Campus Forum GmbH and its employees take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection provisions and this privacy policy. Personal data is any data by which you can be personally identified.

In accordance with the provisions of the EU General Data Protection Regulation (GDPR), the following privacy policy informs you about which data we collect, how we collect it, and what we use it for.

1. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) and national data protection legislation is

Campus Forum GmbH
Campus-Boulevard 55
52074 Aachen
Germany

Represented by:
Alexandra Meltzow-Altmeyer

Telephone: +49 241 80-23612
Email: info@campusforum.de

2. Purposes and legal bases for the processing of data

Which of your data is processed in a particular case depends on the services commissioned or agreed. We use personal information exclusively for the purpose for which it was provided to us.

Purpose and legal basis for the performance of a contract or of pre-contractual measures
Personal data is processed on the basis of its necessity for the performance of a contract or of a pre-contractual measure to which you are, or are to become, a party; the legal basis in this case is Art. 6 (1) (b) GDPR. This applies in particular to the following purposes:

• carrying out contractually agreed activities,
• providing services in accordance with your orders,
• communicating with you,
• invoicing and collecting payments, remuneration or fees, as well as ensuring the traceability of the transactions carried out,
• engaging, managing and monitoring the service providers we commission on your behalf,
• providing support to the Campus Centers in matters of content, organisation and marketing.

Purpose and legal basis on the grounds of a legitimate interest of ours or of a third party
In addition, we process your personal data where this is necessary in order to safeguard legitimate interests of ours or of a third party; the legal basis in this case is Art. 6 (1) (f) GDPR. Enquiries from third parties are answered only to the extent that no interests of yours meriting protection preclude such disclosure. This applies, among others, to the following purposes: the further development of our services, the performance of contracts, and the transfer of data to a contractually engaged debt collection agency or to external legal counsel where dunning proceedings have been unsuccessful.

Purpose and legal basis for compliance with legal obligations
Your personal data is also processed in order to comply with legal obligations; the legal basis in this case is Art. 6 (1) (c) GDPR. This includes, for example: commercial and tax law, criminal law, the taking of evidence, criminal prosecution, and the enforcement of civil law claims (for instance by order of public authorities or courts).

Purpose and legal basis on the basis of your consent
We process your personal data where you have given us your consent (for example for marketing purposes); the legal basis in this case is Art. 6 (1) (a) GDPR. The lawfulness of such processing is then established on the basis of your consent. Consent may be withdrawn at any time. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

3. Sources of data

The categories of data we process were either collected directly from you (for example in connection with contracts, personal communication, contact by email and the exchange of business cards) or obtained from publicly accessible sources.

4. Recipients of data

Within our company, your personal data is made available to the responsible employees and organisational units (for example via a shared address database). Your data is disclosed to external third parties only for a specific purpose, in particular in connection with the performance of contracts, on the grounds of a legitimate interest of ours or of a third party, in order to comply with legal obligations, on the basis of your consent, or to external service providers acting for us as processors.

5. Duration of storage of your data

We process and store your personal data for as long as this is necessary for the fulfilment of our contractual and legal obligations or on the grounds of a legitimate interest. Once the data is no longer required for these purposes, it is routinely deleted, unless its further processing – for a limited period – is necessary for the following purposes: compliance with retention periods under commercial and tax law and the preservation of evidence within the statutory limitation periods. In such cases, the data is deleted only after the expiry of the applicable period.

6. Transfer of personal data to a third country

As a rule, your personal data is processed within the member states of the European Economic Area. Data is transferred to a third country only where you request this in connection with a contract or a pre-contractual measure, where it is necessary, or where you have given us your consent.

7. Data subject rights

Information, restriction of processing, erasure
Within the framework of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin and recipients and the purpose of the data processing, and, where applicable, a right to rectification, restriction of processing or erasure of such data.

Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You may withdraw consent already given at any time. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Right to lodge a complaint with the competent supervisory authority
You have the right to lodge a complaint with a competent supervisory authority. The supervisory authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf, Germany. Web: www.ldi.nrw.de, Email: poststelle@ldi.nrw.de

Right to data portability
You have the right to have data which we process automatically on the basis of your consent or in performance of a contract transferred to you or to a third party in a common, machine-readable format. Where you request the direct transfer of the data to another controller, this will only take place where it is technically feasible.

In order to enable us to comply with your rights as a data subject, we ask you to address your request to our management, preferably in writing.

When you use this website, various items of personal data are collected.

Please note that data transmission over the internet (for example when communicating by email) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible.

For security reasons and in order to protect the transmission of confidential content, such as enquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser changes from “http://” to “https://” and by the padlock symbol in your browser bar. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

1. Provision of the website and creation of log files

Description and scope of the data processing
Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:

• browser type and browser version
• operating system used
• referrer URL
• host name of the accessing device
• time of the server request
• IP address (anonymised)

This data is also stored in our system’s log files. This does not affect your IP address or any other data that would allow the data to be attributed to you as a user. This data is not stored together with any other personal data relating to you. This data is not merged with data from other sources.

Legal basis for the data processing
The legal basis for the temporary storage of this data is Art. 6 (1) (f) GDPR.

Purpose of the data processing
The temporary storage of your IP address by the system is necessary in order to enable the website to be delivered to your device. For this purpose, your IP address must remain stored for the duration of the session. These purposes also constitute our legitimate interest in the data processing pursuant to Art. 6 (1) (f) GDPR.

Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Where data is collected in order to provide the website, this is the case once the respective session has ended.

Right to object and to request removal
The collection of data for the provision of the website and the storage of that data in log files is strictly necessary for the operation of the website. Consequently, there is no possibility for you to object.

2. Use of cookies

Description and scope of the data processing
Our website uses cookies. Cookies are text files which are stored in, or by, the internet browser on your computer system. When you access a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters which enables the browser to be uniquely identified when the website is accessed again.

We use cookies in order to make our website more user-friendly. Some elements of our website require the accessing browser to be identifiable even after moving from one page to another. The following data is stored and transmitted in these cookies: cookie settings.

We also use cookies on our website that enable an analysis of users’ browsing behaviour. The following data may be transmitted in this way: frequency of page views and use of website functions.

The data collected in this way is pseudonymised by technical means. It is therefore no longer possible to attribute the data to you. The data is not stored together with any other personal data relating to you. When you access our website, you are informed about the use of cookies for analysis purposes and your consent to the processing of the personal data used in this context is obtained. Reference is also made to this privacy policy in this context. You can influence the collection of data through the settings in your browser and through the cookie settings on our website.

Legal basis for the data processing
The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) (f) GDPR. Where you as a user have given your consent, the legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 (1) (a) GDPR.

Purpose of the data processing
The purpose of using technically necessary cookies is to make it easier for you to use our website. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognised even after moving from one page to another. User data collected by means of technically necessary cookies is not used to create user profiles.

Duration of storage, right to object and to request removal
Cookies are stored on your device and transmitted from it to our site. You as a user therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent.

3. Contact form and email contact

Description and scope of the data processing
A contact form is available on our website which can be used to contact us electronically. If you make use of this option, the data entered in the input form is transmitted to us and stored. This data comprises: your name, your email address, the subject you specify and the content of your message. At the time the message is sent, the following data is also stored: your IP address, together with the date and time of entry. Your consent to the processing of this data is obtained as part of the sending process, and reference is made to this privacy policy. Alternatively, you can contact us using the email address provided. In this case, the personal data you transmit with your email is stored. The data is not passed on to third parties in this context. The data is used exclusively for processing the correspondence.

Legal basis for the data processing
Where the user has given consent, the legal basis for the processing of the data is Art. 6 (1) (a) GDPR. The legal basis for the processing of data transmitted in the course of sending an email is Art. 6 (1) (f) GDPR. Where contact by email is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR.

Purpose of the data processing
The processing of the personal data from the input form serves solely to enable us to handle your enquiry. In the case of contact by email, this also constitutes the requisite legitimate interest in processing the data. The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

Duration of storage
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input form of the contact form and for data transmitted by email, this is the case once the respective correspondence with you has ended and the matter has been conclusively resolved, unless the further processing of the data is necessary for the following purposes: compliance with retention periods under commercial and tax law and the preservation of evidence within the statutory limitation periods. In such cases, deletion takes place only after the expiry of the applicable periods. The additional personal data collected during the sending process is deleted after a period of seven days at the latest.

Right to object and to request removal
You have the option of withdrawing your consent to the processing of your personal data at any time. If you contact us by email, you may object to the storage of your personal data at any time. In such a case, the correspondence cannot be continued.

Our contact form is protected against automated entries by Google reCAPTCHA; please see section 7 for further details.

4. Web analytics using Matomo (formerly PIWIK)

Scope of the processing of personal data
We use the open source software tool Matomo (formerly PIWIK) on our website to analyse our users’ browsing behaviour. The software places a cookie on your device. When individual pages of our website are accessed, the following data is stored:

• two bytes of the IP address of the accessing system
• the website accessed
• the website from which you reached the website accessed (referrer)
• the sub-pages accessed from the website accessed
• the time spent on the website
• the frequency with which the website is accessed

The software runs exclusively on the servers of our website. Your personal data is stored only there. The data is not passed on to third parties. The software is configured so that IP addresses are not stored in full; instead, two bytes of the IP address are masked (for example: 192.168.xxx.xxx). It is therefore no longer possible to attribute the truncated IP address to the accessing device.

Legal basis for the processing of personal data
The legal basis for the processing of your personal data is your consent pursuant to Art. 6 (1) (a) GDPR. Consent may be withdrawn at any time. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Purpose of the data processing
The processing of your personal data enables us to analyse our users’ browsing behaviour. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continually improve our website and its user-friendliness. The data is deleted as soon as it is no longer required for our recording purposes.

Right to object and to request removal
Cookies are stored on your device and transmitted from it to us. You as a user therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website to their full extent. Deactivating Matomo: we offer our users the option on our website of withdrawing their consent by opting out of the analysis procedure. To do so, you must follow the corresponding link. This places a further cookie on your system which signals to our system that your data is not to be stored. If you delete the corresponding cookie from your system in the meantime, you will need to set the opt-out cookie again. Further information on the privacy settings of the Matomo software is available at the following link: https://matomo.org/docs/privacy/

5. YouTube

Our website uses plug-ins from the YouTube site operated by Google. The site is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Scope of the processing of personal data
When you visit one of our pages equipped with a YouTube plug-in, a connection to YouTube’s servers is established. In doing so, the YouTube server is informed which of our pages you have visited. We use YouTube in enhanced privacy mode, under which, according to the provider, user information is stored only once playback of the video has been started. Only when you start playback of the YouTube video is a cookie activated in order to collect information. According to the provider, these cookies serve, among other things, to record video statistics, to improve user-friendliness and to prevent abusive conduct. Irrespective of whether a video is played, a connection to the Google network “DoubleClick” is established each time this website is accessed, which may trigger further data processing operations beyond our control. For information on the extent to which the provider otherwise processes your personal data, and on the settings and objection options available to you, please refer to Google’s privacy policy at https://policies.google.com/technologies/ads and to the settings for the display of advertising by Google at https://adssettings.google.com/authenticated. Further information on the handling of user data can be found in YouTube’s privacy policy at https://www.google.de/intl/de/policies/privacy. You also have the option of requesting further information that may be helpful to you via Google’s data protection form: https://support.google.com/policies/troubleshooter/7575787?visit_id=637054532384299914-2421490167&hl=de&rd=2

Purpose of the data processing
YouTube is used in the interest of presenting our online presence and public relations activities in an appealing manner.

Legal basis for the processing of personal data
This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Where corresponding consent has been requested, the processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR. Consent may be withdrawn at any time. The lawfulness of the data processing carried out up to the point of withdrawal remains unaffected by the withdrawal.

Right to object and to request removal
If you are logged in to YouTube at the same time, this information will be attributed to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. Options for restricting the processing of your data are available in the general settings of your YouTube account and under the item “Privacy settings”. In addition, on mobile devices (smartphones, tablet computers) you can use the settings available there to restrict Google’s access to contact and calendar data, photos, location data and so on. This depends, however, on the operating system used. Further information on these points is available on the following YouTube support pages: https://myaccount.google.com/intro/privacycheckup

You can find out about the option of viewing your own data held by YouTube here: https://takeout.google.com/?utm_source=pp&hl=de

Information on the personalisation and privacy settings available can be found here: https://myaccount.google.com/?hl=de

Here you have the option of viewing your own data held by YouTube or downloading a copy of your YouTube data: https://takeout.google.com/?utm_source=pp&hl=de

Google answers further questions on the deletion of data when using its services here: https://support.google.com/accounts/answer/465

6. Google Maps

This site uses the Google Maps mapping service via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Scope of the processing of personal data
In order to use the functions of Google Maps, it is necessary to store your IP address; location data may also be stored, although you can influence this via the settings on your device and, where applicable, refuse your consent. This information is generally transferred to and stored on a Google server in the USA. As the provider of this site, we have no influence over this data transfer.

Purpose of the data processing
Google Maps is used in the interest of presenting our online presence in an appealing manner and of making the locations indicated by us on the website easy to find.

Legal basis for the processing of personal data
This constitutes a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. Further information on the handling of user data can be found in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/

Right to object and to request removal
Opt-out plug-in: https://tools.google.com/dlpage/gaoptout?hl=de. Google answers further questions on the deletion of data when using its services here: https://support.google.com/accounts/answer/465

7. Google reCAPTCHA

On pages containing contact and registration forms, we use the “reCAPTCHA” service (version 3) to protect against automated entries. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Scope of the processing of personal data
The purpose of reCAPTCHA is to determine whether data entered into our forms originates from a human being or from an automated program. To this end, reCAPTCHA analyses behaviour on the basis of various characteristics and derives a probability score from it. The analysis begins automatically as soon as you access a page containing a protected form; it runs in the background and does not require any action on your part. The following data, among others, is transmitted to Google for evaluation: the IP address of your device, the page accessed and the time spent on it, the referrer URL, information about your browser and operating system, screen resolution, the date and time of access, as well as mouse, keyboard and touch input. This information may be transferred to and stored on Google servers, including servers in the USA. reCAPTCHA is loaded only on pages containing protected forms, not on all pages of our website. We do not combine the data collected by Google with any other data you have provided to us.

Purpose of the data processing
The processing serves to protect our forms against abusive automated use (spam, bots) and to ensure the security of our information technology systems.

Legal basis for the processing of personal data
The legal basis for the processing of your personal data is Art. 6 (1) (f) GDPR. Our legitimate interest lies in protecting our website and our forms against abusive automated use. Accessing information stored on your terminal equipment is strictly necessary in order to provide the service you have expressly requested, namely the submission of your form enquiry (§ 25 (2) no. 2 TDDDG); without verification by reCAPTCHA, the form cannot technically be submitted.

Duration of storage
We have no influence over the duration of storage by Google. For further information, please contact the provider directly.

Right to object and to request removal
You can avoid data collection by reCAPTCHA by refraining from using our forms and contacting us by email, telephone or post instead. Our contact details can be found in the legal notice (Impressum). Further information on data protection at Google is available at https://policies.google.com/privacy and https://policies.google.com/terms.

1. LinkedIn

We maintain a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Information about the collection and further processing of data by LinkedIn can be found in LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy. We do not have full access to the data collected by LinkedIn or to your profile data. We can only see the public information in your profile. You determine what this information comprises in your LinkedIn settings. On the grounds of a legitimate interest, we receive anonymous statistics from LinkedIn regarding the use of our company page. These statistics (for example the number of people following us or the number of people reacting to a post) do not allow us to draw any conclusions about you as an individual user or to link information with your profile data as a follower.

2. Facebook

For the information service offered via our Facebook presence, we make use of the technical platform and services of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Please note that you use this Facebook page and its functions on your own responsibility. This applies in particular to the use of the interactive functions (for example commenting, sharing, rating). Alternatively, you can also obtain information about us on our own website at campusforum.de.

When you visit our Facebook page, Facebook records, among other things, your IP address as well as further information stored on your computer in the form of cookies. This information is used to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides further information on this at the following link: https://www.facebook.com/policies/cookies/

The data collected about you in this context is processed by Meta Platforms Ireland Ltd. and may in the course of this be transferred to countries outside the European Union. Facebook describes in general terms in its data usage policy what information it receives and how this information is used. There you will also find information about how to contact Facebook and about the settings available for advertisements.

Facebook’s data policy is available at the following link: http://de-de.facebook.com/about/privacy

Facebook does not state conclusively and clearly, and we are not aware, in what manner Facebook uses the data arising from visits to Facebook pages for its own purposes, to what extent activities on the Facebook page are attributed to individual users, how long Facebook stores this data, or whether data arising from a visit to the Facebook page is passed on to third parties. When a Facebook page is accessed, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymised (in the case of “German” IP addresses). Facebook also stores information about its users’ devices (for example in connection with the “login notification” function); it may therefore be possible for Facebook to attribute IP addresses to individual users.

If you are currently logged in to Facebook as a user, a cookie containing your Facebook identifier is stored on your device. This enables Facebook to determine that you have visited this page and how you have used it. This also applies to all other Facebook pages. By means of Facebook buttons embedded in websites, Facebook is able to record your visits to those websites and attribute them to your Facebook profile. On the basis of this data, content or advertising can be tailored to you.

If you wish to avoid this, you should log out of Facebook or deactivate the “stay logged in” function, delete the cookies present on your device, and close and restart your browser. In this way, Facebook information by which you can be directly identified is deleted. You can then use our Facebook page without your Facebook identifier being disclosed. If you access interactive functions of the page (like, comment, share, message and so on), a Facebook login screen will appear. Following any such login, you will again be identifiable to Facebook as a specific user.

Information on how you can manage or delete information held about you can be found on the following Facebook support pages: https://de-de.facebook.com/about/privacy#

Beyond this, we as the provider of the information service do not collect or process any data arising from your use of our service via Facebook.

1. MS Teams

We use the Microsoft Teams service to hold online meetings.

Microsoft Teams is a service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. When Teams is used, various types of data are processed. The extent of the data also depends on what data the meeting participants provide before or during an online meeting. As a rule, the following data is subject to processing:

• Details about you as a user: first name, surname, telephone number (optional), email address, profile picture (optional)
• Meeting metadata: subject, description (optional)
• Where you dial in by telephone: details of the incoming and outgoing telephone number, country name, start and end time. Where applicable, further connection data such as the IP address of the device may be stored.
• Text, audio and video data: if the chat functions are used during an “online meeting”, the text entered is processed in order to display it in the “online meeting” and, where applicable, to record it. In order to enable the display of video and the playback of audio, the data from your device’s microphone and from any video camera on the device is processed for the duration of the meeting. You can switch off or mute the camera or the microphone yourself at any time via the Teams application.

Where we wish to record “online meetings”, we will obtain the consent of all participants in advance. The fact that a recording is being made is also indicated in the Teams app. Where it is necessary for the purpose of recording the outcomes of an online meeting, we will log the chat content. As a rule, however, this is not the case. Teams is a service provided by a provider based in the USA. Personal data is processed on servers in the EU.

If you do not wish to, or cannot, use the Teams app, the functions are also available via a browser version, which you can likewise find on the Microsoft website.

Where online meetings are held in the context of contractual relationships, the legal basis for the data processing is Art. 6 (1) (b) GDPR. Where no contractual relationship exists, the legal basis is Art. 6 (1) (f) GDPR. Our interest lies in holding “online meetings” effectively. As a matter of principle, your personal data processed in connection with participation in online meetings is not passed on to third parties unless it is specifically intended to be shared. Please note that, as is also the case with in-person meetings, the content of online meetings frequently serves precisely the purpose of communicating information to customers, prospective customers or third parties, and is therefore intended to be shared. Further recipients: the provider of MS Teams necessarily obtains knowledge of the data referred to above. Where we use Teams in connection with the establishment, performance or termination of an employment relationship, the legal basis for the data processing is Section 26 of the German Federal Data Protection Act (BDSG).

2. Zoom

We also use the ZOOM service to hold online meetings.

ZOOM is a service provided by Zoom Video Communications, Inc., based in the USA. Further information about Zoom is available here: https://zoom.us/docs/de-de/privacy-and-legal.html

When Zoom is used, various types of data are processed. The extent of the data also depends on what data the meeting participants provide before or during an online meeting. As a rule, the following data is subject to processing:

• Details about you as a user: first name, surname, telephone number (optional), email address, profile picture (optional)
• Meeting metadata: subject, description (optional)
• Where you dial in by telephone: details of the incoming and outgoing telephone number, country name, start and end time. Where applicable, further connection data such as the IP address of the device may be stored.
• Text, audio and video data: if the chat functions are used during an “online meeting”, the text entered is processed in order to display it in the “online meeting” and, where applicable, to record it. In order to enable the display of video and the playback of audio, the data from your device’s microphone and from any video camera on the device is processed for the duration of the meeting. You can switch off or mute the camera or the microphone yourself at any time via ZOOM.

Where we wish to record “online meetings”, we will obtain the consent of all participants in advance. The fact that a recording is being made is also indicated in ZOOM. Where it is necessary for the purpose of recording the outcomes of an online meeting, we will log the chat content. As a rule, however, this is not the case. ZOOM is a service provided by a provider based in the USA. Personal data is also processed on servers in the USA. No automated decision-making takes place.

If you do not wish to, or cannot, use the ZOOM app, the basic functions are also available via a browser version, which you can likewise find on the ZOOM website.

Where online meetings are held in the context of contractual relationships, the legal basis for the data processing is Art. 6 (1) (b) GDPR. Where no contractual relationship exists, the legal basis is Art. 6 (1) (f) GDPR. Our interest lies in holding “online meetings” effectively. Where we use ZOOM in connection with the establishment, performance or termination of an employment relationship, the legal basis for the data processing is Section 26 of the German Federal Data Protection Act (BDSG). As a matter of principle, your personal data processed in connection with participation in online meetings is not passed on to third parties unless it is specifically intended to be shared. Please note that, as is also the case with in-person meetings, the content of online meetings frequently serves precisely the purpose of communicating information to customers, prospective customers or third parties, and is therefore intended to be shared. Further recipients: the provider of ZOOM necessarily obtains knowledge of the data referred to above. We have concluded a data processing agreement with the provider of ZOOM. For ZOOM’s data protection information, see: https://zoom.us/en-us/privacy.html

Applications for employment

Where positions are vacant, we offer you the opportunity to apply to us, for example by email. Below we inform you about the scope, purpose and use of the personal data collected from you in the course of the application process. We assure you that the collection, processing and use of your data takes place in accordance with applicable data protection law and all other statutory provisions, and that your data is treated in strict confidence.

Scope and purpose of the data collection
When you send us an application, we process the personal data associated with it (for example contact and communication data, application documents, notes made in the course of interviews and so on) to the extent necessary in order to decide whether to enter into an employment relationship.

Legal basis
The legal basis for this is Art. 6 (1) (b) GDPR (general pre-contractual measures). Within our company, your personal data is passed on exclusively to those persons involved in processing your application. Where the application is successful, the data you have submitted is stored in our data processing systems on the basis of Art. 6 (1) (b) GDPR for the purpose of performing the employment relationship.

Retention period for the data
Where we are unable to make you an offer of employment, where you decline an offer of employment, where you withdraw your application, or where you request us to delete your data, the data you have transmitted, including any remaining physical application documents, is stored or retained for a maximum of six months following the conclusion of the application process (retention period), in order to enable us to trace the details of the application process in the event of any discrepancies (Art. 6 (1) (f) GDPR). Once the retention period has expired, the data is deleted, unless a statutory retention obligation or another legal ground for continued storage applies. Where it is apparent that the retention of your data will be necessary after the expiry of the retention period (for example because of threatened or pending legal proceedings), deletion takes place only once the data has become irrelevant. Other statutory retention obligations remain unaffected.