Datenschutzerklärung | Kairos PRO Consulting GmbH

Kairos PRO Consulting GmbH, from: January 2026

Privacy Policy

Introduction

We are pleased about your interest in our company. As the operator of this website, we take the protection of your personal data very seriously. Your personal data will be treated confidentially and in accordance with the statutory regulations. The use of our website is generally possible without providing personal data. If personal data such as your name, email address, or postal address is collected at any time, this is done on a voluntary basis. Your data will not be passed on to third parties without your explicit consent. Data transmission over the Internet, for example via email, may have security vulnerabilities. Complete protection of your data against access by third parties is not possible.

Important note: All our websites which contain legal information are only translated into English for your convenience and better understanding. However only the German versions are legally binding.

General Data Protection Provisions

The use of contact data by third parties published in accordance with the legal notice requirements for the purpose of sending advertising and information materials that have not been expressly requested is hereby expressly prohibited. Exceptions apply in the case of existing business relationships or where you have obtained our corresponding consent. The providers and all third parties named on this website expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information. The same applies to the commercial use and disclosure of the data.

Responsible as defined by the GDPR

The following entity is responsible for the processing of your personal data within the meaning of Article 4(7) GDPR:
Kairos PRO Consulting GmbH, Am Hochacker 3, 85630 Grasbrunn
Tel: 089 – 999 545 47, Fax: 089 – 999 548 79, E-Mail: office@kairos-pro.de

For further details, please refer to the legal notice at www.kairos-pro.de/impressum

Data Protection Officer
Data protection officer for Kairos PRO is: Christoph van der Schoot (managing director)

1. General information

1. Scope of data processing
The processing of personal data is carried out only to the extent necessary for the provision of our services or for making a functional website available. As a rule, the prior consent of the users is obtained for this purpose. By way of exception, prior explicit consent of the user is not required where the processing of data is permitted by law and obtaining the user’s consent is not possible for factual reasons.

2. Legal basis
The processing of personal data is based on Article 6(1) of the EU General Data Protection Regulation (GDPR).
In detail it is based on:

Article 6(1)(a) GDPR, insofar as the consent of the data subject has been obtained for this purpose
Article 6(1)(b) GDPR, insofar as the data is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures.
Article 6(1)(c) GDPR, insofar as the processing is necessary for compliance with a legal obligation.
Article 6(1)(d) GDPR, insofar as the processing is necessary to protect the vital interests of the data subject or another natural person.
Article 6(1)(f) GDPR, insofar as the processing is necessary for the legitimate interests of our company or a third party, provided that these interests override the fundamental rights and freedoms of the data subject.

3. Deletion and duration
The storage of personal data takes place as long as the underlying purpose persists or as long as storage is legally permissible under European or national regulations. If the purpose of processing ceases or a legally prescribed retention period expires, the personal data will be deleted or blocked, unless storage is still necessary for the conclusion or performance of a contract.

2. Website and log Files

1. Description and scope
Each visit to our website automatically collects data from the accessing computer system.
This is in detail:

1. Browser type and version
2. Operating system
3. Internet-Service-Provider des Nutzers
4. IP address
5. Date and time of access
6. Referring website
7. Pages accessed via our website

These data are stored in log files but not together with other personal data. IP addresses are excluded from long-term storage if they allow user identification.

2. Legal basis
Art. 6 (1) (f) GDPR (legitimate interest)

3. Purpose of data processing
Temporary storage of the IP address is necessary to deliver the website. No marketing use is made of this data.

4. Deletion and duration
Data is deleted after the session ends.

5. Objection
No right to object exists because storage is necessary for website operation.

3. Cookies

We use cookies and similar technologies (“cookies”). Cookies facilitate data exchange between your device and our website and store information such as login status or language settings. www.kairos-pro.de/cookies .

Types of cookies:

Necessary cookies. These are required for the operation of our website
Statistics, marketing, personalization cookies: these analyze the user behavior and enable targeted content
Puporse of data processing: operation of our website, optimization and marketing

Consent via Complianz:
We use Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands.
--------------
Complianz is hosted on our servers. It stores a cookie to document consent. Data remains stored until deletion is requested or the purpose ceases.

Legal basis:

Art. 6 (1) (a) GDPR (consent)
You may withdraw consent at any time.
Art. 6 (1) (f) GDPR (legitimate interest)
Art. 6 (1) (c) GDPR (legal obligation to document consent)

4. Data subject rights and right to lodge a complaint

With regard to the protection of your personal data, you are entitled to various rights under the GDPR. You may exercise these rights by contacting the Data Protection Officer. In detail, you have the following rights:

Right of access and data portability: You may request information about whether and which data have been collected and processed. Upon your explicit request, your data must be provided in a structured, commonly used, and machine-readable format.
Right to rectification: You may request the correction of inaccurate data or the completion of incomplete data.
Right to erasure: You may request the deletion of your data at any time
Right to restriction of processing: Under certain conditions, you may request that we restrict the processing of your data.
Right to lodge a complaint: You also have the right to lodge a complaint with the supervisory authority responsible for you. Jurisdiction is determined by our company’s registered office, your habitual residence, or your place of work.
Right to withdraw consent: You may withdraw, in whole or in part, any consent you have given for the processing of your data at any time. If the withdrawal concerns data processing based on Article 6(1)(f) GDPR, the withdrawal must be provided in writing and state the reasons. If we are unable to demonstrate compelling legitimate grounds for the processing that override your interests and rights in relation to the data processing, the processing of your personal data will be discontinued without delay.

Regardless of the above, you may object at any time, without giving reasons, to the processing of your personal data for advertising and data analysis purposes.

5. Deletion of your data

Your data will be deleted – unless otherwise stated in this privacy policy – if:

You exercise your right to deletion, restriction, or withdrawal of consent, and the permissibility of further processing does not arise from Art. 6(1)(b–f) GDPR;
the underlying purpose for collecting the data has been fulfilled or no longer applies, in particular if the contractual relationship pursuant to Art. 6(1)(a) GDPR has ended or the legitimate interest within the meaning of Art. 6(1)(f) GDPR in further processing no longer exists.

In detail, deletion may take place at a later point in time if (partial) storage of your data is necessary for the fulfillment of other purposes. This applies in particular to compliance with statutory retention periods under tax law (6 or 10 years), the assertion and defense of claims arising from contractual relationships (4 years), as well as the protection of the rights of third parties. During this time, data will only be stored to the extent required to fulfill these retention obligations.

6. Amendment clause

Our privacy policy may be amended at any time to comply with current legal requirements or to reflect changes in our services. The latest version shall apply upon each visit.

7. Website hosting

We use a hosting provider to make our website available. Our websites are stored on the provider’s servers and made accessible on the internet (hosting). The provider may process all data transmitted via your browser that is necessary for the use of our website, including your entries or IP address and all information you submit through our website.
The provider may collect the following data:

Your entries
Your IP address and access status (HTTP status)
The amount of data transferred
The internet service provider of the accessing system
Your browser type and version as well as your operating system
Date and time of access to the website and the time zone difference from GMT
The website from which you accessed our site and the pages you visit on our website

This data is stored as log files on the provider’s servers to ensure the operation of our website.

Data subjects: Users of our website

Categories of data concerned:

Content data (e.g., photos, videos)
Usage data (e.g., pages clicked)
Communication data (e.g., IP address information)

Purpose of processing: Ensuring the operation of our website and delivering our website content

Legal basis: Legitimate interest, Art. 6(1)(f) GDPR

Hosting provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, www.ionos.de

Privacy policy of the hosting provider: www.ionos.de/datenschutzerklaerung

8. Social Media

We maintain profiles with the social media providers listed below. When you visit these profiles, the provider collects and processes the data specified below. This data is regularly collected for advertising and market research purposes. User profiles are generally stored across devices. You will typically receive personalized advertising. You have the right to withdraw consent directly with the respective provider in order to revoke a user profile. The provider may also collect data about your usage behavior on our website if you are logged into your account with that provider while visiting our website. You can prevent this by logging out of the provider before visiting our website. The purposes for which and the extent to which data is collected by the provider can be found in the respective privacy policies of the providers.

Depending on the provider’s location, the data it collects may be transferred to and processed outside the EU. There is a risk that the level of data protection required under the GDPR may not be complied with. The enforcement of your rights may also be prevented or made more difficult.

Categories of data concerned:

Master and contact data (e.g., name, address, telephone number, email address)
Content data (e.g., photos, videos)
Usage data (e.g., pages clicked)
Communication data (e.g., IP address information)

Purpose of processing: Monitoring and analyzing user behavior, communication, and marketing

Legal basis: Consent, Art. 6(1)(a) GDPR; legitimate interest, Art. 6(1)(f) GDPR

Right to object: For information on opt-out options, please refer to the providers’ privacy policies linked below.

We maintain profiles on the following social networks:

Social media provider: LinkedIn
Provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA
German office: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich, Germany
Website: https://www.linkedin.com/
Privacy policy: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

Social media provider: XING
Provider: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
Website: https://www.xing.com/
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung

Social media provider: YouTube (Google)
Provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Website: https://www.youtube.com/
Privacy policy: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

9. Embedding of content (YouTube, Google Maps)

To ensure the optimal display of our website content, we use certain content services. These services process your IP address in order to display the respective content (videos, music, images, fonts, maps) in your web browser. The service provider is also authorized to store cookies on your device and to use the data collected in this process—regarding your usage behavior and interests, as well as information about your device and the time and duration of the session—for analysis and marketing purposes. If you have created an account with the respective service provider and are logged in there at the time of your session on our website, the service provider is also authorized to link the information from your session with other sources.
For service providers based outside the European Union, compliance with the level of data protection required by the GDPR cannot be guaranteed. The data collected via the service may also be transferred to and processed outside the European Union. This may make it more difficult or impossible to enforce your rights.

Purpose of processing: Optimization and maintenance of the online presence, service offering

Data subjects: Users of our website

Categories of data concerned:

Usage data (e.g., pages clicked)
Communication data (e.g., IP address information, device used)

Legal basis: Art. 6(1)(a) GDPR, Art. 6(1)(f) GDPR

We usethe following content services:

Google fonts (local hosting)
This website uses so-called Google Fonts, provided by Google, for the consistent display of fonts. The Google Fonts are installed locally. No connection to Google servers takes place in this context.

For more information about Google Fonts, please visit:
https://developers.google.com/fonts/faq and Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Font Awesome
This website uses Font Awesome for the consistent display of fonts and icons. When you access a page, your browser loads the required fonts into its browser cache in order to correctly display texts, fonts, and icons. For this purpose, the browser you use must establish a connection to Font Awesome’s servers. As a result, Font Awesome becomes aware that this website has been accessed via your IP address. If your browser does not support Font Awesome, a standard font from your computer will be used.

Legal basis: Legitimate interest, Art. 6(1)(f) GDPR
Provider: Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, USA. Website: https://fontawesome.com
Privacy policy: https://fontawesome.com/privacy.

Google Maps
We use Google Maps on our website. In this context, Google collects and processes the visitor’s IP address. When you visit a website in which Google Maps is embedded, your IP address and your location data (the latter generally not without your consent) are transmitted to Google, regardless of whether you actually use Google Maps or are logged into your Google account. Your IP address is associated with your Google account if you are logged in at the time you visit our website.

Provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.de/maps
Privacy policy: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

YouTube
We use components of YouTube on this website in order to embed videos on our web pages so that they can be played via your internet browser when you visit our site. During your visit to our website, both YouTube and Google are informed about which page or subpage you have accessed by transmitting your IP address to Google’s external servers in the USA. This transmission of information occurs regardless of whether the displayed videos are actually viewed or clicked, or whether you are logged into your YouTube or Google account. This information is collected and associated with your Google account if you are logged in when accessing our website.

Provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Website: https://www.youtube.com/
Privacy policy: https://policies.google.com/privacy
Opt-out option: https://tools.google.com/dlpage/gaoptout?hl=de

10. Contact form

We process your contact details in order to respond to your inquiries within the framework of the existing (pre-)contractual relationship, provided that you supply them to us via our contact form, telephone, email, post, fax, or social media. The same applies to any other information relating to your request or your person.

Data subjects: (potential) customers, business and contractual partners

Categories of data concerned:
a) Master data (e.g., name, date of birth)
b) Contact data (e.g., address, email, telephone number)
c) Content data (texts, photos, videos)
d) Contract data (e.g., subject matter of the contract, contract duration)

Purpose of processing: Responding to contact inquiries; office and organizational purposes
Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; legitimate interest, Art. 6(1)(f) GDPR

11. Advertising by Email, Post, or Telephone

We use your personal data for advertising purposes via email, post, or telephone. You may object to this use at any time or withdraw your previously granted consent. For the immediate deletion of your data following a withdrawal, it is necessary that you confirm that you originally gave us your consent to process your data for advertising purposes. Otherwise, your data may be stored for an additional 4 years for the purpose of proving that consent had previously been granted — despite the withdrawal. However, no other use of the data will take place during this period.

Purpose of processing: Marketing and advertising by email, post, or telephone

Affectedparties: Communication partners

Categories of data concerned:

Master and contact data (e.g., name, address, telephone number, email address)

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR; legitimate interest pursuant to Art. 6(1)(f) GDPR

12. Newsletter subscription

To stay informed about current offers and news, you have the option to subscribe to our newsletter on our website. By providing your email address, you consent to receiving the newsletter. Your email address, as well as any additional voluntary information, will be stored by us. To ensure that your email address has not been misused by a third party, we store the date and time of registration and the IP address of your device, and we send a confirmation email to the email address provided. You must confirm your subscription to the newsletter by clicking on the link in this email. The above-mentioned data will not be shared with third parties.

By means of tracking pixels and tracking links, we may analyze your user behavior in relation to the newsletter sent to you, provided that you have consented to such analysis. This evaluation includes, in particular, whether and when you open the newsletter and which links you click on.

You may withdraw your consent to receive the newsletter at any time. Withdrawal may be declared as follows:

By clicking on the link provided for this purpose in the newsletter
Or by email to: office@kairos-pro.de

The email address will be deleted if consent is withdrawn or if the confirmation link is not clicked within one month after the confirmation email has been sent.

Purpose of processing: Marketing and advertising via newsletter; statistical evaluation of the newsletter

Data subjects: Website users

Categories of data concerned:

Content data (e.g., photos, videos)
Usage data (e.g., pages clicked)
Communication data (e.g., IP address information)

Legal basis: Consent pursuant to Art. 6(1)(a) GDPR; legitimate interest pursuant to Art. 6(1)(f) GDPR

We use the following service provider for our newsletter subscription:

Newsletter Subscription Plugin – Web Agile S.a.s.
Provider: Web Agile S.a.s. di Fietta Roberto – P.I. 03809490240, Italy
Website: https://www.thenewsletterplugin.com/
Privacy policy: https://www.thenewsletterplugin.com/legal/privacy

13. Online shop

You can book webinars through our online shop. In order to fulfill the underlying contractual relationship, you are required to provide personal information, such as your name, address, electronic contact details, information necessary for processing the payment, and details regarding your specific booking. After a booking has been made, the data may also be used for marketing purposes to inform you about similar products or services.

To process bookings and payments, we use the shop system of a third-party provider. After receipt of the booking, the aforementioned personal data will be transmitted to this provider. Data will only be passed on to third parties, such as payment service providers or our tax advisor, if this is necessary for the performance of the contract, for the protection of your vital interests, or due to other legal requirements. If third parties act on our behalf to fulfill our contractual obligations towards you, the data protection provisions of the respective third parties shall apply.

When making a booking, you may optionally create a permanent user account. Upon termination of the user account, your data will be deleted. Temporary cookies are used to store the contents of your shopping cart, and persistent cookies are used to store your login status. To ensure that your email address has not been misused by a third party, we also store the date and time of registration, login, and booking, as well as the IP address of your device.

Purpose of processing: (pre-)contractual performance, communication and handling of inquiries, security measures, office and organizational procedures

Data subjects: (potential) customers, business and contractual partners

Categories of data concerned:

Master and contact data (e.g., name, address, telephone number, email address)
Content data (e.g., photos, videos)
Usage data (e.g., pages clicked)
Contract data (e.g., subject matter of the contract, contract term)
Communication data (e.g., IP address information)

Legal basis: Art. 6(1)(b) GDPR, Art. 6(1)(c) GDPR, Art. 6(1)(f) GDPR

We use the following shop systems:

Online shop WooCommerce

Provider: Automattic, San Francisco, CA, California 94305, US
Website: https://woocommerce.com/de/
Privacy policy: https://automattic.com/privacy/

14. Payment services

For the processing of our contractual or other legal relationships, we use certain payment service providers to handle payment transactions. In addition to standard payment methods via banks and credit institutions, customers may use the service providers offered by us. If you choose to use these services, your master data (name, address, bank details, passwords, TANs, verification numbers) as well as information regarding the concluded contract will be transmitted to the respective payment service provider. This is the only way to ensure secure and functional payment processing. The payment service provider does not transmit the collected and processed personal data to us. It merely informs us whether the payment by our customer was successful in the individual case. However, payment service providers are authorized to transmit customer data to credit agencies. In all other respects, the general terms and conditions and the privacy policy of the respective payment service provider shall apply; these can be found on the website of the respective provider.

Withdrawal of consent to the use of personal data may be declared to the payment service provider at any time. However, the payment service provider may still be entitled, with reference to its privacy policy, to process, use, and transfer the data if this is strictly necessary for the proper execution of the contractual payment processing.

Purpose of processing: pre-)contractual performance; provision of efficient and secure payment options

Data subjects: (potential) customers, business and contractual partners

Categories of data concerned:

Master and contact data (e.g., name, address, telephone number, email address)
Usage data (e.g., pages clicked)
Contract data (e.g., subject matter of the contract, contract term)
Payment data (e.g., bank details)
Communication data (e.g., IP address information, device used)

Legal basis: Art. 6(1)(b) GDPR; Art. 6(1)(f) GDPR

We use the following payment service provider:

ayment service provider PayPal

Provider: PayPal (Europe) S.à.r.l. et Cie., S.C.A., 22–24 Boulevard Royal, 2449 Luxembourg
Website: https://www.paypal.com/de/webapps/mpp/home
Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

15. Messenger services

We use messenger services for communication purposes. Messenger services transmit text, image, video, or contact files in real time. In addition, these services can be used to share screens or to run online games. To use messenger services, the communication partners require the respective software application as well as an internet connection. Communication data is exchanged in real time via this connection. If the communication partner is not online at the time the data is entered, the data will be temporarily stored on the messenger service’s server and delivered to the recipient once they are online.

In some cases, messenger services use end-to-end encryption. This means that the transmitted files and content are only visible to the respective communication partner and cannot be accessed by third parties. Even the provider itself can only access communication metadata (time, location, end device), but not the content. To ensure data encryption, regular software updates should be installed.

Unless you have consented to the transfer of your contact details to the messenger service, they will not be transmitted initially. You have the right to withdraw your consent to being contacted via messenger services at any time or to object to their use.

Depending on the provider’s registered office, the data collected may be transferred to and processed outside the European Union. There is a risk that the level of data protection required by the GDPR may not be complied with. The enforcement of your rights may also be prevented or made more difficult.

Purpose of processing: Marketing purposes and communication

Data subjects: (potential) customers, website users

Categories of data concerned:

Usage data (e.g., pages clicked)
Master and contact data (e.g., name, address, telephone number, email address)
Content data (e.g., photos, videos)
Communication data (e.g., IP address information, device used)

Legal basis: Art. 6(1)(a) GDPR, Art. 6(1)(b) GDPR, Art. 6(1)(f) GDPR

We use the following messenger service:

Microsoft Teams Messenger

Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Website: https://www.microsoft.com/de-de/microsoft-teams/group-chat-software
Privacy policy: https://privacy.microsoft.com/de-de/privacystatement

16. Video conferencing tools

We use video conferencing tools to conduct online meetings and conference calls between employees and/or (potential) customers. When communicating via our video conferencing tools, we store the content of your shared screen, as well as chat, video, and audio communications, and your login and contact details. The provider of the video conferencing tool used is also authorized to process your metadata and communication data (e.g., IP address, time, location, device used, communication partner). Processing by the service provider is carried out primarily for security reasons or for optimization or marketing purposes. However, the provider’s privacy policy is decisive for the specific scope of access rights.

Purpose of processing: Fulfillment of (pre-)contractual obligations, communication and handling of inquiries, provision of services

Data subjects: (potential) customers, website users, communication partners

Categories of data concerned:

Usage data (e.g., pages clicked)
Master and contact data (e.g., name, address, telephone number, email address)
Content data (e.g., photos, videos)
Communication data (e.g., IP address information, device used)

Legal basis: Art. 6(1)(a) GDPR, Art. 6(1)(b) GDPR, Art. 6(1)(f) GDPR

Video conferencing tools used by us:

Video conferencing tool "ClickMeeting"

Services: Video conferences, chats, voice conferences
Provider: ClickMeeting Sp. z o.o., Grunwaldzka 413, 80-309 Gdansk, Poland
Website: https://clickmeeting.com/
Privacy policy: https://legal.clickmeeting.com/de/privacy-security-de/

Video conferencing tool "Mircosoft teams"
Services: Video conferences, chats, voice conferences
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Website: https://www.microsoft.com/de-de/microsoft-365/microsoft-teams/group-chat-software
Privacy policy: https://privacy.microsoft.com/de-de/privacystatement

17. Cloud services

We use cloud services to manage various internal and external organizational processes (e.g., presentations, calculations, appointment scheduling, exchange and publication of files, editing and storage of documents, communication via chat, audio, and video conferences). The use of cloud services involves accessing the providers’ servers. When using our cloud service, your login, contact, and contractual data are stored and processed on the provider’s servers. The provider is authorized to store cookies on your computer system when you access files published by us. Furthermore, the provider is authorized to process your metadata and communication data (e.g., IP address, time, location, device, communication partner). Processing by the service provider is primarily carried out for security reasons or for optimization or marketing purposes. In particular, the provider may analyze your usage behavior and browser settings using the collected data.

Depending on the provider’s registered office, the data collected by the provider may be transferred to and processed outside the European Union. There is a risk that the level of data protection required by the GDPR may not be complied with. The enforcement of your rights may also be prevented or made more difficult. Where possible, and insofar as our service provider offers this option, we intend to process your data exclusively within the EU.

Purpose of processing: Communication and administrative tasks

Data subjects: (Potential) customers, website users, communication partners, (former, current, potential, and future) employees

Categories of data concerned:

Usage data (e.g., pages clicked)
Master and contact data (e.g., name, address, telephone number, email address)
Content data (e.g., photos, videos)
Communication data (e.g., IP address information, device used)

Legal basis: Art. 6(1)(a) GDPR, Art. 6(1)(b) GDPR, Art. 6(1)(f) GDPR

We use the following cloud service provider:

Cloud Service: Dropbox, Inc.

Provider: Dropbox, Inc., 333 Brannan Street, San Francisco, California 94107, USA
Website: https://www.dropbox.com/de
Privacy policy: https://www.dropbox.com/privacy

18. Applicant data

We offer you the opportunity to apply for a position with us as an employee. The applicant data you submit (e.g., personal details, contact information, photo, résumé/CV) will be processed by us as part of the application procedure. Data sent by email is generally transmitted unencrypted. Submissions via our contact form are encrypted in accordance with the state of the art. The processing of applicant data transmitted online is carried out exclusively in electronic form. If the application process results in the establishment of an employment relationship with us, your data will be stored for the further administration of the employment relationship. The applicable data protection regulations will be observed. If the application process ends with a rejection, your data will be deleted no later than two months after the rejection has been sent. In exceptional cases, the data may be stored beyond this period if required by statutory provisions or if retention is necessary for evidentiary purposes in connection with compliance with the General Equal Treatment Act.

Purpose of processing: Communication and conduct of the application procedure

Data subjects: Prospective, future employees

Categories of data concerned:

Usage data (e.g., pages clicked)
Master and contact data (e.g., name, address, telephone number, email address)
Contract data (e.g., subject matter of the contract, contract term)
Payment data (e.g., bank details)

Legal basis: Art. 6(1)(b) GDPR, Art. 6(1)(c) GDPR