Privacy Policy Privacy Policy
Definitions
This privacy policy is based on the terminology of the General Data Protection Regulation (GDPR) and is intended to be readable and understandable for you. To ensure this, we would like to explain the terms used in advance.
Personal Data
Personal data refers to any information relating to an identified or identifiable natural person (hereinafter referred to as the "data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or one or more specific factors that express the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
Data Subject
A data subject is any identified or identifiable natural person whose personal data is processed by the data controller.
Processing
Processing refers to any operation or set of operations, whether carried out by automated means or not, concerning personal data. This includes the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction of personal data.
Limitation of Processing
Limitation of processing involves marking stored personal data with the aim of restricting their future processing.
Profiling
Profiling is any form of automated processing of personal data that involves the use of these personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that person's job performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Pseudonymization
Pseudonymization is the processing of personal data in a way that the data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.
Controller
Controller or data controller means the natural or legal person, authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union law or the law of Member States, the controller or the specific criteria for their nomination may be provided for by Union law or the law of Member States.
Processor
Processor means a natural or legal person, authority, agency, or other body that processes personal data on behalf of the controller.
Recipient
Recipient means a natural or legal person, authority, agency, or other body to whom personal data is disclosed, whether a third party or not. However, authorities that may receive personal data in the context of a particular inquiry in accordance with Union or Member State law are not considered recipients.
Third Party
A third party is a natural or legal person, authority, agency, or other body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or the processor, are authorized to process personal data.
Consent
Consent means any freely given, specific, informed, and unambiguous indication of the data subject's wishes by which they, by a statement or by a clear affirmative action, signify agreement to the processing of personal data relating to them. Name and Contact Details of the Controller:
Processing of Personal Data and the Nature and Purpose of Their Use
We process personal data exclusively within the legal framework of the relevant legal provisions. Personal data includes all information that relates to a natural person or is at least relatable to a person and allows conclusions to be drawn about that person.
Processing includes any operation or set of operations performed with or without the aid of automated processes concerning personal data. This includes the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of provision, comparison, or linking, restriction, erasure, or destruction.
Website Visit
When you visit our website, information is automatically sent to the server of our website by the web browser on your device. This information is temporarily stored in a so-called log file or access logs of the web server. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the accessed file
- Website from which access is made (referrer URL)
- Browser used and the operating system of your computer, as well as the name of your access provider
We process the aforementioned data for the following purposes:
- Ensuring a smooth connection setup of the website
- Ensuring comfortable use of our website
- Evaluation of system security and stability
- Administrative purposes
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes listed above for data collection. Under no circumstances do we use the collected data for the purpose of drawing conclusions about your person.
Use of Our Contact Form
If you send us inquiries via our contact form, providing a valid email address is required so that we know who the inquiry is from and can respond to it. Additional information can be provided voluntarily.
The data processing for the purpose of contacting us is carried out in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR based on your voluntarily given consent.
Disclosure of Data
Your personal data will not be transferred to third parties for purposes other than those listed below. We will only share your personal data with third parties if:
- You have given us explicit consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, the disclosure is necessary for the establishment, exercise, or defense of legal claims pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data, there is a legal obligation to disclose data pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR, or the disclosure is legally permissible and is necessary for the performance of a contract with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.
- Some of our data is stored at the Amazon Web Services EU location (in Frankfurt am Main). Therefore, European and German data protection laws apply, meaning that all data is protected by the EU GDPR as well as the Federal Data Protection Act. For more detailed information on data protection at AWS, please refer to the following link: https://aws.amazon.com/de
- Our company regularly checks the creditworthiness of new customers when concluding contracts and, in certain cases where there is a legitimate interest, even with existing customers. For this purpose, we cooperate with Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, from whom we receive the data required for this purpose. To this end, we transmit your name and contact details to Creditreform Boniversum GmbH. Information in accordance with Art. 14 of the EU General Data Protection Regulation regarding the data processing carried out at Creditreform Boniversum GmbH can be found here: www.boniversum.de/eu-dsgvo
Cookies
We use cookies on our website. These are small files that your browser automatically creates and that are stored on your device when you visit our site.
The cookie stores information that is specific to the device you are using.
On the one hand, the use of cookies serves to make the use of our offer more pleasant for you.
Furthermore, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific, defined period of time. If you visit our site again to use our services, it will automatically be recognized that you have already been with us and what inputs and settings you have made, so that you do not have to enter them again.
On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offer for you (see section 5). These cookies enable us to automatically recognize, when you visit our site again, that you have already been with us. These cookies are automatically deleted after a defined period of time.
The data processed by cookies is necessary for the purposes mentioned to protect our legitimate interests and those of third parties in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. If you do not want this, you can disable the storage of cookies in the browser you are using or set your browser to notify you when cookies are sent.
Analysis Tools
The tracking measures listed below and used by us are carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. With the tracking measures used, we want to ensure that our website is designed to meet your needs and is continually optimized. On the other hand, we use the tracking measures to statistically record the use of our website and evaluate it for the purpose of optimizing our offer for you. These interests are to be regarded as justified within the meaning of the aforementioned provision.
The respective purposes of data processing and the categories of data are to be taken from the relevant tracking tools.
Google Analytics
For the purpose of customizing and optimizing our pages, we use Google Analytics, a web analytics service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter "Google"). In this context, pseudonymous usage profiles are created and cookies are used. The information generated by the cookie about your use of this website, such as
- Browser type/version
- Operating system used
- Referrer URL
- Hostname of the accessing computer (IP address)
- Time of the server request
is transferred to a Google server in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities, and to provide further services related to website use and internet use for the purposes of market research and customizing these web pages. This information may also be transferred to third parties if required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other Google data. IP addresses are anonymized, so that assignment is not possible (IP masking).
You can prevent the installation of cookies by setting your browser software accordingly; however, please note that if you do this, you may not be able to use all the features of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website to Google and the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout?hl=en).
Alternatively to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking on the button below. An opt-out cookie will be set that prevents the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again. Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help (https://support.google.com/analytics/answer/6004245?hl=en).
IP Anonymization
We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities, and to provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Plugins and Tools
This site uses web fonts provided by Google for the uniform representation of fonts. When you access a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly.
For this purpose, the browser you are using must connect to Google's servers. This allows Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.
If your browser does not support web fonts, a standard font will be used by your computer.
For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and Google's privacy policy: https://www.google.com/policies/privacy.
In the context of the search for appraisal partners, we use the service of Search by LocationIQ.com, ipinfo.io und geonames.org.
Social Media Plugins
On our website, we use social media plugins from the social networks Facebook and Twitter based on Art. 6 para. 1 s. 1 lit. f DSGVO. The underlying promotional purpose is to be considered a legitimate interest within the meaning of the DSGVO. The responsibility for the data protection-compliant operation is to be guaranteed by their respective providers
On our website, social media plugins from Facebook are used to make their use more personal. We use the "LIKE" or "SHARE" button for this purpose. This is an offer from Facebook. When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the website. Through the integration of the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook account or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there. If you are logged in to Facebook, Facebook can directly associate your visit to our website with your Facebook account. If you interact with the plugins, for example by clicking the "LIKE" or "SHARE" button, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your Facebook friends.
Facebook may use this information for the purpose of advertising, market research, and tailoring Facebook pages to your needs. For this purpose, Facebook creates usage, interest, and relationship profiles, e.g., to evaluate your use of our website with regard to the ads displayed to you on Facebook, to inform other Facebook users about your activities on our website, and to provide further services related to the use of Facebook. If you do not want Facebook to associate the data collected via our website with your Facebook account, you must log out of Facebook before visiting our website. For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and settings options for protecting your privacy, please refer to Facebook's privacy policy (https://www.facebook.com/about/privacy/).
Our website includes plugins from the Twitter Inc. (Twitter) short message network. You can recognize Twitter plugins (tweet button) by the Twitter logo on our site. You can find an overview of tweet buttons here (https://about.twitter.com/resources/buttons). When you visit a page of our website that contains such a plugin, a direct connection is established between your browser and the Twitter server. Twitter receives the information that you have visited our site with your IP address. If you click on the Twitter "tweet button" while logged into your Twitter account, you can link the content of our pages to your Twitter profile. This allows Twitter to associate the visit to our pages with your user account. We would like to point out that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how it will be used by Twitter. If you do not want Twitter to be able to associate your visit to our pages, please log out of your Twitter user account. For more information, please refer to Twitter's privacy policy (https://twitter.com/privacy).
Rights of Data Subjects
As we process your personal data, you have the following rights:
Right to Information
You can request information about your personal data processed by us in accordance with Art. 15 of the GDPR. In particular, you can obtain information about the purposes of processing, the categories of personal data concerned, the categories of recipients to whom your data has been or will be disclosed, the envisaged storage period, the existence of the right to rectification, erasure, restriction of processing, or objection, the right to lodge a complaint, the source of your data if it was not collected by us, as well as the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the details thereof.
Correction
You have the right under Art. 16 of the GDPR to request the immediate correction of inaccurate or incomplete personal data stored by us.
Deletion
You have the right under Art. 17 of the GDPR to request the deletion of your personal data stored by us, unless processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Restriction of Processing
You have the right under Art. 18 of the GDPR to request the restriction of the processing of your personal data in cases where the accuracy of the data is contested by you, the processing is unlawful, but you oppose its erasure, and we no longer need the data, but you require it for the establishment, exercise, or defense of legal claims, or if you have objected to processing under Art. 21 of the GDPR.
Data Portability
According to Art. 20 of the GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format, or you can request the transmission of this data to another controller.
Revocation of Consent
According to Art. 7 para. 3 of the GDPR, you have the right to withdraw your consent to us at any time. This withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.
Right to Lodge a Complaint
According to Art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates data protection regulations. Typically, you can do this by contacting the supervisory authority in your habitual residence or place of work, or our company's registered office.
Right to Object
SIf your personal data is processed based on legitimate interests pursuant to Art. 6 para. 1 s. 1 lit. f of the GDPR, you have the right, according to Art. 21 of the GDPR, to object to the processing of your personal data, provided there are reasons arising from your particular situation or if the objection is against direct marketing. In the latter case, you have a general right to object that will be implemented by us without specifying any particular situation.
If you wish to exercise your right to withdraw or object, a notification by mail, fax, or email will suffice.
Data Protection in the Application Process
We process the personal data of applicants for the purpose of handling the application process. Processing may also be carried out electronically. This is particularly the case when an applicant submits relevant application documents to us electronically. If we conclude an employment contract with an applicant, the data transmitted will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no contract is concluded between the data controller and the applicant, the application documents will be deleted after the rejection decision is communicated, provided that there are no other legitimate interests of the data controller that oppose deletion. Another legitimate interest in this sense, for example, is the obligation to provide evidence in a proceeding under the General Equal Treatment Act (AGG).
Duration of Personal Data Storage
The criterion for the duration of the storage of personal data is the respective statutory retention period. After the expiry of the period, the corresponding data is routinely deleted, provided it is no longer required for contract fulfillment or initiation.
Data Security
During your website visit, we use the widely adopted SSL (Secure Socket Layer) protocol for encryption. Whether an individual page of our website is transmitted in encrypted form can be recognized by the closed display of the key or padlock symbol in the lower status bar of your browser.
We employ technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.