9. Site Functionalities
9.1 Vimeo
This website uses plugins for displaying and playing videos from Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA. When you access a page with such a plugin, your browser establishes a direct connection to the provider's servers and transmits information including your IP address. When playback of embedded videos is started, the provider sets cookies to create playback statistics.
If you are logged into a user account with the provider, your data is directly assigned to your account when clicking on a video. Processing only takes place with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time via the "cookie consent tool". For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework.
9.2 Google Maps
This website uses the online map service Google Maps (API) provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Maps is used to display interactive maps to show you our location. Already when accessing subpages containing the map, information about your use (such as your IP address) is transmitted to Google servers; transmission to Google LLC in the USA is also possible.
Where legally required, we have obtained your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework.
9.3 Google reCAPTCHA
On this website, we use the CAPTCHA service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The service checks whether an entry is made by a natural person or improperly through automated processing, and blocks spam, DDoS attacks and similar harmful access. For this, the provider collects the IP address, browser and operating system type, as well as the date and duration of the visit.
The legal basis is our legitimate interest in avoiding misuse and spam in accordance with Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework.
9.4 Google Customer Reviews
We work with Google as part of the "Google Customer Reviews" programme (Google Ireland Limited). After a purchase on our website, you will be asked whether you would like to participate in an email survey from Google. If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we transmit your email address to Google. Your review is then aggregated with other reviews and displayed.
You can revoke your consent at any time to the controller or to Google. During use, transmissions to Google LLC servers in the USA may occur; the provider has joined the EU-US Data Privacy Framework for this purpose.
9.5 Zapier
This website uses the services of Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA, for the integration and synchronisation of databases and web applications. This automates our processing operations and establishes workflows. To the extent that personal data is processed, this takes place on the basis of our legitimate interest in optimising our internal organisation in accordance with Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework.
9.6 Job Applications
On our website, we advertise currently vacant positions in a separate section. Interested parties can apply either by email to the provided contact address or via a corresponding form. Applicants must provide all personal data required for a sound assessment, including general information such as name, address and contact options, as well as performance-related evidence.
Upon receipt of the application, the data is stored and evaluated exclusively for the purpose of processing the application. Processing is based on Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), as going through the application process is considered employment contract initiation. Special categories of personal data (e.g. health data) are processed in accordance with Art. 9 para. 2 lit. b GDPR.
If no selection is made or if an applicant withdraws their application early, all transmitted data and electronic correspondence will be deleted at the latest after 6 months. In the event of a successful application, the data will be processed on the basis of Art. 6 para. 1 lit. b GDPR (in conjunction with § 26 para. 1 BDSG) for the purpose of implementing the employment relationship.
10. Tools and Other
Cookie Consent Tool
This website uses a so-called "cookie consent tool" to obtain valid user consents for cookies and cookie-based applications that require consent. When visiting the page, the tool is displayed to users in the form of an interactive user interface, on which consents for specific cookies can be granted by ticking checkboxes. All cookies that require consent are only loaded if the user grants corresponding consents. The tool sets technically necessary cookies to store your cookie preferences.
If personal data (such as the IP address) is processed for the purpose of storing and logging cookie settings, this is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant consent management. A further legal basis is Art. 6 para. 1 lit. c GDPR, as we are subject to the legal obligation to make the use of technically non-necessary cookies dependent on consent.
11. Data Subject Rights
11.1 Applicable data protection law grants you the following data subject rights vis-à-vis the controller regarding the processing of your personal data: right of access under Art. 15 GDPR, right to rectification under Art. 16 GDPR, right to erasure under Art. 17 GDPR, right to restriction of processing under Art. 18 GDPR, right to notification under Art. 19 GDPR, right to data portability under Art. 20 GDPR, right to revoke granted consents under Art. 7 para. 3 GDPR and right to lodge a complaint under Art. 77 GDPR.
11.2 Right to Object
If we process your personal data on the basis of our overriding legitimate interest in the context of a weighing of interests, you have the right at any time to object to this processing for reasons arising from your particular situation, with effect for the future. If you exercise your right to object, we will cease processing the affected data. However, further processing remains reserved if we can demonstrate compelling legitimate grounds.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing. If you exercise your right to object, we will cease processing the affected data for direct marketing purposes.
12. Duration of Storage of Personal Data
The duration of the storage of personal data is measured according to the respective legal basis, the processing purpose and – where relevant – additionally according to the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data is stored until you revoke your consent. If statutory retention periods exist for data processed within the scope of legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data is routinely deleted after the retention periods have expired.
When processing on the basis of Art. 6 para. 1 lit. f GDPR, the data is stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing. In the context of direct marketing, the data is stored until you exercise your right to object under Art. 21 para. 2 GDPR. Otherwise, data is deleted when it is no longer necessary for the purposes for which it was collected.
