Privacy Policy

General Information on Data Processing

In this Privacy Policy, we inform you about what personal data we process during your visit to our website and what rights you have. For the terminology used, we refer to the definitions set forth in Article 4 of the General Data Protection Regulation (UK GDPR).

Personal data means any information relating to an identified or identifiable natural person. Examples include your name, address, contact information, and email address.

Processing means any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.

“Data subject” means any identifiable natural person whose personal data are processed by the person responsible for the processing (controller).

“Controller” or“person responsible for the processing”means the natural or legal person, public authority, agency, or other body that, alone or jointly with others, determines the purposes and means of the processing of personal data.

“User” encompasses all categories of data subjects whose data are processed. These include our business partners and other visitors to our website.

1. Name and address of the controller

Stabilus UK Ltd.

Sales Office

Catesby Innovation Centre, Catesby Park

GB-Charwelton, Northamptonshire NN11 3FQ

Phone: +44 1295 700 100

Email: info.uk@stabilus.com

2. Duration of storage

Unless a specific retention period is specified in this Privacy Policy, your personal data will remain with us until the purpose for which the data is processed no longer applies. If you submit a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally valid reasons for storing your personal data (e.g., statutory retention periods under tax or commercial law); in the latter case, the deletion will take place once these reasons no longer apply.

3. General notes on the legal basis for data processing on this website

To the extent that you have consented to the data processing, we process your personal data pursuant to Art. 6(1)(a) UK GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Article 49(1)(a) of the UK GDPR. To the extent that you have consented to the storage of cookies or access to information on your device (e.g., device fingerprinting), this data is additionally processed pursuant to Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TDDDG). This consent may be withdrawn at any time. If your data are required for the performance of a contract or to take steps prior to entering into a contract, we process your data pursuant to Article 6(1)(b) of the UK GDPR. Furthermore, to the extent that this is necessary to comply with a legal obligation, we process your data on the basis of Article 6(1)(c) of the UK GDPR. Data processing may also take place on the basis of our legitimate interest pursuant to Article 6(1)(f) of the UK GDPR. In the following sections of this Privacy Policy, we will inform you about the relevant legal basis governing each individual case.

4. Note on the Transfer of Data to the U.S. and Other Third Countries

Among other things, we use tools from companies located in the U.S. or other third countries that do not have adequate data protection standards. When these tools are enabled, your personal data may be transferred to these third countries and processed there. We must point out that a level of data protection comparable to that afforded in the EU cannot be guaranteed in these countries. For example, U.S. companies are required to disclose personal data to security authorities without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that your data stored on U.S. servers for monitoring purposes will be processed, analyzed, and permanently stored by U.S. agencies (e.g., intelligence services). We have no control over these processing activities. Many data processing operations are not possible without your explicit consent. You may revoke any consent you have already granted at any time. The lawfulness of the data processing carried out prior to the revocation remains unaffected by the revocation.

5. Our Website Hosting

We host our website with Interactive Network GmbH, Neue Mainzer Str. 75, 60311 Frankfurt am Main, Germany. The use of this service provider is based on Article 6(1)(f) of the UK GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website. We have entered into a data processing agreement with Interactive Network GmbH. This is a contract required by data protection laws that guarantees the service provider will process the personal data of our website visitors only in accordance with our instructions and in compliance with the UK GDPR.

6. Processing of Personal Data

6.1. Visiting our website

6.1.1. Scope of data processing

For technical reasons, your browser will transmit certain types of data to our web server when you visit our website. This includes the following data (referred to as server log files):

IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (specific page)
Operating system and its access status / HTTP status code
Amount of data transmitted
Website from which the request is being made (referrer URL)
Browser, language, and version of the browser software

This data is not stored together with other personal data of the users.

6.1.2. Purpose of data processing

The temporary storage of the user’s IP address by our web server is technically necessary to enable access to the website. For this purpose, it is mandatory that your IP address remain stored for the duration of the session.

The aforementioned data are stored in log files to ensure the functionality of our website. These data help us optimize our website and safeguard the security of our information technology systems (e.g., for attack detection). No analysis of the data for marketing purposes takes place in this context.

6.1.3. Legal Basis for Processing

Article 6(1)(f) of the UK GDPR serves as the legal basis for the temporary storage of this data and these log files. Our legitimate interest consists of ensuring the technically flawless presentation and optimization of our website—the server log files must be collected for this purpose.

6.1.4. Duration of Storage

The aforementioned data are deleted as soon as they are no longer required to achieve the intended purpose of their collection. Whenever the data are collected for the provision of the website, this is the case when the respective session has ended. We store the data contained in these log files for up to 12 months. Storage beyond this period is possible if required due to a legitimate interest (e.g., to investigate attacks, misuse, or fraudulent acts). Data that must be stored for evidentiary purposes shall be excluded from deletion until the respective incident has been fully clarified.

6.1.5. Right to Object and Right to Be Forgotten

The collection of data for the provision of the website and its storage in log files is absolutely necessary for technical reasons in order for us to operate our website. Consequently, you have no right to object.

6.2. Contact Form

6.2.1. Scope of data processing

Our website provides a form under the “Contact” menu item for you to submit inquiries. Under the “Stabilus Suppliers” menu item, a separate form is available for suppliers to submit brief applications.

When you use the forms to send us inquiries, we collect data regarding your company, name, job title, address, contact information (including your email address), as well as details about the nature of your inquiry. Required fields are marked accordingly. Registered partners and suppliers can log in using their username and password. This information is linked to the data we store.

We use the other data processed during the submission process (e.g., IP address, date, time) to prevent misuse of the form and ensure the security of our information technology systems.

6.2.2. Purpose of Data Processing

If you send us inquiries via our contact form, we process your personal data to answer your inquiry and address your concern. We store your data in case follow-up questions arise.

6.2.3. Legal basis for data processing

To the extent that your request relates to the performance of a contract or is necessary to take steps prior to entering into a contract (e.g., a quote), the processing is based on Article 6(1)(b) of the UK GDPR. In all other cases, the processing is based on our legitimate interest in effectively handling the inquiries directed to us (Art. 6 (1)(f) UK GDPR).

6.2.4. Recipients of Data Processing

When you contact us, your personal data will be processed by our internal departments responsible for your matter. In this regard, no data will be disclosed to third parties. The data will be used exclusively to process the communication and to handle your matter.

6.2.5. Retention Period

The data transmitted to us are deleted as soon as they are no longer required to achieve the intended purpose for which they were collected. This is the case when the respective conversation with the user has ended and the circumstances indicate that the matter in question has been conclusively resolved. If the inquiry is submitted in the context of a contractual relationship or as part of steps leading up to the conclusion of a contract, we store the collected data in accordance with the statutory retention periods for a period of ten years.

6.2.6. Right to object and opt out; right to withdraw consent

You have the option to withdraw your consent to the processing of your personal data at any time. In such a case, the conversation cannot be continued. Please send your withdrawal to info@stabilus.com. All personal data stored in the course of establishing contact shall be deleted in such a case, provided that no statutory record retention periods apply.

Although there is no statutory or contractual obligation for you to provide your data, it would not be possible to process your request without this information.

6.3. Inquiries by Email or Phone

6.3.1. Scope of data processing

If you contact us via the provided email addresses or by phone, we process the data transmitted along with your inquiry. This includes your name, phone number, email address, and the text of your message.

6.3.2. Purpose of data processing

If you contact us by email or phone, we process your personal data to answer your inquiry and address your concern. We store your data in case follow-up questions arise.

6.3.3. Legal basis for data processing

To the extent that your matter relates to the performance of a contract or is necessary to take steps prior to entering into a contract (e.g., an offer), the processing is based on Article 6(1)(b) of the UK GDPR. In all other cases, the processing is based on our legitimate interest in effectively handling the inquiries directed to us (Art. 6(1)(f) UK GDPR).

6.3.4. Recipients of Data Processing

6.3.5. Retention Period

6.3.6. Right to object and opt out; right to withdraw consent

Although there is no statutory or contractual obligation for you to provide your data, it would not be possible to process your request without this information.

6.4. Newsletter

6.4.1. Scope of Data Processing

Under the menu item “Investor Relations” > “IR Newsletter,” you can sign up for our newsletter. If you would like to subscribe, we need your email address and information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. You may voluntarily provide us with your name, company information, address, phone number, and your relationship with Stabilus.

6.4.2. Purpose of Data Processing

We process your data for the purpose of distributing the newsletter to keep you regularly informed via email about Stabilus’s financial performance.

6.4.3. Legal basis for data processing

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 (1)(a) UK GDPR).

You may withdraw your consent to the storage of your data and email address, as well as their use for the purpose of distributing the newsletter, at any time—for example, via the “Unsubscribe” link in the newsletter. The lawfulness of any data processing operations carried out prior to such withdrawal remains unaffected.

6.4.4. Recipients of Data Processing

The recipient of your data is our internal department responsible for Investor Relations.

For newsletter administration and distribution, we use a mailing application provided by EQS Group AG, Karlstraße 47, D-80333 Munich, Germany www.eqs.com. We have entered into a data processing agreement regarding the use of the aforementioned service. This agreement, required by data protection laws, ensures that the service provider processes the personal data of our website visitors solely in accordance with our instructions and in compliance with the UK GDPR.

6.4.5. Retention Period

We will store the data we have collected about you for the purpose of your newsletter subscription for as long as you wish to receive the newsletter. When you unsubscribe from the newsletter, we will delete your data. Data stored by us for any other purpose remains unaffected by this.

6.4.6. Right to Object and Opt-Out

You can unsubscribe from the newsletter at any time. An unsubscribe link is provided in each newsletter for this purpose.

6.5. Job Applications

6.5.1. Scope of data processing

If you are interested in working at Stabilus, go to the “Stabilus Careers” menu item to search for job openings.

You can apply for these jobs online by entering the requested information in the designated application forms. Required information is clearly marked. As part of the application process, we process the following categories of data: Personal details (form of address, title, first name, last name, presence of a severe disability or equal opportunity mandate), contact details (email address, phone number), availability (notice period), documents (resume/CV, cover letter, other attachments such as references or certificates).

You can also proactively submit an unsolicited application via email. In this case, we process the personal data you provide us in order to process your application.

6.5.2. Purpose of Data Processing

We process your personal data in order to conduct the application process and to make a decision regarding the establishment of an employment relationship, particularly during the selection of suitable candidates as well as for the administrative handling of the application process.

6.5.3. Legal basis for data processing

The legal basis for processing your personal data during the application process is Article 6(1)(b) of the UK GDPR.

6.5.4. Recipients of personal data

The recipients of your personal data are our HR department and the department responsible for the job posting.

For the operation, maintenance, and hosting of our job applicant management system, we use the service provider Concludis GmbH, Frankfurter Straße 561, 51145 Cologne, Germany. They also have access to the data. We have entered into a data processing agreement with them. This is a contract required by data protection laws that ensures the service provider processes personal data from the application process only in accordance with our instructions and in compliance with the UK GDPR.

In general, the only people who have access to your data are those who need it to properly conduct the application process.

We do not disclose your personal data to third parties, unless you have explicitly consented to such disclosure or we are required to disclose data based on statutory provisions and/or official or court orders.

No data is transferred to a third country or any international organization.

6.5.5. Retention Period

If your application does not result in employment, we will delete your personal data, taking into account the statute of limitations for filing a claim under the German General Act on Equal Treatment (AGG), no later than 6 months after the end of the application process (e.g., after we notify you of our decision to reject your application). This applies unless you have granted us consent pursuant to Art. 6 (1)(a) UK GDPR to store your personal data for a longer period so that we may consider you for new job openings, if appropriate. In this case, we will request separate consent from you pursuant to Article 6(1)(a) of the UK GDPR.

If your job application was successful and you enter into an employment contract with us, we will file your application documents in our human resources management system and in your personnel file for the purpose of onboarding you into the employment relationship, to the extent necessary, based on Article 6(1)(b) of the UK GDPR. In this case, your application documents will not be deleted until your employment relationship has ended and another three years have passed since the end of that year.

6.5.6. Automated Decision-Making

We do not use automated decision-making.

6.5.7. Obligation to Provide Data

Personal data must be provided so that we can decide whether to establish an employment relationship. If you do not provide us with this data, we cannot conduct the application process.

6.5.8. Right to Object and Request Deletion

Upon request, you may have us update or delete the personal data you have provided to us at any time. To do so, please send an email to info@stabilus.com. This does not apply if you have applied for a specific position as part of an ongoing application process. In this case, we store the information you provided to us for this position until the statutory period for filing a claim has expired (specifically Section 15 of the AGG).

7. Cookies

7.1. Scope of Data Processing

Our website uses “cookies.” Cookies are small text files stored in your web browser’s cache when you visit the website. They do not cause any damage to your computer and do not contain any malware, such as viruses or Trojans.

Cookies may come from us (first-party cookies) or originate from third-party companies (third-party cookies). Third-party cookies enable us to integrate certain services from third-party companies into our websites (e.g., to display videos).

Whether and which cookies we use when you visit our website depends on which areas and features of our online content you use and whether you have consented to the use of cookies that are not technically necessary. In the privacy settings, you will find more information and options for making choices, which are indicated by the corresponding icon on the left side of the screen.

In our Cookie Policy, we have listed the cookies we use by name, provider, purpose, and expiration date.

7.2. Purpose of Data Processing

Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (e.g., displaying videos or showing the cookie banner). Other cookies are used to analyze user behavior or for advertising purposes.

7.3. Legal basis for data processing

We store cookies that are necessary to carry out the electronic communications process in order to display the cookie banner or to optimize the website (e.g., cookies for establishing a DNS connection)—i.e., necessary cookies—based on Article 6(1)(f) of the UK GDPR. As the website operator, we have a legitimate interest in storing necessary cookies to ensure the technically flawless and optimized provision of our services.

To the extent that we request consent for the storage of cookies and comparable recognition technologies, the processing is based exclusively on this consent (Art. 6 (1)(a) UK GDPR and Section 25 (1) TDDDG); this consent may be revoked at any time.

7.4. Duration of Storage

Cookies are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted once your visit is over. Persistent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

7.5. Right to Object and Opt-Out

You can configure your browser to notify you when cookies are set and to accept cookies only in specific cases, or to block cookies in certain situations or entirely. You can also enable the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

You can change your consent at any time in our cookie banner. To do so, please access our Cookie Policy.

7.6. Consent to Cookiebot

Our website uses Cookiebot consent technology to obtain your consent to store certain cookies on your device or to use certain technologies, and to document this in compliance with data protection regulations. The provider of this technology is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).

When you visit our website, a connection is established to the Cookiebot servers in order to obtain your consent and other declarations regarding the use of cookies. Afterward, Cookiebot stores a cookie in your browser to associate the consents you have granted—or their revocation—with you. The data collected in this manner will be stored until you ask us to delete it, until you delete the Cookiebot cookie yourself, or until the purpose for storing the data no longer exists. Mandatory statutory retention obligations remain unaffected.

Cookiebot is used to obtain the legally required consent to the use of cookies. The legal basis for this is Article 6(1)(c) of the UK GDPR.

Data Processing

We have entered into an order processing agreement regarding the use of the aforementioned service. This is a contract required by data protection laws that guarantees the service provider will process the personal data of our website visitors solely in accordance with our instructions and in compliance with the UK GDPR.

8. Analytics Tools and Advertising

8.1. Google Tag Manager

8.1.1. Scope of data processing

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager itself does not create any user profiles, store any cookies, or perform any independent analyses. It is used solely for the management and deployment of the tools integrated through it. Google Tag Manager records your IP address.

8.1.2. Purpose of data processing

Google Tag Manager is a tool that allows us to embed tracking or statistical tools and other technologies on our website.

8.1.3. Legal basis for data processing

The processing is based on Art. 6(1)(a) of the UK GDPR and Section 25 (1) of the TDDDG, to the extent that the consent includes the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) as defined by the TDDDG. This consent may be withdrawn at any time.

8.1.4. Recipients of data processing

Google Tag Manager records your IP address, which may also be transferred to Google’s parent company in the United States.

8.1.5. Right to object and opt-out

You may revoke your consent to the use of Google Tag Manager at any time.

8.2. Google Analytics

8.2.1. Scope of data processing

This website uses features of the web analytics service Google Analytics 4. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In doing so, we receive various usage data, such as page views, dwell time, the operating systems used, and the user’s location. This data is associated with the user’s respective device. No association with a user ID takes place.

Furthermore, Google Analytics allows us to track your clicks, mouse movements, and scroll actions, among other things. Additionally, Google Analytics uses various modeling approaches to supplement the collected data sets and employs machine learning technologies for data analysis. Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). With Google Analytics 4, IP address anonymization is enabled by default.

8.2.2. Purpose of Data Processing

Google Analytics enables us to analyze the browsing behavior of our website visitors. By analyzing the data collected, we can assess the use of the individual components of our website. This helps us improve our website and its usability.

8.2.3. Legal basis for data processing

The use of Google Analytics is based on your consent pursuant to Art. 6 (1)(a) UK GDPR and Section 25 (1) TDDDG. This consent may be withdrawn at any time.

8.2.4. Recipients of data processing

Google processes the data on our behalf to analyze website usage and to compile reports on website activity. We have entered into a data processing agreement with Google. Through this agreement, Google guarantees that it will process the data in accordance with the General Data Protection Regulation and protect the rights of the data subject.

8.2.5. Data transfer to a third country

The information collected by Google regarding your use of this website—generated via the cookie—is generally transmitted to a server operated by Google in the United States and stored there. Data transfers to the United States are based on the EU Commission’s Standard Contractual Clauses. For details, visit: https://privacy.google.com/businesses/controllerterms/mccs/.

8.2.6. Retention period

The data we send and link to cookies are automatically deleted after 14 months. After their retention period has expired, the data are automatically deleted once a month.

8.2.7. Right to Object and Opt-Out

Browser plug-in: You can prevent Google from collecting and processing your data by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information about how Google Analytics handles user data, see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

8.3. etracker

8.3.1. Scope of Data Processing

This website uses the etracker analytics service. The provider is etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany.

For this purpose, etracker collects your truncated IP address, geolocation data (at the city level at most), log files, and other information that your browser transmits to our web server when you access the website. This allows us to measure website interactions such as dwell time, conversions (e.g., registrations), scrolling, clicks, and page views by website visitors. These interactions are assigned to the website visitor for the duration of the current day so that they are recognized during repeat visits. At the end of the day, visitor recognition is no longer possible.

8.3.2. Purpose of Data Processing

We use etracker to analyze the browsing behavior of our website visitors. This enables us to optimize our website and its usability.

8.3.3. Legal basis for data processing

No cookies are stored in your browser without your consent, nor is any information read from your device’s memory. With appropriate consent, processing is based on Art. 6(1)(a) of the UK GDPR and Section 25(1) of the TDDDG. This consent may be withdrawn at any time.

8.3.4. Duration of storage

The IP address is anonymized as early as possible during the analysis with etracker, and visitor recognition is possible for no longer than the duration of the current day. For the cookie storage period, please refer to our Cookie Policy.

8.3.5. Right to Object and Opt-Out

You can disable etracker here:

Disable tracking

For further information on data protection at etracker, visit https://www.etracker.com/datenschutz/.

We have entered into a data processing agreement regarding the use of the aforementioned service. This agreement is required by data protection laws and ensures that the service provider processes the personal data of our website visitors solely in accordance with our instructions and in compliance with the UK GDPR.

8.4. Microsoft Clarity

8.4.1. Scope of Data Processing

This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity (hereinafter “Clarity”). This is a tool for analyzing user behavior, specifically to track visits to this website (using only an anonymized IP address).

In doing so, Clarity records mouse movements, mouse clicks, and keyboard interactions and creates a visualization of the parts of the website that users scroll through most frequently (heat maps). Clarity can also record sessions so that we can view page usage in the form of videos. Furthermore, we obtain information about general user behavior across our website.

8.4.2. Purpose of Data Processing

Clarity enables us to analyze the use of our website and use the information gathered to optimize and design it for optimal usability.

8.4.3. Legal basis for data processing

We use cookies in order to use Clarity. The use of the aforementioned service is based on Art. 6 (1)(a) of the UK GDPR and Section 25 of the TDDDG. This consent may be withdrawn at any time.

Data transfers to the U.S. are based on the EU Commission’s Standard Contractual Clauses. For details, visit: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de.

8.4.4. Data Recipients

Clarity uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Your personal data will be stored on Microsoft’s servers (Microsoft Azure Cloud Service) in the United States.

We have entered into a data processing agreement with Microsoft. This is a contract required by data privacy laws that guarantees that the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the UK GDPR.

8.4.5. Duration of Storage

If you have given us your consent to use Clarity, it will use persistent cookies that are automatically deleted after 365 days.

8.4.6. Right to object and opt-out

Your consent to data collection and storage can be revoked at any time with future effect. Microsoft uses the system developed by the Digital Advertising Alliance to allow you to opt out of using Clarity. You can opt out of Clarity telemetry by selecting “Microsoft” on the following website: https://optout.aboutads.info/?c=2&lang=EN. By installing the “Protect My Choices” app on your browser, you can ensure that your opt-out preference is saved.

For further details on Clarity’s data protection policy, go to:
https://docs.microsoft.com/en-us/clarity/faq.

9. Plugins and Tools

9.1. Userlike

9.1.1. Scope and purpose of data processing

We use Userlike (hereinafter “Userlike”) to handle user inquiries via our support channels or live chat systems. The provider is Userlike UG (limited liability), Probsteigasse 44–46, 50670 Cologne, Germany. Messages you send to us may be stored in the Userlike ticket system or answered by our staff via live chat. When you communicate with us through Userlike, we and Userlike will store your name and email address, among other things—to the extent that you have provided them—along with your chat histories. This data is compiled into a profile.

9.1.2. Purpose of Data Processing

We process your data to handle inquiries via our support channels or live chat systems.

9.1.3. Legal basis for data processing

The use of Userlike is based on Art. 6 (1)(f) UK GDPR. We have a legitimate interest in processing your inquiries as quickly, reliably, and efficiently as possible. To the extent that we have requested your corresponding consent, the processing takes place exclusively on the basis of Article 6(1)(a) of the UK GDPR and Section 25 (1) of the TDDDG, insofar as your consent includes the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent may be withdrawn at any time.

9.1.4. Data Recipients

Your data will be processed by our internal departments responsible for data processing.

We have entered into a data processing agreement with Userlike. This is a contract required by data protection laws that guarantees that the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the UK GDPR.

9.1.5. Duration of Storage

Messages addressed to us are retained until you ask us to delete them or the purpose for data storage no longer exists (e.g., after your inquiry has been processed). Mandatory statutory provisions—specifically statutory retention periods—remain unaffected.

9.1.6. Right to Object and Opt-Out

You may withdraw your consent to the storage of cookies at any time. You can disable cookies via the cookie settings at any time.

For more information about Userlike’s privacy policy, visit: www.userlike.com/de/data-privacy and https://www.userlike.com/de/blog/live-chat-software-datenschutz-dsgvo.

9.2. hCaptcha

9.2.1. Scope and Purpose of Data Processing

We use hCaptcha (hereinafter “hCaptcha”) on this website. The provider is Intuition Machines, Inc., 2211 Selig Drive, Los Angeles, CA 90026, USA (hereinafter “IMI”).

For this purpose, hCaptcha analyzes website visitor behavior based on various characteristics.

This analysis is triggered automatically as soon as a website visitor accesses a website with hCaptcha enabled. For this analysis, hCaptcha evaluates various pieces of information (e.g., IP address, duration of the website visitor’s stay on the website, or mouse movements made by the user).

9.2.2. Purpose of data processing

hCaptcha checks whether data entry on this website (e.g., in a contact form) is performed by a human or by an automated program.

9.2.3. Legal basis for data processing

The storage and analysis of data are carried out on the basis of Art. 6 (1)(f) UK GDPR. We have a legitimate interest in protecting our website content from abusive automated spying and spam. To the extent that we have requested your consent for this purpose, the processing is based exclusively on Article 6(1)(a) of the UK GDPR and Section 25 (1) of the TDDDG, insofar as your consent includes the storage of cookies or access to information on the user’s terminal device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent may be withdrawn at any time.

9.2.4. Data Recipients

The data collected during the analysis will be transferred to IMI. When hCaptcha is used in “invisible mode,” the analyses run entirely in the background. Website visitors are not notified that an analysis is taking place.

Data processing is based on standard contractual clauses contained in IMI’s general terms and conditions and/or in the data processing agreements.

9.2.5. Right to Object and Deletion

You may withdraw your consent to the storage of cookies at any time. You can disable cookies via the cookie settings at any time.

For more information about hCaptcha, please refer to their privacy policy and terms of use at the following links: https://www.hcaptcha.com/privacy and https://hcaptcha.com/terms.

10. Social Media Buttons

Our website contains buttons with hyperlinks to the social networks XING, LinkedIn, YouTube, and Facebook, where we maintain publicly accessible profiles. You can identify the providers by their logos. We use these platforms to communicate with users and inform them about our offerings and career opportunities.

When you visit our website, no personal data is initially transmitted to these social media platforms. Data is only transferred to them when you click on the respective button. In this case, the respective provider receives the information that you have accessed the corresponding page of our website (e.g., date, time, IP address, page accessed).

If you are logged in to the social media platform, the data we collect could potentially be directly associated with your account with that provider. We recommend that you log out regularly after using a social network, and especially before clicking the button, as this helps prevent your data from being linked to your profile with the plugin provider.

It is possible that the provider of the respective services or content processes your data for its own additional purposes. However, since we have no control over the data collected and processed by third parties, we cannot make any binding statements regarding the purpose and scope of their processing of your data. For further information on the purpose and scope of the collection and processing of your data, please refer to the privacy policies of the respective providers responsible for data protection. There you can also find further information on data processing and your options for objecting. For a detailed overview of the respective processing methods and the options for objecting (opt-outs), please refer to the following linked information from the providers.

Xing (New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany); Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung;

LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland); Privacy Policy: https://www.linkedin.com/legal/privacy-policy;

Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland); Privacy Policy: https://www.facebook.com/about/privacy;

YouTube / Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), Privacy Policy: https://policies.google.com/privacy.

11. Google Fonts (local)

This website uses web fonts provided by Google to display typefaces consistently. The Google Fonts are installed locally. No connection is made to Google servers. For more information on Google web fonts, visit https://developers.google.com/fonts/faq, and for Google’s privacy policy, visit: https://policies.google.com/privacy?hl=de.

12. Data Security and Hosting

We implement technical, contractual, and organizational measures to ensure data processing security in accordance with the state of the art. In doing so, we ensure compliance with the provisions of data protection laws, specifically those of the UK GDPR, and that the data we process are protected against destruction, loss, alteration, and unauthorized access. These security measures also include encrypted data transmission between your browser and our servers. Please note that Secure Socket Layer (SSL) encryption is only enabled for transmissions over the Internet if the padlock icon appears in your browser window and the address begins with https://. This SSL encryption technology protects data transmission from unauthorized access by third parties. If this option is not available, you may also choose not to send certain data via the Internet.

13. Your Rights

You have the following rights when we process your personal data:

Right of access (Art. 15 UK GDPR): You have the right to request information about the personal data processed regarding you. This also includes the right to obtain a copy of the data in question.

Right to rectification (Art. 16 UK GDPR): You have the right to request that we rectify the personal data concerning you without delay if it is inaccurate. Taking into account the purpose of the processing, you have the right to have the personal data concerning you completed whenever it is incomplete.

Right to erasure (Art. 17 UK GDPR). You have the right to have the personal data concerning you erased without delay, provided that one of the grounds set forth therein applies.

Right to restriction of processing (Art. 18 UK GDPR). You have the right to request that we restrict the processing of your personal data, provided that one of the grounds set forth therein applies.

Right to data portability ( Art. 20 UK GDPR). You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format. Furthermore, under certain circumstances, you have the right to transmit that data to another controller without hindrance.

Right to object (Art. 21 UK GDPR). For reasons arising from your particular situation, you have the right to object at any time to the processing of your data, provided that the processing is based on a balancing of interests pursuant to Art. 6(1)(f) UK GDPR. This also applies to profiling based on this provision within the meaning of Art. 4(4) UK GDPR. If you exercise your right to object, we will no longer process your personal data unless there are compelling legitimate grounds for the processing that override this right, or the processing is necessary for the establishment, exercise, or defense of legal claims.

Right to withdraw consent (Art. 7(3) UK GDPR). Pursuant to Art. 7(3) UK GDPR, you have the fundamental right to revoke your consent to the processing of personal data at any time.

The restrictions set forth in Sections 34 and 35 of the German Data Protection Act (BDSG) apply to your right of access and erasure.

Right to file a complaint (Art. 77 UK GDPR). You have the right to file a complaint with a data protection authority (Art. 77 UK GDPR).

The supervisory authority responsible for our location is:
The Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, GB—Great Britain, Phone: +44 303 123 1113, Email: dpo@ico.org.uk, Website: https://www.ico.org.uk

14. Changes to the Privacy Policy

We reserve the right to amend our Privacy Policy to reflect changes in the legal landscape or whenever there are changes to the service or data processing. However, this applies only to provisions regarding data processing. Changes are made only with the consent of the users to the extent that such consent is required or where integral parts of this Privacy Policy contain provisions governing the contractual relationship with the users.

Please review the contents of this Privacy Policy regularly.

Date of this Privacy Policy: June 21, 2023