Privacy policy
Thank you for visiting our website and for your interest in our company.
In this privacy policy, we inform you about which personal data we process during your visit to our website and what rights you have. For the terms used in this privacy policy, we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
Personal data is any information relating to an identified or identifiable natural person. This includes, for example, your name, address and communication data or your e-mail address.
Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Data subject is any identified or identifiable natural person whose personal data are processed by the controller.
Controller or "controller" means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
Name and address of the responsible entity
Riewoldt GmbH
Niederkasseler Str. 17
51147 Cologne
Tel.: +49 2203 / 60098-0
E-mail: info(at)riewoldt.de
Data Protection Officer
You can contact our data protection officer by e-mail at datenschutzbeauftragter(at)riewoldt.de or via our postal address with the addition of "Data Protection Officer".
Data processing in third countries
We only process or allow personal data to be processed in third countries outside the European Union (EU) or the European Economic Area (EEA) if there is either express consent or a recognized level of data protection in this third country, or if contractual obligations have been entered into by means of standard contractual clauses or corresponding certifications are available. This also applies if the processing takes place in the context of the disclosure or transfer of data to other persons, bodies or companies.
Among other things, we use services and tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We point out that in these countries no level of data protection comparable to the EU can be guaranteed.
For example, U.S. companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.
General information on the processing of your personal data
For the processing described below, unless otherwise noted, you as an interested party, communication partner or user, e.g. of the website or online service, are the data subject within the meaning of the GDPR.
Your data is often collected by you providing it to us. This may be, for example, data that you enter in a contact form or have provided to us in some other way.
Other data is collected by our IT systems automatically or after your consent when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time of page view). The collection of this data takes place automatically as soon as you enter this website.
Unless further specific storage periods are mentioned in the further explanations of this privacy policy, we will delete your personal data when the purpose for processing this data has been fulfilled. If you assert a request for deletion or revoke consent to data processing, your data will be deleted unless there are other compelling legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law, assertion or defense of legal claims). If the latter is the case, the deletion will take place as soon as these reasons no longer exist.
If you have given your consent, we process your personal data on the legal basis of Art. 6 (1) (a) GDPR. If you have consented to the storage of cookies or to the access to information on your terminal device (e.g. via device fingerprinting), the data processing is also based on § 25 (1) TTDSG. You can revoke your consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the legal basis of Art. 6 (1) (b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6 (1) (c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6 (1) (f) GDPR. The relevant legal bases in each individual case will be addressed in the further explanations of this data protection declaration.
Data is only passed on to third parties within the framework of legal requirements. We only pass on your data to third parties if this is necessary, e.g. on the basis of Art. 6 (1) (b) GDPR for contractual purposes or on the basis of legitimate interests according to Art. 6 (1) (f) GDPR in the economic and effective operation of our business.
In the context of a data protection-related commissioned processing according to Art. 28 GDPR, we use service providers who may receive your tasks knowledge of your personal data. We have therefore taken appropriate legal, technical and organizational measures with the service providers to ensure the protection of personal data in accordance with the relevant legal provisions.
Data security
We take technical, contractual and organizational measures for the security of data processing in accordance with the state of the art. In this way, we ensure that the provisions of the data protection laws, in particular the GDPR, are complied with and that the data processed by us is protected against destruction, loss, modification and unauthorized access.
These security measures include the encrypted transmission of data between your browser and our servers.
For security reasons and to protect the transmission of confidential content that you send to us as the site operator, our site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser begins with "https://" and by the lock symbol in your browser line.
Encryption protects data transmission from illegal access by third parties. If this option is not available, you can also choose not to send certain data over the Internet.
Your rights
If we process personal data of you, you are a data subject within the meaning of the General Data Protection Regulation (GDPR) and you have the following rights against us of the personal data concerning you:
- Right of access (Art. 15 GDPR)
- Right to rectification (Art. 16 GDPR)
- Right to erasure (Art. 17 GDPR)
- Right to restriction of processing (Art. 18 GDPR),
- Right to data portability (Art. 20 GDPR)
- Right to object to processing (Art. 21 GDPR)
Furthermore, you have the right to complain to a data protection supervisory authority (Art. 77 GDPR).
An overview of the German supervisory authorities can be found at https://www.datenschutzkonferenz-online.de/datenschutzaufsichtsbehoerden.html
The supervisory authority responsible for our location is:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Kavalleriestr. 2 - 4
40213 Düsseldorf
Tel. 0211-38424-0
E-Mail: poststelle(at)ldi.nrw.de
Internet: https://www.ldi.nrw.de
Visit our website
Scope of data processing
When you visit our website, your browser transmits certain data to our web server for technical reasons. This is the following data (so-called server log files):
- Name and URL of the retrieved file
- Date and time of retrieval
- Amount of data transferred
- Message about successful retrieval (HTTP response code)
- Browser type and version
- Operating system
- Referer URL (i.e. the previously visited page)
- Websites that are called up by the user's system via our website.
- Internet service provider of the user
- IP address and the requesting provider
This data is not stored together with other personal data of the users.
Purpose of data processing
The temporary storage of the user's IP address by our web server is technically necessary in order to display the website. For this purpose, the user's IP address must necessarily remain stored for the duration of the session....
We use this log data without assigning it to you personally or otherwise profiling it for statistical evaluations for the purpose of operating, securing and optimizing our online offering, but also to anonymously record the number of visitors to our website (traffic) and the extent and type of use of our website and services, as well as for billing purposes to measure the number of clicks received from cooperation partners.
Legal basis of processing
We collect this data on the basis of our legitimate interest within the meaning of Art. 6 (1) (f) GDPR to be able to display and operate our website and to ensure the security of our website.
Duration of storage
The above-mentioned data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
Information in the log files is stored for security reasons (e.g. to clarify acts of abuse or fraud) for a period of 8 weeks and then deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until final clarification of the respective incident.
Possibility of objection and removal
The collection of data for the provision of the website and its storage in log files is mandatory for the operation of our website for technical reasons. Consequently, there is no possibility for the user to object.
Further information on data processing
We host our website in the European Union at IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (in short: IONOS). When you visit our website, IONOS collects various log files including your IP addresses. Details can be found in the privacy policy of IONOS:
https://www.ionos.de/terms-gtc/terms-privacy.
We have concluded a data processing agreement (DPA) in accordance with Art. 28 GDPR with IONOS.
E-mail contact
Scope of data processing
You can contact us by e-mail. On our website, different e-mail addresses are available to you depending on your request. If you send us an e-mail, the personal data transmitted with this e-mail will be processed by us.
Purpose of data processing
The processing of this personal data serves us to process your request.
Legal basis of processing
The legal basis for the processing of data transmitted in the course of contacting us by e-mail is Art. 6 (1) (f) GDPR (legitimate interests of us as the responsible party). If the e-mail contact aims at the conclusion of a contract, Art. 6 (1) (b) GDPR is the additional legal basis for the processing (fulfillment of a contract).
Recipient of the data
Your personal data will be transferred to the internal departments responsible for processing your request (e.g. Sales).
Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose of their processing. For personal data sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter in question has been conclusively clarified and no statutory retention periods exist.
Possibility of objection
You have the option to object to the processing of your personal data at any time. In this case, the conversation cannot be continued. Please send your objection to datenschutzbeauftragter(at)riewoldt.de or to our postal address. All personal data stored in the course of contacting us will be deleted in this case, provided that the deletion does not conflict with any statutory retention obligations.
Contact form
Scope of data processing
You can contact us via our contact form. If you contact us via this, the personal data transmitted in the process will be stored by us for the purpose of processing your inquiry and in the event of follow-up questions. This data will not be passed on without your consent.
Purpose of data processing
The processing of this personal data serves us to process your request and to communicate with you.
Legal basis of processing
The legal basis for the processing of data transmitted in the course of contacting us via our contact form is Art. 6 (1) (f) GDPR (legitimate interests of us as the responsible party for the effective and targeted processing of your request). If the contact is aimed at the conclusion of a contract, Art. 6 (1) (b) GDPR is the additional legal basis for the processing (fulfillment of a contract).
Recipient of the data
Your personal data will be forwarded to the internal departments responsible for processing your request (e.g. Sales).
Duration of storage
The data will be deleted as soon as they are no longer required to achieve the purpose of their processing. For the personal data transmitted to us via the contact form, this is the case when the respective conversation with the user has ended. The conversation is terminated when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and no statutory retention periods exist.
Possibility of objection
You have the option to object to the processing of your personal data at any time. In this case, the conversation cannot be continued. Please address an objection to the previously mentioned communication channels. All personal data stored in the course of contacting you will be deleted in this case, provided that the deletion does not conflict with any statutory retention obligations.
Contact by phone
Scope of data processing
If you contact us by telephone, we process the data you provide (your telephone number, name, company, e-mail address, if applicable, and your request) in order to process your contact and answer your questions.
Purpose of data processing
We process your personal data in order to contact you and deal with your request.
Legal basis of processing
The legal basis for processing the data transmitted in the course of the telephone call is Art. 6 (1) (f) GDPR for general inquiries. Our legitimate interest is the processing of your request. If the telephone call is aimed at concluding a contract, the legal basis for the processing is Art. 6 (1) (b) GDPR.
Recipient of the data
Your personal data will be forwarded to the internal departments responsible for processing your request (e.g. Sales).
Duration of storage
We delete personal data if it is no longer required to achieve the purpose for which it was collected or restrict it if there are legal obligations to retain it. For the personal data that you have sent us by telephone, this is the case when the circumstances indicate that the matter in question or the request has been conclusively clarified.
Possibility of objection
You can object to the storage of your personal data at any time. In this case, our conversation can no longer be continued. Please send such a revocation to the communication channels mentioned above.
Processing in the context of audio and video conferences
Scope of data processing
Among other things, we use online conferencing tools to communicate with you.
We prefer to use Microsoft Teams. The provider of this service is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland. (hereinafter referred to as MS Teams for short).
The conference tool collects all data that you provide/enter to use the tools (e.g., e-mail address and/or your telephone number, content data). Furthermore, the duration of the conference, start and end (time) of participation in the conference, number of participants and other "context information" related to the communication process (metadata) are processed.
In addition, the tool provider processes all technical data required to handle online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.
Insofar as content is exchanged, uploaded or otherwise made available within the tool, this is also stored on the servers of the tool providers. Such content includes, in particular, cloud recordings, chat/instant messages, audio files, voicemails, uploaded photos and videos, files, whiteboards and other information shared during the use of the service.
Please note that we do not have full control over the data processing operations of the tools used.
Purpose of data processing
The tool we use supports us in our effective and targeted communication with you.
Legal basis of processing
The service or tool is used in the context of contract performance or to clarify pre-contractual contexts in order to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6 (1) (b) GDPR).
Furthermore, our legitimate interest lies in the general simplification and acceleration of communication with you (Art. 6 (1) (f) GDPR).
Insofar as consent has been requested (e.g. consent to record calls or video conferences), the tool or functionalities of the tool are used on the basis of this consent; consent can be revoked at any time with effect for the future (Art. 6 (1) (a) GDPR).
Recipient of the data
Your personal data is processed by us by the internal departments responsible for processing the respective request and the provider of the respective service.
Duration of storage
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected.
Stored cookies remain on your terminal device until you delete them yourself. We have no influence on the storage period of your data, which is stored by the operator of the conference tool for its own purposes. For details, please contact the operators of the conference tool directly.
Possibility of objection and removal
You can object to the processing of your personal data at any time with effect for the future via the communication channels described above. In this case, the service may not be provided or may no longer be provided completely or conclusively.
Further information on data processing
For more information about MS Teams terms of use and privacy, please see the Microsoft Teams privacy policy: https://privacy.microsoft.com/en-us/privacystatement.
We have concluded a data processing agreement (DPA) in accordance with Art. 28 GDPR with the provider.
Applications
Scope of data processing
When you apply to us, we collect data that you provide to us as part of the application process. This may include mostly: Salutation, title, first name, last name, email address. Mobile phone number, desired annual salary, period of notice, source of the job advertisement, as well as the documents you provide us with as attachments (e.g. cover letter, resume, relevant employment, education or training certificates.).
In individual cases, the personal data processed may also include special categories of personal data pursuant to Art. 9 (1) GDPR, insofar as you provide us with these as part of your application or these result from the application documents (e.g. references to ethnic origin, religion or health in the case of photos).
Purpose of data processing
We process your personal data for the selection process of suitable candidates and the administrative execution of the application process in order to be able to make a decision on the establishment of an employment relationship.
If the application leads to an employment relationship with us, we will process the data already received from you for the purposes of the employment relationship, insofar as this is necessary for its implementation. In this case, your personal data will be transferred to the personnel file and to our personnel management systems.
Legal basis of data processing
The legal basis is Art. 6 (1) (b) GDPR in conjunction with § 26 (1) BDSG.
Insofar as special categories of personal data are processed, this is done on the basis of Art. 9 (2) (a) GDPR in conjunction with. § 26 (3) BDSG.
Recipient of the data
Within our company, the HR department and the responsible supervisor of the advertised position will have access to your data. We do not pass on your personal data to third parties unless you have expressly consented to the passing on of data or we are obliged to pass on data due to statutory provisions and / or official or court orders.
Data transfer to a third country
Your personal data will not be transferred to a third country or to an international organization.
Duration of storage
If your application does not lead to an employment relationship, we will delete your personal data, taking into account the time limit for action under the AGG, no later than 4 months after the end of the application process (e.g. the announcement of the rejection decision), unless you have given us your consent in accordance with Art. 6 (1) (a) GDPR to store your personal data for a longer period in order to be able to consider you for new job offers, if applicable. In this case, we will ask you for separate consent.
If your application is successful and leads to an employment relationship with us, we will record your application documents in our personnel management system and in your personnel file as necessary on the basis of Art. 6 (1) (b) GDPR in conjunction with § 26 (1) BDSG for the purpose of implementing the employment relationship. In this case, your application documents will not be deleted until your employment relationship has ended again and a further three years have elapsed since the end of the year.
Possibility of objection and removal
You can renew or delete the personal data you have provided to us at any time upon request. To do so, please send us an e-mail to bewerbung(at)riewoldt.de. This does not apply if you have applied for a specific position with us in an ongoing application process. In this case, we will store the information you have provided for this position until the expiry of the statutory time limits for taking legal action (in particular § 15 AGG).
Automated decision making
We do not use automated decision making.
Obligation to provide the data
The provision of your data is necessary and obligatory for the decision on the establishment of an employment relationship. If you do not provide us with your data, you will not be able to apply for a job with us.
Cookies
Scope of data processing
Our website uses cookies. Cookies are small text files that are stored on your computer when you access our website. Cookies do not cause any damage to your computer and do not contain any malware, such as viruses or Trojans.
Depending on their purpose, they are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device.
Cookies contain a characteristic string of characters that enables unique identification of the browser or previously made settings when the website is called up again.
We use cookies that are technically necessary for the operation of our website, cookies that are used for analysis and marketing purposes and cookies that we use for a comfortable visit to our website.
Some cookies are also placed by third-party companies that appear on our sites. This enables us or you to use certain services of the third party company.
Within the framework of informed consent, you can decide for yourself when initially accessing our website whether or not you wish to accept cookies that are not necessary for the technical functions of the website.
We use the technology of Cookiebot as a consent management tool to obtain your consent to the storage of certain cookies on your terminal device or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter referred to as "Cookiebot").
When you enter our website, a connection is established to the servers of Cookiebot in order to obtain your consents and other declarations regarding the use of cookies. Cookiebot then stores a cookie in your browser in order to be able to assign the consents given to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the Cookiebot cookie yourself or the purpose for storing the data no longer applies.
In addition, you can view your settings for cookies and the other third-party services at any time via the following link https://www.riewoldt.de/en/cookie-settings/ and change them at any time.
Purpose of data processing
We use cookies on the one hand to make our website attractive and user-friendly, to improve it and to speed up requests. These essential cookies are necessary for the smooth call of our website. Some cookies are also necessary to provide functions you have requested.
We use other cookies for statistical analysis of our website and possibly also for marketing and personalization purposes. For example, we want to know how and when visitors use our website or to provide them with route planning functions and other services.
Legal basis
If you have consented to the use of cookies when visiting our website, the exclusive legal bases are Art. 6 (1) (a) GDPR (declared consent) and § 25 (1) TTDSG.
For the use of essential cookies necessary for the operation of the website, the legal basis is Art. 6 (1) (f) GDPR. Our legitimate interest is the (economic and secure) operation, functionality and improvement of our services.
Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 (1) (c) GDPR.
Duration of storage
We use transient and persistent cookies.
Transient cookies include, in particular, so-called session cookies, which are automatically deleted when you close the browser.
Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. Our consent management tool (Cookiebot - https://www.riewoldt.de/en/cookie-settings/) lists all information and storage periods of the cookies used.
Possibility of objection, revocation and removal
As a user of our website, you also have control over the use of cookies. Using the settings in our consent management tools (https://www.riewoldt.de/en/cookie-settings/), you can manage each individual cookie yourself and revoke any consent you may have given for the future.
By changing the settings in your Internet browser, you can set it so that cookies are not stored or are automatically deleted at the end of your Internet session and thus object to the processing. To do this, select "do not accept cookies" in the settings of your browser.
Please refer to the help function of your browser to find out how to delete or prevent cookies in your specific browser.
Please note that in the case of deactivated cookies, you may not be able to use all functions of our website.
In addition, you can view your settings for cookies and the other third-party services at any time via the following link https://www.riewoldt.de/en/cookie-settings/ and change them at any time.
Further information on data processing
For more information about Cookiebot's terms of use and privacy policy, please see Cookiebot's privacy policy: https://www.cookiebot.com/en/privacy-policy/
We have concluded a data processing agreement (DPA) in accordance with Art. 28 GDPR with the provider.
Google Analytics
Scope of data processing
We use "Google Analytics" on our website, a web analytics service provided by "Google" (responsible service provider in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
In Google Analytics, interactions of website visitors are recorded and systematically evaluated.
Google Analytics enables the website operator to analyze the behavior of website visitors.
The website operator receives various usage data, such as page views, duration of visit, operating systems used and the origin of the user. This data is summarized in a user ID and assigned to the respective end device of the website visitor.
Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Furthermore, Google Analytics uses various modeling approaches to complement the collected data sets and uses machine learning technologies in data analysis.
This involves the use of technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually also transferred to a Google server in the USA and stored there.
We use the function 'anonymizeIP' (so-called IP masking). Due to the activation of IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.
Purpose of data processing
The processing of the user's personal data (website visitors) with the help of Google Analytics enables us to analyze the surfing behavior of our users. By evaluating the data obtained, we can compile the use of the individual components of our website. This helps us to improve our website and its user-friendliness.
Legal basis of data processing
The legal basis for the processing of personal data is Art. 6 (1) (a) GDPR (consent) and § 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information in the user's terminal device (e.g. fingerprinting) as defined by the TTDSG.
Duration of storage
The data stored as part of Google Analytics at user and event level is anonymized or deleted as soon as its purpose is fulfilled.
You can also view details of this at the following link: https://support.google.com/analytics/answer/7667196?hl=en.
Recipient of the data
The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as a processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and, if applicable, US authorities may access the data stored by Google.
Transfer to a third country
A transfer of data to the USA cannot be ruled out.
Possibility of objection and removal
You can prevent the storage of cookies by selecting the appropriate settings in your browser software.
You can also use a browser add-on to disable Google Analytics Java scripts (ga.js, analytics.js, dc.js) to prevent Google Analytics from using your data on our website.
If you want to deactivate Google Analytics, you can download and install the deactivation add-on at https://tools.google.com/dlpage/gaoptout?hl=en.
As a user of our website, you also have control over the use of cookies. Using the settings in our consent management tools (https://www.riewoldt.de/en/cookie-settings/) you can manage each individual cookie yourself and revoke any consent you may have given for the future at any time.
Further information on data processing
For more information on Google's terms of use and privacy policy, please visit: https://www.google.com/analytics/terms/us.html, https://marketingplatform.google.com/intl/en/about/analytics/ and https://policies.google.com/?hl=en.
For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
Google Tag Manager
Scope of data processing
We use the Google Tag Manager of the service provider Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland on our website.
This solution is a tag management system (TMS) that allows us to embed and manage tracking or statistical tools on our website. The tool itself, which implements the tags, does not store any personal data. It takes care of triggering other tags, which in turn may collect data (e.g. Google Analytics). The Tag Manager itself does not access this data and does not itself create user profiles, store cookies or perform independent analyses. It only serves to manage and play out the tools integrated via it. The Google Tag Manager does, however, record your IP address.
Purpose of data processing
We use Google Tag Manager to install and easily manage tracking or statistics tools.
Legal basis of data processing
The legal basis for this data processing is Art.6 (1) (a) GDPR (consent) and § 25 (1) TTDSG, insofar as it also involves the storage and/or readout of information on the end device.
Duration of storage
The data will be deleted after 14 days.
Recipient of the data processing
The recipient of the data is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. A transfer of data to the parent company in the USA may also take place.
Possibility of objection, revocation and removal
You can prevent the storage of cookies by selecting the appropriate settings in your browser software.
You can permanently disable cookies for ad preferences by preventing them by setting your browser software accordingly or by downloading and installing the browser plug-in available at the following link:
http://www.google.com/settings/ads/plugin?hl=en
Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.
As a user of our website, you also have control over the use of cookies. Using the settings in our consent management tools (https://www.riewoldt.de/meta/cookie-einstellungen/) you can manage each individual cookie yourself and revoke any consent you may have given for the future.
Further information on data processing
For more information on Google's privacy terms of use, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at: https://policies.google.com/privacy/frameworks and https://privacy.google.com/businesses/controllerterms/mccs/.
Social media presences
Scope and purpose of data processing
We maintain publicly accessible profiles on social networks. The social networks used by us in detail can be found below. Social networks can generally analyze your user behavior extensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous processing operations relevant to data protection. In detail:
If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.
With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.
Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.
Legal basis of data processing
Our social media presences are intended to ensure the most comprehensive presence possible on the Internet. This is a legitimate interest within the meaning of Art. 6 (1) f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which are to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 (1) (a) GDPR).
Duration of storage
The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions - in particular retention periods - remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).
Responsible person and assertion of rights
If you visit one of our social media sites, we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal.
Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.
Further information on data processing
We have profiles with the following providers:
The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. For details on how they handle your personal data, please refer to XING's privacy policy: https://privacy.xing.com/en/privacy-policy.
The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
LinkedIn uses advertising cookies. If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission.
Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.
For details on how they handle your personal data, please see LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.
Changes to the privacy policy
We reserve the right to change the data protection declaration in order to adapt it to changed legal situations or in the event of changes to the service as well as data processing. However, this only applies with regard to declarations on data processing. Insofar as user consents are required or components of the data protection declaration contain regulations of the contractual relationship with the users, the changes will only be made with the consent of the users.
Please inform yourself regularly about the content of the privacy policy.
Status of the privacy policy: 07.11.2022