Privacy Notice

6 SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties (end-to-end encryption). The protocols authenticate the communication partner and ensure the integrity of the transmitted data.

7 cookiebot.com

Our website uses the cookie consent technology of Cybot – Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter: cookiebot.com) to obtain your consent to the storage of certain cookies in your browser and to be able to document this in accordance with data protection regulations.

We use this data to ensure the full functionality of our website.

If the user consents to the use of cookies, the following data is automatically logged by Cybot:

• The anonymized IP number of the user;
• Date and time of consent;
• User agent of the end user’s browser;
• The URL of the provider;
• An anonymous, randomized and encrypted key.
• The cookies authorized by the user (cookie status), which serves as proof of consent.

The encrypted key and the cookie status are stored on the user’s end device using a cookie in order to establish the corresponding cookie status on future page views. This cookie is automatically deleted after 12 months.

Mandatory statutory retention periods remain unaffected.

This data processing is carried out in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR on the basis of our legitimate interest in providing a cookie consent management service for website visitors.

You can prevent the collection and processing of your data by cookiebot.com by deactivating the execution of script code in your browser or by installing a script blocker in your browser.

Further details on the data agreement can be found in cookiebot.com’s privacy policy: https://www.cookiebot.com/de/privacy-policy/.

8 Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the deletion will take place after these reasons no longer apply.

9 Contact options (form / e-mail)

On our website, you have the option of contacting us by email or using the contact form.

In this context, your details from the form and/or from the e-mail, including the contact details you provide there, will be stored and processed by us for the purpose of processing the request and in the event of follow-up questions. This data (e.g. name, address, telephone number, e-mail address) will not be passed on to third parties without your consent.

The data will not be merged with other data collected on this website.

The data may be stored as part of customer relations management (CRM) if you are already a customer of our company.

The contact form is sent encrypted using TLS technology. The encryption serves to prevent unauthorized access to your personal data by third parties.

This data is processed on the basis of Art. 6 para. 1 sentence 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 sentence 1 lit. f GDPR).

We will retain the data you provide on the contact form or in the email until you request its deletion, object to its processing or the purpose for its storage no longer pertains (e.g. after your request has been processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

10 Job applications

Handling of applicant data

We offer you the opportunity to apply to us (e.g. by e-mail or post). In the following, we inform you about the scope, purpose and use of your personal data collected as part of the application process. We assure you that your data will be collected, processed and used in accordance with applicable data protection law and all other statutory provisions and that your data will be treated in strict confidence.

The separate data protection information for applicants can be found under this link.

Scope and purpose of data collection

If you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary for the decision on the establishment of an employment relationship. The legal basis for this is § 26 BDSG-new under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b GDPR (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons who are involved in processing your application.

If the application is successful, the data submitted by you will be stored in our data processing systems on the basis of § 26 BDSG-new and Art. 6 para. 1 lit. b GDPR for the purpose of implementing the employment relationship.

Retention period of the data

If we are unable to make you a job offer, you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed The retention serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a GDPR) or if statutory retention obligations prevent deletion.

11 Transfer of data to third countries

We use various service providers on our website who provide us with different technologies and tools. Some of these service providers transfer personal data to countries outside the European Union or the European Economic Area (e.g. the USA), where there may not be an adequate level of data protection or a level of data protection that is fundamentally equivalent to European data protection law. The associated transfer of personal data must be permitted in accordance with Art. 44 et seq. GDPR must be permissible.

For the USA, there is an adequacy decision within the meaning of Art. 45 para. 3 GDPR. This means that personal data can now be transferred from the EU to companies and organizations in the USA that have certified themselves for the EU-U.S. Data Privacy Framework without the need for further protective measures. This adequacy decision therefore serves as the basis for the transfer of data to the service providers we use in the USA.

If there is no adequacy decision within the meaning of Art. 45 para. 3 GDPR or the company or organization in the USA has not certified itself for the EU-U.S. Data Privacy Framework, we conclude standard data protection clauses issued by the EU Commission within the meaning of Art. 46 para. 2 lit. c GDPR with the respective service providers/providers to protect your data. Where possible, we also agree additional guarantees to ensure that adequate data protection is guaranteed in the USA or other third countries.

If a service provider maintains so-called approved rules of conduct (Binding Corporate Rules, BCR), which ensure that European data protection standards are complied with in the company, we do not agree any separate standard contractual clauses with the service providers subject to the respective BCR.

Nevertheless, despite contractual and technical protective measures, the level of data protection in the third country may not correspond to that of the EU. In these cases, we ask you for your consent in accordance with Art. 49 para. 1 lit. a GDPR for the transfer of personal data to a third country as part of the cookie consent, in (contact) forms or for other registrations and logins.

12 Use of YouTube components with extended data protection mode

We use videos from the “YouTube” video portal of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”) on our website. The ” – extended data protection mode – ” option provided by YouTube is activated.

The YouTube videos are accessed by clicking on them separately. This means that only the data required to display the videos – i.e. the information about which of our pages you are visiting – is transmitted to the service provider. If you are logged in to YouTube during your visit to our website, the information transmitted will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website.

When you access a page with a YouTube-embedded video, a connection is established to the YouTube servers in order to display the content (i.e. the video) on our site by sending a message to your browser.

The legal basis for the use of YouTube is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, insofar as you have given us your consent to this when you first call up the page.

For the transfer of personal data, we have concluded an order processing contract with Google with EU standard data protection clauses in accordance with Art. 46 GDPR. Google has undertaken to comply with the standard contractual clauses for the transfer of personal data to third countries in accordance with Directive 95/46/EC (Standard Contractual Clauses – SCC).

Furthermore, the provider has joined the EU-US Data Privacy Framework for data transfers to the USA, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information on YouTube’s data protection is provided by Google at the following link: https://www.google.de/intl/en/policies/privacy/.

13 + 14 not applicable

15 Profiles on social networks

Our presence on social networks and video platforms, which we name below, is used for active and up-to-date communication with our customers and interested parties. We use them to provide information about our services, products and interesting special offers relating to our company and our services. Further information about us as the provider of the social media channel can be found in our legal notice.

Below we provide you with the data protection information in accordance with Art. 13 of the General Data Protection Regulation (GDPR) for the social media sites we operate:

https://www.facebook.com/karldeutschndt

https://www.instagram.com/karldeutsch_ndt/

https://www.youtube.com/user/NDTChannel

https://www.linkedin.com/company/karl-deutsch/

https://www.xing.com/pages/karldeutschpruf-undmessgeratebaugmbh-cokg

15.1 Fan page on Facebook / Facebook presence

The social network Facebook is operated by Meta Platforms, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you have your registered office or place of residence in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).

When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called user profiles using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests. Cookies are usually placed on your device for this purpose.

The function of cookies is explained in our privacy policy, so please refer to the relevant information there. Visitor behavior and user interests are stored in these cookies. This serves to safeguard our legitimate interests in an optimized presentation of our services and offers and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. The legal basis for the processing is therefore Art. 6 para. 1 sentence 1 lit. f GDPR.

The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR, which you may have given or give to Facebook when accessing the website there. You can revoke your consent to data processing at any time with effect for the future; to do so, please contact Facebook directly. The withdrawal of consent does not affect the lawfulness of the data processing carried out prior to the withdrawal.

For detailed information on the processing and use of data by the providers on their pages as well as a contact option and your rights and setting options in this regard to protect your privacy, in particular opt-out options, please refer to Facebook’s data protection information: https://www.facebook.com/about/privacy/.

You can find the opt-out option as follows:https://www.facebook.com/settings?tab=ads

Data processing is carried out on the basis of an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can view here: https://www.facebook.com/legal/terms/page_controller_addendum

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

15.2 Instagram account

The social network Instagram is operated by Meta Platforms, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you have your registered office or place of residence in the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).

When you visit our online presence on social media, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called user profiles using pseudonyms. These can be used, for example, to place advertisements within and outside the platforms that presumably correspond to your interests.

Cookies are usually placed on your device for this purpose. The function of cookies is explained in our privacy policy, so please refer to the relevant information there. Visitor behavior and user interests are stored in these cookies.

This serves to safeguard our legitimate interests in an optimized presentation of our services and offers and effective communication with customers and interested parties, which predominate in the context of a balancing of interests. The legal basis for the processing is therefore Art. 6 para. 1 sentence 1 lit. f GDPR.

The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR, which you may have given or give to Facebook when accessing the website there.

You can revoke your consent to data processing at any time with effect for the future; to do so, please contact Facebook directly. The withdrawal of consent does not affect the lawfulness of the data processing carried out prior to the withdrawal.

For detailed information on the processing and use of data by the providers on their pages as well as a contact option and your rights and setting options in this regard to protect your privacy, in particular opt-out options, please refer to the data protection information of the Instagram service: https://help.instagram.com/519522125107875.

You can find the opt-out option in the privacy settings of your Instagram account at: https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

15.3 YouTube

The YouTube video platform is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, or, if you have your registered office or place of residence in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The following information does not apply to any direct integration of YouTube videos on our website.

When you visit our channel on YouTube, your data may be automatically collected and stored for market research and advertising purposes. This data is used to create so-called user profiles using pseudonyms. These can be used, for example, to place advertisements inside and outside the video platform that presumably correspond to your interests. Cookies are usually placed on your device for this purpose. The function of cookies is explained in the data protection information there, so please refer to the relevant information there. Visitor behavior and user interests are stored in these cookies.

Furthermore, the data collected provides us with a statistical analysis of which groups of people are interested in our individual videos posted on YouTube. In particular, the number of views and playing times of videos are provided to us in this context. The data is provided for statistical analysis in such an anonymized form that it is not possible to draw conclusions about individual persons. The information provided includes, for example, the approximate geographical location, age group and other summarized characteristics.

The legal basis for the collection and processing of data is your consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR, which you may have given to Google when accessing its website(s). You can revoke your consent to data processing at any time with effect for the future; to do so, please contact Google directly. The withdrawal of consent does not affect the lawfulness of the data processing carried out prior to the withdrawal.

For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

For detailed information on the processing and use of data by Google on the YouTube website, as well as a contact option and your rights and settings options for protecting your privacy, please refer to Google’s privacy policy, which you can find at the following link:https://policies.google.com/privacy?hl=de&gl=de

15.4 LinkedIn (company profile)

We use the professional and career network “LinkedIn” for recruitment purposes and maintain a company profile there. LinkedIn is operated by the LinkedIn Corporation, 1000 W. Maude Ave, Sunnyvale, California 94085 USA, or if you have your registered office or place of residence in the EU, LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

There is an order processing agreement between us and LinkedIn, which can be accessed here: https://de.linkedin.com/legal/l/dpa?

When you visit our company profile on LinkedIn, your data may be automatically collected and stored by LinkedIn for market research and advertising purposes as well as for the placement of job offers that are likely to be of interest to you (so-called Page Insights). This data is used to create so-called usage and interest profiles using pseudonyms. Cookies are usually placed on your device for this purpose.

You will be informed about the function of cookies as part of LinkedIn’s privacy policy and cookie policy, so please refer to the relevant information there. The visitor behavior and the interests of the users are stored in these cookies.

The data collected also provides us with a statistical analysis of which groups of people are interested in our company website. The data is processed in such an anonymized form that it is not possible to draw conclusions about individual persons for statistical evaluations, which may contain information about the approximate geographical location or age group and other summarized characteristics.

The processing of personal data with Page Insights on LinkedIn is based on an agreement between jointly responsible parties in accordance with Art. 26 GDPR, which you can view here: https://legal.linkedin.com/pages-joint-controller-addendum

Irrespective of the internal responsibilities agreed between us and LinkedIn, you can contact us or our data protection officer as well as LinkedIn with all data protection inquiries.

If you are asked by LinkedIn for consent (agreement) to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future by contacting LinkedIn. Data processing carried out up to the time of revocation remains lawful.

If you wish to deactivate LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

For detailed information on the processing and use of data by LinkedIn as well as a contact option and your rights in this regard and setting options to protect your privacy, please refer to LinkedIn’s privacy policy, which you can find at the following link: https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=de.linkedin.com%7Cli-other

You can find LinkedIn’s cookie policy at the following link: https://www.linkedin.com/legal/cookie-policy

As LinkedIn has not certified itself for the EU-U.S. Data Privacy Framework, we have concluded standard data protection clauses with LinkedIn within the meaning of Art. 46 para. 2 lit. c GDPR.

15.5 XING / Kununu profile

We operate websites on XING and Kununu to present our company. The provider of XING and Kununu is New Work SE, Dammtorstraße 30, 20354 Hamburg.

Our XING profile is used to actively address potential employees in a professional environment. On this page, we also share information about our company and present ourselves to the outside world in this way. We provide information about our services, products, interesting special offers and employment opportunities in our company.

If you are asked by Xing for consent (agreement) to data processing, e.g. with the help of a checkbox, the legal basis for data processing is Art. 6 para. 1 sentence 1 lit. a GDPR.

For detailed information on the processing and use of data by the providers on their pages as well as a contact option and your rights and setting options for protecting your privacy, please refer to Xing’s data protection information: https://privacy.xing.com/de/datenschutzerklaerung

Kununu primarily offers users the opportunity to make and view reviews of employers. At the same time, we use our online presence on kununu to provide information about our company, career opportunities, our products and services.

When you visit our page on kununu and during other interactions with our page on kununu, kununu collects personal data from users, for example through the use of cookies. Such data may also be collected by kununu from users who are not logged in or registered with kununu. Information on data collection and further processing by kununu can be found in kununu’s privacy policy at https://privacy.xing.com/de/datenschutzerklaerung/druckversion.

The data processing takes place as joint processing. For content that you provide directly on the platform, i.e. comments, private messages or similar, New Work SE and we act as joint controllers in accordance with Art. 26 GDPR.

The legal basis for the processing of the data is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a GDPR, insofar as you have given it, as well as the protection of legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR. If you contact us, the legal basis may also be Art. 6 para 1 sentence 1 lit. b GDPR (necessity for the implementation of pre-contractual measures).

The aforementioned legitimate interest is that we would like to communicate with you via our kununu page and inform you about our company, career opportunities and jobs, our products and services.

You can find out how XING and Kununu process your data in XING’s privacy policy, which applies to all New Work SE services: https://privacy.xing.com/de/datenschutzerklaerung/allgemeine-hinweise.

Since only New Work SE has information about the data actually collected and its use on the respective platforms, requests for information and the assertion of other data subject rights should be made directly there. Of course, you can also send us such requests and we will forward them to the operator for further processing.

Via the XING and Kununu platforms, we only process the data that you communicate to us directly. This includes comments, inquiries, your user profile, reviews and similar information. This data is retained for the duration of the website’s existence.

The data we use is only processed within the EU or the EEA. We do not transfer data to third countries.

16 Your rights and assertion of rights

You are entitled to the rights listed below. You can assert these against us.

To assert your rights, please use the above data or contact us by email at: info@karldeutsch.de.

Right to information:

In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;

Rectification:

In accordance with Art. 16 GDPR, you have the right to request the rectification of inaccurate or completion of your personal data stored by us without undue delay;

Erasure:

In accordance with Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;

Restriction of processing:

In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;

Data portability:

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller;

Withdrawal of your consent:

In accordance with Art. 7 (3) GDPR, you have the right to withdraw your consent at any time. This means that we may no longer continue the data processing that was based on this consent in the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Please send your revocation to the details given above or by email to: info@karldeutsch.de.

Right to object

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 para. 1 sentence 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions.

The controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you have the possibility of exercising your right to object by automated means using technical specifications.

Automated decision in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision is necessary for entering into, or performance of, a contract between you and the controller, is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or is based on your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a) or g) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

Complaint to a supervisory authority:

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

17 Status of the data protection information

The constant development of the Internet makes it necessary to adapt our privacy policy from time to time. We reserve the right to make corresponding changes at any time.

Status: January 2024