Privacy policy

Jobkey GmbH
Pettenkoferstraße 33
80336 Munich
Germany
Jobkey GmbH, Pettenkoferstraße 33, 80336 Munich (hereinafter referred to as "we"), as the operator of the jobkey.eu website, is responsible for the personal data of users (hereinafter referred to as "you") of the website within the meaning of the German Federal Data Protection Act ("BDSG") and the European General Data Protection Regulation (GDPR).

The protection and security of your data is important to us. We protect your privacy and your private data. We collect, process and use your personal data in accordance with the content of this Privacy Policy and the applicable German and European data protection laws, in particular the GDPR and the BDSG as well as the Telemedia Act ("TMG"). In accordance with the principle of data minimization, we only use the data that is absolutely necessary and do not collect or store any other information. Our employees have been instructed accordingly.
1. information on the collection of personal data
1.1 In the following, we provide information about the processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, email addresses and user behavior. In this way, we would like to inform you about our processing operations and at the same time comply with the legal obligations, in particular those arising from the EU General Data Protection Regulation (GDPR).

1.2 The controller pursuant to Art. 4 (7) GDPR is Johannes Ossanna, Pettenkoferstraße 33, 80336 Munich, info@jobkey.eu (see our legal notice https://www.jobkey.eu/legal-notice)(hereinafter also referred to as "we", "us" or "our").

1.3 If we use contracted service providers for individual functions of our offer or wish to use your data for advertising purposes, we will always carefully select and monitor these service providers and inform you in detail below about the respective processes. In doing so, we will also state the specified criteria for the storage period.
2. your rights
2.1 You have the following rights vis-à-vis us with regard to the personal data concerning you:

2.1.1 Right of access,
2.1.2 Right to rectification or erasure,
2.1.3 Right to restriction of processing,
2.1.4 Right to object to processing,
2.1.5 Right to data portability, and
2.1.6 Right to withdraw your declaration of consent under data protection law.

2.2 You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.
3. processing of personal data when visiting our website
When using the website for information purposes, i.e. simply viewing it without registering and without providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR:

3.1.1 IP address,
3.1.2 Date and time of the request,
3.1.3 Time zone difference to Greenwich Mean Time (GMT),
3.1.4 Websites that are accessed by your system via our website,
3.1.5 Access status/HTTP status code,
3.1.6 the amount of data transferred in each case,
3.1.7 websites from which your system accesses our website,
3.1.8 location data, including location data from your mobile device,
3.1.9 information about the browser type and the language and version of the browser software, and
3.1.10 your operating system.
4. data security
We use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties, taking into account the state of the art, the implementation costs and the nature, scope, context and purpose of the processing as well as the existing risks of a data breach (including its probability and impact) for the data subject. Our security measures are continuously improved in line with technological developments.
5. objection or revocation against the processing of your data
5.1 If you have given your consent to the processing of your data, you can withdraw this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us. The permissibility of the processing of your data up to the time of your revocation remains unaffected.

5.2 Insofar as we base the processing of your personal data on a balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the way we do. In the event of your objection, we will examine the situation and either stop or adapt the data processing or point out to you our compelling legitimate grounds on the basis of which we will continue the processing.

5.3 Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can exercise your objection to advertising using the contact details provided above.
6. storage period of your personal data
6.1 We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, tax, accounting, or reporting requirements. To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of the personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

6.2 In some cases, we will anonymize your personal data so that it can no longer be associated with you. In this case, we will use this data without further notice to you.

6.3 If you have any questions about the storage of your personal data, you can contact us using the contact details provided above.
7 Other functions and offers on our website
7.1 In addition to the purely informational use of our website, we offer various services that you can use if you are interested and use other common functions to analyze or market our offers, which are presented in more detail below. For this purpose, you must generally provide additional personal data or we process such additional data that we use to provide the respective services. The aforementioned data processing principles apply to all data processing purposes described here.

7.2 In some cases, we use external service providers to process your data. These are carefully selected by us, are bound by our instructions and are regularly checked.

7.3 Furthermore, we may pass on your personal data to third parties if we offer participation in promotions, competitions, contracts or similar services together with partners. Depending on the service, your data may also be collected by the partners on their own responsibility. You will receive more detailed information when you provide your data or below in the description of the respective offers.

7.4 If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.
8. processing of data from your end devices ("Cookie Policy")
8.1 In addition to the above-mentioned data, we use technical aids for various functions when you use our website, in particular cookies, which can be stored on your end device. When you access our website and at any time thereafter, you have the choice of whether you generally allow cookies to be set or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager. In the following, we first describe cookies from a technical point of view before going into more detail about your individual choices by describing technically necessary cookies and cookies that you can voluntarily select or deselect.

8.2 Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using so that certain information can flow to the location that sets the cookie. Cookies cannot execute programs or transfer viruses to your computer, but are primarily used to make the website faster and more user-friendly. This website uses the following types of cookies, whose function and legal basis we will explain below:

8.2.1 Transient cookies: Such cookies, especially session cookies, are automatically deleted when you close your browser or log out. They contain a so-called session ID. This allows various requests from your browser to be assigned to the shared session and your computer can be recognized when you return to our website.

8.2.2 Persistent cookies: These are automatically deleted after a specified period, which varies depending on the cookie. You can view the cookies set and the duration at any time in your browser settings and delete the cookies manually.

8.2.3 Other technologies: These functions are not based on cookies, but on similar technical mechanisms, such as Flash cookies, HTML5 objects or an analysis of your browser settings. As a result, we can also use the technologies described below. Here, too, you can of course consent or object.

8.3 Mandatory functions that are technically necessary to display the website: The technical structure of the website requires that we use technologies, in particular cookies. Without these technologies, our website cannot be displayed (completely and correctly) or the support functions could not be enabled. These are basically transient cookies that are deleted at the end of your visit to the website, at the latest when you close your browser. You cannot deselect these cookies if you wish to use our website. The individual cookies can be seen in the Consent Manager. The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. f GDPR.

8.4 Optional cookies if you have given your consent: We only set various cookies after you have given your consent, which you can select when you first visit our website via the so-called cookie consent tool. The functions are only activated if you give your consent and can be used in particular to enable us to analyze and improve visits to our website, to make it easier for you to use different browsers or end devices, to recognize you when you visit us again or to place advertising (possibly also to tailor advertising to your interests or to measure the effectiveness of advertisements). The legal basis for this processing is Art. 6 para. 1 sentence 1 lit. a GDPR. You can withdraw your consent at any time without this affecting the lawfulness of processing up to the point of withdrawal.
9. online marketing / analysis tools
9.1 Mit der statistischen Erfassung durch Online-Marketing-Maßnahmen wollen wir unsere Website bedarfsgerecht gestalten und für Sie, als unseren Nutzer, fortlaufend anpassen und die Nutzung optimieren. Soweit im Folgenden nicht anders ausgeführt, erfolgt der Einsatz der von uns verwendeten Online-Marketing- und Tracking-Maßnahmen auf Grundlage Ihrer Einwilligung gemäß Art. 6 Abs. 1 S. 1 lit. a DSGVO. Soweit eine Übermittlung Ihrer Daten in die USA erfolgt, geschieht dies auf Grundlage Ihrer Einwilligung gemäß Art. 49 Abs. 1 S. 1 lit. a DSGVO. Zudem haben sich die betreffenden Dienstleister im Rahmen einer Standardvertragsklausel gegenüber uns verpflichtet, dass in Drittländern außerhalb der EU, in die Daten exportiert werden, ein Datenschutzniveau gewährleistet wird, das dem der EU entspricht.

9.2 Google Analytics 
9.2.1 Soweit Sie Ihre Einwilligung erklärt haben, wird auf dieser Website Google Analytics eingesetzt, ein Webanalysedienst der Google Ireland Limited ("Google"). Die Nutzung umfasst die Betriebsart Universal Analytics: Hierdurch ist es möglich, Daten, Sitzungen und Interaktionen über mehrere Geräte hinweg einer pseudonymen User-ID zuzuordnen und so die Aktivitäten eines Nutzers geräteübergreifend zu analysieren. Google Analytics verwendet sog. Cookies, d. h. Textdateien, die auf Ihrem Computer gespeichert werden und die eine Analyse der Benutzung der Website durch Sie ermöglichen. Die durch das Cookie erzeugten Informationen über Ihre Benutzung dieser Website werden in der Regel an einen Server von Google in den USA übertragen und dort gespeichert. Im Falle der Aktivierung der IP-Anonymisierung auf dieser Website, wird Ihre IP-Adresse von Google jedoch innerhalb von Mitgliedstaaten der Europäischen Union oder in anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum zuvor gekürzt. Wir weisen Sie darauf hin, dass auf dieser Website Google Analytics um eine IP-Anonymisierung erweitert wurde, um eine anonymisierte Erfassung von IP-Adressen (sog. IP-Masking) zu gewährleisten. Die im Rahmen von Google Analytics von Ihrem Browser übermittelte IP-Adresse wird nicht mit anderen Daten von Google zusammengeführt. Nähere Informationen zu Nutzungsbedingungen und Datenschutz finden Sie unter (https://www.google.com/analytics/terms/de.html bzw. unter
https://policies.google.com/?hl=de). Im Auftrag des Betreibers dieser Website wird Google diese Informationen benutzen, um Ihre Nutzung der Website auszuwerten, um Reports über die Websitenaktivitäten zusammenzustellen und um weitere mit der Websitennutzung und der Internetnutzung verbundene Dienstleistungen gegenüber dem Websitenbetreiber zu erbringen.

9.2.2 Die von uns gesendeten und mit Cookies, Nutzerkennungen (z.B. User-ID) oder Werbe-IDs verknüpften Daten werden nach 14 Monaten automatisch gelöscht. Die Löschung von Daten, deren Aufbewahrungsdauer erreicht ist, erfolgt automatisch einmal im Monat.

9.2.3 Nähere Informationen zu Nutzungsbedingungen und Datenschutz von Google Analytics finden Sie unter http://www.google.com/analytics/terms/de.html bzw. unter http://www.google.com/intl/de/analytics/privacyoverview.html.

9.2.4 Sie können die Installation und Speicherung von Cookies durch eine entsprechende Einstellung Ihrer Browser-Software verhindern; wir weisen jedoch darauf hin, dass Sie in diesem Fall gegebenenfalls nicht sämtliche Funktionen dieser Website vollumfänglich nutzen können.

9.2.5 Sie können darüber hinaus die Erfassung der durch das Cookie erzeugten und auf Ihre Nutzung der Website bezogenen Daten (inkl. Ihrer IP-Adresse) sowie die Verarbeitung dieser Daten durch Google verhindern, indem Sie indem sie das unter dem folgenden Link verfügbare Browser-Plugin herunterladen und installieren https://tools.google.com/dlpage/gaoptout?hl=de.

9.2.6 Mit dem nachfolgenden Link können Sie die Nutzung Ihrer personenbezogenen Daten durch Google deaktivieren: https://myadcenter.google.de

9.3 Google Ads / Conversion Tracking

9.3.1 Wir nutzen zudem das Online-Werbeprogramm "Google Ads" sowie im Rahmen von Google Ads das Conversion-Tracking. Das Google Conversion Tracking ist ein von Google zur Verfügung gestellter Analysedienst. Wenn Sie auf eine von Google geschaltete Anzeige klicken, wird ein Cookie für das Conversion-Tracking auf Ihrem Endgerät abgelegt. Diese Cookies verlieren nach 30 Tagen ihre Gültigkeit, enthalten keine personenbezogenen Daten und dienen somit nicht der persönlichen Identifizierung. Wenn Sie bestimmte Internetseiten unserer Website besuchen und das Cookie noch nicht abgelaufen ist, können Google und wir erkennen, dass Sie auf die Anzeige geklickt haben und zu dieser Seite weitergeleitet wurden.

9.3.2 Jeder Google Ads-Kunde erhält ein anderes Cookie. Somit besteht keine Möglichkeit, dass Cookies über Websiten von Ads-Kunden nachverfolgt werden können. Die Informationen, die mithilfe des Conversion-Cookie eingeholten werden, dienen dazu, Conversion-Statistiken für Google Ads-Kunden zu erstellen, die sich für Conversion-Tracking entschieden haben. Hierbei erfahren die Kunden die Gesamtanzahl der Nutzer, die auf ihre Anzeige geklickt haben und zu einer mit einem Conversion-Tracking-Tag versehenen Seite weitergeleitet wurden.Wenn Sie nicht am Tracking teilnehmen möchten, können Sie dieser Nutzung widersprechen, indem Sie die Installation der Cookies von der Domain "googleadservices.com" durch eine entsprechende Einstellung Ihrer Browser Software verhindern. Sie werden sodann nicht in die Conversion-Tracking Statistiken aufgenommen. Weiterführende Informationen sowie die Datenschutzerklärung von Google finden Sie unter http://www.google.com/policies/technologies/ads/ und http://www.google.de/policies/privacy/

9.4 Einsatz des Google Tag Managers

9.4.1 Diese Seite verwendet den Google Tag Manager, einen Dienst der Google Ireland Limited, Gordon House, Barrow Street, Dublin, D04 E5W5, Irland (“Google“).

9.4.2 Der Tag Manager dient der Verwaltung der Tools zur Nutzungsdatenanalyse und weiteren Diensten, sogenannten Website-Tags. Ein Tag ist ein Element, das über den Google Tag Manager eingebunden wird und im Quelltext der Website implementiert wird, um beispielsweise vorgegebene Nutzungen und Interaktionen zu erfassen. Der Google Tag Manager ermöglicht uns auch die Einbindung von Partnern im Rahmen der Onlinewerbung. Der Google Tag Manager sorgt als eine Art Container für das Laden und die Verwaltung anderer Komponenten, die ihrerseits unter Umständen Daten erfassen (nach der jeweiligen Einwilligung des Nutzers). Google gibt an, dass zur Überwachung der Stabilität und Leistung des Systems mit Google Tag Manager aggregierte Daten zur Tag-Auslösung erfasst werden können. Außerdem können durch den Google Tag Manager Online-Kennzeichnungen (einschließlich Cookie-Kennungen) und IP-Adressen verarbeitet werden.

9.4.3 Die Rechtsgrundlage für die Verarbeitung personenbezogener Daten unter Verwendung des Google Tag Manager ist unser berechtigtes Interesse gem. Art. 6 Abs. 1 Buchstabe f) DSGVO an einer vereinfachten und übersichtlichen Einbindung verschiedener Dienste sowie Optimierung der Ladezeiten der verschiedenen Dienste und damit Verbesserung der Funktionalität unserer Website.

9.4.4 Da Google im Rahmen der vorstehenden Datenverarbeitungen und gemäß den “Auftragsverarbeiterdiensten“ als Auftragsverarbeiter für uns tätig ist, kann nicht ausgeschlossen werden, dass Google Ihre personenbezogenen Daten an Google LLC (USA) zur weiteren Verarbeitung übermittelt. Zu diesem Zweck bestehen mit der Google LLC Standardvertragsklauseln gem. Art. 46 DSGVO. Eingesetzte Dienstleister aus den USA sind in der Regel unter dem EU-US Data Privacy Framework (DPF) zertifiziert.

9.5 Tracking-Pixel

9.5.1 Auf unserer Webseite werden sogenannte Tracking Pixel verwendet. Das sind 1×1 Pixel große Code-Snippets, die den Browsertyp über die Browser-ID feststellen, also den individuellen Fingerabdruck des Browsers. Damit kann der Diensteanbieter sehen, wann und wie viele Nutzer den Pixel aufgerufen haben, wenn die Webseite besucht wurde. Solche Tracking-Pixel können von Ihnen unterbunden werden, etwa durch Tools wie z. B. webwasher oder AdBlock. 

9.5.2 Ohne Ihre ausdrückliche Zustimmung werden wir Tracking-Pixel nicht dazu benutzen, um unbemerkt persönliche Daten über Sie zu sammeln oder solche Daten an Drittanbieter und Marketingplattformen zu übermitteln.

9.5.3 Die Rechtsgrundlage für die Verarbeitung personenbezogener Daten unter Verwendung technisch notwendiger Pixel ist Art. 6 Abs. 1 S. 1 lit. f DSGVO.

9.6 Microsoft Clarity

9.6.1 In unserem Internetauftritt setzen wir Microsoft Clarity ein. Hierbei handelt es sich um einen Webanalysedienst der Microsoft Corporation, One Microsoft Way, Redmond, WA 98052 USA, nachfolgend nur “Microsoft“ genannt.

9.6.2 Durch die Zertifizierung nach dem EU-US-Datenschutzschild („EU-US Privacy Shield“) garantiert Microsoft, dass die Datenschutzvorgaben der EU auch bei der Verarbeitung von Daten in den USA eingehalten werden.

9.6.3 Der Dienst Microsoft Clarity dient zur Analyse des Nutzungsverhaltens unseres Internetauftritts. Rechtsgrundlage ist Art. 6 Abs. 1 lit. f) DSGVO. Unser berechtigtes Interesse liegt in der Analyse, Optimierung und dem wirtschaftlichen Betrieb unseres Internetauftritts.

9.6.4 Nutzungs- und nutzerbezogene Informationen, wie bspw. IP-Adresse, Ort, Zeit oder Häufigkeit des Besuchs unseres Internetauftritts, werden dabei an einen Server von Microsoft in den USA übertragen und dort gespeichert. Allerdings nutzen wir Microsoft Clarity mit der sog. Anonymisierungsfunktion. Durch diese Funktion kürzt Microsoft die IP-Adresse schon innerhalb der EU bzw. des EWR.

9.6.5 Die so erhobenen Daten werden wiederum von Microsoft genutzt, um uns eine Auswertung über den Besuch unseres Internetauftritts sowie über die dortigen Nutzungsaktivitäten zur Verfügung zu stellen. Auch können diese Daten genutzt werden, um weitere Dienstleistungen zu erbringen, die mit der Nutzung unseres Internetauftritts und der Nutzung des Internets zusammenhängen.
10. conclusion of a contractual relationship
10.1 When concluding a contractual relationship on our website by registering and accessing our platform, we ask you to provide the following personal data:

10.1.1 Data that identifies you personally, such as name and e-mail address; contact details, such as billing and delivery address and telephone number; profile picture; academic title; data that identifies your company, such as company, address, communication data (e-mail address, telephone number), VAT ID or tax number, if applicable; information about your means of payment; other information.

10.1.2 Other personal data that we are legally obliged or entitled to collect and process and that we require for your authentication, identification or to verify the data we have collected.

10.2 The aforementioned data is processed for the purpose of handling the contractual relationship. The data is processed on the basis of Art. 6 para. 1 lit. b GDPR. The storage period is limited to the purpose of the contract and, if applicable, statutory and contractual retention obligations.
11. use of payment service providers
We also work together with payment service providers for the payment of contracts concluded with us for a fee. We pass on your payment data to the commissioned payment service provider as part of payment processing - earmarked for the payment - if this is necessary for payment processing. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
12. registration for our newsletter
12.1 If you have expressly consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we will use your e-mail address to send you our newsletter on a regular basis.

12.2 Your email address will be deleted as soon as it is no longer required for the purpose for which it was collected. Your email address will therefore be stored for as long as the subscription to the newsletter is active.

12.3 You can unsubscribe at any time, for example via a link at the end of a newsletter.

12.4 We use the service of "MailChimp", Rocket Science Group, LLC, 675 Ponce De Leon Ave NE #5000, Atlanta, GA 30308, USA, to send our newsletter. If you subscribe to our newsletter, your data will be stored by MailChimp in the USA.

12.4.1 MailChimp processes this data and evaluates it for us, but does not use the data for its own purposes. MailChimp's privacy policy can be found at https://mailchimp.com/legal/privacy

‍12
.4.2 Our newsletter then contains a so-called "web-beacon", i.e. a 1×1 pixel file that is retrieved from the MailChimp server when the newsletter is opened. This allows us to find out when and from which operating system the newsletter was read. We do not use the data collected in this way to create user profiles.

12.4.3 The legal basis for the processing of personal data using technically necessary pixels is Art. 6 para. 1 sentence 1 lit. f GDPR.
13. contact by e-mail
When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, your name and telephone number if applicable) will be stored by us in order to answer your questions. Data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntarily given consent. We delete the data arising in this context if the inquiry is assigned to a contract after the contract period, otherwise after the storage is no longer necessary, or restrict the processing if there are legal storage obligations.
14. use of the login
14.1 If you wish to use our platform, you must register by providing your e-mail address, a password of your choice or a one-time login link ("Magic Link") and your e-mail address. There is no obligation to use a clear name; pseudonymous use is possible. The provision of the aforementioned data is mandatory, all other information can be provided voluntarily when using our platform. We use the so-called double opt-in procedure for this service, i.e. you will receive an e-mail in which you must confirm that you are the owner of the e-mail address provided and that you wish to receive the notifications. You can unsubscribe from the notifications at any time, e.g. by clicking on the link in the email or using the contact details provided. We will store the data you provide as well as the time of your registration for the service and your IP address until you unsubscribe from the service.

14.2 If you use our platform, we will store your data required for the performance of the contract, including details of the payment method, until you permanently delete your access. Furthermore, we store the voluntary data you provide for the duration of your use of the platform, unless you delete it beforehand. The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.
15. user account
When you interact with our services and products, you have the option of creating a user account with us. The creation of a user account is based on your consent. You can withdraw your consent and/or delete your user account by contacting us using the contact details provided above. Revoking or deleting your account may have a negative impact on your user experience. The following personal data will be processed in connection with your account Name, address data, contact data, profile pictures. The legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. a GDPR.
16 Automated decisions and profiling
As part of the performance of our contract with you and to the extent necessary to fulfill our obligations to you or for the purposes of improving our products or services, we use automated decision-making and profiling. If such automated decision-making and/or profiling results in a negative decision about you and you do not agree with this, or if you wish to object to this type of processing of your personal data, you can contact us using the contact details provided above. We will then proceed to reassess the situation and/or provide you with more information as to why such an automated decision was made.
17. use of HeyFlow
17.1 We have integrated forms from HeyFlow on this website. The provider is Heyflow GmbH, Jungfernstieg 49, 20354 Hamburg (hereinafter "HeyFlow"). HeyFlow provides a technology for the creation of online interaction tools (click funnels), with the help of which (potential) customers, applicants or other third parties (hereinafter "inquirers") can contact us. For this purpose, the inquirers enter their request and the other requested data (e.g. name, contact details, etc.) in the form and submit it. You may have the option of uploading your own files, for which the following explanations also apply.

17.2 All requests are processed in HeyFlow's systems on our behalf. We have concluded an order processing contract with HeyFlow. This contract ensures that HeyFlow processes the data in compliance with the GDPR and exclusively on the basis of our instructions. Further details can be found in HeyFlow's privacy policy at https://heyflow.app/de/datenschutz.

17.3 The processing of this data with the help of HeyFlow is based on our legitimate interest in the most interactive and user-friendly communication possible with inquirers (Art. 6 para. 1 lit. f GDPR). The request data itself is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In the case of an application, the processing of your data is based on Section 26 (1) BDSG. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested; the consent can be revoked at any time with effect for the future.

17.4 The data you have entered will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your inquiry has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected; in the case of an application, the following also applies: If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted. The retention serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies. Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.
18 Hubspot CRM
18.1 When contacting us (via contact form or e-mail), the user's details are processed to process the contact request and its handling in accordance with Art. 6 para. 1 lit. b GDPR. First and last name, email address and telephone number are required in order to be able to ask questions and submit a complete offer.

18.2 When contacting us (via contact form or email), the user's details are processed for the purpose of processing the contact request and handling it in accordance with Art. 6 para. 1 lit. b GDPR. First and last name, email address and telephone number are required in order to be able to ask questions and submit a complete offer.

18.3 We use the CRM, registration and marketing automation system "HubSpot", from the provider HubSpot Inc. (25 First Street, 2nd Floor, Cambridge, MA 02141, USA) with offices in Ireland (One Dockland Central, Dublin 1, Ireland) and Germany (Am Postbahnhof 17, 10243 Berlin) on the basis of our legitimate interests (efficient and fast processing of user inquiries, applications and optimization of our online offer).

18.4 Since HubSpot may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, further safeguards are required to ensure the level of data protection required by the GDPR. For the USA, there is an adequacy decision of the EU Commission pursuant to Art. 45 para. 1 GDPR with regard to companies with certification under the EU-US Data Privacy Framework. HubSpot, Inc. is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: www.dataprivacyframework.gov/s/participant-search.

18.5 For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the EU Commission, standard data protection clauses pursuant to Art. 46 para. 2 lit. c GDPR are also agreed. These oblige the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

18.6 Further information on HubSpot's privacy policy can be found here: https://legal.hubspot.com/de/dpa and https://legal.hubspot.com/de/privacy-policy
19. zapier
19.1 We have integrated Zapier on this website. The provider is Zapier Inc, Market St. #62411, San Francisco, CA 94104-5401, USA (hereinafter "Zapier").

19.2 Zapier enables us to link various functionalities, databases and tools to our website and synchronize them with each other. In this way, it is possible, for example, to automatically display content that we publish on our website on our social media channels or to export content from marketing and analysis tools. Depending on the functionality, Zapier may also collect various personal data.

19.3 Zapier is used on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in integrating the tools used as effectively as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

19.4 Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://zapier.com/tos.

19.5 We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
20. data collection in the context of linking online tools with Make
20.1 On our website, we integrate Make from the provider Celonis Inc, One World Trade Center, 87th Floor, New York, NY, 10007, USA (hereinafter "Make").

20.2 Make enables us to integrate the services of other platforms provided by third parties. This allows these platform providers to gain knowledge of your activities in relation to the respective platform.

20.3 The legal basis for processing is Art. 6 para. 1 lit. f GDPR. Third-party services that we integrate with Make are services from LinkedIn Inc. or Heyflow.

20.4 We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract required by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

20.5 You can find more information on terms of use and data protection at https://www.make.com/en/terms-and-conditions and https://www.make.com/en/privacy-notice.
21. hosting
21.1 We host our website with Webflow. The provider is Webflow, Inc, 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter "Webflow"). When you visit our website, Webflow collects various log files including your IP addresses.

21.2 Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are required to display the page, to provide certain website functions and to ensure security (necessary cookies). Data transfer to the USA is based on the standard contractual clauses of the EU Commission. For details, please refer to Webflow's privacy policy: https://webflow.com/legal/eu-privacy-policy

21.3 Webflow is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

21.4 We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which guarantees that the provider will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.
22. weglot
22.1 Functions of the Weglot translation service are integrated on this website. The provider is Weglot SAS, 138, rue Pierre Joigneaux in Bois-Colombes 92270 France (hereinafter "Weglot").

22.2 Weglot is loaded when you access the website so that you can change the language from German to English using the language icon in the header of the website. This allows a direct connection to be established between your browser and the Weglot server when you visit this website. Weglot then receives the information that you have visited this website with your IP address. The data is stored and analyzed on the basis of Art. 6 para. 1 lit. f GDPR.

22.3 A corresponding consent is requested via the cookie and data protection settings of the website. The processing is then carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; consent can be revoked at any time via the data protection settings at the bottom of each subpage. Further information on this can be found in Weglot's privacy policy: https://weglot.com/privacy/.
23rd Intercom
23.1 We use Intercom as a chat tool. The provider is Intercom, Inc, a Delaware corporation with offices at 55 2nd Street, 4th Fl., San Francisco, CA 94105, USA. You can find the provider's privacy policy here: https://www.intercom.com/legal/privacy.

23.2 On our website, you have the option of contacting us, for example by email. All e-mails sent in this way are forwarded to this provider and processed by us from there. The individual messages are also tagged so that we can subsequently see, for example, how many notices of termination we have received by email in a month. It is also possible for us to send you emails with the help of this provider. We generally process the following data from you: all communication content that you communicate to us, as well as your name and email address.

21.3 Intercom is used on the basis of Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in displaying our website as reliably as possible. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

21.4 We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract prescribed by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
24. social media platforms
24.1 We maintain online presences within social networks and platforms in order to communicate with you as active customers, interested parties and users and to inform you about our services there. User data is also processed by the networks and platforms outside the European Union, but not by us. This may result in risks for users, for example by making it more difficult to enforce users' rights. With regard to US providers that are certified under the Privacy Shield, we would like to point out that they thereby undertake to comply with EU data protection standards.

24.2 The networks and platforms will generally process user data for market research and advertising purposes and create user profiles from the usage behavior and the resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that are presumed to correspond to the interests of the users. For these purposes, cookies are usually stored on the user's computer, in which the user's usage behavior and interests are stored. Data can also be stored in the user profiles independently of the devices used by the users (in particular if the users are registered and logged in to the respective platforms).the legal basis for the processing of users' personal data is our legitimate interests in effective user information and communication with users in accordance with Art. 6 para. 1 lit. f. GDPR. GDPR. If users are asked by the respective platform providers for consent to data processing (i.e. they give their consent, e.g. by ticking a checkbox or confirming a button), the legal basis for processing is Art. 6 para. 1 lit. a. GDPR.

24.3. Please note the respective data protection guidelines and notices of the providers named below, which can be accessed via the link below, and the data processing and objection options (opt-out) available there. In the case of requests for information and the assertion of user rights, we would also like to point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need help, you can contact us.

24.3.1 Meta Platforms (Meta Platforms Ireland Inc, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy: https://www.facebook.com/policy.php and http://www.youronlinechoices.com Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active.

24.3.2 Instagram (Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA) - Privacy Policy/ Opt-Out: http://instagram.com/about/legal/privacy/.

24.3.3 LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Privacy Policy https://www.linkedin.com/legal/privacy-policy,
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt0000000L0UZAA0&status=Active.

24.3.4 YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) - Privacy Policy: https://policies.google.com/privacy,
Opt-Out: https://adssettings.google.com/authenticated,
Privacy Shield: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
25. note on data transfer to the USA
Among other things, tools from companies based in the USA are integrated on our website. If these tools are active, your personal data may be transferred to the US servers of the respective companies. We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. secret services) may process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.
26. topicality and changes to this privacy policy
Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to change this data protection declaration.
Status: July 2024