Privacy policy
Welcome to the website of Jung since 1928 GmbH. Data protection and the protection of your personal rights are very important to us. On this page, we would like to inform you about what data Jung since 1928 GmbH processes and for what purposes. If you have any questions or suggestions regarding the privacy policy, please feel free to contact us.
1. Foreword and selected terminology
This privacy policy informs visitors and users of our website about the online data processing operations in which personal data is processed. It also provides information about our processing operations that do not primarily take place online.
- GDPR is the abbreviation for the European General Data Protection Regulation.
- BDSG is the abbreviation for the Federal Data Protection Act in its current version.
- Personal data is any information that can be used to identify a natural person (see Art. 4(1) GDPR for definition). This includes, for example, names, email addresses, telephone numbers, but also data such as IP addresses or customer numbers.
- The processing of personal data includes all operations, such as the collection, storage, transmission, archiving or deletion of personal data (definition in Art. 4(2) GDPR).
- The data subject within the meaning of data protection law is any natural person whose personal data is processed.
- Further definitions of terms can be found in the General Data Protection Regulation, specifically in Article 4 of the GDPR (Definitions).
2. Responsible body and data protection officer
Responsible body
JUNG since 1828 GmbH & Co. KG
Maybachstr. 19
71634 Ludwigsburg
Telefon: 07141 6435-0
Telefax: 07141 6435-129
E-Mail: zentrale[at]jung-europe.de
data protection officer
DSB Externer Datenschutzbeauftragter Stuttgart
Fabian Henkel
Diplom-Betriebswirt (FH)
Zertifizierter Datenschutzbeauftragter
Telefon: +49(0)176 32744172
E-Mail: info@externer-datenschutzbeauftragter-stuttgart.de
Web: https://www.externer-datenschutzbeauftragter-stuttgart.de
3. Compact overview
The following content provides a brief overview of the processing of personal data. More detailed information can be found in the respective sections.
Security on our website
Our website has a TLS certificate, which is used to encrypt data transmission processes. This happens, for example, when you send us a message via the form. However, as a precaution, we would like to point out that 100% security in electronic data processing is not possible and that there is always a residual risk.
Data that you transmit to us
On this page, we process the data that you enter yourself, for example in a form. In this case, the purpose of the processing is determined by the type of form and by this privacy policy. If you send us a message by email or contact us in any other way, we will also process your data in accordance with the purpose of the contact.
Automatic server log files
On the other hand, our server automatically records all accesses and thus also IP addresses (log files). This serves to defend against attacks, analyse access figures and ensure smooth operation.
Use of cookies
Cookies help us to provide various services. You can find more detailed information on this in this privacy policy.
Analysis and tracking tools
In addition to pure server log files, which also provide us with information about page views, we use analysis tools. These tools give us detailed insights into the content visited on our site, the flow of behaviour and, for example, the country from which access took place. For such services to work, cookies must be set for the site visitor or scripts must be executed. If we currently use such services, we explicitly point this out in this privacy policy.
Externe Plugins und Content Delivery Networks
We use plugins and content delivery networks in some cases; well-known examples of such services would be the video service YouTube or the map service Google Maps. If such services are integrated via a website, access data is transferred to the services. This usually includes your IP address and other metadata, such as the time and date of access. This is usually done by setting cookies. If we currently use such services, we will explicitly point this out in this privacy policy.
Newsletter / Direct marketing
Direct marketing to existing customers in the legitimate interest
We reserve the right to send our customers newsletters on the basis of Section 7 (3) UWG in conjunction with Article 6 (1) (f) GDPR. You can, of course, object to receiving direct marketing information at any time.
Direct marketing based on your consent
If you give us your consent, we will send you newsletters until you revoke your consent. You can revoke your consent at any time with future effect.
Other recipients of data
Use of processors
We use processors in accordance with the provisions of Art. 28 GDPR, for example in the areas of IT services, web hosting, email hosting or printing services. These processors process personal data for us in accordance with our instructions.
Use of non-specialist services
If necessary (for example, to execute a contract), we will pass on your data to banks, shipping service providers, our tax advisor or solicitor, for example.
Legal obligations
In addition, in certain cases we are obliged to report to the competent authorities on the basis of the Money Laundering Act. Furthermore, we are subject to other legal obligations, such as commercial law or tax law, which require us to pass on certain data to tax authorities, for example.
Investigation of criminal offences
If necessary for the investigation of a criminal offence, we will pass on data to the law enforcement authorities.
General information on deletion periods for personal data
We process the data for as long as is necessary for the respective purpose. Where necessary, we process your personal data for the duration of our business relationship, which also includes the initiation and execution of a contract. In addition, we are obliged to comply with statutory retention obligations. If data processing is based on your consent, we will delete your data after you revoke your consent.
Transfer of personal data to a third country
We try to use service providers and services from providers within the European Union wherever possible. Transfer to a third country is possible if you have given us your consent and/or we have concluded a contract for order processing in accordance with Art. 28 GDPR, taking into account appropriate safeguards. In individual cases, we may use plugins or tools that are hosted in third countries, but we use them on the basis of our legitimate interests. In such cases, we will point this out where appropriate.
Obligation to provide personal data
You are free to decide whether to provide personal data for specific purposes on our website. The provision of personal data is contractually required for the initiation and execution of legal transactions.
4. Legal basis for the processing of personal data
The legal bases for the processing of personal data are exceptions that permit the processing of personal data. The essential legal bases are set out in particular in Article 6 GDPR. The legal bases on which we process personal data are described in the individual processing operations in this privacy policy.
Consent given (Art. 6(1)(a) GDPR)
Consent is one of these legal bases and requires that the person giving consent does so in an informed manner and on a voluntary basis. Consent based on Article 6(1)(a) GDPR can be revoked at any time without giving reasons.
Contract-related data processing (Art. 6(1)(b) GDPR)
The processing of personal data for the purpose of initiating or executing contracts is also a legal basis and is defined in Article 6(1)(b) of the GDPR.
Legal obligation (Art. 6(1)(c) GDPR)
The exception to data processing based on a legal obligation can be found in Art. 6(1)(c) GDPR. For example, we are obliged to comply with certain retention periods under commercial and tax law.
Legitimate interests (Art. 6(1)(f) GDPR)
The processing of personal data on the basis of a balancing of interests pursuant to Art. 6(1)(f) GDPR permits processing after careful consideration of financial or legal interests against the interests of the data subject that are worthy of protection.
5. Your rights under the General Data Protection Regulation
Every natural person has certain rights, which are defined in particular in Articles 15 to 21 and 77 of the GDPR. You have the following rights, which you can assert against us.
Right to withdraw consent granted in accordance with Article 7 of the GDPR
You may revoke your consent at any time without giving reasons, with effect for the future.
Right to information pursuant to Art. 15 GDPR (restrictions pursuant to Section 34 BDSG possible)
You have the right to request information about the data processed about you and the purposes of the processing at any time.
Right to rectification pursuant to Art. 16 GDPR
If you discover that we are processing incorrect or incomplete data about you, you have the right to request that it be corrected.
Right to erasure pursuant to Art. 17 GDPR (restrictions pursuant to Section 35 BDSG possible)
You have the right to request the deletion of your personal data that we process at any time. If complete deletion is not possible, for example because we have to comply with statutory retention obligations or we can assert legitimate interests for other reasons, we will restrict your data until these reasons no longer apply.
Right to restriction of processing pursuant to Article 18 of the GDPR
You have the right to request the restriction of the processing of your personal data. To do so, you can contact us at any time at the address given in the legal notice. The right to restriction of processing applies in the following cases:
- If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
- If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
- If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
Right to data portability pursuant to Art. 20 GDPR
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.
Right to object to certain processing operations and direct marketing pursuant to Article 21 GDPR
If data processing is based on Article 6(1)(e) or (f) of the GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection pursuant to Article 21(1) GDPR).
If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).
Right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR in conjunction with Section 19 BDSG
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
6. External hosting
This website is hosted externally. The personal data collected on this website is stored on the servers of the host/hosts. This may include IP addresses, contact enquiries, meta and communication data, contract data, contact details, names, website accesses and other data generated via a website.
External hosting is carried out for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6(1)(b) GDPR) and in the interests of providing our online services securely, quickly and efficiently through a professional provider (Art. 6(1)(f) GDPR). Our host will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.
We use the following hosting provider
Timme Hosting
Ovelgönner Weg 43
21335 Lüneburg
Order processing
We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Website visitors are only processed in accordance with our instructions and in compliance with the GDPR.
7. Automatic server log files
Our web server automatically logs all accesses and thus also the IP addresses of visitors. This serves to defend against attacks, analyse access figures and ensure smooth operation. We have a legitimate interest in this (Art. 6 lit. f GDPR).
In addition to the IP address, the server log usually records further metadata about the session. This data can be found below.
- Date and time of access
- Information about the browser type and version used
- Details about the operating system used
- Device (client)
- Referrer URL (the page from which you arrived at our site)
- Hyperlinks accessed
We process this data only for the purposes mentioned above. We delete server log files after three months at the latest.
8. Use of cookies
Our website uses cookies to provide services and ensure full functionality. Cookies – small text files that are automatically stored in your browser or device – can have various functions and contain a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
Cookies are stored on your device and transmitted to our site from there. As a user, you have full control over the use of cookies. You can specify in your browser settings whether and which cookies you allow. We recommend that you set your browser to notify you when a website wants to set cookies on your device. This gives you control over which cookies you want to allow. However, if you do not allow cookies, the functionality of websites may be limited.
Cookies are generally divided into non-persistent and persistent cookies. A further distinction is made between first-party cookies (which come directly from our web server) and third-party cookies (which are set on your device via third-party providers).
Cookie types by duration
Session Cookies
Session cookies are deleted at the latest when you leave our website and close your browser.
Persistent Cookies
These cookies remain stored even after you leave our website and close your browser. Persistent cookies can have different lifespans, ranging from one day to several years. These cookies can perform various functions, for example, your login details can be stored so that you are automatically logged in when you visit our website again. Other persistent cookies are used for analysis, tracking and marketing purposes.
Cookie types by origin
We use both first-party cookies and third-party cookies. First-party cookies are cookies that originate directly from us. Third-party cookies are cookies that are placed via a third-party provider. We use various third-party cookies for analysis, tracking and marketing purposes.
Cookie types by function
Technically required or necessary cookies
These cookies enable our website to function. Without technically necessary cookies, our site would be unusable or only usable to a very limited extent. For example, such cookies are used when you log in to our site or add a product to your shopping basket. In some cases, necessary cookies also serve security purposes.
Analysis and statistics cookies
Analytical cookies collect information about the behaviour of website visitors, providing insight into how long they stay on the site and what information they access. Information is also collected about which website visitors come from, how many visitors the websites have and how long users stay on the websites. The purpose of these cookies is to optimise our website based on the information collected.
Tracking and marketing cookies
Tracking and marketing cookies (also known as remarketing and retargeting cookies) enable analysis of browser behaviour; they store information about which content has been visited or which products the user has searched for (tracking means monitoring in this sense). Based on these cookies, a user can also be identified across pages with the aim of displaying advertisements tailored to their interests.
Legal basis and information on setting your preferences
We use technically necessary cookies in the interest of a functional and stable website (Art. 6 para. 1 lit. f GDPR), and we only use other cookies with your consent (Art. 6 para. 1 lit. a GDPR). You can set your preferences regarding the selection of non-essential cookies at the beginning of your visit, and you can also adjust your preferences at any time.
The individual legal bases for the use of various tools that employ cookies can be found in the relevant sections of our privacy policy.
9. Cookiebot-Cookie-Einwilligungsmanagement
We use Cookiebot consent technology to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in accordance with data protection regulations. This technology is provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter referred to as ‘Cookiebot’).
When you visit our website, a connection is established to Cookiebot’s servers in order to obtain your consent and other declarations regarding the use of cookies. Cookiebot then stores a cookie in your browser to assign the consents you have given or revoked to you. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie yourself, or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.
We use Cookiebot on the basis of our legitimate interests (Art. 6(1)(f) GDPR) to obtain the legally required (Art. 6(1)(c) GDPR) consent for the use of technically non-essential cookies and cookie-like technologies.
Order processing
We have concluded a contract for order processing (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
This website uses cookies. We use cookies to personalise content and advertisements, to offer social media features and to analyse traffic to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data you have provided to them or that they have collected as part of your use of their services.
Cookies are small text files used by websites to make the user experience more efficient.
By law, we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies, we need your permission.
This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.
You can change or withdraw your consent at any time from the cookie statement on our website.
Find out more about who we are, how you can contact us and how we process personal data in our privacy policy.
Please provide your consent ID and the date when contacting us regarding your consent.
Your consent applies to the following domains: jung-packaging.co.uk
Your current status: Decline.
Your consent ID: XSyfzhuDxF5gSuikV5fVyWwmPDvHZp6ZCTSSZJbfArmPvNitmkD2Mw==Einwilligungsdatum: Montag, 12. Mai 2025 um 12:49:47 MESZ
The cookie statement was last updated by Cookiebot on 15 September 2025:
Necessary (3)
Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
| Name | Supplier | Purpose | Maximum storage period | Type |
|---|---|---|---|---|
| 1.gif | Cookiebot | Used to count the number of sessions on the website, which is necessary for optimising the delivery of CMP products. | Meeting | Pixel tracker |
| CookieConsent | Cookiebot | Stores the user’s consent status for cookies on the current domain. | 1 year | HTTP-Cookie |
| wpEmojiSettingsSupports | jung-packaging.de | This cookie is associated with a bundle of cookies that serve the purpose of providing and presenting content. The cookies maintain the correct state of fonts, blog/image sliders, colour themes, and other website settings. | Meeting | HTML Local Storage |
Preferences (1)
Preference cookies enable a website to remember information that affects the way a website behaves or looks, such as your preferred language or the region you are in.
| Name | Supplier | Purpose | Maximum storage period | Type |
|---|---|---|---|---|
| wp-wpml_current_language | jung-packaging.de | Refers to the country code calculated based on the user’s IP address. Used to determine which language should be used for users. | Meeting | HTTP-Cookie |
Marketing (2)
Marketing cookies are used to track visitors across websites. The intention is to display advertisements that are relevant and appealing to the individual user and therefore more valuable to publishers and third-party advertisers.
| Name | Supplier | Purpose | Maximum storage period | Type |
|---|---|---|---|---|
| _ga | Used to send data to Google Analytics about the device and behaviour of the visitor. Tracks the visitor across devices and marketing channels. | 2 years | HTTP-Cookie | |
| _ga_# | Used to send data to Google Analytics about the visitor’s device and behavior. Tracks the visitor across devices and marketing channels. | 2 years | HTTP-Cookie |
10. Data Processing in the Context of Communication and Contact
Message via contact form
You have the option to send us messages via the contact form. In doing so, we process the data that you enter into the data entry fields. Mandatory fields are marked and must be filled in. The purpose of data processing is to handle your request and, if necessary, to contact you afterwards. The legal basis for processing the data entered into the contact form is generally your consent (Art. 6 (1) lit. a GDPR). You may withdraw your consent at any time with effect for the future, without providing reasons. Furthermore, we process your data for the initiation or execution of purchase contracts if, for example, you send us product-related questions (Art. 6 (1) lit. b GDPR).
Communication via email
If you send us an email, we process your data according to the content and purpose of the message. Processing is generally carried out based on pre-contractual measures or within the scope of performing a contractual relationship pursuant to Art. 6 (1) lit. b GDPR and Art. 6 (1) lit. f GDPR. We have a legitimate interest in processing your inquiry quickly and efficiently.
If the message relates to a product or service, we generally process your data based on our legitimate interests under Art. 6 (1) lit. b GDPR.
Please note that we store all incoming emails in accordance with the principles of proper bookkeeping for a period of ten years, starting from the first day of the following year in which the message was received. Therefore, if you request deletion of the data, we will restrict the processing of your data for handling purposes and store it only to comply with retention periods, based on our legitimate interest.
Communication via telephone or fax
If you contact us by telephone or fax, we also process your data either for the initiation and performance of contractual relationships (if the content is product- or service-related) and/or in our legitimate interest, analogous to contact via email. We do not record conversation content, but we may take notes to process your inquiry. These notes are stored until the purpose of data processing has been achieved.
11. Information for Applicants
Privacy Policy for the Application Process
If you apply to us—whether for an advertised position or on your own initiative—we process your data for the purpose of carrying out the selection process. It does not matter whether you apply by post, by email, or, if available for the respective position, via an online form.
Scope and legal basis of processing
As a rule, during the application process we only process the data that you have provided to us yourself. Additional sources may only be considered after informing you and obtaining your consent, for example, whether we may contact a former employer. The legal basis for conducting an application process is Section 26 BDSG in conjunction with Art. 6 (1) lit. b GDPR (initiation of an employment contract). If you give us your consent to store your data for a longer period of time, this is based on Art. 6 (1) lit. a GDPR.
Deletion periods for applicant data
We delete applicant data no later than 4 months after the conclusion of the application process (once a candidate has been selected and all applicants have been informed of the outcome). The purpose of data processing generally no longer applies once the selection process has ended, but we have a legitimate interest (Art. 6 (1) lit. f GDPR) in being able to defend ourselves against possible claims by rejected applicants. If you believe that your interests in immediate deletion outweigh this, you may request deletion. We will review your request and provide you with feedback.
After the expiry of the above-mentioned period, your data will be deleted unless we need to defend ourselves in ongoing proceedings, for example, in the event of a claim under the General Equal Treatment Act (AGG). In this case, we will delete your data once the proceedings have been concluded, unless statutory retention periods apply. If we are permitted to store your data for a longer period of time on the basis of your consent, we will delete your data when you request us to do so and withdraw your consent. We may also delete your data before you withdraw consent if it becomes apparent that no suitable position will become available.
Inclusion in our applicant pool
If we are unable to offer you a position at the present time, we may ask for your consent to store your data for a longer period. This serves the purpose of offering you a suitable position at a later date. The legal basis for processing your data in our applicant pool is your consent (Art. 6 (1) lit. a GDPR). You may, of course, withdraw your consent at any time with effect for the future. If you do not withdraw your consent yourself within a period of two years, we will delete your data from our applicant pool at the latest by then.
12. Direct Marketing
Direct marketing to existing customers based on legitimate interest
We reserve the right to use data collected in the context of a purchase contract or service contract for direct marketing purposes by email or post pursuant to Section 7 (3) UWG, provided that the customer has not objected or does not object to such use. Direct marketing is limited exclusively to offers for similar products or services to those already purchased by the customer from us.
We use your data for direct marketing purposes in our legitimate interest for up to three years after the last business transaction.
We have a legitimate economic interest (Art. 6 (1) lit. f GDPR) in informing our customers about new products and improving our services. Of course, you may object to receiving direct marketing communications at any time. Please address your objection to the controller named above. In addition, each newsletter contains information on how you can exercise your right to object.
Direct marketing based on your consent
If you would like to subscribe to the newsletter offered on our website, we require your email address and information that allows us to verify that you are the owner of the provided email address and that you agree to receive the newsletter. No further data is collected or only on a voluntary basis. For the management and distribution of newsletters, we use newsletter service providers as described below.
CleverReach
We use CleverReach to send newsletters. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter “CleverReach”). CleverReach is a service that helps organize and analyze newsletter distribution. The data you enter for the purpose of subscribing to the newsletter (e.g., email address) is stored on CleverReach servers in Germany and/or Ireland.
Newsletters sent via CleverReach enable us to analyze the behavior of newsletter recipients. For example, it can be analyzed how many recipients opened the newsletter message and how often which link in the newsletter was clicked. Using so-called conversion tracking, it can also be analyzed whether a predefined action (e.g., purchasing a product on this website) occurred after clicking a link in the newsletter. Further information on data analysis through CleverReach newsletters can be found at:: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
Data processing takes place on the basis of your consent (Art. 6 (1) lit. a GDPR). You can revoke your consent at any time by unsubscribing from the newsletter. The lawfulness of data processing carried out before the revocation remains unaffected.
If you do not want analysis by CleverReach, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter.
The data you provide for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe. Data stored by us for other purposes remains unaffected.
After unsubscribing from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider, if necessary, to prevent future mailings. The data from the blacklist will only be used for this purpose and not merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) lit. f GDPR). Blacklist storage is not time-limited. You may object to this storage if your interests outweigh our legitimate interest.
For further details, please refer to the CleverReach privacy policy at: https://www.cleverreach.com/de/datenschutz/.
Data processing agreement
We have concluded a data processing agreement (DPA) with the above-mentioned service provider. This is a contract required by data protection law, which ensures that this provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
13. Audio and Video Conferences with MS Teams
We use the Microsoft Teams tool for communication. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in the Microsoft Teams Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement.
Microsoft Teams processes all data you provide or use to access the tool (email address and/or your telephone number). In addition, the conference tool processes the duration of the conference, start and end times of participation, the number of participants, and other “context information” related to the communication process (metadata).
Furthermore, the provider of the tool processes all technical data necessary for the handling of online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speakers, and type of connection.
If content is exchanged, uploaded, or otherwise provided within the tool, this content is also stored on the servers of the tool provider. Such content may include cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared while using the service.
Please note that we have only limited influence on the data processing operations of the tools used. Our options are largely determined by the corporate policies of the respective providers. Further information on data processing by the conferencing tools can be found in the privacy policies of the respective providers, which we have listed below this section.
Purpose and legal bases
We use Microsoft Teams to communicate with prospective or existing contractual partners or to provide certain services to our customers (Art. 6 (1) lit. b GDPR). In addition, the use of the tools serves to simplify and accelerate communication with us and our company (legitimate interest within the meaning of Art. 6 (1) lit. f GDPR). Where consent has been requested, the use of the respective tools is based on this consent; consent can be revoked at any time with effect for the future.
Storage period
The data we directly collect via video and conference tools will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected.
We have no influence on the storage duration of your data processed by the operators of the conferencing tools for their own purposes. For details, please refer directly to the privacy policies of the respective tool providers.
Data processing agreement
We have concluded a data processing agreement (DPA) with the above-mentioned service provider. This is a contract required by data protection law, which ensures that this provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.
14. Analytics Tools and Advertising
Google Tag Manager
We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform independent analyses. It is solely used to manage and deploy the tools integrated via it. However, Google Tag Manager does collect your IP address, which may also be transmitted to Google’s parent company in the United States.
The use of Google Tag Manager is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in the fast and uncomplicated integration and management of various tools on the website. If consent has been requested, the processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) as defined by the TDDDG. Consent can be revoked at any time.
The company is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the U.S. Each company certified under the DPF is obliged to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Google Analytics
This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data such as page views, time spent on the site, operating systems used, and the origin of the user. These data may be compiled in a user ID and assigned to the respective device of the website visitor.
In addition, Google Analytics allows us to record your mouse movements, scrolling behavior, and clicks. Furthermore, Google Analytics employs various modeling approaches to supplement collected datasets and applies machine learning technologies in data analysis.
Google Analytics uses technologies that enable the recognition of users for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is generally transmitted to a Google server in the United States and stored there.
The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
Data transfer to the U.S. is based on the EU Commission’s Standard Contractual Clauses (SCCs). Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the EU-U.S. Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the U.S. Each company certified under the DPF is obliged to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Data Processing Agreement
We have concluded a data processing agreement (DPA) with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.
15. Plugins and Tools on Our Website
PML Plugin for Multilingual Functionality
We use the WPML plugin provided by OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter: WPML). WPML is a multilingual plugin for WordPress. We use the WPML plugin to present our online presence in different languages. When you visit our website, a cookie is placed on your device to save your selected language setting. No data is transferred to WPML itself. Processing takes place locally on our server.
Further information on how WPML processes data can be found here: https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/
We use the WPML plugin on the basis of our legitimate interest in providing visitors with a simple language selection option. The legal basis is Art. 6 (1) lit. f GDPR.
Information on the storage duration of WPML cookies can be found here: https://wpml.org/documentation/privacy-policy-and-DSGVO-compliance
Right to object and options for removal
Information on how to object to the use of WPML cookies can be found here: https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/
16. Our Social Media Presences
Data processing by social networks
We maintain publicly accessible profiles on social networks. The specific social networks we use are listed below.
Social networks such as Facebook, Twitter, etc. can usually comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g., Like buttons or advertising banners). Visiting our social media presences triggers a variety of data protection–relevant processing operations. Specifically:
If you are logged into your social media account and visit our social media presence, the operator of the social media platform may associate this visit with your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media platform. In such cases, this data collection occurs, for example, via cookies stored on your device or by recording your IP address.
Using the collected data, the operators of the social media platforms can create user profiles in which your preferences and interests are stored. This way, you may be shown interest-based advertising both inside and outside of the respective social media presence. If you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.
Please also note that we cannot fully track all processing activities carried out on the social media platforms. Depending on the provider, additional processing operations may therefore be carried out by the operators of the social media platforms. For details, please refer to the terms of use and privacy policies of the respective social media platforms.
Legal basis
Our social media presences are intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (e.g., consent pursuant to Art. 6 (1) lit. a GDPR).
Controller and exercising your rights
When you visit one of our social media presences (e.g., Facebook), we are jointly responsible with the operator of the social media platform for the data processing triggered during this visit. You can exercise your rights (access, rectification, erasure, restriction of processing, data portability, and lodging a complaint) in principle both against us and against the operator of the respective social media platform (e.g., against Facebook).
Please note that despite joint responsibility with the social media platform operators, we do not have full influence on the data processing activities of the social media platforms. Our options are largely determined by the corporate policies of the respective provider.
Storage period
The data we directly collect via our social media presences will be deleted from our systems as soon as you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions—particularly retention periods—remain unaffected.
We have no influence on the storage duration of your data processed by the operators of the social networks for their own purposes. For details, please refer directly to the privacy policies of the respective social networks (see below).
Social Networks in Detail
We maintain a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter: Meta). According to Meta, the data collected may also be transferred to the USA and other third countries.
We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement specifies which data processing operations we and Meta are responsible for when you visit our Facebook Page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. You can adjust your advertising settings independently within your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads. Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381. For further details, please see Facebook’s Privacy Policy: https://www.facebook.com/about/privacy/.
We maintain a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 und https://de-de.facebook.com/help/566994660333381. For further details on how your personal data is handled, please refer to Instagram’s Privacy Policy: https://help.instagram.com/519522125107875.
We maintain a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. For details on how your personal data is handled, please see XING’s Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.
We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
LinkedIn uses advertising cookies. If you wish to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs. For further details on how your personal data is handled, please see LinkedIn’s Privacy Policy: https://www.linkedin.com/legal/privacy-policy.
YouTube
We maintain a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how your personal data is handled, please see YouTube’s Privacy Policy: https://policies.google.com/privacy?hl=de.
17. Supplementary Data Protection Information for Our Business Partners
Data Categories and Purposes of Processing
We process personal data of our service providers and partners that we receive directly in the course of our business relationship. If we have received data from you, we generally process it only for the purposes for which it was obtained or collected.
In general, we process the following categories of data from you:
- First name, last name
- Address and/or company address
- Telecommunications data
- Email address
- Company
- Professional function and/or position
- Bank details / other payment information
- Data relating to the history of the business relationship
During the initiation phase of the business relationship and throughout the course of the relationship—particularly through personal, telephone, or written contacts initiated by you or one of our employees—further personal data may be generated, e.g.:
- Information about the communication channel, date, reason, and outcome
- (Electronic) copies of correspondence
- Information about participation in direct marketing activities
In addition, we process personal data that we have lawfully obtained from publicly accessible sources (e.g., commercial and association registers, press, media, internet) and are permitted to process.
Processing of data for other purposes will only be considered if the necessary legal requirements under Art. 6 (4) GDPR are met. Any information obligations under Art. 13 (3) GDPR and Art. 14 (4) GDPR will, of course, be observed in such cases.
Legal Bases on Which We Process Your Data
Based on Your Consent (Art. 6 (1) lit. a GDPR)
We process personal data for one or more specific purposes if you have given us your consent. If personal data is processed on the basis of your consent, you have the right to revoke your consent at any time with effect for the future.
Data Processing for the Fulfillment of Contracts (Art. 6 (1) lit. b GDPR)
We process personal data to fulfill contracts. Contract fulfillment includes, for example, the conclusion, execution, and settlement of a contract. In addition, we process personal data necessary for the performance of pre-contractual measures, such as the initiation of a contract, upon your request.
Data Processing Based on a Legal Obligation (Art. 6 (1) lit. c GDPR)
As with any company, we must comply with retention and other documentation obligations, which may also involve documents containing personal information. When we process data for these purposes, the processing is based on a legal obligation.
Data Processing Based on a Legitimate Interest (Art. 6 (1) lit. f GDPR)
If we process data based on a legitimate interest, you have the right to object to the processing of personal data, taking into account the provisions of Art. 21 GDPR. As far as the specific purpose allows, we process your data in a pseudonymized or anonymized form.
Other Recipients of Your Data
Transfer to Processors under Art. 28 GDPR
We engage processors (Art. 28 GDPR), particularly in IT services and, for example, printing services, who process your data on our instructions. When we commission service providers to fulfill our tasks, we always comply with data protection regulations, in particular by transferring data only after concluding contracts on data processing. We will gladly inform you about which processors we use.
For the Fulfillment of a Contractual Relationship
If required for the execution of a contract with you, we may transfer your data, for example, to our bank for payment processing or to shipping service providers such as Deutsche Post, DHL, UPS, GSL, DPD, or other relevant service providers.
Transfer Due to a Legal Obligation
If a statutory or official obligation exists, we may transfer your data to public authorities or institutions (e.g., authorities in the context of law enforcement).
Other Parties, if You Have Given Consent
If you have given explicit consent, we may also transfer your data to other parties. This is done only within the limits of verifiable consent provided by you.
Information on Retention Periods of Personal Data
Principle of Purpose Limitation and Compliance with Legal Retention Periods
We process data as long as it is necessary for the respective purpose. Where required, we process your personal data for the duration of our business relationship, which also includes initiating and executing a contract.
In addition, we, like any company, are required to comply with statutory retention periods, e.g., those arising from commercial and tax law. Where statutory retention obligations exist, the respective personal data is stored for the duration of the retention period. The storage period is also determined by statutory limitation periods, which generally amount to three years according to §§ 195 ff. of the German Civil Code (BGB), but in certain cases can be up to thirty years. After the retention period expires, it is checked whether further processing is necessary. If no necessity exists, the data is deleted.
In general, such retention periods in the context of legal transactions (according to §147 AO / §257 HGB / §14b UStG) amount to ten years, beginning with the year following the legal transaction.
Concrete Example
If you provide us with your contact data, for example via email, telephone, or by handing over your business card, we store this data on the basis of Art. 6 (1) lit. b GDPR for pre-contractual measures and on the basis of a legitimate interest (Art. 6 (1) lit. f GDPR) for smooth and targeted communication. If no legal transaction occurs, we delete your data upon your request or if no further contact occurs within three years. If you enter into a legal transaction with us (Art. 6 (1) lit. b GDPR), we store your data until the expiration of the commercial and tax retention periods, which is ten years. After this period, we check whether the data can be deleted and delete it if applicable.
Emails and Business Letters
We archive all email correspondence for ten years. If you send us an email, your data and the entire email content are stored accordingly for ten years. Most emails are considered business letters, and emails may also contain tax-relevant information. The effort to review each individual email in detail is, in our opinion, disproportionate to the benefit and the legitimate interests of the sender. Of course, you can request deletion at any time, and we will conduct an individual review. The result will be communicated to you and may lead to deletion or restriction of processing, depending on the content of the correspondence.
Revocation of Your Consent
If we process your data on the basis of your consent (Art. 6 (1) lit. a GDPR), we will delete it upon your revocation. Unless there are legitimate interests against complete deletion. For example, we generally retain the consent declaration for up to three years after receiving your revocation in our legitimate interest (Art. 6 (1) lit. f GDPR). We retain the consent exclusively under restricted processing to defend ourselves in case of dispute.
Legal or Contractual Obligation to Provide Personal Data
Providing personal data is regularly necessary for the initiation, conclusion, execution, and settlement of a contract. If you do not provide the required personal data, it will not be possible for us to conclude or fulfill a contract with you.
Transfer to a Third Country
Your personal data is generally processed in data centers in Germany or the European Union. Transfer to a third country is only considered if you have given your consent or if we have concluded a contract for data processing pursuant to Art. 28 GDPR, taking into account appropriate safeguards or other suitable guarantees