HOME

Imprint

Novuter GmbH
Karlstrasse 43 / II,
D-80333 Munich, Germany

Managing directors authorized to represent: Franz Posch.

Contact: Telephone: 0152/3363 6683, E-Mail: info (at) novuter.com

Register court: Munich District Court
Register number: HRB 255936
Sales tax identification number acc. 27a UStG: DE-32939 9966
Responsible for content: Franz Posch (address see above)

Data protection

Introduction and general information

Thank you for your interest in our website. The protection of your personal data is very important to us. In the following you will find information about the handling of your data that is collected through your use of our website. Your data will be processed in accordance with the statutory data protection regulations.

Responsible body
novuter GmbH
Karlstrasse 43
80333 Munich
info@novuter.com
0152 3363 6683

Definitions

Our privacy policy should be simple and understandable for everyone. The official terms of the General Data Protection Regulation (GDPR) are generally used in this data protection declaration. The official definitions are explained in Art. 4 GDPR.

Server log files

When you visit our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

  • Date and time of the request
  • Name of the requested file
  • Page from which the file was requested
  • Access status
  • Web browser and operating system used
  • (Complete) IP address of the requesting computer
  • Amount of data transferred

We collect the listed data in order to guarantee a smooth connection to the website and to enable comfortable use of our website by users. In addition, the log file is used to evaluate system security and stability as well as administrative purposes. The legal basis for the temporary storage of the data or the log files is Art. 6 Para. 1 lit. f GDPR.
For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data briefly. Based on this data, it is not possible for us to infer individual persons. After 30 days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user.
In an anonymized form, the data may also be processed for statistical purposes. A storage of this data together with other personal data of the user, a comparison with other databases or a transfer to third parties does not take place at any time.

Cookies

Our website uses cookies, which are stored on your device by the browser and which contain certain settings for the use of the website (e.g. for the current session). Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser. Most of the cookies we use are so-called session cookies, which are automatically deleted when the browser is closed. Other cookies remain stored on your device until you delete them or the storage period expires. These cookies enable us to recognize your browser the next time you visit. In some cases, cookies are used to simplify website processes by storing settings (e.g. keeping options that have already been selected). If personal data is also processed by individual cookies implemented by us, processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. The cookie settings can be managed under the following links for the respective browser.

Google Chrome: https://support.google.com/chrome/answer/2790761?co=GENIE.Platform%3DDesktop&hl=de
MozillaFirefox: https://www.mozilla.org/de/firefox/dnt/
Internet Explorer: https://support.microsoft.com/de-de/help/17288/windows-internet-explorer-11-use-do-not-track
Opera: http://help.opera.com/Windows/12.10/de/notrack.html 
Safari: https://support.apple.com/kb/PH21416?locale=de_DE

You can also prevent so-called scripts from being loaded by default. NoScript allows the execution of JavaScripts, Java and other plug-ins only with trustworthy domains of your choice. Information and instructions on how to edit this function can be obtained from your browser provider (e.g. for Mozilla Firefox at: https://addons.mozilla.org/de/firefox/addon/noscript/).
Please note that deactivating cookies may restrict the functionality of this website.
You can object to the collection and storage of data at any time with future effect by clicking this link. After your objection, an opt-out cookie will be placed on your device. If you delete your cookies, you have to click the link (https://www.econda.de/widerruf-zur-datenspeicherung/) again.
Visitors to this website can this data collection and storage at any time for the future under the URL
http://www.econda.de/econda/unternehmen/datenschutz/widersschulscookie/ contradict.

Contact form and contact by email

If you send us inquiries by e-mail, your details from your e-mail, including the first and last name, salutation or postal address you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions. Entering an e-mail address is required to provide contact information; providing your name and telephone number is voluntary. We will never pass this data on without your consent. The legal basis for the processing of the data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR and, if applicable, Art. 6 Para. 1 lit. b GDPR, provided that your request is aimed at concluding a contract. Your data will be deleted after your request has been processed, provided that there are no statutory retention requirements. In the case of Art. 6 Para. 1 lit. f GDPR to object to the processing of your personal data at any time.
You can object to the data collection and storage at any time with future effect by clicking this link. After your objection, an opt-out cookie will be placed on your device. If you delete your cookies, you have to click the link (https://www.econda.de/widerruf-zur-datenspeicherung/) again.
Visitors to this website can this data collection and storage at any time for the future under the URL
http://www.econda.de/econda/unternehmen/datenschutz/widersschulscookie/ contradict.

Data transfer and recipient

A transfer of your personal data to third parties does not take place, except
– if we have explicitly pointed this out in the description of the respective data processing.

– if you have given your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR,

– the transfer according to Art. 6 Para. 1 S. 1 lit. f GDPR is required to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,

– in the event that for the transfer according to Art. 6 Para. 1 S. 1 lit. c GDPR there is a legal obligation and

– as far as this according to Art. 6 Para. b GDPR is necessary for the processing of contractual relationships with you.

We also use external service providers that we have carefully selected and commissioned in writing to process our services. They are bound by our instructions and are regularly checked by us. With which we, if necessary, order processing contracts in accordance with Art. 28 GDPR. These are service providers for web hosting, sending e-mails as well as maintenance and servicing of our IT systems, etc. The service providers will not pass this data on to third parties.

Duration of storage of personal data

The duration of the storage of personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). After the respective period has expired, the relevant data is routinely deleted. If data is required for contract fulfillment or contract initiation or if we have a legitimate interest in further storage, the data will be deleted if they are no longer required for these purposes or if you exercise your right of revocation or objection.

Your rights

In the following you will find information on which data subject rights the applicable data protection law grants you to the person responsible with regard to the processing of your personal data:

The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can obtain information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a Right to lodge a complaint, the origin of your data, if we have not collected it, as well as the existence of automated decision-making including profiling and, if necessary, meaningful information on their details.

The right, in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us.

The right, in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless processing to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or Defense of legal claims is necessary.

The right, in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the correctness of the data, the processing is unlawful, but you refuse to delete it and we no longer need the data, but you do Need to assert, exercise or defend legal claims or you have objected to processing in accordance with Art. 21 GDPR

The right, in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible.

The right to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office or, if applicable, that of your usual place of residence or work.

The right to revoke consent given in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. If you withdraw your consent, we will immediately delete the data concerned, unless further processing can be based on a legal basis for processing without consent. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent up to the point of revocation;

Right to object

If your personal data is provided by us on the basis of legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR are processed, you have the right, in accordance with Art. 21 GDPR, to object to the processing of your personal data, provided this is for reasons that arise from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct advertising, you have a general right of objection without the requirement to specify a particular situation.

If you would like to exercise your right of revocation or objection, an email to datenschutz (at) novuter.com is sufficient.

External links

External links are only included on our website as links to corresponding partners. After clicking the integrated link, you will be redirected to the respective partner’s page. User information is only transmitted to the respective provider after forwarding. For information on how your personal data is handled when using these websites, please refer to the respective data protection provisions of the providers you use.

Subject to change

We reserve the right to adapt or update this data protection declaration if necessary, taking into account the applicable data protection regulations. In this way, we can adapt them to current legal requirements and take changes to our services into account, e.g. B. when introducing new services. The most recent version applies to your visit.

Status of this data protection declaration: December 14, 2018

Disclaimer of liability

Liability for content: The content of our website was created with the greatest care. However, we cannot accept any liability for the correctness, completeness and topicality of the content.

Liability for links: Our offer contains links to external third-party websites over whose content we have no influence. We can therefore not accept any liability for this external content. The respective provider or operator of the pages is always responsible for the content of the linked pages.

Copyright

The content and works on these pages created by the website operator are subject to German copyright law. The duplication, processing, distribution and any kind of exploitation outside the limits of copyright require the written consent of the creator.

Privacy Policy Social Media

The protection of your personal data is very important to us. In the following, you will find information on how we handle your data, which are recorded through your use of our social media presence on social networks and platforms. The processing of your data is in accordance with the legal regulations.

1.   Providers

       1.1 Facebook fan page

             1.1.1Controller

In case you provide us with data, which is also or exclusively processed by Facebook, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is the controller for data processing, in accordance with the GDPR, in addition to or instead of us. For this purpose, we have concluded an agreement with Facebook pursuant to Art. 26 GDPR on joint controllership for data processing (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. See the following link to consult this agreement: https://www.facebook.com/legal/terms/page_controller_addendum.

Since a transfer of personal data by Facebook Ltd. to the U.S. is made to Facebook Inc. among others, further appropriate safeguards are required to ensure the level of data protection under the GDPR. To ensure this, the provider uses standard contractual clauses in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the U.S. to process the data according to the level of protection in Europe.

If you, as a visitor to the site, wish to exercise your rights (access, rectification, erasure, restriction, data portability, complaint with a supervisory authority, objection or withdrawal), you can contact both, Facebook and us.

You can edit your advertising preferences in your account settings. Click on the following link and log in to your account to change your settings:

https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com

For further details, please see Facebook’s privacy policy: https://www.facebook.com/about/privacy/

            1.1.2 Facebook’s Data Protection Officer

You can use Facebook’s online form to contact Facebook’s data protection officer. To access it, please use of the following link: https://www.facebook.com/help/contact/540977946302970.

             1.1.3 Data processing for statistical purposes using Page Insights

Facebook provides Page Insights Data for our Facebook fan page: https://www.facebook.com/business/a/page/page-insights. This aggregated data gives us an insight into how people interact with our page. Page Insights data may be based on personal data gathered from visits and interactions on, or with our page, and from connections with provided content. Please consider which personal data you share with us via Facebook. Your data may be processed for market research and promotional purposes, even if you are not logged into Facebook or do not have a Facebook account. User profiles can be created on the basis of user behaviour and the resulting interests of users. User profiles may be used for targeted advertisements within or outside the platform. Data recording is done using cookies, which are stored on your terminal device. In addition, user profiles may contain data, that is gathered from memberships on other platforms. Legal basis of the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the optimised presentation of our proposition, the effective information and communication with customers and interested parties as well as in the targeted placement of advertisements. Please note that we have no influence on the data gathering and further processing by Facebook. As a result, we cannot provide any access about where, for how long and to which extent Facebook retains the data. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing erasure deadlines, what evaluations and translations are made and to whom the data is transferred by Facebook. If you want to prevent your personal data being processed by Facebook, please contact us by other means. 

         1.2 Other social media providers

               1.2.1 Controller

If your personal data is processed by one of the providers listed below, this provider is responsible for data processing within the meaning of the GDPR. For the assertion of your rights, please contact the respective provider. Only they have access to the data collected from you. However, if you need any assistance, please contact us any time.

We are present on social media platforms of the following providers:

  • Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
  • Instagram Inc., Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
  • YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
  • XING SE, Dammtorstr. 29-32, 20354 Hamburg, Germany
  • Pinterest Inc., 635 High Street, Palo Alto, CA, 94301, U.S.

               1.2.2 Data Protection Officer

Information on how to contact the Data Protection Officer of the respective social media providers can be found here:

2.   General information on social media platforms

       2.1 Controller

Insofar as we process the data provided by you via social media, the following controller is responsible for data processing within the meaning of GDPR:

novuter GmbH 
Karlstraße 43 / II,
80333 München
Tel. 0152 / 3363 6683
Email: info@novuter.com

           2.2 Our Data Protection Officer

If you have any concerns about us processing your data, please contact our Data Protection Officer via the following contact details:

PROLIANCE GmbH / datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich, Germany
E-Mail: datenschutzbeauftragter@datenschutzexperte.de

3.   General data processing on social media platforms

           3.1 Data processing for market research and advertising

Organisations generally process data for market research and promotional purposes. Therefore, website providers use cookies, which load on to your browser and detect your return to the same URL.  The recorded data is used to create user profiles. User profiles may be used for targeted advertisements within or outside the platform. In addition, user profiles may contain data, that is gathered from memberships on other platforms.

          3.2 Data processing through making contact

We collect data when you contact us, for example via contact form or messenger services such as Facebook Messenger. The data collected depends on the details you provide and the contact details you specify. It will be stored for the purpose of processing the inquiry and in the event of follow-up questions. Under no circumstances we will pass on the data to third parties without your consent. The legal basis for the data processing is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request aimed at the conclusion of a contract. Unless there are compelling reasons, your data will be erased after final processing. We assume the processing is finalized, when the regarding circumstances are clarified.

        3.3 Data processing for the purpose of performing a contract or entering into an contract

If your request via social media or other platforms is aimed at the conclusion of a contract, regarding the delivery of goods or the provision of services, we process your data in order to perform the contract and the requested services, or pre-contractual measures. In this case, the legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR. Your data will be erased if they are no longer necessary for the fulfilment of the contract or if it is certain, that pre-contractual measures will not lead to the conclusion of a contract corresponding to the purpose of establishing the contact. Please take into account, that it may be necessary to store personal data of our contractual partners in order to comply with contractual or legal obligations even after the conclusion of contract.

        3.4 Data processing on the legal basis of consent

If the respective platform providers request you to give consent to the processing for a particular purpose, the legal basis for the processing is Art. 6 para. 1 lit. a, Art. 7 GDPR. You have the right to withdraw such consent with effect for the future at any time.

4.   Data transfer and recipient

When visiting and using the above-mentioned platforms, personal data may be transferred to the U.S. or other third countries outside the EU, therefore further appropriate safeguards are required to ensure the level of data protection under the GDPR. Further information on whether and what suitable guarantees the providers can provide in this regard can be found in the list below.

We have no influence on the processing and handling of your personal data by the respective providers as well as we have no information on this matter. Please consider the privacy policy of the providers for further information:

  • Twitter
  • Instagram
  • YouTube/Google
    • Privacy Policy: https://policies.google.com/privacy?hl=de&gl=en
    • Opt-out: https://adssettings.google.com/authenticated
    • By using YouTube, personal data is transferred to the U.S.. YouTube currently cannot provide any guarantees in accordance to the GDPR for a data transfer to the U.S.. Please note that such transfers of personal data without an adequacy decision and appropriate safeguards pose a risk to you. The risk is that due to legislation in the U.S., the personal data may be accessed by American authorities (in particular the intelligence services). Legal protection options or information on the handling of your data by the U.S. authorities are only possible to a very limited extent or not at all. A level of data protection in accordance with the regulations of the GDPR can therefore not be ensured.
  • LinkedIn

https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=en

  • XING
    • Privacy policy: https://privacy.xing.com/en/privacy-policy
    • Opt-Out: https://nats.xing.com/optout.html?locale=en_US
    • According to the privacy policy, XING uses standard contractual clauses to ensure an adequate level of data protection in accordance with the provisions of the GDPR for data transfers to the U.S. or other third countries outside the EU: https://privacy.xing.com/en/privacy-policy/who-may-receive-information-about-you/third-countries
  • Pinterest
    • Privacy Policy / Opt-out: https://policy.pinterest.com/privacy-policy
    • According to the privacy policy, Pinterest uses standard contractual clauses to ensure an adequate level of data protection in accordance with the provisions of the GDPR for data transfers to the U.S. or other third countries outside the EU: https://policy.pinterest.com/privacy-policy

5.   Your rights

You will find information on which data subject rights the applicable data protection law grants you vis-a-vis the controller in the following. You have the right to request information about your personal data processed by us; Art. 15 GDPR. In particular, you may obtain information about the purpose of processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be disclosed, the envisaged period for which the data will be stored, the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing, the right to lodge a complaint, where the personal data are not collected from us, any available information as to their source, the existence of automated decision-making, including profiling and meaningful information about the logic involved.

To obtain from the controller without undue delay the rectification of inaccurate personal data or have incomplete personal data completed; Art. 16 GDPR.

To obtain from us the erasure of personal data concerning, unless the processing is necessary for, exercising the right of freedom of expression and information, compliance with a legal obligation, reasons of public interest, achieving purposes in the public interest and the establishment, exercise or defence of legal claims, Art. 17 GDPR.

To obtain from us restriction of processing where, the accuracy of personal data is contested by you, the processing is unlawful, we no longer need the personal data for the purposes of processing, but they are required by you for the establishment, exercise or defence of legal claims or you have objected to processing pursuant to Art. 21; Art. 18 GDPR.

To receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller; Art. 20 GDPR

To lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of alleged infringement; Art. 77 GDPR.

To withdraw your consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before it’s withdrawal. Prior to giving consent, you shall be informed thereof; Art. 7 para. 3 GDPR. In case of countermand the respective data shall be deleted immediately, unless further processing cannot be based on a legal basis for processing without consent.

Right to object

In accordance with Art. 21 GDPR, you have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on processing for the purposes of the legitimate interests (Art. 6 Abs. 1 lit. GDPR) pursued by us. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing.

If you wish to make use of your right to objection or withdraw your consent, send an E-Mail to  info@novuter.com .

6.   Duration of storage

The personal data collected and stored by us will be erased from our systems, if the purpose of processing ceases to exist or if you have made use of your right of withdrawal or objection. Legal retention periods remain unaffected. We have no influence on the storage period of your data being stored by social media providers for their own purposes. For further details, please contact them directly.

Status of this privacy policy: 01.01.2021

DATA PROTECTION INFORMATION FOR APPLICANTS

Information on data protection regarding our processing of applicant data in accordance with Art. 13, 14 and 21 of the Basic Data Protection Regulation (GDPR)

Dear applicant,

Thank you for your interest in our company. In accordance with the provisions of Art. 13, 14 and 21 of the General Data Protection  Regulation (GDPR), we hereby inform you of the processing of the personal data you have submitted as part of the application process and of any personal data we may have collected and your rights in this regard. In order to ensure that you are fully informed about the processing of your personal data during the application process, please take note of the following information.

  1. CONTROLLER IN ACCORDANCE WITH THE DATA PROTECTION LAW

novuter GmbH,
Karlstrasse 43 / II
D-80333
München
E-Mail: info@novuter.com

  1. CONTACT DATA OF OUR DATA PROTECTION OFFICER

PROLIANCE GmbH / datenschutzexperte.de
Datenschutzbeauftragter
Leopoldstr. 21,
D-80802 MünchenE-Mail: datenschutzbeauftragter@datenschutzexperte.de

  1. PURPOSES AND LEGAL BASIS OF THE PROCESSING

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (EU-GDPR) and the Federal Data Protection Act (Subsequently referred to as BDSG 2018), insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis is Art. 88 GDPR in conjunction with § 26 BDSG 2018 and, if applicable, Art. 6 Para. 1 lit. b GDPR for the initiation or execution of contractual relationships.

Furthermore, we may process your personal data insofar as this is necessary to fulfil legal obligations (Art. 6 para. 1 lit. c GDPR) or to defend asserted legal claims against us. The legal basis is Art. 6 para. 1 lit. f GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz – AGG).

Once you give us express consent to process personal data for specific purposes, the lawfulness of this processing depends on your consent pursuant to Art. 6 para. 1 lit. a GDPR. Any consent given may be withdrawn at any time with effect for the future (see section 9 of this data protection information).

If there is an employment relationship between you and us, we may, pursuant to Art. 88 GDPR i. V. m. § 26 BDSG 2018, further process the personal data we have already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise or fulfilment of the rights and obligations of the representation of the interests of the employees resulting from a law or a collective agreement, a works agreement or a service agreement (collective agreement).

  1. CATEGORIES OF PERSONAL DATA

We only process data that is related to your application. This may include general information about you (name, address, contact details, etc.), information about your professional qualifications and schooling, information about continuing vocational education and training and any other data that you provide to us in connection with your application.

  1. SOURCES OF DATA

We process personal data which we receive from you by post or e-mail or which you transmit to us in the course of contacting you or submitting your application.

  1. RECIPIENT OF THE DATA

We pass on your personal data within our company exclusively to those areas and persons who need this data to fulfil their contractual and legal obligations or to implement our legitimate interest.

Data will otherwise only be passed on to recipients outside the company if this is permitted or required by law, if this is necessary to fulfil legal obligations or if we have your consent.

  1. TRANSFER TO A THIRD COUNTRY

A transfer to a third country is not intended.

  1. DURATION OF DATA STORAGE

We store your personal data as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of six months after completion of the application procedure (e.g. notification of the rejection decision), unless longer storage is legally necessary or permissible. In addition, we only store your personal data to the extent required by law or in a specific case to assert, exercise or defend legal claims for the duration of a legal dispute.

In the event that you have agreed to your personal data being stored for a longer period of time, we will store it in accordance with your declaration of consent.

If the application procedure is followed by an employment relationship, an apprenticeship relationship or an internship relationship, your data will, as far as necessary and permissible, initially continue to be stored and then transferred to the personal file.

If necessary, you will receive an invitation to join our talent pool following the application process. This allows us to consider you also in the future with suitable vacancies with our applicant selection. If we have received your corresponding consent, we will store your application data in our talent pool in accordance with your consent or future consent, as the case may be.

  1. YOUR RIGHTS

Every data subject has the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to notification pursuant to Art. 19 GDPR and the right to data portability pursuant to Art. 20 GDPR.

In addition, you have the right lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR if you are of the opinion that the processing of your personal data is not lawful. The right to lodge a complaint shall be without prejudice to any other administrative or judicial remedy.

If the processing of data takes place on the basis of your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the withdrawal will only take effect in the future. Processing that took place before the revocation is not affected by this. Please also note that we may need to retain certain data for a period of time to comply with legal requirements (see Section 8 of this Privacy Policy).

Right to object

If your personal data is processed in accordance with Art. 6 para. 1 lit. f GDPR in order to safeguard legitimate interests, you have the right, pursuant to Art. 21 GDPR, to object to the processing of this data at any time for reasons arising from your particular situation. We will then no longer process this personal data unless we can prove compelling reasons for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defense of legal claims.

Please feel free to contact us using the contact details given in section 1 to protect your rights.

  1. NECESSITY OF PROVIDING PERSONAL DATA

The provision of your personal data within the scope of application processes is voluntary. However, we can only decide or establish an employment relationship with you if you provide necessary personal information to complete the application.

  1. AUTOMATED DECISION MAKING

The decision on your application is not based on automated processing. Therefore, no automated decision is made in individual cases within the meaning of Art. 22 GDPR.