Imprint

1.1 Scope

This privacy statement applies to all pages of our online network that link to this statement.

The overarching disclosures can be found on our main privacy page.

1.2 Purpose of data collection

The purpose of the data collection is the optimization of the website, the error analysis, the individual tailoring to your needs, the offer to contact you and, if necessary, the sale of goods and services.

1.3 General information on data processing

As a matter of principle, we collect and use personal data of our users only to the extent that this is necessary for the provision of a functional website as well as our content and services or to the extent that you as a user make this data available to us through voluntary input. The collection and use of personal data by you as a user is regularly only carried out after consent or for the justification and execution of a legal transaction. An exception applies in those cases where obtaining prior consent is not possible or disproportionate for factual reasons and the processing of the data is permitted by another legal provision.

1.4 Legal basis for the processing of your data:

The processing of personal data is based on the Swiss Data Protection Act (DSG) and the European General Data Protection Regulation (DSGVO).

If the Swiss Data Protection Act applies, the legal basis for data processing is to be found in Art. 6 DSG.

Insofar as we obtain the consent of the data subject for processing operations of personal data within the scope of the GDPR, Art. 6 (1) lit. a GDPR serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DSGVO serves as the legal basis for the processing.

Legitimate interests can be in particular:

• Answering inquiries
• The implementation of direct marketing measures
• The provision of services and/or information intended for you
• The processing and transfer of personal data for internal or administrative purposes
• The operation and management of our website
• The technical support of the users
• The prevention and detection of fraud and crime
• The protection against payment defaults when obtaining credit information for requests for supplies and services
• Ensuring network and data security, to the extent that these interests are in each case consistent with applicable law and with the rights and freedom of the user
• Achieving efficiency gains by bundling services in individual Group companies (in particular marketing, IT, procurement)

1.5 Recipient categories

Service providers for website optimization, online marketing service providers and tools, service companies for information and communication technology, companies for software and equipment maintenance, partly described in more detail below social networks and communities' Internal recipients based on the "need to know" principle

Usage data/server log files

Each time you visit our website, our systems automatically collect data and information from the computer system of the calling computer.

The following types of data are collected: Browser type, version used, user's operating system, host name, Internet service provider, user's IP address, date and time of access, websites from which the user's system has accessed our website or to which the user has accessed from our website.

The legal basis for the temporary storage of the data and the log files is Art. 6 DSG as well as Art. 6 para. 1 lit. f DSGVO with the above-mentioned legitimate interests.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

The storage in log files is done to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context. Our legitimate interest in data processing also lies in these purposes. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. We further reserve the right to check the files if, based on concrete indications, there is a justified suspicion of illegal use or a concrete attack on the pages. In that case, our legitimate interest is the processing for the purpose of clarification and prosecution of such attacks and illegal uses.

1.6 Use of cookies

We use cookies. Cookies are data that are stored in the Internet browser or by the Internet browser on the user's computer system when visiting a website and can be retrieved again. Cookies can contain a characteristic string of characters that enables the browser to be uniquely identified when the website or a service integrated in it is called up again. We use cookies to enable the operation of our website (technically necessary cookies), to make our website more user-friendly (functional cookies), and for marketing and advertising purposes (advertising cookies).

Technical cookies: Some elements of our website require that the calling browser can be identified even after a page change. The purpose of their use is to enable the function of the website in the first place. Examples of technically necessary cookies are the provision of a shopping cart or the login as a registered user. The processing is therefore based on Art. 6 DSG as well as Art. 6 para. 1 lit. b or f DSGVO.

Functional cookies: There may be functions that are not absolutely technically necessary for the operation of our website, but significantly simplify its use, such as the adoption of language settings or font sizes, remembering search terms, etc. The processing is also based on Art. 6 DSG as well as Art. 6 para. 1 lit. b or f DSGVO.

Advertising cookies: On some of our websites, we also use cookies that enable an analysis of the user's surfing behavior. In this way, for example: search terms entered in search engines, frequency of page views, use of website functions, and information about operating system and browser, etc. are transmitted. The user data collected in this way is pseudonymized by technical precautions. Therefore, an assignment of the data to the calling user is no longer possible. The data is not stored together with other personal data of the users. The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 DSG and, if the user has given his consent in this regard - e.g. by selecting in a cookie opt-in banner - Art. 6 para. 1 lit. a DSGVO, otherwise Art. 6 para. 1 lit. f DSGVO in conjunction with. EC 47. If third-party services are integrated, the processing by these is governed by their respective data protection provisions, which are mentioned and/or linked below.

1.7 General statements about WebBeacons / tracking pixels

WebBeacons are invisible graphics with the size of a pixel. These are used by partner companies, in particular for the purpose of tracking a user across various web pages for profiling for use in advertising tailored to the user (targeting). A pixel embedded in the webpage is loaded from the partner's server when the webpage is called up. The partner thus receives your IP address, as well as information about your browser and its version, as well as browser plug-ins used (browser fingerprint), about your operating system and about your network operator. For the integration of external services through web beacons / tracking pixels or other scripts, the information for advertising cookies applies accordingly.

1.8 Contents of external providers

On our website, we use active JavaScript content and fonts, which may also come from external providers such as Google. By calling up our website, these providers may receive information about your visit to our website, for example by transmitting your IP address. You can prevent this transmission by installing a JavaScript blocker such as the browser plugin 'NoScript' or disabling JavaScript in your browser. However, this may lead to functional restrictions.

Some of our websites integrate third-party content within the offer, such as videos from YouTube, map material from Google Maps, images, texts and multi-media files, RSS feeds or other services from other websites. This always requires a transmission of your IP address to the providers of this content. We cannot make any statement about the use of your data by these providers and have no influence on the further processing. In particular not about whether the data is used for further purposes, such as profiling. Please refer to the corresponding data protection notices of the respective third-party providers.

One of the ways you can protect yourself against further tracking by tracking pixels from these providers is by turning off acceptance for third-party cookies in your browser settings.

The legal basis for the transmission of personal data when integrating third-party providers is Art. 6 DSG and, if the user has given his consent in this regard – e.g., by selecting in a cookie opt-in banner – Art. 6 para. 1 lit. a DSGVO, otherwise Art. 6 para. 1 lit. f DSGVO in conjunction with. EC 47.

1.8.1 Data sharing

A transfer of your personal data from us to third parties takes place only to the service partners involved in the context of the contract, such as the logistics company entrusted with the delivery and the credit institution entrusted with payment matters. In cases where your personal data is passed on to third parties, however, the scope of the data transferred is limited to the minimum required.

A transfer of your data in the above-mentioned cases is governed by the provisions of Art. 6 DSG. In the area of application of the DSGVO, a transfer only takes place if:

• you have given your express consent to this in accordance with Art. 6 (1) p. 1 lit. a DSGVO,
• the disclosure is necessary in accordance with Art. 6 para. 1 p. ;1 lit. f DSGVO for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data,
• – in the event that a legal obligation exists – for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c DSGVO, and
• this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b DSGVO for the processing of contractual relationships with you.
• consent is obtained from you to share your data with third parties as part of the ordering process.

1.8.2 Google Analytics 4

Some of our websites use Google Analytics, a web analytics service provided by Google, Inc ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity, and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics may be merged with other data from Google. The legal basis for the processing of the users' personal data is Art. 6 DSG as well as Art. 6 para. 1 lit. a DSGVO. We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under "My data", "Personal data".

You may refuse the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, thus excluding the possibility of personal references. Insofar as the data collected about you is related to a person, this is therefore immediately excluded, and the personal data is thus immediately deleted. In cases where personal data is transferred to the USA, standard contractual clauses apply.

Information of the third party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001, or Google Analytics of Google Inc (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

User conditions: https://marketingplatform.google.com/about/analytics/terms/us/
The data protection declaration: https://policies.google.com/privacy?hl=en

You have the right to revoke your consent granted in accordance with Art. 6 DSG as well as Art. 6 para. 1 lit. a DSGVO at any time. To do this, you can prevent the storage of cookies by selecting the appropriate technical settings of your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. Furthermore, you can prevent the collection of the data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en  

To prevent the collection by Google Analytics across devices, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when visiting this website. You must perform the opt-out on all systems and devices used for this to be fully effective. For more information on terms of use and data protection, please visit https://policies.google.com/

1.8.3 Google Maps

On this website we use the offer of Google Maps. This allows us to show you interactive maps directly in the website and enables you to use the map function comfortably.

By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. Personal data is transmitted to Google (IP address, time of request, content of request, amount of data transmitted, website from which the request came, language and version of the browser, information about the operating system). This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The legal basis for the data processing is Art. 6 para. 1 lit. a) DSGVO.

For more information on the purpose and scope of data collection and processing by the plug-in provider, please refer to the provider's privacy policy. There you will also find further information on your rights in this regard and setting options for protecting your privacy: https://policies.google.com/privacy?hl=en. For the exceptional cases in which personal data is transferred to the USA, standard contractual clauses apply.

1.8.4 YouTube

On some of our web pages YouTube videos are embedded, which are stored on https://www.youtube.com/ and can be played directly from our website.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, personal data (browser type, browser version, IP address, operating system) are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube to exercise this right. The images displayed on YouTube are loaded automatically via Google Photos. We have no influence on this.

For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://policies.google.com/privacy?hl=en. Für the exceptional cases in which personal data is transferred to the USA, standard contractual clauses apply.

1.8.5 Abacus Umantis AG

Our website contains links to our applicant platform Abacus Umantis AG in various places.

By visiting the website, Abacus Umantis AG receives the information that you have accessed the corresponding subpage of our website. In addition, personal data (browser type, browser version, IP address, operating system) are transmitted.

For more information on the purpose and scope of data collection and processing by Abacus Umantis AG, please refer to the privacy policy. There you will also find further information on your rights and setting options to protect your privacy: https://www.abacus.ch/en/data-protection. For exceptional cases in which personal data is transferred to the USA, standard contractual clauses apply.

1.8.6 Yousty

Our website contains links to the Swiss apprenticeship placement platform Yousty in various places.

By visiting the website, Yousty receives the information that you have accessed the corresponding subpage of our website. In addition, personal data (browser type, browser version, IP address, operating system) are transmitted.

For more information on the purpose and scope of data collection and processing by Yousty, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://www.yousty.ch/de-CH/privacy (German only).

1.9 Other ways in which we may receive your private data

1.9.1 Contact form and e-mail contact

Our website contains a contact form that can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. These data are Name, address, mail address, telephone number, etc. Not all of them must be mandatory data. At the time of sending the message, the following data will also be stored: IP address, date, and time. The other personal data processed during the sending process are used to prevent misuse of the contact form and to ensure the security of our information technology systems.

Alternatively, it is possible to contact us via the e-mail address provided. In this case, the personal data of the user transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

The legal basis for processing according to DSG is Art. 6 DSG.

The legal basis for processing in the field of application of the GDPR is:

• For the receipt of data because of sending the contact form as consent pursuant to Art. 6 para. 1 lit. a in conjunction with. Art. 5 (expected processing) DSGVO or alternatively based on the legitimate interest of answering your contact request according to Art. 6 para. 1 lit. f DSGVO.
• For the processing of data transmitted while sending an e-mail, Art. 6 para. 1 lit. f DSGVO with the above-mentioned legitimate interests.
• If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 (1) lit. b DSGVO.
• The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended and there is no reason for further storage. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. There may be retention periods under commercial and tax law.

The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

1.9.2 Data collection during registration and registered use

Some of our websites require or offer registration. The data collected in the process will be used for the purposes of using the respective websites and services, unless otherwise described and explicitly consented to during registration. The collected data results from the input mask in the context of registration, the processing is based on Art. 6 para. 1 lit. b DSGVO. All other data that you may provide later to complete your profile is optional and voluntary and based on the legal basis of Art. 6 para. 1 lit. a DSGVO. After registration, we may inform you about relevant circumstances related to our offer, for which you have registered, by means of the deposited email address.

1.9.3 Data in user-generated content

If you post comments or contributions, upload files to our servers, publish images or use other services, your IP address and - if you are logged in - your user data will be stored for our security. Due to the large amount of illegal content that is posted on the Internet every day, we reserve the right to use this information to defend ourselves in legal disputes or for criminal prosecution, i.e. also to hand it over to claimants, law enforcement agencies as well as courts. The legal basis for the content provided is Art. 6 para. 1 lit a and/or b DSGVO, for all other data collected in the process Art. 6 para. 1 lit f DSGVO.

1.10 Data sharing

If you provide us with personal data, this will only be passed on to third parties if this is necessary to process the contractual relationship or if another legal reason legitimizes this transfer. However, we provide certain services with the cooperation of service providers. We have carefully selected these service providers and taken appropriate measures to protect your personal data.

1.11 Storage periods

The personal data of the data subject shall be deleted or blocked as soon as the purpose of the storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Blocking or deletion of data also takes place when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract. 

1.12 Revocation of your consent

You can revoke your consent at any time by changing your settings.

2.1 YouTube channel

We operate one or more corporate websites on the social media network YouTube of Google Inc., in particular for self-presentation, but also for recruiting.

According to the ruling of the European Court of Justice (ECJ) of 05.06.2018, Ref. C-210/16, the operator of social media sites is at least jointly responsible for the data processing, at least in the case of Facebook fan pages, within the meaning of Art. 26 DSGVO.

We suspect an analogous applicability of this decision to other social networks, including YouTube. So far, we are not aware of YouTube offering an agreement that meets the requirements of Art. 26.

We would like to point out that you use the YouTube channel offered here and its functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g., sharing, liking, disliking, commenting).

We only process your data if you contact us via the YouTube platform. In this case, YouTube collects your data and makes it available to us.

In this case, storage and further processing by us may also take place. The processing of your personal data is then governed by one of our other data protection statements, depending on which group of data subjects you belong to.

Furthermore, we may collect data from visitors to our company website, provided that the display as a visitor can be defined as processing. However, we do not store this data on our own systems, nor are they systematically processed beyond an occasional notice.

The legal basis for the processing of personal data is, depending on the case constellation, the processing for the initiation and execution of a contract with you according to Art. 6 para. 1 lit. b) DSGVO (e.g., in case of questions about products or services) or based on our legitimate interest in communicating with users and our external presentation for the purpose of advertising pursuant to Art. 6 para. 1 lit. f) DSGVO.

If you have given your consent to the social network provider for the aforementioned data processing with effect for us, the legal basis is Art. 6 para. 1 lit. a) DSGVO.

Our information regarding the controller, the data protection officer, and the declaration of your rights as a data subject apply to these processing steps.

We point out that for any further processing on our YouTube channels, the privacy policy of Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001 or alternatively Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA is applicable.

We have no sustainable knowledge and no influence on the type and scope of the data processed by Google, the type of processing and use or the transfer of this data to third parties. We also have no effective control options available in this regard.

You can find more information about the processing of personal data by YouTube here:

User terms: https://policies.google.com/terms?hl=en

Privacy Policy: https://policies.google.com/privacy?hl=en

Standard contractual clauses apply in cases where personal data is transferred to the USA.

3.1   Information on data processing

As a customer and as an interested party or other data subject, we process your personal data primarily for the purpose of establishing and fulfilling a contractual relationship concluded with you or based on a legitimate interest. Your data will be collected, stored and, if necessary, passed on by us to the extent required to provide the contractually agreed service, to provide information, to carry out direct marketing activities or to perform other activities of our business operations. Failure to provide this information may result in the contract not being able to be concluded. In addition, we only process your data if you have consented to the processing or if another legal permission exists.

3.2    Purpose of data processing

We process your personal data to achieve the following purposes in connection with the initiation and implementation of a contractual relationship or other activities in the interest of the company:

• the identification
• communicating with business partners about services and projects and answering inquiries
• of existing customer advertising, use as selection criterion for direct marketing
• the credit check
• the management of our customer and supplier relationships
• the quality management
• the improvement and development of intelligent and innovative services
• the customer analysis for market and opinion research
• reporting on our company
• compliance with legal or contractual requirements
• Beyond that, we only process your data with your express declaration of consent.

3.3    Types of data that we process

The following personal data is processed when you actively disclose it:

Contact details; name, address, email address

3.4    Newsletter

On some of our web pages there is the possibility to subscribe to a free newsletter with promotional content. Our newsletters contain information about our service offers, promotions, events, job offers, articles. Newsletters, on the other hand, do not include messages without advertising information that are sent as part of our contractual or other business relationship. This includes, for example, the sending of service emails with technical information and queries about orders, events, competition notifications or comparable messages. When registering for the newsletter, the data from the input mask is transmitted to us. In addition, the IP address of the calling computer, as well as the time of the call are collected. For the processing of the data, your consent is obtained during the registration process and reference is made to this privacy policy. If you enter your e-mail address on our website, we reserve the right to send you newsletters with direct advertising for our own similar goods. No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data will be used exclusively for sending the newsletter. The legal basis for the processing of data after registration for the newsletter by the user is, if the user has given his consent, Art 6 DSG and Art. 6 para.1 lit. a DSGVO.

The collection of the user's e-mail address serves to deliver the newsletter. The collection of other personal data during the registration process serves to prevent misuse of the services or the e-mail address used. The subscription to the newsletter can be cancelled by the user concerned at any time. For this purpose, a corresponding link can be found in each newsletter. This also accepts a revocation of consent for the newsletter dispatch.

An evaluation of reading behavior takes place on some of our pages anonymously and to the extent that it can be determined whether the recipients have opened the newsletter and clicked on the links. This is a function that we use, however, only to check user activity and to be able to make appropriate optimizations. For this purpose, the newsletter contains a so-called "web beacon", a pixel-sized file that is retrieved from our server when the newsletter is opened. This web beacon is also anonymized.

When you apply for a position in our company, we process and store your personal data. We take your privacy very seriously and would therefore like to inform you at this point about the handling of your applicant data.

Our online application portal is operated by Abacus Umantis AG, Unterstrasse 11, CH-9001 Saint Gallen. Abacus Umantis AG only provides software and computing capacity and otherwise has no influence on the application process. This is order processing in accordance with Art. 9 DSG or Art. 28 DSGVO. This data is stored at Abacus Umantis AG exclusively for technical reasons and is not assigned to a specific person at any time.

4.1    Purpose of data collection

Before you join our company or during the application process, we process your personal data exclusively for the purpose of establishing a contractual relationship to the extent necessary.

4.2   Types of data that we process

The following types of personal data are regularly processed:

• Applicant data: name date of birth, curriculum vitae, citizenship/work permit, etc. for selection, recruitment, entry and exit management
• Private contact details; address, telephone number, e-mail (for the purpose of contact)
• Data within the scope of personnel screening (e.g., police clearance certificate, background check)
• If applicable, data that are subject to professional secrecy, e.g., data on health suitability and any restrictions
• Other data in the personnel administration: severe disability (if relevant), driver's license ownership
• Video/image data
• We do not require any information from you that is not usable under the General Equal Treatment Act (AGG) (race, ethnic origin, gender, pregnancy, details of physical or mental illness, membership of a trade union, religion or belief, disability, age, sexual identity, or sex life).

We ask that such data not be transmitted to us. The same applies to content that is likely to infringe third-party rights (e.g., copyrights, ancillary copyrights or other intellectual property rights, personal rights, press law or general third-party rights).

4.3    Legal bases of processing according to the GDPR:

• For the establishment, performance, and termination of a contractual relationship pursuant to Art. 6 para. 1 lit.b) in conjunction with. §26 BDSG (version as of 25.5.2018),
• to fulfill a legal obligation according to Art. 6 para. 1 lit.c),
• in the case of processing for the protection of a legitimate interest pursuant to Art. 6 para. 1 lit. f),
• as well as on the basis of consent from you by voluntarily providing data that is not absolutely necessary for the purpose (such as hobbies in the curriculum vitae)
• (however, such a data protection is generally not required for the conclusion of a contract or the continuation of an existing contract) according to Art. 6 (1) lit a).

Our legitimate interests in this respect lie, for example, in

• the optimization and implementation of the application processes,
• achieving efficiency gains by bundling services in individual Group companies (in particular personnel, IT),
• ensuring compliance with safety regulations, requirements, industry standards and contractual obligations,
• the assertion, exercise, or defense of legal claims,
• the prevention of damage and/or liability to the company by taking appropriate measures.

4.4    Recipient categories

Internal recipients according to the "need to know" principle,

Companies affiliated under company law (group companies) as jointly responsible parties:

The essential contents of the regulation of the tasks regarding the rights of data subjects can be requested at the indicated contact address, however, according to Art. 26 (3) GDPR, these rights can be claimed by data subjects from all involved companies.

Processor pursuant to Art. 28 GDPR within the EU or in countries with an adequate level of data protection

Processor pursuant to Art. 28 GDPR within the EU or in countries with an adequate level of data protection.

4.5    Deletion periods

After the respective purpose has been achieved, your data will be deleted. However, data will be retained as long as necessary for the defense of legal claims. The storage period is usually 6 months. If your profile was transmitted to us by a personnel service provider and there are commission claims of this service provider, the storage period may be until their fulfillment or expiry. If accounting-relevant processing has been carried out, such as the reimbursement of travel expenses, the data required for this will be deleted in compliance with the statutory retention periods, usually 6 or 10 years. If the application was successful and we conclude a contract with you, we transfer the data collected during the application process to our personnel file.

For employees, please refer to Gruner's internal privacy policy.