The protection of your personal data on the occasion of your visit to our homepage is an important concern for us. Your data will be protected within the framework of the statutory provisions. We would like to inform you below about the nature and extent of the processing of personal data via this website in accordance with Article 13 of the General Data Protection Regulation (DSGVO).
1. Details of the responsible body
1.1. Details of the person responsible for the website:
T: +49 221 65087 900
1.2. Information on the data protection officer
If you have any questions regarding data privacy, please contact our external Group Data Privacy Officer for Corporate Data Privacy:
Mr. Arndt Halbach from GINDAT GmbH
Wetterauer Str. 6,
T: +49 2191 / 909 430
2. Data processing via the website
2.1 General notes on data processing
Your visit to our website is logged. Initially, the following data, which your browser transmits to us, is recorded:
- the IP address currently used by your PC or your router
- Date and time
- Browser type and version
- the operating system of your PC
- the pages you have viewed
- Name and size of the requested file(s)
- and, if applicable, the URL of the referring website.
This data is only collected for the purposes of data security, to improve our web offer and for error analysis based on Art. 6 para.1 f DSGVO. We reserve the right to use this data in the event of system abuse in order to determine the reasons and the trigger of the abuse, as well as to take legal action if necessary. Incidentally, the IP address of your computer is only evaluated anonymously (shortened by the last 3 digits).
You can visit our website without providing any personal information.
We point out that data transmission over the Internet (eg communication by e-mail) security gaps. Complete protection of data against access by third parties is not possible. You should therefore send us confidential data by other means, e.g. by post.
The controller processes the personal data of applicants for the purpose of handling the application procedure. The legal basis is § 26 para. 1 p.1 BDSG. The processing may also take place electronically. This is particularly the case if an applicant sends corresponding application documents to the controller by electronic means, for example by e-mail or via a web form located on the website. If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions.
If the controller does not conclude an employment contract with the applicant, the application documents will be deleted, taking into account the statutory provisions, after the advertised job has been filled, provided that no other legitimate interests of the controller conflict with such deletion.
Other legitimate interest in this sense is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG). For this purpose, the data will be stored for 6 months after completion of the application procedure and subsequently deleted.
If you have consented to be included in our talent pool, we will also store your data in order to take your application data into account in the event of further vacancies at our company. For this purpose, we store your data for 18 months and then delete it. The legal basis is your consent, Art. 6 para. 1 a DSGVO.
We can only process applications if they are submitted via our application portal. If you use another e-mail address from our company, your application will unfortunately not be considered. Please remember that an e-mail is not a secure medium.
Personal data (e.g. your name, address data or contact data) that you provide to us voluntarily, e.g. in the context of an inquiry or in any other way, will be stored by us and processed only for correspondence with you and only for the purpose for which you provided us with this data. The processing of this data is based on our legitimate interest in a prompt response to inquiries from interested parties on the basis of Art 6 para.1 lit. f. DSGVO.
3.1 Secure data transmission
To protect the security of your data during transmission, we use a state-of-the-art encryption process (SSL) via HTTPS.
3.2 Recipients of personal data
We may use service providers by way of commissioned data processing to carry out and handle processing operations.
Specifically, we have engaged service providers for our applicant portal, as well as for the hosting of our website.
With our service providers, the contractual relationships are regulated in accordance with the provisions of Art. 28 DSGVO, which contain the legally required points on data protection and data security.
4. Cookies use
5. Google Tag Manager
The website uses the Google Tag Manager. Through this service, website tags can be managed via an interface. The Google Tag Manager only implements tags. No cookies are set and no personal data is collected. The Google Tag Manager triggers other tags that may collect data. The Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager. More information about the Google Tag Manager can be found at the following link:
The basis for the data processing is Art 6 para.1 f DSGVO.
6. Data collection through Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: email@example.com. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States.
In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. We point out that on this website Google Analytics has been extended by the code “anonymizelp” to ensure an anonymized version of the IP address.
On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
The basis for the data processing is your consent according to Art 6 para.1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by making the appropriate setting in our cookie consent tool .
7. Google Optimize
We use Google Optimize on our website, a web analytics service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Optimize is an additional service of Google Analytics. Google Optimize allows us to test design variations of our websites and see how they perform against specific goals. This gives us the opportunity to test new website designs, layouts and content with a subset of our visitors. Google Optimize works with the tools of Google Analytics.
Google Optimize uses “cookies”, which are text files placed on your device, to help the website analyze how users use the site. The information generated by cookies about the use of our website (including the IP address of users) is transmitted to and stored by Google on servers in the United States or other third countries. This information may be passed on by Google to contractual partners of Google.
In addition, you can find more detailed information about the processed information at.
We use Google Optimize only with IP anonymization enabled (“anonymize IP”). This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
By integrating Google Optimize, we pursue the purpose of analyzing user behavior on our website and being able to react to this. This enables us to continuously improve our offer.
The data collected and processed as part of the measurement process is stored for 120 months and automatically deleted after this retention period.
The provision of the personal data is neither legally nor contractually required or necessary. You are also not obliged to provide the personal data.
The legal basis for the processing of personal data described here is your consent in accordance with Art. 6 Para. 1 lit. a DSGVO.
You can revoke your consent at any time with effect for the future by making the appropriate setting in our cookie consent tool .
8. Sitecore Analytics
This website uses Sitecore Analytics to continuously improve the customer experience of our website. The provider is Sitecore, 101 California Street, Suite 1600, San Francisco, CA 94111, USA, Phone: +1 415 380 0600 (“Sitecore”).
Sitecore can be used in two ways:
The legal basis for the processing of personal data described here is your consent in accordance with Art. 6 Para. 1 lit. a DSGVO.
You can revoke your consent at any time with effect for the future by making the appropriate setting in our cookie consent tool ..
For more information about this service, please visit:
9. Adwords and Google Conversion Tracking
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.
You can change your settings at any time via cookie-settings .
10. Google Analytics Remarketing
Our websites use the functions of Google Analytics Remarketing in conjunction with the cross-device functions of Google AdWords and Google DoubleClick. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: firstname.lastname@example.org .
This function makes it possible to link the advertising target groups created with Google Analytics Remarketing with the cross-device functions of Google AdWords and Google DoubleClick. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behavior on one end device (e.g. cell phone) can also be displayed on another of your end devices (e.g. tablet or PC). If you have given your consent, Google will link your web and app browsing history with your Google account for this purpose. In this way, the same personalized advertising messages can be displayed on every device on which you log in with your Google account. To support this feature, Google Analytics collects Google-authenticated IDs of users that are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad targeting. You can permanently opt out of cross-device remarketing/targeting by disabling personalized advertising in your Google account; follow this link:
The aggregation of the collected data in your Google account is based solely on your consent, which you can give or revoke at Google (Art. 6 para. 1 lit. a DSGVO).
For the data collection processes that are not aggregated in your Google account (e.g. because you do not have a Google account or have objected to the aggregation), the collection of the data is based on your consent to us pursuant to Art. 6 (1) lit. a DSGVO.
You can change your settings at any time via cookie-settings.
11. Google Maps
This site uses the map service Google Maps via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, E-Mail: email@example.com .
We have integrated the service with a so-called two-click solution. A connection to Google’s servers is only established when you click on the corresponding placeholder.
To use the functions of Google Maps, it is necessary to transmit your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.
The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. The legal basis is the consent given by you by clicking on the provider in the sense of Art. 6 para. 1 lit. a DSGVO.
12. Social media / plugins
Our website uses plugins of the YouTube page operated by Google. The operator of the pages is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, telephone: +353 1 543 1000, fax: +353 1 686 5660, e-mail: firstname.lastname@example.org (“Google” or synonymously “YouTube”).
We have integrated the service with a so-called two-click solution. Only when you click on the corresponding placeholder, a connection to the servers of Google is established.
For the call of a video via YouTube, a connection to the servers of YouTube is established. In the process, the YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.
YouTube is used in the interest of an appealing presentation of our online offers. The legal basis is your consent, which you give by clicking on a corresponding placeholder, in terms of Art. 6 (1) lit. a DSGVO.
Our website uses a cookie consent tool provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter: “Cookiebot”).
We use this service to store your cookie preferences. This data processing is carried out pursuant to Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in providing a cookie consent management service for website visitors. In this context, your browser may transmit personal data to Cookiebot.
The data is deleted as soon as the purpose of its collection has been fulfilled.
You can prevent the collection and processing of your data by Cookiebot by disabling the execution of script code in your browser or by installing a script blocker in your browser. In this case, you will be asked again for your decision for cookies every time you call up a page or sub-page.
13. Your rights
Pursuant to Articles 15-21 of the GDPR, if the conditions described therein are met, you may assert the following rights with respect to the personal data we process.
- You can request information pursuant to Art. 15 DSGVO about your personal data processed by us.
- If incorrect personal data is processed, you have a right to rectification pursuant to Art. 16 DS-GVO.
- If the legal requirements are met, you may request the deletion or restriction of processing (Art. 17, 18 DSGVO).
- You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
13.1 Right of objection pursuant to Art. 21 DSGVO
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her carried out on the basis of Article 6(1)(e) or (f) of the GDPR, including any profiling based on those provisions.
13.2 Standard periods for the deletion of data
If there is no statutory retention requirement, the data is deleted or destroyed when it is no longer required to achieve the purpose of the data processing. Different periods apply to the storage of personal data; for example, data of relevance under tax law is generally stored for 10 years, while other data is generally stored for 6 years in accordance with commercial law. Finally, the storage period can also be based on the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.
13.3 Right of complaint to a supervisory authority
According to Art 77 DSGVO, every data subject has the right to lodge a complaint with a supervisory authority if he or she is of the opinion that the processing of personal data concerning him or her violates the DSGVO. The competent supervisory authority in matters of data protection law is the State Data Protection Commissioner of the federal state in which our company is based.
State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia
Phone: +49 211/38424-0
Fax: +49 211/38424-10