Privacy Policy

The data controller responsible in accordance with the General Data Protection Regulation (GDPR) of the European Union and other data protection regulations is:

Seeberger GmbH
Hans-Lorenser-Straße 36
89079 Ulm
Germany

+49 731 4093 5000
info@seeberger.de
https://www.seeberger-gruppe.de

II. Contact details of the data protection officer

The designated data protection officer is:

DataCo GmbH
Nymphenburger Str. 86
80636 Munich
Germany

+49 89 7400 45840
www.dataguard.de

III. General information on data processing

In the following, we inform you about the processing of your personal data on our website.

How we collect and use your personal data will depend on how you interact with us or the services you use. We only collect, use or share your personal data where we have a legitimate purpose and legal basis for doing so.

What do we mean by legal basis?

Consent (Art. 6(1)(a) GDPR) – You have given us your consent to process your personal data for the specific purpose we have explained to you. You have the right to withdraw your consent at any time. For further information on how to withdraw consent, please see the “Exercising your rights” subsections in the following sections of this Privacy Policy.

Contract (Art. 6(1) (b) GDPR) – We need to use your data to fulfill a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to, or you have taken yourself, specific steps before entering that contract.

Legal obligation (Art. 6(1) (c) GDPR) – We need to use your data to comply with the law.

Vital interests (Art. 6(1) (d) GDPR) – Processing your data is necessary to protect your vital interests or those of another person. For example, to prevent you from serious physical harm.

Public task (Art. 6(1) (e) GDPR) – Processing your data is necessary for the performance of a task carried out in the public interest or because it is covered by a task set out in law, for example, for a statutory function.

Legitimate interests (Art. 6(1) (f) GDPR) – Processing your data is necessary to support a legitimate interest that we or another party has, only where this is not outweighed by your own interests.

Please note where your data is processed under the performance of a contract or for a legal obligation, if you do not provide the data requested, we may be unable to provide you with our website.

IV. Your rights

When your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights:

Right of access (Art. 15 GDPR)

You may request the data controller to confirm whether your personal data is being processed by them. If this is the case, you can request the following information from the data controller:

Purposes of processing;
Categories of personal data being processed;
Recipients or categories of recipients to whom the personal data have been or will be disclosed;
Planned storage period or the criteria for determining this period;
The existence of the rights to rectification, erasure or restriction or objection;
The existence of the right to lodge a complaint with a supervisory authority;
If applicable, origin of the data (if collected from a third party);
If applicable, existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the effects to be expected;
If applicable, transfer of personal data to a third country or an international organization.

Right to rectification (Art. 16 GDPR)

You have a right to rectification and/or modification of the personal data, if your personal data is incorrect or incomplete. The data controller must correct the data without delay.

Right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you may request the restriction of the processing of your personal data:

If you challenge the accuracy of your personal data for a period that enables the data controller to verify the accuracy of your personal data.
The processing is unlawful, and you refuse the erasure of the personal data and instead request the restriction of the use of the personal data.
We no longer need the personal data for the purpose of processing, but you need it to assert, exercise or defend your legal claims; or
If you have objected to the processing pursuant to Art. 21(1) GDPR and it is not yet certain whether the legitimate interests of the data controller override your interests.

Right to erasure (“right to be forgotten”) (Art. 17 GDPR)

If you request from the data controller to delete your personal data without undue delay, they are required to do so immediately if one of the following applies:

Personal data concerning you is no longer necessary for the purposes for which they were collected or processed.
You withdraw your consent on which the processing is based and there is no other legal basis for processing the data.
You object to the processing of the data and there are no longer overriding legitimate grounds for processing, or you object pursuant to Art. 21 (2) GDPR.
Your personal data has been processed unlawfully.
The personal data must be deleted to comply with a legal obligation in Union law or Member State law to which the data controller is subject.
Your personal data was collected in relation to information society services pursuant to Art. 8 (1) GDPR.

Please note that the above reasons do not apply if the processing is necessary:

to exercise the right to freedom of expression and information;
for compliance with a legal obligation required by the Union or Member States law to which the data controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
for reasons of public interest in the area of public health;
for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes;
for the establishment, exercise or defense of legal claims.

Right to information (Art. 19 GDPR)

If you have the right of rectification, erasure or restriction of processing over the data controller, they are obliged to notify all recipients to whom your personal data have been disclosed of the correction or erasure of the data or restriction of processing, unless this proves to be impossible or involves a disproportionate effort.

You reserve the right to be informed about the recipients of your data by the data controller.

Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format. In addition, you have the right to transfer this data to another person without hindrance by the data controller who was initially given the data.

Right to object (Art. 21 GDPR)

For reasons that arise from your particular situation, you have, at any time, the right to object to the processing of your personal data pursuant to Art. 6(1) (e) or 6(1) (f) GDPR; this also applies to profiling based on these provisions.

If the personal data relating to you are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data in regard to such advertising; this also applies to profiling as it is associated with direct marketing.

Right to withdraw the consent (Art. 7 (3) GDPR)

If you have consented to the processing by the controller by means of a corresponding declaration, you have the right to withdraw your consent at any time for the future. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

Automated individual decision-making, including profiling (Art. 22 GDPR)

You have the right not to be subject to a decision based solely on automated processing, including profiling that will have legal effect or affect you in a similar manner.

Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to complain to a supervisory authority, if you believe that the processing of personal data concerning you violates the GDPR. The supervisory authority to which the complaint has been submitted shall inform the complainant on the progress and the outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

V. Transfer of your personal data

If this is necessary for the purposes mentioned, we will transfer your personal data to the following categories of recipients:

IT service providers used by us
distribution partners, logistics companies or delivery service providers used by us
Companies belonging to the Seeberger Group.

Some of the recipients mentioned above are located outside your country or process your personal data there. The level of data protection in other countries may not be the same as in your country. However, we only transfer your personal data to countries for which the EU Commission has decided that they have an adequate level of data protection, or we take measures to ensure that all recipients have an adequate level of data protection. For example, we conclude standard contractual clauses (SCCs).

For example, where we use US service providers, we either rely on SCCs or the EU-US Data Protection Framework, depending on the specific provider. You can request a copy of the SCCs we have concluded with our service providers by emailing us at datenschutz@seerberger.de.

VI. Provision of website and creation of logfiles

Description and scope of data processing

Each time our website is accessed, our system automatically collects data and relevant information from the computer system of the calling device.

The following data is collected:

Browser type and version used
The user’s operating system
The Internet service provider of the user
IP address
Date and time of access
Web pages from which the user’s system accesses our website
Web pages accessed by the user’s system through our website

This data is stored in the log files of our system. This data is not stored with the user’s other personal data.

Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

The storage in logfiles is done to ensure the functionality of the website. The data also is used to optimize the website and to ensure the security of our information technology systems. An analysis of the data for marketing purposes does not take place.

Legal basis for data processing

The legal basis for the temporary storage of data is Art. 6(1) (f) GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose of collection. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible.

Possibility of objection

The collection of data for the provision of the website as well as the storage of data in log files are essential for the operation of the website. The user can object to this. Whether the objection is successful will be determined after evaluating interests. To do so, send an email to datenschutz@seeberger.de.

VII. Use of cookies

Description and scope of data processing

When you visit our website, we use technical tools for various functions, in particular cookies, which can be stored on your device. When you visit our website for the first time and at any time later, you have the choice of whether you generally permit the setting of cookies or which individual additional functions you would like to select. You can make changes in your browser settings or via our Consent Manager.

We use technically necessary cookies, which are required for the technical structure of the website. Without these cookies, our website cannot be displayed (completely correctly). The following data is stored and transmitted in the technically necessary cookies:

Language settings
Your cookie settings (consent/refusal)
Use of website functionalities

We use cookies on our website that are not technically necessary. Technically unnecessary cookies are text files that are not only used for the functionality of the website, but also collect other data. As a result, the following data will be processed:

IP address
Internet user location
Date and time of the website request
Customization of advertisements to the user
Tracking of surfing behavior
Linking the website visit with other social media platforms

Purpose of data processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The use of technically not necessary cookies is carried out for the purpose of improving the quality of our website and its content. By setting these cookies, we learn how the website is used and can thus constantly optimize our offer. These cookies serve us particulary for the following purposes:

Analysis
Tracking of surfing behavior
Linking the website visit with other social media platforms

Legal basis for data processing

The legal basis for the processing of personal data using non-technical cookies is Section 25(1) TDDDG in conjunction with Art. 6(1) (a) GDPR.

The legal basis for the processing of personal data using technically necessary cookies is Section 25(2) TDDDG in conjunction with Art. 6(1) (f) GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

Cookie settings and deletion

You can withdraw your consent to the use of cookies at any time and manage your cookie settings via our Consent Manager by clicking on the button in the bottom left-hand corner of the website, or access your cookie settings at the following link: https://gruppe.seeberger.de/de/datenschutz.

VIII. Contact via Email

Description and scope of data processing

You can contact us via the email address provided on our website. In this case, the user’s personal data transmitted with the email will be stored. The data will be used exclusively for processing of the conversation.

Purpose of data processing

Your personal data is stored for the purpose of processing the request transmitted with your communication and, if necessary, to contact you.

Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending an email is Art. 6(1) (f) GDPR. Our legitimate interest is to respond appropriately to contact requests. If the email contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1) (b) GDPR.

Duration of storage

The data will be deleted as soon as it is no longer for the purpose of collection. For personal data sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be seen from the circumstances that the matter in question has been conclusively resolved.

Exercising your rights

If the user contacts us by email, he or she can object to the storage of his or her personal data at any time. In such a case, the conversation cannot be continued. In this case, all personal data stored in the course of establishing contact will be deleted.

IX. Contact form

Description and scope of data processing

A contact form is available on our website, which can be used for electronic contact. If a user makes use of this option, the data entered in the contact form will be transmitted to us and stored.

When sending the message, the following data will also be stored:

Email address
Last name
First name
Address
Telephone/mobile phone number (optional)
Company name
Date and time of contact

Purpose of data processing

The processing of personal data from the contact form serves us exclusively to process the contact. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

Legal basis for data processing

The legal basis for the processing of data transmitted in the course of sending a contact form is Art. 6(1) (f) GDPR. Our legitimate interest is to respond appropriately to contact requests. If your request aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1) (b) GDPR.

Duration of storage

The data will be deleted as soon as it is no longer for the purpose of collection. For the personal data sent via the contact form, this is the case when the respective conversation with the user has ended. The conversation ends when it can be seen from the circumstances that the matter in question has been conclusively clarified. The statutory retention periods remain unaffected.

Exercising your rights

If the user contacts us via the contact form, he or she can object to the storage of his or her personal data at any time by sending an email to datenschutz@seeberger.de. In such a case, the conversation cannot be continued. In this case, all personal data stored in the course of establishing contact will be deleted.

X. Information for applicants

Principles of data processing

As part of the application process, your personal data will be processed by the controller and stored for the period required to fulfill the specified purposes and legal obligations. In the following, we provide you with information regarding what data is involved, how it is processed, as well as your rights under applicable data protection laws, especially with regard to the GDPR.

Who is responsible for data processing?

The Seeberger Group company named in the respective job offer is responsible in accordance with GDPR and other data protection regulations:

Seeberger GmbH, Hans-Lorenser-Straße 36, 89079 Ulm

Seeberger Professional GmbH, Hans-Lorenser-Straße 36, 89079 Ulm, Germany

Seeberger Genusswelt GmbH, Hans-Lorenser-Straße 20, 89079 Ulm

Personal data processed and purposes of processing

We will only process personal data that is required to fulfill the defined purposes (application process) and legal obligations. This may include the following personal data:

Personal identification information (e.g. name, address, contact details, date of birth, country)
CV
Qualifications (e.g. education, professional experience, language skills, further training)
Testimonials, certificates
Image and audio data (e.g. application photo, ID photo, video recording, sound recordings, other photo recordings)
Any personal data which you share with us in the course of the application process (e.g. by sending us your CV, cover letter, etc.)

Seeberger receives your personal data in the following way:

Direct advertising via the Seeberger careers page
Applications via email sent directly to Seeberger employees
Postal applications
Recruitment agencies
Candidates who are contacted by Seeberger on LinkedIn

The processing of personal data from your application serves us solely for the purposes for which we received or collected it, i.e:

For the application procedure and for the decision on the establishment of an employment relationship
Implementation of pre-contractual measures (initiation of the employment relationship)
Inclusion in the applicant pool
To process applications received via various channels (e.g. via email or social media)
To actively approach potential employees via various channels and contracted personnel consultants (recruitment)
For correspondence with you
To fulfill legal and statutory obligations
Assertion, exercise or defence of legal claims

Data processing for other purposes will only be considered if the necessary legal requirements pursuant to Art. 6(4) GDPR are met. In this case, we will comply with any information obligations pursuant to Art. 13(3) GDPR and Art. 14(4) GDPR.

If you are hired, you will be informed separately about the regulations which will apply to the handling of your personal data, in particular regarding the creation of personnel files.

There is no obligation to provide us with the personal data we ask you for. However, it will not be possible to complete the application process if you do not provide your personal data. If the provision of your data is required by law in some cases, we will inform you of this separately.

Legal basis for processing

The legal basis for the processing of personal data is generally the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), unless there are specific legal provisions. The following options in particular come into consideration here:

Consent (Art. 6(1) (a) GDPR)

If you have given your consent to the processing of personal data, the data will be processed exclusively for the purpose stated in the consent.

Contract (Art. 6(1) (b) GDPR and Section 26 BDSG)

Your personal data is processed to establish, implement or terminate the employment relationship within the framework of the existing contract or to carry out pre-contractual measures.

Legitimate interests (Art. 6(1) (f) GDPR)

If necessary, your personal data will be processed beyond the actual fulfillment of the contract. This processing serves to safeguard legitimate interests of the Seeberger Group or third parties. The legitimate interest is to ensure an efficient application process and optimal staffing.

Legal obligation (Art. 6(1) (c) GDPR, Art. 88 GDPR and Section 26 BDSG).

The Seeberger Group is subject to various legal obligations and statutory requirements (e.g. social security law, occupational safety, professional code of conduct for lawyers, tax laws), as well as regulatory requirements (e.g. bar associations).

If special categories of personal data are processed in accordance with Art. 9(1) GDPR, this serves the exercise of rights or the fulfillment of legal obligations under labor law, social security law and social protection within the framework of the employment relationship. The processing is carried out on the basis of Art. 9(2) (b) GDPR in conjunction with Section 26(3) BDSG. In addition, the processing of health data may be necessary for the assessment of your ability to work in accordance with Art. 9(2) (h) GDPR in conjunction with Section 22(1) (b) BDSG. In addition, the processing of special categories of personal data may be based on consent in accordance with Art. 9(2) (a) GDPR in conjunction with Section 26(2) BDSG.

If personal data is processed on the basis of your consent, you have the right to withdraw your consent at any time with effect for the future. If we process data on the basis of legitimate interests, you have the right to object to the processing of personal data, pursuant to Art. 21 GDPR.

Duration of the storage of personal data

We process the data for as long as is necessary for the respective purpose. Insofar as statutory retention obligations exist – e.g. under the German Social Security Code (SGB), the German Commercial Code (HGB) and the German Fiscal Code (AO) – the relevant personal data will be stored for the duration of the retention obligation. Applications will be stored for up to 6 months after the end of the application process; if you have given your consent to the inclusion in the applicant pool, the application will be stored for a maximum of 1 year. After the retention period expires, we check whether there is any further need for processing. If it is not the case, the data will be deleted.

You can request, at any time, information about the personal data we store about you (see below) and request that the data be deleted, or processing be restricted, if the processing is not necessary.

Who we share your personal data with

We only transfer your personal data to third parties if this is necessary for the decision on the establishment of an employment relationship or, after the employment relationship has been established, for its implementation or termination.

We transfer your personal data to the following recipients:

Personnel and IT department
Heads of respective departments
IT service providers used by us
Companies that belong to our Group

The processing of your personal data is carried out on our behalf on the basis of data processing agreements concluded pursuant to Art. 28 GDPR. In these cases, we ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. Otherwise, we transfer your personal data to external recipients if you have consented or if this is permitted or required by law.

We use the following service providers:

Data processors and sub-processors

We process your application via the StepStone applicant management system, of StepStone Deutschland GmbH, Völklinger Str. 1 40219 Düsseldorf 1, Germany. Details on data processing can be found in StepStone’s privacy policy at https://www.stepstone.de/e-recruiting/rechtliches/datenschutz-bewerber/.

Our online application portal is technically operated by our service provider d.vinci HR-Systems GmbH, Nagelsweg 37-39, 20097 Hamburg, Germany.

D.vinci only provides software and computing capacity and has no influence on the application process. Details on data processing can be found in d.vinci’s privacy policy: https://www.dvinci.de/datenschutz/.

PLÜCOM DIGITAL

We use an external applicant site from PLÜCOM DIGITAL of PLÜCOM e.K., Friedensallee 27, 22765 Hamburg. This is an agency that creates social media recruiting campaigns. Applications are recorded via the website created by the agency and sent by e-mail as a small questionnaire. Details on data processing can be found in PLÜCOM’s privacy policy: https://pluecom.de/datenschutz/.

Microsoft Office 365

As a collaboration tool, we use Office 365 from Microsoft, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. Details on data processing can be found in Microsoft’s privacy policy at https://privacy.microsoft.com/de-de/privacystatement.

Transfer of personal data to a third country

In the case of processors and service providers outside the EU/EEA, your above-mentioned personal data will only be processed to the extent that suitable guarantees have been provided for third country transfers.

Microsoft has a group company in the USA (Microsoft Corporation), which joined the Trans-Atlantic Data Privacy Framework (TDPF; data protection agreement between the EU and the USA), so that an adequate level of data protection is guaranteed for data processing and the conclusion of standard contractual clauses is not required. We reserve the right to commission additional service providers for business purposes and will inform you about this in the context of this privacy policy.

Audio and video conferencing

Data processing

We use online conferencing tools to communicate with our customers. The tools we use are listed below. If you communicate with us by video or audio conference via the internet, your personal data will be collected and processed by us and the provider of the respective conference tool.

The conference tools collect all data that you provide/enter to use the tools (email address and/or your telephone number). The conference tools also process the duration of the conference, the start and end (time) of participation in the conference, the number of participants and other “context information” in connection with the communication process (metadata).

Furthermore, the provider of the tool processes all technical data that is required to process the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.

If content is exchanged, uploaded or provided in any other way within the tool, it is also stored on the tool provider’s servers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that we do not have full control over the data processing procedures of the tools used. Our options are largely determined by the company policy of the respective provider. Further information on data processing by the conference tools can be found in the privacy policies of the tools used, which we have listed below this text.

Purpose and legal basis

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1) (b) GDPR). Furthermore, the use of the tools serves the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6(1) (f) GDPR). If consent has been requested, the tools in question are used on the basis of this consent. Consent can be revoked at any time with effect for the future.

Storage duration

The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you ask us to delete it, revoke your consent or the purpose for data storage no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory retention periods remain unaffected. We have no influence on the storage period of your data that is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

Conference tool used:

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. Details on data processing can be found in the Microsoft Teams privacy policy: https://privacy.microsoft.com/de-de/privacystatement.

XI. Company profile on YouTube

Use of company presences on social networks (YouTube)

We use a company presence on the following social network:

YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as YouTube).

YouTube is owned by Google LLC, 1600 Amphitheatre Pkwy, Mountain View, CA 94043, USA, which has joined the Trans-Atlantic Data Privacy Framework (TDPF; data protection agreement between the EU and the USA), so that an appropriate level of data protection is guaranteed for data processing and the conclusion of standard contractual clauses is not required.

On our company profile we provide information and offer YouTube users the possibility of communication. If you carry out an action on our YouTube company profile (e.g. comments, contributions, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by YouTube, we cannot make any binding statements regarding the purpose and scope of the processing of your data.

You can find information on this in YouTube’s privacy policy:

https://policies.google.com/privacy.

Purposes of data processing

Our YouTube profile is used for communication and information exchange with (potential) customers. We use the company profile to provide information about the Seeberger Group, our products and news, information about industry news and employees of the Seeberger Group.

Publications on the company YouTube profile may contain the following content:

Information about products
Information about services
Advertisement
Contact with customers

Every user is free to publish personal data through activities.

Legal basis for data processing

As far as we process your personal data in order to evaluate your online behavior, this is done on the basis of your express declaration of consent pursuant to Art. 6(1) (a), Art. 7 GDPR.

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6(1) (f) GDPR. Thereby, our legitimate interest is to respond appropriately to your inquiry or to be able to provide the requested information.

If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1) (b) GDPR.

Duration of storage

We store your activities published on our YouTube profile and your personal data until you withdraw your consent and for as long as is necessary to achieve the stated above purposes. In addition, we comply with the statutory retention periods and store the data as long as any legal claims are not yet time-barred for their assertion or defense.

Revocation, objection and removal options

You can withdraw your consent at any time. The revocation of consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

You can object at any time to the processing of your personal data that we collect within the framework of your use of our YouTube profile and assert your rights as a data subject mentioned under the “Your rights” section of this privacy policy. Please send us an email to datenschutz@seeberger.de.

For further information on the processing of your personal data by Youtube and the corresponding objection options, please click here:

https://policies.google.com/privacy.

XII. Company profiles on professionally oriented networks

Use of company presences on professionally oriented networks

We maintain a company presence on the following professional networks:

LinkedIn: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as LinkedIn).

XING: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany (hereinafter referred to as Xing).

To ensure appropriate safeguards for the protection of the transfer and processing of personal data outside the EU, standard contractual clauses were concluded with LinkedIn in accordance with Art. 46(a) (c) GDPR. A copy of the standard data protection clauses can be requested by sending an email to datenschutz@seeberger.de.

On our company profiles we provide information and offer LinkedIn and Xing users the possibility of communication. If you carry out an action on our LinkedIn or Xing company profile (e.g. comments, contributions, likes, etc.), you may make personal data (e.g. clear name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by LinkedIn and Xing, we cannot make any binding statements regarding the purpose and scope of the processing of your data.

Information on this can be found in the corresponding data protection declarations:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

Xing: https://privacy.xing.com/de/datenschutzerklaerung.

Purpose of data processing

Our LinkedIn and Xing profiles are used for job applications, information/PR and active sourcing. Every user is free to publish personal data through activities.

Legal basis for data processing

If the contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1) (b) GDPR.

Duration of storage

The data generated by the company profiles is not stored in our own systems.

Exercising your rights

You can object at any time to the processing of your personal data that we collect within the framework of your use of our LinkedIn or Xing profile and assert your rights as a data subject mentioned under the “Your rights” section of this privacy policy. Please send us an email to datenschutz@seeberger.de.

For further information on the processing of your personal data by LinkedIn and Xing and the corresponding objection options, please click here:

LinkedIn: https://www.linkedin.com/legal/privacy-policy.

Xing: https://privacy.xing.com/de/datenschutzerklaerung.

XIII. Hosting

The website is hosted on servers of a service provider commissioned by us.

Our service provider is:

IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany.

Further information on the processing of personal data by Ionos can be found at: https://www.ionos.com/terms-gtc/privacy-policy/.

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The stored information is:

Browser type and version used
The user’s operating system
the Internet service provider of the user
Date and time of access
Web pages from which the user’s system accesses our website
Web pages that are accessed by the user’s system via our website

This data will not be merged with other data sources. This data is collected on the basis of Art. 6(1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of his website – and server log files are therefore recorded.

The website server is geographically located in Germany.

XIV. Integrated third-party services

We use various service providers to deliver the service we offer through the website.

When using some service providers, personal data may be transferred to servers in third countries outside the EU/EEA, such as the USA. To ensure appropriate safeguards for the protection of the transfer and processing of personal data outside the EU, we either rely on the standard contractual clauses or the EU-US Data Privacy Framework, depending on specific service provider. You can request a copy of the standard data protection clauses by sending an email to datenschutz@seeberger.de. The third-party services, which belong to Google and are listed below, participate in the EU-US Data Privacy (data protection agreement between the EU and the USA), so that an appropriate level of data protection is guaranteed for data processing and the conclusion of standard contractual clauses is not necessary.

Use of Google Analytics 4 (GA4 )

Scope of the processing of personal data

We use Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google Analytics / Google).

By using Google Analytics, we analyze, among other things, the origin of visitors, the time they spend on individual pages and the use of search engines. This allows us to better monitor the success of advertising campaigns. It also enables us to evaluate the use of our online presence in order to compile reports on your activities and to use other Google services associated with the use of our online presence and the internet.

Google sets cookies on your terminal device. During the visit, user behavior is recorded in the form of “events”. This allows personal data to be stored and analyzed, including:

First visit to the website
Interaction with the website, usage path
Clicks on external links
Video usage
File downloads
Scroll behavior (if to end of page)
Searches on the website
Language selection
Page visits
Location (region)
Your IP address (in shortened form)
Technical information about your browser and the terminal devices you use (e.g. language setting, screen resolution)
Your internet provider
Referrer URL

IP address anonymization is activated by default in GA 4. This means that your IP address will be shortened by Google within the member states of the European Union or other parties to the Agreement on the European Economic Area. As an exception, only in rare cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google states that the IP address transmitted by your browser will not be merged with other Google data in the context of Google Analytics.

You can obtain further information on the processing of data by Google here: https://policies.google.com/privacy

Purpose of data processing

We use GA 4 to evaluate the use of our online presence and to generate reports on the activities on our website. The reports are used to analyse the performance of our website and to target advertising to those people who have already expressed an initial interest by visiting our site.

Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Art. 6(1) (a) GDPR.

Duration of storage

After expiry of 14 months at the latest months at the latest your personal data will be deleted.

Exercising your rights

You have the right to revoke your consent under data protection law at any time. The revocation of consent does not affect the legality of processing carried out on the basis of the consent until revocation. Your consent can be revoked via our Cookie Consent Tool.

You can prevent the collection as well as the processing of your personal data by Google by preventing the storage of third-party cookies on your computer, by using the “Do Not Track” function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout? hl=en

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

You can find further information on objection and removal options for Google at: https://policies.google.com/technologies/partner-sites

Use of Google ReCaptcha

Scope of the processing of personal data

We use Google ReCaptcha of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of this tool is to verify that a data entry is compliant and has not been made by a bot. For this purpose, Google ReCaptcha analyzes and authenticates the behavior of a website visitor with respect to various characteristics. This allows personal data to be stored and evaluated, in particular the user’s activity (in particular mouse movements and which elements have been clicked on) and device and browser information (in particular time, IP address and operating system).

The data will not be associated with any data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail.

For more information about the collection and storage of data by Google, please visit:

https://policies.google.com/privacy.

Purpose of data processing

The use of Google ReCaptcha serves to protect our online presence from misuse.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is, in principle, the user’s consent in accordance with Art. 6(1) (a) GDPR.

Duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

Exercising your rights

You can find further information on objection and removal options for Google at:

https://policies.google.com/privacy.

Use of YouTube

Scope of the processing of personal data

We use the plugin from YouTube operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as YouTube / Google).

We use the plugin from YouTube to embed videos from YouTube on our online presence. When you visit our website, your browser connects to YouTube’s servers. This allows personal data to be stored and analyzed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system).

We have no influence on the content of the plugin. If you are logged into your YouTube account during your visit, Google can assign your website visit to this account. By interacting with plugin, this corresponding information is transmitted directly to Google and stored there.

Further information on the collection and the storage of data by Google can be found here: https://policies.google.com/privacy.

Purpose of data processing

The use of the YouTube plugin serves the improvement of the user friendliness and an appealing representation of our online presence.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is, in principle, the user’s consent in accordance with Art. 6(1) (a) GDPR.

Duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

Exercising your rights

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

You can find further information on objection and removal options for Google at:

https://policies.google.com/privacy.

Use of Google Tag Manager

Scope of the processing of personal data

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). With Google Tag Manager, tags from Google and third-party services can be managed and bundled and embedded on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, capture the impact of online advertising and social channels, use remarketing and targeting and test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains statements about which tags are to be triggered. Google Tag Manager triggers other tags that may themselves collect data. You will find the information on this in the sections on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.

For more information about Google Tag Manager, please visit: https://www.google.com/intl/de/tagmanager/ and see Google’s privacy policy: https://policies.google.com/privacy.

Purpose of data processing

The purpose of the processing of personal data lies in the collected and clear administration as well as an efficient integration of the services of third parties.

Legal basis for the processing of personal data

The legal basis for the processing of personal data is, in principle, the user’s consent in accordance with Art. 6(1) (a) GDPR.

Duration of storage

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymized by Google’s own statements to delete parts of the IP address and cookie information after 9 and 18 months respectively.

Exercising your rights

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

You can find further information on objection and removal options for Google at:

https://policies.google.com/privacy.

Use of Usercentrics

Scope of the processing of personal data

We use the Consent Management Platform Usercentrics of the Usercentrics GmbH, Rosental 4, 80331 Munich, Germany (hereinafter referred to as Usercentrics). Usercentrics enables us to obtain the consent of the user for data processing, to administer it and to document it in a legally compliant manner. Usercentrics places cookies on the user’s device for this purpose. The following data are processed:

Date and time of visit
Device information
Browser information
anonymized IP address
Opt-in and opt-out data

The data is processed geographically within the European Union.

Further information on the processing of data by Usercentrics can be found here:

https://usercentrics.com/de/datenschutzerklaerung/.

Purpose of data processing

The processing of personal data is carried out to obtain the legally required consents for the use of cookies, to manage consent and to document it in a legally compliant manner.

Legal basis for the processing of personal data

The legal basis for the processing is our legal obligation to obtain and document your consent, Art. 6(1) (c) GDPR, Art. 7(1) GDPR.

Duration of storage

Your personal information will be stored for as long as is necessary to fulfill the purposes described in this Privacy Policy, until you revoke your consent to its storage, or as required by law.

Exercising your rights

You can prevent Usercentrics from collecting and processing your personal data by preventing the storage of third-party cookies on your computer, by using the “Do Not Track” function of a supporting browser, by deactivating the execution of script code in your browser or by installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

For more information about objection and removal options regarding Usercentrics, please visit: https://usercentrics.com/de/datenschutzerklaerung/.

XV. Changes to this privacy policy

We reserve the right to make changes to this privacy policy at any time. The privacy policy is updated regularly, and all changes are automatically published on our website.

This privacy policy was created with the support of DataGuard.