Data protection

Packservice data protection

1. Data protection at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data is all data that can be used to identify you personally. Please refer to our privacy policy provided below for detailed information about the topic of data protection.

Data collection on our website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. Please refer to this website’s legal notice for their contact details.

How do we collect your data?

On the one hand, your data is collected through you communicating it to us. This can be data that you enter in a contact form, for example.

Other data is automatically collected by our IT systems when you visit the website. This is mainly technical data (e.g. information about your Internet browser, operating system or the page view time). This data is collected automatically as soon as you access our website.

What do we use your data for?

Some of the data is collected to ensure faultless provision of the website. Other data may be used to analyse your user behaviour.

What rights do you have with regard to your data?

You have the right at any time to receive free information about the origin, recipient(s) and purpose of your stored personal data. You also have the right to request that this data be rectified, blocked or erased. Please do not hesitate to contact us at any time on the address provided in the legal notice regarding this matter and if you have any other questions relating to the topic of data protection. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You also have the right to request, under certain circumstances, that processing of your personal data be restricted. For details concerning this matter, please refer to the “Right to restriction of processing” section of the privacy policy.

Third-party (analysis) tools

When you visit our website, your surfing behaviour can be statistically evaluated. This is primarily done using cookies and what are known as “analysis programs”. Your surfing behaviour is generally analysed anonymously; your surfing behaviour cannot be traced back to you. You may object to this analysis or prevent it by not using certain tools. You will find detailed information on this matter below in the privacy policy.

You can object to this analysis. We will inform you about the ways you can object in this privacy policy.

2. General and mandatory information

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data as confidential and according to the statutory data protection regulations and this privacy policy.

A variety of personal data is collected when you use this website. Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that online data transmission (e.g. in the case of email communication) may be vulnerable to security breaches. Data cannot be completely protected against access by third parties.

Information about the controller

The controller for data processing on this website is:

Packservice PS Marketing GmbH
Mannheimer Strasse 16–18
76131 Karlsruhe
Germany

Phone: +49 (0)721 9 61 66-0
Email: info@packservice.de

The controller is the natural or legal person that takes decisions about the purposes and means of personal data processing (e.g. names, email addresses, etc.), either alone or jointly with others.

Revocation of your consent to data processing

Many data processing activities can only be carried out with your express consent. You may revoke consent that was previously granted at any time. It is sufficient if you informally notify us by email to this effect. The lawfulness of data processing carried out until such time that you revoke your consent remains unaffected by said revocation.

Right to object to data collection in special situations and to direct marketing (Art. 21 of the GDPR)

If data processing is carried out based on Art. 6 (1), lit. e or f of the GDPR, you have the right at any time to object to the processing of your personal data on grounds relating to your particular situation; this also applies to profiling based on these provisions. Please refer to this privacy policy for the respective legal basis on which processing is based. If you file an objection, we shall no longer process your personal data in question unless we can demonstrate compelling and legitimate grounds for processing which outweigh your interests, rights and freedoms, or if processing serves to assert, exercise or defend legal claims (objection according to Art. 21 (1) of the GDPR).

If your personal data is processed for the purpose of carrying out direct marketing, you have the right at any time to object to processing of the personal data concerning you for the purposes of such marketing; this also applies to profiling if it is in conjunction with such direct marketing. If you object, your personal data shall no longer be used for direct marketing purposes (objection according to Art. 21 (2) of the GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of the GDPR being violated, the data subject has the right to lodge a complaint with a supervisory authority, particularly in the member state of their habitual residence, their workplace or the place of the suspected violation. The right to lodge a complaint shall be without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to have data that we automatically process based on your consent or to perform a contract handed over to yourself or a third party in a commonly used, machine-readable format. If you request that your data be directly transferred to another controller, this shall only be done to the extent technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons, and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection due to the fact that the browser’s address bar changes from “http://” to “https://” and due to the padlock icon in your browser bar.

If SSL or TLS encryption is activated, the data you send to us cannot be read by third parties.

Access, blocking, erasure and rectification

In the context of the applicable legal provisions, you have the right, at any time, to free information about the personal data saved about you, its origin, the recipient(s) and the purpose of data processing, as well as a right to rectify, block or erase the same if necessary. Please do not hesitate to contact us at any time on the address provided in the legal notice regarding this matter and if you have any other questions relating to the topic of personal data.

Right to restriction of processing

You have the right to request that processing of your personal data be restricted. You can contact us at any time regarding this matter on the address provided in the legal notice. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of the personal data we have saved about you, we generally need time to verify this. For the duration of the verification process, you have the right to request that processing of your personal data be restricted.
• If your personal data has been or is being processed unlawfully, you can request restriction of data processing activities instead of your data being erased.
• If we no longer need your personal data, but you require it to exercise, defend or assert legal claims, you have the right to request that processing of your personal data be restricted instead of your data being erased.
• If you have objected according to Art. 21 (1) of the GDPR, your interests and our interests must be balanced. As long as it has not yet been established whose interests take precedence, you have the right to request that processing of your personal data be restricted.

If you have restricted processing of your personal data, such data may – with the exception of storage – only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of rights of another natural or legal person, or for reasons of important public interest of the European Union or of a member state.

Objection to promotional emails

We hereby object to contact details published in accordance with the requirement to provide a legal notice being used to send us advertising and information material that has not been expressly requested. The website operators expressly reserve the right to take legal action against anyone who sends us unsolicited advertising material, such as spam emails.

3. Data protection officer

Data protection officer prescribed by law

We have appointed a data protection officer for our company:

xDSB Datenschutz

Email: datenschutzanfragen@xdsb.de. Also contactable using the postal address by adding “FAO Data Protection Officer”

4. Data collection on our website

Cookies

Our website sometimes uses what are known as “cookies”. Cookies do not damage your computer in any way and do not contain any viruses. We use cookies to make our site more user-friendly, more effective and more secure. Cookies are small text files that are stored on your computer and saved by your browser.

The cookies we most commonly use are what are known as “session cookies”. They are automatically deleted after you have left our site. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognise your browser the next time you visit our site.

You can make settings in your browser so that you are informed about cookies being set and only accept cookies on a case-by-case basis for certain situations or categorically prevent the setting of the same, as well as activate automatic deletion of cookies when you close your browser. The functionality of this website may be restricted if cookies are deactivated.

Cookies, which are necessary for the implementation of the electronic communication process or for the provision of certain desirable functions (e.g. shopping basket function), are stored based on Art. 6 (1), lit. f of the GDPR. The website operator has a legitimate interest in storing cookies to provide their services in a technically error-free and optimised manner. Insofar as other cookies (e.g. cookies for analysing your surfing behaviour) are stored, they are dealt with separately in this privacy policy.

Consent with Usercentrics

This website uses the consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or for the use of specific technologies, and to document the former in a data protection compliant manner. The party offering this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Germany, website: https://usercentrics.com/ (hereinafter referred to as “Usercentrics”).

Whenever you visit our website, the following personal data will be transferred to Usercentrics:

• Your declaration(s) of consent or your revocation of your declaration(s) of consent
• Your IP address
• Information about your browser
• Information about your device
• The date and time you visited our website

Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods.

The Usercentrics banner on this website has been configured with the assistance of eRecht24. This can be identified by the eRecht24 logo. To display the eRecht24 logo in the banner, a connection to the image server of eRecht24 will be established. In conjunction with this, the IP address is also transferred; however, is only stored in anonymized form in the server logs. The image server of eRecht24 is located in Germany with a German provider. The banner as such is provided exclusively by Usercentrics.

Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of specific technologies is Art. 6(1)(c) GDPR.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

Server log files

The website provider automatically collects and saves information in what are known as “server log files”, which your browser automatically transmits to us. This information includes:

• The browser type and browser version
• The operating system used
• The referrer URL
• The host name of the accessing computer
• The time of the server enquiry
• The IP address

This data shall not be combined with other sources of data.

This data is collected based on Art. 6 (1), lit. f of the GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of their website; the server log files must be recorded for this purpose.

Loopos Configurator

You have the option of individually configuring a Loopos reusable display via our website and requesting a related quote from us. To do so, you can access the Loopos Configurator on our website, which is operated on our behalf by Elaspix UG, Schliffkopfstraße 25, 68163 Mannheim, Germany. Data processing takes place in Germany.

To display the Loopos Configurator, the data specified in this privacy policy under ‘Log files’ is processed by Elaspix UG, as well as any images or other information you may have uploaded to configure your individual Loopos reusable display. A technically necessary cookie is used (local storage, stored until you log out of the configurator page by clicking on the ‘Log out’ button) to temporarily store your entries. The legal basis for this data processing is Art. 6 (1) (f) GDPR.

In order to be able to access your individually configured Loopos reusable display at a later date, you must register by providing your email address and a password of your choice (legal basis: Art. 6(1)(f) GDPR). If you request a quote for your individual configuration of the Loopos reusable display, your enquiry will be forwarded to us by Elaspix UG. We will then send you a corresponding quote to the email address you provided. The legal basis for this data processing is Art. 6 (1) (b) GDPR. You can have your data stored during registration deleted at any time by sending an email to datenschutz@elaspix.de.

Contact form

If you send us enquiries using the contact form, your information from the enquiry form including the contact details you specified there shall be saved by us for the purpose of processing the enquiry and in the event of any follow-up questions. We shall not disclose this data to others without your consent.

The data entered in the contact form is therefore processed exclusively based on your consent (Art. 6 (1), lit. a of the GDPR). You may revoke this consent at any time. It is sufficient if you informally notify us by email to this effect. The lawfulness of data processing activities carried out until such time that you revoke your consent remains unaffected by said revocation.

We shall store the data you enter in the contact form until you request that we erase the same, you revoke your consent to storage or the purpose of data storage no longer applies (e.g. once processing of your enquiry is complete). Mandatory statutory provisions – particularly storage periods – remain unaffected.

Email, phone or fax enquiries

If you contact us by email, phone or fax, we shall save and process your enquiry including all personal data resulting from the same (name, enquiry) for the purpose of processing your request. We shall not disclose this data to others without your consent.

This data is processed based on Art. 6 (1), lit. b of the GDPR if your enquiry is related to the performance of a contract or is required for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 (1), lit. a of the GDPR) and/or our legitimate interests (Art. 6 (1), lit. f of the GDPR), since we have a legitimate interest in effectively processing the enquiries sent to us.

We shall store the data you send to us through contact enquiries until you request that we erase the same, you revoke your consent to storage or the purpose of data storage no longer applies (e.g. once processing of your enquiry is complete). Mandatory statutory provisions – particularly statutory storage periods – remain unaffected.

5. Analysis tools and marketing

Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (‘Google’).

We use Google Analytics to analyse how our website is used and to improve it on a regular basis. The statistics acquired allow us to improve our website and to design it in a way that is more interesting to you as a user. The legal basis for the use of Google Analytics is your consent according to the first sentence of Art. 6 (1) (a) of the GDPR.

Google Analytics uses ‘cookies’, which are text files that are stored on your computer, to help the website operator analyse how you use the site. Please refer to the ‘Functional’ category on our cookie banner for more information about the cookies used in the context of the use of Google Analytics.

Data such as page views and clicks, internal search requests, downloads, interactions with videos, technical settings on the browser and terminal device (as under ‘Log files’) and your IP address is collected. IP addresses are only further processed in truncated form to eliminate the possibility of direct personal identification.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of this website, compiling reports on website activities and providing the website operator with other services relating to website and internet use. The IP address transmitted by your browser in the context of Google Analytics is not merged with any other data held by Google.

You can revoke your consent to personal data processing using Google Analytics at any time. You can prevent the storage of cookies by changing the relevant setting in your browser software; however, please note that if you do so, you may be unable to use all of this website’s functions in full. Furthermore, you can prevent Google’s collection and processing of the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=en-GB or, alternatively, by revoking your consent (setting an opt-out cookie) by clicking on the following link.

Disable Google Analytics

You will find more information about Google’s use of data and possibilities with regard to settings and objection on Google websites: https://support.google.com/analytics/answer/6004245?hl=en&ref_topic=2919631

Google Ads Conversion Tracking

We use Google Ads to draw attention to our offers on external websites with the help of advertising material (known as Google Ads). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
These advertising materials are delivered by Google via so-called ‘ad servers’. For this purpose, we use ad server cookies, which allow certain parameters for measuring success, such as the display of ads or clicks by users, to be measured. If you access our website via a Google ad, Google Ads will store a cookie on your computer. Details about the cookies used in connection with Google Ads conversion tracking can be found in the cookie notice window (under ‘Marketing’) when you visit our website. This cookie usually stores the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (indicating that the user no longer wishes to be targeted) as analysis values.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Ads customer’s website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user has clicked on the ad and been redirected to that page. Each Ads customer is assigned a different cookie. Cookies cannot therefore be tracked across the websites of Ads customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. These evaluations enable us to identify which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By integrating Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address.

You can prevent participation in this tracking process in various ways: a) by not consenting to the setting and processing of data from cookies for marketing purposes; b) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies means that you will not receive any third-party advertisements; c) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies; c) by deactivating interest-based ads from providers who are part of the ‘About Ads’ self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers via the link http://www.google.com/settings/ads/plugin. Please note that in this case you may not be able to use all the functions of this website to their full extent.

The legal basis for the processing of your data is your consent in accordance with Art. 6 (1) (a) GDPR. Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy.

If data is transferred to Google LLC (USA), this is done on the basis of the adequacy decision of the EU Commission on the EU-U.S. Data Privacy Framework.

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a tool that helps us integrate tracking or statistics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies or perform independent analyses. It is used solely to manage and display the tools integrated via it. However, Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and management of various tools on its website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when data is processed in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Ads Remarketing

This website uses the functions of Google Ads Remarketing. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to then display interest-based advertising to them in the Google advertising network (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google’s cross-device functions. This allows interest-based, personalised advertising messages that have been tailored to you based on your previous usage and browsing behaviour on one device (e.g. mobile phone) to also be displayed on another of your devices (e.g. tablet or PC).

If you have a Google account, you can opt out of personalised advertising at the following link:
https://adssettings.google.com/anonymous?hl=de.

The use of this service is based on your consent in accordance with Art. 6 (1) (a) GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.

Further information and the data protection provisions can be found in Google’s privacy policy at:
https://policies.google.com/technologies/ads?hl=de.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/5780.

Target group formation with customer matching

To form target groups, we use Google Ads Remarketing customer matching, among other things. Here, we transfer certain customer data (e.g. email addresses) from our customer lists to Google. If the customers in question are Google users and are logged into their Google account, they will be shown relevant advertising messages within the Google network (e.g. on YouTube, Gmail or in the search engine).

1&1 IONOS web analytics

This website uses analysis services provided by 1&1 IONOS. The provider is 1&1 IONOS SE, based at Elgendorfer Strasse 57, 56410 Montabaur, Germany. In the context of the 1&1 analyses, visitor numbers and behaviour (e.g. number of page views, duration of a website visit, bounce rates), visitor sources (i.e. what pages visitors come from), visitor locations and technical data (browser and operating system versions) can be analysed. For this purpose, 1&1 stores the following data in particular:

• The referrer (website visited previously)
• The requested web page or file
• The browser type and browser version
• The operating system used
• The device type used
• The time of access
• The IP address in anonymised form (used only to determine the access location)

According to 1&1, data collection is completely anonymous, so it cannot be traced back to individual persons. Cookies are not stored by 1&1 IONOS.

This data is stored and analysed based on Art. 6 (1), lit. f of the GDPR. The website operator has a legitimate interest in statistically analysing user behaviour in order to optimise both their website and their marketing. For more information about data collection and processing by 1&1 IONOS, please click on the links below:

https://www.ionos.co.uk/help/online-marketing/
https://www.ionos.co.uk/help/data-protection/data-processing-of-website-visitors-of-your-11-ionos-product/siteanalytics/
https://www.ionos.co.uk/terms-gtc/terms-privacy/

6. Plugins and tools

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Ireland Limited, based at Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland.

Your IP address needs to be stored to use the functions of Google Maps. This information is generally transmitted to and stored on a Google server in the USA. The provider of this site has no influence over such data transfer.

We have a legitimate interest in using Google Maps for the purpose of presenting our website in an appealing manner and making the places mentioned on our site easy to find. This is a legitimate interest under the terms of Art. 6 (1), lit. f of the GDPR.

You will find more information about how Google Analytics handles user data in Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our website. The provider is Google Ireland Limited, based at Gordon House, 4 Barrow Street, Dublin D04 E5W5, Ireland (hereinafter referred to as “Google”).

The purpose of reCAPTCHA is to check whether data is input on our website (e.g. in a contact form) by a person or by an automated program. For this purpose, reCAPTCHA analyses the website visitor’s behaviour using a variety of features. This analysis process starts automatically as soon as the visitor lands on the website. For analysis purposes, reCAPTCHA evaluates various pieces of information (e.g. IP address, length of time the website visitor stays on the website or mouse movements made by the user). The data collected in the context of the analysis is forwarded to Google.

The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.

Data processing is carried out based on Art. 6 (1), lit. f of the GDPR. The website operator has a legitimate interest in protecting their website from abusive automated spying and from spam.

Please click on the following links for more information about Google reCAPTCHA and Google’s privacy policy: https://policies.google.com/privacy?hl=en-GB and https://www.google.com/recaptcha/intro/android.html.

Captcha

We use a captcha service in connection with our web forms. Our aim here is to curb and prevent potentially fraudulent activities or the generation of spam enquiries by excluding automated enquiries from bots. For this purpose, we use the Friendly Captcha service provided by Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany, which processes personal data on our behalf. A JavaScript element is embedded in the source code, which loads the software in the background. Your device calculates the solution to a cryptographic puzzle for the service, which is used to determine whether the visitor is a human or whether the use is abusive through automated, machine processing (e.g. bots). The following data is processed in this process: HTTP request header data (such as browser, operating system, referrer), date/time of the request, version of the Friendly Captcha service used, assignment to our website, hash value (one-way encryption) of the incoming IP address, number of requests from the (hashed) IP address per time period, response to the calculation task solved by the visitor’s computer.

Your IP address is anonymised using a hash function and only then processed by the provider, so that no conclusions can be drawn about your person. Cookies are not used for this purpose. Data processing by the provider

Your IP address is anonymised using a hash function and only then processed by the provider, so that no conclusions can be drawn about your person. Cookies are not used for this purpose. Data processing by the provider takes place exclusively in the EU/EEA. The legal basis for data processing is Art. 6 (1) (f) GDPR.

Fan pages

In order to provide customers, partners or other interested parties with up-to-date information and to get in touch with them, we operate so-called ‘fan pages’ on the following social networks in addition to our own website: Facebook, Twitter, LinkedIn, XING, TikTok

Data processing is carried out by the provider of the social media platform. Data processing outside the European Union cannot be ruled out. The platform provider may provide us with aggregated usage data, but we do not have access to personal data if you only visit the fan page.

The legal basis for data processing is Art. 6(1)(f) GDPR. In the case of consent in the form of an opt-in (‘check box’, ‘activate button’) or any other form of obtaining consent, the legal basis is Art. 6 (1) lit. a GDPR. Consent can be revoked at any time without giving reasons to the person to whom it was given, with effect for the future.

Since data processing is carried out by the platform provider, we recommend that you contact the respective platform provider regarding your rights to information, correction, deletion, data portability and objection in connection with your visit to our fan page. We will, of course, assist you in exercising your rights if necessary.

In addition, cookies may be stored on your device. The purposes and legal basis for the use of cookies can be found under ‘Cookies’ in this privacy policy or in the privacy policies of the platform provider.

Further information can be found at the following links:

• Facebook: Facebook Ireland, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (‘Facebook Ireland’). When you visit our Facebook fan page, personal data is processed as follows, according to Facebook: https://www.facebook.com/legal/terms/information_about_page_insights_data. Further information is available at: https://www.facebook.com/legal/terms/page_controller_addendum
• Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland; https://twitter.com/privacy.
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; http://www.linkedin.com/legal/privacy-policy.
• XING SE, Dammtorstraße 30, 20354 Hamburg, https://privacy.xing.com/de/datenschutzerklaerung.
• TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE

7. Own services

Applications

We offer you the opportunity to apply to us (e.g. by email, post or using the online application form). Below, we provide you with information regarding the scope, purpose and use of your personal data collected during the application process. We warrant that your data shall be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data shall be treated strictly confidentially.

Scope and purpose of data collection

If you send us an application, we shall process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) insofar as doing so is necessary to make a decision on whether to establish an employment relationship. The legal basis for this is § 26 of the new German Federal Data Protection Act (BDSG-neu) (initiation of an employment relationship), Art. 6 (1), lit. b of the GDPR (general contract initiation) and – if you have given your consent – Art. 6 (1), lit. a of the GDPR. Consent can be revoked at any time. Your personal data shall only be disclosed within our company to those persons who are involved in processing your application.

If the application is successful, the data you submitted shall be stored in our data processing systems based on § 26 of the new German Federal Data Protection Act and Art. 6 (1), lit. b of the GDPR for the purpose of implementing the employment relationship.

Data storage period

If we are unable to make you a job offer, or if you reject a job offer, withdraw your application, revoke your consent to data processing or request that we erase the data, the data you transmitted, including any remaining physical application documents, shall be stored for a maximum of six months after completion of the application process (storage period) so as to trace the details of the application process in the event of discrepancies (Art. 6 (1), lit. f of the GDPR).

YOU MAY OBJECT TO SUCH STORAGE IF YOU HAVE LEGITIMATE INTERESTS THAT TAKE PRECEDENCE OVER OURS.

Once the storage period has elapsed, the data shall be erased unless there is a statutory storage obligation or other legal grounds for further storage. If it is evident that your data shall need to be stored after the storage period has elapsed (e.g. due to a threatened or pending legal dispute), erasure shall only take place when the data has become irrelevant. Other statutory storage obligations shall remain unaffected.