Data protection
Privacy Statement
1. Name and address of the controller
The controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the Member States of the European Union and other provisions of a data protection nature is:
Jeremias Abgastechnik GmbH
Opfenrieder Str. 12
91717 Wassertrüdingen
Germany
Tel.: 09832/686850
Email: info@jeremias.de
Website: www.jeremias.de
2. Contact of the data protection officer
KÜHLEIS GROUP
Stefan Kühleis
Hubertusstraße 14
91710 Gunzenhausen
info@kuehleisgroup.de
3. Use of cookies
The Jeremias Abgastechnik GmbH website uses cookies. Cookies are small pieces of data stored by the internet browser on the user's computer system. These cookies can be transferred to the website when the user accesses the website, thus enabling identification of the user. Cookies help simplify the use of websites for users.
You can refuse the use of cookies at any time by changing your browser settings accordingly. Cookies can be deleted. Please note that if you disable cookies, you may not be able to use all of the features of our website to their full extent.
4. Creation of log files
Each time the website is accessed, Jeremias Abgastechnik GmbH uses an automated system to collect data and information. This data is stored in the server's log files.
The following data may be collected:
- Information about the browser type and version used
- The user's operating system
- The user's Internet service provider
- The user's IP address
- Date and time of access
- Websites from which the user's system accesses our website (referrer)
- Websites accessed by the user's system via our website
The data is processed to deliver the content of our website, to ensure the functionality of our information technology systems, and to optimize our website. Log file data is always stored separately from other personal user data.
5. Analysis tools and advertising
Google Analytics
This website uses features of the web analysis service Google Analytics. Provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics uses "cookies," which are text files placed on your computer that enable analysis of your website use. The information generated by the cookie about your use of the website is usually transferred to a Google server in the USA and stored there.
Google Analytics cookies are stored on the basis of Art. 6 (1) (a) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.
We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent cookies from being saved by selecting the appropriate settings on your browser; however, please note that if you do this, you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout .
For more information about how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245 .
We have concluded a contract for order data processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google AdWords and Google Conversion Tracking
This website uses Google AdWords. AdWords is an online advertising program provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. The cookies cannot be tracked via the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie in your Internet browser under user settings. You will then not be included in the conversion tracking statistics.
The storage of “conversion cookies” is based on Art. 6 (1) (a) GDPR.
For more information about Google AdWords and Google Conversion Tracking, please see Google's privacy policy: https://policies.google.com/privacy .
You can configure your browser to inform you about the use of cookies and to only allow cookies on a case-by-case basis, to exclude cookies for specific cases or in general, and to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website.
Google DoubleClick
This website uses Google DoubleClick cookies (Floodlights). DoubleClick is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Cookies are small text files stored in a user's browser. Cookies are stored on the basis of Art. 6 (1) (a) GDPR. A pseudonymous identification number (ID) is assigned to your browser. DoubleClick cookies do not contain any personal data.
Cookies are used to evaluate the use of this website. The data collected is evaluated for statistical purposes and in an anonymized form. You can prevent the use of cookies by downloading and installing the browser plug-in available at https://adssettings.google.com/u/0/authenticated under the DoubleClick Deactivation Extension. Alternatively, you can deactivate DoubleClick cookies on the Digital Advertising website at https://optout.aboutads.info .
Cookies are used to promote the website operator's products (retargeting). At a later date, users may be shown related advertisements (e.g., banner ads, text-image ads, videos, etc.) on other websites. Users can opt out of retargeting by changing the display settings of Google Remarketing Tags or deactivating retargeting. Alternatively, users can deactivate the use of cookies by third parties by using the Network Advertising Initiative's opt-out page .
Google Tag Manager
a. Type and purpose of processing
Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which may themselves collect data. Google Tag Manager does not access this data. If opted out at the domain or cookie level, this opt-out remains in place for all tracking tags implemented with Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ .
b. Legal basis for processing
The processing of the entered data is based on the user’s consent (Art. 6 para. 1 lit. a GDPR).
c. Data category
Title, URL and file format of file downloads
d. recipient
The recipients of the data are internal employees and Google as the data processor. For this purpose, we have concluded a corresponding data processing agreement with Google.
e. Storage periods
Data will only be processed in this context as long as the corresponding consent has been obtained. After that, it will be deleted unless legally required to retain it. To contact us in this regard, please use the contact details provided at the beginning of this privacy policy.
f. Legal / contractual requirement
The provision of your personal data is voluntary and solely based on your consent. If you deny access, this may result in functional limitations on the website.
g. Third country transfer
The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Revocation of consent
You can revoke your consent to the storage of your personal data at any time with future effect. You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy policy.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.
i. Profiling
With the help of the Google Tag Manager tool, the behavior of website visitors can be evaluated and their interests analyzed.
6. Registration on our website
If the data subject uses the option to register on the controller's website by providing personal data, the data in the respective input mask will be transmitted to the controller. The data will be stored by the controller exclusively for internal use.
During registration, the user's IP address as well as the date and time of registration are saved. This serves to prevent misuse of the services. Data will not be passed on to third parties. An exception applies if there is a legal obligation to do so.
Registration of data is required for the provision of content or services. Registered individuals have the option to delete or modify stored data at any time. The data subject can obtain information about the personal data stored about them at any time.
7th newsletter
If you subscribe to our company's newsletter, the data in the respective input mask will be transmitted to the controller.
When registering for the newsletter, the user's IP address as well as the date and time of registration are saved. This serves to prevent misuse of the services or the email address of the data subject. The data will not be passed on to third parties. An exception applies if there is a legal obligation to do so.
The data will be used exclusively for sending the newsletter. The data subject can cancel the newsletter subscription at any time.
Likewise, consent to the storage of personal data can be revoked at any time. A corresponding link is provided in each newsletter for this purpose.
8. Online presence in social media
We maintain online presences within social networks to inform active users about our services and to communicate directly via the platforms if they are interested. We are currently represented on the following networks:
- YouTube
All of our social media channels can only be accessed by website visitors via an external link. We do not use any plugins or other interfaces offered by the respective networks for embedding content on our website.
We have no influence on the collection and further use of data by social networks. We therefore have no knowledge of the extent, location, and duration of data storage, the extent to which the networks comply with existing deletion obligations, the evaluations and links made to the data, and to whom the data is shared. We therefore expressly point out that user data (e.g., personal information, IP address) is stored by the network operators in accordance with their data usage guidelines and used for business purposes.
We process the data of users on our social media presences if they contact and communicate with us, for example, via comments or direct messages.
The legal basis for the processing of user data is Art. 6 (1) (b) and (f) GDPR.
8. 1. LinkedIn
LinkedIn: https://www.linkedin.com/company/1962448
Our online offering does not include any features or content from the LinkedIn service, offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The LinkedIn channels are only accessible via an external link. If visitors to our website are members of the LinkedIn platform, LinkedIn can assign the visit to the social media channel to the user's profile there if the user visits the LinkedIn profile while logged in. We would like to point out that we have no influence on the content or extent of use of the data collected by LinkedIn. For further information in this regard, please refer to LinkedIn's privacy policy: https://linkedin.com/legal/privacy-policy
8. 2. Instagram
Instagram: https://www.instagram.com/jeremias_abgastechnik_gmbh/
You can access the social media network Instagram via an external link on our website. All functions in the social media network are offered by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland. The channel is only accessible via an external link. If you are logged into Instagram with your own profile and access our social media channel, Meta can assign your visit to your logged-in profile. If you do not want your user account to be assigned to your IP address, please log out of your Instagram account before using our website. For further information on the processing of your data, please refer to Instagram's privacy policy: https://privacycenter.instagram.com/policy
March 8th, Xing
Xing: https://www.xing.com/pages/jeremiasabgastechnikgmbh
Our online offering does not include any features or content from the Xing service, offered by New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany. The Xing channels are only accessible via an external link. If visitors to our website are members of the Xing platform, Xing can assign the visit to the social media channel to the user's profile there if the user visits the Xing profile while logged in. We would like to point out that we have no influence on the content or scope of use of the data collected by Xing. For further information in this regard, please refer to Xing's privacy policy: https://privacy.xing.com/datenschutzerklaerung
8.4. Facebook
Jeremias operates an online presence on Facebook, a so-called Facebook fan page. The following additional information on data processing applies to visits to our fan page. General information on data protection at Facebook can be found here ( https://www.facebook.com/about/privacy/ ).
1. Joint responsibility, contact details, company data protection officer:
Pursuant to Art. 26 GDPR, we are jointly responsible with Facebook for the operation of our Facebook fan page. To this end, we have entered into an agreement with Facebook specifying who fulfills which data protection obligations. This agreement can be accessed here ( https://www.facebook.com/legal/terms/page_controller_addendum ). Facebook is therefore primarily responsible for providing the data subject with information about the joint processing and enabling them to exercise their data protection rights. Irrespective of this, we hereby inform you about your visit to our fan page.
Our contact details are:
Jeremias Abgastechnik GmbH
Opfenrieder Str. 12
91717 Wassertrüdingen
Germany
Tel.: 09832/686850
E-Mail: info@jeremias.de
You can reach Facebook at:
Meta Platforms Ireland Ltd.
4 Grand Canal Square,
Grand Canal Harbour,
Dublin 2, Ireland
You can reach Facebook online here ( https://www.facebook.com/help/contact/2061665240770586 )
You can reach our company data protection officer at:
KÜHLEIS GROUP. Stefan Kühleis,
Hubertusstraße 14, 91710 Gunzenhausen, info@kuehleisgroup.de
You can reach Facebook's data protection officer at:
https://www.facebook.com/help/contact/540977946302970
2. Collection and storage of personal data as well as the type, purpose and use of such data:
a) Data collected by Facebook:
If you are a Facebook user, Facebook collects the data described in the Facebook Data Policy under "What types of information do we collect?" If you are not a Facebook user, cookies, small text files containing identifiers, may still be stored in your browser, which enable tracking of your user behavior.
As a rule, user data is also processed by Facebook for market research and advertising purposes when visiting Facebook. Based on user behavior (including visits to our fan page), complex user profiles are created, which Facebook can use to display personalized advertisements to the visitor both within and outside of Facebook. Further information on this can also be found in the Facebook Data Policy.
If you do not agree to this, you can opt out here: https://www.facebook.com/settings?tab=ads
b) Data we use (“Page Insights”) and legal basis:
Facebook provides us with statistics and usage data that we can use to analyze the use of our fan page (so-called "Page Insights"). This enables us to continuously improve our offering on Facebook. As operators, we do not make any decisions regarding the processing of Insights data or any other information resulting from Art. 13 GDPR, such as the storage duration of cookies on user devices. Primary responsibility under the GDPR for the processing of Insights data lies with Facebook, and Facebook fulfills all obligations under the GDPR with regard to the processing of Insights data.
As page administrators, we have no other means of evaluating user behavior on our fan page, not even through user tracking. It is also fundamentally impossible for us to identify fan page visitors based on Page Insights. In particular, according to the agreement, we have no right to demand that Facebook disclose individual visitor data. Identification is only possible if we can assign individual profile pictures to "likes" for the page; however, this is only possible if our fan page has been "liked" by the corresponding visitor and the "likes" are set to "public."
You can find out what information Facebook uses to create Page Insights here: https://www.facebook.com/legal/terms/information_about_page_insights_data
The operation of the Facebook fan page and the use of Page Insights serve our legitimate interest in effective external representation and efficient communication with our customers and interested parties. This interest justifies the operation of the page both in relation to the legitimate interests of Facebook users and visitors to our fan page who do not have a Facebook account. The legal basis is Art. 6 (1) (f) GDPR.
3. Transfer of data to third parties:
Data collected by Facebook is shared and processed throughout the Facebook group. The Facebook group also includes Instagram, WhatsApp, and Oculus. For example, information collected via Facebook is used to show users personalized ads on Instagram, or information from WhatsApp is used to take action on Facebook against accounts that send spam via WhatsApp. This information can be found in the Facebook Data Policy under "How do the Facebook companies work together?"
When Facebook processes data, user data may be transferred outside the European Economic Area (EEA), in particular to the USA.
4. Right of objection:
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which we will implement without specifying a particular situation. If you wish to exercise your right of withdrawal or objection, simply send an email to info.jeremias.de
5. Rights of data subjects:
You have the right to revoke your consent at any time. This means that we may no longer continue the data processing based on this consent in the future. Furthermore, you have the right to information pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, and the right to data portability pursuant to Art. 20 GDPR. Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR).
In principle, you can assert your data subject rights against both Facebook and us. Since only Facebook has direct access to your user data, you can most effectively assert your data subject rights against Facebook.
8.5. Pinterest
a. Type and purpose of processing
We appreciate your interest in our PINTEREST presence. We would like to provide you with an overview of the data we collect, use, and store there.
Social networks can generally comprehensively analyze your user behavior when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presence on Pinterest triggers numerous data protection-relevant processing operations. In detail:
If you are logged into your Pinterest account and visit our social media presence, Pinterest can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have a Pinterest account. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address. Using the data collected in this way, Pinterest can create user profiles that contain your preferences and interests. This way, interest-based advertising can be shown to you both inside and outside of Pinterest. If you have a Pinterest account, interest-based advertising can be displayed on all devices on which you are or were logged in. Please also note that we cannot track all processing operations on Pinterest. Pinterest may therefore carry out further processing operations. For details, please see Pinterest's terms of use and privacy policy.
b. Legal basis for processing
Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in maintaining contact options with our customers. The analysis processes initiated by Pinterest may be based on different legal bases, which must be specified by Pinterest (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).
c. Data categories
For information about which specific data is collected and how it is used, please refer to Pinterest’s privacy policy.
Pinterest: https://policy.pinterest.com
d. recipient
- employees of their own company
e. Storage periods
Once the purpose no longer applies and we no longer use Pinterest, the data collected in this context will be deleted.
f. Legal / contractual requirement
The provision of your personal data is voluntary. Without your personal data, we cannot grant you access to the content and services we offer.
g. Third country transfer
Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be excluded
h. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or if the objection is directed against direct marketing. If you wish to exercise your right of objection, simply send an email to the contact address above.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling in this data processing.
8.6. YouTube
a. Type and purpose of processing
We appreciate your interest in our YouTube presence. We would like to give you an overview of the data we collect, use, and store there.
Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presence on YouTube triggers numerous data protection-relevant processing operations. In detail
If you are logged into your YouTube account and visit our social media presence, YouTube can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have a YouTube account. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address. Using the data collected in this way, YouTube can create user profiles that store your preferences and interests. This way, interest-based advertising can be displayed to you both inside and outside of YouTube. If you have a YouTube account, interest-based advertising can be displayed on all devices on which you are or were logged in. Please also note that we cannot track all processing operations on YouTube. Therefore, further processing operations may be carried out by YouTube. Details can be found in YouTube's terms of use and privacy policy.
b. Legal basis for processing
Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in maintaining contact options with our customers. The analysis processes initiated by YouTube may be based on different legal bases, which must be specified by YouTube (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).
c. Data categories
For information about which specific data is collected and how it is used, please refer to YouTube's privacy policy: https://policies.google.com/privacy
d. recipient
- employees of their own company
e. Storage periods
Once the purpose no longer applies and we no longer use YouTube, the data collected in this context will be deleted.
f. Legal / contractual requirement
The provision of your personal data is voluntary. Without your personal data, we cannot grant you access to the content and services we offer.
g. Third country transfer
Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be ruled out.
h. Right of objection
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, provided there are reasons for doing so that arise from your particular situation or if the objection is directed against direct marketing. If you wish to exercise your right of objection, simply send an email to the contact address above.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling in this data processing.
9. Information obligations in the application process
a. Type and purpose of processing
We process applicant data only for the purpose and within the scope of the application process in accordance with legal requirements. Applicant data is processed to fulfill our (pre)contractual obligations within the application process, insofar as data processing is necessary for us, e.g., in the context of legal proceedings.
The application process requires applicants to provide us with their applicant data. The necessary applicant data is marked if we offer an online form; otherwise, it can be found in the job descriptions and generally includes personal information, postal and contact addresses, and the documents belonging to the application, such as a cover letter, CV, and references. Applicants can also voluntarily provide us with additional information. By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in the manner and scope set out in this privacy policy. If made available, applicants can submit their applications using an online form on our website. The data will be transmitted to us in encrypted form using the latest technology. Applicants can also send us their applications via email to bewerbung@jeremias.de . Please note, however, that emails are generally not sent encrypted, and applicants must ensure that they are encrypted themselves. Therefore, we cannot assume any responsibility for the transmission path of the application between the sender and its receipt on our server. We therefore recommend using an online form or sending it by post. In the event of a successful application, the data provided by applicants may be further processed by us for the purposes of the employment relationship.
b. Legal basis for processing
The processing of your data primarily serves to establish the employment relationship in accordance with Art. 88 Para. 1 GDPR in conjunction with Section 26 Para. 1 BDSG.
c. Data categories
First name, last name, address, telephone number, email address, CV, references, certificates, documents, photo that you send us unsolicited
If special categories of personal data within the meaning of Art. 9 (1) GDPR are voluntarily provided as part of the application process, they will also be processed in accordance with Art. 9 (2) (b) GDPR (e.g. health data, such as severe disability status or ethnic origin).
d. recipient
Recipients of the data are internal employees of the HR department/specialist departments
e. Storage periods
Subject to a legitimate revocation by the applicant, the data will be deleted after a period of six months so that we can answer any follow-up questions regarding the application and fulfill our documentation obligations under the Equal Treatment Act. Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.
f. Legal / contractual requirement
The provision of your personal data beyond the retention period, e.g., to be included in our applicant pool, is voluntary and solely based on your consent. You can revoke this consent to the storage of your personal data at any time with future effect.
g. Third country transfer
The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).
h. Revocation of consent
If the application for a job opening is unsuccessful, the applicant's data will be deleted. Applicants' data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. You can revoke your consent to the storage of your personal data beyond the retention period at any time with future effect. You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy policy.
i. Automated decision-making and profiling
As a responsible company, we do not use automated decision-making or profiling in this data processing.
10. Ways to contact us
The Jeremias Abgastechnik GmbH website provides a contact form that can be used for electronic contact. Alternatively, contact can be made via the provided email address. If the data subject contacts the controller via one of these channels, the personal data transmitted by the data subject will be automatically stored. This storage serves solely for the purposes of processing the request or contacting the data subject. The data will not be passed on to third parties.
11. Routine deletion and blocking of personal data
The controller shall process and store the personal data of the data subject only for as long as necessary to achieve the purpose of storage. Storage may also occur beyond this period if this is provided for by the European or national legislator in Union regulations, laws, or other provisions to which the controller is subject.
As soon as the purpose of storage no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data will be routinely blocked or deleted.
12. Rights of the data subject
If your personal data is processed as a user, you are considered to be a data subject in accordance with the GDPR. Data subjects have the following rights vis-à-vis the controller:
- Right to information (Article 15 GDPR)
- Right to rectification or erasure of personal data (Art. 16, 17 GDPR)
- Right to restriction of processing (Article 18 GDPR)
- Right to information regarding the rectification or erasure of your personal data or the restriction of processing (Article 19 GDPR)
- Right to data portability (Article 20 GDPR)
- right to object (Article 21 GDPR)
- Right to revoke consent granted. The legality of the data processing carried out up to the point of revocation remains unaffected by the consent valid until then. (Article 7 (3) GDPR)
- Right to lodge a complaint with a supervisory authority (Article 77 GDPR)
Contact details for the supervisory authorities of the individual states: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html
13. Hosting
The hosting services we use (services for the operation and provision of the website) serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, email delivery, security services and technical maintenance services, which we use for the purpose of operating this online offering.
We, or our hosting provider, process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, interested parties and visitors to this online offer on the basis of our legitimate interests in the efficient and secure provision of this online offer in accordance with Art. 6 (1) (f) GDPR in conjunction with Art. 28 GDPR (conclusion of a data processing agreement).
14. Transfer of data to third parties
To implement our services and, in particular, to ensure the functionality of our website, we use a provider. The provider is also used as an external service provider to process your data. The provider was carefully selected and commissioned by us, is bound by our instructions, and is regularly monitored.
15. Legal basis for processing
If we obtain consent from the data subject for processing personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.
For the processing of personal data necessary to fulfill a contract to which the data subject is a party, Article 6 (1) (b) GDPR serves as the legal basis. This also applies to processing operations necessary to implement pre-contractual measures.
To the extent that processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) (c) GDPR serves as the legal basis.
If processing is necessary to protect the legitimate interests of our company or a third party, and the interests, fundamental rights, and freedoms of the data subject do not override the aforementioned interest, Article 6 (1) (f) GDPR serves as the legal basis for processing. Our company's legitimate interest lies in conducting our business activities.
16. Duration of storage of personal data
Personal data will be stored for the duration of the respective statutory retention period. After this period, the data will be routinely deleted unless necessary for the initiation or fulfillment of a contract.