Privacy Policy
Below we will inform you about the processing of your personal data when you use our online service.
Responsible body
You can find the name and contact details of the responsible body in the imprint.
Contact person
If you have any questions about data protection, please use the contact details provided in the imprint.
Storage period
We generally delete your personal data if it is no longer required to achieve the purpose for which it was collected or otherwise processed.
If we have asked you for consent and you have given us this, we will delete your personal data if you withdraw your consent and there is no other legal basis for the processing.
We delete your personal data if you have objected to the processing and there are no overriding legitimate reasons for the processing or if you have objected to the processing for the purpose of direct advertising or associated profiling.
If deletion is not possible because the processing is necessary to fulfill a legal obligation (legal retention periods, etc.) to which we are subject or to assert, exercise or defend legal claims, we will restrict the processing of your personal data.
You can also find further information on the storage period in the following sections.
Your rights
You have the following rights with regard to your personal data:
– Right to information
– Right to rectification
– Right to erasure
– Right to restriction of processing
– Right to object to processing
– Right to data portability
You have the right to object at any time to the processing of your personal data based on Art. 6 (1)(e) or (f) GDPR for reasons arising from your particular situation; this also applies to profiling based on these provisions. We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
If we process your personal data to conduct direct advertising, you have the right to object at any time to the processing of your personal data for the purposes of such advertising; this also applies to profiling insofar as it is associated with such direct advertising. We will then no longer process your personal data for these purposes.
You have the right to revoke your consent to process your personal data at any time. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.
You have the right to complain to a supervisory authority about our processing of your personal data.
Provision of your personal data
The provision of your personal data is generally neither legally nor contractually required nor necessary for the conclusion of a contract. In principle, you are not obliged to provide us with your personal data. If this is nevertheless the case, we will inform you separately when collecting your personal data (e.g. by marking mandatory fields in input forms).
Failure to provide your personal data usually means that we cannot process your personal data for one of the purposes described below and you cannot take advantage of an offer associated with the respective processing (example: without providing your email address, you will not receive our newsletter).
Web hosting
We use external services for web hosting. These services may have access to personal data that is processed as part of the use of our online offer.
Web server log files
We process your personal data in order to be able to show you our online offering and to ensure the stability and security of our online offering. Information (e.g. requested file, accessed URL, operating system, date and time of the request, browser type and version, IP address, protocol used, amount of data transferred, user agent, referrer URL, time zone difference to Greenwich Mean Time (GMT) and/or HTTP status code) is stored in so-called log files (access log, error log, etc.).
If we have asked for your consent and you have given us this, the legal basis for the processing is Art. 6 Para. 1 lit. a GDPR. If we have not asked for your consent, the legal basis for the processing is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest is the proper presentation of our online offering and ensuring the stability and security of our online offering.
Security
For security reasons and to protect the transmission of your personal data and other confidential content, we use encryption on our domain. You can recognize this in the browser line by the character string “https://” and the lock symbol.
Contact
If you contact us, we process your personal data to process your contact request.
If we have asked for your consent and you have given it to us, the legal basis for the processing is Art. 6 Para. 1 lit. a GDPR. If we have not asked for your consent, the legal basis for the processing is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in processing your contact. If the processing is necessary to fulfill a contract with you or to carry out pre-contractual measures based on your request, the legal basis for the processing is also Art. 6 Para. 1 lit. b GDPR. If you provide us with health data, the legal basis for processing is also Art. 9 Para. 2 lit. h GDPR in conjunction with Section 22 Para. 1 No. 1 lit. b BDSG.
We use external services to provide and maintain our email inboxes. These services may have access to personal data that is processed when you contact us.
Maps
We use maps from external services to show you our location and to enable you to use other functions of these external services in connection with the maps.
If we have asked for your consent and you have given us this, the legal basis for processing is Art. 6 Para. 1 lit. a GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in simplifying the use of maps.
Profiling (for the purposes of advertising, personalized information, etc.) may also take place when using external services. Profiling can also be carried out across services and devices. Further information on the services used, the scope of data processing and the technologies and procedures used when using the respective services, as well as whether a pseudonym is used when using the respective services and, if applicable, the logic involved and the scope and intended effects of such processing for you can be found in the further information on the services we use at the end of this passage and under the links provided there.
Google Maps
Provider: In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://www.google.de/maps
Further information on data protection: https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, insofar as these are offered by Google. Further information on this and Google’s responsibility can be found at the following link: https://business.safety.google/gdpr/. The EU standard contractual clauses can also be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which guarantees compliance with an appropriate level of data protection based on a decision by the European Commission.
Rating platforms
We use rating platforms and process your personal data in order to have our services rated and thus optimize our online offering and our marketing. For this purpose, we also integrate so-called widgets from the rating platforms, for example to show that we use a rating platform and how our services are rated.
If we have asked you for your consent and you have given us this, the legal basis for the processing is Art. 6 Para. 1 lit. a GDPR. If we have not asked you for your consent, the legal basis for the processing is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest is to optimize our online offering and our marketing.
If we or the rating platforms we use have asked you for your consent and you have given it, we or the rating platforms we use will process your personal data to remind you to submit a rating. The legal basis for the processing is Art. 6 Para. 1 lit. a GDPR.
For further information on the rating platforms we use, the scope of data processing and the technologies and procedures when using the respective rating platforms, please refer to the additional information on the rating platforms we use at the end of this section and the links provided there.
Google customer reviews
Provider In the European Economic Area (EEA) and Switzerland, Google services are offered by Google Ireland Limited, Ireland. Google Ireland Limited is a subsidiary of Google LLC, United States of America.
Website: https://support.google.com/merchants/answer/7124326?hl=de
Further information on data protection: https://policies.google.com/?hl=de
The transfer of personal data to third countries depends on the respective Google service and is subject to the various EU standard contractual clauses, insofar as these are offered by Google. Further information on this and on Google’s responsibility can be found at the following link: https://business.safety.google/gdpr/. The EU standard contractual clauses can also be viewed there. The provider has joined the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov), which, based on a decision by the European Commission, ensures compliance with an appropriate level of data protection.
jameda
Provider: jameda GmbH, Germany
Website: https://www.jameda.de
Further information & data protection declaration: https://www.jameda.de/datenschutz
Applications
If you apply to us, we will process your personal data to carry out the application process and to decide on the establishment of an employment relationship. After the application process has been completed, we will restrict the processing of your personal data and delete or destroy it no later than 6 months after receipt of the rejection or return the application documents to you and delete or destroy any copies, unless you have consented to the further use of your personal data.
If we have asked for your consent and you have given it to us, the legal basis for the processing is Art. 6 Para. 1 lit. a GDPR. If we have not asked for your consent, the legal basis for processing is Art. 6 (1) (f) GDPR. Our legitimate interest is the proper conduct of the application process and, if necessary, the defense against claims due to the rejection of an application. Insofar as processing is necessary for the decision on the establishment of an employment relationship, the legal basis for processing is also Section 26 (1) Sentence 1 BDSG.