Privacy Policy

Preliminary remark

Every company that processes personal data must provide data protection notices in order to fulfil the statutory information requirements of the General Data Protection Regulation (GDPR). This also applies to Energy Consult GmbH

The data protection notice serves to transparently inform the persons concerned, i.e. customers, suppliers, interested parties and all other persons whose personal data is processed by Energy Consult GmbH, about the processing of this data. This data protection notice provides information about the processing of personal data when using the online services of Energy Consult GmbH, in particular via the website, but also via email contact or the use of social media services.

1. Introduction

1.1 Scope of application

Data protection is a top priority for us. Energy Consult GmbH processes your personal data exclusively within the framework of the applicable data protection laws, in particular the General Data Protection Regulation (GDPR). In the following, we inform you about the mode, scope and purposes of the processing of your personal data in accordance with Art. 13 GDPR. This privacy policy applies to the processing of personal data when you use our website, when you contact us via other communication channels and when your data is processed in the processes of customer service, contact management and project management. Using the table of contents, you can find the aspects of the processing of data by Energy Consult GmbH and its subsidiaries in which you are interested. If you have any further questions, please do not hesitate to contact us.

1.2 Controller

The controller within the meaning of the data protection regulations for the processing of personal data is:

Energy Consult GmbH
Otto-Hahn-Str. 12–16
D-25813 Husum

Further contact information can be found in the provider identification ('Legal Notice') of this website.

1.3 Data protection officer

You can reach our company data protection officer at

PNE AG
Company data protection officer
Oberbaumbrücke 1
D-20457 Hamburg
Email: datenschutz@pnegroup.com
Telephone: 0049 (0)151-55840922

2. Definitions of terms

In this data protection notice, we use certain terms that also appear in the General Data Protection Regulation (GDPR). For a better understanding, we are providing explanations of the terms used below.:

2.1 Personal data

Personal data means any information relating to an identified or identifiable natural person. A person is considered identifiable if they can be directly or indirectly identified - for example, by reference to a name, an identification number, location data, an online identifier (such as IP addresses or cookies) or specific characteristics that reflect the physical, physiological, genetic, mental, economic, cultural or social identity of that person.

2.2 Processing

The term processing refers to any activity involving the handling of personal data. This includes all processes – regardless of whether they are automated or not. Examples include the collection, storage, modification, use, transmission, publication, erasure or destruction of data.

2.3 Controller

A controller is a natural or legal person, public authority, organisation or other body which, alone or jointly with others, determines the purposes and means of the processing of data. The controller must take appropriate organisational and technical measures to ensure that the processing of personal data complies with legal requirements and is regularly reviewed.

2.4 Processor

A processor is a person, organisation, authority or other body that processes personal data on behalf of the controller. The processor acts on the basis of the controller's instructions.

2.5 Recipient

The recipient is any natural or legal person, public authority or other body to whom personal data is disclosed. This applies regardless of whether it is a third party or not. However, authorities that request personal data as part of statutory investigation mandates are not considered recipients under data protection law.

2.6 Third party

A third party is any natural or legal person, public authority or body other than the data subject, the controller or the processor. Persons who are authorised to process data under the direct supervision of the controller or a processor are also not considered third parties.

2.7 Consent

Consent is a central element of self-determination under data protection law. It represents the voluntary and conscious consent of the data subject to have their personal data processed. Consent must be given unambiguously - either in the form of a written declaration or by another confirmatory act. Any consent given can be withdrawn at any time.

3. General information on data processing

3.1 Scope of the processing of personal data

Personal data is information about your identity. This includes, for example, information such as name, address, telephone number or email address. We process the personal data of our interested parties, customers and suppliers only to the extent necessary to provide a functional website or to offer our services. As a rule, such data is processed if the data subject has given their prior consent. However, personal data may also be processed on other legal bases.

3.2 Legal bases for the processing of personal data

Personal data is only processed on the basis of a valid legal basis in accordance with the EU General Data Protection Regulation (GDPR):

• If a data subject has consented to the processing of personal data, the processing is based on Art. 6 para. 1 lit. a GDPR.
• In the case of processing operations that are necessary for the initiation or fulfilment of a contract to which the data subject is party, we rely on Art. 6 para. 1 lit. b GDPR.
• If the processing is necessary on the basis of a legal obligation to which we are subject, Art. 6 para. 1 lit. c GDPR forms the legal basis.
• In cases where vital interests of the data subject or another natural person require processing, this is done on the basis of Art. 6 para. 1 lit. d GDPR.
• If the processing is based on our legitimate interest, whereby the interests, fundamental rights and freedoms of the data subject do not prevail, Art. 6 para. 1 lit. f GDPR serves as the basis for data processing.

We will inform you at the relevant points in this privacy policy of the legal basis on which your personal data is processed.

3.3 Storage and erasure of personal data

Personal data will be erased or blocked as soon as the purpose for which it was collected no longer applies. Any further storage will only take place if it is required by legal provisions of the European Union or national law to which we are subject. If legally stipulated storage periods expire, the data will also be erased or blocked, unless its further storage is necessary for the fulfilment of a contract or for the implementation of pre-contractual measures.

3.4 Disclosure of personal data

Your personal data will only be passed on to third parties if this is necessary for the purpose of carrying out the data processing set out below or if you have previously consented to the transfer. We only disclose personal data about interested parties, customers or suppliers if we are obligated to do so by law or by a court order or if the disclosure is necessary to enforce or protect our contractual obligations. This also applies accordingly with regard to the storage of data. The data is not disclosed for commercial purposes.

For certain processing activities, we use external service providers that we select with due care. If personal data is transferred to these service providers as part of so-called order processing, this is done in accordance with the requirements of Art. 28 GDPR. Our processors are contractually bound by our instructions and are regularly monitored by us. We only work with partners who are demonstrably able to meet the requirements of the GDPR and the Federal Data Protection Act (BDSG) and ensure the protection of your rights through suitable technical and organisational measures. Our processors or other third parties may not use the data for other purposes. Our employees and the employees of the companies commissioned by us are committed by us to maintain confidentiality.

3.5 Data transfer to third countries

The General Data Protection Regulation (GDPR) ensures a uniformly high level of data protection within the European Union. Therefore, when selecting our service providers and co-operation partners, we generally prefer European providers if the processing of your personal data is necessary. Processing outside the European Union or the European Economic Area only takes place in exceptional cases and in connection with the use of third-party services.

Processing of your data in a so-called third country is only permitted on condition that the strict requirements of Art. 44 et seq. GDPR are fulfilled. As a rule, we obtain your express consent for this in accordance with Art. 49 para. 1 lit. a GDPR. Alternatively, processing can be carried out on the basis of special guarantees. Such guarantees can be, for example, an officially recognised equivalence of the level of data protection by the EU Commission, as guaranteed by the Data Privacy Framework (DPF), or the application of so-called 'standard contractual clauses', which are officially recognised contractual obligations.

3.6 Profiling and automated decision-making

At Energy Consult GmbH, personal data is neither used for automated decision-making nor for profiling in accordance with Art. 22 GDPR.

4. Rights of data subjects

You have the right to receive information about the origin, recipient and purpose of personal data stored concerning you free of charge and at any time. You also have the right to request the rectification, blocking or erasure of this data. You can contact us at any time if you have further questions on the subject of data privacy. You also have the right to lodge a complaint with the competent supervisory authority.

4.1 Right of access

In accordance with Art. 15 GDPR, you have the right to obtain information on the personal data concerning you, its origin and recipients and the purpose of the data processing, free of charge and at any time .

4.2 Right to rectification

If your data is not (or no longer) correct, you can request a rectification in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed. If we have passed on your data to third parties, we will inform these third parties of the rectification - if this is required by law.

4.3 Right to erasure

The stored personal data will be erased in accordance with Art. 17 GDPR after expiry of the statutory retention periods. Stored personal data will also be erased if you withdraw your consent to storage and there is no other legal basis for the storage, if knowledge of the data is no longer required to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons, unless statutory retention requirements prevent erasure, in which case processing will be restricted (blocked) instead of erased.

Stored personal data will also be erased if your personal data has been processed unlawfully or must be erased in order to comply with legal requirements. In the event that erasure cannot be realised or can only be realised with disproportionate effort, processing shall be restricted instead of erased.

4.4 Right to restriction of processing

You have the right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR. You can contact us at any time for this purpose. The right to restriction of processing  applies in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to check this. While the check is ongoing, you have the right to request that the processing of your personal data be restricted.
• If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of erasure.
• If we no longer need your personal data, but you need it for the exercise, defence or assertion of legal claims, you have the right to request the restriction of the processing of your personal data instead of its erasure.
• If you have lodged an objection in accordance with Art. 21 (1) GDPR, your interests must be weighed against ours. As long as it has not yet been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data - apart from its storage - may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

4.5 Withdrawal of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw any consent you have already given at any time in accordance with Art. 7 (3) GDPR. All you need to do is to notify us by sending an informal email. The lawfulness of the data processing carried out until its withdrawal remains unaffected by the withdrawal.

4.6 Right to object to the collection of data

If the data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, you have the right to object to the processing of your personal data at any time in accordance with Art. 21 GDPR for reasons arising from your particular situation. If you lodge an objection, we will no longer process your personal data concerned unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or if the processing is required for the establishment, exercise or defence of legal claims.

4.7 Objection to advertising emails

We hereby object to the use of contact data published in the context of the imprint obligation to send unsolicited advertising and information material. Energy Consult GmbH expressly reserves the right to take legal action in the event of the unsolicited sending of advertising material, such as spam emails.

4.8 Right to data portability

In accordance with Art. 20 GDPR, you have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract provided to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.

4.9 Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR, in particular in the Member State of your habitual residence, place of work or place of the alleged violation. The right to lodge a complaint exists notwithstanding other administrative or judicial remedies.

A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html

5. Online offers

5.1 Visits to our website

Purpose of data processing and data categories

If you only use the website for information purposes, i.e. if you do not transmit any other information to us, only the personal data that your browser transmits to the server will be processed when you visit this website. The data collected is used exclusively to provide and improve the content and functionality of our websites.

When you visit our website, information is transmitted that we need in order to display and provide you with our webpages, such as

• Browser type/version
• The current IP address of the Internet connection you are using
• Operating system you are using
• Referrer URL (the previously visited page)
• Date and time of the server request

As a rule, this data cannot be assigned to a specific person; it is not merged with other data sources.

Legal basis for data processing

The legal basis for the processing of personal data is Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest lies in the secure, stable and efficient provision of the functions of the website and the information that can be accessed via it. If we fulfil an existing contractual obligation towards you by providing the website, the legal basis is Art. 6 para. 1 lit. b GDPR.

Duration of storage

The data collected will be erased after a statistical analysis at the end of the session.

Disclosure of data to third parties

This data will not be passed on to third parties unless there is a legal obligation to pass it on or it serves the purpose of criminal prosecution.

5.2 Contact form

Purpose of data processing and data categories

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. We do not pass on this data without your consent.

Legal basis for data processing

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, provided that your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if this has been requested.

Duration of storage

We will retain the data you provide on the contact form until you request its erasure, withdraw your consent for its storage, or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

Disclosure of data to third parties

Your data will not be passed on to third parties.

Objection and withdrawal

Your consent to the processing of personal data on the basis of the use of our contact form can be withdrawn at any time.

5.3 Cookie consent

Purpose of data processing and data categories

Our Internet pages use so-called 'cookies'. Cookies are small text files and do not cause any damage to your end device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device.

Cookies have various functions. Many cookies are technically necessary, as certain website functions do not work without them. Other cookies are used to evaluate user behaviour or display advertising. In some cases, cookies from third-party companies may also be stored on your end device when you use our website (third-party cookies). They enable us or you to use certain services of the third-party company. If cookies are used by third-party companies or for analysis purposes, we will ask for your consent.

Legal basis for data processing

If consent to the storage of cookies and comparable recognition technologies has been requested, the processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR).

Energy Consult GmbH has a legitimate interest in the storage of cookies necessary for the technically error-free and optimised provision of its website. Cookies that are required to carry out the electronic communication process, to provide certain functions that you have requested or to optimise the website (e.g. cookies to measure the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified.

Essential cookies are used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c GDPR in conjunction with § 25 para. 1 TDDDG.

These cookies are absolutely necessary for the operation of our website. They enable basic functions such as page navigation, access to secure areas of the website or the storage of your data protection settings. The website cannot function properly without these cookies.

Duration of storage

Essential cookies are only stored for as long as is necessary for the respective purpose. As a rule, they are deleted automatically when the browser is closed (session cookie). Some cookies can also have a fixed lifespan (e.g. 1 year for storing cookie consent)

Disclosure of data to third parties

The data stored in essential cookies will not be passed on to third parties unless this is absolutely necessary to fulfil the purpose. In these cases, the processing is carried out on the basis of a data processing contract in accordance with Art. 28 GDPR.

We have concluded an data processing contract with Agentur Nordzuwort . Meldorfer Str. 22, D-25770 Hemmingstedt.

This is a contract required by data protection law that ensures that the processor only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

Objection and withdrawal

You can set your browser so that you are informed about the placement of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, this may restrict the functions of this website.

If you wish to revoke this consent, simply delete the cookie in your browser. If you then re-enter/reload the website, you will be asked for your cookie consent again.

You can find detailed information on the cookies we use in the tables below:

5.4 Google Tag Manager

Purpose of data processing and data categories

We use web analysis services on our website in order to better understand user behaviour, to technically optimise the website and to design our content in line with requirements. In particular, the following data is collected and processed:

• IP address (shortened/anonymised)
• Pages visited and duration of visit
• Referrer URL (e.g. via which link the website was accessed)
• Device type, operating system and browser type
• Date and time of access

Legal basis for data processing

Your data is processed on the basis of Art. 6 para. 1 lit. a GDPR – i.e. on the basis of your consent, which is obtained via the consent management tool implemented on the website. No web analysis takes place without your active consent.

Duration of storage

The data collected is anonymised and stored for a period of three years. It is then automatically deleted. No storage is performed beyond this time period.

Disclosure of data to third parties

To manage website tags, we use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is a solution that enables us to manage website tags via an interface and thus integrate additional services into our online offering. Tags are small pieces of code that record your activities on our website, for example. For this purpose, JavaScript code sections are inserted into the source code of our website.

The Tag Manager tool itself (which implements the tags) therefore does not yet create any user profiles and does not store any cookies. The tool triggers other tags, which in turn can collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, this will continue to apply to all tracking tags implemented with Google Tag Manager. The Google Tag Manager itself does not process any personal data. It is used exclusively to efficiently integrate and control other tools (e.g. Google Analytics).

We have concluded a data processing agreement (DPA) with Google Ireland Limited. This is a contract prescribed by data protection law, which ensures that the data controller processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Objection and withdrawal

You have the right to withdraw your consent to the processing of your personal data at any time. The cancellation can be made via the consent banner integrated on the website. There you can change your selection and completely deactivate the analysis.

5.5 Use of Borlabs Cookie

Purpose of data processing and data categories

The Borlabs Cookie plugin is used on our website to manage your consent to the storage of certain cookies and the use of external services in accordance with the General Data Protection Regulation (GDPR). The plugin sets a technically necessary cookie (“Borlabs cookie”) to save your selected cookie settings and, if necessary, to control other categories such as “Statistics”, “Marketing” or “External media”.

Our website uses Borlabs's consent technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in accordance with data protection regulations. Provider of this technology:

Borlabs - Benjamin A. Bornschein
Rübenkamp 32
22305 Hamburg
Germany
https://borlabs.io/

Essential cookies include cookies that are absolutely necessary for the operation and security of our website. Without these cookies, our website will not work or will only work to a limited extent. Consent is not required for essential cookies.

The following categories of data are processed:

• Consent status and selected cookie categories
• Time of consent or refusal
• IP address
• Technical metadata for cookie management
• Browser and device settings (e.g. user agent)

Legal basis for data processing

This data is stored on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in a data protection-compliant, user-friendly design of the website). In the case of active consent, processing is also carried out on the basis of Art. 6 para. 1 lit. a GDPR.

Duration of storage

The data collected is stored until you ask us to erase it, delete the Borlabs cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

The stored consent data will be stored for as long as is necessary to prove consent, usually for 12 months or until you delete the “Borlabs cookie” from your browser yourself.

Disclosure of data to third parties

The data collected by Borlabs Cookie is not passed on to third parties. All data processing is performed locally on our web server or via our hosting provider, with whom a processing contract has been concluded in accordance with Art. 28 GDPR.

Objection and withdrawal

When you access our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents is stored. This data is not forwarded to the provider of Borlabs Cookie.

5.6 Use of WPML

Purpose of data processing and data categories

Our website uses the plugin WPML (provider: OnTheGoSystems Ltd, 22/F 3 Lockhart Road, Wanchai, Hong Kong) to offer content in multiple languages. WPML saves user preferences for the selected language via a technically necessary cookie.

This cookie is required so that the previously selected language is retained when navigating between pages or when visiting the website again. In order to retain the language selected by the user – both during the visit and in future sessions – WPML stores corresponding information in the browser locally in the form of an essential cookie.

The following categories of data are processed:

• Language settings selected by the user (language/locale)
• Reference information about visited pages (for voice control)
• Technical browser information (e.g. HTTP header)

Legal basis for data processing

Your data will only be processed in this context with your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can access this consent via the consent banner on our website. No tracking is carried out without your consent.

Duration of storage

The cookies set by conversion tracking generally lose their validity after 30 days and are not used for personal identification. The data collected by Google may also be stored for longer. However, this is done exclusively in anonymised form.

Disclosure of data to third parties

The data collected by the WPML cookie is not passed on to third parties. All the data processing is performed locally on our web server or via our hosting provider, with whom a processing contract has been concluded in accordance with Art. 28 GDPR.

Objection and withdrawal

You can set your browser so that you are informed about the placement of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, this may restrict the functions of this website.

5.7 Google Analytics

Purpose of data processing and data categories

This website uses Google Analytics, a web analytics service provided by Google Inc (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyse how users use the site.

The following data is collected:

• IP address of the accessing device (shortened/anonymised)
• Visited pages
• Date and time of access
• Time spent on the website
• Click paths and interactions
• Origin (referrer URL)
• Device type, browser type, operating system
• Screen resolution
• Location data (based on IP, only approximate)

Legal basis for data processing

The data is processed on the basis of Art. 6 para. 1 lit. a GDPR (consent). The collection and processing of the aforementioned data by Google Analytics only takes place with your express consent via our consent management tool. No data is collected by Google Analytics without your consent.

Duration of storage

The data collected via Google Analytics is stored by us for a period of 14 months. It is then automatically deleted. The cookies set by Google Analytics have different durations, which can be viewed in detail on our consent tool.

Disclosure of data to third parties

The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

However, if IP anonymisation is activated on this website, your IP address will first be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.

Data Privacy Framework is certified and thus offers an adequate level of data protection in accordance with Art. 45 GDPR.

Objection and withdrawal

Please note that you can withdraw your consent at any time with effect for the future in accordance with Art. 7 GDPR. The cancellation only affects future data processing. The lawfulness of the processing carried out on the basis of your consent up to the revocation remains unaffected (Art. 7 para. 3 sentence 2 GDPR).

In addition, in accordance with Art. 21 GDPR, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation, provided that this is done on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest).

Since the processing in the case of Google Analytics is based on your consent (Art. 6 para. 1 lit. a GDPR), the right of cancellation is primarily relevant.

5.8 Use of Google Maps and Google Fonts

Google

Purpose of data processing and data categories

Our website uses the map service Google Maps. To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transferred to a Google server in the USA and stored there. We have no influence on this data transmission. If Google Maps is activated, Google may use Google Web Fonts for the purpose of standardising the display of fonts. When you call up Google Maps, your browser loads the required Google fonts into your browser cache in order to display texts and fonts correctly. Google Fonts also enables the standardised display of fonts on our website.

Legal basis for data processing

The use of Google Maps and Google Fonts is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG.

Duration of storage

The specific data collected by Google Maps and Google Fonts and their storage periods is the responsibility of Google. Further information on data processing by Google can be found at: https://policies.google.com/privacy

We ourselves do not store any personal data in this context.

Disclosure of data to third parties

Google Maps is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When using the service, data may be transmitted to servers of the parent company Google LLC based in the USA.

Objection and withdrawal

You can withdraw your consent to the processing of your personal data at any time with effect for the future. This can be done via the settings of the consent banner. After cancellation, Google Maps will no longer be displayed on our website and data will no longer be transmitted to Google.

5.9 Social media (Xing, LinkedIn)

Purpose of data processing and data categories

We use XING, a service of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, and LinkedIn, a service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, to communicate with you and other interested parties and to inform you about us, for example about our business activities or job vacancies.

The respective service provider may store cookies on your computer in which the usage behaviour is saved. This user data is anonymised and aggregated by XING/LinkedIn and made available to us for analysis. In addition, we only process the data records that you make available to us via XING/LinkedIn.

Legal basis for data processing

The legal basis for the processing of personal data in the context of the provision of the XING or LinkedIn service is Art. 6 para. 1 lit. f GDPR. Our interest lies in informing you about current vacancies. It is also possible that we would like to inform you about current events using this service.

If you also provide data records via XING/LinkedIn, the legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR. If we use information provided by you to establish, implement or process a contractual relationship, the legal basis is Art. 6 para. 1 lit. b GDPR, in the case of employment relationships Art. 6 para. 1 lit. b GDPR in conjunction with Section 26 BDSG.

LinkedIn does not share any personal data with us, but only offers anonymised reports on the website target group and display performance. LinkedIn also offers the option of retargeting via the Insight Tag. We use this data to display targeted advertising outside our website without identifying you as a website visitor. Further information on data protection at LinkedIn can be found in the LinkedIn privacy policy at

https://de.linkedin.com/legal/privacy-policy?

The processing takes place on the legal basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time via our Consent Management Tool.

Duration of storage

We delete the data that you provide to us via LinkedIn as soon as the purpose no longer exists. Since contacting us via LinkedIn can serve various purposes, the duration of storage essentially depends on the purpose for which you contact us. The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymised data will then be deleted within 180 days.

Disclosure of data to third parties

As a rule, we do not pass on data that we have received from you via XING/LinkedIn to third parties.

Objection and withdrawal

Data processing based on consent can be withdrawn at any time. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal. You can also prevent data processing by not clicking on the XING/LinkedIn icon on our website or visiting our channel via XING/LinkedIn.

5.10 YouTube

Purpose of data processing and data categories

On our website, we embed videos from YouTube, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are embedded in extended data protection mode. According to YouTube, a connection to the YouTube servers is only established when the video is played.

The following cookies are used:

• IP address
• Device information
• Referrer URL, if applicable
• Interactions with embedded content
• Google cookies for user tracking, if applicable

Legal basis for data processing

The processing of personal data in connection with the integration of YouTube videos is based on the following legal provisions:

Art. 6 para. 1 lit. a GDPR – consent

As soon as you play an embedded YouTube video on our website, you expressly consent to the processing of your personal data by Google/YouTube. This consent is given via our cookie consent tool (e.g. Borlabs Cookie) by selecting the category “External media”.

This is voluntary, informed and explicit consent that can be withdrawn at any time with effect for the future. Without this consent, no YouTube videos will be displayed and no corresponding cookies will be set.

This legal basis is used because cookies and tracking technologies are used when the videos are played which are not necessary for the technical operation of the website and therefore require prior consent.

Duration of storage:

YouTube and Google can set various cookies, e.g.:

• YSC (session)
• PREF (up to 8 months)
• VISITOR_INFO1_LIVE (approx. 6 months)

Disclosure of data to third parties

The data may be transmitted to servers of Google LLC in the USA. The transmission may take place on the basis of your express consent.

Objection and withdrawal

Data processing based on consent can be withdrawn at any time. The lawfulness of the data processing operations already carried out remains unaffected by the withdrawal. You can also prevent data processing by not clicking on the XING/LinkedIn icon on our website or visiting our channel via XING/LinkedIn.

Last updated: 12.09.2025