Privacy Policy

I. GENERAL INFORMATION ON DATA PROTECTION

 

I.1 Infor­ma­tion about the Data Controller

EFG EnerLog GmbH
Konsul-Smidt-Str. 8d
28217 Bremen
Germany

We attach parti­cular importance to protec­ting your personal data. Your personal data is processed in accordance with the data protec­tion regu­la­tions, in parti­cular the General Data Protec­tion Regu­la­tion of the Euro­pean Union (GDPR) and the German Federal Data Protec­tion Act (BDSG).

The follo­wing infor­ma­tion provides an over­view of the nature, extent and purpose of coll­ec­ting, proces­sing and trans­fer­ring personal data as well as the safety measures deployed to protect these data.

Personal data are indi­vi­dual infor­ma­tion on personal or factual circum­s­tances of an iden­ti­fied or iden­ti­fiable natural person such as e.g. your name, address, tele­phone number, your date of birth as well your e‑mail and IP address.

I.2 Legal basis for the proces­sing of personal data

  • As far as we obtain a consent of the data subject for the proces­sing of personal data, Art. 6 (1) a GDPR serves as legal basis. You can with­draw this proces­sing at any time in accordance with Art. 7 (3) GDPR.
  • Art. 6 (1) b GDPR serves as legal basis for the proces­sing of personal data required for the perfor­mance of a contract or for the execu­tion of pre-contrac­tual measures.
  • If proces­sing of personal data is neces­sary for compli­ance with a legal obli­ga­tion to which our company is subject, Art. 6 (1) c GDPR serves as legal basis.
  • If the proces­sing is neces­sary for the preser­va­tion of the legi­ti­mate inte­rest of our company or of a third party and if the funda­mental rights and free­doms of the person concerned do not predo­mi­nate, Art. 6 (1) f GDPR serves as legal basis for proces­sing. In this case, you have the right of objec­tion accor­ding to Art. 21 GDPR.

I.3 Data dele­tion and storage period

Personal data will be deleted as soon as the purpose for storage no longer applies. Due to legal reten­tion periods, we may be obliged to store the data for a longer period of time.

I.4 Your Rights

Upon written request, we will inform you in accordance with Art. 15 GDPR and in accordance with our legal obli­ga­tion under Art. 12 GDPR whether and which of your personal data is processed or stored by us. Further­more, you have the right to have incor­rect data corrected in accordance with Art. 16 GDPR, data trans­fera­bi­lity in accordance with Art. 20 GDPR, blocking and dele­tion of your personal data in accordance with Art. 17 GDPR – provided that there are no legal storage obli­ga­tions to the contrary – as well as the right to rest­rict proces­sing in accordance with Art. 18 GDPR. In addi­tion, you have the right to contact the compe­tent super­vi­sory autho­rity pursuant to Art. 77 GDPR.

IN ADDITION, YOU HAVE THE RIGHT TO OBJECT PURSUANT TO ART. 21 GDPR, PROVIDED THAT THE PROCESSING RELATES TO LEGITIMATE INTERESTS ACCORDING TO ART. 6 ABS. 1 LIT. F GDPR.

If you have given us your consent to process your data, you may of course with­draw this consent for the future at any time in accordance with Art. 7 (3) GDPR.

If you have any ques­tions regar­ding the proces­sing of your personal data, you can contact our data protec­tion officer, who is ready to assist with any enqui­ries, sugges­tions and complaints that you may have.

Data protec­tion officer of

EFG EnerLog GmbH
Konsul-Smidt-Str. 8d
28217 Bremen
Germany

E‑Mail: datenschutz@ems-fehn-group.de

II. PRIVACY POLICY WEBSITE

II.1 Provi­sion of the website

Use of hosting service provi­ders

Our website is hosted on servers of a hosting provider, which is located in the EU, based on an order proces­sing accor­ding to Art. 28 GDPR. Within the scope of its services, the hosting service provider may have access to personal data of our users, in parti­cular to tech­nical data, which arise within the scope of the tech­nical commu­ni­ca­tion between you and our website (e.g. server log files). However, he may not use them for his own purposes. The use of a hosting service provider is based on our legi­ti­mate inte­rests pursuant to Art. 6 (1) f GDPR in the provi­sion of infra­struc­ture and plat­form services, compu­ting capa­city, e‑mail dispatch and secu­rity services.

Server Logs

When you visit our website or use our services the device used for acces­sing the site auto­ma­ti­cally trans­mits log data (connec­tion data) to our servers. The rele­vant infor­ma­tion consists of:

  • The browser and its version number,
  • The opera­ting system and its version number,
  • The referrer URL, which is the website you visited before swit­ching to our website,
  • The date and time of access to our website,
  • The name of the subpages,
  • The corre­spon­ding IP address,
  • The amount of data trans­mitted.

The data coll­ected are used exclu­si­vely for evalua­ting the data statis­ti­cally to ensure opera­tion and safety and to opti­mise proces­sing of the offer. For secu­rity grounds, however, we reserve the right to inspect log files retroac­tively if we have suffi­cient grounds to suspect illegal usage. The data will be stored for 7 days. This coll­ec­tion is carried out on the basis of our legi­ti­mate inte­rest under Art. 6 (1) f GDPR.

Cookies

In several areas of the website we use so-called “cookies”, for example to iden­tify the prefe­rences of the users and thus to opti­mally design the website. This allows for easier navi­ga­tion and a high degree of user-friend­li­ness of the website. The use of cookies pres­ents a legi­ti­mate inte­rest under Art. 6 (1) f GDPR (inte­rest in the analysis, opti­miza­tion and economic opera­tion of our online services). In addi­tion, Art. 6 (1) a EU GDPR provides the legal basis if we require your consent for the use of cookies (for marke­ting or analysis purposes, etc.).

Cookies are small files, which are stored on the visitor’s hard disk drive. Cookies do not damage your computer and do not contain viruses. Most cookies used on the website are so-called “session cookies”. They are auto­ma­ti­cally deleted after the end of your visit. Other cookies stay on your devices and make it possible for your browser to be reco­g­nised the next time you visit. These files can be used, for example, to display infor­ma­tion on the page that is speci­fi­cally tail­ored to your inte­rests.

You can change the proper­ties of your browser so that it informs you of the place­ment of cookies. In this way, the use of cookies is made trans­pa­rent. If you fully oppose the use of cookies, you may not be able to use indi­vi­dual func­tions of this website.

Secu­rity of Your Data

We deploy tech­nical and orga­ni­sa­tional secu­rity measures to adequa­tely protect the data that you have made available to us from being unin­ten­tio­nally or inten­tio­nally mani­pu­lated, lost, destroyed or accessed by unaut­ho­rised persons. Ther­e­fore, we are using SSL encryp­tion for the trans­mis­sion of confi­den­tial content e.g. enquires which you send to us as the site operator. An encrypted connec­tion can be reco­g­nised when the web address changes from „http://“ to „https://“ and a padlock symbol is shown in your browser bar. When SSL encryp­tion is acti­vated, third parties cannot read the data that you transmit to us. Our secu­rity measures are kept up-to-date.

II.2 Contact us

If you contact us (e.g. via contact form, e‑mail, tele­phone, social media), your personal data will be stored and processed by us for the purpose of proces­sing the enquiry and any related follow-up ques­tions pursuant to Art. 6 (1) b GDPR (within the frame­work of pre-contrac­tual / contrac­tual measures) or pursuant to Art. 6 (1) f GDPR (general enqui­ries). This data is not trans­ferred to third parties without your consent.

The data entered into the contact form remain with us until you request that they be deleted, you with­draw your consent to the storage of your data, or the purpose of the data storage is no longer given (i.e. after the successful proces­sing of your request), provided there are no legal storage obli­ga­tions to the contrary.

II.3 Regis­tra­tion on our Website

When you sign up on our website to order goods, services and infor­ma­tion in our online portal, personal data will be coll­ected. Signing up allows you to access services and contents which are only available to regis­tered users. If needed, regis­tered users have the possi­bi­lity to alter or delete data provided in the frame­work of regis­tra­tion at any time. Where appro­priate, your data used for proces­sing orders are trans­mitted to ship­ping and payment provi­ders commis­sioned by us. Your personal data are not disse­mi­nated to third parties in any other way. The proces­sing of your personal data is carried out within the frame­work of imple­men­ting the contract (in accordance with Art. 6 (1) b GDPR). Dele­tion of your data is carried out in accordance with the appli­cable statu­tory reten­tion periods.

II.4 News­letter

When you subscribe to our news­letter on our website we use the personal data you provide only for distri­bu­ting the news­letter.

The subscrip­tion to our news­letter takes place by way of the double opt-in process. This means that upon signing up you receive an email that requests you to confirm your subscrip­tion. This confir­ma­tion is neces­sary to prevent the use of third-party email addresses. The subscrip­tions to our news­letter are recorded so that the subscrip­tion process can be retraced in accordance with legal requi­re­ments (consent pursuant to Art. 6 (1) lit. a) GDPR). This includes the logging of the time of subscrip­tion, the time of confir­ma­tion and the IP address.

Any data that we obtain from you as well as the logging infor­ma­tion will not be disse­mi­nated to third parties. Your consent to the coll­ec­tion and storage of your data as well as their usage for the distri­bu­tion of the news­letter can be with­drawn at any time without stating any reasons. A link to cancel your subscrip­tion can be found at the end of every news­letter.

II.5 Analysis-Tools

The analysis measures listed below and used by us are carried out on the basis of Art. 6 (1) a GDPR (consent). With the use of these analysis measures, we want to ensure that our website is desi­gned to meet requi­re­ments and is conti­nuously opti­mised. Using the analysis tools, we record the use of our website under a pseud­onym and evaluate it for the purpose of opti­mi­sing our services.

You can with­draw this proces­sing at any time in accordance with Art. 7 (3) GDPR.

Google Tag Manager
This website uses Google Tag Manager. Google Tag Manager is a solu­tion offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland, with which the company can admi­nister website tags via an inter­face. The tool itself (which imple­ments the tags) is a cookie-free domain that coll­ects no personal data. Google Tag Manager trig­gers other tags which may collect data. Google Tag Manager does not access this data. If on the domain or the cookie level a deac­ti­va­tion is confi­gured by the user, such deac­ti­va­tion is retained for all tracking tags that were imple­mented with Google Tag Manager. The tags used are named sepa­ra­tely below and can be indi­vi­du­ally edited by you in the privacy settings, for example by deac­ti­vating cookies for these elements. Further infor­ma­tion http://www.google.com/tagmanager/use-policy.html

Google Analy­tics
This website uses the func­tions of the web analysis service Google Analy­tics. It is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. Google Analy­tics uses so-called “cookies”. These are text files which are stored on your computer and make it possible to analyse your use of the website. Dele­tion of the user and results data takes place after 14 months.

IP Anony­mi­sa­tion

We have acti­vated an IP anony­mi­sa­tion func­tion on this website. Through this, Google shor­tens your IP address prior to its transfer to the USA provided that you are within a member states of the Euro­pean Union or in another contrac­ting state to the Agree­ment on the Euro­pean Economic Area. In excep­tional circum­s­tances only, the full IP address is trans­mitted to a server of Google in the USA and shor­tened there. Google uses this data on behalf of the website operator to evaluate the use of the website, to compile reports about website acti­vi­ties and to provide other website services related to website and internet usage on behalf of the website provider. Your IP address, coll­ected in the context of Google Analy­tics, is not combined with other data provided by Google.

Browser Plugin / Preven­tion of data coll­ec­tion

You can prevent the storage of cookies with the appro­priate settings in your browser. Please note, however, that if you do so not all features of the website will be available to you. Further­more, you can prevent Google from gaining access to the data created by the cookie and your usage data (incl. your IP address) and prevent Google from proces­sing such data by down­loa­ding the follo­wing plug-in for your browser: https://tools.google.com/dlpage/gaoptout?hl=en
More infor­ma­tion regar­ding the hand­ling of user data by Google Analy­tics is available at Google under the follo­wing link: https://support.google.com/analytics/answer/6004245?hl=en

Order Proces­sing

We have entered into a data proces­sing contract with Google and we strictly apply the regu­la­tions of the super­vi­sory autho­ri­ties when using Google Analy­tics.

II.6 Contents and Services of Third Parties

Based on the legi­ti­mate inte­rest of the provider accor­ding Art. 6 (1) f GDPR, a situa­tion can arise where contents, services and bene­fits of third parties are inte­grated which comple­ment our service offe­rings. With the use of the follo­wing services, we want to ensure a custo­mised design and the conti­nuous opti­mi­sa­tion of our website.

Google Maps

We use the map service Google Maps on our website to display maps. Google Maps is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. Within the frame­work of the services, infor­ma­tion on the use of our website are trans­ferred to Google servers. The use of Google Maps serves the inte­rest of an appe­aling presen­ta­tion of our online offers and an easy finding of the places indi­cated by us on the website.

Detailed infor­ma­tion can be found in the Data Privacy Centre under google.com: Trans­pa­rency and choice http://www.google.com/intl/en/privacy/ and data privacy provi­sions http://www.google.com/intl/en/privacy/privacy-policy.html 

Google reCAPTCHA

We use “Google reCAPTCHA” (herein­after “reCAPTCHA) on our website. reCAPTCHA is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland (“Google”). In order to ensure suffi­cient data secu­rity when forms are trans­mitted, we use the Google reCAPTCHA service in certain cases. This serves above all to diffe­ren­tiate whether the input is made by a natural person or whether it is misused by mecha­nical and auto­mated proces­sing. To this end, reCAPTCHA analyses the beha­viour of the website visitor on the basis of various charac­te­ristics. This analysis starts auto­ma­ti­cally as soon as you visit the website. For analysis purposes, reCAPTCHA evaluates various infor­ma­tion (e.g. IP address, length of stay of the website visitor on the website or mouse move­ments made by the user).

However, if IP anony­mi­sa­tion is enabled on this website, Google will previously trun­cate your IP address within member states of the Euro­pean Union or other signa­tory states to the Agree­ment on the Euro­pean Economic Area. Google uses this infor­ma­tion to evaluate your use of this service. The IP address trans­mitted by your browser as part of reCAPTCHA is not merged with other data from Google. These data are subject to the diffe­ring data protec­tion regu­la­tions of Google. The proces­sing takes place on the basis of our legi­ti­mate inte­rest to protect our web offers from abusive auto­mated spying and from SPAM.

Further infor­ma­tion regar­ding Google reCAPTCHA as well as Google’s Data Privacy Policy can be found under the follo­wing links. https://www.google.com/intl/en/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

Google Web Fonts

In order to promote the consis­tent presen­ta­tion of fonts, this site uses so-called web fonts which are made available by Google. When visi­ting a web page, your browser down­loads the required web fonts into its cache so that texts and type­faces are rendered correctly.

To this end, your browser must connect with Google servers. Thereby, Google becomes aware that our website has been accessed using your IP address. The use of Google Web Fonts is carried out for the sake of a uniform and appe­aling presen­ta­tion of our online offer. This is considered legi­ti­mate inte­rest under Art. 6 (1) f GDPR. If your browser does not support web fonts, a stan­dard font from your computer is used instead.

Further infor­ma­tion on Google Web Fonts are available under https://developers.google.com/fonts/faq and Google’s Data Privacy Policy: https://www.google.com/policies/privacy/.

Google Tag Manager

The Google Tag Manager is used on our website. The Google Tag Manager is a solu­tion from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland with which we can manage website tags via one inter­face. The tool itself (which imple­ments the tags) is a cookie-free domain that does not collect any personal data. The Google Tag Manager trig­gers other tags, which in turn may collect data. The Google Tag Manager does not access this data. If the user has made a deac­ti­va­tion at the domain or cookie level, this remains in effect for all tracking tags that are imple­mented with Google Tag Manager. The tags used are named sepa­ra­tely below and you can edit them indi­vi­du­ally in the data protec­tion settings, for example by deac­ti­vating cookies for these elements. More infor­ma­tion: https://www.google.com/policies/privacy/.

YouTube

On our website videos of the plat­form YouTube are inte­grated. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 Ireland. Videos are inte­grated into our website via the extended data protec­tion mode. The domain will be replaced by the offi­cial YouTube Nocookie domain. When this variant is used, infor­ma­tion about visi­tors to the website is only stored when the video is played. As with most websites, YouTube makes use of cookies to gather infor­ma­tion about the visi­tors to their website. YouTube uses these to collect video statis­tics, to prevent fraud and to improve user expe­ri­ence. Further infor­ma­tion regar­ding privacy on YouTube can be found at: http://www.youtube.com/t/privacy_at_youtube. There you will also find further infor­ma­tion about your rights and possible settings to protect your privacy.

Links to websites of third parties

Based on the legi­ti­mate inte­rest of the provider, it may occur that contents, services and bene­fits of third parties are inte­grated which comple­ment our service offe­rings. When you access web pages which are linked on this website, infor­ma­tion such as your name, IP address, browser details etc. can retrieved again. This Privacy State­ment does not govern the coll­ec­tion, disse­mi­na­tion or the proces­sing of personal data by any third parties. In this regard, please also pay atten­tion to the indi­vi­dual privacy state­ments of the respec­tive third-party provi­ders and service provi­ders to which we link on our website.

II.7 Social Media

We main­tain publicly acces­sible online presences in social networks to commu­ni­cate with the custo­mers and inte­rested parties active there and to present our services.

We would like to point out that user data may be processed outside the area of the Euro­pean Union. Further­more, user data is usually processed for market rese­arch and adver­ti­sing purposes. To the best of our know­ledge, the provi­ders also use cookies, which store your usage beha­viour (even across diffe­rent end devices). This enables us to play out targeted adver­ti­sing within our own plat­form as well as on third-party sites.

The proces­sing of users‘ personal data is carried out on the basis of our legi­ti­mate inte­rests in provi­ding users with effec­tive infor­ma­tion and commu­ni­ca­ting with users in accordance with Art. 6 (1) f GDPR. If the users are asked by the respec­tive provi­ders of the plat­forms for consent to data proces­sing or if the user volun­t­a­rily sends infor­ma­tion to our online presences, the legal basis for proces­sing is Art. 6 (1) a GDPR in conjunc­tion with Art. 7 GDPR. If such infor­ma­tion contains contract-rele­vant contents, Art. 6 (1) b GDPR serves as the legal basis.

For a detailed repre­sen­ta­tion of the respec­tive proces­sing and the possi­bi­li­ties of objec­tion (Opt-Out), we refer to the follo­wing linked infor­ma­tion of the provi­ders.

Also, in the case of requests for infor­ma­tion and the asser­tion of user rights, we point out that these can be asserted most effec­tively with the provi­ders. Only the provi­ders have access to the data of the users and can directly take appro­priate measures and give infor­ma­tion. Should you nevert­heless need help, you can contact us.


Face­book Fanpage

If you interact with our Face­book fan page (comment, link posts or send us a message) your data will be stored by us.

The opera­tion of a fan page is a joint respon­si­bi­lity under data protec­tion law between Face­book Ireland Ltd. and our company pursuant to Art. 26 GDPR. Accor­dingly, we have concluded an agree­ment with Face­book Ireland in which the respec­tive obli­ga­tions under the GDPR are regu­lated: https://www.facebook.com/legal/terms/….

The legal bases for the proces­sing of the data are:

  • If you „like“ a contri­bu­tion from us, comment on it or upload content to our Face­book page, Art. 6 (1) a GDPR serves as the legal basis. You can with­draw this proces­sing for the future at any time in accordance with Art. 7 (3) GDPR by dele­ting the comment or content.
  • If you send us a contract-rele­vant inquiry, Art. 6 (1) b GDPR serves as the legal basis.

Face­book provides fan page opera­tors with statis­tics and insights into the types of actions our fan page visi­tors take („Page Insights“). We have no control over the coll­ec­tion of this infor­ma­tion by Face­book. Accor­ding to Face­book, this infor­ma­tion is provided to us anony­mously so that the user cannot be iden­ti­fied from the infor­ma­tion.

Personal data is deleted as soon as the purpose for which it was stored no longer applies. Storage can also take place if this is provided for by statu­tory reten­tion obli­ga­tions to which our company is subject.

Please note that when you use and access our Face­book page, your personal data will also be processed by the provider „Face­book“. Face­book is operated by Face­book Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, and by US-based Face­book Inc., 1601 Willow Road, Menlo Park, Cali­fornia 94025, USA. Face­book processes your data in addi­tion to the above-mentioned proces­sing for analysis and adver­ti­sing purposes. To the best of our know­ledge, Face­book also uses cookies to remember your usage patterns (even across diffe­rent devices). This enables Face­book to play targeted adver­ti­sing on its own plat­form and on third-party sites. Further infor­ma­tion can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/. Face­book also offers the possi­bi­lity to object to certain data proces­sing; rele­vant notices and opt-out options can be found at: https://www.facebook.com/settings?tab=ads=ads. Please note that in accordance with Face­book Privacy Policy, user data is also processed in the United States or other third count­ries. Face­book only trans­fers user data to count­ries for which a Euro­pean Commis­sion adequacy decision pursuant to Art. 45 GDPR has been issued or on the basis of suitable guaran­tees pursuant to Art. 46 GDPR. With regard to data proces­sing via our Face­book fan page, you have the option of asser­ting your data subject rights against Face­book as well. Further infor­ma­tion can be found in Facebook’s privacy policy: https://www.facebook.com/about/privacy/

II.8 Minors

We prin­ci­pally address adult persons with our online offer. Personal infor­ma­tion of persons under 16 years of age may only be made available to us with the explicit consent of their legal guar­dian (Art. 8 GDPR). Proces­sing without the consent of the legal guar­dian is not permitted. We ther­e­fore reserve the right to delete all data rela­ting to minors unless we have the consent of a parent or guar­dian.

III. Infor­ma­tion for appli­cants

III.1 Purpose and legal basis for the coll­ec­tion and proces­sing

Your data will be processed by us for the purpose of proces­sing your appli­ca­tion in accordance with Art. 88 GDPR i. c. w. § 26 BDSG-neu. If special cate­go­ries of personal data within the meaning of Art. 9 (1) GDPR are volun­t­a­rily commu­ni­cated as part of the appli­ca­tion proce­dure, their proces­sing is also carried out in accordance with Art. 9 (2) b GDPR.

III.2 Reci­pient of your data

The reci­pient of your data is the human resource depart­ment involved in the recrui­ting process (bewerbung@ems-fehn-group.de) of the respon­sible entity. Your data will be treated strictly confi­den­tial and will not be passed on to third parties without your consent. A transfer to third count­ries or inter­na­tional orga­niza­tions is not intended.

III.3 Storage of your data

Your appli­ca­tion data will be deleted 180 days after filling the posi­tion. If you are inte­rested in future vacan­cies, we need your written consent for longer storage of your appli­ca­tion docu­ments. You can with­draw this consent at any time for the future in accordance with Art. 7 (3) GDPR. To do so, please send an e‑mail with a corre­spon­ding note to the contact address given above.

IV. Infor­ma­tion for busi­ness part­ners

IV.1 Purpose and legal basis for the coll­ec­tion and proces­sing

The primary purpose of data proces­sing is the crea­tion, execu­tion or termi­na­tion of the contrac­tual rela­ti­onship. The primary legal basis for this is Art. 6 (1) b GDPR. Without this type of use of your data, the busi­ness rela­ti­onship exis­ting between you and us cannot be carried out.

We also process your data on the basis of Art. 6 (1) f GDPR to protect our legi­ti­mate inte­rests or those of third parties (e.g. public autho­ri­ties). This may be neces­sary, for example, to main­tain IT secu­rity and IT opera­tions or for purposes of corpo­rate manage­ment, internal commu­ni­ca­tion and other admi­nis­tra­tive purposes. You can object to this proces­sing by giving special reasons in accordance with Art. 21 GDPR.

In addi­tion, we process your data to fulfil legal obli­ga­tions, such as regu­la­tory requi­re­ments, commer­cial and tax law storage obli­ga­tions or docu­men­ta­tion obli­ga­tions. The legal basis for this is Art. 6 (1) c GDPR in conjunc­tion with the natio­nally appli­cable laws.

In indi­vi­dual cases, it may also happen that we process your data on the basis of your sepa­ra­tely granted consent in accordance with Artt. 6 (1) a, 7 GDPR (e.g. in the context of regis­tering for our news­letter or publi­shing photo and video recor­dings). You are always free to decide whether you wish to give your consent. Once you have given your consent, you can with­draw it at any time with effect for the future. To do so, please send corre­spon­ding enqui­ries to the contact address given above.

Should we process your personal data for a purpose not mentioned above, we will inform you of this in advance. 

IV.2 Reci­pient of your data

Within our company, only those persons receive your personal data who need it to fulfil our contrac­tual and legal obli­ga­tions. In addi­tion, we some­times use diffe­rent service provi­ders to fulfill these obli­ga­tions, so that it may be neces­sary to transfer your personal data to other reci­pi­ents outside the company to the extent neces­sary to fulfill our contrac­tual and legal obli­ga­tions. These third parties can be, for example, autho­ri­ties, finan­cial insti­tu­tions, suppliers, etc.

To process your data tech­ni­cally, we some­times use external service provi­ders. It is possible that we may transfer and process your data outside the country in which you have your resi­dence / company head­quar­ters or in one of the count­ries in which we operate. These may also be located outside the Euro­pean Economic Area. If we transfer personal data to service provi­ders or compa­nies outside the Euro­pean Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commis­sion as having an adequate level of data protec­tion or if other appro­priate data protec­tion guaran­tees (e.g. binding internal company data protec­tion regu­la­tions or EU stan­dard contrac­tual clauses) are in place. You can also request detailed infor­ma­tion by using the contact infor­ma­tion above.

IV.3 Storage of your data

We store your personal data only as long as they are neces­sary for the above-mentioned purposes. After termi­na­tion of the contrac­tual rela­ti­onship, your personal data will be stored for as long as we are legally obliged to do so. This regu­larly results from legal obli­ga­tions to provide evidence and to retain data, which are regu­lated in the German Commer­cial Code and the German Fiscal Code, among others. The storage periods there­after are up to ten years. In addi­tion, personal data may be stored for the time during which claims can be made against us (statu­tory limi­ta­tion period of three or up to thirty years).