§ 1 Basics on the collection of personal data
(1) The following provides information on the collection of personal data when using our website. Personal data is any data that relates to you personally, e.g. your name, address, email addresses, contact details, IP address.
(2) Personal data is collected and processed in accordance with the provisions of the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (GDPR). Personal data will only be processed if you, as the data subject, have given your consent or if another law permits or requires the processing.
(3) The data controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (GDPR) is:
65439 Flörsheim am Main, Germany
Phone: +49 6145 599.770
represented by Managing Directors Mr. Gerald Ambrozus and Mr. Andreas Weber.
You can contact our data protection officer at or at our street address by writing to the attention of “Data protection officer’.
§ 2 Collection of personal data when using this website
(1) Data collection via contact form
Our website lets you contact us via a contact form. By using the form, you provide us with your personal contact details (your last name, first name, company, email address, and your message). By submitting the contact request, you give us your consent to contact you (legal basis: GDPR Article 6(1)(a).) We will delete your data as soon as it is no longer necessary to store it, or restrict its processing if there is a legal obligation to retain it. You may revoke your consent at any time. To revoke your consent, an informal notification by email is sufficient.
(2) Contact by email
Our website allows you to contact us by email. By contacting us with questions of any kind, you give us your consent to contact you (legal basis: GDPR Article 6(1)(a).) When you contact us by email, the data you provide (your email address and, if applicable, your name and other contact details) will be stored by us in order to respond to your inquiry. We delete the data collected in this context once it is no longer necessary to store it or restrict its processing if there are statutory retention obligations. You can revoke your consent at any time. An informal notification by email is sufficient to revoke your consent.
(3) Collection of personal data when applying for positions in our company
What categories of data do we use and where do they come from?
If you contact us or have contacted us with an application, we process the following categories of personal data:
Your master data (such as your first name, last name, post- or pre-nominals such as academic degrees/titles, and nationality), contact details (such as home address, (mobile) telephone number, email address), and data relating to the entire application process (cover letter, certificates, questionnaires, interviews as well as any performance evaluations, qualifications, and previous positions). Furthermore, you may have voluntarily provided us with special categories of personal data (such as health data, religious affiliation, degree of disability) and social media profiles in your application letter or in the course of the application process, in which case processing will only take place if you have consented to it.
As a rule, your personal data will be collected directly from you as part of the recruitment process. In addition, we may have received data (applicant data) from third parties (e.g. recruitment agencies).
For what purposes and on what legal basis is data processed?
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the new German Federal Data Protection Act (BDSG), and all other relevant laws (e.g. BetrVG, AGG, etc.). The primary purpose of our data processing activities is to carry out and process the application procedure and to assess the candidate’s suitability for the position in question. The processing of your application data is necessary in order to decide on establishing an employment relationship. The primary legal basis for this is Article 6(1)(b) of the GDPR in conjunction with section 26 (1) of the new BDSG. In addition, Article 88(1) of the GDPR in conjunction with section 26(4) of the new Federal Data Protection Act (BDSG) and, if applicable, your separate consent pursuant to Article 6(1)(a) and Article 7 of the GDPR in conjunction with Section 26(2) of the new Federal Data Protection Act (BDSG). Where necessary, we also process your data on the basis of Article 6(1)(f) of the GDPR in order to protect our legitimate interests or those of third parties (e.g. authorities). The processing of special categories of personal data (e.g. health data) is based on your consent in accordance with Article 9(2)(a) of the GDPR in conjunction with Section 26(2) of the BDSG, unless statutory permissible circumstances such as Article 9(2)(b) in conjunction with Section 26(3) of the BDSG are relevant.
If you are not considered for a position and are rejected, we will ask you if you would like to be added to our talent pool. If you give your consent, we will add your application documents and all data collected during the application process to our talent pool. Your data is then always processed on the basis of your consent in accordance with Article 6(1)(a) of the GDPR.
You can revoke your consent to the processing and storage of your data at any time. An informal notification by email is sufficient to revoke your consent.
How do we store and process your data?
We store the application data collected in our Softgarden application system. The system is provided by softgarden e-recruiting GmbH from Germany. We have concluded a data processing agreement with this provider in order to meet the requirements of data protection and to be able to offer you maximum protection for your data. The provider’s data protection requirements are reviewed regularly. Access to the data in this system is restricted to a few employees by means of an authorization system.
We will delete your application data four months after completion of the application process for the position for which you have applied. We will only keep your data for a longer period if you have given your consent for us to do so.
If we have added your application data to our talent pool, we will store your data until you withdraw your consent. Every three months, we will ask you by email whether you still consent to your data being stored. If you object or do not respond within 14 days, we will delete your data.
We do not intend to disclose your data to other third parties. However, if we are legally obliged to do so, we will inform you accordingly.
We also offer you the option of contacting us by email at any time during the application process. When you contact us by email, the data you provide (your email address and, if applicable, your name and telephone number) will be stored by us in our email system in order to answer your questions. We delete the data collected in this context as soon as it is no longer necessary to store it, or restrict its processing if there are legal obligations to retain it.
(5) Web analytics with Matomo
Data is collected and stored on this website using the web analytics service software Matomo, matomo.org, a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”) on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Article 6(1)(f) of the GDPR. Pseudonymized user profiles may be created and evaluated from this data for the same purpose.
Cookies may be used for this purpose. The data collected using Matomo technology (including your pseudonymized IP address) is processed on our servers.
The information generated by the cookie in the pseudonymized user profile is not used to personally identify the visitor to this website and is not combined with personal data about the bearer of the pseudonym.
If you do not agree to the storage and evaluation of this data from your visit, you can object to the storage and use at any time by clicking here. In this case, an opt-out cookie will be stored in your browser, which means that Matomo will not collect any session data. Please note that the complete deletion of your cookies will also delete the opt-out cookie and you may have to reactivate it.
Alternatively, most modern browsers have a so-called “Do Not Track” feature, which tells websites not to track your user activity. Matomo respects this option.
(6) Storage of web server logs
In order to guarantee and monitor the stability and security of our application, we store personal data in log files. In addition to your email address, these include the IP address, the date and time of the request, the time zone difference from Greenwich Mean Time (GMT), the content of the request (specific page), access status/HTTP status code, the amount of data transferred in each case, the website from which the request comes, the browser, the operating system and its interface, the language and version of the browser software. The legal basis is our legitimate interest (GDPR Article 6 (1)(1)(f)). We store this data for up to six months.
(8) Links to our social media profiles
Our website contains links to our profiles on Facebook, Twitter, Instagram, LinkedIn, and Xing. We do not actively send any additional information to the platform operator with these links. However, every time a link is accessed, your browser sends various data to the platform operator, including the information that you have previously visited our site. If you are already logged in to the social media platform, this data may be associated with your profile and used by the platform operator for other purposes.
§ 3 Objecting or revoking consent to the processing of your data
(1) If you have given your consent to the processing of your data, you may revoke it at any time. An informal notification by email is sufficient to revoke your consent. Revoking consent affects the lawfulness of the processing of your personal data after you have given it to us.
(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is shown by us in each case in the following description of the functions. If you exercise your right to object, we ask you to explain the reasons why we should not process your personal data as we have done. In the event that you submit a justified objection, we will examine the situation and either stop or amend our data processing activities or show you our compelling legitimate grounds on which we will continue processing.
§ 4 Your rights
(1) You have the following rights vis-à-vis us with regard to your personal data:
(2) You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The data protection supervisory authority responsible for us is:
Der Hessische Datenschutzbeauftragte
65021 Wiesbaden, Germany
Phone: +49 611 140 80
Fax: +49 611 1408 900
Last updated: 9/10/2021