WM GROUP GmbH
Privacy policy
This is a translation of the German privacy information. In the event of any discrepancy, the German version shall prevail.
Privacy information pursuant to Art. 13 of the General Data Protection Regulation (hereinafter: GDPR)
With the following privacy information, we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of the processing either alone or jointly with others.
In addition, we inform you below about the third-party components that we use for optimisation purposes and to increase the quality of use, insofar as third parties in turn process data under their own responsibility as a result.
With regard to the terms used below, e.g. “personal data”, “processing”, “controller” etc., reference is made to the definitions in Art. 4 GDPR.
1. General notes and mandatory information
1.1 Controller
for data processing within the meaning of data protection law is:
WM GROUP GmbH
Am Gut Baarking 21
46395 Bocholt
Phone: +49 2871 289-100
Email: info@wm-group.com
1.2 Processing of personal data
In order to provide the functions and services of our digital offerings, it is necessary for us to collect personal data about you. Personal data is data with which you can be personally identified. Below we explain which data we collect about you, why this is necessary and what rights you have with regard to your data.
1.2.1 Legal bases
We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG. Data processing by us only takes place on the basis of a statutory permission. When you use this website, we process personal data
- only with your consent (Art. 6(1)(a) GDPR),
- to perform a contract to which you are a party or, at your request, to carry out pre-contractual measures (Art. 6(1)(b) GDPR),
- to fulfil a legal obligation (Art. 6(1)(c) GDPR) or
- if the processing is necessary to safeguard our legitimate interests or the legitimate interests of a third party, unless your interests or fundamental rights and freedoms which require the protection of personal data override them (Art. 6(1)(f) GDPR).
1.2.2 Data storage
Except where the following information states otherwise, your personal data will be erased or blocked as soon as you withdraw the consent you gave for the processing or the purpose of the storage no longer applies or the data is no longer required for the purpose, unless its further retention is necessary for evidential purposes or statutory retention obligations preclude this.
1.2.3 Disclosure of data
Beyond this, personal data will not be disclosed without your express consent pursuant to Art. 6(1)(a) GDPR, unless
- there is a legal obligation pursuant to Art. 6(1)(c),
- this is required, by law and pursuant to Art. 6(1)(b) GDPR, for the handling of contractual relationships or
the disclosure is necessary pursuant to Art. 6(1)(f) GDPR for the establishment, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed.
1.2.4 Transfer of data outside the EU
As a matter of principle, no personal data is transferred to countries outside the European Economic Area and associated countries (no “third-country transfer”). Should this become necessary, we will inform you separately.
1.2.5 Minors
Our services are not directed at children under the age of 16. We do not knowingly collect data from children under the age of 16. If you have not yet reached this age limit, do not use the services and do not provide us with your personal data.
1.3 Rights of data subjects
Within the framework of the applicable statutory provisions, you have the right at any time to
- free-of-charge access (Art. 15 GDPR) to your stored personal data, its origin and recipients and the purpose of the data processing and
- where applicable, a right to rectification (Art. 16 GDPR),
- erasure (Art. 17 GDPR),
- blocking (Art. 18 GDPR) or
- portability (Art. 20 GDPR) of this data.
1.3.1 Withdrawal of consent given
Furthermore, you have the right to withdraw your declaration of consent under data protection law (Art. 6(1)(a) GDPR) at any time (Art. 7(3) GDPR). An informal notification to us by email is sufficient for this. The lawfulness of the data processing carried out until the withdrawal remains unaffected by the withdrawal.
1.3.2 Objection to processing
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6(1)(f) GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds for this arising from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right to object, which we will implement without you having to state a particular situation. If you wish to exercise your right to object, an email to us is sufficient.
1.4 Contact for data protection
For questions about the collection, processing or use of your personal data and for access, rectification, blocking or erasure of data, please contact our external data protection officer:
Uwe Drath
Logata Digital Solutions GmbH
Hindenburgstraße 19
46395 Bocholt
Email: dsb@logata.com
1.5 Right to lodge a complaint with the supervisory authority
If you believe that the processing of your data violates data protection law or that your rights under data protection law have otherwise been infringed in any way, you can lodge a complaint with the competent data protection authority (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestr. 2-4, 40213 Düsseldorf).
1.6 Changes to the privacy information
We reserve the right to change our security and data protection measures insofar as this is necessary due to technical and legal developments. In such cases, we will also adapt our privacy information accordingly. Please therefore refer to the current version of our privacy information.
Last amended: September 2026
2. Privacy information for our website
2.1 Website usage data
Each time a user accesses our site, data about the access to our offering is recorded automatically. This data is collected by our web space provider and comprises so-called server log files. The access data recorded includes the name of the web page accessed, the date and time of access, the referrer URL (the previously visited page), the web browser used, the IP address and the country from which the request originated. Our web space provider acts on behalf of the controller, bound by its instructions and in its name, pursuant to a data processing agreement in accordance with Art. 28(3) GDPR.
The processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used in any other way. However, we reserve the right to check the server log files retrospectively should specific indications point to unlawful use.
The collection of the data for the provision of the website and the storage of the data in log files is strictly necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
The log file data is generally stored for 30 days; connection data is erased immediately after the HTTP/S request has been completed.
2.2 Communication channels
2.2.1 Enquiry by email, phone or fax
If you contact us by email, phone or fax, your enquiry, including all personal data arising from it (name, enquiry), will be stored and processed by us for the purpose of handling your request. In this context, the data is not disclosed to third parties.
This data is processed on the basis of Art. 6(1)(b) GDPR if your enquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6(1)(a) GDPR) and/or on our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective handling of the enquiries addressed to us.
The data you send to us will remain with us until you ask us to erase it, withdraw your consent to its storage or the purpose for the data storage no longer applies (e.g. after your request has been dealt with). Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.
2.2.2 Contact form
For questions of any kind, we also offer you the option of contacting us via a form provided on the website. If you send us enquiries via the contact form, your details from the contact form will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. In this context, the data is not disclosed to third parties.
The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR and, where applicable, Art. 6(1)(b) GDPR if your enquiry is aimed at concluding a contract or carrying out pre-contractual measures.
The data you enter in the contact form will remain with us until you ask us to erase it or the purpose for the data storage no longer applies (e.g. after your enquiry has been dealt with). Mandatory statutory provisions, in particular retention periods, remain unaffected.
2.2.3 Publication of job advertisements and online applications
We process the personal data you provide in the course of the application procedure only for the purpose of the effective and correct handling of the application procedure and for making contact in the course of the application process, on the basis of Art. 6(1)(b), 88 GDPR in conjunction with Section 26 BDSG.
For online applications, we use the external service provider Jobcluster Deutschland GmbH, Fuldaer Straße 13, 36124 Eichenzell, which processes the data strictly in accordance with instructions within the framework of processing on our behalf pursuant to Art. 28(3) GDPR. All data you enter is forwarded to us. We use the service provider on the basis of our legitimate interests (pursuant to Art. 6(1)(f) GDPR) in the efficient and professional conduct of the online application procedure.
If your job application is rejected, the data you have transmitted will be erased three months after notification of the rejection. This does not apply if longer storage is necessary due to legal requirements (for example the burden of proof under the General Act on Equal Treatment) or if you have expressly agreed to longer storage in our database of prospective candidates.
Further information on how we process your data in the application procedure can be found in a separate mandatory information sheet, which you will receive with the confirmation of receipt of your application.
2.3. Cookies, tracking, plugins, external content (embedded functions)
A web browser cookie is a small text file that is sent by a website to your computer or mobile device, where it is stored by your web browser. Web browser cookies can store information such as your IP address or another identifier, your browser type and information about the content that you view and interact with on the digital services. By storing such information, web browser cookies can store your preferences and settings for online services and analyse how you use online services.
You can prevent or restrict the installation of cookies by means of a setting in your internet browser. You can also delete cookies that have already been stored at any time. However, the steps and measures required for this depend on the internet browser you actually use and are described in the help function of the respective web browser. If you prevent or restrict the installation of cookies, this may, however, mean that not all functions of our website can be used to their full extent.
There are also other technologies that can be used for similar purposes, such as web beacons, Flash cookies, HTML 5 cookies and embedded plugins/scripts.
In principle, you can also visit our website without using embedded functions. The technically necessary technologies are excluded from this. Insofar as it includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG, the use of these technologies takes place pursuant to Section 25(2) sentence 2 TDDDG or Art. 6(1)(f) GDPR on the basis of our legitimate interest in a user-friendly design of our website.
2.3.1 Consent banner (consent management)
Our website uses a consent management platform (consent banner) to obtain your consent to the use of embedded functions in your browser that are not technically necessary and to document it in compliance with data protection law. The “Consent Banner” is used to obtain the consents required by law for the use of embedded functions.
When you visit our website, a cookie is stored in your browser in which the consents you have given or the withdrawal of these consents are stored. The data collected is stored until you ask us to erase it or delete the cookie yourself, or until the purpose for the data storage no longer applies. Mandatory statutory retention periods remain unaffected.
The legal basis for this is Art. 6(1)(c) GDPR; insofar as this includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG, the technical necessity pursuant to Section 25(2) TDDDG applies. The embedded functions and the current settings can be viewed and changed at any time HERE in the “Consent Banner”.
2.3.2 Google Tag Manager (management of website tags)
We use Google Tag Manager on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Tag Manager is a service for managing website tags. Via Google Tag Manager, tracking or analysis tools and other technologies can be integrated into our website and managed. Google Tag Manager itself does not create any user profiles, does not store any cookies and does not carry out any independent analyses. It serves exclusively for the technical delivery and management of the integrated services. However, Google Tag Manager does record your IP address, which may also be transferred to Google’s parent company in the United States. There is no general adequacy decision of the EU Commission for the USA.
However, Google LLC is certified under the EU-US Data Privacy Framework. For data transfers to companies certified accordingly, the EU Commission has adopted an adequacy decision pursuant to Art. 45 GDPR. In this case, an adequate level of data protection is ensured.
We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. Google processes the personal data exclusively on our behalf and in accordance with our instructions and takes appropriate technical and organisational measures to ensure the protection of the data.
The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) sentence 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG. The current consent settings can be viewed and changed HERE in the “Consent Banner”.
Further information on data protection at Google can be found at: https://policies.google.com/privacy
2.3.3 Google Analytics (web analytics)
On our website we use a tracking tool (hereinafter “Google Analytics”) of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. As a result, your interactions as a user with our website are recorded and systematically evaluated. The purpose of the processing of your personal data by the Google Analytics service is the analysis of the interaction of our website visitors with our website. By evaluating the data obtained in this way, we can optimise our offering and increase user-friendliness.
Google Analytics may use cookies and similar technologies that enable an analysis of the use of our website. This may result in a transfer of personal data to Google LLC, based in the USA. There is no general adequacy decision of the EU Commission for the USA. However, Google LLC is certified under the EU-US Data Privacy Framework. For data transfers to companies certified accordingly, the EU Commission has adopted an adequacy decision pursuant to Art. 45 GDPR. In this case, an adequate level of data protection is ensured.
We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR. Google processes the personal data exclusively on our behalf and in accordance with our instructions and takes appropriate technical and organisational measures to ensure the protection of the data.
The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) sentence 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG. The current consent settings can be viewed and changed HERE in the “Consent Banner”.
Further information on data protection at Google can be found in Google’s privacy policy at: https://marketingplatform.google.com/about/analytics/terms/de/
2.3.4 Google Ads (conversion tracking and remarketing)
On our website we use Google Ads, an online advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). With Google Ads, we can display advertisements in Google Search as well as on websites and within Google services. We use Google Ads in particular to draw attention to our offerings and to increase the reach of our website.
We also use Google Ads conversion tracking to measure whether users carry out certain actions on our website after clicking on a Google advertisement placed by us. This may be, for example, accessing a particular page, an enquiry, a registration, a purchase or making contact. If you reach our website via a Google ad placed by us, Google may store a cookie or a comparable technology on your terminal device. This enables Google and us to recognise that you reached our website via a Google ad and whether a particular action was subsequently carried out. In particular, the following information may be processed in this context: information about the access to and use of our website, information about pages accessed and actions carried out, information about interactions with our advertisements, IP address or information derived from it, information on the browser, operating system and terminal device used, referrer information, cookie and other online identifiers and, where applicable, information about the completion of a conversion.
In addition, we also use Google Ads for remarketing or personalised advertising. In this context, visitors to our website may be assigned to target groups in order to show them advertising tailored to their interests on Google services or in the Google advertising network. For this purpose, information about the use of our website and about certain interactions with our content may be processed. Under certain circumstances, Google may link this information with further information that Google processes, for example, on the basis of the use of other Google services. For this purpose, information about your visit to our website and your interactions with our content may be processed. Google may link this information with further data that Google processes, for example, on the basis of your use of other Google services.
In the course of using Google Ads, personal data may be transferred to companies of the Google group in countries outside the European Union or the European Economic Area, in particular to the USA. Insofar as personal data is transferred to third countries, this takes place on the basis of the safeguards under data protection law applicable in each case. These may include, in particular, an adequacy decision of the European Commission or appropriate standard data protection clauses.
The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) sentence 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG. The current consent settings can be viewed and changed HERE in the “Consent Banner”.
You can influence the personalisation of advertising by Google via the corresponding settings of your Google account or via the setting options provided by Google. Further information on the processing of personal data by Google can be found at: https://policies.google.com/privacy
2.3.5 LinkedIn Insight Tag (conversion tracking and remarketing)
We use the LinkedIn Insight Tag on our website, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The LinkedIn Insight Tag enables us to analyse the use of our website in connection with our LinkedIn advertising campaigns and to measure the effectiveness of our advertising.
We use the LinkedIn Insight Tag in particular for the following purposes: measuring and analysing the effectiveness of our LinkedIn advertisements (conversion tracking), creating statistical evaluations of visitors to our website, determining whether users carry out certain actions on our website after contact with a LinkedIn advertisement, creating target groups for LinkedIn advertising and, where applicable, remarketing and optimising our advertising campaigns and our online offering.
When you visit our website, the following information, among other things, may be transmitted to LinkedIn via the LinkedIn Insight Tag: URL accessed, referrer URL (via which you reached our website), IP address, information about the device and browser used (user agent), time of the website visit and information about actions carried out or conversions.
In the course of using the LinkedIn Insight Tag, data is transferred to LinkedIn. LinkedIn also processes data on servers in the USA. LinkedIn states that it complies with the EU-US Data Privacy Framework and uses it as the basis for certain transfers of personal data from the EU or the EEA to the USA.
The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) sentence 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG. The current consent settings can be viewed and changed HERE in the “Consent Banner”.
Further information on the processing of personal data by LinkedIn can be found at: https://de.linkedin.com/legal/privacy-policy
2.3.6 Meta Pixel (conversion tracking and remarketing)
On our website we use the Meta Pixel (formerly Facebook Pixel), a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). With the help of the Meta Pixel, we can understand how visitors use our website, in particular which actions are carried out after accessing our website. This enables us to measure the effectiveness of our advertisements on Meta’s platforms (e.g. Facebook and Instagram) and to target our advertising more specifically at interested persons.
When the Meta Pixel is used, the following information in particular may be recorded and transmitted to Meta: information about the access to and use of our website, pages visited and actions carried out, information on the devices and browsers used, IP address or information derived from it, referrer information, information about advertisements via which you reached our website and a pixel ID provided by Meta or cookie or comparable identifiers.
When Meta services are used, a transfer of personal data to countries outside the European Union or the European Economic Area, in particular to the USA, cannot be ruled out. Meta bases transfers of personal data to third countries in particular on the appropriate safeguards recognised by the European Commission, insofar as these apply in the specific case, in particular an adequacy decision or appropriate standard data protection clauses.
The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) sentence 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG. The current consent settings can be viewed and changed HERE in the “Consent Banner”.
Further information on data processing by Meta can be found in Meta’s privacy information at https://www.facebook.com/privacy/policy/
2.3.7 Leadinfo (B2B visitor recognition)
We use the lead generation service (hereinafter “Leadinfo”) of Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands.
Leadinfo recognises visits by companies to our website on the basis of IP addresses. For this purpose, the IP address is compared with publicly accessible company databases. If the IP address can be assigned to a company, company-related information such as company name, address and industry is processed. The processing takes place exclusively on servers within the European Union.
With the help of Leadinfo, we receive information about companies that visit our website and about their interests and usage behaviour on our website. This serves to identify potential business customers in the context of B2B lead generation.
We have concluded a data processing agreement with Leadinfo pursuant to Art. 28 GDPR. Leadinfo processes personal data exclusively on our behalf, on the basis of our instructions and applying appropriate technical and organisational measures to protect the data.
The legal basis for the use of Leadinfo is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) sentence 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG.
You can withdraw your consent at any time with effect for the future or change your settings via our consent banner. The current consent settings can be viewed and changed HERE in the “Consent Banner”.
Leadinfo only stores personal data for as long as is necessary for the provision of the service. IP addresses that cannot be assigned to a company are not stored permanently.
Further information on data protection at Leadinfo can be found at: https://www.leadinfo.com/de/rechtliches/datenschutz/
2.3.8 Umami (audience measurement)
On this website we use the privacy-friendly web analytics software Umami. Umami is operated by ourselves and hosted by our external service provider heinmedia Kreativagentur, Stadtplatz 2, 83714 Miesbach, within the framework of processing on our behalf pursuant to Art. 28(3) GDPR.
The web analysis serves exclusively to evaluate the use of our website statistically and to improve our offering technically and in terms of content.
Umami does not use cookies and does not store any information on your terminal device. There is no cross-device recognition. No personal user profiles are created for analysis or advertising purposes.
For the statistical evaluation, in particular information such as pages accessed, time of access, referrer, browser, operating system, device type and screen resolution is processed. Your IP address is not stored. It is only processed transiently insofar as this is necessary for the technical transmission or the determination of statistical values. An anonymised statistical value is generated from the IP address, which does not allow any conclusions to be drawn about your specific IP address or your person. There is no permanent storage of the full IP address, no individual recognition of visitors and no disclosure of the analysis data to external analysis or advertising services.
The processing takes place on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the privacy-friendly statistical evaluation and improvement of our online offering. A separate opt-out for Umami is not provided, as the configuration used does not use a permanent individual identifier and does not create personal user profiles.
The processing takes place exclusively for the statistical purposes mentioned and not for advertising, tracking or profiling purposes.
2.3.9 Elfsight (integration of social media content)
On our website we use the Elfsight service to integrate and display posts and content from our LinkedIn profile on our website. The provider is Elfsight, Inc., 1111B S Governors Ave, Dover, DE 19904, USA. The integration takes place in order to display content from our LinkedIn presence on our website in a user-friendly manner and to supplement our website with current posts from our social network.
When the LinkedIn posts are integrated, personal data, in particular your IP address as well as technical information about your terminal device and your access to our website, may be transferred to Elfsight. In addition, cookies or comparable technologies may be used by Elfsight. It cannot be ruled out that data is transferred to the USA or to other third countries when Elfsight is used. The requirements of Art. 44 et seq. GDPR apply to the transfer of personal data to third countries. Where necessary, the transfer takes place on the basis of appropriate safeguards, in particular the standard contractual clauses approved by the European Commission or another transfer mechanism permissible under the GDPR.
In addition, displaying LinkedIn content may establish a connection to LinkedIn. In the process, data may be transferred to LinkedIn. If you do not activate the integration of the LinkedIn posts, the corresponding content will not be loaded. This may mean that the LinkedIn posts on our website are not displayed or are only displayed to a limited extent.
The legal basis for the processing is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) sentence 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG. The current consent settings can be viewed and changed HERE in the “Consent Banner”.
Further information on data processing by Elfsight can be found in Elfsight’s privacy policy at https://elfsight.com/privacy-policy/
Further information on the processing of personal data by LinkedIn can be found in LinkedIn’s privacy policy at https://de.linkedin.com/legal/privacy-policy
2.3.10 Google Maps (map service)
We use “Google Maps” on our website, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
“Google Maps” uses cookies that enable an analysis of your use of our websites. The information collected by means of the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
“Google Maps” is used in the interest of an appealing presentation of our online offerings and of making the places indicated by us on the website easy to find.
The legal basis for the use of “Google Maps” is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) sentence 1 TDDDG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device within the meaning of the TDDDG. We prevent the unconscious and unwanted collection and transfer of your data to “Google Maps” by means of a 2-click solution. To activate the plugin, it must first be activated by clicking on the corresponding button. Only this activation also triggers the collection of information and its transfer to “Google Maps”. If you do not consent to the collection and forwarding of the personal data, you cannot use the functions of this website integrated with “Google Maps”.
More detailed information on the terms of use of Google Analytics and on data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.
2.3.11 Microsoft Bookings (appointment booking system)
For the provision and use of the appointment booking system “Microsoft Bookings”, we use the service provider Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Your personal data is processed in order to carry out and manage appointment bookings, for communication in connection with booked appointments and for the planning and organisation of our services.
When Microsoft Bookings is used, the following data in particular may be processed: first name and surname, email address, phone number, date and time of the appointment, content of your message or details in the booking form and technical connection data (e.g. IP address, device information). Providing the data marked as mandatory fields is necessary for arranging the appointment.
The processing takes place on the basis of Art. 6(1)(b) GDPR (contract or pre-contractual measures) and Art. 6(1)(f) GDPR (legitimate interest in efficient appointment organisation).
Microsoft Corporation is used as a processor pursuant to Art. 28 GDPR. A data processing agreement has been concluded with Microsoft, which ensures that personal data is processed exclusively in accordance with our instructions and in compliance with the applicable data protection regulations.
The data processing takes place partly on Microsoft servers. This may also involve the processing of personal data in third countries, in particular in the USA. Insofar as personal data is transferred to third countries, in particular to the USA, this takes place on the basis of the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework pursuant to Art. 45 GDPR. In addition, Microsoft uses standard contractual clauses pursuant to Art. 46(2)(c) GDPR as well as additional technical and organisational safeguards.
Recipients of your data are responsible internal employees and Microsoft Corporation as the technical service provider. Data is not disclosed to other third parties unless there is a legal obligation to do so.
Your personal data is only stored for as long as is necessary to carry out and follow up on the appointment or as long as statutory retention obligations exist.
2.3.12 Links to third-party platforms
On our website we also promote our presences on the third-party platforms listed below in order to make our company, our products and services better known. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of Art. 6(1)(f) GDPR.
The integration takes place via a linked graphic of the respective provider. The use of this linked graphic prevents a connection from being established automatically to the respective provider’s server, in order to display a graphic of the respective provider itself, when a website featuring third-party platform promotion is accessed. Only by clicking on the corresponding graphic is the user forwarded to the service of the respective provider. After the user has been forwarded, information about the user is collected by the respective provider.
The following third-party platforms are integrated into our site by means of links:
- Instagram (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
- Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
- LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
- Google Maps (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
- kununu (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany)
2.4 Data security
As the website operator, we treat the data provided to us as strictly confidential and protect the interests of users. Personal data is neither sold nor disclosed to third parties. We endeavour to protect the databases by all reasonable means against unauthorised access, loss, misuse or falsification.
All data that you transmit via our websites is transferred in encrypted form. The data is encrypted using the Security Socket Layer (SSL), a security standard that is supported by most browsers. You can recognise that secure data transmission via SSL is actually taking place by the fact that a small padlock symbol becomes visible in the status bar of your browser. Access to pages on which you enter your private data is password-protected.
We would like to point out that data transmission over the internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible. You should therefore encrypt important or confidential information when communicating over the internet or send us the information by post.
3. Privacy information for presences on third-party platforms
In addition to this website, we also maintain presences on third-party platforms in order to introduce our products and services to you and to present our company to interested parties. If you visit one of our presences, personal data is transferred to the provider of the platforms and processed by it. The provider regularly creates usage profiles of you in order to show you advertising within or outside the social networks based on your interests.
Our presences on third-party platforms are intended to ensure the most comprehensive possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If you visit one of our presences on third-party platforms, we may be jointly responsible with the operator of the platform pursuant to Art. 26 GDPR for the data processing operations triggered during this visit. Please note that, despite the joint responsibility with the platform operators, we do not have full influence over the data processing operations of the third-party platform.
We inform you that data may be processed in countries outside the European Union and the European Economic Area, e.g. in the United States. This gives rise to risks for visitors to the pages, e.g. with regard to the disclosure of data and the pursuit of their rights.
The data processing initiated by the third-party platforms is based on different legal bases, which are to be specified by the operators of the platform. For details, please refer to the terms of use and privacy policies of the respective platforms. Below you will find the corresponding links with further explanations from the respective providers:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
https://instagram.com/legal/privacy,
- Google/ YouTube
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
https://policies.google.com/privacy,
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland