Privacy policy
§ 1 Information on the collection of personal data
(1) We inform you in the following about the collection of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.
(2) The controller according to Art. 4(7) of the EU General Data Protection Regulation (GDPR) is
Anton Klocke Antriebstechnik GmbH
Senner Str. 151
33659 Bielefeld
Tel: +49 (521) 9 50 05 -01
Email: info@klocke-antrieb.de
(supplementary our Imprint)
You can reach our data protection officer at dsb@klocke-antrieb.de or our postal address with the addition of "the data protection officer".
Competent supervisory authority: State Commissioner for Data Protection and Freedom of Information NRW (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, E‑mail: poststelle@ldi.nrw.de
(3) When you contact us by e-mail, contact form, via our applicant portal or in the case of a competition entry, the data you provide (such as your e-mail address, name, telephone number, address if applicable, date of birth and documents sent by you) will be stored by us in order to answer your questions or to enable consideration in any application process or any competition draw and prize allocation or distribution. We delete the data accruing in this context after the storage is no longer required or restrict the processing if there are legal retention obligations.
(4) If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail about the respective processes below. In doing so, we will also state the defined criteria for the storage period.
§ 2 Your rights
(1) You have the following rights against us regarding the personal data concerning you:
- Right to information,
- Right to rectification or deletion,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.
(2) You also have the right to complain about the processing of your personal data by us to a data protection supervisory authority. You can Consent can be revoked at any time; The revocation does not affect the legality until the revocation (Article 7(3) GDPR).
§ 3 Collection of personal data when visiting our website
(1) When using the website for purely informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data that are technically necessary for us to display our website and to ensure its stability and security. We process the above server log data for the technical provision and security of the website on the basis of Art. 6(1)(f) GDPR (legitimate interest).
- IP address
- Date and time of the request
- Time zone difference from Greenwich Mean Time (GMT)
- Content of the request (concrete page)
- Access status/HTTP status code
- Data volume transferred in each case
- Website from which the request comes
- Browser
- Operating system and its interface
- Language and version of the browser software.
(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive assigned to the browser you are using and through which the body that sets the cookie (here by us), certain information flows. Cookies cannot execute programs or transfer viruses to your computer. They are used to make the Internet offer as a whole more user-friendly and effective.
(3) Use of cookies:
a) This website uses the following types of cookies, the scope and functionality of which are explained below:
- Transient cookies (for this b)
- Persistent cookies (in addition c).
b) Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.
c) Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all functions of this website.
e) We use cookies to identify you for subsequent visits if you have an account with us. Otherwise, you would have to log in again for each visit.
In addition, we recommend that you regularly delete your cookies and browser history manually.
We distinguish technically necessary Technologies (§ 25, paragraph 2 TDDDG, in conjunction with Art. 6, paragraph 1, letter f of the GDPR) not necessary (Analysis/Marketing) that we only with consent use (§ 25, paragraph 1, TDDDG, Art. 6, paragraph 1, letter a GDPR). Your selection is documented in our consent management tool and can be accessed there at any time. Repealed will be.
Section 4 Use of Google Analytics 4
(1) We set Google Analytics 4 (Google Ireland Ltd.) only with consent a (§ 25, paragraph 1, TDDDG/Art. 6, paragraph 1(a), GDPR). GA4 does not store IP addresses; the Consent Mode v2 is activated. As far as data is transferred to Google LLC (USA) If this is to be submitted, it is done on the basis of EU-US Data Privacy Frameworks (DPF) or. SCC; Details at Google. Revocation at any time via the Cookie settings. In GA4, the storage of event data is standardly set to 2 months terminated and can be extended 14 months to be expanded. We use [Use your attitude]; IP addresses are provided by GA4 not logged/stored.
(2) Information from the third-party provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. User terms: https://www.google.com/analytics/terms/de.html, overview of data protection: https://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: https://www.google.de/intl/de/policies/privacy.
§ 5 Use of Google Maps
(1) On this website we use the service offered by Google Maps. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. Google Maps is only after your consent loaded (§ 25, Para. 1 TDDDG/Art. 6, Para. 1 a DSGVO). Provider is Google Ireland Ltd.; data transmission to Google LLC (USA) if applicable based on DPF/SCC.
(2) By visiting the website, Google receives the information that you have called up the corresponding sub-page of our website. In addition, the data mentioned under § 3 of this statement are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment with your profile at Google, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.
(3) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information about your rights in this regard and setting options for protecting your privacy: https://www.google.de/intl/de/policies/privacy.
Google also processes your personal data in the USA and has submitted to the DPF/SCC.
§ 6 Use of Albacross
On this website, data is collected and stored for marketing, market research, and optimization purposes using the Albacross technology as a tracking provider for B2B purposes by Albacross Nordic AB. We use Albacross only with consent a (§ 25, paragraph 1, TDDDG/Art. 6, paragraph 1a, GDPR). Recipient: Albacross Nordic AB (SE). Storage period: 30 days. A revocation can be made at any time in writing via email to: dsb@klocke-antrieb.de to be carried out.
§ 7 YouTube video integration
(1) We have integrated YouTube videos into our online offer, which are based on https://www.YouTube.com are stored and can be played directly from our website. These are all integrated in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned in paragraph 2 are transmitted. We have no influence on this data transmission.
(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. Additionally, the data mentioned in § 3 of this statement is transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in with Google, your data is directly associated with your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research and/or to tailor its website. Such analysis takes place, in particular (even for non-logged-in users), to provide demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. (§ 25 TDDDG)
(3) For more information on the purpose and scope of data collection and processing by YouTube, please refer to the privacy policy. There you will also find further information about your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and has submitted to the DPF/SCC.
§ 8 Use Simple Membership Plugin
As part of the registration for our 3D configurator and hydraulic hose configurator, the explicitly named personal data is collected and stored for the purpose of enabling registration. We use the „Simple Membership“ plugin for the transmission of the data (https://de.wordpress.org/plugins/simple-membership/). Legal basis As a rule. Art. 6(1)(b) GDPR (User account/Registration) + if applicable. Art. 6(1)(f) (Abuse prevention), Storage duration/deletion periods, Recipients (if payment/payment gateways are used). Note: The data is primarily in your own WordPress instance stored(plugin).
§ 9 Communication via Messenger (Chat) or MS Teams/Chatbot
We use messengers for communication purposes and therefore ask you to observe the following information on the functionality of the messengers, on encryption, on the use of the metadata of the communication and on the possibilities of objection.
It is also possible to contact us by alternative means, e.g. by telephone or e-mail. For this purpose, please use the contact options provided or the contact options provided within our online offer.
In the case of „end-to-end encryption“ of content (i.e., the content of messages and attachments), we point out that the communication content (i.e., the content of the message and attached images or other data) is encrypted end-to-end. This means that the content of the messages is not viewable, not even by the messaging providers themselves. You should always use a current version of the messaging app with enabled encryption to ensure the encryption of message content.
We also inform our communication partners that although the providers of the messengers do not have access to the content, they can nevertheless obtain information about when and how communication partners communicate with us, as well as technical information about the communication partners’ device used and, depending on the settings of your device, location information (so-called metadata).
Information on legal bases: If we ask communication partners for permission before communicating with you via Messenger, the legal basis for our processing of your data is your consent. Otherwise, if we do not ask for consent and you, for example, contact us on your own initiative, we use Messenger as a contractual measure in relation to our contractual partners and as part of initiating a contract, and in the case of other interested parties and communication partners, based on our legitimate interests in quick and efficient communication and fulfilling the needs of our communication partners in the communication via Messenger. Furthermore, we point out that we will not first transmit the contact information you provide to the Messenger without your consent.
Revocation, objection and deletion: You can revoke a given consent at any time and object to the communication via Messenger at any time. In the case of communication via Messenger, we delete the messages in accordance with our general deletion guidelines (i.e., e.g., as described above, after the end of contractual relationships, in the context of archiving requirements, etc.) and otherwise as soon as we can assume to have answered any information provided by the communication partners, if no reference back to a previous conversation is to be expected and the deletion does not conflict with any legal retention obligations.
Reservation of reference to other communication channels: Finally, we would like to point out that, for reasons of your security, we reserve the right not to answer inquiries via Messenger. This is the case if, for example, contractual internals require special confidentiality or an answer via Messenger does not meet formal requirements. In such cases, we will refer you to more adequate communication channels.
- Types of data processed: contact data (e.g. e-mail, telephone numbers); usage data (e.g. websites visited, interest in content, access times); meta, communication and procedural data (e.g. IP addresses, time data, identification numbers, consent status). Content data (e.g., entries in online forms).
- Data subjects: Communication partners.
- Purposes of processing: contact requests and communication. Direct marketing (e.g. by e-mail or post).
- Legal basis: Consent (Art. 6 para. 1 p. 1 lit. a) DSGVO). Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).
Further information on processing operations, procedures and services:
- Instagram: Messaging via the social network Instagram; service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO); Website:https://www.instagram.com. Privacy Policy:https://instagram.com/about/legal/privacy.https://www.instagram.com; Privacy policy:.Data protection policy:https://instagram.com/about/legal/privacy..
- Facebook Messenger: Facebook Messenger with end-to-end encryption (Facebook Messenger end-to-end encryption requires activation if it should not be activated by default);,parent company:;Privacy policy1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com;Website:https://www.facebook.com;Privacy policy:Third country transfer basis: EU-US Data Privacy Framework (DPF),Order processing agreement:https://www.facebook.com/legal/terms/dataprocessing. Basis third country transfer: EU-US Data Privacy Framework (DPF), Standard Contractual Clauses (https://www.facebook.com/legal/EU_data_transfer_addendum).
- Microsoft Teams: Microsoft Teams - Messenger; Service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; parent company: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA; Legal basis: Legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO);https://www.microsoft.com/de-de/microsoft-365;Privacy policy:https://privacy.microsoft.com/de-de/privacystatement,Security information: https://www.microsoft.com/de-de/trustcenter.Third country transfer basis: EU-US Data Privacy Framework (DPF),Standard Contractual Clauses (https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA).
Our Live Chat Support
Our live chat uses on the website klocke-antrieb.de and the associated websites,, a live chat of the company Lime Technologies Germany GmbH, Probsteigasse 44-46, 50670 Cologne, Germany. You can use the live chat as a contact form to chat with our staff in almost real time. Personal data is collected when the chat starts.
- Date and time of the call,
- browser type/version,
- IP address,
- operating system used,
- URL of the previously visited website,
- Amount of data sent.
- First name, last name
- E-mail address
Depending on the course of the conversation with our employees, further personal data may occur in the chat, which is entered by you. The nature of this data depends largely on your request or the problem you describe to us.
Going to http://www.klocke-antrieb.de de loads the chat widget in the form of a JavaScript file from AWS Cloudfront. The chat widget effectively represents the source code that runs on their computer and enables the chat.
In addition, lime stores the history of the live chats. This serves the purpose of saving you extensive details about the history of your request and to continuously monitor the quality of our live chat service. If you do not wish to do so, you are welcome to datenschutz@klocke-antrieb.de inform us. The stored live chats will then be deleted immediately by us.
Your data will be used exclusively for the purpose of communication and will be deleted by us upon request. Furthermore, you have the option of contacting the operator directly and requesting the deletion of the data.
The live chat widget (Provider: Lime Technologies Germany GmbH) will only after your consent charged (§ 25, paragraph 1, TDDDG/Art. 6, paragraph 1 a, GDPR). Subsequent communication takes place on Article 6(1)(b/f) GDPR.
Privacy notice for the use of the Chatbot (AI Agent) from Lime Connect
Anton Klocke Antriebstechnik GmbH uses a chat software from Lime Technologies Germany GmbH, Probsteigasse 44-46, 50670 Cologne, Germany. Through the chat widget, you can communicate directly with our AI agent. Depending on your input and the course of the conversation, personal data will be processed, such as IP address, date and time of access, browser type, and, if applicable, name and email address, as indicated.
The processing of this data takes place to improve our customer service and to efficiently process your request in accordance with Art. 6(1)(f) GDPR. The chat history can be stored for a limited period (6 months) to ensure the quality of our service. For more information, please see our general privacy policy.
§ 10 Presence in social networks (social media platforms)
We maintain online presences within social networks and process user data in this context in order to communicate with users active there or to offer information about us, our products or promotions.
The social networks, for their part, process the personal data of users basically for the following purposes of their own: Advertising (analysis, delivery of personalized advertising), creation of user profiles and market research. Which data a social network collects and how it is used is described by the respective social networks in their privacy policies. There you will also find, among other things, information about the legal basis of the processing of the respective social network and how you can exercise your data subject rights against the social network. The respective operator is solely responsible for the processing by a social network. In what way a social network uses the data from a user's visit to or interaction with the respective Anton Klocke Antriebstechnik online presence in the social network for its own purposes after collection, to what extent activities are assigned to individual users, how long the social network stores this data and whether data is passed on to third parties is not known to us and can only be answered by the social network. We have no influence on this use of data by a social network and the social network is the sole data controller in this respect.
Social media platforms:
- Facebook: Social network; Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ,parent company:, 1 Hacker Way, Menlo Park, CA 94025, USA; Website: https://www.facebook.com;Privacy policy: https://www.facebook.com/settings?tab=adshttps://www.facebook.com/about/privacy; Opt-out: Ads settings: https://www.facebook.com/settings?tab=ads; Additional privacy notices:Facebook Page Personal Data Sharing Agreement: https://www.facebook.com/legal/terms/page_controller_addendum, Facebook Page Privacy Notice: https://www.facebook.com/legal/terms/information_about_page_insights_data.
- Instagram: Social network; Service provider: Meta Platforms Ireland Ltd., 1601 Willow Road, Menlo Park, CA, 94025, USA; Website: https://www.instagram.com; Privacy policy:, https://instagram.com/about/legal/privacy; Joint responsibility pursuant to Article 26 GDPR
- LinkedIn: : Social network; service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;, Website: https://www.linkedin.com; Privacy policy:https://www.linkedin.com/legal/privacy-policy; Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out..
The use of the Meta-pixels and if necessary. Extended matching takes place only with consent (§ 25, paragraph 1, TDDDG/Art. 6, paragraph 1, a GDPR) and is handled by us CMP controlled. Provider: Meta Platforms Ireland Ltd.; transmission to Meta Platforms, Inc. (USA), if applicable DPF/SCC. You can revoke your consent at any time via the Cookie settings.
The data collected about you in this context will be processed by the respective social network and, where applicable, transferred to countries outside the European Union / European Economic Area. Anton Klocke Antriebstechnik GmbH cannot exclude the possible associated risks for users.
Facebook PixelWith the help of the Facebook pixel, Facebook can, on the one hand, determine the visitors to our online offering as a target group for the display of advertisements („Facebook Ads“). Accordingly, we use the Facebook pixel to display Facebook Ads only to such users on Facebook and within the services of the partners cooperating with Facebook („Audience Network“).“ ("Audience Network" ) that have also shown an interest in our online offering or that display certain characteristics (e.g., interest in specific topics or products that can be seen from the websites visited) that we transmit to Facebook („Custom Audiences“). With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad („Conversion measurement“).
Enhanced matching for the Facebook PixelWhen using the Facebook pixel, the „Advanced Matching“ add-on function can be used. In this context, data such as users’ email addresses or Facebook IDs are transmitted encrypted to Facebook to create target groups.
§ 11 Content for advertising and marketing purposes Google Ads
I. Description and scope of data processing
Google Ads allows us to display ads in the Google search engine or on third-party websites when you enter certain search terms into Google (keyword targeting). In addition, targeted advertising can be displayed based on user data available at Google (such as location data and interests). As a website operator, we can quantitatively evaluate this data by, for example, analyzing which search terms led to the display of our ads and how many ads resulted in corresponding clicks.
II. Legal basis for data processing
Advertising/measurement days are only with consent set (§ 25, paragraph 1, TDDDG, Art. 6, paragraph 1(a), GDPR). Consent Mode v2 is activated (EEA requirements).
III. Purpose of data processing
The purpose of this processing is to enable us to carry out advertising activities.
IV. Duration of storage
The personal data are stored for as long as necessary to fulfill the processing purpose. The data are deleted as soon as they are no longer required to achieve the purpose.
V. Right of objection and removal
We do not collect any data without your consent. You can withdraw your consent at any time.
§ 12 Content for advertising and marketing purposes Meta Ads
I. Description and scope of data processing
Meta Ads allows us to display advertising on the platforms of the Meta Group (Facebook, Facebook Messenger and Instagram) through targeted advertising based on the user data available to Meta (e.g., location data and interests) (Targeting). As a website operator, we can quantitatively evaluate this data by, for example, analyzing which ads led to corresponding clicks.
II. Legal basis for data processing
The legal basis for the processing of the data is your consent pursuant to Art. 6(1)(a) GDPR. § 25, paragraph 1, TDDDG.
III. Purpose of data processing
The purpose of this processing is to enable us to carry out advertising activities. Advertising/measurement days are only with consent set (§ 25, paragraph 1, TDDDG, Art. 6, paragraph 1(a), GDPR). Consent Mode v2 is activated (EEA requirements).
IV. Duration of storage
The personal data will be stored for as long as necessary to fulfill the processing purpose. The data will be deleted as soon as it is no longer necessary to achieve the purpose.
V. Right of objection and removal
We do not collect data without your consent. You can revoke your consent at any time. The use of Meta-pixels and if necessary. Extended matching takes place only with consent (§ 25, paragraph 1, TDDDG/Art. 6, paragraph 1, a GDPR) and is handled by us CMP controlled. Provider: Meta Platforms Ireland Ltd.; transmission to Meta Platforms, Inc. (USA), if applicable DPF/SCC. You can revoke your consent at any time via the Cookie settings.
§ 13 Contact and request management via a funnel
For the provision of contact, request or application forms, we use an external service provider: Perspective Software GmbH, Müggelstraße 22, 10247 Berlin; Mailbox 659770, D-96035 Bamberg (hereinafter „Perspective“). Perspective itself stores the data exclusively on European servers. However, there is the possibility that the data may be accessible to entities in the United States of America, as Perspective employs subcontractors based in the USA. Since July 2023, the EU-US Data Privacy Framework (DPF) decided by the European Commission has served as the legal basis for these potential transfers. Perspective's subcontractors are therefore committed to a high level of data protection. Nevertheless, there remains a risk that data could be processed by US authorities for control and surveillance purposes. Therefore, when transferring data to the United States, Perspective offers additional measures and guarantees in accordance with the requirements of the GDPR to ensure an adequate level of protection. For example, by concluding standard contractual clauses between Perspective and the sub-processors. https://www.perspective.co/de/impressum
I. Description and scope of data processing
When using the contact, inquiry or application forms provided by Perspective, the following data is transmitted to Perspective’s servers:
- Date and time of the access
- Websites from which you came to our website („Referrer“)
- Contextual information (e.g., button clicks on the pages, choices made on the pages)
- The contents of all filled-in text fields (e.g., contact details, such as name or address, or other personal data, depending on the question depicted in the specific text field)
- Files uploaded by you
II. Purpose Legal basis for data processing
The purpose of this data processing is to ensure the communication that you have initiated.
The processing of data from contact, inquiry, or application forms is therefore carried out primarily based on your consent. The legal basis is Art. 6(1)(a) GDPR. If a contract is initiated via an inquiry form, Art. 6(1)(a)(b) GDPR is also the legal basis. In addition to Art. 6(1)(a)(f) GDPR, Art. 88 GDPR in conjunction with § 26 BDSG can also be the legal basis for the processing of data in an application form.
III. Duration of processing
The personal data will be kept for as long as necessary to fulfill the processing purpose, or until the consent is revoked. Exceptions to this principle include data that Perspective must retain due to legal obligations. These include, for example, the commercial and tax retention obligations. These retention periods currently range up to ten years. For application data, the retention period is – currently – up to six months after the completion of the application process, unless a longer retention period has been explicitly agreed upon.
IV. Rights of the affected parties
You have the right to obtain information about the origin, recipients and purpose of the personal data stored at any time free of charge. You also have the right to request the rectification, blocking or deletion of this data. For this purpose and for any other questions regarding data protection, you can contact us at any time at the address provided in the legal notice. Furthermore, you have the right to lodge a complaint with the competent supervisory authority in the event of violations of the GDPR.
The consent to data processing can be revoked at any time by a non-formal notification to us (e.g. by email). The revocation will not affect the legality of the processing that took place based on the consent until the revocation.
In addition, you have the right to request the restriction of the processing of your personal data in certain circumstances. The right to restrict processing exists in the following cases:
- If you dispute the accuracy of the personal data stored with us, we usually need time to verify this. During the period of the verification, you have the right to request the restriction of the processing of your personal data.
- If the processing of your personal data occurred unlawfully / is still taking place, you may request the restriction of data processing instead of deletion.
- If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
- If you have filed a complaint under Article 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, these data may only be processed – apart from their storage – with your consent or to establish, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of an important public interest of the European Union or a Member State.
Section 14 Applications
(1) Purpose and categories of data
In the application process, we process the personal data you provide (e.g., basic data, contact details, qualification/career data, communication content; if applicable, special categories voluntarily provided by you, such as health/disability data for any compensation for disadvantages). The processing serves the purpose of examining and deciding on the establishment of an employment relationship. Legal bases: Section 26, paragraph 1 of the BDSG (Decision on the establishment of an employment relationship) and Art. 6(1)(b) GDPR (pre-contractual measures). Where special categories are involved, the processing takes place exceptionally after Article 9(2) GDPR (specifically lit. b/f) in conjunction with. Section 26, paragraph 3 of the BDSG; in addition, it applies Art. 88 GDPR for the employment context.
(2) Voluntary provision of special data
The notification of special categories of personal data (Article 9 GDPR) is voluntary. Without such information, it may not be possible to take into account legal protection rights (e.g., protection for people with disabilities).
(3) Recipients and processing of orders
Within our house, only the parties involved in the selection process have access. External IT/HR service providers will not have access. as a contract processor after Art. 28 GDPR integrated. Transfers to third countries take place – only if necessary in individual cases – based on a Admissibility decision (e.g. EU‑US‑DPF) or appropriate guarantees (standard contractual clauses). (Legal basis: Art. 28, 44 ff. GDPR).
(4) Storage period and legal defense
After the selection process is completed, application data will generally be at the latest after 6 months deleted (or anonymized), to protect us against any claims following the AGG to be able to defend oneself (Section 15, paragraph 4 of the German Commercial Code: 2-month period of validity; § 61b ArbGG: 3-month limitation period for appeals; plus a reasonable security fee). Upon hiring, the documents are transferred to the personnel file.
(5) Candidate pool (optional longer storage period)
For one longer storage period (e.g. 12 months) by recruiting from a pool of applicants a separate consent one (Art. 6(1)(a) GDPR / Section 26, paragraph 2 of the BDSG). The consent is at any time revocable with effect for the future; the legality remains unaffected until revoked.
(6) Obligation to provide / Consequences of failure to provide
The provision of the information marked as necessary in the application form is necessary for the decision on an employment relationship. required. Without these details, it is not possible to take them into account in the proceedings (Article 13(2)(e) of the GDPR).
To safeguard our legitimate interests (Art. 6(1)(f) GDPR), we store the following data: rejected applications the relevant documents for the duration of the possible claim/judicial enforcement of claims due to discrimination: Claim within 2 months after receipt of the rejection (Section 15, paragraph 4 of the German Commercial Code) and Claim period 3 months after the claim has been made (§ 61b ArbGGAfterwards, we delete/anonymize the data unless there are other legal obligations.
§ 15 Changes to this privacy policy
We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply during your next visit.
Version October 2025