguards have been agreed upon to ensure the security of data transfers.

Data collection within the scope of this service only takes place after you have given your express consent. The legal basis for this is Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until revocation remains unaffected.

The collected data is stored by HubSpot on servers in the European Union and the United States. Data transfer is carried out under the terms of the standard contractual clauses. HubSpot commits to handling all personal data received from European Union (EU) member states and Switzerland in accordance with the applicable principles of the standard contractual clauses.

HubSpot is certified under the EU-US Data Privacy Framework (DPF). This is an agreement between the European Union and the United States designed to ensure that European data protection standards are upheld when processing data in the USA. Any company that has obtained DPF certification is committed to complying with these data protection standards. More detailed information can be found at the following link:

For more information on HubSpot’s data protection policies, please refer to their Terms of Service and Privacy Policy at:
https://www.dataprivacyframework.gov/s/participant-search/participantdetail?contact=true&id=a2zt000000001L5AAI&status=Activ or
https://legal.hubspot.com/legal-stuff.

OpenStreetMap

We integrate map material from OpenStreetMap (OpenStreetMap Foundation, 132 Maney Hill Road, Sutton Coldfield, West Midlands B72 1JU, United Kingdom; hereinafter referred to as “OpenStreetMap”) into our website, which collects freely usable geodata and stores it in a database for free use.

Any interaction with OpenStreetMap on this website (such as searching for companies, regions, continents, or organizational units) establishes a connection to the OpenStreetMap Foundation’s servers and transfers data to the OpenStreetMap Foundation in order to display embedded maps.

When the connection is established to display the maps, the following data is transmitted to OpenStreetMap’s servers: IP address, browser and device used, operating system, website from which you were redirected to the OpenStreetMap Foundation website (referring web page), and date and time of your visit to the website. If the settings of your device allow location tracking, your location may be recorded and transmitted to OpenStreetMap.

If you have a user account with OpenStreetMap and are logged in when visiting our website, the following additional data will be transferred to the OpenStreetMap servers: user ID, email address associated with your account, content blocked by the user, and associated messages.

Data collection within the scope of this service only takes place after you have given your express consent. The legal basis for processing is Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device.
You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until revocation remains unaffected.

Further information on OpenStreetMap’s data protection can be found here: https://wiki.osmfoundation.org/wiki/Privacy_Policy

Google Maps

Our website uses Google Maps to visually display geographical information (site plans). Google Maps is operated by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”). This makes it easier for you to find us or to point out specific locations.

Google is therefore also to be named as the recipient of the data. When using Google Maps, information about the use of our website is transmitted to a Google server in the USA and stored there. The information collected and transmitted includes your IP address and your location, if the settings of your device allow location tracking. When Google Maps is activated, Google Fonts fonts are loaded into your browser cache in order to display the relevant texts and fonts as intended.

This data processing is based on Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your device. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until revocation remains unaffected.

Data transfer to the US is based on the EU standard contractual clauses, details of which can be found here: https://business.safety.google/controllerterms/ and https://business.safety.google/controllerterms/sccs/

Google LLC is certified under the EU-US Data Privacy Framework (DPF). This is an agreement between the European Union and the USA that aims to ensure that European data protection standards are complied with when data is processed in the USA. Every company that has received DPF certification undertakes to comply with these data protection standards. Further detailed information on this can be found at the following link: https://www.dataprivacyframework.gov/participant/5780

The transfer of data to the US involves risks under data protection law. If you do not wish your data to be transferred, you can deactivate your consent in the cookie settings. However, please note that in this case you will not be able to use the map display.

For more information about the collection and processing of your data by Google and your rights in this regard, please refer to Google’s privacy policy at http://www.google.com/policies/privacy/?hl=de and the additional terms of use for Google Maps and Google Earth at https://www.google.com/intl/de_de/help/terms_maps.html

Google Fonts

Our website uses Google Fonts to integrate external fonts, a service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”).

By integrating Google Fonts, a direct connection to Google’s servers is established when you visit our website. The fonts can only be transferred directly from Google to your browser, which then integrates them into the website. It is possible to block connections to fonts.googleapis.com through your operating system or a suitable browser add-on. However, this may restrict your ability to use our website. The data is deleted as soon as you leave our website.

The purpose of the collection is to ensure a uniform display of fonts and icons offered by Google Fonts. Data processing is carried out on the basis of Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to revoke your consent at any time with effect for the future. The lawfulness of the data processing until revocation remains unaffected.

When using this Google service, personal data may be transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). For more information about the collection and processing of your data by Google and your rights in this regard, please refer to Google’s privacy policy at http://www.google.com/policies/privacy/?hl=de

Web Fonts (fonts.com bzw. fast.fonts.net)

Unsere Website nutzt zur einheitlichen Darstellung von Schriftarten sogenannte Web Fonts von Fonts.net. Diese werden von dem Anbieter Monotype GmbH (fonts.com bzw. fast.fonts.net) bereitgestellt. Die Monotype GmbH ist ansässig in der Heerstraße 30, 61352 Bad Homburg.

Durch die Einbindung der Web Fonts wird bei dem Besuch unserer Website eine direkte Verbindung mit den Servern von fonts.com aufgebaut. Die Schriftarten können von fonts.com nur so direkt an Ihren Browser übertragen werden, welcher diese dann in die Website einbindet. Durch die Nutzung von fonts.com werden Informationen über die Nutzung unserer Internetseite einschließlich Ihrer IP-Adresse an einen Server von fonts.com übertragen und dort gespeichert.

Zweck der Einbindung ist eine einheitliche Darstellung von Schriftarten und Icons, welche von Web Fonts angeboten werden. Die Datenverarbeitung erfolgt auf der Grundlage von Art. 6 Abs. 1 UAbs. 1 lit. a) DSGVO und § 25 Abs. 1 TDDDG, sofern sich die Einwilligung im Sinne des TDDDG auf das Setzen von Cookies oder den Zugriff auf Informationen auf Ihrem Endgerät bezieht. Sie haben das Recht, Ihre Einwilligung jederzeit mit Wirkung für die Zukunft zu widerrufen. Die Rechtmäßigkeit der Datenverarbeitung bis zum Widerruf bleibt unberührt. Die Daten werden gelöscht, sobald sie unsere Website verlassen.

Weitere Informationen zu Web Fonts finden Sie unter https://www.fonts.com/info/legal, in der Datenschutzerklärung von Fonts.com unter https://www.fonts.com/info/legal/privacy sowie in der Datenschutzerklärung von Monotype GmbH: https://www.monotype.com/legal/privacy-policy

Google Translate

Our website uses Google Translate, a service provided by Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “Google”) to make the information on our website available to foreign-language visitors, as it is only offered in German. By using Google Translate, you consent to the collection, processing, and use of data automatically collected during the use of Google Translate, as well as data entered by you, by Google or one of its representatives or third-party providers. This consent also forms the legal basis for processing in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, insofar as the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to revoke your consent at any time with effect for the future. The lawfulness of data processing until revocation remains unaffected.

When using Google Translate, Google processes data relating to the use of the translation functions by the data subject.

It is possible that personal data may be transferred to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) when using this Google service. For more information about the collection and processing of your data by Google and your rights in this regard, please refer to Google’s privacy policy: https://policies.google.com/privacy?hl=de.

YouTube (Video-Plugin)

Die Plug-ins von YouTube.de/YouTube.com, welche wir auf unserer Website verwenden, werden durch Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irland; im Folgenden: „Google“), betrieben.

Werden die Plug-ins auf unserer Website aufgerufen, wird eine Verbindung zu den Google-Servern hergestellt. Dadurch erfolgt eine Übermittlung der Information, welche unserer Websites Sie besucht haben, an den Google-Server. Wenn Sie als Mitglied bei YouTube eingeloggt sind, ist es Google möglich, diese Information (angesehene Videos und Kommentare) Ihrem persönlichen Benutzerkonto zuzuordnen. Die Erfassung Ihrer Daten können Sie durch das Ausloggen vermeiden.

Sollten Sie bei YouTube in Datenverarbeitungen eingewilligt haben, ist Ihre Einwilligung gemäß Art. 6 Abs. 1 UAbs. 1 lit. a) DSGVO und § 25 Abs. 1 TDDDG, sofern sich die Einwilligung im Sinne des TDDDG auf das Setzen von Cookies oder den Zugriff auf Informationen auf Ihrem Endgerät bezieht, die Rechtsgrundlage der Verarbeitung. Sie haben das Recht, Ihre Einwilligung jederzeit mit Wirkung für die Zukunft zu widerrufen. Die Rechtmäßigkeit der Datenverarbeitung bis zum Widerruf bleibt unberührt.

Es besteht die Möglichkeit, dass im Rahmen der Nutzung dieses Google-Service personenbezogene Daten in die USA übertragen werden. Wir weisen darauf hin, dass wir keine Kenntnis vom Inhalt der übermittelten Daten sowie deren Nutzung durch Google erhalten. Weitere Informationen finden Sie unter: www.google.de/intl/de/policies/privacy/

Google LLC ist gemäß dem “EU-US Data Privacy Framework” (DPF) zertifiziert. Dies ist eine Vereinbarung zwischen der Europäischen Union und den USA, die sicherstellen soll, dass europäische Datenschutzstandards bei der Verarbeitung von Daten in den USA, eingehalten werden. Jedes Unternehmen, das die DPF-Zertifizierung erhalten hat, verpflichtet sich zur Einhaltung dieser Datenschutzstandards. Weitere detaillierte Informationen hierzu finden Sie unter folgendem Link: https://www.dataprivacyframework.gov/participant/5780

Kununu

The link to the employer review portal “kununu” integrated into the website is an application of XING SE (Dammtorstraße 30, 20354 Hamburg, Germany; hereinafter: “XING”).

When you visit our website, a direct connection is established between the Xing server and your browser via the plugin. According to Xing, this does not provide them with any information that you have visited our site with your IP address.

The legal basis for processing the data is your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out until revocation remains unaffected.

We would like to point out that we have no knowledge of the content of the transmitted data or its use by kununu or XING. Further information can be found at: https://www.kununu.com/de/info/datenschutz.

Privacy Policy Social Media Presence

We would like to get in touch with you and other interested parties, customers, and users. We use various social networks for this purpose. You can find out which social networks we use in the following section.

As a rule, data is collected for market research and advertising purposes. Such data includes the assignment of your visit to our website to your user account on the social network or the assignment by means of your stored cookies or your IP address. This is usually done by creating user profiles and determining interests based on them. This enables customized advertising to be displayed, both within and outside the social network. Therefore, cookies may be set on your device when you use social networks. However, we would like to point out that we have no influence over which data is collected.

Through our social media presence, we want to provide you with information in the simplest and fastest way possible or give you the opportunity to share such information. Therefore, unless you have consented to data processing on the respective platform, the legal basis is our legitimate interest pursuant to Art. 6 (1) (f) GDPR. If you have given your consent on the respective platform, your consent pursuant to Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device, is the legal basis for the processing. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing until withdrawal remains unaffected.

If you withdraw your consent, request us to delete your data, or the purpose for storing the data no longer applies, we will delete your data unless mandatory legal provisions prevent this. Cookies stored by you will remain on your end device until you delete them.

The data processed as a result of your visit to our social media sites is classified as data processing initiated by us and is therefore subject to joint responsibility with the operator of the social media site in accordance with Art. 26 GDPR. Joint responsibility is limited to those processing operations where the purpose and means of processing are decided jointly. If you wish to exercise your rights as a data subject, you can do so both vis-à-vis us and vis-à-vis the operator of the social media website.

Furthermore, we would like to point out that your data may also be processed outside the European Union, which means that you run the risk of not being able to enforce your rights properly.

You have the right to obtain information about the origin, recipients, and purpose of your stored personal data free of charge at any time. In addition, you have the right to object, the right to data portability, and the right to lodge a complaint with the competent supervisory authority. You may also request the correction, blocking, deletion, and, under certain circumstances, the restriction of the processing of your personal data.

Facebook (presence)

We operate a presence on the social network Facebook (Facebook fan page) in order to interact with Facebook users who visit the fan page. For this Facebook fan page, we are jointly responsible with Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, in accordance with Art. 26 of the General Data Protection Regulation (GDPR). The agreement on joint responsibility can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum

We hereby inform you about the type and scope of personal data that is processed when you use our Facebook fan page.

We process your personal data for the purpose of providing visitors with a modern information platform and an opportunity for interaction on Facebook. The basis for processing is therefore our legitimate interest pursuant to Art. 6 (1) (1) (f) GDPR. The interests of users are always taken into account. Information on the legal basis for processing on Facebook can be found at http://www.facebook.com/about/privacy/legal_bases/.

When you visit our Facebook fan page, Facebook collects and processes personal data on the basis of legitimate interest pursuant to Art. 6 (1) (1) (f) GDPR. Some of this data is provided to us in summary form via so-called “Insights” (Facebook user statistics). A cookie is stored on the user’s device for this purpose. This serves to enable this information to be reused at a later date. The cookie remains active for a period of two years unless it is deleted. Further information from Facebook on the use of cookies can be found in the Facebook cookie policy at https://de-de.facebook.com/policies/cookies/. These user statistics are transmitted exclusively in anonymized form and we have no access to the underlying data.

If you have consented to data processing on Facebook, your consent is the legal basis for processing in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device.

Data transfer to the US is based on the EU standard contractual clauses, details of which can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum

Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework (DPF). This is an agreement between the European Union and the US that aims to ensure that European data protection standards are upheld when data is processed in the US. Every company that has received DPF certification undertakes to comply with these data protection standards. Further detailed information on this can be found at the following link: https://www.dataprivacyframework.gov/participant/4452

If you are already logged into your personal Facebook account, information about your visit to our website will be automatically forwarded to Facebook. It is then possible for Facebook to associate your visit to the website with your account.
If you do not want Facebook to transmit and store your data, please log out of your Facebook account.

Facebook’s privacy policy can be found at: https://www.facebook.com/privacy/explanation

XING (presence)

We maintain a presence on the social career network XING. This is an application of New Work SE (Am Strandkai 1, 20457 Hamburg; hereinafter: “XING”).

If you have consented to data processing on XING, your consent is the legal basis for processing in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until revocation remains unaffected.

We would like to point out that we have no knowledge of the content of the data transmitted or its use by XING. Further information can be found at: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn (presence)

We maintain a presence on the social career network LinkedIn, which is operated exclusively by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter “LinkedIn”).

If you have consented to data processing on LinkedIn, your consent is the legal basis for processing in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing until withdrawal remains unaffected.

Data transfer to the USA is based on the EU standard contractual clauses, details of which can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs

LinkedIn Corporation is certified under the EU-US Data Privacy Framework (DPF). This is an agreement between the European Union and the US that aims to ensure that European data protection standards are upheld when data is processed in the US. Every company that has received DPF certification undertakes to comply with these data protection standards. Further detailed information can be found at the following link: https://www.dataprivacyframework.gov/participant/5448

You have the option to object to the analysis of usage behavior and targeted advertising by LinkedIn here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Please note that we have no knowledge of the content of the data transmitted or its use by LinkedIn. The following link leads to LinkedIn’s privacy policy: http://de.linkedin.com/legal/privacy-policy

YouTube (presence)

We operate a presence on the YouTube video platform. This is an application from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: “Google”).

If you have consented to data processing on YouTube, your consent is the legal basis for processing in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing until withdrawal remains unaffected.

It is possible that personal data may be transferred to the USA when using this Google service. We would like to point out that we have no knowledge of the content of the data transmitted or its use by Google. Further information can be found at: www.google.de/intl/de/policies/privacy/

Google LLC is certified under the EU-US Data Privacy Framework (DPF). This is an agreement between the European Union and the US that aims to ensure that European data protection standards are upheld when data is processed in the US. Every company that has received DPF certification undertakes to comply with these data protection standards. Further detailed information on this can be found at the following link: https://www.dataprivacyframework.gov/participant/5780

Instagram (presence)

We operate a presence on the social network Instagram. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

If you have consented to data processing on Instagram, your consent is the legal basis for processing in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG, provided that the consent within the meaning of the TDDDG refers to the setting of cookies or access to information on your end device. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing until withdrawal remains unaffected.

Data transfer to the USA is based on the EU standard contractual clauses, details of which can be found here: https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/legal/EU_data_transfer_addendum

Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework (DPF). This is an agreement between the European Union and the US that aims to ensure that European data protection standards are upheld when data is processed in the US. Every company that has received DPF certification undertakes to comply with these data protection standards. Further detailed information can be found at the following link: https://www.dataprivacyframework.gov/participant/4452

Please note that we have no knowledge of the content of the data transmitted or its use by Instagram. For more information, please visit: https://privacycenter.instagram.com/policy/