I. Name and contact details of the responsible person and his/her representative
Am Scheerleck 7
Telefon: +352 26710327
Contact details of the data protection officer: firstname.lastname@example.org
This privacy statement uses the terms of the General Data Protection Regulation (GDPR).
III. Data sources and categories of personal data
When processing your personal data, we distinguish between data that we collect directly from you (including via the devices you use) and data that we obtain from other sources.
a. Personal data that we collect from you:
If you call up and use our website for purely informational purposes, we only collect data that is automatically transmitted by your internet browser and, if necessary (after consent), further data for the use or marketing of our website. If you contact us, the content data and contact data (name, e-mail address, telephone number, etc.) are also processed. If you register for our newsletter, at least your e-mail address and possibly also your name will be processed.
If you apply for a job or training position with us, in addition to contact data (name, address, e-mail address, telephone number, etc.), we collect data concerning your education, work experience, time zone, availability and skills. In addition, you have the option of sending us further documents such as certificates, references, or cover letters. This data you provide will not be merged with any other data.
If you are our supplier, business partner, a data processor, or another contractual partner (or a representative of the contractual partner), we collect those personal data which we require in the context of the performance of the contract. Usually this includes: Contact data (name, address, e-mail address, telephone number, etc.), contract data and content data (e.g., content of a message).
b. Personal data we receive from external sources:
We do not collect data from external sources when using our website.
IV. Processing purposes
We process your data for one or more of the following purposes:
- for the contact you have requested,
- to process or initiate contracts with you,
- for advertising purposes,
- for statistical evaluations and analysis, and/or
- for the security of our website (log files);
V. Legal basis of the data processing
The processing of your data is based on the following legal grounds: your consent according to Art. 6 (1) a) GDPR, for the performance of a contract with you according to Art. 6 (1) b) GDPR, for the fulfilment of legal obligations according to Art. 6 (1) c) GDPR or for a legitimate interest according to Art. 6 (1) f) GDPR.
The legal basis for processing your data in accordance with the stated processing purposes is:
- Contacting: If you wish to contact us, for example because you send us an e-mail message or write to us via a contact form, the legal basis is Art. 6 (1) f) GDPR. We have a legitimate interest in fully processing your contact. Since you have contacted us, we assume that you have no interests that conflict with our processing of your request. If the contact is aimed at the conclusion of a contract or the fulfilment of a contract, the legal basis for the processing is Art. 6 (1) b) GDPR. If consent has been given, the legal basis for the processing of the contact is Art. 6 (1) a) GDPR.
- Contracts: The legal basis for the processing of your personal data for the execution or initiation of contracts is Art. 6 (1) b) GDPR. In addition, we also process your data in accordance with the statutory provisions resulting, for example, from tax law. This type of processing is lawful according to Art. 6 (1) c) GDPR. In the case of applications that do not lead to a contractual relationship, we have a legitimate interest in keeping track of the application data for a limited period of time in order to enforce our legal claims or defend ourselves against lawsuits, in accordance with Art. 6 (1) f) GDPR.
- Advertising purposes: We process your personal data for advertising purposes if we have your consent pursuant to Art. 6 (1) a) GDPR. For example, if you subscribe to our newsletter (via a double opt-in procedure). The success of the newsletter is measured. In a few cases, the processing of your personal data may take place due to our legitimate interest (Art. 6 (1) (f) GDPR) in advertising our products, for example if you are an existing customer of our company (see also recital 47 GDPR and Section 7 UWG).
- Statistical evaluations and analysis: We process your personal data for statistical evaluations and analysis of our website (for example, via cookies and other technologies) as well as our services if we have your consent pursuant to Art. 6 (1) a) GDPR. Due to the necessity of accounting, an indirect statistical evaluation of your personal data could occur due to a legal obligation (Art. 6 (1) c) GDPR). Furthermore, a processing of your data could take place for the purpose of statistical evaluation of the key figures of our economic activity. This represents a legitimate interest of our company according to Art. 6 (1) f) GDPR, as it enables us to carry out financial planning and allocate economic resources.
- Security of our website: Each time our website is accessed, usage data is transmitted by the respective internet browser and stored in log files, the so-called server log files. The data records stored are the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. These log file data records are evaluated in order to protect our website against attacks, to find and correct errors and to control the utilization of servers. This is also our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO. Cookies and other technologies may be necessary for the complete and correct presentation of our website. Unless otherwise specified, the complete and correct presentation is a legitimate interest on our part in this data processing pursuant to Art. 6 (1) (f) DSGVO.
VI. Legitimate interests
We obtain the data from you (including via the devices you use). If we do not collect the personal data directly from you, we will also tell you the source of the personal data and, if applicable, whether it is from publicly available sources.
VIII. Recipients or categories of recipients of the personal data
When processing your data, we work together with service providers who have access to your data. Possible recipients of your personal data are: (i) software companies that enable us to provide our services, help us to improve them and/or serve us for marketing purposes (for example, to send newsletters, emails, manage customer contacts or applications); (ii) public bodies and administrations, insofar as we are legally obliged to do so; (iii) payment service providers; (iv) hosting providers; (v) social media platforms; (vi) service companies, such as tax advisors or lawyers.
For the purposes of fulfilling the contract, we may also transfer your personal data to anyone to whom we assign rights arising from the contractual relationship with you.
Some of the recipients of your personal data are:
Google Ireland Limited
We integrate Google services on our website in order to (i) analyze and market the use of our website and (ii) integrate fonts. In doing so, personal data may be passed on to Google. We use the aforementioned services to (i) understand and market the use of our website (Google Analytics, Google Tag Manager) and to (ii) offer a complete and appealing website (Google Fonts).
HubSpot Ireland Limited
We use services from HubSpot for customer communication, newsletters, analysis, tracking, hosting and as a CRM system for contacting us. Personal data may be passed on to HubSpot in the process. We use the aforementioned services to initiate and maintain future and current business relationships and to provide our website.
VIII. International data transfers
Data is transferred to third countries outside the European Union. Information we collect from you could be processed in the United States or other third countries. Some third countries, for example the United States, have not currently received an adequacy decision from the European Union under Article 45 of the GDPR, which means that your data may not receive the same level of protection there as under the GDPR.
IX. Storage period
We store your personal data only as long as it is necessary to achieve the purpose of processing. We store your data if you have consented to the processing at most until you revoke your consent, if we need the data to perform a contract at most as long as the contractual relationship with you exists, if we use the data on the basis of a legitimate interest at most as long as your interest in deletion or anonymization does not prevail.
In addition, data may be stored if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. In these cases, the data is deleted when a storage or retention period prescribed by the aforementioned standards expires.
We store applicant documents for a period of six months if the application does not lead to an employment relationship and no further storage has been agreed. This period results from possible lawsuits against the responsible person according to the General Equal Treatment Act (AGG).
X. Your rights
As a data subject, you may have the right under applicable data protection law to:
- Information, in accordance with Art. 15 of the GDPR,
- Rectification, in accordance with Art. 16 of the GDPR,
- Data erasure ("right to be forgotten"), in accordance with Art. 17 of the GDPR,
- Limitation of processing, pursuant to Art. 18 GDPR,
- Data portability, in accordance with Art. 20 GDPR and/or
- Objection to the processing, pursuant to Article 21 of the GDPR.
Information on the right to object pursuant to Art. 21 (4) GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. We shall no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.
Revocation of consents
You also have the right to withdraw consent to the processing of personal data at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
XI. Right of appeal to a supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR or other data protection provisions.
XII. Requirement or obligation to provide data
Unless expressly stated at the time of collection, the provision of data is not required or obligatory. Such an obligation may result from legal requirements or contractual regulations. Failure to provide required personal data generally results in a contract not being able to be concluded and/or in us not being able to provide a requested service. Our employees will clarify on a case-by-case basis whether the provision of personal data is required by law or contract or necessary for the conclusion of a contract, whether there is an obligation to provide the personal data and what the consequences of not providing the personal data would be.
XIII. Automated decisions
We do not use automated decision-making mechanisms, including profiling, that have legal effect on the data subject or similarly significantly affect the data subject.
XIV. Data backup
We have taken extensive technical and organizational measures to protect your data against possible dangers, such as unauthorized access, unauthorized disclosure, modification or dissemination, as well as against loss, destruction or misuse. In order to protect your personal data from unauthorized access by third parties during transmission, we secure data transmissions using SSL encryption where necessary. This is a standardized encryption procedure for online services, especially for the web.
Technically necessary cookies and technologies are those without which our website is not functional and usable. This category only contains cookies and technologies that ensure basic functions and security features of the website. Technically necessary cookies and technologies can be set without the user's consent.
Non-essential cookies are all cookies and technologies that are not particularly necessary for the functioning of the website and are used specifically to collect personal data from the user via analytics, ads and other embedded content. Non-essential cookies and technologies (for example, cookies for marketing, advertising or customer analysis purposes) require the consent of the website user.
Please refer to our cookie banner to see which cookies and technologies we use and for what purpose.
By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for the website, it may no longer be possible to use all the functions of the website to their full extent.
Furthermore, you can also change your settings via the link in the footer of the website.