Privacy Policy.

We, the BGK GmbH & Co. KG consultant for corporate development, is pleased about your visit to our website. Below we inform about the collection of personal data when using our website.

This data protection declaration clarifies online data processing operations, in which personal data is processed. Also you will receive information about our processing operations that are not primarily online.

i. "Personal data" are all individual details that allow conclusions to be drawn about a natural person (definition see Art. 4 (1) GDPR). These include, for example, names, e-mail addresses, telephone numbers, but also data such as IP addresses or customer numbers.
ii. The "processing of personal data" includes all processes, such as the collection, storage, transmission, archiving or deletion of personal data (definition Art. 4 (2) GDPR).
iii. The "data subject" in the sense of data protection law is any natural person from whom personal data is processed.
iv. Further definitions of terms can be found in the General Data Protection Regulation, which can be found in Article 4 of the GDPR (Definitions).

The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is the:

BGK GmbH & Co. KG
Weilimdorfer Str. 74/3
D-70839 Gerlingen
Tel: +49(0)7156/92610
Mail: info@bgk-p.de

We have appointed a data protection officer. This is attorney Thomas Lang and you can reach him at the contact details above.

The following contents will give you a brief overview of the processing of personal data, more detailed information can be found in the respective detailed passages.

Security on our website (SSL Secure Socket Layer)
Our website is equipped with an SSL certificate, which is used to encrypt data transmission processes. This happens, for example, when you send us a message via a form. However, we would like to point out as a precaution that one hundred percent security is not possible in electronic data processing and that there is always a residual risk.

Data that you transmit to us
On this page we process the data that you enter yourself, for example in a form. In this case, the purpose of the processing results from the type of form and from this data protection declaration. Even if, for example, you send us a message by e-mail or otherwise contact us, we process your data in accordance with the purpose of the contact.

Automatic Server Log Files
On the other hand, our server automatically records all access and thus also IP addresses (log files), which serves to defend against attacks, analyze access figures and ensure smooth operation.

Use of Cookies
Cookies help us to provide various services, more detailed information can be found in this privacy policy.

Sharing and Like Buttons
We partly use sharing buttons of social networks using the two-click solution. With this method, data connections and cookies from social networks are only activated after clicking on the respective button.

Analysis and Tracking Tools
In addition to the pure server log files, which also provide us with information about page views, we use the tracking tool Google Analytics. This tool gives us detailed insights into the content visited on our site, the flow of behaviour and, for example, the country from which access took place. For such services to work, cookies must be set on the site visitor.

Direct Marketing
Direct marketing to existing customers in the legitimate interest of We reserve the right to send our customers newsletters based on §7 Abs. 3 UWG ui.v.m Art. 6 Abs. 1 lit. f GDPR. You can, of course, object to receiving direct marketing information from us at any time.

Other data recipients
a) the use of processors We use contract processors in accordance with the requirements of Art. 28 GDPR, for example in the area of IT services, web hosting, e-mail hosting or printing services. They process personal data for us in accordance with instructions.

b) Utilisation of external services If it is necessary (for example for the execution of a contract), we pass on your data to banks, other payment service providers or shipping service providers.

General Information on Deletion Periods for Personal Data
We process the data as long as this is necessary for the respective purpose. If necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract, in addition we are obliged to comply with legal storage obligations. If the data processing is based on your consent, we will delete your data after your revocation.

Transfer of personal data to a third country
We try to have as many service providers and services as possible provided by providers within the European Union. A transfer to a third country is possible if you have given us your consent and/or we have concluded a contract for order processing in accordance with Art. 28 GDPR, taking into account appropriate guarantees. In individual cases, we may use plug-ins or tools hosted in third countries, but we use them on the basis of our legitimate interests. In such cases, we may draw attention to the circumstances.

Obligation to provide personal data
The provision of personal data is regularly necessary for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the necessary personal data, it is not possible for us to conclude and fulfil a contract with you.

The legal bases for the processing of personal data are exceptions allowing the processing of personal data. The essential legal bases are shown in particular in Art. 6 GDPR. The legal basis according to which we process personal data is described in the individual processing operations in this Privacy Policy.
- Your Consent cane be one of these legal bases and requires that the consenting person gives its consent in an informed and voluntary manner. Given Consent on the basis of Art. 6 (1) (a) GDPR is revocable at any time without stating reasons.

- The processing of personal data for the initiation or implementation of contracts is also a legal basis and is described in Art. 6 para. 1 lit. b GDPR defined.

- The exception of data processing due to a legal obligation can be found in Art. 6 para. 1 lit. c GDPR, for example, we are obliged to observe certain retention periods under commercial law and tax law.

- The processing of personal data on the basis of a weighing of interests pursuant to Art. 6 para. 1 lit. f GDPR allows processing after careful consideration of financial or legal interests against the legitimate interests of the data subject. 

Every natural person has certain rights, which are defined in particular in Articles 15 to 21 and 77 of the GDPR. In principle, you have the following rights that you can claim against us.

i. Right to information (see Article 15 GDPR) You have the right at any time to request information about the data processed by you and the purpose of the processing.
ii. Right to rectification (see Art. 16 GDPR) If you find that we process incorrect or incomplete information about you, you are entitled to rectification.
iii. Right to cancellation (see Art. 17 GDPR) You have the right at any time to request the deletion of your personal data, which we process through you.
iv. Right to limitation of processing / blocking (see Art. 18 GDPR) If, for example, we are unable to delete your personal information due to legal retention periods, you may exercise your right of restriction. Your data will then be blocked for all other processing purposes. We may also temporarily restrict your data, for example, until the examination and processing of your objection.
v. Right to data portability (see Article 20 GDPR) You have the right that we transfer your data in a machine-readable format to another company, insofar as this is possible with reasonable effort.
vi. Right to object to certain processing operations and direct mail (see Art. 21 GDPR) Art. 21 (1) - You may at any time make use of your opposition, this is particularly relevant if the processing is carried out on the basis of Article 6 (1) (e) or (f) GDPR. This includes processing for profiling purposes. If we can prove compelling reasons for the processing which outweigh your interests or the processing of the enforcement of legal claims, whose exercise or defense serves, we can reject your objection in the individual case. Art. 21 para. 2 - You may also object at any time to the processing for purposes of direct mail, this also includes a profile related to direct mailing. We will investigate your objection at any time and will not process your data for these purposes.
vii. Right of appeal to a supervisory authority (see Art. 77 GDPR) You always have the right to complain to the Data Protection Supervisor about the processing of your personal data.

Our web server automatically logs all access and thus also the IP addresses of the visitors. This is used to defend against attacks, the analysis of traffic and smooth operation. We have a legitimate interest in this (Article 6 (1) (f) GDPR).
In addition to the IP address, the server log also records additional session metadata, which you will find below.

- Date and time of retrieval
- Information about the browser type and the browser version used
- Information about the operating system used
- if necessary device (client)
- Refferer URL (about which page you have landed with us)

We process this data only for the above purposes. We delete server log files after six months at the latest.

Our websites and pages use what the industry refers to as “cookies.” Cookies are small text files that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them or they are automatically eradicated by your web browser.
In some cases it is possible that third party cookies are stored on your device once you enter our site (third party cookies). These cookies enable you or us to take advantage of certain services offered by the third party (e.g. cookies for the processing of payment services).
Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of the cookies (e.g. the shopping cart function or the display of videos). The purpose of other cookies may be the analysis of user patterns or the display of promotional messages.
Technically essential cookies (e.g. shopping cart cookies) are archived on the basis of Art. 6 Sect. 1 lit. f GDPR. We have a legitimate interest in storing these cookies to ensure the technically error-free and optimized delivery of our services. Other cookies are stored only subject to your consent on the basis of Art. 6 Sect. 1 lit. a GDPR. You do have the right to revoke such consent at any time, which will affect all future data transactions.
You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.
In the event that third party cookies are used or if cookies are used for analytical purposes, we will separately notify you in conjunction with this Data Protection Policy and, if applicable, ask for your consent.

Contact form
If you submit inquiries to us via our contact form, the information provided in the contact form as well as any contact information provided therein will be stored by us in order to handle your inquiry and in the event that we have further questions. We will not share this information without your consent.
The processing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 Para. 1 lit. f GDPR) or on your agreement (Art. 6 Para. 1 lit. a GDPR) if this has been requested.

The information you have entered into the contact form shall remain with us until you ask us to eradicate the data, revoke your consent to the archiving of data or if the purpose for which the information is being archived no longer exists (e.g. after we have concluded our response to your inquiry). This shall be without prejudice to any mandatory legal provisions – in particular retention periods.

Request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your request, including all resulting personal data (name, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.
The processing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, the processing is based on your consent (Article 6 (1) a GDPR) and/or on our legitimate interests (Article 6 (1) (f) GDPR), since we have a legitimate interest in the effective processing of requests addressed to us.
The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Direct advertising to existing customers in the legitimate interest of the customer
We reserve the right to use the data collected on the occasion of a sales contract or service contract for direct advertising by e-mail or post in accordance with § 7 paragraph 3 UWG if the customer does not object to this use or has objected.
Direct advertising exclusively includes offers for similar products or services, such as the products or services already purchased from us by the user. We have a legitimate economic interest (Art. 6 Para. 1 lit. f GDPR) in our customers' information on new products and the improvement of our services.

You can, of course, object to receiving direct mail at any time. Please address your objection to the above-mentioned responsible body.

Job Applications

We offer website visitors the opportunity to submit job applications to us (e.g. via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

Scope and purpose of the collection of data
If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 New GDPR according to German Law (Negotiation of an Employment Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.
If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 New GDPR and Art. 6 Sect. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing system.

Data Archiving Period
If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agreement (Article 6 (1) (a) GDPR) or if statutory data retention requirements preclude the deletion.

Admission to the applicant pool
If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.
Admission to the applicant pool is based exclusively on your express agreement (Art. 6 para. 1 lit. a GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. The affected person can revoke his agreement at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored.
The storage of Google Analytics cookies and the utilization of this analysis tool are based on Art. 6 Sect. 1 lit. f GDPR. The operator of this website has a legitimate interest in the analysis of user patterns to optimize both, the services offered online and the operator’s advertising activities. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.

IP anonymization
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyse your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in
You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent. Moreover, you have the option prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Objection to the recording of data
You have the option to prevent the recording of your data by Google Analytics. For this purpose, an opt-out cookie must be set, which prevents the collection of your data during future visits to this website.
For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing
We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

Demographic parameters provided by Google Analytics
This website uses the function “demographic parameters” provided by Google Analytics. It makes it possible to generate reports providing information on the age, gender and interests of website visitors. The sources of this information are interest-related advertising by Google as well as visitor data obtained from third party providers. This data cannot be allocated to a specific individual. You have the option to deactivate this function at any time by making pertinent settings changes for advertising in your Google account or you can generally prohibit the recording of your data by Google Analytics as explained in section “Objection to the recording of data”.

Archiving period
Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: https://support.google.com/analytics/answer/7667196?hl=en

Cookiebot

We use the external web service Cookiebot of Cybot A/S (www.cookiebot.com/de) to inform you about the cookies used on our website and to obtain your consent to the use of cookies. To store your consent, a permanent cookie called "CookieConsent" is stored in your browser.
The following data will be automatically logged by Cybot A/S:
- IP number of the end user in anonymous form (the last three digits are set to '0')
- Date and time of consent
- User agent of the end user's browser
- URL from which the consent was sent
- An anonymous, random and encrypted key
- Consent status of the end user serving as proof of consent

The information generated by the cookie is not used to personally identify the visitor to this website and is not merged with personal data about the bearer of the pseudonym.
If you do not consent to the storage of this data, you can object to its storage at any time by clicking on the mouse as described above. In this case, a so-called opt-out cookie is stored in your browser, which means that Cookiebot only provides cookies for the technically error-free and optimised provision of the website. Please note that the complete deletion of your cookies means that the opt-out cookie is also deleted and may have to be reactivated by you.

Storage period
The permanent cookie called "CookieConsent" by Cookiebot is automatically deleted after 12 months unless you delete it beforehand via the browser setting. You can delete cookies at any time in the security settings of your browser.

Third country transfer
The data collected by Cybot A/S is stored on servers within the EU. No third country transfer takes place through the use of Cookiebot. Cookiebot uses trusted subcontractors within the EU to provide its cloud-based services. For more details, please refer to Cookiebot's Privacy Policy: www.cookiebot.com/de/privacy-policy/

YouTube

This website embeds videos of the website YouTube. The website operator is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
If you visit a page on this website into which a YouTube has been embedded, a connection with YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited.
Furthermore, YouTube will be able to place various cookies on your device. With the assistance of these cookies, YouTube will be able to obtain information about this website's visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud. These cookies will stay on your device until you delete them.If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time.
For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

Social media plug-ins with a two-click solution

Social media plugins are used on this website (Facebook, Twitter, XING, LinkedIn).
You can usually recognize the plugins by their social media logos. In order to guarantee data protection on this website, we only use these plugins together with the so-called two-click solution. This application prevents the plugins integrated on this website from transferring data to the respective provider the first time you enter the site.
Only when you activate the respective plugin by clicking the corresponding button will a direct connection to the provider's server be established (consent). As soon as you activate the plugin, the respective provider receives the information that you have visited this website with your IP address. If you are logged in to your respective social media account (e.g. Facebook) at the same time, the respective provider can assign the visit to this website to your user account.
Activating the plug-in constitutes consent within the meaning of Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future.

We have no influence on the collected data and data processing operations, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. Also for the deletion of the raised data by the Plug-in offerer no information is present to us.
The plug-in provider stores the data collected about you as user profiles and uses these for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation takes place in particular (also for users who are not logged in) in order to display demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact the respective plug-in provider to exercise this right. Through the plug-ins, we offer you the opportunity to interact with social networks and other users so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 Para. 1 S. 1 lit. f GDPR.

The data transfer takes place regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, your data collected by us will be assigned directly to your existing account with the plug-in provider. If you press the activated button and, for example, link the page, the plug-in provider also stores this information in your user account and communicates it publicly to your contacts. We recommend that you log out regularly after using a social network, but especially before activating the button, as this allows you to avoid being assigned to your profile by the plug-in provider.
Further information on the purpose and scope of data collection and processing by the plug-in provider can be found in the following data protection declarations of these providers. There you will also find further information on your rights in this regard and setting options to protect your privacy.
Addresses of the respective plug-in providers and URL with their data protection information:
a) Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy.php further information on data collection: http://www.facebook.com/help/186325668085084, http://www.facebook.com/about/privacy/your-info-on-other#applications sowie http://www.facebook.com/about/privacy/your-info#everyoneinfo. Facebook has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
b) X Corp. (Twitter, Inc.), 1355 Market St, Suite 900, San Francisco, California 94103, USA; https://twitter.com/privacy. Twitter has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.
c) Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.
d) LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA; http://www.linkedin.com/legal/privacy-policy. LinkedIn has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework.

Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below.
Social networks such as Facebook, Google+ etc. can generally analyse your user behaviour comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Please also note that we cannot retrace all processing operations on the social media portals. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal basis
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).

Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook).
Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.

Storage time
The data collected directly from us via the social media presence will be deleted from our systems as soon as the purpose for their storage lapses, you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Mandatory statutory provisions - in particular, retention periods - remain unaffected.
We have no control over the storage duration of your data that are stored by the social network operators for their own purposes. For details, please contact the social network operators directly (e.g. in their privacy policy, see below).

Individual social networks

Facebook
We have a profile on Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
- According to Facebook’s statement the collected data will also be transferred to the USA and to other third party countries
- You can customise your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings?tab=ads
- Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/

Google / Youtube
Provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
- You can customize your advertising settings independently in your user account. To do this, click on the following link and log in: https://adssettings.google.com/authenticated
- For details, see the Google Privacy Policy: https://policies.google.com/privacy
- Google has EU-US Privacy Shield certification:
https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active

XING
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. For details on how they handle your personal data, please refer to XING's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you wish to disable LinkedIn advertising cookies, please use the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs. For details on their handling of your personal data, please refer to LinkedIn's privacy policy:
https://www.linkedin.com/legal/privacy-policy

Data, which we process within the scope of the initiation and execution of contracts

We process personal data of our customers, interested parties, service providers and partners which we receive directly within the scope of our business relationship. When we have received data from you, we process it only for the purposes for which we received or collected it.
As a rule, we process the following categories of data from you:
- Name, first name
- Address and / or company address
- telecommunication data
- email address
- firm
- Professional function and/or position
- bank account / credit card number / other payment details, if applicable
- Data on the history of the business relationship, if applicable

In the course of the business initiation phase and during the business relationship, in particular through personal, telephone or written contacts, initiated by you or one of our employees, further personal data is created, e.g. information about contact channel, date, occasion and result; (electronic) copies of correspondence as well as information about participation in direct marketing measures.
On the other hand, we process personal data that we have obtained and are permitted to process from publicly accessible sources (e.g. trade and association registers, press, media, Internet).
Data processing for other purposes can only be considered if the necessary legal requirements pursuant to Art. 6 para. 4 GDPR have been met. In this case, we will of course comply with any information obligations pursuant to Art. 13 para. 3 GDPR and Art. 14 para. 4 GDPR.

Legal basis according to which we process your data

On the basis of your consent (Art. 6 para. 1 lit. a) GDPR)

We process personal data for one or more specific purposes if you have given us permission to do so. If personal data is processed on the basis of your consent, you have the right to revoke such consent at any time with effect for the future.
Data processing for the fulfilment of contracts (Art. 6 para. 1 lit. b) GDPR)
We process personal data for the fulfilment of contracts. The fulfillment of contracts includes the conclusion, processing and reversal of a contract. In addition, we process personal data which is necessary for the implementation of pre-contractual measures, such as the initiation of a contract, and which is provided at your request.
Data processing based on a legal obligation (Art. 6 para. 1 lit. c) GDPR)
Like any company, we must comply with retention and other documentation requirements, which may include documents containing personal information. Insofar as we process data for these purposes, the processing is based on a legal obligation.
Data processing on the basis of a weighing of interests (Art. 6 para. 1 lit. f) GDPR)
If we process data on the basis of a weighing of interests, you as the data subject have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR. As far as the concrete purpose permits, we process your data pseudonymised or anonymised.

Further legal bases result from the commercial law and tax law specifications.

Further recipients of your data
Passing on to processors within the framework of Art. 28 GDPR
Contract processors used by us (Art. 28 GDPR) in particular in the area of IT services and, for example, printing services which process your data for us in accordance with instructions. When we commission service providers to carry out our tasks, we always observe the data protection regulations, in particular, data is only passed on after the conclusion of contracts for order processing.

For the execution of a contractual relationship
If it is necessary for the execution of the contract with you, we pass on your data to banks or shipping service providers, for example.
Disclosure due to a legal obligation
If there is a legal or official obligation, we pass on your data to public bodies or institutions (authorities, for example in the context of criminal prosecution).
Other bodies, insofar as you have given us your consent
If you have given your explicit consent, we will also pass on your data to other parties. However, this will take place within the limits if there is a verifiable consent by you.
Disclosure for the purpose of obtaining information
If we make advance payment, we reserve the right to obtain information on identity and creditworthiness from specialised service providers (credit agencies) in order to safeguard our legitimate interests. As a rule, however, we do this only after obtaining your consent to request information.

General information on deletion periods for personal data

Principle of earmarking for specific purposes and observance of statutory retention periods
We process the data as long as this is necessary for the respective purpose. If necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract.
In addition, like any company, we are obliged to comply with the statutory retention periods, for example the periods under commercial and tax law. Insofar as legal storage obligations exist, the relevant personal data will be stored for the duration of the storage obligation. The storage period also depends on the statutory limitation periods, which, for example, according to §§ 195 et seq. of the German Civil Code (BGB) can generally be three years, but in certain cases also up to thirty years. After expiration of the storage obligation it is examined whether a further necessity for the processing exists. If a requirement no longer exists, the data is deleted.

Conrete example
Insofar as you provide us with your contact data, for example by e-mail, telephone or by handing over your business card, we store this data on the basis of Art. 6 para. 1 lit. b GDPR on the basis of pre-contractual measures and in the legitimate interest (Art. 6 para. 1 lit. f GDPR) of smooth and targeted communication. Insofar as no legal transaction is concluded, we delete your data if you request us to do so or if no further contact takes place within a period of three years. If you enter into a legal transaction with us (Art. 6 para. 1 lit b GDPR), we store your data for ten years until the expiration of the commercial and tax law requirements. After this period, we check whether we can delete the data and, if necessary, forward it to deletion.

E-mails and business letters
We archive all our e-mail traffic for ten years. If you send us an e-mail, your data and the entire e-mail content will be stored accordingly for 10 years. Most e-mails count as business letters, and e-mails may also contain tax-relevant information. In our opinion, the effort required to check every single e-mail in this respect is not in proportion to the benefits and interests of the sender. Of course, you can request us to delete your e-mail at any time and we will examine each individual case and inform you of the result. This can lead to a deletion or restriction of the processing, depending on the content of the correspondence.
Revocation of your consent
Insofar as we process your data on the basis of your consent (Art. 6 para. 1 lit. a GDPR), we will delete it after your revocation. Unless there is a justified interest against a complete deletion. For example, we keep your declaration of consent for up to three years after receipt of your revocation in the legitimate interest (Art. 6 para. 1 lit. f GDPR). We retain the consent exclusively under restriction of the processing in order to be able to defend ourselves in the event of a dispute.

Legal or contractual obligation to provide personal data
The provision of personal data is regularly necessary for the initiation, conclusion, processing and reversal of a contract. In the event that you do not provide the necessary personal data, it is not possible for us to conclude and fulfil a contract with you.

Transfer to a third country
Your personal data will be processed by us in computer centers of the Federal Republic of Germany or the European Union. A transfer to a third country is only possible if you have given us your consent or if we have concluded a contract for order processing in accordance with Art. 28 GDPR taking into account suitable guarantees or other suitable guarantees.