Privacy policy

Our notes on how we handle your data.

The processing of your personal data is an important concern for us, which we fulfill with the greatest possible care and diligence. In the following, we therefore inform you about the processing of your personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. In this way, we would like to inform you about our processing operations and at the same time comply with the legal obligations, in particular from the EU General Data Protection Regulation (DSGVO). If you have any questions or comments, please do not hesitate to contact us.

I. Name and address of the responsible party

The responsible provider of this website in the sense of data protection law is:

Bosewitzer Straße 20
01259 Dresden
Telephon +49 (0) 351 - 2041 200
Telefax +49 (0) 351 - 2041 201

II. Name and address of the data protection officer

You can reach our data protection officer at the e-mail address or our postal address with the addition of "the data protection officer".

III. General information on data processing

1. Scope of the processing of personal data 

As a matter of principle, we process your personal data only insofar as this is necessary to provide a functional website and our content and services. Your personal data is regularly processed only with your consent. An exception applies in those cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by legal regulations.

2. Legal basis for the processing of personal data 

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Art. 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DS-GVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) c DS-GVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) (d) DS-GVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the former interest, Art. 6 (1) lit. f DS-GVO serves as the legal basis for the processing.

3. Data deletion and storage period

Your personal data will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may take place beyond this if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

IV. Data processing

1. Provision of the website

When using our website for informational purposes, i.e. merely viewing it without registering and without you providing us with any other information, we process the personal data that your browser transmits to our server. The following data is collected:

  • browser type and browser version
  • operating system used
  • Website from which the access is made (referrer URL)
  • Host name of the accessing computer
  • Date and time of access
  • IP address of the requesting computer

The data is also stored in the log files of our system. A storage of this data together with other of your personal data does not take place.

For the provision of this website, we use the web hosting service of Hetzner online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter referred to as web host). In connection with the hosting, the web hoster processes the aforementioned personal data on our behalf, which is generated during the use of the website.

The legal basis for the temporary storage of the data and the log files is Art. 6 para. 1 lit. f DSGVO.

We have concluded an order processing contract with our web hoster. Through this contract, the service provider assures that it processes the data in accordance with the GDPR and ensures the protection of the rights of the data subject. A separate legal basis for the involvement of the web hoster is therefore not required.

The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session. Storage in log files is necessary for technical reasons to provide a functional website and to ensure system security. An evaluation of the data for marketing purposes does not take place.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object.

2. Use of cookies

We use cookies on our website.

Cookies are text files or information in a database that are stored on your hard drive and assigned to the browser you are using, so that certain information can flow to the entity that sets the cookie. Cookies cannot run programs or transmit viruses to your computer.

We use cookies to make our website functional. In the cookies, data on the language settings are stored and transmitted:

The legal basis for the use of technically necessary cookies is Art. 6 (1) lit. f DSGVO.

Without the use of technically necessary cookies, our website cannot be displayed to you (completely correctly) or the support functions could not be enabled. The user data collected through technically necessary cookies are not used to create user profiles.

In these purposes also lies our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

The technically necessary cookies we use are transient cookies, i.e. they are automatically deleted after the end of your website visit, at the latest when you close your browser.

You cannot deselect our technically necessary cookies if you wish to use our website.

3. Use of contact form and e-mail contact 

If you send us inquiries via contact form, your message/message (comment) including the data you entered in the input mask will be transmitted to us and stored. These data are:

  • Name
  • e-mail address
  • Subject of the inquiry
  • Your message

We do not disclose this data to third parties unless this is necessary in the course of processing and responding to your contact request or you have given us your consent to do so.

The legal basis for the processing of data transmitted in the course of sending an e-mail or using the contact form is Art. 6 (1) lit. f DSGVO. If you contact us in the context of an existing contractual relationship or contact us in advance for information about our range of services or other services, the additional legal basis is Art. 6 para. 1 lit. b DSGVO.

Your personal data will be stored and processed by us for the purpose of proper processing and response to your customer/contact request.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

The data you enter in the contact form will remain with us until the purpose for data storage/processing no longer applies (e.g. after processing of your inquiry has been completed). Mandatory legal provisions - in particular retention periods - remain unaffected.

You can object to the storage of your data at any time. In such a case, the conversation cannot be continued. We will delete all personal data stored in the course of contacting you.

4. Use of our application form

Our website contains an application form that can be used to send us your application documents electronically. If you take advantage of this option, the data entered in the input mask such as

  • your name
  • address
  • Contact details (telephone number and e-mail address)
  • Information on the type of employment (full-time, part-time, apprenticeship, internship)

as well as the documents voluntarily attached to the application (cover letter, resume, references, etc.) will be transmitted to us and stored.

At the time your application request is sent, the following data is also stored:

  • IP address of the user
  • Date and time of transmission

If an employment relationship is established, we will process your personal data collected during the application process for as long as is necessary for the performance of the employment relationship, its termination and for the assertion of or defense against any claims arising from or in connection with the employment relationship and its termination, or for as long as statutory retention periods exist.

The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. b and c DSGVO and Art. 88 para. 1 DSGVO as well as Section 26 para. 1 sentence 1 BDSG.

The processing of your personal data from the application form serves us to carry out the application process and thus to initiate and establish an employment relationship.

The other personal data processed during the submission process serve to prevent misuse of the application form and to ensure the security of our information technology systems.

Your personal data will only be stored for as long as is necessary to carry out the application process and to defend against any claims in connection with the application process, for a maximum of 6 months after completion of the application process.

Personal data will only be stored for a longer period if you give us your express consent to do so and only for as long as you do not revoke your consent. We will request your consent separately and at the same time inform you about the consequences of such consent and your right of revocation.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

You have the option to object to the storage of your personal data at any time. In this case, your data will be deleted. However, unfortunately you cannot submit an application that does not contain personal data about you. We cannot consider incomplete applications or applications with inaccurate data when selecting applicants, so we will delete such applications.

5. Notes on the use of external links

In individual cases, hyperlinks to third-party websites are included on our website in order to draw your attention to third-party information offers. Such external links will be specially marked by us.

We would like to point out that by using these links, you will be directed to third-party websites for which we are not responsible, but for which the operator of the respective website is responsible. The operator of the linked website is solely responsible for the processing of your data that is carried out by the website accessed via the hyperlink. Before you pass on personal data to these websites, we therefore recommend that you first check the data protection provisions applicable there.

Only when you click on the link will the data required for the provision of the page called up be transmitted to the server of the operator of the website called up. In addition to your IP address, this also includes other data listed under point 2 above. This may also result in data transfers to third countries that are not subject to European data protection regulations, such as when using the website, which is operated by Google LLC based in the USA.

6. Our presence in social networks (Xing, Kununu) 

We operate a corporate presence on various so-called social media platforms. We operate the presences with the following providers:

  • Social media platform "XING", which is operated by the German provider New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, under the URL
  • Platform for employer ratings "Kununu", which is operated by the German provider New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, at the URL

We use the technical platform and services of the respective providers for these information services.

We use the services of the providers only within the scope of the possibilities offered by the respective provider. We are not the original provider and therefore not responsible for these pages. We have indicated the respective provider of these pages above.

As the operator of these company websites, we only process the data from your use of our respective service that you provide to us and that requires interaction. If, for example, you ask a question that we can only answer by e-mail, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for processing your data on the aforementioned social media platforms is Art. 6 (1) p. 1 lit. f DSGVO.

We use the technical platform XING or Kununu for these information services in order to provide information about our company, our products and services, to share our job postings and to contact interested parties. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) lit. f DSGVO.

We would like to point out that you use our appearances on XING and/or Kununu and the functions offered there on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). When you visit our websites, the providers of the social media platforms collect, among other things, your IP address and other information that is present on your terminal device in the form of cookies. This information is used to provide us, as operators of the accounts, with statistical information about interaction with us.

The data and usage content collected about you in this context is also processed by the platform operators on their own responsibility for their own purposes. In this context, New Work SE, as a German company, is subject to the same data protection requirements as we are. Nevertheless, we do not know and have no influence on how the provider uses your data for its own purposes, how long this data is stored and whether data is passed on to third parties and transferred to countries outside the European Union. Data processing may also differ depending on whether you are registered and logged in to the respective social network or visit the site as a non-registered and/or non-logged-in user. New Work SE describes what information the provider receives and how it is used in its privacy policy at There you will also find information on contact options as well as on the settings options for advertisements.

To exercise your data subject rights, you can contact both us or the provider of the social media platform XING/Kununu. Insofar as one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about the profiling, processing of your data when using the website. For questions about the processing of your interaction with us on our site, write to the contact details provided by us above.

V. Your rights as a data subject

1. What rights do you have as a data subject vis-à-vis the controller

When we process your personal data, you have the following rights vis-à-vis us regarding the personal data concerning you:

  • Right to information, Art. 15 DSGVO;
  • Right to rectification or erasure, Art. 16 and 17 DSGVO;
  • Right to restriction of processing, Art. 18 DSGVO;
  • Right to object to processing, Art. 21 DSGVO;
  • Right to data portability, Art. 20 DSGVO.

For this purpose, as well as for further questions on the subject of the protection of your personal data, you can contact us at any time via the contact details provided in Section I.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us, Art. 77 DSGVO.

You may revoke your consent to the processing of personal data at any time for the future. The lawfulness of the data processing carried out on the basis of the consent until the revocation is not affected by the revocation.

We do not use automated decision-making including profiling.

2. Information about your right to object according to Art. 21 DSGVO

You have the right to object at any time to the processing of your data that is carried out on the basis of Art. 6 (1) sentence 1 lit. f DSGVO (data processing on the basis of a balance of interests) or Art. 6 (1) sentence 1 lit. e DSGVO (data processing in the public interest), if there are grounds for doing so that arise from your particular situation.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

The objection can be made form-free to the contact details listed in section I.

VI. Obligation to provide data

In principle, you are not obliged to provide us with your personal data. However, if you do not do so, we will not be able to provide you with unrestricted access to our website or answer your inquiries to us. Personal data that we do not absolutely require for the above-mentioned processing purposes are marked accordingly as voluntary information.

VII. Automated decision making/profiling

We do not use automated decision making or profiling (an automated analysis of your personal circumstances).