General data protection information
HRG Hospitality B.V. & Co. KG
Privacy Policy
As of 01/07/2024
Name and address of the controller
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection provisions is:
HRG Hospitality B.V. & Co. KG
Hauptstraße 66
12159 Berlin
Germany
Telephone: +49 (0)30 / 773 27 80–0
Email: info@hrg-hotels.com
Contact details of the data protection officer
The data protection officer of the controller is:
Intersoft consulting services AG
Beim Strohhause 17
20097 Hamburg
Germany
Telephone: +49 40 790 235-0
Email: dataprivacy@hrg-hotels.com
General information on data processing
- scope of the processing of personal data
We process personal data of our users only to the extent necessary to provide a functional website and to provide our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent cannot be obtained for practical reasons and the processing of the data is required by law.
- legal basis for the processing of personal data
- Consent: Article 6(1)(a) of the GDPR – if the data subject has given consent.
- Performance of a contract: Article 6(1)(b) of the GDPR – if processing is necessary for the performance of a contract.
- Legal obligation: Article 6(1)(c) of the GDPR – if processing is necessary for compliance with a legal obligation.
- Vital interests: Art. 6 para. 1 sentence 1 lit. d GDPR – if processing is necessary to protect vital interests.
- Legitimate interest: Art. 6 para. 1 sentence 1 lit. f GDPR – if processing is necessary to protect a legitimate interest, except where such interests are overridden by the interests or fundamental rights of the data subject.
- Data erasure and storage duration
Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Storage beyond this period will only take place if required by European or national law. The data will also be deleted when a legally prescribed storage period expires, unless further storage is required to fulfil a contract.
Rights of the data subject
If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights in relation to the controller:
- Right of access (Art. 15 GDPR)
You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have the right to access this data and the following information:
- Purposes of processing
- Categories of personal data
- Recipients or categories of recipients
- Planned storage period or the criteria for determining this duration
- The existence of the rights of rectification, cancellation, restriction or opposition
- Right of appeal to the competent supervisory authority
- Origin of the data (if collected from a third party)
- Existence of automated decision-making, including profiling, with meaningful information about the logic involved, the scope and the expected effects
- Transfer of personal data to a third country or international organisation
- Right to rectification (Art. 16 GDPR)
If your personal data is incorrect or incomplete, you have the right to request immediate correction or supplementation of the personal data.
- Right to restriction of processing (Art. 18 GDPR)
If one of the following conditions is met, you have the right to request a restriction of the processing of your personal data:
- You dispute the accuracy of your personal data for a period of time that enables us to verify the accuracy of your personal data.
- The processing is unlawful and you refuse to delete the personal data and instead request the restriction of the use of the personal data.
- We no longer need your personal data for the purposes of processing, but you do need your personal data to assert, exercise or defend your legal claims.
- You have objected to the processing and it is not yet clear whether our legitimate reasons outweigh your reasons.
- Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)
If one of the following reasons applies, you have the right to request the immediate deletion of your personal data:
- Your data is no longer necessary for the processing purposes for which it was originally collected.
- You revoke your consent and there is no other legal basis for the processing.
- You object to the processing and there are no overriding legitimate reasons for the processing or you object in accordance with Art. 21 (2) GDPR.
- Your personal data are being unlawfully processed.
- The erasure is necessary to fulfil a legal obligation under Union law or the law of the Member State.
- The personal data have been collected in relation to information society services offered in accordance with Article 8 (1) GDPR.
Please note that the above reasons do not apply to the extent that the processing is necessary:
- To exercise the right to freedom of expression and information.
- To fulfil a legal obligation or to perform a task carried out in the public interest.
- For reasons of public interest in the area of public health.
- For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
- For the establishment, exercise or defence of legal claims.
- Right to data portability (Art. 20 GDPR)
You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request its transfer to another controller.
- Right to object to certain data processing (Art. 21 GDPR)
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR, including profiling based on those provisions.
Where your personal data are processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
- Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 of the GDPR.
Newsletter
Description and scope of data processing
On our website, you have the option to subscribe to a free newsletter. When you register, your email address is transmitted to us. Your email address will be used exclusively for sending the newsletter.
As part of the registration process, your consent is obtained for the processing of the data and reference is made to this privacy policy.
Purpose of data processing
The collection of the e-mail address is for the purpose of sending you the newsletter.
Legal basis for data processing
The legal basis for the processing of the data after registration for the newsletter is your consent (Art. 6 para. 1 lit. a GDPR).
Duration of storage
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The e-mail address will be stored as long as the subscription to the newsletter is active. If you do not confirm your registration, your data will be deleted within 24 hours.
Right of withdrawal and removal
You have the right to withdraw your consent at any time. The legality of the processing carried out on the basis of the consent up to the withdrawal remains unaffected. To unsubscribe from the newsletter, use the corresponding link in the footer of the email or revoke your consent by emailing dataprivacy@hrg-hotels.com.
Email contact
Description and scope of data processing
On our website, it is possible to contact us via the email address provided. In this case, the personal data transmitted with the email will be stored. The data will be used exclusively for processing the conversation.
Purpose of data processing
The processing of the data serves to handle the contact and the associated communication.
Legal basis for data processing
The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in processing and answering your enquiry. If the purpose of the e-mail contact is to conclude a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.
Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation has ended and the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
Option to object
If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of making contact will be deleted in this case.
Hosting
The website is hosted on servers by a service provider contracted by us.
Our service provider is:
HubSpot Inc.
2nd Floor 25 First Street
Cambridge
02141 Massachusetts
USA
The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information is:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Date and time of the server request
- IP address
This data is not merged with other data sources. This data is collected on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in the technically error free depiction and the optimization of the operator's website.
The website server is located in the United States. Your data will be transmitted to HubSpot servers in the United States. HubSpot has joined the Trans-Atlantic Data Privacy Framework (TDPF; data protection agreement between the EU and the United States), ensuring an adequate level of data protection for data processing.
Further information on the processing of data by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy
Applications
On our website, you have the opportunity to apply for open positions via the job portal. Information on the processing of personal data in connection with your application can be found in the data protection declaration for applications.
Use of company profiles in social and professional networks
We use the option of company profiles on social and professional networks for communication and the exchange of information with (potential) customers.
We maintain a company presence on the following social/professional networks:
- LinkedIn: Ireland Unlimited Company - Dublin, Ireland
- YouTube: Google Ireland Limited - Dublin, Ireland
- Facebook and Instagram: Meta Platforms Ireland Limited - Dublin, Ireland
- TikTok: TikTok Technology Limited - Dublin, Ireland
- Xing: New Work SE - Hamburg, Germany
- Pinterest: Pinterest Inc. - San Francisco, USA
If you carry out an action on one of our company sites (e.g. comments, posts, likes, etc.), you may make personal data public (e.g. real name or photo of your user profile). However, since we generally or to a large extent have no influence on the processing of your personal data by the companies jointly responsible for the company site, we cannot provide any binding information on the purpose and scope of the processing of your data. Further information on objection and removal options vis-à-vis the providers of social/professional networks can be found here:
- LinkedIn:
- YouTube:
- Facebook:
- Instagram:
- TikTok:
- Xing:
- Pinterest:
Plugins used
Use of Hubspot
Scope of personal data processing:
We use functions of the CMS HubSpot from HubSpot Inc., 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as HubSpot). This is an integrated software solution that we use to cover various aspects of our online marketing. These include, among other things: email marketing (newsletters and automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (in particular traffic sources, access, etc.), contact management (in particular user segmentation and CRM), landing pages and contact forms. HubSpot places a cookie on your computer for this purpose. This allows personal data to be stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system), data about the advertisements displayed (especially which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (especially pseudonymised user IDs).
Other recipients of the data processed by HubSpot are:
- Amazon Web Services Inc.
- Google Inc.
- Cloudflare Inc.
- Twilio Inc.
- Message Systems Inc.
- SendGrid Inc.
- Snowflake Inc.
- HubSpot Inc.
- HubSpot Ireland Ltd.
- HubSpot Germany GmbH
- HubSpot Australia Pty. Ltd.
- HubSpot Asia Pte. Ltd.
- HubSpot Japan KK
- HubSpot Latin America S.A.S.
- HubSpot Sweden
Further information on the processing of data by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy
Purpose of data processing:
We use the HubSpot plug-in to optimise our website and marketing activities.
Legal basis for the processing of personal data:
The legal basis for the processing of users' personal data is, in principle, the consent of the user in accordance with Art. 6 (1) point a GDPR.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this data protection declaration or as required by law (e.g. for tax and accounting purposes).
Option of revocation and removal:
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent HubSpot from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser, or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy
Use of Google Analytics
Scope of personal data processing:
We use Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). Google Analytics analyses the origin of visitors, the time they spend on individual pages and how they use search engines, thus enabling better monitoring of the success of advertising campaigns. Google sets a cookie on your computer for this purpose. This allows personal data to be stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked on), device and browser information (especially the IP address and operating system), data about the advertisements displayed (especially which advertisements were displayed and whether the user clicked on them) and also data from advertising partners (especially pseudonymised user IDs).
We use Google Analytics (Universal Analytics) to evaluate your use of our online presence, to compile reports on your activities and to use other Google services related to the use of our online presence and the internet. We have requested the anonymisation of IP addresses, which means that Google will shorten your IP address as soon as technically possible. However, it cannot be ruled out that your data may be transmitted to the servers of Google LLC based in the USA. On behalf of the operator of this online presence, Google will use this information for the purpose of evaluating your use of the online presence, compiling reports on the online presence's activities and providing other services relating to the use of the online presence and the internet to the online presence's operator.
Further information on the processing of data by Google can be found here:
Purpose of data processing:
We use Google Analytics (Universal Analytics) to analyse the use of our online presence and to display targeted advertising to people who have already expressed an initial interest by visiting our site.
Legal basis for the processing of personal data:
The legal basis for the processing of users' personal data is, in principle, the user's consent in accordance with Art. 6 (1) point a GDPR.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or until you exercise your right of withdrawal.
Option to revoke:
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent Google from collecting and processing your personal data by preventing the storage of third-party cookies on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link:
You can disable the use of your personal data by Google with the following link: https://adssettings.google.de
Further information on objection and removal options with respect to Google can be found at:
Use of Google AdSense
Scope of personal data processing:
Our website uses Google AdSense, an advertising integration service provided by Google Ireland Ltd, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland (hereinafter ‘Google’). Google AdSense allows us to integrate advertising into our website. This involves the use of cookies and web beacons to collect data about your use of this website and to enable us to show you ads that match your interests.
The following data may be processed:
- Demographic data (age, gender, location)
- Interest data (interests and preferences, search history, interactions with ads)
- Device and browser data (device type, operating system, browser type, screen resolution)
- Website and app data (websites and apps visited, time spent on site, interactions with content)
- Display data (ad impressions, ad clicks, ad interactions, conversion data)
- Technical data (IP address, cookie data, location data, unique device identifiers)
- Publisher data (website URL, categories and content of the websites, website traffic)
Google is registered in the EU-US Data Privacy Framework. This ensures an adequate level of data protection for data transfers to the USA. Further information on data processing by Google can be found here:
Purpose of processing:
Data processing by Google AdSense is carried out for the purpose of displaying advertising on our website and customising these ads to the respective user interests.
Legal basis for data processing:
The legal basis for the processing of users' personal data is the user's consent in accordance with Art. 6 (1) point a GDPR.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this data protection declaration or as required by law (e.g. for tax and accounting purposes).
Option of revocation:
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent Google from collecting and processing your personal data by preventing the storage of third-party cookies on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
You can disable Google's use of your personal data by clicking on the following link: https://adssettings.google.de
For more information about how to object to and delete data held by Google, please visit:
Use of DoubleClick
Description and scope of data processing:
We use DoubleClick from Google Ireland Ltd, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland on our website. DoubleClick enables better planning, execution, management and evaluation of campaigns and ads. This allows personalised advertising that is intended to reflect the interests of our users as closely as possible to be displayed to individual users.
The following data, among other things, is processed:
- Number of page views
- User surfing behaviour
- IP address
- Previously visited pages
- Search terms
Google is registered in the EU-US Data Privacy Framework. This ensures an appropriate level of data protection for data transfers to the USA. Further information on data processing by Google can be found here:
Purpose of data processing:
The data processing is carried out with the purpose of better adapting the monetisation of our website and our marketing to the individual users.
Legal basis for the data processing:
The legal basis for the processing of the personal data of the users is the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law (e.g. for tax and accounting purposes).
Right of withdrawal:
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. You can prevent Google from collecting and processing your personal data by preventing the storage of third-party cookies on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link:
You can disable the use of your personal data by Google with the following link: https://adssettings.google.de
You can find more information about how to object to and delete data held by Google at:
Use of Google AdWords Conversion
Scope of personal data processing:
We use Google AdWords Conversion on our website, provided by Google Ireland Ltd, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland. Google AdWords Conversion enables a better display of user interactions after clicking on an advertising field. This includes, for example, purchasing a product, installing an app or registering for an email list.
The following data, among other things, is processed:
- IP address
- Interactions of users who came to the website via an advertisement
Google is registered in the EU-US Data Privacy Framework. This ensures an appropriate level of data protection for data transfers to the USA. Further information on data processing by Google can be found here:
Purpose of data processing:
The purpose of data processing is to enable us to better evaluate our marketing campaigns and to demonstrate the advertising impact.
Legal basis for data processing:
The legal basis for the processing of users' personal data is the user's consent in accordance with Art. 6 (1) point a GDPR.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this data protection declaration or as required by law (e.g. for tax and accounting purposes).
Option of revocation:
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent Google from collecting and processing your personal data by preventing the storage of third-party cookies on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link:
You can disable the use of your personal data by Google with the following link: https://adssettings.google.de
Further information on objection and removal options vis-a-vis Google can be found at:
Use of Google Tag Manager
Scope of data processing:
We use the Google Tag Manager provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). The Google Tag Manager allows tags from Google and third-party services to be managed and bundled and embedded on an online presence. Tags are small pieces of code on a website that are used, among other things, to measure visitor numbers and behaviour, to track the impact of online advertising and social channels, to use remarketing and targeting, and to test and optimise websites. When a user visits the website, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data under certain circumstances. For more information, please refer to the sections on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.
For more information about Google Tag Manager, please visit: and read Google's privacy policy:
Purpose of data processing:
The purpose of processing personal data is to enable the clear and consolidated management and efficient integration of third-party services.
Legal basis for data processing:
The legal basis for processing users' personal data is, in principle, the user's consent in accordance with Article 6(1)(a) of the GDPR.
Storage duration:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymised by Google deleting parts of the IP address and cookie information after 9 and 18 months respectively, according to Google.
Right of withdrawal:
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent Google from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser, or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the data generated by cookies about your use of the website (incl. your IP address) from being passed to Google, and the processing of these data by Google, by downloading and installing the browser plugin available at the following link:
You can disable the use of your personal data by Google with the following link: https://adssettings.google.de
Further information on objection and removal options with respect to Google can be found at:
Use of Google Maps
Scope of personal data processing:
We use the online map service Google Maps provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). We use the Google Maps plugin to visually display geographic data and embed it on our online presence. By using Google Maps on our online presence, information about the use of our online presence, your IP address and addresses entered in the route planning function are transmitted to a Google server and stored there.
Further information on the processing of data by Google can be found here:
Purpose of data processing:
The use of the Google Maps plug-in serves to improve user-friendliness and to present our online presence in an appealing way.
Legal basis for the processing of personal data:
The legal basis for the processing of users' personal data is, in principle, the user's consent in accordance with Art. 6 (1) point a GDPR.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this data protection declaration or as required by law.
Option of revocation:
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent Google from collecting and processing your personal data by preventing the storage of third-party cookies on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
You can disable the use of your personal data by Google with the following link: https://adssettings.google.de
Further information on how to object to and delete data held by Google can be found at:
Use of Google Web Fonts
Scope of personal data processing:
We use Google Web Fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as Google). The web fonts are transferred to the browser cache when the page is accessed so that they can be used for the visually improved display of various information. If the browser does not support Google Web Fonts or does not allow access, the text will be displayed in a standard font. When the page is accessed, no cookies are stored on the visitor's computer. Data that is transmitted in connection with the page view is sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com. This means that personal data can be stored and evaluated, in particular the user's activity (especially which pages have been visited and which elements have been clicked on) and device and browser information (especially the IP address and operating system).
The data will not be associated with any data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. Further information on the processing of data by Google can be found here:
Purpose of data processing:
The use of Google Web Fonts serves to make our texts more appealing. If your browser does not support this feature, a default font will be used by your computer for display.
Legal basis for the processing of personal data:
The legal basis for the processing of users' personal data is, in principle, the user's consent in accordance with Article 6(1)(a) of the GDPR.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this data protection declaration or as required by law (e.g. for tax and accounting purposes).
Objection and removal options:
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent Google from collecting and processing your personal data by preventing the storage of third-party cookies on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
You can disable the use of your personal data by Google with the following link: https://adssettings.google.de
Further information on objection and removal options vis-a-vis Google can be found at:
Use of Taboola
Scope of personal data processing:
We use Taboola on our website, provided by Taboola Inc., 1115 Broadway, 7th Floor, New York, NY 10010, USA (hereinafter ‘Taboola’). The use of Taboola allows us to display content recommendations as native content based on data analysis and reports on the user behaviour and interests of individual target groups. This enables us to provide our users with targeted recommendations and personalised content that is likely to be well received.
The following personal data may be processed:
- IP address
- Browser type and version
- Operating system
- Device type
- Click behaviour
- Length of stay
- Page views
- Referrer URL
- Interactions with ads
- Geographic location data
- Input data
- Timestamp
- Unique device identifiers
- Demographic information
In order to make the transfer to the third country as data protection-friendly as possible, standard contractual clauses have been concluded with Taboola. You are welcome to request a copy of the standard data protection clauses from us.
Further information on the processing of data by Taboola can be found here:
Purpose of data processing:
We use Taboola to display personalised content and advertising, to improve the user experience and to analyse and optimise the performance of advertising campaigns.
Legal basis for the processing of personal data:
The legal basis for the processing of users' personal data is, in principle, the user's consent in accordance with Article 6(1)(a) of the GDPR.
Storage duration:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law (e.g. for tax and accounting purposes).
Right of withdrawal:
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the withdrawal. You can prevent Taboola from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
Further information on Taboola's opt-out and removal options can be found at:
Use of LinkedIn
Scope of personal data processing:
We use LinkedIn network features, including LinkedIn Ads and LinkedIn Analytics features. The provider of these features is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as ‘LinkedIn’). Every time you access one of our pages that contains LinkedIn features, a connection to LinkedIn's servers is established. LinkedIn is informed that you have visited our website from your IP address. If you click on the LinkedIn ‘Recommend’ button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our site with you and your account.
LinkedIn Ads is designed to launch and optimise advertising campaigns. It processes data to deliver targeted advertising to specific audiences and to measure the effectiveness of that advertising. LinkedIn Analytics is used to analyse and optimise our content and pages. It provides insights into the performance of our posts, the demographics of our target audience and the level of engagement, to help us make better decisions about future content and strategies.
The following data may be processed:
- Demographic data (age, gender, location)
- Professional information (job title, work experience, industries, company size, company names, educational qualifications and institutions)
- Interests and activities (interests, membership of LinkedIn groups, participation in events, likes, comments and shared content)
- Network data (connections, recommendations and endorsements)
- Engagement data (interactions with LinkedIn content, website visits via LinkedIn ads, downloads of materials)
- Technical data (device type, operating system, browser type)
- Company-related data (company name, positions and roles within the company)
- Ad-specific data (ad placement and frequency, campaign performance and results, A/B test data)
Further information on the processing of data by LinkedIn can be found here:
Purpose of data processing:
The use of the LinkedIn plugin serves to make our online presence more user-friendly and to evaluate and improve our advertising campaigns and content.
Legal basis for the processing of personal data:
The legal basis for the processing of users' personal data is, in principle, the user's consent in accordance with Art. 6 para. 1 lit. a DSGVO.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law (e.g. for tax and accounting purposes).
Right of withdrawal:
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent the collection and processing of your personal data by LinkedIn by preventing the storage of third-party cookies on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser. Furthermore, the transmission can be prevented by logging out of your LinkedIn account before accessing our website.
You can disable LinkedIn's use of your personal data by clicking on the following links:
For more information about how to object to and delete your data with LinkedIn, please visit:
Use of the Xing Share button
Scope of personal data processing:
Our online presence uses the XING Share button from New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. When you access this website, a short-term connection is established via your browser to XING SE servers (hereinafter referred to as XING), which are used to provide the ‘XING Share Button’ functions (in particular the calculation/display of the counter value). These servers are configured in a particularly data protection-friendly manner. No data about the access of visitors from which a direct personal reference could be derived is stored. In particular, XING does not store any IP addresses of visitors to the websites that contain the XING share button. Further information on the processing of data by XING can be found here:
Purpose of data processing:
The integration of the ‘XING Share Button’ serves to improve the user-friendliness of our online presence. If you click on this button, you will be redirected to the XING homepage. If you are logged into your profile, you can recommend the link to our online presence.
Legal basis for the processing of personal data:
The legal basis for the processing of users' personal data is, in principle, the user's consent in accordance with Art. 6 (1) point a GDPR.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this data protection declaration or as required by law (e.g. for tax and accounting purposes).
Right of withdrawal:
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation. You can prevent XING from collecting and processing your personal data by preventing third-party cookies from being stored on your computer, by using the ‘Do Not Track’ function of a supporting browser, by disabling the execution of script code in your browser, or by installing a script blocker such as NoScript () or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis XING can be found at:
Use of Sojern
Scope of processing of personal data:
We use Sojern, an online marketing tool from Sojern Inc., 545 Market Street, 4th floor
San Francisco, CA 94105 USA (hereinafter referred to as Sojern). Sojern uses cookies and similar tracking technologies to collect information about user behaviour on our online presences. This data includes, in particular, IP addresses, browser and device information, websites visited, length of stay, click behaviour and pseudonymised user IDs. In addition, information from partner websites and ads may be collected to create comprehensive user profiles. Further information on the processing of data by Sojern can be found here:
Purpose of data processing:
We use the data collected to carry out personalised advertising campaigns, to analyse user behaviour and to optimise the efficiency of advertising measures. Sojern enables us to place targeted advertising based on the interests and previous behaviour of users, thus increasing the relevance of the ads. Sojern also helps us to create analyses and reports on the effectiveness of our online marketing activities.
Legal basis for the processing of personal data:
The legal basis for the processing of your personal data by Sojern is your consent in accordance with Art. 6 (1) point a GDPR. This consent is given by accepting the corresponding cookies and tracking technologies when you visit our online presence.
Sojern is certified under the EU-U.S. Data Privacy Framework (DPF). This means that the European Commission has recognised an adequate level of data protection for the transfer of personal data to Sojern in the United States. Certification under the Data Privacy Framework ensures that Sojern is committed to complying with the data protection standards of the European Union and thus guarantees the protection of your personal data in accordance with the provisions of the GDPR.
Duration of storage:
Sojern will only store your personal data for as long as is necessary to fulfil the stated purposes or until you revoke your consent. After these periods have expired or after revocation, your data will be deleted, unless legal storage obligations prevent this.
Right of revocation:
You have the right to revoke your consent to the processing of your personal data at any time. The revocation of consent does not affect the legality of the processing carried out until the revocation. You can prevent the collection and processing of your data by Sojern by preventing the storage of cookies through appropriate settings in your browser, for example by activating the ‘Do Not Track’ function.
Content Delivery Networks Bootstrap CDN
Description and scope of data processing:
We integrate certain plugins on our website via external service providers in the form of content delivery networks. When you visit our website, a connection is established to the servers of the providers we use to retrieve content and store it in the cache of the user's browser. Personal data, in particular device and browser information (especially the IP address and operating system), may be stored and evaluated in server log files. We use the following services:
Bootstrap CDN
Purpose of data processing:
The use of the functions of these services serves to deliver and accelerate online applications and content.
Legal basis for data processing:
The collection of this data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the technically error-free presentation and optimisation of his website.
Duration of storage:
Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law.
Right to object:
We have provided appropriate safeguards for the processing of your personal data in third countries in the form of standard data protection clauses in accordance with Art. 46 (2) c) GDPR. We have concluded these standard data protection clauses with the providers mentioned above. A copy of the standard data protection clauses can be requested from us.
.png?width=638&height=365&name=MicrosoftTeams-image%20(10).png)
.svg)
