Legal

Data Protection Declaration

How personal data is processed and which rights you have.

Data Protection Declaration – Status 01.01.2025

I. Name and Address of the Controller

The Controller within the meaning of the General Data Protection Regulation and national data protection laws of the EU Member States as well as other data protection provisions is:

SELLERLOGIC GmbH
Willicher Str. 23-25
40547 Duesseldorf
Germany

E-Mail: [email protected]
Phone: +49 211 900 64 120

II. General Information on Data Processing

1. Scope of the Processing of Personal Data

As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as of our contents and services. The collection and use of personal data of our users or their data of third parties (e.g., Amazon, eBay, shop systems, etc.) is regularly only carried out on a contractual basis or after consent and authorisation of the user. An exception applies in those cases where obtaining prior consent is not possible for actual reasons and the processing of the data is permitted by legal provisions.

2. Legal Basis for the Processing of Personal Data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) lit. a EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the execution of pre-contractual measures.

If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.

If processing is necessary to protect a legitimate interest of our company or a third party and if the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) lit. f GDPR serves as the legal basis for the processing.

3. Data Erasure and Storage Period

The personal data of the data subject will be erased or barred as soon as the purpose of the storage ceases to apply. Storage may also be carried out if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the Controller is subject. The data will also be barred or erased if a storage period provided for by the aforementioned legislation expires, unless there is a need to continue storing the data for the purpose of concluding a contract, performing a contract or pursuing legal claims.

III. Provision of the Website and Creation of Log Files

1. Description and Scope of Data Processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data are collected:

Information about the type of browser and the version used
The user's operating system
The user's Internet service provider
The IP address of the user
Date and time of access
Websites from which the user's system accesses our website
Websites that are accessed by the user's system via our website.

These data are also stored in the log files of our system. These data are not stored together with other personal data of the user.

2. Legal Basis for Data Processing

The legal basis for the temporary storage of the data and the log files is Art. 6 (1) lit. f GDPR.

3. Purpose of the Data Processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimise the website and to ensure the security of our information technology systems.

These purposes are also our legitimate interest in data processing according to Art. 6 (1) lit. f GDPR.

4. Duration of Storage

The data will be erased as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after 10 days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

5. Possibility of Objection and Erasure

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

IV. The Use of Necessary Cookies

1. Description and Scope of Data Processing

Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user calls up a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data are stored and transmitted in the cookies:

Log-in information

2. Legal Basis for Data Processing

The legal basis for the processing of personal data using necessary cookies is Art. 6 (1) lit. f GDPR.

3. Purpose of the Data Processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some features of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a change of the website.

We require cookies for the following applications:

Provision of a closed user area.

The user data collected through technically necessary cookies are not used to create user profiles.

These purposes are also our legitimate interest in processing the personal data according to Art. 6 (1) lit. f GDPR.

4. Duration of Storage, Possibility of Objection and Erasure

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be erased at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all features of the website to their full extent.

V. Newsletter

1. Description and Scope of Data Processing

On our website, you have the option of subscribing to a cost-free newsletter. When registering for the newsletter, the data from the entries in the entry mask is transmitted to us.

Name
E-mail address

For the processing of the data, your consent is obtained during the registration process and reference is made to this Privacy Policy.

2. Legal Basis for Data Processing

After the user has registered for the newsletter the legal basis for the processing of data is Art. 6 (1) lit. a GDPR if the user has given his or her consent.

3. Purpose of the Data Processing

The collection of the user's e-mail address serves to deliver the newsletter.

4. Duration of Storage

The data are deleted as soon as it is no longer required to achieve the purpose for which it was collected. The user's e-mail address is therefore stored for as long as the subscription to the newsletter is active.

5. Possibility of Objection and Cancellation

The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, there is a corresponding link in each newsletter.

This also enables withdrawal of consent to the storage of personal data collected during the registration process.

VI. Contact Form and E-mail Contact

1. Description and Scope of Data Processing

Our website contains a contact form which can be used for electronic contact. If a user chooses this option, the data entered in the entry mask is transmitted to us and stored. These data are:

Company name and name
Address
e-mail address
mobile phone number
your message

For the processing of the data, your consent is obtained as part of the submission process and reference is made to this Privacy Policy.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data are used exclusively for processing the conversation.

2. Legal Basis for Data Processing

The legal basis for the processing of the data is Art. 6 (1) lit. a GDPR if the user has given his or her consent.

If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR.

3. Purpose of the Data Processing

The processing of the personal data from the entry mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data.

4. Duration of Storage

The data are deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the entry mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified.

5. Possibility of Objection and Erasure

The user has the possibility to withdraw his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time.

In such a case, the conversation cannot be continued.

All personal data stored in the course of contacting us will be erased in this case.

This does not apply if we are subject to applicable legal provisions regarding the storage of such messages. In this case, the messages will not be erased, but will only be kept for the purposes of storage.

VII. Registration

1. Description and Scope of Data Processing

On our website, we offer users the possibility to register for the offered service by providing personal data. The data are entered in an entry mask and transmitted to us and stored. The following data are collected in the registration process:

Name
Company
Address
e-mail address
mobile phone number

Furthermore, we also process for the same purposes the data that the user voluntarily provides during registration.

Initially the data are used by us to provide the respective user account for our services. They are stored in a central user account of the user and can be viewed, changed and updated there at any time.

For the purpose of billing, we also collect and process the user's payment data, namely the bank details provided by the user and any other payment and billing data.

For the purpose of billing costs for the use of the services, we use qualified payment providers to whom the payment data are passed on for the purpose of collecting the debt in the case of certain types of payment.

This applies in particular if legal requirements or internationally agreed financial security standards such as PCI DSS (Payment Card Industry Data Security Standard) make this necessary.

The data will also be processed for the purposes of direct marketing by telephone, email or via a messenger service, depending on the data provided by the user.

2. Legal Basis for Data Processing

The legal basis for processing the data to the aforementioned extent is the performance of a contract to which the user is a party or the carrying out of pre-contractual measures, Art. 6 (1) lit. b GDPR. The legal basis for the use for direct marketing purposes is our legitimate interest, Art. 6 (1) lit. f GDPR.

3. Purpose of Data Processing

Registration of the user is necessary for the performance of a contract with the user or for the carrying out of pre-contractual measures.

The provision of our services is a continuous obligation, which makes registration necessary. Registration of the user is necessary for the provision of certain content and services on our website.

4. Duration of Storage

The data are erased as soon as they are no longer required to achieve the purpose for which they were collected.

This is the case for data collected in the registration process for the performance of a contract or for the carrying out of pre-contractual measures with us when the data are no longer required for the performance of the contract. Even after the conclusion or termination of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations or to pursue legal claims.

5. Possibility of Objection and Erasure

As a user, you have the possibility to cancel your registration at any time. You can have the data stored about you changed at any time.

If the data are required for the performance of a contract or for the carrying out of pre-contractual measures, premature erasure of the data is only possible insofar as contractual or legal obligations do not preclude erasure.

You can object to the purposes of direct marketing at any time.

VIII. Use of Google Analytics for Web Analysis

This website uses Google Analytics, a web analytics service provided by Google, Inc. ("Google").

Google Analytics uses "cookies", which are text files stored on your computer, to enable an analysis of how users use the website. The personal data generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on this website, your IP address will, however, be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: Browser-Plugin https://tools.google.com/dlpage/gaoptout?hl=en-GB.

Google has certified itself under the EU-US Data Privacy Framework and is thus obliged to comply with European data protection legislation. With the decision of 10 July 2023 [C(2023) 4745 final], the European Commission has now declared the application of this agreement to be adequate in terms of EU data protection levels. We therefore assume that the data processing, in particular the setting of cookies, complies with EU law requirements. In the event that the legal situation should change due to new European case law and the level of data protection in the USA is no longer declared to be adequate under EU law, you can of course still, as always, revoke your express consent to processing.
In this case, processing would be carried out in accordance with the new legal situation, exclusively on the basis of Art. 49 (1) (a) GDPR and your existing consent. Until you withdraw your consent, however, the lawfulness of the processing would remain unaffected.

IX. Use of Hotjar

We use Hotjar to better understand the needs of our users and to optimise the offer on this website. Hotjar's technology gives us a better understanding of our users' experiences (e.g., how much time users spend on which pages, which links they click on, what they like and dislike etc.) and helps us to tailor our offer to our users' feedback.

Hotjar uses cookies and other technologies to collect information about our users' behaviour and about their devices (in particular, device IP address; collected and stored anonymously only), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for viewing our website).

Hotjar stores this information in a pseudonymised user profile. The information is neither used by Hotjar nor by us to identify individual users nor is it merged with other data about individual users. You can find more information in Hotjar's Privacy Policy: https://www.hotjar.com/privacy

You can object to the storage of a user profile and information about your visit to our website by Hotjar as well as to the setting of Hotjar tracking cookies on other websites by clicking on this opt-out link: https://www.hotjar.com/opt-out.

The storage of data and cookies is based on Art. 6 (1) lit. f GDPR. Storage is for an unlimited period of time, unless you make use of your opt-out options.

X. Use of user.com

We may use the information that user.com collects from you when you register, sign up for our newsletter, respond to a survey or marketing communication, browse the Website or use certain other features of the Websites as follows:

We use user.com to improve the user experience of our websites in order to provide you with a better service. The purpose of the data collection is to gain experience with segmentation and personalisation. This enables us to offer you the most interesting content and product offers. Likewise, user.com is used to administer promotions, surveys or other features of the websites, as well as to process your transactions quickly.

The following personal data may be stored:

City/ Region/ Country/ Time zone/ Browser/ Browser version/ Device/ Current URL/ First referring domain/ Operating system/ Referring domain/ Screen height/ Screen width/ Last visit/ First visit/ Web and mobile usage.

The storage of data and cookies is based on Art. 6 (1) lit. f GDPR.

The data of anonymous users are kept for 30 days, while the data of verified users are kept for 10 years, calculated from the beginning of the year following the year in which consent to the processing of personal data was given.

For more information, please see user.com's Privacy Policy:

https://user.com/en/privacy-policy

https://user.com/en/data-processing-addendum

You have the right to access the content of the data and to rectify, erase or restrict the processing, as well as the right to object, request the end of processing and data transfers, as well as the right to withdraw your consent at any time and to lodge a complaint with the Data Protection Officer of the country concerned.

For corrections, restrictions, objections, withdrawals, access or erasures, please direct your request to the email address of the Controller mentioned above.

XI. Use of LetterXpress

SELLERLOGIC uses LetterXpress, as a letter post service provider. LetterXpress guarantees international standards and a high level of IT security in accordance with DIN ISO 27001 and the GDPR. LetterXpress does not subcontract any printing and enveloping orders.

The following personal data will be transferred to LetterXpress:

Salutation/ Last name/ First name/ Company name/ Street/ House number/ Postcode/ City.

The letters sent by SELLERLOGIC to LetterXpress and the personal information thus transmitted shall be handled in accordance with the provisions of the General Data Protection Regulation. In addition, LetterXpress is certified according to the international standard for data protection and IT security DIN ISO / IEC 27001 and following. The guidelines and processes developed within the framework of this standard ensure a level of data protection that exceeds the basic requirements of Art. 32 GDPR.

All employees at LetterXpress have signed a data protection and confidentiality agreement and receive regular training.

You have the right to access the content of the data and to rectify, erase or restrict the processing, as well as the right to object, to request the end of processing and data transfer, as well as the right to withdraw your consent at any time and to lodge a complaint with the data protection officer of the country concerned.

For corrections, restrictions, objections, withdrawals, access or erasures, please direct your request to the email address of the Controller mentioned above.

XII. Use of Gravatar

We use the gravatar.com service as a third-party provider for the collection and processing of data on our website. Gravatar is a service provided by Automattic Inc. that allows users to create and display personalised profile pictures (avatars) associated with their email address.
The purpose of its use is to allow you to connect a profile picture (avatar) to your email address. If you leave a comment on our site using the same email address as your Gravatar account, your profile picture will be displayed next to your comment.
The following personal data is transferred to Gravatar: email address and IP address. If you use an email address registered with Gravatar and leave a comment on our website, additional data will be transmitted to Gravatar, stored and processed. This data includes, among other things, information on user behaviour and other details such as browser type, a unique device identifier, preferred language, date and time of page visit, operating system and mobile network information. Gravatar uses this information to improve its own services and offers and to gain a better understanding of how its service is used.
Gravatar deletes your data when it is no longer needed for the purposes for which it was collected and used. The use of this data by gravatar.com is subject to the privacy policy of Automattic Inc. For more information, please refer to the Automattic Inc. privacy policy. We have no direct access to the data collected by secure.gravatar.com and have no control over how Automattic Inc. uses that data. We encourage you to review Automattic Inc.'s privacy policy to learn more about their privacy practices: https://automattic.com/privacy/.

Data and cookies are stored on the basis of Art. 6 (1) lit. f DSGVO.

Please note that using Gravatar and displaying your profile picture alongside your comments is optional. If you do not wish to do so, you can leave a comment without linking to your Gravatar account.

You have the right to access the content of the data and to correct, delete or restrict the processing, as well as the right to object, to request the cessation of the processing and data transfer, and the right to revoke your consent at any time and to file a complaint with the data protection officer of the country concerned.
Please contact the controller named above for any corrections, restrictions, objections, revocations, access or deletions.

XIII. Use of Cloudfront

We use the service CloudFront (https://aws.amazon.com/cloudfront/?nc1=h_ls) as a third-party provider for the collection and processing of data on our website. CloudFront is a content delivery network (CDN) from Amazon Web Services (AWS) that is used to deliver content more efficiently and to improve the loading times of our website.
The purpose of its use is to deliver static content such as images, scripts and files to our visitors faster and more efficiently. This enables improved performance and a smooth browsing experience on our website.

Please note that CloudFront may collect certain information about you, such as your IP address, browser information and access times. Amazon Web Services (AWS) privacy policy applies to the use of this data by CloudFront. For more information, please refer to the AWS privacy policy: https://aws.amazon.com/privacy/?nc1=h_ls.

We do not have direct access to the data collected by CloudFront and have no control over how Amazon Web Services (AWS) uses this data. We recommend that you read the AWS privacy policy to learn more about their data protection practices.
Data and cookies are stored on the basis of Art. 6 (1) lit. f DSGVO.

Please note that the use of CloudFront is purely technical and has no direct personal reference. However, the provision and delivery of content via the Content Delivery Network helps to improve the performance of our website.
You have the right to access the content of the data and to correct, delete or restrict the processing, as well as the right to object, to request the cessation of processing and data transfer, as well as the right to revoke your consent at any time and to file a complaint with the data protection officer of the country concerned.
Please contact the controller named above for any corrections, restrictions, objections, revocations, access or deletions.

XIV. Use of Cloudflare

We use the service CloudFlare (https://www.cloudflare.com/en-gb/multi-cloud/aws/) as a third-party provider and global edge network to reduce loading times and improve the user experience of our website. CloudFlare is an additional security layer that provides protection against DDoS attacks. The purpose of use is content acceleration and improved protection. This enables improved performance and a smooth browsing experience on our website.
Please note that CloudFlare may collect certain information about you, such as your IP address, browser information and access times. CloudFlare's use of this information is subject to the Amazon Web Services (AWS) privacy policy.

For more information, please refer to the AWS privacy policy: https://aws.amazon.com/de/compliance/data-privacy/

or
https://www.cloudflare.com/en-gb/privacypolicy/

We do not have direct access to the data collected by CloudFlare and have no control over how Amazon Web Services (AWS) uses that data. We encourage you to read the AWS Privacy Policy to learn about their privacy practices.
Data and cookies are stored on the basis of Art. 6 (1) lit. f DSGVO.

Please note that the use of CloudFlare is purely technical and has no direct personal reference. However, the provision and delivery of content helps to improve the performance of our website.
You have the right to access the content of the data and to correct, delete or restrict the processing, as well as the right to object, to request the cessation of processing and data transfer, as well as the right to revoke your consent at any time and to file a complaint with the data protection officer of the country concerned.
Please contact the controller named above for any corrections, restrictions, objections, revocations, access or deletions.

XV. Use of Amazon Web Services

We use the Amazon Web Services service as a third-party provider for the collection and processing of data on our website. This service is provided by Amazon Web Services (AWS) and is used to store and provide files such as images, documents and other content.

The purpose of this use is to store files and content that are integrated into our website securely and reliably. This includes, for example, images for products, instructions, documents or other resources provided by our website.

Please note that Amazon Web Services acts as a purely technical service and does not collect or process any personal data directly. It is a storage service designed to host the files we provide in a secure and efficient manner.
We do not have direct access to the data stored by Amazon Web Services and have no control over how Amazon Web Services (AWS) uses that data. We encourage you to review the AWS Privacy Policy to learn about their privacy practices: https://aws.amazon.com/privacy/?nc1=h_ls

Data and cookies are stored on the basis of Art. 6 (1) lit. f DSGVO.
Please note that the use of Amazon Web Services in the case described above is of a purely technical nature and has no direct personal reference. The purpose is to provide a secure and reliable storage solution for the content of our website.

Please contact the above-mentioned data controller for any corrections, restrictions, objections, revocations, access or deletions.

XVI. Use of Conversion Tracking

1. Use of Google Ads Conversion Tracking

We use the online advertising programme "Google Ads" on our website and in this context conversion tracking. Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data.

Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and complying with the applicable data protection laws.

When you click on an ad placed by Google, a cookie for conversion tracking will be placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we will be able to recognise that you clicked on the ad and were redirected to that page.

Each Google Ads customer receives a different cookie. Thus, there is no possibility that cookies can be tracked across Ads customers' websites. The information obtained with the means of the conversion cookie is used to create conversion statistics.

Herewith we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. We do not, however, receive any information with which users can be personally identified. Your personal data may be transferred to the USA.

Google is certified under the EU-US Data Privacy Framework and is therefore obliged to comply with European data protection legislation. By decision of 10 July 2023 [C(2023) 4745 final], the European Commission has now declared that this agreement provides an adequate level of data protection within the EU. We therefore assume that the data processing, in particular the setting of cookies, complies with EU law.

You can find more information and Google's Privacy Policy at: https://policies.google.com/privacy?hl=en-US

2. Use of X Ads and X Analytics

Since Twitter was rebranded, we have been using 'X Ads' and 'X Analytics' on our website, both of which are services provided by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland (hereinafter referred to as: 'Twitter'). X Ads & X Analytics store and process information about your user behaviour on our website.

For this purpose, X Ads & X Analytics use, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your device and that enable an analysis of your use of our website.

We use X Ads & X Analytics for marketing and optimisation purposes, in particular to analyse the use of our website and to continuously improve individual features and offers as well as the user experience. By the statistical evaluation of user behaviour, we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 (1) lit. f GDPR.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all the features of our website to their full extent. You can also prevent the collection of the aforementioned information by Twitter by setting an opt-out cookie on one of the websites linked below:

We would like to inform you that this setting will be deleted when you delete your cookies. You can object to the collection and forwarding of personal data or prevent the processing of this data by deactivating the execution of Java Script in your browser. In addition, you can prevent the execution of Java-Script code altogether by installing a Java-Script blocker (e.g. https://noscript.net/ or https://www.ghostery.com). Please note that in this case you may not be able to use all the features of our website to their full extent.

X Corp. (formerly Twitter Inc.) has certified itself under the EU-US Data Privacy Framework and is therefore obliged to comply with European data protection legislation. With the decision of 10 July 2023 [C(2023) 4745 final], the European Commission has now declared the application of this agreement to be an adequate EU data protection level. We therefore assume that the data processing, in particular the setting of cookies, complies with EU law requirements.

In the event that the legal situation should change due to new European case law and the level of data protection in the USA is no longer declared to be adequate under EU law, you can of course still, as always, revoke your express consent to processing. In this case, a processing would take place in this case of a new legal situation exclusively on the basis of Art. 49 (1) lit. a GDPR and your existing consent. Until you revoke your consent, however, the lawfulness of the processing remains unaffected.

Further information can be found in the following linked entry:

https://www.dataprivacyframework.gov/list (search for X Corp.)
Information from the third-party provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. You can find information from the third-party provider on data protection on the following website: https://x.com/en/privacy

3. Use of LinkedIn Ads

We use the LinkedIn Ads service of LinkedIn Ireland Unlimited Company in Ireland. LinkedIn sets cookies in the process.

Further information on data protection at LinkedIn can be found in the LinkedIn Privacy Policy here: https://www.linkedin.com/legal/privacy-policy

You can prevent the storage of cookies by setting your browser accordingly. You can object to the analysis of your user behaviour by LinkedIn as well as the display of interest-based recommendations here: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

When using the service provider LinkedIn Ads, personal data are transferred to a third country outside the EU. An agreement on processing on behalf of a controller in accordance with Art. 28 GDPR has been signed.

The service provider LinkedIn Corporation has an EU-US Data Privacy Framework certification and is therefore obliged to comply with European data protection legislation. In its decision of 10 July 2023 [C(2023) 4745 final], the European Commission declared the application of this agreement to be an adequate EU level of data protection. Accordingly, there are appropriate safeguards for the transfer of data in accordance with Art. 45 GDPR and the data processing, in particular the setting of cookies, is carried out in accordance with European requirements.

XVII. Use of Remarketing and Custom Audiences

1. Use of the Remarketing or "similar target groups" Function of Google Inc.

We use the remarketing or "similar target groups" function of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data.

Google Ireland Limited is therefore the company affiliated with Google which is responsible for processing your data and complying with the applicable data protection laws. The application serves the purpose of analysing visitor behaviour and visitor interests. Google uses cookies to carry out the analysis of website usage, which forms the basis for the creation of interest-based advertisements. The cookies are used to record visits to the website as well as anonymised data on the use of the website.

No personal data of visitors to the website is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas. Your personal data may be transferred to the USA.

Google has certified itself under the EU-US Data Privacy Framework and is therefore obliged to comply with European data protection legislation. With the decision of 10 July 2023 [C(2023) 4745 final], the European Commission has now declared that this agreement is adequate for the EU data protection level. We therefore assume that the data processing, in particular the setting of cookies, complies with EU law requirements.

In the event that the legal situation should change due to new European case law and the level of data protection in the USA is no longer declared to be adequate under EU law, you can of course still, as always, revoke your express consent to processing. In this case, processing would be carried out in accordance with the new legal situation, exclusively on the basis of Art. 49 (1) (a) GDPR and your existing consent. However, until you withdraw your consent, the lawfulness of the processing would remain unaffected.

You can find more information on Google Remarketing and the associated Privacy Policy at: https://www.google.com/privacy/ads/

2. Use of Meta Platforms Inc. Remarketing

We use the "Custom Audiences" remarketing function of Meta Platforms Inc. (1 Meta Way, Menlo Park, CA 94025, USA; "Facebook"). The application serves the purpose of targeting visitors to the website with interest-based advertising on the Facebook social network. For this purpose, the Facebook remarketing tag has been implemented on the website. This tag establishes a direct connection to the Facebook servers when the website is visited. This transmits to the Facebook server which of our pages you have visited.

Facebook assigns this information to your personal Facebook user account. When you visit the Facebook social network, you will then be shown personalised, interest-related Facebook ads. Your personal data may be transferred to the USA.

Meta Platforms, Inc. ('Meta') has certified itself under the EU-US Data Privacy Framework and is therefore obliged to comply with European data protection legislation. By decision of 10 July 2023 [C(2023) 4745 final], the European Commission has now declared that this agreement provides an adequate level of data protection under EU law. We therefore assume that the data processing, in particular the setting of cookies, complies with EU law requirements.

In the event that the legal situation should change due to new European case law and the level of data protection in the USA is no longer declared to be adequate under EU law, you can of course still, as always, revoke your express consent to processing. In this case, processing would be carried out in accordance with the new legal situation, exclusively on the basis of Art. 49 (1) (a) GDPR and your existing consent. However, until you withdraw your consent, the lawfulness of the processing would remain unaffected.

For more information on the collection and use of data by Meta or Facebook, your rights in this regard and options for protecting your privacy, please refer to Facebook's Privacy Policy at https://www.facebook.com/about/privacy/.

XVIII. Prevention of Bots and Spamming

To protect our IT infrastructure, we use the "reCAPTCHA" technology of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). The purpose of the service is to distinguish whether the entry into a form is made by a human or by automated, machine entry. Personal data are transmitted to Google and processed there.

The integration of this service takes place within the EU on the basis of Art. 6 (1) lit. f GDPR. Our legitimate interest is to deliver an appropriately secured website.

Google is certified under the EU-US Data Privacy Framework and is therefore obliged to comply with European data protection regulations. With the decision of 10 July 2023 [C(2023) 4745 final], the European Commission has now declared that this agreement provides an adequate level of data protection according to EU data protection standards. We therefore assume that the data processing, in particular the setting of cookies, complies with EU law requirements. Of course, you can still revoke your consent to processing at any time, without affecting the legality of the processing carried out on the basis of your consent up to the point of revocation.

If you do not wish to use 'reCAPTCHA', the form input function may not be operational.

You can find more information and Google's Privacy Policy at: https://policies.google.com/privacy?gl=de&hl=en-GB

XIX. Our Online Presence in Social Media

Our company is also active within social networks and other platforms in order to be able to interact with the users there. We provide information about our range of services there.

The platforms are also operated by companies based outside the European Union. Therefore, user data may be processed outside the European Union.

Provided that operators of social networks or platforms from the United States are certified under the new EU-US Data Privacy Framework, they are deemed to provide an adequate level of data protection in line with EU data protection requirements pursuant to the European Commission's Adequacy Decision of 10 July 2023 [C(2023) 4745 final].

When visiting the social networks, user data may be collected and processed for market research and advertising purposes. This data enables us to create user profiles from the user behaviour and derived interests of the users. These in turn can be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users.

Cookies are generally used for these purposes to store the user behaviour and the interests of the users.

The processing of users' personal data is usually based on our legitimate interests in effectively informing users and communicating with them pursuant to Art. 6 (1) lit. f. GDPR.

If the users are asked by the respective providers of the platforms for consent to the aforementioned data processing, the legal basis of the processing is Art. 6 (1) lit. a. GDPR.

For a detailed presentation of the respective processing and the options for objection and consent, you will find an overview of the individual providers below:

Meta Platforms Inc., formerly Facebook (1 Meta Way, Menlo Park, CA 94025, USA):

Data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum

https://www.facebook.com/about/privacy

Opt-out option: https://www.facebook.com/settings?tab=ads

Data Privacy Framework certification:

https://www.dataprivacyframework.gov/list (Search Meta Platforms Inc.)

Google/ YouTube (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland)

Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=en-GB

Data Privacy Framework certification:

https://www.dataprivacyframework.gov/list (Search Google LLC)

Meta Platforms Inc., formerly Instagram (1 Meta Way, Menlo Park, CA 94025, USA)

X Corp., formerly Twitter (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Twitter International Unlimited Company, One Cumberland Place, Fenian Street, D02 AX07, Dublin, Irland)

Opt-out option: https://x.com/settings/account/personalization

Data Privacy Framework certification:

https://www.dataprivacyframework.gov/list (Search X Corp.)

Pinterest (Pinterest Inc., 651 Brannan St., San Francisco, CA 94107, USA; Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irland)

LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)

Opt-Out option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Data Privacy Framework certification:

https://www.dataprivacyframework.gov/list (Search LinkedIn Corporation)

Xing (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany)

https://privacy.xing.com/en/privacy-policy

XX. Applicant Data

1. Description and Scope of Data Processing

Personal data is information about the personal or factual circumstances of an identified or identifiable natural person. This includes information such as your name, address, telephone number and date of birth, but also data about your specific career, etc., which can be assigned to a specific person with reasonable effort. Information that is not (un)indirectly associated with your real identity, on the other hand, is not personal data.

In this context, you provide us with personal data which we use and store exclusively for the purpose of your job seeking/application.

In particular, the following data will be collected:

Name (first and last name)
E-mail address
Telephone number
Medium, how you became aware of us

You also have the option of uploading meaningful documents such as a cover letter, your CV and references. These may include further personal data such as date of birth, address, etc.

Only authorised employees from the HR department or employees involved in the application process have access to your data.

2. Legal Basis for Data Processing

The legal basis for the processing of personal data in the application process is Art. 88 (1) GDPR (opening clause) and § 26 (1) German Federal Data Protection Act, where applicable.

3. Purpose of Data Processing

If you apply to us electronically, i.e. by e-mail or via our web form, we will collect and process your personal data for the purpose of processing the application procedure and carrying out pre-contractual measures.

By submitting an application on our recruiting page, you express your interest in taking up employment with us. Personal data are stored exclusively for the purpose of filling the vacant position for which you have applied.

4. Duration of Storage

Your data will be stored for a period of 90 days exceeding the end of the application process. As a rule, this is done to fulfil legal obligations or to defend against any claims arising from legal provisions. We are then obliged to erase or anonymise your data. In this case, the data are only available to us as so-called metadata for statistical evaluations (for example, proportion of women or men in applications, number of applications per period, etc.) without direct personal reference.

If there is a legal obligation to retain data that prevents erasure (e.g. receipts for reimbursement of travel expenses), we will initially only bar your data and only erase them after the legal obligation to retain data has expired.

5. Transfer of Data to Third Parties

The data transmitted in the context of your application will be transferred via TLS encryption and stored in a database. This database is operated by Personio SE & Co. KG ("Personio"), which offers personnel administration and applicant management software (https://www.personio.de/impressum/). Personio is in this context our processor on behalf of the controller in accordance with Art. 28 GDPR. The basis for the processing here is an agreement on processing on behalf of the controller between us as the Controller and Personio.

XXI. Integration of Third-Party Content

This website uses content provided by third parties. This concerns in particular the integration of content from our social media presences or videos on our pages.

However, this technically implies that the third-party providers of this content can see the IP address of the users, as without the IP address they cannot send the content to their browser. The IP address is thus required for the display of this content.

The integration of this content is based on Art. 6 (1) lit. f GDPR. Our legitimate interest is to deliver an attractively designed website.

XXII. Rights of the Data Subject

If your personal data are processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the Controller:

1. Right of Access

You may exercise your right of access in accordance with Art. 15 GDPR at any time as to whether personal data relating to you is being processed by us.

2. Right to Rectification

You may exercise your right to rectification in accordance with Art. 16 GDPR at any time and request that we correct any inaccurate personal data relating to you.

3. Right to Restriction of Processing

You may exercise your right to restrict processing in accordance with Art. 18 GDPR at any time and request the restriction of processing, provided that the legal requirements for this are met.

4. Right to Erasure

You may exercise your right to erasure in accordance with Art. 17 of the GDPR at any time and request that personal data relating to you be erased without delay if such data are no longer necessary for the purposes for which they were collected or otherwise processed.

5. Right to Information

You may exercise your right to information in accordance with Art. 19 GDPR at any time. If you have exercised a right to rectification, erasure or restriction of processing against us, we are obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

6. Right to data portability

You may exercise your right to data portability in accordance with Art. 20 GDPR at any time. You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller, insofar as this is technically feasible.

7. Right to Object

Pursuant to Art. 21 GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out according to Art. 6(1) lit. e or lit. f GDPR; this also applies to profiling based on these provisions.

The Controller shall no longer process your personal data unless he can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If your personal data are processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing;

this also applies to profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by automated means using technical specifications.

8. Right to Withdraw Consent under Data Protection Law

In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent under data protection law at any time. The withdrawal of the consent does not affect the lawfulness of processing based on consent before the withdrawal.

9. Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your residence, place of work or place of the alleged infringement, pursuant to Art. 77 GDPR, if you consider that the processing of your personal data infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.