Data Protection
Privacy Policy
Thank you for visiting our website. In this Policy, we would like to inform you about how we handle your data in accordance with Art. 13 of the General Data Protection Regulation (GDPR).
Controller
The Controller for the data processing operations described below is the office named in the imprint.
Usage Data
When you visit our website, our web server temporarily evaluates usage data for statistical purposes in order to improve the quality of our website. This data consists of the following data categories:
- the name and address of the requested content,
- the date and time of the query,
- the transferred data volume,
- the access status (content transferred, content not found),
- the description of the used web browser and operating system,
- the referral link, which indicates from which page you reached ours,
- the IP address of the requesting computer, which is shortened in such a way that a personal reference can no longer be established.
The above-mentioned log data will only be evaluated anonymously.
Necessary Cookies
On our website, we use cookies which are necessary for the website to function.
Cookies are small text files that can be placed on your computer or mobile device by websites that you visit.
A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session.
We do not use these necessary cookies for analysis, tracking or advertising purposes.
In some cases, these cookies only contain information on certain settings and cannot be linked to a person. They may also be necessary to enable user guidance, security and implementation of the website.
The legal basis for using these cookies is our legitimate interest according to Art. 6 (1) (f) GDPR.
You can set your browser to inform you about the placement of cookies. This is in order to make the use of cookies transparent for you.
You can also delete cookies or prevent the setting of new cookies at any time by using the appropriate browser settings.
Please note that if you delete certain cookies, our web pages may not be displayed correctly and some functions may no longer be available.
| Provider | Maximum Storage Period | Purpose | Adequate level of data protection |
| Borlabs Cookies | 1 Year | Consent- Management | No data transfer to unsafe third countries |
Anonymous Visitor Measurement
We carry out anonymous visitor measurement on our website. For this purpose, the web server data logs as well as the abbreviated IP address are evaluated.
Personal evaluations about you are not possible.
Google Analytics
We use the web analysis tool “Google Analytics” to design our websites according to your needs. Google Analytics creates user profiles based on pseudonyms. For this purpose, permanent cookies are stored on your end device and retrieved by us. In this way we are able to recognize and measure returning visitors.
The Google Analytics tool is provided by Google Ireland Limited and Google LLC. (USA) who support us as processors according to Art. 28 GDPR. The data processing can therefore take place outside the EU or EEA. With regard to Google LLC (USA), no adequate level of data protection can be assumed due to processing in the USA. There is a risk that authorities may access the data for security and surveillance purposes without you being informed or having the right to appeal.
Please take this into account if you decide to give your consent to our use of Google Analytics.
The legal basis for this data processing is your consent if you have given your consent via our consent banner.
The transfer to a third country takes place on the basis of Art. 49 (1) (a) GDPR.
You can withdraw your consent at any time. You can adapt your cookie settings here.
Third party tracking technologies for advertising purposes
We use cross-device tracking technologies to help us show you targeted advertising on other websites based on your visit to our websites and to help us determine how effective our advertising efforts have been.
The legal basis for this data processing is your consent if you have given your consent via our consent banner.
Your consent is voluntary and can be withdrawn at any time.
How does tracking work?
When you visit our websites, it is possible that the third-party providers listed below may retrieve identification characteristics of your browser or terminal device (e.g. a browser fingerprint), evaluate your IP address, save or extract identification characteristics on your terminal device (e.g. cookies) or gain access to individual tracking pixels.
The individual characteristics can be used by these third parties to identify your terminal device on other websites. We may commission these third-party providers to show you advertisements based on the pages visited on our website.
What does cross-device tracking mean?
If you log on to the third-party provider with your user data, the respective identification characteristics of different browsers and end devices can be linked with each other. For example, if the third-party provider has created a unique identifier for each laptop, personal computer desktop, smartphone or tablet you use, these individual identifiers can be associated with each other as soon as you log in to a third-party service using your login credentials. This allows the third party to target our advertising campaigns across multiple devices.
Which third-party providers do we use in this context?
Third-party providers with whom we work for advertising purposes are listed below. If the data is processed outside the EU or EEA in this context, please note that there is a risk that local authorities may access the data for security and monitoring purposes without you being informed or having the right to appeal. Where we use providers in third countries without an adequate level of protection and you give your consent, the transfer to this third country is based on Art. 49 (1) (a) GDPR.
| Provider | Technical function or content | Adequate level of data protection | Withdrawal of consent |
| Ads Analytics | No adequate level of data protection. The data is transferred on the basis of Art. 49 (1) (a) GDPR. | To withdraw your consent, please click here to change the appropriate settings via our banner. | |
| Google LLC | DoubleClick | No adequate level of data protection. The data is transferred on the basis of Art. 49 (1) (a) GDPR. | To withdraw your consent, please click here to change the appropriate settings via our banner. |
Protected Access Area
If you wish to use our protected access-area, your prior registration is required. We only collect the data required for registration.
The legal basis for the data processing is the necessity for the performance of a contract and our legitimate interest to be able to provide you with the services and information available in the protected access-area according to Art. 6 (1) (b) and (f) GDPR.
If we collect additional data during this process, these will be marked as optional and the processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.
If you would like to permanently log out of our protected access-area, please use the logout option which we make available within the area.
Contact Form
You may contact us via our contact form. In order to use our contact form, we will require you to provide the data marked as mandatory.
The legal basis for this processing is Art. 6 (1) (f) GDPR, being our legitimate interest to respond to your request.
Your data will only be used to process your request. We delete your data if they are no longer required and there are no legal obligations to retain them.
Where the processing of your data is based on legitimate interest in accordance with Art. 6 (1) (f) GDPR, you have the right to object to that processing at any time. To do so, please use the email address provided in the imprint.
Embedded Videos
On our websites, we embed videos that are not hosted on our servers. In order to ensure that accessing our websites containing embedded videos does not automatically lead to the download of third-party content, we show locally hosted preview images of the videos as a first step. As a result, the third-party provider does not receive any information.
Only after you click on the preview image, content is downloaded from the third-party provider. This provides the third party with information that you have accessed our site and with the usage data technically required for this purpose. Furthermore, the third-party provider is able to implement tracking technologies. We have no influence on the data processing by the third-party provider. By clicking on the preview image, you give us your consent to download content from the third-party provider.
The embedding is based on your consent by clicking on the preview image. Please note that the embedding of many videos leads to your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action. Where we use providers in third countries without an adequate level of protection and you give your consent, the transfer to this third country is based on Art. 49 (1) (a) GDPR.
| Provider | Adequate level of data protection | Withdrawal of consent |
| YouTube / Google (USA) | No adequate level of data protection. The data is transferred on the basis of Art. 49 (1) (a) GDPR. | If you click on a preview image, the content of the third-party provider is immediately downloaded. To avoid this downloading on other sites, please do not click on the preview image. |
Embedding of additional technical third-party content and functions
We use functions and content of the third-party providers listed below to enhance our websites.
Calling up our websites will lead to downloading content form third-party providers who provide these functions and content. As a result, the third-party provider receives the information that you have visited our site as well as the usage data technically required for this purpose.
We have no control over the further data processing by the third-party provider.
The legal basis for this data processing is your consent if you have previously given your consent via our banner/ consent management system.
Please note that the use of third-party content and functions may result in your data being processed outside the EU or EEA. In some countries, there is a risk that authorities may access the data for security and surveillance purposes without informing you or allowing you to take legal action.
Where we use providers in third countries without an adequate level of protection and you give your consent, the transfer to this third country is based on Art. 49 (1) (a) GDPR.
Podigee Podcast-Hosting
We use the podcast hosting service Podigee of provider Podigee GmbH, Schlesische Straße 20, 10997 Berlin, Germany. The podcasts are thereby loaded by Podigee or transmitted via Podigee.
The processing is for the purpose of our legitimate interests, i.e. interest in a safe and efficient provision, analysis as well as optimization of our podcast offer according to Art. 6 (1) (f) GDPR.
Podigee processes IP addresses and device information to enable podcast downloads/playbacks and to determine statistical data, such as call-up figures. This data is anonymized or pseudonymized before being stored in Podigee’s database, unless it is necessary for the provision of the podcasts.
Further information, e.g. on how to exercise your right to object, can be found in Podigee’s privacy policy: https://www.podigee.com/de/about/privacy/.
| Provider | Technical function or content | Maximum Storage Period | Adequate level of data protection | Withdrawal of consent |
| Google LLC (USA) | Google Video Google Photos Google Fonts | Until revoked | No adequate level of data protection. The data is transferred on the basis of Art. 49 (1) (a) GDPR. | If you no longer consent to the processing, please stop using our website. |
| Podigee GmbH | Audio/Video-Player | Until revoked | If you no longer consent to the processing, please stop using our website. |
Storage Period
Unless otherwise specified, we will delete your personal data if they are no longer required for the relevant processing purposes and no legal retention obligations oppose deletion.
Data Processors
We transfer your data to service providers who support us in the operation of our websites and related processes. These service providers are usually data processors within the meaning of Art. 28 GDPR. Our service providers are strictly bound by contracts and our instructions.
Any processors who may not have been previously disclosed are listed below. If data is transferred outside the EU or the EEA, we will also provide information on the adequate level of data protection.
| Service Provider / Processor | Purpose | Adequate level of data protection | Withdrawal of consent |
| Host Europe GmbH | Webhosting and Support | No adequate level of data protection. The data is transferred on the basis of Art. 49 (1) (a) GDPR. | If you no longer consent to the processing, please stop using our website. |
Your rights as a data subject
Asserting your rights
Unless otherwise described above, please contact us to assert your rights. You will find our contact details in our imprint.
Applicant and Candidate Privacy Policy
Because it is important to us that you feel secure and at ease visiting our website, we would like to inform you, as follows, about what we do with your data.
Controller
The Controller for the data processing operations described below is the office named in the imprint.
Types of information we collect during application process:
We process your data for the purpose of a potential employment relationship.
This includes your contact details like name and address as well as the information in your application, CV, transcripts, qualifications and more. If you submit a request for reimbursement of travel expenses, we also require your bank details.
If you submit additional personal information the legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR and § 26 (2) BDSG.
Source of information
This policy covers the information you share with us during the application or recruitment process.
Deletion of Data:
We will only process your information as long as it is necessary for the relevant purpose stated above. Personal data will be deleted unless data erasure is prohibited by a statutory retention period. Applications are deleted 3 months after the application procedure has been closed and we informed you that your application was not successful. Your relevant data will also be deleted if you withdraw your consent.
Specific data may be stored for longer periods (e.g. travel expense reports). The duration of storage depends on the statutory retention obligations pursuant to the German Fiscal Code or the German Commercial Code, which and may be 6 to 10 years. Furthermore, storage of your data is possible if processing is necessary for us for the establishment, exercise or defence of legal claims.
If you application was unsuccessful regarding the initially applied position, but your profile is still interesting to us, we will ask you whether we may continue to store your application for future job openings. This longer retention is based on your consent pursuant to Art. 6 (1) (a) GDPR, Art. 7 GDPR and § 26 (2) BDSG.
Recipients of data:
We handle your information confidentially and do not transmit your data to third parties.
If necessary, we use service providers who are strictly bound by instructions for IT, archiving and destruction of documents and with whom data processing agreements have been concluded.
Your rights:
For your rights as a data subject please see above.
For questions regarding data protection and to access your rights as a data subject, please first contact:
Kerstin Halfpap, HR Business Partner, kerstin.halfpap@e-velopment.de, 040 – 85187 101
Automated individual decision-making
Since the decision about your employment is not based exclusively on automated processing, no automated decision in individual cases within the meaning of Art. 22 GDPR takes place.
Contact details of our data protection officer
Our external data protection officer is available to provide further information on data protection.
datenschutz nord GmbH
Konsul-Smidt-Straße 88
28217 Bremen
Web: https://www.dsn-group.de
E-Mail: office@datenschutz-nord.de
When contacting our data protection officer, please specify the name of the company, stated in our imprint.