Privacy policy

March 2020

This data protection declaration clarifies the type, scope and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offer and the websites, functions and contents connected with it as well as external online presences, such as our social media profile (hereinafter referred to collectively as “online offer”). With regard to the terms used, such as “processing” or “responsible party”, we refer to the definitions in Art. 4 of the Basic Data Protection Regulation (DSGVO).

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the legal data protection regulations and this data protection declaration.

When you use this website, various personal data is collected. Personal data is data with which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet (e.g. communication by e-mail) can have security gaps. A complete protection of data against access by third parties is not possible.

Note on the responsible body
The person responsible for data processing on this website is:

Neurofeedback Netzwerk GmbH
Reichenaustrasse 19 a
78467 Konstanz
Germany
info(at)neurofeedback network(dot)org
Link to the imprint: https://neurofeedback-netzwerk.org/impressum/

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, e-mail addresses, etc.).

Types of data processed:

  • Stock data (e.g. names, addresses).
  • Contact data (e.g. e-mail, telephone numbers).
  • Contract data (e.g. services used, contract contents, contractual communication, names of contact persons)
  • Payment data (e.g. bank details, payment history).
  • Content data (e.g. text entries, logos).
  • Usage data (e.g. websites visited, interest in content, access times).
  • Meta/communication data (e.g. device information, IP addresses).

If you register in our therapist search and wish to use the forum, please note the additional provisions regarding the data collected in the context of the therapist search and the forum as well as in the general terms and conditions of the therapist search.

Categories of affected persons
Visitors and users of the online offer (in the following we will refer to the persons concerned collectively as “users”).

Purpose of processing:

  • Provision of the online offer, its functions and contents.
  • Answering of contact requests and communication with users.
  • Security measures.
  • Range measurement.

The data entered during registration is processed for the purpose of implementing the user relationship established by the registration and, if necessary, for initiating further contracts (Art. 6 Abs. 1 lit. b DSGVO).

For important changes, such as changes to the scope of the offer or technically necessary changes, we use the e-mail address entered during registration to inform you in this way.

Used terms
“Personal data” shall mean any information relating to an identified or identifiable natural person (hereinafter referred to as “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an on-line identifier (e.g. a cookie) or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means. The term is broad and covers virtually all processing of data.

“Controller” shall mean the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

“Processor” shall mean any natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

Relevant legal basis
In accordance with Art. 13 DSGVO, we inform you of the legal basis of our data processing. If the legal basis is not stated in the data protection declaration, the following applies: The legal basis for obtaining consents is Art. 6 Abs. 1 lit. a and Art. 7 DSGVO, the legal basis for processing for the purpose of fulfilling our services and implementing contractual measures and answering enquiries is Art. 6 Abs. 1 lit. b DSGVO, the legal basis for processing for the purpose of fulfilling our legal obligations is Art. 6 Abs. 1 lit. c DSGVO, and the legal basis for processing for the purpose of safeguarding our legitimate interests is Art. 6 Abs. 1 lit. f DSGVO. In the event that vital interests of the data subject or another natural person require the processing of personal data, Article 6 § 1 lit. d DSGVO serves as the legal basis.

Security measures
In accordance with Art. 32 DSGVO and taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of the processing as well as the varying probability of occurrence and severity of the risk to the rights and freedoms of natural persons, we take appropriate technical and organisational measures to ensure a level of protection appropriate to the risk.

Such measures shall include, in particular, safeguarding the confidentiality, integrity and availability of data by controlling physical access to data, as well as access, input, disclosure, safeguarding of availability and segregation of data relating to them. Furthermore, we have established procedures to ensure that data subjects’ rights are exercised, data is deleted, and we respond to data threats. Furthermore, we take the protection of personal data into account as early as the development or selection of hardware, software and procedures, in accordance with the principle of data protection through the design of technology and through data protection-friendly default settings (Art. 25 DSGVO).

Cooperation with contract processors and third parties
If, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transfer it to them or otherwise grant them access to the data, this is only done on the basis of a legal authorisation (e.g. if the data must be transferred to third parties, such as payment service providers, in accordance with Art. 6 Abs. 1 letter b DSGVO for the fulfilment of the contract), your consent, a legal obligation or on the basis of our legitimate interests (e.g. when using agents, webhosters, etc.).

If we commission third parties to process data on the basis of a so-called “contract processing agreement”, this is done on the basis of Art. 28 DSGVO.

Transfers to third countries
If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this is done in the context of using the services of third parties or if data is disclosed or transferred to third parties, this will only be done if it is done to fulfil our (pre-)contractual obligations, on the basis of your consent, on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we will only process or transfer data to a third country if the special requirements of Art. 44 ff. DSGVO. In other words, processing is carried out, for example, on the basis of special guarantees, such as the officially recognised determination of a level of data protection corresponding to that of the EU (e.g. for the USA through the “Privacy Shield”) or compliance with officially recognised special contractual obligations (so-called “standard contractual clauses”).

Rights of data subjects
You have the right to request confirmation as to whether or not data in question is being processed and to obtain information about this data and to receive further information and a copy of the data in accordance with Art. 15 DSGVO.

You have accordingly. Art. 16 DPA, you have the right to request the completion of data concerning you or the correction of incorrect data concerning you.

Under Art. 17 DSGVO, you have the right to demand that data concerning you be deleted immediately, or alternatively, under Art. 18 DSGVO, to demand that the processing of the data be restricted.

You have the right to receive data concerning you which you have provided to us in accordance with Art. 20 DSGVO and to demand that it be passed on to other responsible parties.

You also have the right to lodge a complaint with the competent supervisory authority in accordance with Art. 77 DSGVO.

Right of withdrawal
You have the right to revoke consents granted in accordance with Art. 7 Abs. 3 DSGVO with effect for the future.

Right of objection
You can object to the future processing of data concerning you at any time in accordance with Art. 21 DSGVO. In particular, you may object to processing for the purposes of direct advertising.

Cookies
Our Internet pages use so-called “cookies”. Cookies are small text files and do not cause any damage to your end device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or until your web browser automatically resolves them.

In some cases, cookies from third-party companies may also be stored on your  end device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for the processing of payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.

Cookies, which are required for the electronic communication process or for the provision of certain functions you have requested (e.g. shopping basket function), are stored on the basis of Art. 6 Para. 1 lit. f DSGVO. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimised provision of his services. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for specific cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately within the scope of this data protection declaration and, if necessary, request your consent.

Cookie Consent with Borlabs Cookie
Our website uses Borlabs Cookie Content Technology to obtain your consent to the storage of certain cookies in your browser and to document this consent in accordance with data protection regulations. The provider of this technology is Borlabs – Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, which stores the consents you have given or the revocation of such consents. This data is not passed on to the Borlabs cookie provider.

The data collected will be stored until you request us to delete it or until you delete the Borlabs cookie itself or until the purpose for which the data is stored no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs cookie content technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 Abs. 1 Sentence 1 lit. c DSGVO.

Collection of access data and log files
We or rather our hosting provider Host Europe, elevate on the basis of our legitimate interests within the meaning of Art. 6 Abs. 1 lit. f. DSGVO data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited site), IP address and the requesting provider.

For security reasons (e.g. to clarify misuse or fraud), log file information is stored for a maximum of 7 days and then deleted. Data whose further storage is required for evidential purposes is excluded from deletion until final clarification of the respective incident.

Provision of contractual services
We process the data of our contractual partners and prospective customers as well as other clients, customers, clients or contractual partners (uniformly referred to as “contractual partners”) in accordance with Art. 6 Abs. 1 lit. b. DSGVO in order to provide them with our contractual or pre-contractual services. The data processed in this context, the nature, scope and purpose of such processing and the necessity of processing them shall be determined by the underlying contractual relationship.

The processed data includes the master data of our contractual partners (e.g. names and addresses), contact data (e.g. e-mail addresses and telephone numbers) as well as contract data (e.g. services used, contract contents, contractual communication, names of contact persons) and payment data (e.g. bank details, payment history). As a matter of principle, we do not process special categories of personal data, unless they are part of a commissioned or contractual processing.

We process data which are necessary for the justification and fulfilment of the contractual services and point out the necessity of their disclosure, if this is not evident to the contractual partners. Disclosure to external persons or companies will only be made if it is necessary within the scope of a contract. When processing the data provided to us within the scope of an order, we act in accordance with the instructions of the client and the legal requirements.

When using our online services, we save the IP address and the time of the respective user action. The storage is based on our legitimate interests, as well as the user’s protection against misuse and other unauthorized use. This data is not passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Art. 6 Abs. 1 lit. c DSGVO.

The deletion of the data is carried out after the expiry of legal warranty and comparable obligations, the necessity for the storage of the data is reviewed every three years; in the case of legal archiving obligations, the deletion is carried out after their expiry. Details in any customer account shall remain until the deletion of the same.

Administration, financial accounting, office organization, contact management
We process data within the framework of administrative tasks as well as the organisation of our operations, financial accounting and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process within the scope of providing our contractual services. The basis for processing is Art. 6 Abs. 1 lit. c. DSGVO, Art. 6 Abs. 1 lit. f., Art. 28 DSGVO. Customers, interested parties, business partners and website visitors are affected by the processing. The purpose and our interest in the processing is administration, financial accounting, office organisation, archiving of data, i.e. tasks which serve to maintain our business activities, perform our tasks and provide our services. The deletion of data in relation to contractual services and contractual communication corresponds to the information mentioned in these processing activities.

In doing so, we disclose or transfer data to the financial administration, consultants, such as tax consultants or auditors, as well as other fee agencies and payment service providers.

Furthermore, we store information on suppliers, event organisers and other business partners on the basis of our business interests, e.g. for the purpose of contacting them at a later date. This data, which is mainly company-related, is stored permanently.

Therapist search
In the context of the entry in the therapist search we collect the following data: Name, address and contact details of the practice, as well as the main focus of the practice and areas of application of Neurofeedback. In addition, name of the contact person as well as documents proving professional training, Neurofeedback training and admission to practice. We treat this data in accordance with the basic data protection regulation (DSGVO). A collection, processing and/or use of personal data only takes place if the user has given his consent or if this is permitted by law. Any use of personal data on the basis of a legal permission is made in particular in connection with the fulfilment of contractual obligations towards the users. Should you decide to delete your entry in the therapist search, we will delete your data afterwards.

Forum
The data processed within the framework of the forum include in particular the access data (user name, password and e-mail address). We treat this data in accordance with the basic data protection regulation (DSGVO). A collection, processing and/or use of personal data only takes place if the user has given his consent or if this is permitted by law. Any use of personal data on the basis of a legal permission is made in particular in connection with the fulfilment of contractual obligations towards the users.

Users will be provided with the necessary access data for registration in the forum. When logging in for the first time, it is therefore necessary to change the password provided. For security reasons, the password should correspond to the state of the art, i.e. it should be complicated and not be used elsewhere.

The forum is a closed forum. The contributions are only visible for therapists who also have a VIP entry in the therapist search. The contributions of the authors are stored with their user name, the time and the content of the entry. When registering and writing entries, the IP addresses of the users are also saved. The storage is based on our legitimate interests and those of the users in protection against misuse and other unauthorized use, but also if the entries contain illegal content and the IP addresses could be used for legal prosecution. As a matter of principle, this data is not passed on to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so. We reserve the right to delete entries on the basis of proper consideration.

Contact form
If you send us enquiries via the contact form, your details from the enquiry form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We will not pass on this data without your consent.

The processing of this data is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO, insofar as your request is connected with the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 Abs. 1 lit. f DSGVO) or on your consent (Art. 6 Abs. 1 lit. a DSGVO), provided that this has been requested.

The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for which it was stored ceases to apply (e.g. after your enquiry has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Inquiry by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, your inquiry including all personal data (name, inquiry) will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

The processing of this data is carried out on the basis of Art. 6 Abs. 1 lit. b DSGVO, insofar as your enquiry is connected with the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on your consent (Art. 6 Abs. 1 lit. a DSGVO) and/or on our legitimate interests (Art. 6 para. 1 lit. f DSGVO), as we have a legitimate interest in the effective processing of the inquiries addressed to us.

The data you send to us via contact requests will remain with us until you request us to delete it, revoke your consent for storage or the purpose for which the data was stored no longer applies (e.g. after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

External Hosting
This website is hosted by an external service provider (Hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses and other data generated by a website.

The use of the hoster is for the purpose of fulfilling a contract with our potential and existing customers (Art. 6 Abs. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 Abs. 1 lit. f DSGVO).

Our hoster will only process your data to the extent necessary to fulfil its performance obligations and will follow our instructions with regard to this data.

In order to ensure that the processing complies with data protection regulations, we have concluded a contract for order processing with our host.

SSL or TLS encryption
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “https://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Deletion of data
The data processed by us will be deleted or restricted in their processing in accordance with articles 17 and 18 DSGVO. Unless expressly stated within the scope of this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any statutory storage obligations. If the data are not deleted because they are required for other and legally permissible purposes, their processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons.

According to legal requirements in Germany, data is stored in particular for 6 years in accordance with § 257 Abs. 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years in accordance with § 147 Abs. 1 AO (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

Newsletter
If you wish to receive the newsletter offered on the website, we need your name and an e-mail address. Further data is not collected or only collected on a voluntary basis. We use these data exclusively for sending the requested information and do not pass them on to third parties.

The processing of the data required for sending the newsletter is based exclusively on your consent (Art. 6 Abs. 1 lit. a DSGVO). You can revoke your consent to the storage of the data, the e-mail address and its use for sending the newsletter at any time. The legality of the data processing procedures already carried out remains unaffected by the revocation.

The data you have provided us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and deleted from the newsletter distribution list after you have cancelled your subscription. Data that has been stored by us for other purposes remains unaffected by this.

After you have been removed from the newsletter distribution list, your e-mail address may be stored in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest in the sense of Art. 6 Abs. 1 lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

Analysis tools and third-party tools
When you visit this website, your surfing behaviour can be statistically evaluated. This is mainly done with cookies and with so-called analysis programs. The analysis of your surfing behaviour is usually anonymous; the surfing behaviour cannot be traced back to you.

You can object to this analysis or prevent it by not using certain tools. You can find detailed information about these tools and about your options to object to them in the following data protection declaration.

Integration of third-party services and content

Within our online offer, we set the following priorities on the basis of our legitimate interests (i.e. interest in the analysis, optimisation and economic operation of our online offer within the meaning of Art. 6 para. 1 lit. f. DSGVO), we use content or service offers from third parties in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as “content”).

This always presupposes that the third-party providers of such content are aware of the IP address of the users, as without the IP address they would not be able to send the content to their browsers. The IP address is therefore required to display this content. We make every effort to use only such content whose respective providers use the IP address only to deliver the content. Third party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user’s device and may contain technical information on the browser and operating system, referring web pages, visiting time and other details on the use of our online offer, as well as being linked to such information from other sources.

Social Media Online Presence
We maintain online presences within social networks and platforms in order to be able to communicate with the customers, interested parties and users active there and to inform them about our services. When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply.

We point out that user data may be processed outside the European Union. This can result in risks for the users, because the enforcement of the users’ rights could be made more difficult. With regard to US providers certified under the Privacy-Shield, we would like to point out that they thereby undertake to comply with the data protection standards of the EU.

Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created from the user behaviour and the resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users’ computers, in which the usage behaviour and interests of the users are stored. Furthermore, data can also be stored in the user profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged in to them).

The processing of users’ personal data is based on our legitimate interests in effective user information and communication with users in accordance with Art. 6 Abs. 1 lit. f. DSGVO. If the users are asked by the respective providers for their consent to data processing (i.e. to give their consent, e.g. by ticking a check box or confirming a button), the legal basis for processing is Art. 6 Abs. 1 lit. a., Art. 7 DSGVO.

For a detailed presentation of the respective processing and the possibilities of objection (opt-out), we refer to the following linked information of the providers.

Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the data of the users and can directly take appropriate measures and provide information.
Unless otherwise stated in our data protection declaration, we process the data of the users insofar as they communicate with us within the social networks and platforms, e.g. write articles on our online presences or send us messages.

– Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany) – Datenschutzerklärung/ Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.

YouTube with enhanced data protection
This website can include videos from YouTube. The site is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this site before they watch the video. However, the enhanced privacy mode does not necessarily preclude the sharing of information with YouTube partners. For example, whether you’re watching a video or not, YouTube connects to the Google DoubleClick network.

When you launch a YouTube video on this site, it connects to the YouTube servers. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube can store various cookies on your device after starting a video. These cookies enable YouTube to obtain information about visitors to this website. This information is used, among other things, to gather video statistics, improve the user experience and prevent fraud. The cookies remain on your device until you delete them.

Once a YouTube video is launched, it may trigger further data processing operations over which we have no control.

YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 Abs. 1 lit. f DSGVO. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 Abs. 1 lit. a DSGVO; the consent can be revoked at any time.

Further information about data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

Google Web Fonts
This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. The Google Fonts are installed locally. There is no connection to Google servers.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in the Google privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps (with consent)
This website uses the map service Google Maps via an API. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

To ensure the privacy of this website, Google Maps is disabled when you first enter this website. A direct connection to Google’s servers is only established when you activate Google Maps yourself (consent pursuant to Art. 6 para. 1 lit. a DSGVO). This prevents your data from being transmitted to Google the very first time you enter the site.

After activation, Google Maps will save your IP address. This is then usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer after Google Maps has been activated.

You can find more information on the handling of user data in the Google privacy policy: https://www.google.de/intl/de/policies/privacy/.

Handling of applicant data
We offer you the opportunity to apply for a job with us (e.g. by e-mail, by post). In the following we will inform you about the scope, purpose and use of your personal data collected during the application process. We assure you that the collection, processing and use of your data will be in accordance with the applicable data protection law and all other legal provisions and that your data will be treated in strict confidence.

If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during job interviews, etc.) to the extent that this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-neu under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a DSGVO. Consent may be revoked at any time. Within our company, your personal data will only be passed on to persons involved in the processing of your application.

If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-neu and Art. 6 Para. 1 lit. b DSGVO for the purpose of carrying out the employment relationship.

If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to store the data you have submitted on the basis of our legitimate interests (Art. 6 Para. 1 lit. f DSGVO) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for further storage no longer applies.

A longer storage period can also take place if you have given your consent (Art. 6 para. 1 lit. a DSGVO) or if legal storage obligations prevent deletion.

Objection to advertising e-mails
The use of contact data published within the scope of the legal notice obligation for the transmission of not expressly requested advertising and information material is hereby contradicted. The operators of the website expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.

Status: March 2020

Created with Datenschutz-Generator.de by RA Dr. Thomas Schwenke and with eRecht24.de and adapted by the website owner.