RESPONSIBLE BODY WITHIN THE MEANING OF DATA PROTECTION LAW

Bergson GmbH
Am Bergson Kunstrakftwerk 2
81245 Munich

T + 49 89 44443480
E info@bergson.com

CONTACT DETAILS OF THE DATA PROTECTION OFFICER

PROLIANCE GmbH /www.datenschutzexperte.de
Data protection officer: Dominik Fünkner
Leopoldstr. 21
80802 Munich
Email: datenschutzbeauftragter@datenschutzexperte.de

DEFINITIONS

Our privacy policy should be simple and understandable for everyone. As a rule, the official terms of the General Data Protection Regulation (GDPR) are used in this privacy policy. The official definitions are defined inArt. 4 GDPRexplained.

ACCESS TO AND STORAGE OF INFORMATION IN TERMINAL EQUIPMENT

By using our website, information (e.g. IP address) may be accessed or information (e.g. cookies) may be stored in your end devices. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In cases in which such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of § 25 para. 1 sentence 1, para. 2 no. 2 TTDSG.

In cases in which such a process serves other purposes (e.g. the needs-based design of our website), this is only carried out on the basis of Section 25 (1) TTDSG with your consent in accordance with Art. 6 (1) lit. a GDPR. Consent can be revoked at any time for the future. The provisions of the GDPR and the Federal Data Protection Act (BDSG) apply to the processing of your personal data.

Further information on the processing of your personal data and the relevant legal bases in this context can be found in the following sections on the specific processing activities on our website.

Data processing when you visit our website

When you visit our website, it is technically necessary for data to be transmitted to our web server via your internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

  • Visited domain

  • Date and time of the request

  • Name of the requested file

  • Page from which the file was requested

  • Access status

  • Web browser and operating system used

  • (Full) IP address of the requesting computer

  • Amount of data transferred

We collect the data listed in order to ensure a smooth connection to the website and to enable users to use our website conveniently. The log file is also used to evaluate system security and stability as well as for administrative purposes. The legal basis for the temporary storage of data or log files is Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we may store this data temporarily. It is not possible for us to draw conclusions about individual persons based on this data. After seven days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a reference to the individual user. This data is not evaluated in any way except for statistical purposes in anonymized form. This data is not merged with data from other data sources.

Contacting us by e-mail

If you send us inquiries by e-mail, your details from your e-mail, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. We will never pass on this data without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary.

DATA TRANSFER AND RECIPIENTS

Your personal data will not be transferred to third parties unless

- if we have explicitly indicated this in the description of the respective data processing.
- if you have given your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR,
- the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- in the event that there is a legal obligation for the disclosure pursuant to Art. 6 para. 1 sentence 1 lit. c GDPR and
- insofar as this is necessary for the processing of contractual relationships with you pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

We also use external service providers for the processing of our services, which we have carefully selected and commissioned in writing. They are bound by our instructions and are regularly monitored by us. With whom we have concluded order processing contracts in accordance with Art. 28 GDPR if necessary. These are service providers for web hosting, sending e-mails and maintaining and servicing our IT systems, etc. The service providers will not pass this data on to third parties.

DURATION OF THE STORAGE OF PERSONAL DATA

The duration of the storage of personal data is based on the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for contract fulfillment or contract initiation or if we have a legitimate interest in further storage, the data will be deleted if it is no longer required for these purposes or if you exercise your right of revocation or objection.

PROCESSING OF PERSONAL DATA IN CONNECTION WITH THE PURCHASE OF TICKETS

Bergson GmbH processes the personal data of customers, visitors and users within the company. Bergson GmbH maintains a database in which customers, visitors and users of the company who register or make a purchase are stored.

The database may contain personal data such as names, postal addresses, telephone numbers and e-mail addresses and, if a purchase is made, delivery, payment and purchase details, profiling based on the address and data based on the use of digital services.

Bergson GmbH collects personal information about customers and visitors in order to process orders and/or purchases via our ticket provider.

The personal data is processed in order to

- be able to deliver the ordered tickets or ordered products or services.

- Provide basic information about the service/visit/product.

- manage complaints and changes.

The legal basis is the conclusion of a purchase agreement.

STORAGE PERIOD

Until the purchase is completed (including delivery and payment) and for a period of 36 months thereafter to process any refunds.

YOUR RIGHTS

Below you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller

with regard to the processing of your personal data:

  • The right to request information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or restriction of processing.the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on the details of this. request meaningful information about its details.

  • The right, in accordance with Art. 16 GDPR, to demand the immediate correction of incorrect or incomplete personal data stored by us.

  • The right to request the deletion of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

  • The right, pursuant to Art. 18 GDPR to demand the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR have lodged an objection to the processing

  • The right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request transmission to another controller in accordance with Art. 20 GDPR

  • The right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.

  • Right to withdraw consent granted in accordance with Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal;

RIGHT TO OBJECT

If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, insofar as this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without the requirement to specify a particular situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info(at)bergson.com.

Automated decision-making

Automated decision-making or profiling in accordance withArt. 22 DSGVOdoes not take place.

Changes to our privacy policy

We reserve the right to amend or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The latest version applies to your visit.

Status of this privacy policy: 03.09.2025

DATA PROTECTION INFORMATION FOR OUR SOCIAL MEDIA CHANNELS AND CAREER NETWORKS

INTRODUCTION AND GENERAL INFORMATION

Below you will find information on the handling of your personal data that is collected through your use of our social media presences on social networks, career networks and platforms. Your data is processed in accordance with the statutory regulations.

PROVIDER

FACEBOOK FANPAGE

Responsible body

In the event that the data you provide to us is also or exclusively processed by Facebook, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland, is responsible for data processing within the meaning of the GDPR in addition to us or in our place. For this purpose, we have concluded an agreement with Facebook pursuant to Art. 26 GDPR on joint responsibility for the processing of data (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit our Facebook fan page. You can view this agreement at the following link:https://www.facebook.com/legal/terms/page_controller_addendum.

Since personal data is transferred by Facebook Ltd. to Facebook Inc. in the USA, among others, further protective mechanisms are required to ensure the level of data protection required by the GDPR. For this purpose, the provider uses standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe.

If you, as a visitor to the site, would like to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact both Facebook and us.

You can adjust your advertising settings yourself in your user account. To do this, click on the following link and log in:

https://www.facebook.com/settings?tab=adsorhttp://www.youronlinechoices.com

For further details, please refer to Facebook's privacy policy:https://www.facebook.com/about/privacy/

Facebook's data protection officer

To contact Facebook's data protection officer, you can use the online contact form provided by Facebook at the following linkhttps://www.facebook.com/help/contact/540977946302970.

Data processing for statistical purposes using Page Insights

Facebook provides so-called Page Insights for our Facebook fan page:https://www.facebook.com/business/a/page/page-insights. This is summarized data that provides information about how people interact with our page. Page Insights may be based on personal data that is collected in connection with a visit or interaction of people on or with our page and in connection with the content provided. Please note what personal data you share with us via Facebook. Your data may be processed for market research and advertising purposes, even if you are not logged in to Facebook or do not have a Facebook account. For example, user profiles can be created from user behavior and the resulting interests of users. The user profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies that are stored on your end device. Furthermore, data that is independent of the devices used by the users may also be stored in the user profiles, in particular if the users are members of the respective platforms and are logged in to them. The legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the optimized presentation of our offer, the effective information and communication with customers and interested parties as well as in the targeted placement of advertisements. Please note that we have no influence on data collection and further processing by Facebook. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by Facebook. Furthermore, we cannot make any statements about the extent to which Facebook complies with existing deletion obligations, which evaluations and links are made with the data by Facebook and to whom the data is passed on by Facebook. If you wish to avoid the processing of your personal data by Facebook, please contact us by other means.

OTHER SOCIAL MEDIA PROVIDERS AND CAREER NETWORKS

Responsible body

If your personal data is processed by a provider listed below, this provider is responsible for data processing within the meaning of the GDPR. For the assertion of your rights as a data subject, we would like to point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. If you still need help, please feel free to contact us at any time.

We have online presences on the social media platforms of the following providers:

  • Instagram Inc, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

  • Vimeo Inc, 555 West 18th Street, New York, New York 10011, USA

  • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

  • XING SE, Dammtorstraße 29-32, 20354 Hamburg, Germany

Data Protection Officer

Information on how to contact the data protection officer of the other social media providers can be found here

GENERAL INFORMATION ON SOCIAL MEDIA PLATFORMS AND CAREER NETWORKS

Responsible body

The controller for data processing within the meaning of the GDPR is the following body, insofar as the data you transmit to us via one of the social media platforms is processed by us:

Bergson GmbH
Am Bergson Kunstrakftwerk 2
81245 Munich

T + 49 89 44443480
E info@bergson.com

Our data protection officer

If you have any concerns about data processing carried out by us as the controller, you can reach our data protection officer using the following contact details

PROLIANCE GmbH /datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich
E-mail: datenschutzbeauftragter@datenschutzexperte.de

GENERAL DATA PROCESSING ON THE SOCIAL MEDIA PLATFORMS AND CAREER NETWORKS

Data processing for market research and advertising

As a rule, personal data is processed on the company website for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognize you when you visit a website. The collected data can be used to create user profiles. These are used to place advertisements inside and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the usage profiles independently of the devices you use. This is regularly the case if you are a member of the respective platforms and are logged in to them.

Data processing when contacting us

We collect personal data ourselves when you contact us, for example via a contact form or a messenger service such as Facebook Messenger. Which data is collected depends on the information you provide and the contact details you provide or share. This data is stored by us for the purpose of processing the inquiry and in the event of follow-up questions. Under no circumstances will we pass the data on to third parties without your consent. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that there are no legal storage obligations to the contrary. We assume that processing is complete if it can be inferred from the circumstances that the matter in question has been conclusively clarified.

Data processing for contract processing

If you contact us via a social network or other platform with the aim of concluding a contract for the delivery of goods or the provision of services with us, we process your data to fulfill the contract or to carry out pre-contractual measures or to provide the desired services. The legal basis for the processing of your data in this case is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it is no longer required for the performance of the contract or if it is clear that the pre-contractual measures will not lead to the conclusion of a contract in accordance with the purpose of the contact. Please note, however, that it may be necessary to store personal data of our contractual partners even after conclusion of the contract in order to comply with contractual or legal obligations.

Data processing based on consent

If you are asked by the respective providers of the platforms for consent to processing for a specific purpose, the legal basis for processing is Art. 6 para. 1 lit. a., Art. 7 GDPR. Any consent given can be revoked at any time with effect for the future.

Data transfer and recipients

When visiting and using the platforms listed above, personal data may be transferred to the USA or other third countries outside the EU, which is why further protective mechanisms are required in these cases to ensure the level of data protection provided by the GDPR. Further information on whether and which suitable guarantees the providers can provide for this can be found in the list below.

We have no influence on the processing of your personal data by the provider and how it is handled. We also have no information on this. For further information, please check the privacy policy of the respective provider and, if necessary, use the opt-out / personalization options with regard to data processing by the provider:

  • VIMEO

    • Videos from "Vimeo" are integrated on this website. "Vimeo" is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA.

    • If you have given us your consent, the processing is carried out for the optimal marketing of our offer in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

The Google Analytics tracking tool is automatically integrated for videos from "Vimeo" that are integrated on our website. We have no influence on the tracking settings and the analysis results collected via this tool, nor can we view them. In addition, web beacons are set for website visitors via the embedding of "Vimeo videos".

To prevent the setting of Google Analytics tracking cookies, you can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link:http://tools.google.com/dlpage/gaoptout?hl=de

As personal data is transferred to the USA, further protective mechanisms are required to ensure the data protection level of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and assurances from the recipient in the USA.

The purpose and scope of the data collection and the further processing and use of the data by the providers as well as your rights in this regard and setting options to protect your privacy can be found in the data protection information of "Vimeo":https://vimeo.com/privacy

Your rights

Below you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller. You have the right,

  • to request information about your personal data processed by us; Art. 15 GDPR. In particular, you can request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or restriction of processing.the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on the details of this. request meaningful information about its details.

  • to demand the immediate correction of incorrect or incomplete personal data stored by us; Art. 16 GDPR

  • to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims; Art. 17 GDPR

  • to demand the restriction of the processing of your personal data if the accuracy of the data is contested by you, the processing is unlawful but you oppose the erasure of the data and we no longer need the data, but you require it for the establishment, exercise or defense of legal claims or you have objected to processing pursuant to Art. 21 GDPR, you have objected to the processing; Art. 18 GDPR.

  • to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission to another controller; Art. 20 GDPR

  • to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or that of your usual place of residence or workplace.

  • to revoke your consent to the processing of data at any time with effect for the future; Art. 7 para. 3 GDPR. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Right to object

If your personal data is processed by us on the basis of legitimate interests in accordance with Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that this is done for reasons arising from your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right to object without the requirement of special reasons.

If you wish to exercise your right of revocation or objection, simply send an e-mail to info@bergson.com.

Storage period

The personal data collected by us will be deleted from our system if they are no longer required for the purposes specified at the time of collection or if you have exercised your right of revocation or objection. Statutory retention periods remain unaffected. We have no influence on the storage period of your data that is stored by the social media providers for their own purposes. For details, please contact them directly.

Subject to change

We reserve the right to amend or update this privacy policy if necessary in compliance with the applicable data protection regulations. In this way, we can adapt it to the current legal requirements and take into account changes to our services, e.g. when introducing new services. The latest version applies to your visit.

Status of this privacy policy: 03.09.2025

DATA PROTECTION INFORMATION FOR APPLICANTS

Thank you for your interest in working for or with our company. In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we inform you below about the processing of personal data transmitted by you as part of the application process and any personal data collected by us and your rights in this regard. To ensure that you are fully informed about the processing of personal data as part of the application process, please take note of the following information.

RESPONSIBLE BODY WITHIN THE MEANING OF DATA PROTECTION LAW

Bergson GmbH
Am Bergson Kunstrakftwerk 2
81245 Munich

T + 49 89 44443480
E info@bergson.com

CONTACT DETAILS OF OUR DATA PROTECTION OFFICER

If you have any concerns about data processing carried out by us as the controller, you can reach our data protection officer using the following contact details

PROLIANCE GmbH /datenschutzexperte.de
Data Protection Officer
Leopoldstr. 21
80802 Munich
E-mail: datenschutzbeauftragter@datenschutzexperte.de

PURPOSES AND LEGAL BASIS OF THE PROCESSING

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) for the purpose of your application for an employment relationship, insofar as this is necessary for the decision on the establishment of an employment relationship with us. The legal basis for this is Art. 88 GDPR in conjunction with Section 26 BDSG (new) and, if applicable, Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships.

Furthermore, we may process personal data about you insofar as this is necessary to fulfill legal obligations (Art. 6 para. 1 lit. c GDPR) or to defend against legal claims asserted against us. The legal basis for this is Art. 6 para. 1 lit. f GDPR; the legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). If you give us your express consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Consent given can be withdrawn at any time (see section 9 of this data protection information). Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.

If there is an employment relationship between you and us, we may, in accordance with Art. 88 GDPR in conjunction with. § 26 BDSG (new), we may continue to process the personal data already received from you for the purposes of the employment relationship, insofar as this is necessary for the performance or termination of the employment relationship or for the exercise oror for the exercise or fulfillment of the rights and obligations of the representation of employees' interests arising from a law or a collective agreement, a works or service agreement (collective agreement).

CATEGORIES OF PERSONAL DATA

We process data in connection with your application. This may include general personal data (such as name, address and contact details), information about your education, professional qualifications, professional experience or professional training, or other information that we have obtained in connection with your application.

SOURCES OF THE DATA

We process the personal data provided by you for the purpose of establishing and implementing the employment relationship.

In some cases, we also process personal data that we have received via internet research (including social media) or that has been provided to us by personnel service providers commissioned to fill vacancies.

RECIPIENTS OF THE DATA

We only pass on your personal data within our company to those areas that require this data to fulfill contractual and legal obligations or to implement our legitimate interest.

Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary to fulfill legal obligations or if you have given your consent.

TRANSFER TO A THIRD COUNTRY

A transfer to a third country is not intended.

DURATION OF DATA STORAGE

We store your personal data for as long as this is necessary for the decision on your application. Your personal data or application documents will be deleted a maximum of six months after the end of the application process (e.g. the announcement of the rejection decision), unless longer storage is legally required or permitted. We only store your personal data beyond this if this is required by law or in a specific case for the assertion, exercise or defense of legal claims for the duration of a legal dispute.

In the event that you have consented to your personal data being stored for a longer period, we will store your personal data in accordance with your declaration of consent.

If an employment relationship, training relationship or internship relationship is established following the application process, the data will - if necessary and permissible - initially continue to be stored and then transferred to the personnel file.

Following an application procedure, you may receive an invitation to join an applicant pool. This will enable us to include you in our selection of applicants for future suitable vacancies. If you give your consent, we will store your application data in our talent pool in accordance with your consent or any future consents.

YOUR RIGHTS

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.

In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

If the processing of data is based on your consent, you are entitled under Art. 7 GDPR to withdraw your consent to the use of your personal data at any time with effect for the future. Please note that we may have to retain certain data for a certain period of time in order to comply with legal requirements (section 8 of this data protection information).

RIGHT TO OBJECT

Insofar as the processing of personal data concerning you is carried out on the basis of Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, you have the right to object to the processing of this data at any time for reasons arising from your particular situation in accordance with Art. 21 GDPR. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

To protect your rights, you can contact us at any time using the above data.

NECESSITY OF THE PROVISION OF PERSONAL DATA

The provision of personal data as part of the application process is not required by law or contract. You are therefore not obliged to provide the personal data. However, the provision of personal data is necessary for the decision on an application or the conclusion of a contract of employment with us. However, you should only provide such personal data in your application as is necessary for the acceptance and execution of the application. If you do not provide us with any personal data in an application, we cannot make a decision on the establishment of an employment relationship.

AUTOMATED DECISION MAKING

The decision on your application is not based on automated processing. There is therefore no automated decision in individual cases within the meaning of Art. 22 GDPR.

RESERVATION OF THE RIGHT TO MAKE CHANGES

We reserve the right to adapt or update this information if necessary in compliance with the applicable data protection regulations. The latest version applies to your application.

Status of this privacy policy: 03.09.2025

DATA PROTECTION INFORMATION FOR CUSTOMERS / OTHER CONTRACTUAL PARTNERS AND INTERESTED PARTIES

Dear customer, dear interested party, dear contractual partner,

In accordance with the provisions of Articles 13, 14 and 21 of the General Data Protection Regulation (GDPR), we hereby inform you about the processing of your personal data and your rights under data protection law in this regard. Which data is processed in detail and how it is used depends largely on the services requested or agreed. In order to ensure that you are fully informed about the processing of your personal data in the context of the performance of a contract or the implementation of pre-contractual measures, please take note of the following information.

PURPOSES AND LEGAL BASES OF PROCESSING

We process your personal data in accordance with the provisions of the European General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG), insofar as this is necessary for the establishment, execution and fulfillment of a contract and for the implementation of pre-contractual measures. Insofar as personal data is required for the initiation or execution of a contractual relationship or in the context of the implementation of pre-contractual measures, processing is lawful pursuant to Art. 6 para. 1 lit. b GDPR.

CATEGORIES OF PERSONAL DATA

We only process data that is related to the establishment of the contract or pre-contractual measures. This may be general data about you or persons in your company (name, address, contact details, etc.) as well as any other data that you provide to us in the context of establishing the contract.

If you give us your express consent to process personal data for specific purposes (e.g. disclosure to third parties, evaluation for marketing purposes or advertising by e-mail), the lawfulness of this processing is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. Any consent given can be revoked at any time with effect for the future (see section 9 of this data protection information).

If necessary and legally permissible, we process your data beyond the actual contractual purposes to fulfill legal obligations in accordance with Art. 6 para. 1 lit. c GDPR. In addition, processing may be carried out to protect the legitimate interests of us or third parties and to defend and assert legal claims in accordance with Art. 6 para. 1 lit. f GDPR. If necessary, we will inform you separately, stating the legitimate interest, insofar as this is required by law.

SOURCES OF THE DATA

We process personal data that we receive from you in the context of establishing contact or establishing a contractual relationship or in the context of pre-contractual measures.

RECIPIENTS OF THE DATA

We only pass on your personal data within our company to those areas and persons who need this data to fulfill contractual and legal obligations or to implement our legitimate interest.

Otherwise, data will only be passed on to recipients outside the company if this is permitted or required by law, if the transfer is necessary for processing and thus for the performance of the contract or, at your request, for the implementation of pre-contractual measures, if we have your consent or if we are authorized to provide information. Under these conditions, recipients of personal data may be, for example

  • External tax consultant

  • Public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office) if there is a legal or official obligation,

  • Recipients to whom the disclosure is directly necessary for the establishment or fulfillment of a contract.

TRANSFER TO A THIRD COUNTRY

A transfer to a third country is not intended.

DURATION OF DATA STORAGE

Where necessary, we process and store your personal data for the duration of our business relationship or for the fulfillment of contractual purposes. This also includes the initiation and execution of a contract.

In addition, we are subject to various retention and documentation obligations, including those arising from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention and documentation periods stipulated there are two to ten years.

Finally, the storage period also depends on the statutory limitation periods, which, for example, according to §§ 195 ff. of the German Civil Code (BGB), are generally three years, but in certain cases can be up to thirty years.

YOUR RIGHTS

Every data subject has the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to notification under Art. 19 GDPR and the right to data portability under Art. 20 GDPR.

In addition, you have the right to lodge a complaint with a data protection supervisory authority in accordance with Art. 77 GDPR if you believe that your personal data is being processed unlawfully. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

If the processing of data is based on your consent, you are entitled to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that the revocation only takes effect for the future. Processing that took place before the withdrawal is not affected. Please also note that we may have to retain certain data for a certain period of time in order to comply with legal requirements (see section 8 of this data protection information).

RIGHT TO OBJECT

Insofar as your personal data is processed in accordance with Art. 6 para. 1 lit. f GDPR to safeguard legitimate interests, you have the right to object to the processing of this data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. We will then no longer process this personal data unless we can demonstrate compelling legitimate grounds for the processing. These must outweigh your interests, rights and freedoms, or the processing must serve the assertion, exercise or defense of legal claims.
To protect your rights, you can contact us using the contact details provided in section 1.

NECESSITY OF THE PROVISION OF PERSONAL DATA

The provision of personal data for the decision on the conclusion of a contract, the fulfillment of a contract or for the implementation of pre-contractual measures is voluntary. However, we can only make a decision within the framework of contractual measures if you provide personal data that is necessary for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures.

AUTOMATED DECISION-MAKING

In principle, we do not use fully automated decision-making in accordance with Art. 22 GDPR to establish, fulfill or implement the business relationship or for pre-contractual measures.

Status of this data protection notice: 03.09.2025