Last updated: September 2026

1. General Information

The following information provides an overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Detailed information on data protection can be found in the privacy policy below.

2. Data Collection on This Website

Who is responsible for data collection on this website?

Data processing on this website is carried out by the website operator. The contact details of the controller can be found in the section “Information on the Controller”.

How do we collect your data?

Some data is collected when you provide it to us. This may include, for example, data that you enter into a contact or application form or upload as a file as part of an application.

Other data is collected automatically or, where applicable, after you have given your consent, by our IT systems when you visit the website. This includes, in particular, technical data such as your internet browser, operating system, IP address or the time the page was accessed.

What do we use your data for?

Some data is processed to ensure the technically error-free and secure provision of the website.

Other data may, after you have given your consent, be used for the statistical analysis of user behaviour or to measure the success of our online and marketing activities.

Data that you submit to us via contact or application forms is used to process your enquiry or to conduct the application process.

Where contracts are initiated via the website, the data submitted may also be processed for the purpose of carrying out pre-contractual measures.

What rights do you have regarding your data?

You have the right at any time to obtain information free of charge about the origin, recipients and purpose of your stored personal data.

You also have the right to request the correction or deletion of your personal data.

If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future.

Subject to the statutory requirements, you also have the right to restriction of processing, data portability and the right to object to certain processing activities.

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority.

3. Hosting

External Hosting by Variomedia

This website is externally hosted by:

Variomedia AG
August-Bebel-Straße 68
14482 Potsdam
Germany

The personal data processed on this website may be stored on the servers of our hosting provider. This may include, in particular, IP addresses, website access data, contact enquiries, meta and communication data, contractual data, contact details and other data submitted via the website.

Hosting is provided for the purpose of ensuring the secure, reliable and efficient provision of our online services.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and technically error-free provision of our website.

Where processing is necessary for the performance of a contract or for carrying out pre-contractual measures, it is additionally based on Art. 6(1)(b) GDPR.

Where Variomedia processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

4. General Information and Mandatory Disclosures

Data Protection

We take the protection of your personal data very seriously and treat your personal data confidentially and in accordance with the applicable data protection laws and this privacy policy.

When you use this website, various personal data may be processed. This privacy policy explains which data is processed, for what purpose and on what legal basis the processing is carried out.

Please note that data transmission over the internet, for example when communicating by email, may be subject to security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.

Information on the Controller

The controller responsible for data processing on this website is:

Brockmann & Büchner
Partnerschaftsgesellschaft
Hohe Bleichen 8
20354 Hamburg

Phone: +49 – (0) 40 – 59 46 66 93
Email: kontakt@2bic.de

The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

Storage Period

Unless a more specific storage period is stated in this privacy policy, personal data is stored only for as long as is necessary for the respective processing purpose.

If you submit a legitimate request for deletion or withdraw consent that you have previously given, the data concerned will be deleted unless statutory or other lawful grounds require or permit further storage.

Statutory commercial, tax or other legal retention obligations remain unaffected.

The data will be deleted once the relevant retention periods have expired.

General Legal Bases for Data Processing

Where you have consented to data processing, the processing is carried out on the basis of Art. 6(1)(a) GDPR.

Where special categories of personal data within the meaning of Art. 9(1) GDPR are processed and explicit consent has been given, the processing is based on Art. 9(2)(a) GDPR.

Where storing information on your terminal device or accessing information already stored on it requires consent, this is additionally carried out on the basis of Section 25(1) TDDDG.

If processing is necessary for the performance of a contract or for carrying out pre-contractual measures, it is based on Art. 6(1)(b) GDPR.

Where processing is necessary for compliance with a legal obligation, it is based on Art. 6(1)(c) GDPR.

In addition, processing may be based on our legitimate interests pursuant to Art. 6(1)(f) GDPR.

The relevant legal bases are explained in more detail in the following sections.

Data Protection Officer

We have appointed a data protection officer:

Marc Brockmann
Hohe Bleichen 8
20354 Hamburg

Phone: +49 – (0) 40 – 59 46 66 93
Email: kontakt@2bic.de

Recipients of Personal Data

As part of our business activities, we work with various external parties.

Personal data is disclosed only where there is a legal basis for doing so, where this is necessary for the performance of a contract, where a legal obligation exists, where valid consent has been given or where we have a legitimate interest in the disclosure.

Where external service providers process personal data on our behalf, we enter into the required data processing agreements pursuant to Art. 28 GDPR.

Transfers of Data to Third Countries

Some of the services used on this website may involve the processing of personal data outside the European Union or the European Economic Area.

Where personal data is transferred to a third country, the transfer is carried out only in compliance with the statutory requirements of Art. 44 et seq. GDPR.

Where a recipient in the United States is certified under the EU-U.S. Data Privacy Framework, data may be transferred on the basis of the corresponding adequacy decision of the European Commission.

In other cases, in particular, the European Commission’s Standard Contractual Clauses or other appropriate safeguards may be used.

Withdrawal of Your Consent

Many data processing operations are possible only with your explicit consent.

You may withdraw consent that you have already given at any time with effect for the future.

The lawfulness of processing carried out up to the time of withdrawal remains unaffected.

You can change or withdraw consent relating to cookies, analytics or marketing services at any time via the “Cookies” link in the footer of our website.

Right to Object under Art. 21 GDPR

IF DATA PROCESSING IS CARRIED OUT ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA.

THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS.

IF YOU OBJECT, WE WILL NO LONGER PROCESS THE PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

WHERE PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO PROCESSING FOR SUCH MARKETING PURPOSES.

Right to Lodge a Complaint with a Supervisory Authority

In the event of an infringement of the GDPR, you have the right to lodge a complaint with a data protection supervisory authority.

This applies in particular to a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Right to Data Portability

You have the right to receive data that we process automatically on the basis of your consent or in performance of a contract in a commonly used, machine-readable format or, where technically feasible, to have it transmitted to another controller.

Access, Rectification and Erasure

Within the scope of the applicable statutory provisions, you have the right at any time to obtain information free of charge about your stored personal data and, where applicable, the right to have such data rectified or erased.

Right to Restriction of Processing

Subject to the statutory requirements, you have the right to request restriction of the processing of your personal data.

This applies in particular where:

• you contest the accuracy of the stored personal data,
• the processing is unlawful,
• we no longer need the personal data, but you require it for the establishment, exercise or defence of legal claims, or
• you have objected to processing pursuant to Art. 21(1) GDPR and it has not yet been determined whose interests prevail.

SSL or TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption.

You can recognise an encrypted connection, in particular, by the use of “https” in your browser’s address bar.

Objection to Advertising Emails

We object to the use of contact details published in the context of statutory information obligations for the purpose of sending unsolicited advertising and information materials.

5. Data Collection on This Website

Cookies and Similar Technologies

Our website uses cookies and similar technologies.

Cookies are small data packets that may be stored on the user’s terminal device.

Technically necessary cookies and similar technologies are used where this is required to provide the website or a function expressly requested by the user.

In such cases, storage or access is based on Section 25(2) TDDDG.

Where personal data is processed in this context, processing is generally based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free and secure provision of our website.

Where cookies or similar technologies are used for analytics, statistics or marketing purposes, this takes place only after you have given your prior consent.

The legal bases are Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

Consent may be withdrawn at any time with effect for the future via the cookie settings on our website.

6. Consent Management with Borlabs Cookie

We use Borlabs Cookie on this website to obtain, manage and document the legally required consents for cookies and similar technologies.

The provider is:

Borlabs GmbH
Hamburger Straße 11
22083 Hamburg
Germany

When you visit our website, the technically necessary cookie borlabs-cookie is stored.

This cookie contains information about which service groups or individual services you have allowed or rejected.

The cookie is used exclusively to manage and document your consent decision.

Storage Period

The Borlabs cookie is stored for 60 days in accordance with our current configuration.

After this period, a new consent decision may be required.

You can also delete the cookie at any time via your browser.

Legal Basis

The technically necessary consent cookie is stored on the basis of Section 25(2) TDDDG.

The processing and documentation of your consent decision is carried out in particular to fulfil statutory accountability obligations on the basis of Art. 6(1)(c) GDPR.

You can change your selection at any time via the “Cookies” link in the footer of our website.

7. Server Log Files

When you access our website, our hosting provider automatically creates server log files.

In particular, the following data may be processed:

• IP address
• browser type and browser version
• operating system used
• referrer URL
• page or file accessed
• date and time of the server request
• HTTP status code
• amount of data transferred
• host name or technical information about the accessing system

The processing is carried out to ensure the technical functionality and security of the website and to detect and prevent misuse and technical disruptions.

The legal basis is Art. 6(1)(f) GDPR.

Our legitimate interest lies in the secure, stable and error-free provision of our online services.

Storage Period

According to our hosting provider Variomedia, HTTP access logs containing non-anonymised IP addresses are generally stored for 7 days.

HTTP error logs are generally stored for 14 days.

Access logs provided for statistical purposes may be retained in anonymised form for at least two full months and for a maximum of 95 days.

A longer storage period may apply in individual cases where this is necessary to investigate a security incident or to establish, exercise or defend legal claims.

8. Contact

Contact Forms with Elementor Forms and WPForms

This website may use forms created with Elementor Forms or, where used on individual pages, with WPForms.

If you contact us via a form, we process the information you submit in order to handle your enquiry and any follow-up questions.

Depending on the form concerned, in particular the following data may be processed:

• first and last name
• company
• email address
• telephone number
• subject
• message
• other information voluntarily provided, where applicable

The data is used exclusively to process your respective enquiry.

Where form submissions are stored within our WordPress installation, they are stored in the WordPress database on the server infrastructure of our hosting provider Variomedia.

Access to stored form submissions is restricted to authorised persons.

Form data may additionally be sent by email to the internal contacts responsible for the respective enquiry.

Legal Basis

If your enquiry relates to an existing contract or serves to carry out pre-contractual measures, processing is based on Art. 6(1)(b) GDPR.

In all other cases, processing is based on our legitimate interest in the proper and efficient handling of incoming enquiries pursuant to Art. 6(1)(f) GDPR.

Where explicit consent is obtained, processing is based on Art. 6(1)(a) GDPR.

Storage Period

Ordinary contact form submissions stored within WordPress are generally deleted no later than six months after the enquiry has been finally dealt with, unless another legal basis or statutory retention obligation requires longer storage.

Where an enquiry leads to a contractual relationship or business correspondence, statutory commercial or tax retention obligations may result in a longer storage period.

For applications, the separate retention periods stated under “Handling Applicant Data” apply.

Enquiries by Email or Telephone

If you contact us by email or telephone, we process your enquiry, including the personal data arising from it, for the purpose of handling your request.

The legal basis is Art. 6(1)(b) GDPR insofar as the communication serves the initiation or performance of a contract.

In all other cases, processing is based on Art. 6(1)(f) GDPR or, where obtained, your consent pursuant to Art. 6(1)(a) GDPR.

The data is deleted as soon as the purpose of processing no longer applies and no statutory retention obligations or other legal grounds require further storage.

9. Website Creation with Elementor and Elementor Pro

We use Elementor and Elementor Pro for the technical creation and presentation of this website.

The software is integrated into our WordPress installation and is used in particular to design pages, templates, navigation elements, forms and other components of our website.

Where external services are embedded through individual Elementor functions, their processing takes place exclusively in accordance with the settings described in this privacy policy and the cookie settings selected by you.

10. Multilingual Website with WPML

This website is provided in multiple languages using WPML.

WPML may use technically necessary cookies in particular to store the currently selected language and provide the correct language version of the website.

Depending on the configuration, the following cookies may be used in particular:

wp-wpml_current_language
Stores the currently selected language.

_icl_visitor_lang_js
May store the language used for a language redirect.

wpml_browser_redirect_test
Checks whether cookies are enabled in the browser.

wp-wpml_current_admin_language_*
May store the currently used language within administrative areas.

Storage Period

Depending on the function, WPML language information relevant to visitors is stored for the respective session or for up to one day.

Legal Basis

Where required for the expressly requested language function, storage is based on Section 25(2) TDDDG.

Where personal data is processed in this context, this is based on Art. 6(1)(f) GDPR.

Our legitimate interest lies in the technically correct and user-friendly provision of our multilingual website.

The data is not used for advertising or profiling purposes.

11. Social Media and External Links

Our website contains links to external websites and social networks, in particular LinkedIn and XING, as well as other corporate and partner websites where applicable.

Such links are generally ordinary hyperlinks.

Merely displaying such a link on our website does not establish a connection to the respective social network.

Only when you click the link do you leave our website and access the service of the respective third-party provider.

The third-party provider may then process, in particular, your IP address, browser information, the time of access and, where applicable, other personal data.

The operator of the respective external website is generally responsible for the processing carried out there.

12. Analytics and Statistics

Koko Analytics

We use Koko Analytics on our website for the statistical evaluation of the use of our online services.

Koko Analytics is operated within our own WordPress installation.

The statistical data collected is stored in the database of our WordPress installation on the server infrastructure of our hosting provider Variomedia.

The statistical data collected using Koko Analytics is not transmitted to an external analytics service.

Cookie-Based Analytics

We have configured Koko Analytics so that analytics is activated only after you have given your prior consent to the service group “Statistics”.

In the configuration we use, Koko Analytics uses the following cookie:

_koko_analytics_pages_viewed

This cookie is used to identify returning visitors and unique page views within a single day.

The cookie does not contain directly identifying information.

Cookie Storage Period

The cookie is deleted no later than midnight in the time zone configured for our website and therefore has a maximum storage period of less than 24 hours.

Statistical Data

The statistical data generated by Koko Analytics is stored in aggregated form within our own WordPress database.

We store this statistical data for a maximum of 24 months. The relevant statistical data is then deleted.

Legal Basis

Koko Analytics is activated only after you have given your prior consent.

The legal basis for processing is Art. 6(1)(a) GDPR.

The storage or reading of the cookie is based on Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future via the cookie settings on our website.

13. Matomo

For the statistical analysis of our website, we use Matomo.

Matomo is open-source web analytics software.

Our Matomo installation is self-hosted. The Matomo installation and the associated database are located on the server infrastructure of our hosting provider Variomedia.

We do not use Matomo Cloud.

The analytics data we collect is not disclosed to the provider of Matomo for web analytics purposes.

Matomo is activated only if you have previously consented, via our consent management solution, to the corresponding processing within the “Statistics” service group.

Data Processed

When Matomo is enabled, the following information may be processed in particular:

• pages and URLs accessed
• time of page access
• referrer URL
• browser type and browser version
• operating system
• device information
• screen resolution
• origin or approximate geographic location
• interactions with our website
• truncated or anonymised IP address

IP Anonymisation

Matomo is operated with IP anonymisation enabled.

The IP address is truncated before or during the statistical analysis so that direct attribution to a specific person is made more difficult.

Matomo Cookies

Where cookie-based Matomo analytics is enabled, the following first-party cookies may be used in particular:

_pk_id.*.*
Used to recognise a returning visitor.
Storage period: up to 13 months

_pk_ses.*.*
Used to associate actions within a visit.
Storage period: approx. 30 minutes

_pk_ref.*.*
May store information about the original source or referrer.
Storage period: up to 6 months

Additional cookies or storage objects are used only if the corresponding optional Matomo functions are actually enabled.

Storage Period of Analytics Data

Non-aggregated or detailed Matomo visit data is stored for a maximum of 180 days and is then automatically deleted.

Aggregated statistical reports are stored for a maximum of 24 months and are then deleted.

Any further storage of personal data takes place only where there is a legal basis for doing so.

Legal Basis

Matomo is used only after you have given your prior consent.

The legal basis is Art. 6(1)(a) GDPR.

Where cookies or similar technologies are stored on or read from your terminal device, this is additionally based on Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future via the cookie settings on our website.

The standard retention periods documented by Matomo include 13 months for _pk_id, 30 minutes for _pk_ses and six months for _pk_ref.

14. LinkedIn Insight Tag

After you have given your prior consent, we use the LinkedIn Insight Tag on this website.

The provider for users within the European Union or the European Economic Area is:

LinkedIn Ireland Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland

The LinkedIn Insight Tag enables us in particular to:

• statistically evaluate website visits,
• measure the success of LinkedIn advertising campaigns,
• measure conversions,
• create statistical target audiences, and
• where applicable, retarget specific audiences within LinkedIn.

In particular, the following information may be transmitted to LinkedIn:

• URL accessed
• referrer URL
• IP address
• timestamp
• browser information
• device information
• information about interactions with our website

If a visitor is logged in to LinkedIn, LinkedIn may be able to associate the information collected with an existing LinkedIn account.

Cookies

In connection with the LinkedIn Insight Tag, cookies or similar technologies such as bcookie, li_gc, lidc, UserMatchHistory, AnalyticsSyncHistory, lms_ads, lms_analytics, li_fat_id or li_sugr may be used.

You can view the specific cookies used and their respective storage periods at any time in the cookie settings of this website.

Storage Period at LinkedIn

According to LinkedIn, information that could directly identify an individual is removed from or pseudonymised within 7 days from the data collected through the Insight Tag.

The remaining pseudonymised Insight Tag data is generally deleted within 180 days.

We do not have full control over any further processing of data by LinkedIn on the basis of its own contractual relationship with a registered LinkedIn member.

Legal Basis

The LinkedIn Insight Tag is activated only after you have given your explicit consent.

The legal basis is Art. 6(1)(a) GDPR.

Where information is stored on or read from your terminal device, this is additionally based on Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future via our cookie settings.

Data Transfers to the USA

LinkedIn may also process personal data in the United States.

LinkedIn states that it complies with the requirements of the EU-U.S. Data Privacy Framework. In addition, the European Commission’s Standard Contractual Clauses may be used for certain international data transfers.

15. Plugins and Technical Services

Local Web Fonts

This website uses locally hosted web fonts to ensure the consistent display of fonts.

The required font files are provided by our own web server or via the infrastructure of our hosting provider.

When these fonts are loaded, no connection is established to external font providers such as Google Fonts.

Therefore, no IP addresses are transmitted to an external font provider in connection with displaying these fonts.

16. Cloudflare Turnstile

To protect our contact and application forms against automated submissions, bots, spam and misuse, we use Cloudflare Turnstile.

The provider is:

Cloudflare, Inc.
101 Townsend Street
San Francisco, CA 94107
USA

Cloudflare Turnstile uses technical characteristics to assess whether a request is likely to have been made by a human or an automated program.

In particular, the following information may be processed:

• IP address
• browser and device information
• user agent
• technical connection information
• information about the page accessed
• technical security and interaction characteristics
• time of the request

Turnstile is used exclusively to protect our website and, in particular, our forms against automated misuse.

Consent and Legal Basis

In our current configuration, Cloudflare Turnstile is controlled via our consent solution.

Where Turnstile is loaded only after you have given your consent, processing is based on Art. 6(1)(a) GDPR.

Where information is stored on or read from your terminal device, this is additionally based on Section 25(1) TDDDG.

You can withdraw your consent at any time with effect for the future via the cookie settings.

Storage Period

Verification tokens generated by Cloudflare Turnstile are valid only for a short period of time.

In addition, Cloudflare processes technical security information only for as long as is necessary to provide the service, ensure the security of its systems or comply with legal obligations.

We do not have full control over the specific storage period of data that Cloudflare processes under its own responsibility.

Data Transfers to the USA

Cloudflare may also process personal data in the United States.

According to its own information, Cloudflare is certified under the EU-U.S. Data Privacy Framework. The European Commission’s Standard Contractual Clauses may also be used for international data transfers.

17. Audio and Video Conferences

Data Processing

We may use online conferencing tools to communicate with customers, prospective customers, applicants and business partners.

If you communicate with us via such a service, both we and the respective provider may process personal data.

This may include, in particular:

• name
• email address
• telephone number
• IP address
• device information
• operating system
• start and end of participation
• duration of the conference
• participant information
• chat messages
• files uploaded or exchanged
• audio and video content, where these functions are used

Legal Basis

Where communication serves the initiation or performance of a contract, the legal basis is Art. 6(1)(b) GDPR.

Otherwise, the service is used on the basis of our legitimate interest in efficient communication pursuant to Art. 6(1)(f) GDPR.

Where consent is obtained, processing is based on Art. 6(1)(a) GDPR.

Storage Period

Data stored by us is deleted as soon as the respective processing purpose no longer applies and no statutory retention obligations prevent deletion.

We do not have full control over the storage period of data processed by the respective provider for its own purposes.

Microsoft Teams

We use Microsoft Teams.

The provider within the European Union is:

Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
Ireland

Microsoft may also process personal data outside the European Union.

Where required, such transfers are carried out in accordance with the statutory requirements governing international data transfers.

Where Microsoft processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR.

18. Applications

Handling Applicant Data

You may apply to us by email, by post or via an online application form provided on this website.

We treat all personal data collected during the application process confidentially and in accordance with the applicable data protection regulations.

Online Application Form

For online applications, we may in particular use Elementor Forms or the form solutions used on our website.

In connection with an application, the following data may be processed in particular:

• form of address and, where applicable, title
• first and last name
• address
• email address
• telephone number
• information about the desired start date
• salary expectations
• information on how you became aware of us
• messages and other voluntary information
• CV/résumé
• references and certificates
• other application documents uploaded

The information and files submitted may be stored within our WordPress installation or WordPress database.

The data is stored on the server infrastructure of our hosting provider Variomedia.

The information may additionally be sent by email to the internal contacts responsible for the application process.

Access to applicant data is restricted to persons involved in carrying out the respective application process.

Purpose and Legal Basis

We process applicant data insofar as this is necessary for deciding whether to establish an employment relationship.

The legal basis is, in particular, Section 26 BDSG.

Where processing is necessary to carry out pre-contractual measures, it may additionally be based on Art. 6(1)(b) GDPR.

Where consent has been given, processing is based on Art. 6(1)(a) GDPR.

If application documents contain special categories of personal data within the meaning of Art. 9 GDPR, such data is processed only insofar as this is legally permissible and necessary for the application process or where appropriate consent has been given.

Storage Period for Applicant Data

If no employment relationship is established, a job offer is rejected or an application is withdrawn, the personal data stored as part of the application process is generally deleted no later than six months after completion of the application process.

The data is retained for this period in particular so that any potential legal claims arising from the application process can be traced and defended.

The legal basis for this is Art. 6(1)(f) GDPR.

A longer storage period applies only where statutory retention obligations exist, a legal dispute is pending or another legal basis applies.

This also applies to applicant data and uploaded documents that may be stored within our WordPress installation.

Inclusion in an Applicant Pool

If we are unable to offer you a position at the present time, we may offer to retain your application data for future vacancies with your explicit consent.

Inclusion in an applicant pool takes place exclusively on the basis of your voluntary consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw this consent at any time with effect for the future.

Data in the applicant pool is deleted no later than two years after consent is given, unless consent has already been withdrawn earlier.

Review of Publicly Available Professional Information

As part of an application process, we may review publicly available professional information about applicants to an appropriate extent.

This may include, in particular, professional information on platforms such as LinkedIn or XING where this information is relevant to the position in question.

The legal basis may be Art. 6(1)(f) GDPR.

Our legitimate interest lies in verifying professional information and qualifications relevant to the position in question.

19. Our Social Media Profiles

This privacy policy also applies to our business presences on social networks.

In particular, we maintain company profiles on LinkedIn and XING.

Data Processing by Social Networks

When you visit our social media profiles, personal data may be processed by the respective platform operator.

If you are logged in with the respective provider, it may be able to associate your visit with your user account.

Even without a user account, technical data such as your IP address, device information or information obtained via cookies or similar technologies may be processed.

The platform operators may use this information, among other things, to create usage profiles and display personalised advertising.

We have only limited influence over the nature and scope of processing carried out by these platform operators under their own responsibility.

Legal Basis

Our social media profiles are used to present our company and to communicate with customers, prospective customers, applicants and business partners.

Where we determine the purposes and means of processing ourselves, the processing is based in particular on our legitimate interest pursuant to Art. 6(1)(f) GDPR or, in connection with pre-contractual or contractual communication, on Art. 6(1)(b) GDPR.

Storage Period

Personal data that we receive directly through our social media profiles and store in our own systems is deleted as soon as the processing purpose no longer applies and no statutory retention obligations or other legal grounds require further storage.

We do not have full control over the storage period of data processed by platform operators under their own responsibility.

LinkedIn

We maintain a company profile on LinkedIn.

The provider for users within the European Union or the European Economic Area is:

LinkedIn Ireland Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland

LinkedIn may also process personal data in the United States.

The safeguards described in this privacy policy apply to the corresponding international data transfers.

XING

We maintain a company profile on XING.

The provider is:

New Work SE
Am Strandkai 1
20457 Hamburg
Germany

The processing of personal data by XING is additionally governed by the platform operator’s privacy policy.

 

20. Performance Plugin WP Rocket

We use the WordPress plugin WP Rocket to technically optimize and improve the performance of our website. WP Rocket is used in particular for caching and for optimizing the delivery of website content.

Where we use cloud-based optimization features provided by WP Rocket, technical information, in particular URLs of publicly accessible pages, may be transmitted to systems operated by the provider WP Media and processed there for the purpose of generating optimized resources.

The provider is WP Media, 4 Rue de la République, 69001 Lyon, France.

The use of WP Rocket is based on our legitimate interest in providing a technically secure, stable and high-performance website in accordance with Art. 6(1)(f) GDPR.