Privacy Policy
General Information on Data Processing
In this Privacy Policy, we inform you about what personal data we process during your visit to our website and what rights you have. For the terms used, please refer to the definitions in Article 4 of the General Data Protection Regulation (GDPR).
Personal data refers to any information relating to an identified or identifiable natural person. This includes, for example, your name, your address and contact information, or your email address.
“Processing” means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, distribution, or any other form of making available; the alignment or combination; the restriction, erasure, or destruction.
A data subject is any identified or identifiable natural person whose personal data is processed by the controller.
The controlleror“data controller”is the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.
“Users” encompasses all categories of individuals affected by data processing. These include our business partners and other visitors to our website.
1. Name and Address of the Data Controller
Stabilus SE
Wallersheimer Weg 100
DE – 56070 Koblenz
Phone: +49 (0)261 – 8900-0
Email: info@stabilus.com
2. Data Protection Officer
Stabilus GmbH has appointed a Data Protection Officer. You can contact him at the email address datenschutz@stabilus.com or via our mailing address with the note “Data Protection Officer.”
3. Retention Period
Unless a specific retention period is stated in this Privacy Policy, we will retain your personal data until the purpose for which it was collected no longer applies. If you submit a valid request for erasure or revoke your consent to data processing, your data will be erased unless we have other legally permissible grounds for storing your personal data (e.g., retention periods under tax or commercial law); in the latter case, the data will be deleted once these grounds no longer apply.
4. General Information on the Legal Bases for Data Processing on This Website
If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) of the GDPR. In the event of explicit consent to the transfer of personal data to third countries, data processing is also based on Article 49(1)(a) of the GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g., via device fingerprinting), data processing is additionally carried out on the basis of Section 25(1) of the TDDDG. Consent may be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of precontractual measures, we process your data on the basis of Article 6(1)(b) of the GDPR. Furthermore, we process your data to the extent that it is necessary to comply with a legal obligation, based on Article 6(1)(c) of the GDPR. Data processing may also be carried out based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. We provide information about the applicable legal bases in each specific case in the following sections of this Privacy Policy.
5. Notice Regarding Data Transfers to the U.S. and Other Third Countries
Among other things, we use tools provided by companies based in the United States or other third countries that do not offer a level of data protection comparable to that of the EU. When these tools are active, your personal data may be transferred to these third countries and processed there. Please note that these countries cannot guarantee a level of data protection comparable to that of the EU. For example, U.S. companies are required to disclose personal data to law enforcement agencies without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on U.S. servers for surveillance purposes. We have no influence over these processing activities. Many data processing operations are only possible with your explicit consent. You may revoke any consent you have already given at any time. The legality of the data processing carried out prior to the revocation remains unaffected by the revocation.
6. Hosting of Our Website
We host our website with Interactive Network GmbH, Neue Mainzer Str. 75, 60311 Frankfurt am Main. The use of this service provider is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. We have entered into a data processing agreement with Interactive Network GmbH. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
7. Processing of Personal Data
7.1. Visiting Our Website
7.1.1. Scope of Data Processing
When you visit our website, your browser transmits certain data to our web server for technical reasons. This data consists of the following (so-called server log files):
IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Operating system and its access status / HTTP status code
Amount of data transferred
Website from which the request originated (“referrer URL”)
Browser, language, and version of the browser software
This data is not stored together with other personal data of the users.
7.1.2. Purpose of Data Processing
The temporary storage of the user’s IP address by our web server is technically necessary to display the website. For this purpose, your IP address must necessarily be stored for the duration of the session.
The above-mentioned data is stored in log files to ensure the proper functioning of our website. We also use this data to optimize our website and to ensure the security of our IT systems (e.g., for attack detection). The data is not analyzed for marketing purposes in this context.
7.1.3. Legal Basis for Processing
The legal basis for the temporary storage of this data and the log files is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the technically error-free display and optimization of our website—to this end, the server log files must be collected.
7.1.4. Duration of Storage
The data mentioned above is deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the case of data collected to provide the website, this occurs when the respective session ends. In the case of data stored in the log files, we retain it for up to 12 months. Storage beyond this period is possible if required due to a legitimate interest (e.g., to investigate attacks, misuse, or fraudulent activities). Data that must be retained for evidentiary purposes is exempt from deletion until the respective incident has been fully resolved.
7.1.5. Right to Object and Right to Erasure
The collection of data for the purpose of providing the website and its storage in log files is absolutely necessary for the operation of our website for technical reasons. Consequently, you have no right to object.
7.2. Contact Form
7.2.1. Scope of Data Processing
On our website, under the “Contact” menu item, there is a form you can use to submit inquiries. For suppliers, there is a separate form for brief applications under the “Stabilus Suppliers” menu item.
When you submit inquiries to us via these forms, we collect your company name, personal information, job title, address, contact information (including your email address), and details regarding your inquiry. Required fields are marked accordingly. Registered partners and suppliers can log in using a username and password. These are linked to the data we have on file.
The other data processed during the submission process (e.g., IP address, date, time) is used to prevent misuse of the form and to ensure the security of our IT systems.
7.2.2. Purpose of Data Processing
When you submit inquiries to us via the contact form, we process your personal data to respond to your inquiry and handle your request. We store your data in case follow-up questions arise.
7.2.3. Legal Basis for Data Processing
If your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures (e.g., a quote), processing is based on Article 6(1)(b) of the GDPR. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR).
7.2.4. Recipients of the Data Processing
When you contact us, your personal data will be processed by the internal departments responsible for handling your inquiry. In this context, no data will be disclosed to third parties. The data will be used exclusively for processing the conversation and handling your inquiry.
7.2.5. Retention Period
The data transmitted to us will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has ended and it can be inferred from the circumstances that the matter in question has been conclusively resolved. If the inquiry is made within the framework of a contractual relationship or for pre-contractual measures, we store the collected data in accordance with the statutory retention periods for a period of ten years.
7.2.6. Right to Object and Right to Erasure; Right to Withdraw Consent
You have the right to withdraw your consent to the processing of your personal data at any time. In such a case, the conversation cannot be continued. Please send your withdrawal of consent to info@stabilus.com. In this case, all personal data stored in the course of establishing contact will be deleted, provided there are no statutory retention periods.
There is no legal or contractual obligation to provide your data; however, it is not possible to process your request without this information.
7.3. Inquiries via Email or Phone
7.3.1. Scope of Data Processing
If you contact us via the provided email addresses or by phone, we will process the data submitted with your inquiry. This includes your name, phone number, email address, and the text of your message.
7.3.2. Purpose of Data Processing
When you contact us via email or by phone, we process your personal data to respond to your inquiry and address your concern. We store your data in case follow-up questions arise.
7.3.3. Legal Basis for Data Processing
If your inquiry relates to the performance of a contract or is necessary for the implementation of pre-contractual measures (e.g., a quote), the processing is based on Article 6(1)(b) of the GDPR. In all other cases, the processing is based on our legitimate interest in the effective handling of inquiries directed to us (Article 6(1)(f) of the GDPR).
7.3.4. Recipients of the Data Processing
When you contact us, your personal data will be processed by the internal departments responsible for your inquiry. These may also include affiliated companies of the Stabilus Group. Data will only be disclosed to third parties with your consent. The data will be used exclusively for the purpose of handling the conversation and processing your inquiry.
7.3.5. Duration of Storage
The data transmitted to us will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. This is the case when the respective conversation with the user has ended and it is clear from the circumstances that the matter in question has been conclusively resolved. If the inquiry is made within the framework of a contractual relationship or for pre-contractual measures, we store the collected data in accordance with the statutory retention periods for a duration of up to ten years.
7.3.6. Right to Object and Right to Erasure; Right of Withdrawal
You have the right to withdraw your consent to the processing of your personal data at any time. In such a case, the conversation cannot be continued. Please send your withdrawal of consent to info@stabilus.com. In this case, all personal data stored in the course of establishing contact will be deleted, provided that no statutory retention periods apply.
There is no legal or contractual obligation to provide your data; however, processing your inquiry is not possible without this information.
7.4. Newsletter
7.4.1. Investor Relations Newsletter
7.4.1.1. Scope of Data Processing
Under the “Investor Relations” menu item, you can subscribe to our newsletter (“IR Newsletter”). If you would like to receive it, we need your email address as well as information that allows us to verify that you are the owner of the provided email address and that you consent to receiving the newsletter. On a voluntary basis, you may provide us with your name, company information, address, phone number, and your relationship to Stabilus.
7.4.1.2. Purpose of Data Processing
We process your data to send you the newsletter, which regularly informs you via email about Stabilus’s business performance.
7.4.1.3. Legal Basis for Data Processing
The processing of the data entered in the newsletter subscription form is based exclusively on your consent (Art. 6(1)(a) GDPR).
You may revoke your consent to the storage of your data and email address, as well as their use for sending the newsletter, at any time—for example, by clicking the “Unsubscribe” link in the newsletter. The lawfulness of any data processing that has already taken place remains unaffected by this revocation.
7.4.1.4. Recipients of the Data Processing
The recipient of your data is the internal department responsible for investor relations.
We use a mailing application provided by EQS Group AG, Karlstraße 47, D-80333 Munich, www.eqs.com, to manage and send the newsletter. We have entered into a data processing agreement for the use of the aforementioned service. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
7.4.1.5. Retention Period
We store the data you have provided to us for the purpose of subscribing to the newsletter for as long as you wish to receive the newsletter. If you unsubscribe from the newsletter, we will delete your data. Data stored by us for other purposes remains unaffected by this.
7.4.1.6. Right to Object and Right to Erasure
You may unsubscribe from the newsletter at any time. An unsubscribe link is provided in every newsletter for this purpose.
7.4.2. Regular Newsletter
7.4.2.1. Scope of Data Processing
To subscribe to our newsletter, we need your email address. Optionally, you can provide your first and last name so that we can address you personally. Subscription is handled via the double opt-in process: After registration, you will receive an email in which you must confirm your subscription. We log the time of registration and confirmation, as well as the IP address used, in order to provide legally valid proof of consent.
We analyze our newsletter campaigns. To do this, our email service provider uses a tracking pixel that allows us to determine whether a message was opened and, if so, which links were clicked. This helps us identify, among other things, which content is accessed most frequently.
7.4.2.2. Purpose of Data Processing
We process your data to send our newsletter, manage subscriptions, and measure reach and engagement in order to optimize the content and technical aspects of our newsletter.
7.4.2.3. Legal basis for data processing
The distribution of the newsletter and the measurement of reach and engagement (opens/clicks) are based on your consent pursuant to Art. 6(1)(a) GDPR.
The logging of the double opt-in is based on our legitimate interest in verifiability pursuant to Article 6(1)(f) of the GDPR.
Withdrawal: You may withdraw your consent at any time with future effect; the lawfulness of the processing carried out up to the time of withdrawal remains unaffected.
7.4.2.4. Recipients of Data Processing
We use Brevo for mailing and administration. The provider is Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin. Brevo is a service that can be used, among other things, to organize and analyze the distribution of newsletters. The data you provide for the purpose of subscribing to the newsletter is stored on the servers of Sendinblue GmbH in Germany.
We have entered into a data processing agreement (DPA) pursuant to Article 28 of the GDPR for the use of the aforementioned service. This is a contract required by data protection law that ensures that Sendinblue processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
For more details, please refer to Brevo’s privacy policy at: https://www.brevo.com/de/datenschutz-uebersicht/
7.4.2.5. Retention Period
We store your data until you unsubscribe from the newsletter or revoke your consent. You can unsubscribe at any time using the unsubscribe link in the newsletter. Data that we have stored for other purposes remains unaffected by this.
After you unsubscribe from the newsletter distribution list, we will add your email address to a blacklist to prevent future mailings. The data from the blacklist is used solely for this purpose and is not combined with other data.
This serves both your interest and our interest in complying with legal requirements regarding the distribution of newsletters (legitimate interest within the meaning of Art. 6(1)(f) of the GDPR). There is no time limit on storage in the blacklist. You may object to this storage provided that your interests outweigh our legitimate interest.
7.4.2.6. Right to Object and Right to Erasure
You can unsubscribe from the newsletter at any time. An unsubscribe link is provided in every newsletter for this purpose. If you do not want your data analyzed by Brevo, you must unsubscribe from the newsletter.
7.5. Job Applications
7.5.1. Scope of Data Processing
If you are interested in working at Stabilus, you can find job openings we have posted under the “Stabilus Careers” menu item.
You can apply for these positions online by entering the required information into the provided forms. We have marked required fields accordingly. As part of the application process, we process the following categories of data: personal information (title, first name, last name, status as a person with a severe disability or equivalent status), contact information (email address, phone number), availability (notice period), and documents (resume, cover letter, and other attachments such as certificates or references).
You may also submit a speculative application via email. In this case, we process the personal data you provide to us as part of your application.
7.5.2. Purpose of Data Processing
We process your personal data to conduct the application process and to decide whether to establish an employment relationship, in particular for the selection of suitable candidates and the administrative handling of the application process.
7.5.3. Legal Basis for Data Processing
The legal basis for processing your personal data in the application process is Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG.
7.5.4. Recipients of the Data Processing
The recipients of your personal data are the Human Resources department, the department responsible for the job posting, and the works council within the scope of its co-determination rights under Section 99(1) of the Works Constitution Act (BetrVG).
We use the service provider Concludis GmbH, Frankfurter Straße 561, 51145 Cologne, for the operation, maintenance, and hosting of our applicant tracking system. This service provider also has access to the data. We have entered into a data processing agreement with them. This is a contract required under data protection law that ensures the service provider processes personal data from the application process only in accordance with our instructions and in compliance with the GDPR.
In principle, only those individuals who need access to your data for the proper conduct of the application process have access to it.
We do not disclose your personal data to third parties unless you have expressly consented to such disclosure or we are required to do so by law and/or by official or court orders.
No data is transferred to a third country or to an international organization.
7.5.5. Retention Period
If your application does not result in an employment relationship, we will delete your personal data no later than 6 months after the conclusion of the application process (e.g., notification of the rejection decision), taking into account the statute of limitations under the AGG, unless you have given us consent pursuant to Art. 6(1)(a) of the GDPR to retain your personal data for a longer period so that we may consider you for new job openings, if applicable. In this case, we will request your separate consent pursuant to Article 6(1)(a) of the GDPR.
If your application is successful and leads to an employment relationship with us, we will enter your application documents into our HR management system and your personnel file, to the extent necessary, based on Article 6(1)(b) GDPR and Section 26(1) of the German Federal Data Protection Act (BDSG) to the extent necessary for the performance of the employment relationship. In this case, your application documents will not be deleted until your employment relationship has ended and a further three years have elapsed since the end of the year.
7.5.6. Automated Decision-Making
We do not use automated decision-making.
7.5.7. Obligation to Provide Data
The provision of personal data is necessary for a decision regarding the establishment of an employment relationship. If you do not provide this information to us, we cannot proceed with the application process.
7.5.8. Right to Object and Right to Erasure
You may request that the personal data you have provided to us be updated or deleted at any time. To do so, please send an email to info@stabilus.com. This does not apply if you have applied for a specific position with us as part of an ongoing application process. In this case, we will retain the information you provided for this position until the statutory limitation periods for legal claims have expired (in particular, Section 15 of the General Equal Treatment Act (AGG)).
8. Cookies
8.1. Scope of Data Processing
Our website uses so-called “cookies.” Cookies are small text files that are stored in your internet browser’s cache when you visit the website. They do not cause any damage to your computer and do not contain any malware, such as viruses or Trojans.
Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain third-party services within websites (e.g., video playback).
Whether and which cookies we use when you visit our website depends on which areas and features of our online offering you use and whether you have consented to the use of cookies that are not technically necessary. You can find more information and options for making choices in the privacy settings, which you can access by clicking the corresponding icon on the left side of the screen.
In our Cookie Policy, we have listed the cookies we use by name, provider, purpose, and expiration date.
8.2. Purpose of Data Processing
Cookies serve various functions. Some cookies are technically necessary because certain website features would not work without them (e.g., displaying videos or integrating the cookie banner). Other cookies help us analyze user behavior or are used for advertising purposes.
8.3. Legal Basis for Data Processing
Cookies that are required to carry out the electronic communication process, to display the cookie banner, or to optimize the website (e.g., cookies for establishing a DNS connection) (necessary cookies), are stored by us on the basis of Art. 6(1)(f) of the GDPR. As the website operator, we have a legitimate interest in storing necessary cookies to ensure the technically flawless and optimized provision of our services.
If we request consent for the storage of cookies and comparable recognition technologies, processing is carried out exclusively on the basis of this consent (Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG); consent may be revoked at any time.
8.4. Duration of Storage
Cookies are stored on your device either temporarily for the duration of a session (so-called session cookies) or permanently (so-called persistent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.
8.5. Right to Object and Opt-Out
You can configure your browser so that you are notified when cookies are set and can choose to allow cookies only on a case-by-case basis, or so that the acceptance of cookies is blocked in specific cases or generally. You can also enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.
You can change your consent settings in our cookie banner at any time. To do so, please visit our Cookie Policy.
8.6. Consent via Cookiebot
Our website uses Cookiebot’s consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies, and to document this in compliance with data protection regulations. This technology is provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).
When you visit our website, a connection is established with Cookiebot’s servers to obtain your consents and other declarations regarding cookie usage. Cookiebot then stores a cookie in your browser to associate the consents you have granted—or their revocation—with your session. The data collected in this manner is stored until you request that we delete it, delete the Cookiebot cookie yourself, or the purpose for storing the data no longer applies. Mandatory statutory retention requirements remain unaffected.
Cookiebot is used to obtain the legally required consents for the use of cookies. The legal basis for this is Article 6(1)(c) of the GDPR.
Data Processing on Behalf of a Client
We have entered into a data processing agreement for the use of the aforementioned service. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
9. Analytics Tools and Advertising
9.1. Google Tag Manager
9.1.1. Scope of Data Processing,
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It is used solely to manage and deploy the tools integrated through it. Google Tag Manager also collects your IP address.
9.1.2. Purpose of Data Processing
Google Tag Manager is a tool that enables us to integrate tracking or analytics tools and other technologies into our website.
9.1.3. Legal Basis for Data Processing
Processing is based on Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.
9.1.4. Recipients of the Data Processing
Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States.
9.1.5. Right to Object and Right to Erasure
You may revoke your consent to the use of Google Tag Manager at any time.
9.2. Google Analytics
9.2.1. Scope of Data Processing
This website uses features of the web analytics service Google Analytics 4. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Through this, we receive various usage data, such as page views, time spent on the site, operating systems used, and the user’s location. This data is associated with the user’s respective device. It is not linked to a user ID.
Furthermore, Google Analytics allows us to track, among other things, your mouse and scroll movements and clicks. Google Analytics also uses various modeling approaches to supplement the collected data sets and employs machine learning technologies in data analysis. Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). In Google Analytics 4, IP address anonymization is enabled by default.
9.2.2. Purpose of Data Processing,
Google Analytics enables us to analyze the browsing behavior of our website visitors. By evaluating the data collected, we can compile statistics on the use of individual components of our website. This helps us improve our website and its user-friendliness.
9.2.3. Legal basis for data processing
The use of Google Analytics is based on your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. You may revoke your consent at any time.
9.2.4. Recipients of the Data Processing
Google processes the data on our behalf to analyze website usage and compile reports on website activity. We have entered into a data processing agreement with Google. Through this agreement, Google assures us that it processes the data in accordance with the General Data Protection Regulation and ensures the protection of the data subject’s rights.
9.2.5. Data Transfer to a Third Country
The information collected by Google regarding the use of this website is generally transferred to a Google server in the United States and stored there. The data transfer to the United States is based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
9.2.6. Retention Period
The data we send that is linked to cookies is automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.
9.2.7. Right to Object and Opt-Out
Browser Plugin You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on how Google Analytics handles user data, please see Google’s Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.
9.3. etracker
9.3.1. Scope of Data Processing
This website uses the etracker analytics service. The provider is etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg.
To this end, etracker collects, among other things, your truncated IP address, geographic information (up to the city level), log files, and other information that your browser transmits to our web server when you visit the website. This allows us to measure website interactions, such as time spent on the site, conversions (e.g., sign-ups), scroll events, clicks, and page views by the website visitor. These interactions are assigned to the website visitor for the duration of the current day, so that the visitor is recognized upon subsequent visits. Once the day has ended, visitor recognition is no longer possible.
9.3.2. Purpose of Data Processing,
etracker allows us to analyze the browsing behavior of our website visitors. This enables us to optimize our website and its user-friendliness.
9.3.3. Legal basis for data processing
No cookies will be stored in your browser without your consent, nor will any information be read from your device’s storage. Processing takes place, subject to your consent, on the basis of Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. You may revoke your consent at any time.
9.3.4. Duration of Storage
The IP address is anonymized as soon as possible during analysis with etracker, and visitor recognition is possible for no longer than the duration of the current day. Please refer to our Cookie Policy for the retention period of cookies.
9.3.5. Right to Object and Right to Erasure
For more information on etracker’s privacy policy, please visit https://www.etracker.com/datenschutz/.
We have entered into a data processing agreement for the use of the aforementioned service. This is a contract required by data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
9.4. Microsoft Clarity
9.4.1. Scope of Data Processing
This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity (hereinafter “Clarity”). This is a tool for analyzing user behavior, specifically to track visits (using only anonymized IP addresses) to this website.
In doing so, Clarity primarily tracks mouse movements, mouse clicks, and keyboard interactions, and creates a graphical representation of which parts of the website users scroll to most frequently (heat maps). Clarity can also record sessions, allowing us to view page usage in the form of videos. We also receive information about general user behavior on our website.
9.4.2. Purpose of Data Processing
Clarity enables us to analyze the use of our website and, using the information gathered, optimize it and make it more user-friendly.
9.4.3. Legal Basis for Data Processing
We use cookies to utilize Clarity. The use of the aforementioned service is based on Article 6(1)(a) of the GDPR and Section 25 of the TDDDG. Consent may be revoked at any time.
Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.
9.4.4. Recipients of the Data
Clarity uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Your personal data is stored on Microsoft’s servers (Microsoft Azure Cloud Service) in the United States.
We have entered into a data processing agreement with Microsoft. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
9.4.5. Retention Period
If you have given us your consent regarding Clarity, Clarity uses persistent cookies that are automatically deleted after 365 days.
9.4.6. Right to Object and Opt-Out
Consent for data collection and storage may be revoked at any time with future effect. Microsoft uses the system developed by the Digital Advertising Alliance to allow users to opt out of Clarity. You can opt out of Clarity telemetry by selecting “Microsoft” on the following webpage: https://optout.aboutads.info/?c=2&lang=EN. If you install the “Protect My Choices” app for your browser, you can ensure that your opt-out preference is saved.
For more details on Clarity’s privacy practices, see here:
https://docs.microsoft.com/en-us/clarity/faq.
10. Plugins and Tools
10.1. Userlike
10.1.1. Scope and Purposes of Data Processing
We use Userlike (hereinafter “Userlike”) to process user inquiries via our support channels or live chat systems. The provider is Userlike UG (limited liability), Probsteigasse 44–46, 50670 Cologne. Messages you send to us are stored in the Userlike ticket system or answered by our staff via live chat. When you communicate with us via Userlike, we and Userlike store, among other things, your name and email address—if you have provided them—as well as your chat histories. This data is compiled into a profile.
10.1.2. Purpose of Data Processing
We process your data to handle inquiries via our support channels or live chat systems.
10.1.3. Legal Basis for Data Processing
The use of Userlike is based on Article 6(1)(f) of the GDPR. We have a legitimate interest in processing your inquiries as quickly, reliably, and efficiently as possible. If consent has been obtained, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
10.1.4. Recipients of the Data
Your data is processed by the relevant departments within our company.
We have entered into a data processing agreement with Userlike. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
10.1.5. Duration of Storage
Messages sent to us will remain on our systems until you request their deletion or the purpose for storing the data no longer applies (e.g., after your inquiry has been fully processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.
10.1.6. Right to Object and Right to Erasure
Consent to the storage of cookies may be revoked at any time. You can disable cookies at any time via the cookie settings.
For more information, please refer to Userlike’s Privacy Policy: https://www.userlike.com/de/data-privacy and https://www.userlike.com/de/blog/live-chat-software-datenschutz-dsgvo.
10.2. hCaptcha
10.2.1. Scope and Purposes of Data Processing
We use hCaptcha (hereinafter “hCaptcha”) on this website. The provider is Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA (hereinafter “IMI”).
To this end, hCaptcha analyzes the website visitor’s behavior based on various characteristics.
This analysis begins automatically as soon as a website visitor accesses a website with hCaptcha enabled. For the analysis, hCaptcha evaluates various pieces of information (e.g., IP address, the duration of the website visitor’s stay on the website, or mouse movements made by the user).
10.2.2. Purpose of Data Processing
hCaptcha is used to verify whether data entry on this website (e.g., in a contact form) is performed by a human or by an automated program.
10.2.3. Legal Basis for Data Processing
The storage and analysis of the data are based on Article 6(1)(f) of the GDPR. We have a legitimate interest in protecting our web offerings from abusive automated scraping and from SPAM. If consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG, to the extent that the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.
10.2.4. Recipients of the Data
The data collected during the analysis is forwarded to IMI. If hCaptcha is used in “invisible mode,” the analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.
Data processing is based on standard contractual clauses contained in the Data Processing Addendum to IMI’s General Terms and Conditions or in the data processing agreements.
10.2.5. Right to Object and Opt-Out
Consent to the storage of cookies may be revoked at any time. You can disable cookies at any time via the cookie settings.
For more information about hCaptcha, please refer to the privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.
11. Social Media Buttons
Our website contains buttons with hyperlinks to the social networks XING, LinkedIn, YouTube, and Facebook, where we maintain publicly accessible profiles. You can recognize the respective providers by their logos. We use these platforms to communicate with users and inform them about our offerings and career opportunities.
When you visit our site, no personal data is initially transmitted to these social media platforms. Data is only transmitted to these platforms when you click on the respective button. In this case, the respective provider receives the information that you have accessed the corresponding page of our website (e.g., date, time, IP address, page accessed).
If you are logged in to the social media provider’s account, the data we have collected about you may be directly associated with your existing account with that provider. We recommend that you log out of a social network regularly after use, and especially before clicking the button, as this will help you avoid having your data linked to your profile with the plugin provider.
It is possible that the provider of the respective services or content may process your data for its own additional purposes. However, since we have no influence over the data collected by third parties or how they process it, we cannot provide binding information regarding the purpose and scope of the processing of your data. For further information regarding the purpose and scope of the collection and processing of your data, please refer to the privacy policies of the respective providers, who are responsible for data protection. There you will also find additional information regarding data processing and your options to object. For a detailed description of the respective processing activities and the options to object (opt-out), please refer to the information provided by the providers via the links below.
Xing (New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany); Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung;
LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland); Privacy Policy: https://www.linkedin.com/legal/privacy-policy;
Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland); Privacy Policy: https://www.facebook.com/about/privacy;
YouTube / Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), Privacy Policy: https://policies.google.com/privacy.
12. Google Fonts (local)
This site uses so-called web fonts provided by Google to ensure consistent font display. The Google Fonts are installed locally. No connection to Google’s servers is established. For more information about Google Web Fonts, visit https://developers.google.com/fonts/faq and see Google’s Privacy Policy: https://policies.google.com/privacy?hl=de.
13. Data Security and Hosting
We implement state-of-the-art technical, contractual, and organizational measures to ensure the security of data processing. In doing so, we ensure compliance with data protection laws, in particular the General Data Protection Regulation (GDPR), and that the data we process is protected against destruction, loss, alteration, and unauthorized access. These security measures also include the encrypted transmission of data between your browser and our servers. Please note that SSL encryption is only enabled for transmissions over the Internet if the lock icon appears in your browser window and the address begins with https://. SSL (Secure Socket Layer) uses encryption technology to protect data transmission from unauthorized access by third parties. If this option is not available, you may also choose not to send certain data over the Internet.
14. Your Rights
If we process your personal data, you have the following rights:
Right of Access (Art. 15 GDPR): You have the right to request information about the personal data processed regarding you. This right also includes the right to receive a copy of the relevant data.
Right to Rectification (Art. 16 GDPR): You have the right to request the immediate rectification of personal data concerning you if it is inaccurate. Taking into account the purposes of the processing, you have the right to request that personal data concerning you be completed if it is incomplete.
Right to erasure (Art. 17 GDPR). You have the right to request that personal data concerning you be erased without undue delay if one of the grounds specified therein applies.
Right to restriction of processing (Art. 18 GDPR). You have the right to request the restriction of the processing of your personal data if one of the grounds listed there applies.
Right to Data Portability ( Art. 20 GDPR). You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and under certain circumstances, you have the right to transmit this data to another controller without hindrance.
Right to Object (Art. 21 GDPR). You have the right to object at any time to the processing of your data for reasons arising from your particular situation, provided that the data processing is based on a balancing of interests pursuant to Art. 6(1)(f) GDPR. This also applies to profiling based on this provision within the meaning of Article 4(4) of the GDPR. If you object, we will no longer process your personal data unless there are demonstrably compelling legitimate grounds for the processing that override your interests, or the processing is necessary for the establishment, exercise, or defense of legal claims.
Withdrawal of Consent (Article 7(3) of the GDPR). Pursuant to Article 7(3) of the GDPR, you generally have the right to withdraw your consent to the processing of personal data at any time.
With regard to the right of access and the right to erasure, the restrictions set forth in Sections 34 and 35 of the Federal Data Protection Act (BDSG) apply.
Right to lodge a complaint (Art. 77 GDPR). You have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). An overview of German supervisory authorities can be found at https://www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html.
The supervisory authority responsible for our location is: The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate, P.O. Box 30 40, 55020 Mainz, Phone: +49 (0) 6131 8920-0, https://www.datenschutz.rlp.de, Email poststelle@datenschutz.rlp.de.
15. Changes to the Privacy Policy
We reserve the right to amend the Privacy Policy to adapt it to changes in the legal landscape or to changes in the service and data processing. However, this applies only with respect to statements regarding data processing. If user consent is required or if parts of the Privacy Policy contain provisions governing the contractual relationship with users, changes will be made only with the users’ consent.
Please review the content of the Privacy Policy regularly.
Date of the Privacy Policy: June 21, 2023