Data protection information
As the responsible for processing personal data of our website visitors, we set very high values on compliance with data protection regulations. Therefore, we will explain everything about data protection on this website to give you a safe feeling during your online visit on our site.
Generally, it is possible to visit our website without providing any personal data. However, if you wish to use special services that we provide on our website, the processing of personal data could become necessary. If this processing of personal data is necessary and there is no legal basis for such processing, we will obtain your consent before processing.
As a matter of principle, the processing of your personal data, for example your name, address, e-mail address or telephone number, is always Performed in compliance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG), as well as in accordance with the country-specific data protection regulations that may apply to us. In this data protection declaration, we inform you about the type, scope and purpose of the personal data processed by us and the rights to which you are entitled as a data subject of the processing under data protection law.
We have implemented numerous technical and organisational measures in advance to ensure the most complete protection possible for the personal data processed via this website. Nevertheless, Internet-based data transmissions (e.g., e-mail) can always have security vulnerabilities, so that absolute protection cannot always be guaranteed. Especially if the transmissions take place outside our sphere of influence. For this reason, you are free at any time to transmit personal data to us by alternative means, for example by telephone, post or in person.
General information
Responsible
The responsible within the meaning of the General Data Protection Regulation is:
consus.health GmbH
Waldkircher Str. 18
79106 Freiburg
Tel.: 0761-21771530
Email: info@consus.health
Data Protection Officer
We have appointed an external data protection officer:
Sebastian Koye
Datenschutzklinik
Tullastr. 89
79108 Freiburg – Germany
Tel.: 0761-76 99 25 50
Email: datenschutz@consus.health
Web: www.datenschutzklinik.de
Web hosting
We host the content of our website with IONOS When you visit our website, IONOS collects various log files including your IP address.
For details, please refer to the IONOS privacy policy: https://www.ionos.de/hilfe/datenschutz/
The use of IONOS is based on Art. 6 (1) lit. f) GDPR. We have a legitimate interest in the most reliable presentation of our website. If a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and § 25 (1) Telecommunication Telemedia Data Protection Law (TTDSG), insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., for device fingerprinting) as defined by the TTDSG. The consent can be withdrawn at any time.
We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
SSL encryption
We use SSL encryption on our website to protect your transmitted data (e.g., via the contact form) from unauthorised third-party access in the best possible way during transport. Such a secure connection can be recognised by the prefix “https://” in the URL of your address line, e.g.,: https://www.consus.health
For unencrypted, the prefix looks like this: http://
Storage period
One criterion for the duration of the storage of personal data is the respective statutory retention period. Two common regulations are listed below as examples:
– 6 years according to § 257 (1) German Commercial Code (commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers, etc.)
– 10 years according to § 147 (1) General fiscal Law (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).
After expiry of the deadline, the corresponding data is routinely deleted if it is no longer required for the fulfilment or initiation of the contract.
Unless a more specific retention period is stated within this privacy policy or in further information of additional tools mentioned, your personal data will remain with us until the purpose for processing the data no longer applies.
If you assert a justified request for deletion or withdraw consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.
Legal basis
If you have consented to data processing, we process your personal data based on Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR if special categories of data are processed according to Art. 9 (1) GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also based on Art. 49 (1) lit. a) GDPR.
If you have consented to the storage of cookies or to the access to information in your terminal device (e.g., via device fingerprinting), the data processing is based on § 25 (1) TTDSG. The consent can be withdrawn at any time.
If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data based on Art. 6 (1) lit. b) GDPR.
Furthermore, we process your data if this is necessary for the fulfilment of a legal obligation based on Art. 6 (1) lit. c) GDPR. The data processing may also be based on our legitimate interest according to Art. 6 (1) lit. f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this data protection declaration.
Collection of general data via this website
Cookies
We use cookies on our internet pages. These are small text files that are stored on your computer system via an internet browser (e.g., Firefox, Chrome, Safari, Edge, Internet Explorer, Opera). They can have various functions on the website. Many cookies are technically necessary to ensure that the website can be displayed properly in the first place (e.g., the display of videos). Other cookies are used to evaluate user behaviour or to display advertising. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.
Since we also use other tools for optimisation or statistical purposes, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g., cookies for storing a shopping basket or
the processing of payment services).
Those cookies that are necessary to enable electronic communication processes, to provide certain functions desired by you (e.g., the shopping cart function) or to optimise the website (e.g., cookies to measure the web audience) (necessary cookies) are stored based on Art. 6 (1) lit. f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services.
If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively based on this consent (Art. 6 (1) lit. a) GDPR and § 25 (1) TTDSG); consent can be withdrawn at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.
Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and obtain your consent in the event of legal necessity.
Contact option via the website
On our website you will find a contact form that enables you to contact our company quickly and electronically and to communicate directly with us. For this purpose, we use a general e-mail address to which several internally assigned persons have access.
If a data subject contacts us via e-mail or via a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted to us on a voluntary basis by a data subject will be stored for the purposes of processing or contacting the data subject pursuant to Art. 6 (1) lit. a) GDPR. This personal data is not passed on to third parties.
If your enquiry is related to the fulfilment of a contractual obligation or is necessary for the implementation of pre-contractual measures, the processing is based on Art. 6 (1) lit. b) GDPR.
Contact form for downloading white papers
On our website you can download white papers that are related to our services. For this purpose, you will find a separate contact form in which you must enter your personal data.
These are automatically transferred to our customer management system and stored there. Such personal data transmitted to us by you on a voluntary basis will be transferred for the purpose of contacting you concerning the contents of the whitepaper in accordance with Art. 6 (1) lit. a) GDPR. This personal data will not be passed on to third parties.
In the further process of negotiations with you, further information may become necessary from the request for the implementation of pre-contractual measures. The processing is thus based on Art. 6 (1) lit. b) GDPR.
Contact option via e-mail, telephone, or fax
If you contact us via e-mail, telephone or fax, your enquiry including all resulting personal data (name, enquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.
The processing of this data is based on Art. 6 (1) lit. b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 (1) lit. f) GDPR) or on your consent (Art. 6 (1) lit. a) GDPR) if this has been requested; the consent can be withdrawn at any time.
The data you send to us via contact requests will remain with us until you request us to delete it, withdraw your consent to store it or the purpose for storing the data no longer applies (e.g., after we have completed processing your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.
Log file capture
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer Time of the server request
- IP address
- This data is not merged with other data sources.
The collection of this data is based on Art. 6 (1) lit. f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website, which necessitates the collection of server log files.
Use of analysis and advertising tools
Zapier
We use the tool Zapier on this website. The provider is Zapier Inc, Market St. #62411, San Francisco, CA 94104-5401, USA.
Zapier allows us to link various functionalities, databases and tools to our website and synchronise them with each other. In this way, it is possible, for example, to automatically export content that you request via a specific contact form out of our marketing tools. Depending on the functionality, Zapier may also collect various personal data during the process.
In the process, your personal data will also be transferred to the USA and stored there.
For this reason, we have implemented an opt-in procedure for the use of the above-mentioned service, which prevents data transmission without your prior consent. Thus, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting) as defined by the TTDSG. The consent can be withdrawn at any time.
Data transfer to the USA is based on the EU Commission’s standard contractual clauses, which we have concluded with Zapier. You can find details here:
Ortto
We have linked the Ortto tool to our website. The provider is Ortto Inc, 44 Pitt St, Sydney, New South Wales 2000, Australia.
This tool enables us to facilitate the provision of information that you request, for example, via our contact forms (whitepaper).
Your personal data may also be transferred to Australia and the USA and stored there.
For this reason, we have prefixed an opt-in procedure for the use of the above-mentioned service, which prevents data transmission without your prior consent. Thus, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting) as defined by the TTDSG. The consent can be withdrawn at any time.
Data transfer to the USA is based on the EU Commission’s standard contractual clauses, which we have concluded with Ortto. You can find details here:
HubSpot
We have connected areas of our website (contact forms for the white papers) to HubSpot CRM. The provider is HubSpot Inc. 25 Street, Cambridge, MA 02141.
Among other things, HubSpot CRM allows us to manage existing and potential customers as well as customer contacts. With the help of HubSpot CRM, we are able to record, sort and analyse customer interactions via email, telephone or other channels. The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures (e.g., sending white papers or newsletters).
For this reason, we obtain your consent before using the corresponding contact form. Thus, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device as defined by the TTDSG. The consent can be withdrawn at any time.
For details, please refer to HubSpot’s privacy policy:
https://legal.HubSpot.com/en/privacy-policy
Since data transfer to the USA cannot be ruled out, standard contractual clauses of the EU Commission have been concluded with HubSpot as the legal basis for this. You can find details here:
https://legal.HubSpot.com/en/dpa
Newsletter / Rapidmail
If you would like to receive the newsletter offered on this website, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. We use rapidmail as the newsletter service provider for handling the newsletter.
The provider is rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany.
rapidmail is a service with which, among other things, the dispatch of newsletters can be organised and analysed. The data you enter for the purpose of sending the newsletter is stored on rapidmail’s servers in Germany.
For analysis purposes, the emails sent with rapidmail contain a so-called “tracking pixel”, which connects to the servers of rapidmail when the email is opened. In this way, it can be determined whether a newsletter message has been opened.
Furthermore, with the help of rapidmail we can determine whether and which links in the newsletter are clicked on. All links in the email are so-called tracking links, with which your clicks can be counted. If you do not want any analysis by rapidmail, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter.
For more information on the analysis functions of rapidmail, please see the following link:
https://de.rapidmail.wiki/kategorien/statistiken
The data processing is based on your consent (Art. 6 (1) lit. a) GDPR). You can withdraw this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.
The data you provide us with for the purpose of receiving the newsletter will be stored by us or rapidmail until you unsubscribe from the newsletter and will be deleted from the distribution list after you unsubscribe from the newsletter. Data that has been stored by us for other purposes remains unaffected by this.
After your removal from the distribution list, your e-mail address will be stored by us or by rapidmail in a blacklist if necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f) GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.
For more details, please refer to rapidmail’s data security instructions at:
https://www.rapidmail.de/datensicherheit
We have concluded a data processing agreement (DPA) with rapidmail for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that this service only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This is a tool with the help of which we can integrate tracking or statistical tools, as well as other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.
For this reason, we have set up an opt-in procedure for the activation of the Google Tag Manager, which prevents data transmission without your prior consent. Thus, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time.
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. This data is summarised in a user ID and assigned to the respective end device of the website visitor.
In addition, Google Analytics can record, among other things, your mouse and scroll movements, as well as clicks on e.g., buttons. Furthermore, Google Analytics uses various modelling approaches to supplement the collected data sets and uses machine learning technologies in the data analysis.
Google Analytics uses technologies that enable the recognition of the user for the purpose of analysing user behaviour (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
For this reason, we have prefixed an opt-in procedure for the use of the above-mentioned service, which prevents data transmission without your prior consent. Thus, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting) as defined by the TTDSG. The consent can be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/
You can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available under the following link:
https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information on how Google Analytics handles user data in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de
A data processing agreement (DPA) in accordance with Art. 28 GDPR has been concluded with Google in order to comply with the data protection requirements accordingly.
Google Ads
We use Google Ads on our website. This is an online advertising programme of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be played based on the user data available at Google (e.g., location data and interests) (target group targeting). As the website operator, we can evaluate this data quantitatively by analysing, for example, which search terms have led to the display of our advertisements and how many advertisements have led to corresponding clicks.
For this reason, we have prefixed an opt-in procedure for the use of the above-mentioned service, which prevents data transmission without your prior consent. Thus, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., browsing history) as defined by the TTDSG. The consent can be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://policies.google.com/privacy/frameworks https://privacy.google.com/businesses/controllerterms/mccs/
A data processing agreement (DPA) in accordance with Art. 28 GDPR has been concluded with Google in order to comply with the data protection requirements accordingly.
Google Conversion Tracking
Google Conversion Tracking is installed on our website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
With the help of Google conversion tracking, Google and we can recognise whether the user has performed certain actions. For example, we can evaluate which buttons on our website were clicked how often and which products were viewed or purchased particularly frequently. This information is used to create conversion statistics. We learn the total number of users who clicked on our ads and what actions they took. We do not receive any information with which we can personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.
For this reason, we have prefixed an opt-in procedure for the use of the above-mentioned service, which prevents data transmission without your prior consent. Thus, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., mouse clicks) within the meaning of the TTDSG. The consent can be withdrawn at any time.
You can find more information about Google conversion tracking in Google’s privacy policy:
https://policies.google.com/privacy?hl=de.
A data processing agreement (DPA) in accordance with Art. 28 GDPR has been concluded with Google in order to comply with the data protection requirements accordingly.
Social media integration
This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Each time a page of this website containing elements from LinkedIn is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited this website with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, it is possible for LinkedIn to associate your visit to this website with you and your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or its use by LinkedIn.
For this reason, we have prefixed an opt-in procedure for the use of the above-mentioned service, which prevents data transmission without your prior consent. Thus, the processing is carried out exclusively based on Art. 6 (1) lit. a) GDPR and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g., device fingerprinting) as defined by the TTDSG. The consent can be withdrawn at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://de.linkedin.com/legal/l/dpa
Your rights as a data subject
Deletion and blocking of personal data
We only store your personal data for as long as it is necessary for the purpose of storage or insofar as this has been permitted by the European Directive and Regulation Maker or a country-specific legislator in laws or regulations to which we are subject.
If the purpose of storage no longer applies or if a storage period prescribed above expires, your personal data will be blocked or deleted in accordance with the statutory provisions.
Rights of the data subject
Right of access (Art. 15 GDPR)
You have the right to receive free information from us at any time about whether we are storing personal data about you. If this is the case, you have the right to the following information:
The purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organisations, if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration, if this is not possible, the criteria for determining this duration the existence of a right to rectification or erasure of the personal data concerning them or to restriction of processing by us or a right to object to such processing the existence of a right of appeal to a supervisory authority if the personal data are not collected from the data subject: any available information about the origin of the data the existence of automated decision-making, including profiling, pursuant to Article 22 (1) and (4) GDPR and, in such cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.
If you wish to exercise your right to information, you can contact one of our employees at any time.
Right of rectification (Art. 16 GDPR)
You have the right to request the rectification without delay of inaccurate personal data concerning you. You also have the right to request that incomplete personal data be completed, including by means of a supplementary declaration, taking into account the purposes of the processing.
If you wish to exercise your right to rectification, you can contact one of our employees at any time.
Right to erasure (Art. 17 GDPR)
You have the right to request that we delete personal data concerning you without delay if one of the following reasons applies and insofar as the processing is not required by other statutory provisions:
- If one of the above reasons applies and you wish to arrange for the deletion of personal data stored by us, you can contact one of our employees at any time.
- If the personal data has been made public by us and our company as a controller is obliged to erase the personal data pursuant to Art. 17 (1) GDPR, we shall take reasonable measures, taking into account the technical possibilities available and the costs of implementation, to inform other controllers (e.g., processors) who process your published personal data that you have requested from these other controllers the erasure of your personal data, copies or thereof. This is done to the extent that the processing is not required by other legal provisions.
- Your personal data has been collected or otherwise processed for purposes for which it is no longer necessary.
- You withdraw your consent on which the processing was based pursuant to Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR and there is no other legal basis for the processing.
- You object to the processing pursuant to Art. 21 (1) of the GDPR and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Art. 21 (2) of the GDPR.
- Your personal data has been processed unlawfully.
- The deletion of your personal data is necessary for compliance with a legal obligation under Union or Member State law to which we are subject as the controller.
- The personal data was collected in relation to information society services offered pursuant to Art. 8 (1) GDPR.
If you wish to assert your right to deletion, you can contact one of our employees at any time.
Right to restriction of processing (Art. 18 GDPR)
You have the right to request us to restrict processing if one of the following conditions is met:
- One of the above conditions applies and you request the restriction of personal data stored by us.
- You dispute the correctness of the personal data for a period of time that allows us, as the controller, to verify the correctness of the personal data.
- The processing is unlawful, you refuse to erase your personal data and instead request the restriction of the use of your personal data.
- We no longer need the personal data for the purposes of processing, but you need your personal data to assert, exercise or defend legal claims and want to prevent deletion, for example.
- You have objected to the processing pursuant to Art. 21 (1) GDPR and it is not yet clear whether the legitimate grounds of us as the controller outweigh those of you as the data subject.
If you wish to exercise your right to restrict processing, you can contact one of our employees at any time.
Right to data portability (Art. 20 GDPR)
You have the right to receive personal data concerning you that you have provided to us in a structured, commonly established, and machine-readable format.
You also have the right to have this data transferred to another controller without hindrance from us, provided that the processing is based on consent pursuant to Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR or on a contract pursuant to Art. 6 (1) lit. b) GDPR and the processing is executed with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Furthermore, you have the right to data portability pursuant to Art. 20 (1) GDPR and may request that your personal data be transferred directly from us to another controller without hindrance or disadvantage, insofar as this is technically feasible and insofar as this does not affect the rights and freedoms of other persons.
If you wish to exercise your right to data transfer, you can contact one of our employees at any time.
Right to object (Art. 21 GDPR)
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is executed based on Art. 6 (1) lit. e) or f) GDPR. This also applies to profiling based on these provisions.
We will no longer process your personal data in the event of objection, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process personal data for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing. This also applies to profiling, insofar as it is correlating with such direct advertising. If you object processing your personal data for direct marketing purposes, we will no longer process your personal data for these purposes.
To exercise your right to object, you may contact one of our employees directly. You are also free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by means of automated procedures using technical specifications.
Right to withdraw consent under data protection law (Art. 7 (3) GDPR)
You have the right to withdraw your consent to the processing of your personal data at any time.
If you wish to exercise your right to withdraw your consent, you can contact one of our employees at any time.
Right to complain to the competent supervisory authority (Art. 77 GDPR)
You have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority, in particular in the member country of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes this Regulation.
Personal data within the application process
When you send us an application, we process your personal data for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by e-mail or via a web form on the website. If a contract of employment is concluded with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.
If no employment contract is concluded with the applicant, the application documents will be deleted six months after notification of the rejection decision, provided that no other legitimate interests of the controller oppose deletion. Other legitimate interest in this sense is, for example, the retention for the obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).
If applicable, you may also be included in our applicant pool if we have not made you a job offer in response to your application. If you are accepted, all documents and details from your application will be transferred to the applicant pool so that we can contact you in the event of suitable vacancies.
Inclusion in the applicant pool is based exclusively on your express consent pursuant to Art. 6 (1) lit. a) GDPR. Giving your consent is voluntary and is not related to the current application process. You can withdraw your consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, unless there are legal reasons for retention. Irrespective of this, the data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.