Privacy Policy

Privacy Policy

1) Introduction and Contact Details of the Controller

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data by which you can be personally identified.

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is servoprax GmbH, Am Marienbusch 9, 46485 Wesel, Germany, Tel.: +49 281 95283-0, Fax: +49 281 56071, E-Mail: info@servoprax.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

The controller has appointed a Data Protection Officer who can be contacted as follows:

"Sina Fries, datenschutz@servoprax.de, servoprax GmbH, Am Marienbusch 9, 46485 Wesel, Germany"


2) Data Collection When Visiting Our Website

When using our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

  • Our visited website 
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form) 

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.


3) Hosting & Content Delivery Network 

Amazon Web Services

For hosting our website and displaying the page content, we use the system of the following provider:
Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
All data collected on our website is processed on the provider's servers.
We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your end device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your end device for a longer period and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of your web browser's cookie settings.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent granted, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

You can configure your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for specific cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be restricted.


5) Contacting Us

Userlike

This website uses a live chat system provided by the following provider:

Userlike UG (haftungsbeschränkt), Deisterweg 7, 51109 Cologne, Germany

The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6 para. 1 lit. b GDPR because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in effectively supporting visitors to our website.

Your data transmitted in this way will be deleted, subject to any statutory retention periods to the contrary, once the matter concerned has been conclusively clarified.

In addition, further information may be collected and evaluated using cookies for the purpose of creating pseudonymized user profiles. However, this information does not serve your personal identification and is not merged with other data records. If this information has a personal reference, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.

The setting of cookies can be prevented by corresponding browser settings. However, the functionality of our website may then be restricted. You may object to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
When contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if the circumstances indicate that the matter concerned has been conclusively clarified and provided that no statutory retention obligations prevent deletion.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required for account registration can be found in the input form of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be carried out by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted provided that all contracts concluded through the account have been fully processed, no statutory retention periods prevent deletion, and we no longer have any legitimate interest in retaining the data.


7) Use of Customer Data for Direct Advertising

Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. The provision of additional data is voluntary and is used to address you personally. For newsletter distribution, we use the so-called double opt-in procedure, which ensures that you only receive newsletters after you have expressly confirmed your consent to receive the newsletter by activating a verification link sent to the specified email address.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your email address at a later date. The data collected by us when registering for the newsletter is used strictly for its intended purpose.

You may unsubscribe from the newsletter at any time via the designated link in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be immediately removed from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, as permitted by law and about which we inform you in this declaration.

HubSpot

Our email newsletters are sent via the following provider:

HubSpot Ireland Ltd., 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland

Based on our legitimate interest in effective and user-friendly newsletter marketing, we transfer the data you provide when subscribing to the newsletter to this provider pursuant to Art. 6 para. 1 lit. f GDPR so that the provider can send the newsletter on our behalf.

Subject to your express consent pursuant to Art. 6 para. 1 lit. a GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed but is not merged with other data records.

You may revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.


Stock Availability Notification by Email

For temporarily unavailable items, you may subscribe to receive email stock availability notifications. In this case, we will send you a one-time email informing you of the availability of the item you selected.

The only mandatory information required for sending this notification is your email address. Providing additional data is voluntary and may be used to address you personally. For sending emails, we use the so-called double opt-in procedure, which ensures that you only receive a notification after you have expressly confirmed your consent by activating a verification link sent to the specified email address.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your email address at a later date. The data collected when registering for our email stock availability notification service is used strictly for its intended purpose.

You may unsubscribe from stock availability notifications at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be immediately removed from the distribution list established for this purpose unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, as permitted by law and about which we inform you in this declaration.


Advertising by Postal Mail

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and – if we have received this additional information from you within the scope of the contractual relationship – your title, academic degree, year of birth, and your professional, industry, or business designation in accordance with Art. 6 para. 1 lit. f GDPR and to use this information
for sending you interesting offers and information about our products by postal mail.

You may object to the storage and use of your data for this purpose at any time.

8) Data Processing for Order Handling

Collection and Processing of Health Data

For the processing of orders for medicinal products, it may be necessary to process personal health data.

Health data is a special category of personal data that directly or indirectly allows conclusions to be drawn about a person's physical and/or mental state of health.

The health data you provide in connection with an order (e.g., information regarding the type and quantity of medicinal products ordered) will only be processed for the purpose of contract performance if you have given us your explicit consent via opt-in in accordance with Art. 6 para. 1 lit. a GDPR.

Your health data is collected and processed strictly for the intended purpose and in accordance with the applicable legal data protection requirements. As a rule, your health data will not be disclosed to third parties. Only in the case of ordering prescription medicines will we, subject to your consent, forward your health data to your health insurance provider for billing purposes.

You may revoke your consent at any time with effect for the future by contacting the controller responsible for data processing.

Where required for contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided when placing the order (name, address, email address) in order to personally inform you about upcoming updates within the legally prescribed period via an appropriate communication channel (e.g., by post or email) in accordance with our legal information obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact data is used strictly for the purpose of notifications concerning updates owed by us and is processed by us only to the extent necessary for the respective information.

To process your order, we also cooperate with the following service provider(s), who support us wholly or partially in the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

Disclosure of Personal Data to Shipping Service Providers

DACHSER SE

We use the following provider as our transport service provider:

DACHSER SE, Logistikzentrum München, European Logistics, Zamilastraße 11, 81677 Munich, Germany

We transmit your email address and/or telephone number to the provider before delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or providing delivery notification, provided that you have given your express consent during the ordering process.

Otherwise, we only transmit the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The transfer is made only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent may be revoked at any time with effect for the future by contacting either the controller named above or the provider.

DHL

We use the following provider as our transport service provider:

DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We transmit your email address and/or telephone number to the provider before delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or providing delivery notification, provided that you have given your express consent during the ordering process.

Otherwise, we only transmit the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The transfer is made only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent may be revoked at any time with effect for the future by contacting either the controller named above or the provider.

DHL Express

We use the following provider as our transport service provider:

DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

We transmit your email address and/or telephone number to the provider before delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or providing delivery notification, provided that you have given your express consent during the ordering process.

Otherwise, we only transmit the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The transfer is made only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent may be revoked at any time with effect for the future by contacting either the controller named above or the provider.

DPD

We use the following provider as our transport service provider:

DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

We transmit your email address and/or telephone number to the provider before delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or providing delivery notification, provided that you have given your express consent during the ordering process.

Otherwise, we only transmit the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The transfer is made only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent may be revoked at any time with effect for the future by contacting either the controller named above or the provider.

Kühne+Nagel

We use the following provider as our transport service provider:

Kühne + Nagel AG & Co. KG, Wilhelm-Kaisen-Brücke 1, 28195 Bremen, Germany

We transmit your email address and/or telephone number to the provider before delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or providing delivery notification, provided that you have given your express consent during the ordering process.

Otherwise, we only transmit the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. The transfer is made only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent may be revoked at any time with effect for the future by contacting either the controller named above or the provider.


9) Online Marketing

HubSpot

This website uses the software-based marketing service of the following provider for the provision and synchronization of various customer management services:

HubSpot Ireland Ltd., 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland

The service enables the automated processing of feed activities, the management of advertising in marketing channels used, the analysis of the success of marketing measures, as well as centralized email marketing and contact management.

The service uses cookies, i.e., small text files that are stored locally in the cache of your web browser on your end device and enable us to analyze your use of the website. In doing so, the cookies collect certain information such as your IP address, location, and the time the page was accessed.

All of the processing described above, in particular the setting of cookies for reading information on the device used, is carried out only if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.

Further legal bases for data processing that apply within the scope of specific service functions (such as the requirement for explicit consent pursuant to Art. 6 para. 1 lit. a GDPR when sending newsletters) remain unaffected.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.


10) Web Analytics Services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.

By default, Google (Universal) Analytics sets cookies when you visit the website. These are small text files stored on your end device that collect certain information. This information includes your IP address, which is shortened by Google by removing the last digits in order to exclude direct personal identification.

The information is transferred to Google servers and processed there. This may also involve transfers to Google LLC based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide additional services related to website and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

The data collected through the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Without your consent, Google (Universal) Analytics will not be used during your visit to the website. You may revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information regarding Google (Universal) Analytics can be found at:

https://policies.google.com/privacy?hl=en

https://policies.google.com/technologies/partner-sites

Demographic Characteristics

Google (Universal) Analytics uses the special function “Demographics” and can generate statistics that provide information about the age, gender, and interests of website visitors. This is done through the analysis of advertising and information from third-party providers. This allows target groups for marketing activities to be identified.

However, the collected data cannot be assigned to a specific individual and is deleted after being stored for a period of two months.

Google Signals

As an extension of Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports.

If you have activated personalized advertising and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including models for cross-device conversions.

We do not receive any personal data from Google, only statistical information.

If you wish to stop cross-device analysis, you can deactivate the “Personalized Advertising” function in your Google account settings. Follow the instructions on this page:

https://support.google.com/ads/answer/2662922?hl=en

Further information about Google Signals can be found at:

https://support.google.com/analytics/answer/7532985?hl=en

UserIDs

As an extension of Google (Universal) Analytics, the “UserIDs” function may be used on this website.

If you have consented to the use of Google (Universal) Analytics pursuant to Art. 6 para. 1 lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, may be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your end device that collect certain information. This information includes your IP address, which is shortened by Google by removing the last digits in order to exclude direct personal identification.

The information is transferred to Google servers and processed there. This may also involve transfers to Google LLC based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide additional services related to website and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the website. You may revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further legal information regarding Google Analytics 4 can be found at:

https://policies.google.com/privacy?hl=en

https://policies.google.com/technologies/partner-sites

Demographic Characteristics

Google Analytics 4 uses the special function “Demographics” and can generate statistics that provide information about the age, gender, and interests of website visitors. This is done through the analysis of advertising and information from third-party providers. This allows target groups for marketing activities to be identified.

However, the collected data cannot be assigned to a specific individual and is deleted after being stored for a period of two months.

Google Signals

As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports.

If you have activated personalized advertising and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including models for cross-device conversions.

We do not receive any personal data from Google, only statistical information.

If you wish to stop cross-device analysis, you can deactivate the “Personalized Advertising” function in your Google account settings. Follow the instructions on this page:

https://support.google.com/ads/answer/2662922?hl=en

Further information about Google Signals can be found at:

https://support.google.com/analytics/answer/7532985?hl=en

UserIDs

As an extension of Google Analytics 4, the “UserIDs” function may be used on this website.

If you have consented to the use of Google Analytics 4 pursuant to Art. 6 para. 1 lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, may be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Google Optimize

This website uses “Google Optimize”, a service provided by the following provider:

Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”)

Based on Google Analytics, the service enables a statistical evaluation of the use of new functions and content on the website by displaying test variants to specific user groups. This makes it possible to determine which variants are preferred by users in order to improve the attractiveness of our website.

Google Optimize uses cookies, i.e., small text files stored on your end device that enable analysis of your use of a website. The information generated by these cookies about your use of the website is generally transmitted to a Google server and stored and processed there. This may also involve the transfer of information to servers of Google LLC located in the USA, where the information may be further processed.

All processing described above, in particular the setting of cookies for storing and reading information on the device you use to access the website, only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Without your consent, Google Optimize will not be used while you are using the website. You may revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Google Tag Manager

This website uses the “Google Tag Manager”, a service provided by the following provider:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”)

Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling, and linking them to conditions via a unified user interface.

Google Tag Manager itself does not store any information on user devices or read information from them. Nor does the service perform any independent data analyses.

However, when a page is accessed, your IP address is transmitted to Google via Google Tag Manager and may be stored there. Transmission to servers of Google LLC in the USA is also possible.

This processing only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Without such consent, Google Tag Manager will not be used during your visit to the website. You may revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Further legal information regarding Google Tag Manager can be found at:

https://policies.google.com/privacy?hl=en

Microsoft Clarity

This website uses the web analytics service of the following provider:

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate user behavior on our website for statistical purposes and create pseudonymized user profiles.

Among other things, this allows the analysis of movement patterns (so-called heat maps), which show the duration of page visits and interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization generally excludes direct personal identification. No merging with other personal data collected in another way takes place.

All processing described above, in particular the reading or storage of information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.

You may revoke your consent at any time with effect for the future by disabling this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.


11) Website Functionalities

YouTube

This website uses plugins for the display and playback of videos from the following provider:

Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to:

Google LLC, USA

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers in order to load the plugin. In this process, certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your visit to the website, your data will be directly assigned to your account when you click on a video. If you do not want your data to be associated with your account, you must log out before activating the playback button.

All aforementioned processing operations, in particular the setting of cookies for reading information from the device used, are carried out only if you have given us your express consent pursuant to Art. 6 para. 1 lit. a GDPR.

You may revoke your consent at any time with effect for the future by disabling this service via the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Google Maps

This website uses an online map service provided by:

Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”)

Google Maps is a web service for displaying interactive maps in order to visually present geographical information. Through the use of this service, our location is displayed and directions are facilitated.

As soon as you access those subpages into which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there. This may also involve transmission to servers of Google LLC in the USA.

This occurs regardless of whether Google provides a user account through which you are logged in or whether such an account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button.

Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

Collection, storage, and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on Google’s legitimate interest in displaying personalized advertising, market research, and/or the needs-based design of Google websites.

You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

If you do not agree with the future transmission of your data to Google when using Google Maps, you may also completely disable the Google Maps web service by deactivating JavaScript in your browser. Google Maps and therefore the map display on this website can then no longer be used.

Where legally required, we have obtained your consent pursuant to Art. 6 para. 1 lit. a GDPR for the processing of your data described above. You may revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the procedure described above for submitting an objection.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Google Web Fonts

This website uses so-called Web Fonts provided by the following provider for the uniform display of fonts:

Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required Web Fonts into its browser cache in order to correctly display texts and fonts and establishes a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to:

Google LLC, USA

The processing of personal data in connection with establishing a connection to the font provider only takes place if you have given us your express consent pursuant to Art. 6 para. 1 lit. a GDPR.

You may revoke your consent at any time with effect for the future by disabling this service via the “Cookie Consent Tool” provided on the website.

If your browser does not support Web Fonts, a standard font from your computer will be used.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Cloudflare Turnstile

On this website we use the CAPTCHA service provided by:

Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA

The service checks whether an entry is made by a natural person or abusively through machine and automated processing and blocks spam, DDoS attacks, and similar automated malicious access.

To ensure that an action is performed by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the device used, identification data of the browser and operating system used, as well as the date and duration of the visit, and transmits this information to the provider’s servers for evaluation.

The legal basis is our legitimate interest in determining individual responsibility on the Internet and preventing misuse and spam pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Microsoft Teams

We use the following provider to conduct online meetings, video conferences, and/or webinars:

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

The provider processes various types of data, whereby the scope of the processed data depends on the information you provide before or during participation in an online meeting, video conference, or webinar.

Your data is processed as a communication participant and stored on the provider’s servers. This may include in particular your registration data (name, email address, telephone number (optional), and password) as well as session data (topic, participant IP address, device information, description (optional)).

In addition, image and audio contributions of participants as well as voice input in chats may be processed.

For the processing of personal data necessary for the performance of a contract with you (this also applies to processing operations necessary for the implementation of pre-contractual measures), Art. 6 para. 1 lit. b GDPR serves as the legal basis.

If you have given us consent to process your data, processing is based on Art. 6 para. 1 lit. a GDPR. Any consent granted may be revoked at any time with effect for the future.

Otherwise, the legal basis for data processing when conducting online meetings, video conferences, or webinars is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the effective conduct of the online meeting, webinar, or video conference.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

Microsoft Forms

We use the services of the following provider for conducting surveys or providing online forms:

Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

The provider enables us to create and evaluate surveys and online forms.

In addition to the personal data you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL, and IP address is collected, transmitted to the provider, and stored on the provider’s servers.

The information you enter into the forms is stored in a password-protected manner to ensure that access by third parties is excluded and that only we can evaluate the data for the purpose specified in the respective form.

For the processing of personal data necessary for the performance of a contract with you (this also applies to processing operations necessary for the implementation of pre-contractual measures), Art. 6 para. 1 lit. b GDPR serves as the legal basis.

If you have given us consent to process your data, processing is based on Art. 6 para. 1 lit. a GDPR. Any consent granted may be revoked at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

GetSiteControl

We use the provider GetSiteControl (GetWebCraft Limited, Klimentos 41-43, Klimentos Tower, Flat/Office 25, 1061, Nicosia, Cyprus).

GetSiteControl is a program that displays pop-ups and overlay windows for information purposes and improved user guidance on the website. The windows can be displayed according to certain rules (e.g., number of page visits).

For this purpose, GetSiteControl sets cookies. These processing operations are carried out exclusively on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR.

Applications for Job Vacancies by Email

On our website, we publish current vacancies in a separate section to which interested parties can apply by email using the contact address provided.

Applicants must provide all personal data required for a well-founded assessment, including general information such as name, address, and contact details, as well as performance-related evidence and, where applicable, health-related information. Details regarding the application can be found in the respective job advertisement.

After receipt of the application by email, the data will be stored and evaluated exclusively for the purpose of processing the application. For any inquiries, we use either the applicant’s email address or telephone number.

Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), according to which completion of the application process is regarded as the initiation of an employment relationship.

Where special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g., health data such as information on severe disability status) are requested from applicants during the application process, processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR so that we can exercise the rights arising from employment law and social security and social protection law and fulfill our related obligations.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 para. 2 lit. h GDPR if it is carried out for purposes of preventive healthcare or occupational medicine, for assessing the applicant’s working capacity, for medical diagnosis, healthcare or treatment, or for the management of healthcare or social care systems and services.

If an applicant is not selected or withdraws their application prematurely, the transmitted data and all electronic correspondence, including the application email, will be deleted no later than six months after notification.

This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, fulfilling our obligations to provide evidence under regulations concerning equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of carrying out the employment relationship.

Online Applications via Form

On our website, we publish current vacancies in a separate section to which interested parties can apply via a corresponding form.

Applicants must provide all personal data required for a well-founded assessment, including general information such as name, address, and contact details, as well as performance-related evidence and, where applicable, health-related information. Details regarding the application can be found in the respective job advertisement.

When the form is submitted, applicant data is transmitted to us in encrypted form in accordance with the current state of technology, stored by us, and evaluated exclusively for the purpose of processing the application.

Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), according to which completion of the application process is regarded as the initiation of an employment relationship.

Where special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g., health data such as information on severe disability status) are requested from applicants during the application process, processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR so that we can exercise the rights arising from employment law and social security and social protection law and fulfill our related obligations.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 para. 2 lit. h GDPR if it is carried out for purposes of preventive healthcare or occupational medicine, for assessing the applicant’s working capacity, for medical diagnosis, healthcare or treatment, or for the management of healthcare or social care systems and services.

If an applicant is not selected or withdraws their application prematurely, the data submitted via the form and all electronic correspondence, including the application email, will be deleted no later than six months after notification.

This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, fulfilling our obligations to provide evidence under regulations concerning equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b GDPR (in Germany in conjunction with § 26 para. 1 BDSG) for the purpose of carrying out the employment relationship.


12) Tools and Miscellaneous

Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain effective user consent for cookies and cookie-based applications requiring consent.

The “Cookie Consent Tool” is displayed to users when accessing the website in the form of an interactive user interface through which consent for certain cookies and/or cookie-based applications can be granted by ticking checkboxes.

By using the tool, all cookies/services requiring consent are only loaded if the respective user has granted consent by ticking the corresponding checkbox. This ensures that such cookies are only placed on the user’s device if consent has been given.

The tool sets technically necessary cookies in order to save your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, such processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and thus in the legally compliant design of our website.

Another legal basis for processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the user’s consent.

Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.


13) Rights of the Data Subject

Applicable data protection law grants you the following rights vis-à-vis the controller regarding the processing of your personal data (rights of access and intervention), whereby reference is made to the cited legal basis for the respective requirements for exercising these rights:

  • Right of access pursuant to Art. 15 GDPR
  • Right to rectification pursuant to Art. 16 GDPR
  • Right to erasure pursuant to Art. 17 GDPR
  • Right to restriction of processing pursuant to Art. 18 GDPR
  • Right to notification pursuant to Art. 19 GDPR
  • Right to data portability pursuant to Art. 20 GDPR
  • Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR
  • Right to lodge a complaint pursuant to Art. 77 GDPR 

RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING MAY BE RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.


14) Retention Period of Personal Data

The retention period for personal data is determined by the respective legal basis, the purpose of processing, and – where applicable – additionally by the respective statutory retention period (e.g., retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.

If statutory retention periods exist for data processed within the framework of contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, such data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in its continued storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information contained in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.