Privacy policy

1 Introduction

With these notes, we inform visitors and users of the website about the type, scope and purpose of the processing of personal data when visiting the website or using the services provided on it. We also provide information about the rights to which data subjects are entitled on the basis of data processing.

It is possible to visit the Internet pages without personal data being collected. However, for the use of some services offered on the website, it may be necessary to process personal data. In this case, the processing is carried out either on the basis of a legal permission norm or, in the event that a legal permission norm does not exist, on the basis of a consent that has been obtained from the data subject in advance.

These notes and explanations are based on the terminology of the General Data Protection Regulation (GDPR):

2.1 Personal data

Personal data is any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

2.2 Processing

Processing means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

2.3 Restriction of processing

Restriction of processing is the marking of stored personal data with the aim of limiting their future processing.

2.4 Profiling

Profiling is any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to that natural person’s job performance, economic situation, health, personal preferences, interests, reliability, behavior, location or change of location.

2.5 Pseudonymization

Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separate and is subject to technical and organizational measures to ensure that the personal data is not attributed to an identified or identifiable natural person.

2.6 Controller or person responsible for the processing

The controller or person responsible for processing is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data. Where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its designation may be provided for under Union or Member State law.

2.7 Processor

A processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

2.8 Recipient

A recipient is a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party. However, public authorities that may receive Personal Data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients.

2.9 Third Party

A third party is a natural or legal person, public authority, agency or other body other than the visitor to the Website, the Controller, the Processor and the persons authorized to process the Personal Data under the direct responsibility of the Controller or the Processor.

2.10 Consent

Consent is any expression of will given voluntarily for the specific case in an informed manner and unambiguously in the form of a statement or other unambiguous affirmative action by which the person concerned indicates that he or she consents to the processing of his or her personal data.

3 Person responsible for data protection

The following entity is responsible for data protection:

EMS Experts Managed Services GmbH, Marienbergstraße 94, 90411 Nuremberg, Germany.

External data protection officer: Lünke, Sven, Sepire GmbH, Am Felsenkeller 12, 90530 Wendelstein

4 Cookies
4.1 General Information

So-called cookies are used on the website. Cookies are text files that are stored on the computer system. Many cookies contain a unique identifier consisting of a string of characters by which users can be recognized by the system. This is used to adapt the Internet offer individually and user-friendly to the respective visitor.

There are different types of cookies. Most cookies are deleted from the hard drive at the end of the browser session (so-called session cookies). Other cookies remain on the computer and make it possible to recognize the computer on the next visit (so-called permanent cookies). These cookies are used, for example, to greet you with your individual user name and make it unnecessary, for example, to re-enter user names and passwords or to fill out forms.

4.2 Consent and functionality of the cookie banner

The required legal basis for the processing of data through the use of cookies differs according to whether the data processing is technically necessary or technically unnecessary and whether the collected data is transmitted to recipients in a third country. As a rule, the use of cookies is only permitted with the consent of the data subject based on the individual case.

If the use of cookies is not desired, the visitor can prevent the use of cookies by disabling the setting and storage of cookies in the settings of his browser. Existing cookies can also be deleted at any time in the settings. This is possible in all common Internet browsers.

In addition, a cookie banner has been set up on the website, which appears each time a new visit is made to the website. Via the cookie banner, consent can be limited to the use of technically necessary cookies or extended to technically unnecessary cookies. Consent can also be given only for individual cookies.

5 Collection of data and information

When the website is accessed, general data and information is collected and stored in log files on the server.

Data is collected on the type and version of browser used, the operating system used to access the website, the website from which the visitor accessed the website, the subpages accessed by the visitor, the date and time of access, the IP address, the Internet service provider and other similar data and information that is used to avert danger in the event of attacks on the IT system.

In no case will conclusions be drawn about the person of the visitor. Rather, the information is required so that the contents of the website can be displayed correctly. The data is also collected in order to have available the information needed for prosecution by the relevant law enforcement authorities in the event of a cyber attack.

In any case, the data is collected anonymously and stored separately from other personal data that may be collected elsewhere in compliance with the legal data protection requirements.

6 Possibility of registration

On the website, it may be possible for visitors and users to register.

The type, scope and content of the data that is collected in the process can be seen from the input mask. In any case, the collected data is collected and stored exclusively for our own purposes, in order to be able to carry out processing operations initiated by the visitor.

During registration, the IP address, the date and the time of registration are stored. This is done for the purpose of preventing misuse of the services provided and, if necessary, to be able to clarify any criminal offences. The data will not be passed on to third parties. Data will only be passed on if there is a legal obligation to pass it on or if it serves the purpose of criminal prosecution.

Insofar as information can be provided voluntarily during registration, this information will only be used for the purpose of offering visitors to the site content or services that can only be offered to registered users. The data collected during registration can be changed or completed at any time. The data can also be deleted at any time.

Registered users have the right at any time to send a request to the operator of the website to obtain information about what data is stored about him. Registered users also have the right to request the correction or deletion of their data at any time. In the event that the data must be retained due to legal regulations, the data will be blocked until the retention obligation expires, so that data processing can no longer take place and the data can only be processed for the purpose on the basis of which the retention obligation exists.

7 Newsletter

Insofar as the website offers the option of subscribing to a newsletter, personal data is collected. The type, content and scope of the data can be found in the relevant registration mask.

In order to avoid the use of third-party data during registration, a confirmation e-mail is first sent to the e-mail address provided, which contains a link with which the recipient confirms registration to receive the newsletter. This sends us a message that the registration for the newsletter has been confirmed. Only then will newsletter messages be sent to the registered e-mail address.

When registering for the newsletter, the IP address and the date and time of registration are stored. Accordingly, the collection serves both the prevention of misuse and legal protection.

The personal data collected when registering for the newsletter is used exclusively for sending newsletters.

The data will not be passed on to third parties. The registration for the newsletter can be revoked at any time. For this purpose, a link is included in each newsletter, with which the cancellation of the registration is transmitted to our system.

8 Contact via the website

Due to legal requirements, the website contains information that enables a quick electronic contact or direct communication with the operator of the website.

In the event of contact being made, e.g. by e-mail or via a contact form, the personal data transmitted will be stored automatically.

In any case, the data will be processed only for the purpose resulting from the contact and will not be disclosed to third parties, unless the disclosure is necessary for the processing of the contact.

9 Routine deletion and blocking of personal data

Personal data will only be stored for as long as is necessary for the respective purpose of the processing or due to legal requirements.

After the purpose has been achieved or the legally required retention period has expired, the personal data will be routinely deleted in accordance with the legal requirements. Insofar as the respective intended purpose of the processing has been achieved, but the data may not yet be deleted due to legal requirements, the data will be blocked.

10 Legal basis of the processing

The data processing is based on Art. 6 para. 1 DS-GVO. According to this, data processing is permissible if it

  • is carried out with the consent of the data subject;
  • is necessary for the performance of a contract to which the data subject is a party or for the performance of pre-contractual measures;
  • is necessary for the performance of a legal obligation;
  • is necessary to protect the vital interests of the visitor to the website or another natural person;
  • is necessary to protect the legitimate interests of the controller or a third party, unless such interests are overridden by the interests or fundamental rights and freedoms of the website visitor which require the protection of personal data, in particular where the visitor is a child.

Insofar as the data processing cannot be based on any other legal basis thereafter, the data processing shall in principle only be carried out with the consent of the data subject, which shall be obtained and documented by the data subject prior to the start of the processing.

Insofar as data processing is based on a legitimate interest, it is additionally necessary to weigh up the interests of the data subject before processing begins, which may nevertheless preclude data processing, even if data processing appears expedient for business purposes. In this case, expediency is regularly not sufficient. Rather, it is necessary that significant interests of the company, its employees or shareholders or owners are directly affected by the data processing.

11 Right to Information and Correction

Persons whose data is processed have a legal right to information, correction and deletion of their data. Persons whose data is processed have a legal right to information, correction and deletion of their data.

In the event of a request for information, information must be provided on the following content:

  • Purposes of processing;
  • Categories of personal data being processed;
  • Recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular in the case of recipients in third countries or international organizations;
  • If possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration;
  • Existence of a right to rectification or erasure of personal data concerning them or to restriction of processing by the controller or a right to object to such processing;
  • Existence of a right of appeal to a supervisory authority;
  • If the personal data is not collected from the data subject: All available information about the origin of the data;

In the event of a request for rectification, inaccurate data shall be corrected or completed.

12 Right to deletion

In the event of a request for erasure, the personal data concerned shall be erased without delay,

  • if the personal data have been collected or otherwise processed for purposes for which they are no longer needed;
  • the data was collected solely on the basis of the data subject’s consent, which the data subject has revoked;
  • the data subject objects to the processing pursuant to Article 21 DS-GVO and, in the event of revocation pursuant to Article 21 (1) DS-GVO, there are no overriding legitimate grounds for the processing;
  • the personal data have been processed unlawfully;

In the event that the data to be erased have been made public, appropriate measures are taken in accordance with Art. 17 (1) DS-GVO, taking into account the available technology and the costs of implementation, to inform third parties processing the published personal data of the erasure request.

13 Right to restriction of processing

The data subject has a legal right to request the restriction of the processing of his or her data if he or she disputes the accuracy of the personal data or has lodged an objection pursuant to Article 21 (1) of the GDPR. In this case, the processing shall be restricted for a period of time necessary to verify the accuracy of the personal data or to determine whether there are grounds for the data processing that override the interest of the data subject. However, if the processing is unlawful thereafter and the data subject refuses to have his or her data erased, he or she may also request the restriction of the processing of his or her data instead.

The processing of the data shall also be restricted if it is no longer required for the purpose for which the data was collected, but the data must still be retained for the assertion, exercise or defense of legal claims.

The above rights may be exercised at any time by the data subject submitting a request to this effect to the data protection officer or the management.

14 Right to data portability

Individuals whose data are processed have a legal right to have the data transferred in a structured, commonly used and machine-readable format or transmitted to a third party without hindrance if the processing is based on consent pursuant to Art. 6 (1) (a) DS-GVO or Art. 9 (2) (a) DS-GVO or on a contract pursuant to Art. 6 (1) (b) DS-GVO and the processing is carried out with the aid of automated procedures, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Persons whose data is processed have a legal right to information, correction and deletion of their data.

15 Right to object

Data subjects have a legal right to object to data processing at any time.

In the event of an objection, the data will no longer be processed unless there are demonstrably compelling legitimate grounds for continuing to process the data which override the interests, rights and freedoms of the visitor to the website, or the processing serves to assert, exercise or defend legal claims.

In the event of objection to processing for advertising purposes, the objection shall in principle take precedence. The data will then no longer be used for advertising purposes.

Persons whose data is processed have a legal right to information, correction and deletion of their data.

16 Automated Decisions in Individual Cases including Profiling

Data subjects have a legal right to expect that a decision concerning them which produces legal effects is not based solely on automated processing or similarly significantly affects them. This does not apply to decisions which are necessary for the conclusion or performance of a contract with the data subject, or where this is permitted by law and appropriate measures are included to safeguard the rights and freedoms and legitimate interests of the website visitor, or where this is done with the explicit consent of the website visitor.

If the decision is necessary for the conclusion or performance of a contract, or if the automated decision is made with the explicit consent of the data subject, reasonable measures will be taken to safeguard the rights and freedoms as well as the legitimate interests of the website visitor, such as measures allowing the data subject to have an influence on the procedure, to intervene and to express his or her point of view.

If the data subject wishes to exercise the rights concerning automated decisions, he or she may, at any time, contact our data protection officer or another employee of the controller.

Persons whose data is processed have a legal right to information, correction and deletion of their data.

Notwithstanding the foregoing, an automated decision in individual cases and profiling will not take place.

17 Right to revoke consent granted under data protection law

Data subjects may revoke a given consent to data processing at any time.

Persons whose data is processed have a legal right to information, correction and deletion of their data.

18Use of analysis tools, tracking tools and other services

Components of various third-party companies may be used on the Website to collect and analyze information about visitors to the Internet pages and their surfing behavior, in some cases in real time. In doing so, interactions are statistically recorded and processed in order to obtain an overview of the online activities of the visitors and users of the website.

The use of these components serves, on the one hand, the purpose of tailoring the marketing for the Internet offering to the visitors and users and thus increasing the advertising effectiveness of the Internet pages. On the other hand, this serves the purpose of being able to detect and correct errors of a technical or other nature.

The components are software components from third-party companies. Insofar as such components are used, the type, content and scope as well as the purpose of the data processing is explained and pointed out below.

The components use different types of cookies. These are also explained below. Cookies can be prevented from being set in the settings of the Internet browser. This prevents personal data from being collected by the components used. In addition, the visitor must agree to the use of cookies via the settings in the cookie banner. Details of this are shown above under item 4.

In addition, provider companies frequently provide an option to object centrally to the collection of data by their components. Insofar as this is possible, this is also explained below.

18.1 Data transfer to the USA

Through the use of tools from providers based in the USA, data is also transmitted to the provider in the USA, even if the contract for the use of the tool is concluded with a subsidiary of the provider whose registered office is within the European Union.

The legal basis for the transfer of data through the use of the tool is in each case a consent related to the individual case in accordance with Art. 49 (1) a) DSGVO.

In this context, it is pointed out that no adequacy decision of the EU Commission exists for the USA. In this respect, there is a risk for the data subject that government agencies in the USA may access the transmitted data without any specific reason and without any possibility of seeking effective legal protection against this being guaranteed.

18.2 Data protection provisions regarding the use of Facebook services

The operating company of Facebook is Facebook, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA. The controller of personal data, if a data subject lives outside the USA or Canada, is Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The provider is a subsidiary of a company based in the USA. It can therefore not be ruled out that data will be transferred to the USA. Reference is made to the above information in section 18.1.

For the data processing, the operator of this website and Facebook are to be regarded as joint controllers within the meaning of Art. 26 DSGVO. However, the primary responsibility for processing at Facebook lies with Facebook, because the operator of the website has no knowledge of the type and extent of data processing by Facebook and cannot influence this. However, the data subject rights can be asserted either directly with Facebook or with the operator of the site. Insofar as this concerns data processing by Facebook, the request will be forwarded to Facebook.

The data policy published by Facebook, which can be accessed at https://www.facebook.com/about/privacy, provides information about the collection, processing and use of personal data by Facebook. It also explains which setting options Facebook offers to protect the privacy of the visitor to the website. In addition, various applications are available that make it possible to suppress data transmission to Facebook. Such applications can be used by the data subject to suppress data transmission to Facebook.

By calling up the website on which a Facebook component (Facebook plug-in) has been integrated, a representation of the corresponding Facebook component is downloaded A complete overview of all Facebook plug-ins can be found at https://developers.facebook.com/docs/plugins/. As part of this technical procedure, Facebook receives knowledge of which sub-pages are visited.

If the data subject activates one of the Facebook buttons integrated on our website, for example the “Like” button, or if the data subject makes a comment, Facebook assigns this information to the personal Facebook user account of the visitor to the website and stores this personal data.

The service also always receives the information about the visit to the website if the visitor to the website is logged in to it at the same time. This applies regardless of whether the button is clicked. To prevent this, the user must log out of the account during this time.

18.3 Privacy policy on the use and application of Instagram

The operator of the Instagram services is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. The applicable privacy policy of Instagram can be found https://help.instagram.com/519522125107875.

The provider is a subsidiary of a company based in the USA. It can therefore not be ruled out that data will be transferred to the USA. Reference is made to the above information in section 18.1.

Instagram is a service through which users can share photos and videos and disseminate them on other social networks.

When calling up the website on which an Instagram component (Insta button) is integrated, a representation of the corresponding component is downloaded by Instagram. Instagram thereby receives knowledge about which subpage of the website is visited.

The data and information transmitted is assigned to the personal Instagram user account of the visitor of the website and stored and processed by Instagram.

The service also always receives the information about the visit to the website if the visitor to the website is logged in to it at the same time. This applies regardless of whether the button is clicked. To prevent this, the user must log out of the account during this time.

18.4 Data protection provisions on the use and application of Google services

The operating company is Google Ireland Limited, Gordon Hous e, Barrow Street, Dublin 4, Ireland. Data protection information can be found at the following link https://policies.google.com/privacy?hl=com.

The provider is a subsidiary of a company based in the USA. It can therefore not be ruled out that data will be transferred to the USA. Reference is made to the above information in section 18.1.

18.4.1 Google Tag Manager

Google Tag Manager also enables the integration of tracking codes and conversation pixels by integrating the Google Tag Manager code on the website.

For this purpose, interactions that are made on the website are recorded and forwarded to connected tools. In this respect, the Google Tag Manger acts as a data container for connected third-party applications, but the collected data itself is not evaluated.

Which data is collected depends on the respective connected tools. Further information on this is contained in the respective tools used.

18.4.2 Use of Google Signals

Google-Signals collects session data on websites, such as location, search history and surfing behavior and transmits this to Google, which is then linked to a Google account if the visitor to the website maintains a Google account, is logged in there and has activated the option for personalized advertising in the account settings. In this way, Google collects demographic characteristics of Google Account users and makes this information available in anonymized form to operators of Internet pages on which Google Signals is set up. In this way, the operator of the website can carry out so-called re-marketing campaigns across devices.

Google signals are only used on the website if the visitor to the website has expressly consented to the use of Google signals. Otherwise no session data will be collected and processed.

Further information on Google signals can be obtained from the provider at https://support.google.com/analytics/answer/9445345?hl=de#zippy=%2Cthemen-in-diesem-artikel

18.4.3 Data protection regulations for the deployment and use of YouTube

YouTube is an Internet video portal through which registered users can publish video clips.

When you visit the website that contains the YouTube plug-in, the browser downloads a representation of the Twitter component. In this way, YouTube is informed about which pages are visited.

If the user presses one of the integrated buttons, the transmitted data and information are assigned to the personal YouTube user account of the visitor to the website and stored and processed by YouTube.

In addition, LinkedIn always receives information about the visit to the website if the visitor to the website is logged in to LinkedIn at the same time. This applies regardless of whether the button is clicked. To prevent this, the user must log out of the account during this time.

18.4.4 Use of Google Web Fonts

Google Web Fonts is a service that integrates fonts on a website. When you visit the website on which Google Web Fonts is integrated, the browser downloads the font. In this way, Google Web Fonts is informed about which pages are visited.

18.5 Data protection regulations for the application and use of LinkedIn

LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

The provider is a subsidiary of a US-based company, LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. It can therefore not be ruled out that data will be transferred to the USA. It can therefore not be ruled out that data will be transferred to the USA. Reference is made to the above information in section 18.1.

LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland is responsible for data protection issues outside the USA. LinkedIn’s applicable data protection regulations are available at https://www.linkedin.com/legal/privacy-policy

LinkedIn is an Internet-based social network for business contacts.

When you visit the website that contains the LinkedIn plug-in, the browser downloads a representation of the LinkedIn component. In this way, LinkedIn is informed about which pages are visited.

If the user clicks one of the integrated buttons, the transmitted data and information are assigned to the personal LinkedIn user account of the visitor to the website and stored and processed by LinkedIn.

In addition, LinkedIn always receives information about the visit to the website if the visitor to the website is logged in to LinkedIn at the same time. This applies regardless of whether the button is clicked. To prevent this, the user must log out of the account during this time.

LinkedIn offers an additional option at https://www.linkedin.com/psettings/guest-controls to unsubscribe from e-mail messages, SMS messages and ads and to manage ad settings. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame who may set cookies. Such cookies can be rejected at https://www.linkedin.com/legal/cookie-policy

18.6 Data protection regulations for the deployment and use of Xing

The operating company of Xing is XING SE, Dammtorstraße 30, 20354 Hamburg, Germany. The data protection regulations published by Xing, which can be accessed at https://www.xing.com/privacy, provide information about the collection, processing and use of personal data by Xing. Xing has also published data protection notices for the XING share button at https://www.xing.com/app/share?op=data_protection.

Xing is an internet-based social network for business contacts.

When you visit the website that contains the Xing plug-in, the browser downloads a representation of the Twitter component. In this way, Xing is informed about which pages are visited.

If the user presses one of the integrated buttons, the transmitted data and information are assigned to the personal Xing user account of the website visitor and stored and processed by Xing.

In addition, LinkedIn always receives information about the visit to the website if the visitor to the website is logged in to LinkedIn at the same time. This applies regardless of whether the button is clicked. To prevent this, the user must log out of the account during this time.

18.7 Data protection regulations for the deployment and use of Kununu

Kununu’s operating company is New Work Austria Xing kununu onlyfy GmbH, Schottenring 2-6, A – 1010 Vienna, Austria. The data protection regulations published by Kununu, which can be accessed at https://privacy.xing.com/de/datenschutzerklaerung, provide information about the collection, processing and use of personal data by Kununu.

Kununu is an Internet portal on which employees can publish reviews and experiences about companies, specifically with regard to their qualities as an employer. This is intended to encourage companies to create the most employee-friendly working conditions possible. According to the provider, the rating is anonymous. The anonymity of the submitted reviews should enable potential applicants and other interested parties to get an objective picture of the company as an employer.

When you visit the website that contains the Kununu plug-in, the browser downloads a representation of the Kununu component. In this way, Kununu is informed about which pages are visited.

If the user presses one of the integrated buttons, the transmitted data and information are assigned to the personal Kununu user account of the visitor to the website and stored and processed by Kununu.

In addition, Kununu always receives information about the visit to the website if the visitor to the website is logged in to Kununu at the same time. This applies regardless of whether the button is clicked. To prevent this, the user must log out of the account during this time.

18.8 Privacy Policy Regarding the Deployment and Use of HubSpot

Betreibergesellschaft von HubSpot ist die HubSpot Ireland Limited in 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. Der Anbieter ist eine Tochtergesellschaft eines in den USA ansässigen Unternehmens, der HubSpot Inc., 25 First Street, 2nd Floor Cambridge, MA 02141 United States.

It can therefore not be ruled out that data will be transferred to the USA. Reference is made to the above information in section 18.1.

The data protection regulations published by HubSpot, which are available at https://legal.hubspot.com/de/privacy-policy, provide information about the collection, processing and use of personal data by HubSpot.

HubSpot is used for marketing purposes and comes e.g. B. in the generation of leads, in customer service, when sending newsletters and automated mailings, or in the context of social media publishing, reporting or contact management.

For this purpose, HubSpot uses cookies, which are stored locally in the cache of the web browser of the end device of the visitor to the website. The IP address, geographic location, type of browser, duration of the visit and the pages accessed are collected. This data is stored on the servers of HubSpot’s service providers and evaluated by HubSpot on behalf of the operator of the website.

Responsible supervisory authority for us is:
Bavarian State Office for Data Protection Supervision
street address
Promenade 18
91522 Ansbach

The supervisory authority to which you have lodged a complaint will inform you about the status and the results of the complaint, including the possibility of a judicial remedy under Art. 78 EU-DSGVO.

Our data protection officer will be happy to answer any questions you may have at any time.

Status: May 2023