Privacy Policy

The following information explains how we collect personal data when you use our website. Personal data means any information that can be personally associated with you, such as your name, address, email addresses, or user behaviour. We have implemented extensive technical and organisational safeguards to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological developments.

1. Controller responsible for data processing

The controller pursuant to Article 4(7) of the EU General Data Protection Regulation (GDPR) is:

2. Contact details of the data protection officer

You can contact our data protection officer at or at our postal address, adding “Data Protection Officer” to the address.

3. Your rights

You have the following rights with regard to your personal data:

3.1 General rights

You have the right to access, rectification, erasure, restriction of processing, objection to processing, and data portability. Where processing is based on your consent, you have the right to withdraw your consent with effect for the future.

3.2 Rights relating to data processing based on legitimate interests

Pursuant to Article 21(1) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(e) GDPR (processing carried out in the public interest) or Article 6(1)(f) GDPR (processing necessary for the purposes of the legitimate interests pursued by the controller). This also applies to profiling based on these provisions.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defence of legal claims.

3.3 Rights relating to direct marketing

Where we process your personal data for direct marketing purposes, you have the right, pursuant to Article 21(2) GDPR, to object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

3.4 Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with a competent data protection supervisory authority regarding the processing of your personal data by us.

4.2 Collection of personal data when visiting our website

When using our website for informational purposes only—that is, if you do not register or otherwise provide us with information—we collect only the personal data transmitted by your browser to our server.

When you visit our website, we collect the following data, which is technically necessary for us to display the website and ensure its stability and security. The legal basis for this is Article 6(1)(f) GDPR:

• IP address.
• Date and time of the request.
• Time zone difference from Greenwich Mean Time (GMT).
• Content of the request, including the specific page accessed.
• Access status/HTTP status code.
• Amount of data transferred.
• Website from which the request originated.
• Browser.
• Operating system and its interface.
• Language and version of the browser software.

5. Contacting us by email or contact form

When you contact us by email or via a contact form, we store the information you provide, such as your email address and, where applicable, your name and telephone number, in order to answer your questions.

Where our contact form requests information that is not required for contacting us, we have marked such information as optional. This information helps us clarify your request and process your enquiry more effectively. Providing this information is expressly voluntary and is based on your consent pursuant to Article 6(1)(a) GDPR.

Where this information concerns communication channels, such as your email address or telephone number, you also consent to our contacting you via these channels, where applicable, in order to respond to your enquiry. You may withdraw this consent at any time with effect for the future.

We delete the data collected in this context once storage is no longer necessary, or restrict its processing where statutory retention obligations apply.

6. Newsletter

6.1 Newsletter subscription

With your consent pursuant to Article 6(1)(a) GDPR, you can subscribe to our newsletter, which provides information about our latest offers.

We use the so-called double opt-in procedure to register users for our newsletter. After registering, we send an email to the address provided asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month.

We also store the IP addresses used and the dates and times of registration and confirmation. The purpose of this procedure is to provide evidence of your registration and, where applicable, investigate any possible misuse of your personal data.

The only mandatory information required to send the newsletter is your email address. Providing any additional, separately marked information is voluntary and allows us to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Article 6(1)(a) GDPR.

You may withdraw your consent to receive the newsletter and unsubscribe at any time. You can withdraw your consent by clicking the link provided in every newsletter email or by contacting the data protection officer at the address stated above.

6.2 Newsletter tracking

Please note that we analyse your user behaviour when sending our newsletter. For this purpose, the emails contain so-called web beacons or tracking pixels, which are stored on our website. For the analysis, we link the data mentioned above and the web beacons to your email address and an individual ID.

The data is collected exclusively in pseudonymised form. The IDs are not linked to your other personal data, so direct identification is excluded.

You can object to this tracking at any time by clicking the separate link provided in each email. The information is stored for as long as you remain subscribed to the newsletter. After you unsubscribe, the data is stored solely for statistical and anonymised purposes.

Tracking is also not possible if you have disabled the automatic display of images in your email programme. In this case, the newsletter may not be displayed in full and you may not be able to use all of its functions. If you manually display the images, the tracking described above will take place.

7. Applications

You may apply to our company electronically, in particular by email or via web forms. We will use your information exclusively to process your application and will not disclose it to third parties. Please note that emails sent without encryption are not transmitted in a way that protects them against access by unauthorised persons.

You may also apply to our company online via our application portal. Your online application will be forwarded directly to the Human Resources department via an encrypted connection and will, of course, be treated confidentially. We will use your information exclusively to process your application and will not disclose it to third parties. Further information about data processing during the application process can be found in the privacy policy of our application portal.

If you have applied for a specific position that has already been filled, or if we consider you suitable or even better suited for another position, we would like to forward your application within the company. Please let us know if you do not agree to such forwarding.

Your personal data will be deleted immediately after the application process has been completed, or after a maximum of six months, unless you have expressly consented to a longer storage period or a contract has been concluded. The legal basis is Article 6(1)(a), (b), and (f) GDPR and Section 26 of the German Federal Data Protection Act (BDSG).

8. Use of social plugins

This website uses social plugins provided by:

These plugins generally collect data about you by default and transmit it to the servers of the respective provider. To protect your privacy, we have implemented technical measures to ensure that your data cannot be collected by the providers of the respective plugins without your consent.

When you access a page containing such plugins, they are initially deactivated. The plugins are activated only when you click on the relevant icon, thereby giving your consent to the transmission of your data to the respective provider. The legal basis for using the plugins is Article 6(1)(a) and (f) GDPR.

Once activated, the plugins also collect personal data such as your IP address and send it to the servers of the respective provider, where it is stored. In addition, activated social plugins place a cookie with a unique identifier when you access the relevant webpage. This enables the providers to create profiles of your user behaviour. This also occurs if you are not a member of the respective social network.

If you are a member of the provider’s social network and are logged in to that network while visiting our website, your data and information about your visit to this website may be linked to your profile on the social network.

We have no influence over the exact scope of the data collected by the respective provider. For further information about the scope, nature, and purpose of data processing and your rights and options for protecting your privacy, please refer to the privacy notices of the respective social network provider. These are available at the following address:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

9. Cookies

Cookies are data stored on your computer by a website you visit, allowing your browser to be recognised when you visit the website again. Cookies transmit information to the entity that sets them. Cookies can store various types of information, such as your language settings, the duration of your visit to our website, or information you have entered there. This means, for example, that you do not have to enter required form data again each time you use the website. The information stored in cookies may also be used to identify preferences and tailor content to areas of interest.

There are different types of cookies. Session cookies are data records temporarily stored in the working memory and deleted when you close your browser. Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie. With this type of cookie, the information may also be stored in text files on your computer. You can delete these cookies at any time using your browser settings.

First-party cookies are set by the website you are currently visiting. Only this website may read the information stored in these cookies. Third-party cookies are set by organisations that do not operate the website you are visiting. These cookies are used, for example, by marketing companies.

The legal bases for any processing of personal data using cookies and the storage periods may vary. Where you have given us consent, the legal basis is Article 6(1)(a), sentence 1, point (a) GDPR. Where data processing is based on our overriding legitimate interests, the legal basis is Article 6(1)(f), sentence 1, point (f) GDPR. The stated purpose then corresponds to our legitimate interest.

Where we access information on an end device used by you within the meaning of Section 2(2) no. 6 TDDDG by storing or reading information there independently of whether it relates to a person, we obtain your prior, purpose-specific, voluntary, and informed consent pursuant to Section 25(1) TDDDG.

Where consent under the GDPR and the TDDDG can be combined, we will obtain it in a uniform manner.

Accessing information already stored on your end device and transmitted to us through your active transmission does not require consent under the TDDDG. This concerns the public IP address of the end device, the address of the website accessed, the user-agent string with browser and operating system information, including the version, and the selected language.

Consent under the TDDDG is also not required if the cookie or similar technology serves to carry out the transmission of a message over a public telecommunications network pursuant to Section 25(2) no. 1 TDDDG, or if setting the cookie—and thus storing information on your end device or accessing information already stored there—is strictly necessary to provide a telemedia service expressly requested by you pursuant to Section 25(2) no. 2 TDDDG.

We use cookies to ensure the proper operation of the website, provide basic functionalities, measure reach, and—with your consent—tailor our services to your preferred areas of interest.

You can delete cookies already stored on your end device at any time. If you want to prevent cookies from being stored, you can do so via your internet browser settings. Alternatively, you can install so-called ad blockers. Please note that some functions of our website may not work if you disable the use of cookies.

When our website is accessed, all users are also informed about our use of cookies by means of a cookie banner and referred to this privacy policy. Users are also asked to consent to the use of certain cookies, particularly those relevant to personalising services and marketing activities.

You may withdraw consent at any time with effect for the future by accessing the cookie management function via the link below and removing the check mark next to the processing to which you had consented, or by clicking the “Privacy Settings” button at the bottom of our website and removing the relevant check mark there.

10. Google Analytics

Where you have given your consent, this website uses Google Analytics, a web analytics service provided by Google LLC. The controller for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Scope of processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected through the cookies about your use of this website is generally transferred to a Google server in the United States and stored there.

In Google Analytics 4, IP address anonymisation is activated by default. As a result of IP anonymisation, Google truncates your IP address within Member States of the European Union or other states that are party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the United States and truncated there. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.

During your visit to the website, your user behaviour is recorded in the form of “events”. Events may include:

• Page views.
• First visit to the website.
• Start of a session.
• Your click path and interactions with the website.
• Scrolls, whenever a user scrolls to the end of the page, namely 90%.
• Clicks on external links.
• Internal search queries.
• Interactions with videos.
• Advertisements viewed or clicked.

The following information is also collected:

• Your approximate location, such as your region.
• Your IP address in truncated form.
• Technical information about your browser and the devices you use, such as language settings and screen resolution.
• Your internet service provider.
• The referrer URL, namely the website or advertising medium through which you accessed this website.

Purposes of processing

On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and compile reports on website activity. The reports provided by Google Analytics are used to analyse the performance of our website and the success of our marketing campaigns.

Recipients

Recipients of the data may include:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a processor pursuant to Article 28 GDPR.
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
• Alphabet Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Transfers to third countries

Where data is processed outside the EU/EEA, Google LLC is certified under the Data Privacy Framework (DPF) programme and is listed in the Data Privacy Framework list of the International Trade Administration (ITA). This means that Google has publicly committed to complying with the DPF obligations and that any transfer to the United States is considered permissible under the European Commission’s current adequacy decision of 10 July 2023.

A list of currently certified US companies can be found here: https://www.dataprivacyframework.gov/s/participant-search.

Further information about the Data Privacy Framework programme is available on the official ITA website: https://www.dataprivacyframework.gov/s/.

Google also provides EU Standard Contractual Clauses and thereby offers an additional safeguard for compliance with European data protection law. The existing EU Standard Contractual Clauses remain valid after the adequacy decision entered into force.

Storage period

The data sent by us and linked to cookies is automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

Legal basis

The legal basis for this data processing is your consent pursuant to Article 6(1)(a), sentence 1, point (a) GDPR and Section 25(1) TDDDG.

Withdrawal of consent

You may withdraw your consent at any time with effect for the future by accessing the cookie settings HERE and changing your selection. The lawfulness of processing based on consent before its withdrawal remains unaffected.

Alternatively, you can prevent cookies from being stored from the outset by changing the relevant settings in your browser software. However, if you configure your browser to reject all cookies, the functionality of this and other websites may be restricted.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website, including your IP address, and from processing this data by:

1. Not consenting to the placement of the cookie; or
2. Downloading and installing the browser add-on to disable Google Analytics: HERE.

Further information about Google Analytics’ terms of use and Google’s privacy policy can be found at https://marketingplatform.google.com/about/analytics/terms/ and https://policies.google.com/?hl=en.

10.1 Google Tag Manager, Mailchimp, and Amazon Web Services

We use Google Tag Manager, a service provided by Google Ireland Limited. Google Tag Manager itself does not process personal data, but it enables the integration and management of other services and tracking technologies.

We use Mailchimp to send and analyse our newsletter. In this context, personal data, particularly your email address and information about your user behaviour, may be processed.

We also use Amazon Web Services (AWS) as a hosting and infrastructure service provider. As part of this use, personal data may be processed and stored on AWS servers.

Processing is carried out in accordance with the applicable data protection regulations and the data processing agreements concluded with the respective service providers.

11. Data transfers

As a rule, we do not transfer your data to third parties unless we are legally obliged to do so, the transfer is necessary to fulfil the contractual relationship, or you have expressly consented to the transfer in advance.

External service providers and partner companies, such as online payment providers or the shipping company commissioned to deliver an order, receive your data only to the extent necessary to process your order. In these cases, the amount of data transferred is limited to the minimum required.

Where our service providers come into contact with your personal data, we ensure, within the framework of processing on behalf of the controller pursuant to Article 28 GDPR, that they comply with data protection regulations to the same extent. Please also refer to the respective providers’ privacy policies.

The respective service provider is responsible for the content of external services. Within reason, we review these services for compliance with legal requirements.

We aim to process your data within the EU/EEA. However, we may use service providers that process data outside the EU/EEA. In such cases, we ensure that an adequate level of data protection is established with the recipient before transferring your personal data.

This means that an adequate level of data protection is achieved through EU Standard Contractual Clauses or an adequacy decision, such as the EU–US Privacy Shield, comparable to the standards within the EU.

Your data may be transferred to service providers such as Google Ireland Limited, Intuit Inc. or companies affiliated with Mailchimp, and Amazon Web Services, insofar as this is necessary to provide the website, manage tracking technologies, or send the newsletter.

12. Data security

We have implemented extensive technical and organisational safeguards to protect your data against accidental or intentional manipulation, loss, destruction, or access by unauthorised persons. Our security procedures are regularly reviewed and adapted to technological developments.

Last updated: June 2026