Privacy policy
1. Name and Address of the Data Controller
The data controller within the meaning of the General Data Protection Regulation (GDPR), other applicable data protection laws in the European Union, and other regulations with data protection relevance is:
Jeremias Abgastechnik GmbH
Opfenrieder Str. 12
91717 Wassertrüdingen
Germany
Tel.: 09832/686850
Email: info@jeremias.de
Website: www.jeremias.de
2. Contact of the Data Protection Officer
KÜHLEIS GROUP
Stefan Kühleis
Hubertusstraße 14
91710 Gunzenhausen
Email: info@kuehleisgroup.de
3. Use of Cookies
The website of Jeremias Abgastechnik GmbH uses cookies. Cookies are data stored by the web browser on the user’s computer system. These cookies can be transmitted to the website when a page is accessed, enabling the identification of the user. Cookies help simplify the use of websites for users.
It is always possible to object to the use of cookies by changing the browser settings accordingly. Set cookies can also be deleted. Please note that disabling cookies may result in some features of our website not being fully functional.
4. Creation of Log Files
Each time the website is accessed, Jeremias Abgastechnik GmbH collects data and information through an automated system. This is stored in the server’s log files.
The following data may be collected:
- Information about the browser type and version used
- The user’s operating system
- The user’s internet service provider
- The user’s IP address
- Date and time of access
- Websites from which the user’s system accessed our website (referrer)
- Websites accessed by the user’s system through our website
The processing of this data is for delivering the content of our website, ensuring the functionality of our IT systems, and optimizing our website. The log file data is stored separately from other personal data of the users.
5. Analysis Tools and Advertising
Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses "cookies," which are text files stored on your computer and allow for analysis of website usage. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The storage of Google Analytics cookies is based on Article 6(1)(a) of the GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both their web offering and their advertising.
We have activated IP anonymization on this website. This ensures that your IP address is anonymized by Google within the European Union or other contracting states to the European Economic Area agreement before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and anonymized there. Google will use this information on behalf of the website operator to evaluate your use of the website, compile reports on website activities, and provide other services related to website usage and internet use. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data.
You can prevent the storage of cookies by adjusting your browser settings. However, please note that in this case, you may not be able to fully use all features of this website. Additionally, you can prevent the collection of data generated by the cookie related to your use of the website (including your IP address) by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout.
For more information on how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245.
We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad displayed by Google, a cookie for conversion tracking is set. Cookies are small text files placed by the browser on the user’s computer. These cookies expire after 30 days and are not used for personal identification of users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across AdWords customer websites. The information collected via conversion cookies is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. The customers are informed of the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, no information is provided that can personally identify users. If you do not wish to participate in tracking, you can object to this use by disabling the Google Conversion Tracking cookie in your browser settings. You will then not be included in the conversion tracking statistics.
The storage of "conversion cookies" is based on Article 6(1)(a) of the GDPR.
For more information on Google AdWords and Google Conversion Tracking, please refer to Google’s privacy policy: https://policies.google.com/privacy.
Google DoubleClick
This website uses Google DoubleClick cookies (Floodlights). DoubleClick is a service by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Cookies are small text files stored in the user’s browser. The storage of cookies is based on Article 6(1)(a) of the GDPR. A pseudonymous identification number (ID) is assigned to your browser. DoubleClick cookies do not contain personal data.
The cookies are used to evaluate the use of this website. The data collected is analyzed for statistical purposes in an anonymized form. You can prevent the use of cookies by downloading and installing the browser plugin available at https://adssettings.google.com/u/0/authenticated under the DoubleClick Opt-out extension. Alternatively, you can deactivate DoubleClick cookies on the Digital Advertising page at https://optout.aboutads.info.
The cookies are used to advertise products of this website operator (retargeting). At a later stage, the user may see ads (e.g., banner ads, text-image ads, videos, etc.) on other websites. Users can object to retargeting functionality by modifying the display settings of the Google Remarketing Tags or disabling retargeting. Alternatively, users can disable the use of cookies by third parties using the Network Advertising Initiative's opt-out page.
Google Tag Manager
a. Type and Purpose of Processing
Google Tag Manager is a solution that allows marketers to manage website tags through an interface. The tool itself (which implements the tags) is a cookie-free domain and does not collect personal data. The tool triggers other tags, which may collect data. Google Tag Manager does not access these data. If a deactivation has been made at the domain or cookie level, this will apply to all tracking tags implemented by Google Tag Manager.
b. Legal Basis of Processing
The processing of the entered data is based on the user’s consent (Article 6(1)(a) of the GDPR).
c. Data Category
Title, URL, and file format of file downloads
d. Recipient
The recipients of the data are internal employees and Google as the processor. We have entered into the appropriate data processing agreement with Google.
e. Storage Period
Data is processed only as long as the relevant consent is in place. Afterward, it is deleted unless legal retention requirements prevent deletion.
f. Legal / Contractual Requirements
Providing your personal data is voluntary and solely based on your consent. If you block access, this may result in limited functionality on the website.
g. Transfer Outside the EU
The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Withdrawal of Consent
You can withdraw your consent to the storage of your personal data at any time with effect for the future.
i. Profiling
With the Google Tag Manager tool, the behavior of website visitors can be evaluated, and interests can be analyzed.
Leadinfo
a. Type and Purpose of Processing
We use the service offered by Leadinfo. Leadinfo is a service from LeadInfo B.V., Crooswijksesingel 50, 3034 CJ Rotterdam, Netherlands, which identifies anonymous website visitors, provides complete contact details, and offers insights into their visit history. Leadinfo uses cookies and other browser technologies to analyze user behavior and recognize users. Among other things, Leadinfo shows us which companies have visited our website, tracks the history of your visit, including all pages visited and the duration of your stay on the site.
b. Legal Basis of Processing
The legal basis for the integration of Leadinfo and the associated data transfer to Leadinfo is your consent (Article 6(1)(a) of the GDPR).
c. Data Categories
Leadinfo collects and processes data about companies, such as company name, phone number, address, website, industry, company profile, revenue, and key people on LinkedIn.
d. Recipient
The recipients of the data are internal employees and Leadinfo as the processor.
e. Storage Period
Data is processed only as long as the corresponding consent is in place. Afterward, it is deleted unless legal retention requirements prevent deletion.
f. Legal / Contractual Requirements
Providing your personal data is voluntary and solely based on your consent. Blocking access may result in limited functionality on the website.
g. Transfer Outside the EU
Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be ruled out.
h. Withdrawal of Consent
If you do not want Leadinfo to collect, process, or use data about you via our website, you can withdraw your consent to the storage of your personal data at any time with effect for the future.
i. Automated Decision-Making and Profiling
As a responsible company, we refrain from automated decision-making or profiling in this data processing.
6. Registration on Our Website
If the data subject takes the opportunity to register on the website of the controller by providing personal data, the data will be transmitted to the controller via the respective input mask. The data will be stored exclusively for internal use by the controller.
During registration, the user's IP address, as well as the date and time of registration, are stored. This serves to prevent misuse of the services. Data will not be shared with third parties, except when there is a legal obligation to disclose it.
Registration of the data is necessary to provide content or services. Registered individuals have the right to delete or modify the stored data at any time. The data subject can always obtain information about the personal data stored about them.
7. Newsletter
If the newsletter of our company is subscribed to, the data will be transmitted to the controller through the respective input mask. When registering for the newsletter, the user's IP address, along with the date and time of registration, is stored. This is to prevent misuse of the services or the email address of the data subject. Data will not be shared with third parties, except when there is a legal obligation to disclose it.
The data will be used solely for sending the newsletter. The subscription to the newsletter can be canceled by the data subject at any time. The consent to the storage of personal data can also be revoked at any time. A corresponding link is included in each newsletter for this purpose.
8. Online Presence on Social Media
We maintain an online presence within social networks to inform users active there about our services and, if interested, to communicate directly via the platforms. We are currently represented in the following networks:
- YouTube
All of our social media channels can only be accessed by visitors via external links on our website. We do not use plugins or other interfaces that the respective networks offer for embedding content on websites.
We have no influence on the data collection and its further use by the social networks. Therefore, we have no knowledge of the extent, location, or duration of data storage, whether the networks comply with existing deletion obligations, what evaluations and connections are made with the data, or to whom the data is forwarded. We expressly point out that the data of users (e.g., personal information, IP address) is stored by the operators of the networks in accordance with their data usage policies and used for business purposes.
We process the data of users in social media presences to the extent that they contact and communicate with us, e.g., through comments or direct messages. The legal basis for the processing of user data is Article 6, Paragraph 1, Letters b and f of the GDPR.
8.1 LinkedIn
LinkedIn: https://www.linkedin.com/company/1962448
No features or content from LinkedIn, provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are integrated into our online offering. The LinkedIn channels are only accessible through an external link. If visitors to our website are members of LinkedIn, LinkedIn may associate the visit to the social media channel with the user's profile if they are logged in. We point out that we have no influence on the content and the scope of the data collected by LinkedIn. For further information, we refer to LinkedIn's privacy policy: https://linkedin.com/legal/privacy-policy
8.2 Instagram
Instagram: https://www.instagram.com/jeremias_abgastechnik_gmbh/
You can access the Instagram social media network via an external link on our website. All features within the network are provided by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. The channel is only accessible through an external link. If you are logged into your Instagram profile and visit our social media channel, Meta may associate your visit with your logged-in profile. If you do not want your user account to be linked to your IP address, please log out of your Instagram account before visiting our website. For more information on how your data is processed, please refer to Instagram's privacy policy: https://privacycenter.instagram.com/policy
8.3 Xing
Xing: https://www.xing.com/pages/jeremiasabgastechnikgmbh
No features or content from Xing, provided by New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany, are integrated into our online offering. The Xing channels are only accessible through an external link. If visitors to our website are members of Xing, Xing may associate the visit to the social media channel with the user's profile if they are logged in. We point out that we have no influence on the content and the scope of the data collected by Xing. For further information, we refer to Xing's privacy policy: https://privacy.xing.com/datenschutzerklaerung
8.4 Facebook
Jeremias operates an online presence on Facebook, a so-called Facebook Fanpage. The following additional information applies to data processing when visiting our Fanpage. General information on data protection at Facebook can be found here: https://www.facebook.com/about/privacy/.
1. Joint Responsibility, Contact Information, Data Protection Officer:
For operating our Facebook Fanpage, we are jointly responsible with Facebook according to Article 26 GDPR. We have agreed with Facebook on who is responsible for fulfilling which obligations regarding data protection. This agreement can be accessed here: https://www.facebook.com/legal/terms/page_controller_addendum. Facebook is primarily responsible for providing information to the data subject about the joint processing and enabling the exercise of their data protection rights. Regardless of this, we inform you here about your visit to our Fanpage.
Our contact details are:
Jeremias Abgastechnik GmbH
Opfenrieder Str. 12
91717 Wassertrüdingen
Germany
Tel.: 09832/686850
Email: info@jeremias.de
You can reach Facebook at:
Meta Platforms Ireland Ltd.
4 Grand Canal Square,
Grand Canal Harbour,
Dublin 2, Ireland
Online contact via https://www.facebook.com/help/contact/2061665240770586
Our data protection officer can be reached at:
KÜHLEIS GROUP, Stefan Kühleis
Hubertusstraße 14, 91710 Gunzenhausen
info@kuehleisgroup.de
The data protection officer of Facebook can be reached at:
https://www.facebook.com/help/contact/540977946302970
2. Collection and Storage of Personal Data, Its Type, Purpose, and Use:
a) Data Collected by Facebook:
If you are a Facebook user, Facebook collects the data described in the Facebook Data Policy under "What types of information do we collect?". If you are not a Facebook user, cookies with identifiers may still be stored in your browser, which allow tracking of your user behavior.
Typically, user data is processed by Facebook for market research and advertising purposes when visiting Facebook. Complex user profiles are created based on user behavior (including when visiting our fan page), which Facebook can use to display personalized advertisements to the visitor within and outside of Facebook. More information on this can also be found in the Facebook Data Policy.
If you do not agree with this, you can opt out here (Opt-Out): https://www.facebook.com/settings?tab=ads
b) Data Used by Us ("Page Insights") and Legal Basis:
Facebook provides us with statistics and usage data that allow us to analyze the use of our fan page (so-called "Page Insights"). This helps us continuously improve our offerings on Facebook. As operators, we do not make decisions regarding the processing of Insight data or any further information required under Art. 13 GDPR, such as the storage duration of cookies on users' devices. The primary responsibility for processing Insight data according to GDPR lies with Facebook, and Facebook fulfills all obligations under GDPR concerning the processing of Insight data.
As page administrators, we have no other means of evaluating user behavior on our fan page, not even through user tracking. We are also fundamentally unable to identify a visitor to the fan page using Page Insights. Specifically, we do not have the right under the agreement to request the disclosure of individual visitor data from Facebook. Identification is only possible if we can associate individual profile pictures and "Likes" with the page; but only if the visitor has marked the fan page with "Like" and the "Likes" are set to "public."
For more information on the data Facebook uses to create Page Insights, visit: https://www.facebook.com/legal/terms/information_about_page_insights_data
Operating the Facebook fan page and using the Page Insights serves our legitimate interest in effective external representation and efficient communication with our customers and potential clients. This interest justifies the operation of the page, both for Facebook users' legitimate interests and for visitors to our fan page who do not have a Facebook account. Therefore, the legal basis is Art. 6 (1) f) GDPR.
- Transfer of Data to Third Parties:
Data collected by Facebook is exchanged and processed within the entire Facebook group, which includes Instagram, WhatsApp, and Oculus, for example. For instance, information collected via Facebook is used to display personalized advertisements on Instagram or information from WhatsApp is used to take action against accounts sending spam on WhatsApp through Facebook. You can find this information in the Facebook Data Policy under "How do the Facebook companies work together?"
When processing data, it may happen that user data is transferred outside the European Economic Area (EEA), particularly to the USA.
- Right to Object:
If your personal data is processed based on legitimate interests according to Art. 6 (1) f) GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR, if there are reasons arising from your particular situation, or if the objection is directed at direct marketing. In the latter case, you have a general right to object, which will be implemented by us without requiring a specific situation. If you wish to exercise your right of withdrawal or objection, an email to info.jeremias.de will suffice.
- Rights of the Data Subject:
You have the right to withdraw your consent at any time. This will mean that we may no longer process the data based on this consent in the future. Additionally, you have the right to access according to Art. 15 GDPR, the right to rectification according to Art. 16 GDPR, the right to deletion according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, and the right to data portability according to Art. 20 GDPR. Furthermore, there is the right to lodge a complaint with a supervisory authority (Art. 77 GDPR).
Generally, you can assert your rights both against Facebook and against us. Since only Facebook has direct access to your user data, you can most effectively exercise your rights against Facebook
8.5 Pinterest
a. Type and Purpose of Processing:
We appreciate your interest in our presence on Pinterest. We would like to give you an overview of the data we collect, use, and store there.
Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g., Like buttons or advertising banners). Visiting our social media presence on Pinterest triggers numerous data protection-relevant processing operations. Specifically:
If you are logged into your Pinterest account and visit our social media presence, Pinterest can associate this visit with your user account. However, your personal data may also be collected if you are not logged in or do not have an account on Pinterest. In such cases, data collection occurs through cookies stored on your device or by recording your IP address. Pinterest can create user profiles with the collected data, including your preferences and interests. This allows Pinterest to show you interest-based ads within and outside of Pinterest. If you have an account on Pinterest, interest-based ads can be displayed on all devices where you are logged in or were logged in. Please also note that we cannot track all processing activities on Pinterest. Therefore, additional processing may occur on Pinterest. You can find details in Pinterest's Terms of Use and Privacy Policy.
b. Legal Basis for Processing:
The processing is based on Art. 6 (1) f) GDPR, based on our legitimate interest in maintaining contact with our customers. Pinterest's analysis processes may be based on different legal grounds, which Pinterest must specify (e.g., consent under Art. 6 (1) a) GDPR).
c. Data Categories:
For information on which specific data is collected and how it is used, please refer to Pinterest’s Privacy Policy.
Pinterest: https://policy.pinterest.com
d. Recipients:
- Employees of the company
e. Retention Periods:
Data will be deleted after the purpose is fulfilled and after the use of Pinterest ends.
f. Legal/Contractual Requirements:
The provision of your personal data is voluntary. Without providing your personal data, we cannot grant you access to our offered content and services.
g. Transfer to Third Countries:
Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded.
h. Right to Object:
If your personal data is processed based on legitimate interests according to Art. 6 (1) f) GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR if reasons related to your particular situation arise, or if the objection concerns direct marketing. If you wish to exercise your right of objection, simply send an email to the contact address above.
i. Automated Decision-Making and Profiling:
As a responsible company, we refrain from automated decision-making or profiling in this data processing
8.6 YouTube
a. Type and Purpose of Processing:
We appreciate your interest in our presence on YouTube. We would like to give you an overview of the data we collect, use, and store there.
Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g., Like buttons or advertising banners). Visiting our social media presence on YouTube triggers numerous data protection-relevant processing operations. Specifically:
If you are logged into your YouTube account and visit our social media presence, YouTube can associate this visit with your user account. However, your personal data may also be collected if you are not logged in or do not have a YouTube account. In such cases, data collection occurs through cookies stored on your device or by recording your IP address. YouTube can create user profiles with the collected data, including your preferences and interests. This allows YouTube to show you interest-based ads within and outside of YouTube. If you have a YouTube account, interest-based ads can be displayed on all devices where you are logged in or were logged in. Please also note that we cannot track all processing activities on YouTube. Additional processing operations may take place on YouTube. Details can be found in YouTube’s Terms of Use and Privacy Policy.
b. Legal Basis for Processing:
The processing is based on Art. 6 (1) f) GDPR, based on our legitimate interest in maintaining contact with our customers. YouTube’s analysis processes may be based on different legal grounds, which YouTube must specify (e.g., consent under Art. 6 (1) a) GDPR).
c. Data Categories:
For specific data collection and usage details, please refer to YouTube's Privacy Policy: https://policies.google.com/privacy
d. Recipients:
- Employees of the company
e. Retention Periods:
Data will be deleted after the purpose is fulfilled and after the use of YouTube ends.
f. Legal/Contractual Requirements:
The provision of your personal data is voluntary. Without providing your personal data, we cannot grant you access to our offered content and services.
g. Transfer to Third Countries:
Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded.
h. Right to Object:
If your personal data is processed based on legitimate interests according to Art. 6 (1) f) GDPR, you have the right to object to the processing of your personal data according to Art. 21 GDPR if reasons related to your particular situation arise, or if the objection concerns direct marketing. If you wish to exercise your right of objection, simply send an email to the contact address above.
i. Automated Decision-Making and Profiling:
As a responsible company, we refrain from automated decision-making or profiling in this data processing.
9. Information Obligations in the Application Process
a. Type and Purpose of Processing:
We process applicant data solely for the purpose of the application process and in accordance with legal requirements. The processing of applicant data is carried out to fulfill our (pre-)contractual obligations within the application process, if data processing is required for legal proceedings.
The application process requires applicants to provide us with their application data. Necessary application data are marked if we provide an online form and are generally derived from the job descriptions, including personal information, postal and contact addresses, and application documents such as cover letters, resumes, and certificates. Applicants may voluntarily provide additional information. By submitting the application to us, applicants consent to the processing of their data for the purposes of the application process as outlined in this privacy notice. Applicants can submit their applications via an online form on our website, where data is securely transmitted using encryption. Alternatively, applicants may email their application to bewerbung@jeremias.de. However, please note that emails are not encrypted by default, and applicants must ensure encryption themselves. Therefore, we cannot take responsibility for the transmission path of the application between the sender and our server and recommend using an online form or postal mail instead. Data provided by applicants may be processed further for employment purposes if the application is successful.
b. Legal Basis for Processing:
The processing of your data is primarily for the establishment of the employment relationship according to Art. 88 (1) GDPR in conjunction with § 26 (1) BDSG.
c. Data Categories:
First name, last name, address, phone number, email address, resume, certificates, references, documents, and photos voluntarily provided.
If special categories of personal data are voluntarily disclosed during the application process (e.g., health data like disability status or ethnic origin), their processing will be in accordance with Art. 9 (2) b) GDPR.
d. Recipients:
Recipients of the data are internal employees of the HR department/departmental staff.
e. Retention Periods:
Data will be deleted after a period of 6 months unless a justified withdrawal of consent occurs, in order to respond to any follow-up questions or meet our documentation requirements under the Equal Treatment Act. Receipts for travel expense reimbursements will be archived according to tax regulations.
f. Legal/Contractual Requirements:
The provision of your personal data beyond the retention period, e.g., to be included in our applicant pool, is voluntary and based solely on your consent. You can withdraw this consent at any time.
g. Transfer to Third Countries:
Processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Withdrawal of Consent:
If the application for a job is unsuccessful, applicant data will be deleted. The data will also be deleted if an application is withdrawn, which applicants may do at any time. You can withdraw your consent to store your personal data beyond the retention period at any time.
i. Automated Decision-Making and Profiling:
As a responsible company, we refrain from automated decision-making or profiling in this data processing.
10. Contact Options
Our website offers a contact form for electronic communication. Alternatively, you can contact us via the provided email address. If the data subject contacts the data controller through one of these channels, the personal data provided will be automatically stored. The data storage is solely for the purpose of processing or contacting the data subject. Data will not be transferred to third parties.
11. Routine Deletion and Blocking of Personal Data
The data controller processes and stores personal data of the data subject only as long as it is necessary to achieve the purpose of storage. Storage may also occur if required by European or national legislators in Union regulations, laws, or other provisions to which the data controller is subject.
As soon as the purpose of storage no longer applies or the retention period prescribed by the aforementioned regulations expires, the personal data will be routinely blocked or deleted.
12. Rights of the Data Subject
If your personal data is processed as a user, you are considered a data subject under the GDPR. The following rights are granted to data subjects with respect to the data controller:
- Right to access (Article 15 GDPR)
- Right to rectification or deletion of personal data (Articles 16, 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to notification regarding the rectification or deletion of your personal data or restriction of processing (Article 19 GDPR)
- Right to data portability (Article 20 GDPR)
- Right to object (Article 21 GDPR)
- Right to withdraw consent given. The legality of the data processing carried out before the withdrawal remains unaffected by the consent that was valid up until that point (Article 7(3) GDPR)
- Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Contact details for the supervisory authorities of the individual countries: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
13. Hosting
The hosting services we use (services for the operation and provision of the website) serve to provide the following services: infrastructure and platform services, computing capacity, storage space, and database services, email sending, security services, as well as technical maintenance services, which we use for the operation of this online offer.
In this context, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospects, and visitors of this online offer based on our legitimate interests in the efficient and secure provision of this online offer in accordance with Article 6(1)(f) GDPR in conjunction with Article 28 GDPR (conclusion of a data processing agreement).
14. Disclosure of Data to Third Parties
To implement our service and, in particular, to ensure the functionality of our online presence, we use a provider. The provider is also used as an external service provider for the processing of your data. The provider has been carefully selected and commissioned by us, is bound by our instructions, and is regularly monitored.
15. Legal Basis for Processing
If we obtain consent from the data subject for processing operations of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For processing personal data required for the performance of a contract to which the data subject is a party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for the implementation of pre-contractual measures.
If processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.
If processing is necessary for the protection of a legitimate interest of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not outweigh the aforementioned interest, Article 6(1)(f) GDPR serves as the legal basis for the processing. Our legitimate interest lies in conducting our business activities.
16. Duration of Storage of Personal Data
Personal data is stored for the duration of the respective statutory retention period. After the period expires, the data will be routinely deleted unless there is a necessity for contract initiation or contract fulfillment.