Pri­va­cy Policy

th​-con​sul​tant​.com

Infor­ma­tion about the respon­si­ble per­son and the data pro­tec­tion officer

In the fol­low­ing, we inform you about the col­lec­tion of per­son­al data when using our website.

The respon­si­ble par­ty pur­suant to Art. 4 (7) of the EU Gen­er­al Data Pro­tec­tion Reg­u­la­tion (the “DSG­VO”) and oth­er nation­al data pro­tec­tion laws of the Mem­ber States as well as oth­er data pro­tec­tion pro­vi­sions is:

Treu­hand Hei­del­berg Steuer­ber­atungs­ge­sellschaft mbH
Friedrich-Ebert-Anlage 46/1
69117 Heidelberg
Germany
Tel.: 06221 9043-80
Fax: 06221 9043-32

E-mail: kanzlei@​th-​berater.​de
Web­site: https://​th​-berater​.de

You can reach our data pro­tec­tion offi­cer at: datenschutz@​th-​berater.​de

Gen­er­al infor­ma­tion on the pro­cess­ing of per­son­al data

As a mat­ter of prin­ci­ple, we col­lect and use per­son­al data of our users only inso­far as this is nec­es­sary for the pro­vi­sion of a func­tion­al web­site as well as our con­tents and ser­vices. The col­lec­tion and use of our users’ per­son­al data reg­u­lar­ly takes place only with the user’s con­sent. An excep­tion applies in those cas­es in which it is not pos­si­ble to obtain pri­or con­sent for actu­al rea­sons and the pro­cess­ing of the data is per­mit­ted by legal regulations.

Inso­far as we obtain the con­sent of the user (also referred to as “data sub­ject”) for pro­cess­ing oper­a­tions of per­son­al data, Art. 6 (1) lit. a DSG­VO serves as the legal basis. When pro­cess­ing per­son­al data that is nec­es­sary for the per­for­mance of a con­tract to which the data sub­ject is a par­ty, Art. 6 (1) (b) DSG­VO serves as the legal basis. This also applies to pro­cess­ing oper­a­tions that are nec­es­sary for the per­for­mance of pre-con­trac­tu­al measures.

Inso­far as the pro­cess­ing of per­son­al data is nec­es­sary for the ful­fil­ment of a legal oblig­a­tion to which our com­pa­ny is sub­ject, Art. 6 (1) c DSG­VO serves as the legal basis.

In the event that vital inter­ests of the data sub­ject or anoth­er nat­ur­al per­son make pro­cess­ing of per­son­al data nec­es­sary, Art. 6 (1) (d) DSG­VO serves as the legal basis.

If the pro­cess­ing is nec­es­sary to pro­tect a legit­i­mate inter­est of our com­pa­ny or a third par­ty and the inter­ests, fun­da­men­tal rights and free­doms of the data sub­ject do not out­weigh the first-men­tioned inter­est, Art. 6 (1) lit. f DSG­VO serves as the legal basis for the processing.

The per­son­al data of the data sub­ject shall be delet­ed or blocked as soon as the pur­pose of the stor­age ceas­es to apply. Stor­age may also take place if this has been pro­vid­ed for by the Euro­pean or nation­al leg­is­la­tor in Union reg­u­la­tions, laws or oth­er pro­vi­sions to which the per­son respon­si­ble is sub­ject. Data will also be blocked or delet­ed if a stor­age peri­od pre­scribed by the afore­men­tioned stan­dards expires, unless there is a need for fur­ther stor­age of the data for the con­clu­sion or ful­fil­ment of a contract.

When you con­tact us by e-mail, the data you pro­vide will be stored by us in order to answer your ques­tion. We delete the data accru­ing in this con­text after the stor­age is no longer nec­es­sary, i.e. the pur­pose of the stor­age has ceased to apply, or restrict the pro­cess­ing if there are statu­to­ry reten­tion obligations.

If we use com­mis­sioned ser­vice providers for indi­vid­ual func­tions of our offer or would like to use your data for com­mer­cial pur­pos­es, we will inform you in detail about the respec­tive process­es below. In doing so, we will also state the defined cri­te­ria for the stor­age period.

Your rights as a data subject
You have the fol­low­ing rights with regard to the per­son­al data con­cern­ing you:

  • Right to information
  • Right to rec­ti­fi­ca­tion and/​or com­ple­tion or deletion
  • Right to restric­tion of processing
  • Right to erasure
  • Right to information
  • Right to data portability
  • Right to object to processing
  • Right to revoke the dec­la­ra­tion of con­sent under data pro­tec­tion law
  • Auto­mat­ed deci­sion-mak­ing in indi­vid­ual cas­es, includ­ing profiling
  • You also have the right to com­plain to a data pro­tec­tion super­vi­so­ry author­i­ty about our pro­cess­ing of your per­son­al data.

If you have any ques­tions, com­ments or requests regard­ing the col­lec­tion, pro­cess­ing and use of your per­son­al data by us, please also con­tact us using the con­tact details pro­vid­ed above.

Col­lec­tion of per­son­al data when vis­it­ing our website
Data col­lec­tion on this website

How do we col­lect your data?
On the one hand, your data is col­lect­ed by you pro­vid­ing it to us. This can be, for exam­ple, data that you send us by e-mail or give us via a tele­phone call. Oth­er data is col­lect­ed auto­mat­i­cal­ly or with your con­sent by our IT sys­tems when you vis­it the web­site. This is main­ly tech­ni­cal data (e.g. inter­net brows­er, oper­at­ing sys­tem or time of page view). This data is col­lect­ed auto­mat­i­cal­ly as soon as you enter this website.

a) When vis­it­ing the website
When you vis­it our web­site, the brows­er used on your ter­mi­nal device auto­mat­i­cal­ly sends infor­ma­tion to our web­site serv­er. This infor­ma­tion is tem­porar­i­ly stored in a so-called log file. The fol­low­ing infor­ma­tion is col­lect­ed without

and stored until it is auto­mat­i­cal­ly deleted:

  • IP address of the request­ing computer,
  • Date and time of access,
  • name and URL of the file accessed,
  • web­site from which the access was made (refer­rer URL),
  • the brows­er used and, if applic­a­ble, the oper­at­ing sys­tem of your com­put­er as well as the name of your access provider.

The afore­men­tioned data is processed by us for the fol­low­ing purposes:

  • Ensur­ing a smooth con­nec­tion set-up of the website,
  • Ensur­ing a com­fort­able use of our website,
  • eval­u­at­ing sys­tem secu­ri­ty and sta­bil­i­ty, and
  • for oth­er admin­is­tra­tive purposes.
  • The legal basis for the data pro­cess­ing is Art. 6 para. 1 p. 1 lit. f DSG­VO. Our legit­i­mate inter­est fol­lows from the data col­lec­tion pur­pos­es list­ed above. In no
  • case do we use the col­lect­ed data for the pur­pose of draw­ing con­clu­sions about your person.

b) Inquiry by e-mail, tele­phone or fax

If you con­tact us by e-mail, tele­phone or fax, your enquiry includ­ing all result­ing per­son­al data (name, enquiry) will be stored and processed by us for the pur­pose of pro­cess­ing your request. We do not pass on this data with­out your consent.

The pro­cess­ing of this data is based on Art. 6 (1) lit. b DSG­VO if your request is relat­ed to the per­for­mance of a con­tract or is nec­es­sary for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of the enquiries addressed to us (Art. 6 (1) (f) DSG­VO) or on your con­sent (Art. 6 (1) (a) DSG­VO) if this has been requested.

The data you send to us by con­tact request will remain with us until you request us to delete it, revoke your con­sent to store it or the pur­pose for stor­ing the data no longer applies (e.g. after we have com­plet­ed pro­cess­ing your request). Manda­to­ry statu­to­ry pro­vi­sions – in par­tic­u­lar statu­to­ry reten­tion peri­ods – remain unaffected.

Why do we use your data?

Some of the data is col­lect­ed in order to ensure error-free pro­vi­sion of the web­site. Oth­er data may be used to com­mu­ni­cate with you.

Trans­fer of data

We do not trans­fer your per­son­al data to third par­ties for pur­pos­es oth­er than those list­ed below.
We only pass on your per­son­al data to third par­ties if:

  • you have giv­en your express con­sent to this in accor­dance with Art. 6 Para. 1 S. 1 lit. a DSGVO,
  • the dis­clo­sure is nec­es­sary for the asser­tion, exer­cise or defence of legal claims in accor­dance with Art. 6 Para. 1 Sen­tence 1 lit. f DSG­VO and there is no rea­son to assume that you have an over­rid­ing inter­est wor­thy of pro­tec­tion in the non-dis­clo­sure of your data,
  • in the event that there is a legal oblig­a­tion for dis­clo­sure in accor­dance with Art. 6 Para. 1 Sen­tence 1 lit. c DSG­VO, as well as
    this is legal­ly per­mis­si­ble and nec­es­sary for the pro­cess­ing of con­trac­tu­al rela­tion­ships with you accord­ing to Art. 6 para. 1 p. 1 lit. b DSGVO.

Data secu­ri­ty

We use the wide­spread SSL pro­ce­dure (Secure Sock­et Lay­er) in con­nec­tion with the high­est encryp­tion lev­el sup­port­ed by your brows­er when vis­it­ing the web­site. As a rule, this is 256-bit encryp­tion. If your brows­er does not sup­port 256-bit encryp­tion, we use 128-bit v3 tech­nol­o­gy instead. You can tell whether an indi­vid­ual page of our web­site is trans­mit­ted in encrypt­ed form by the closed dis­play of the key or lock sym­bol in the low­er sta­tus bar of your browser.
We also use appro­pri­ate tech­ni­cal and organ­i­sa­tion­al secu­ri­ty mea­sures to pro­tect your data against acci­den­tal or inten­tion­al manip­u­la­tion, par­tial or com­plete loss, destruc­tion or against unau­tho­rised access by third par­ties. Our secu­ri­ty mea­sures are con­tin­u­ous­ly improved in line with tech­no­log­i­cal developments.

Plu­g­ins and tools

Google Web Fonts (local hosting)

This site uses so-called web fonts pro­vid­ed by Google for the uni­form dis­play of fonts. The Google Fonts are installed local­ly. There is no con­nec­tion to Google servers.

Fur­ther infor­ma­tion on Google Web Fonts can be found at https://​devel​op​ers​.google​.com/​f​o​n​t​s​/​faq and in Google’s pri­va­cy pol­i­cy: https://​poli​cies​.google​.com/​p​r​i​v​a​c​y​?​h​l​=de.

Host­ing

Exter­nal hosting

This web­site is host­ed by an exter­nal ser­vice provider (hoster). The per­son­al data col­lect­ed on this web­site is stored on the hoster’s servers. This may include, but is not lim­it­ed to, IP address­es, con­tact requests, meta and com­mu­ni­ca­tion data, con­trac­tu­al data, con­tact details, names, web­site access­es and oth­er data gen­er­at­ed via a website.

The hoster is used for the pur­pose of ful­fill­ing the con­tract with our poten­tial and exist­ing cus­tomers (Art. 6 para. 1 lit. b DSG­VO) and in the inter­est of a secure, fast and effi­cient pro­vi­sion of our online offer by a pro­fes­sion­al provider (Art. 6 para. 1 lit. f DSGVO).

Our hoster will only process your data inso­far as this is nec­es­sary for the ful­fil­ment of its ser­vice oblig­a­tions and fol­low our instruc­tions with regard to this data.

We use the fol­low­ing hoster:

IONOS SE
Elgen­dor­fer Str. 57
56410 Montabaur

Order pro­cess­ing

We have con­clud­ed an order pro­cess­ing agree­ment (AVV) with the above-men­tioned provider. This is a con­tract required by data pro­tec­tion law, which ensures that this provider only process­es the per­son­al data of our web­site vis­i­tors in accor­dance with our instruc­tions and in com­pli­ance with the DSGVO.

Cook­ies

Your brows­er sets a ses­sion cook­ie when you vis­it our web­site. A ses­sion cook­ie stores infor­ma­tion that asso­ciates online activ­i­ty with a sin­gle brows­er ses­sion. Ses­sion cook­ies are only used to facil­i­tate the use of a web­site. The ses­sion cook­ie is usu­al­ly delet­ed again when the brows­er is closed. You do not have to active­ly allow ses­sion cook­ies. Ses­sion cook­ies can be dis­abled cen­tral­ly in your brows­er set­tings and this set­ting then applies to all web­sites that you vis­it in suc­ces­sion. Under cer­tain cir­cum­stances, cer­tain areas or func­tions of oth­er web­sites with deac­ti­vat­ed ses­sion cook­ies may not be usable (e.g. online shops).

Data sub­ject rights

You have the right

  • To request infor­ma­tion about your per­son­al data processed by us in accor­dance with Art. 15 DSG­VO. In par­tic­u­lar, you can request infor­ma­tion about the pro­cess­ing pur­pos­es, the cat­e­go­ry of per­son­al data, the cat­e­gories of recip­i­ents to whom your data has been or will be dis­closed, the planned stor­age peri­od, the exis­tence of a right to rec­ti­fi­ca­tion, era­sure, restric­tion of pro­cess­ing or objec­tion, the exis­tence of a right of com­plaint, the ori­gin of your data if it has not been col­lect­ed by us, as well as the exis­tence of auto­mat­ed deci­sion-mak­ing includ­ing pro­fil­ing and, if applic­a­ble, mean­ing­ful infor­ma­tion about its details;
  • in accor­dance with Art. 16 DSG­VO, to demand the imme­di­ate cor­rec­tion of inac­cu­rate or incom­plete per­son­al data stored by us;
    in accor­dance with Arti­cle 17 of the Reg­u­la­tion, to request the era­sure of your per­son­al data stored by us, unless the pro­cess­ing is nec­es­sary for the exer­cise of the right to free­dom of expres­sion and infor­ma­tion, for com­pli­ance with a legal oblig­a­tion, for rea­sons of pub­lic inter­est, or for the estab­lish­ment, exer­cise or defence of legal claims;
  • in accor­dance with Art. 18 DSG­VO, to request the restric­tion of the pro­cess­ing of your per­son­al data, inso­far as the accu­ra­cy of the data is dis­put­ed by you, the pro­cess­ing is unlaw­ful, but you object to its era­sure and we no longer require the data, but you need it for the asser­tion, exer­cise or defence of legal claims or you have object­ed to the pro­cess­ing in accor­dance with Art. 21 DSGVO;
    pur­suant to Art. 20 DSG­VO, to receive your per­son­al data that you have pro­vid­ed to us in a struc­tured, com­mon and machine-read­able for­mat or to request that it be trans­ferred to anoth­er controller;
  • revoke your con­sent at any time in accor­dance with Art. 7 (3) DSG­VO. This has the con­se­quence that we may no longer con­tin­ue the data pro­cess­ing based on this con­sent in the future; and
  • com­plain to a super­vi­so­ry author­i­ty in accor­dance with Art. 77 DSGVO.

As a rule, you can con­tact the super­vi­so­ry author­i­ty of your usu­al place of res­i­dence or work­place for this purpose.

Right of objection

Inso­far as your per­son­al data is processed on the basis of legit­i­mate inter­ests pur­suant to Art. 6 (1) sen­tence 1 lit. f DSG­VO, you have the right to object to the pro­cess­ing of your per­son­al data pur­suant to Art. 21 DSG­VO, inso­far as there are grounds for doing so that arise from your par­tic­u­lar sit­u­a­tion or the objec­tion is direct­ed against direct adver­tis­ing. In the lat­ter case, you have a gen­er­al right of objec­tion, which is imple­ment­ed by us with­out spec­i­fy­ing a par­tic­u­lar situation.
If you would like to make use of your right of revo­ca­tion or objec­tion, it is suf­fi­cient to send us an e-mail.

Up-to-date­ness and amend­ment of this data pro­tec­tion declaration

This data pro­tec­tion dec­la­ra­tion is cur­rent­ly valid and has the sta­tus May 2023.

Due to the fur­ther devel­op­ment of our web­site and offers on it or due to changed legal or offi­cial require­ments, it may become nec­es­sary to change this data pro­tec­tion dec­la­ra­tion. The cur­rent data pro­tec­tion dec­la­ra­tion can be accessed on the web­site at any time.

Infor­ma­tion on the pro­cess­ing of your per­son­al data as an applicant

We here­by inform you about the pro­cess­ing of your per­son­al data by Treu­hand Hei­del­berg StBG mbH and the rights to which you are enti­tled under data pro­tec­tion law.

§ 1 Who is respon­si­ble for the pro­cess­ing of my per­son­al data and how can I con­tact the data pro­tec­tion officer?

This data pro­tec­tion notice applies to data pro­cess­ing by:

Treu­hand Hei­del­berg StBG mbH
Friedrich-Ebert-Anlage 46/1
69117 Heidelberg
06221/9043-70
06221/9043-32
kanzlei@​th-​berater.​de

rep­re­sent­ed by: Ulrich Her­zog, Hans-Jür­gen Ruper­tus, Markus Mohr, Björn von Olnhausen, Roger Wis­niows­ki, Louis Metz.

You can reach our data pro­tec­tion offi­cer at the above con­tact details or at the e-mail address: datenschutz@​th-​berater.​de

§ 2 For what pur­pos­es and on what legal basis is data processed?
The col­lec­tion of this data is done,

  • to be able to iden­ti­fy you as an applicant
  • to con­tact you;
  • to car­ry out the appli­ca­tion procedure;
  • to invite you to par­tic­i­pate in the next round of the appli­ca­tion procedure;
  • to admin­is­ter and eval­u­ate your application
  • to use the infor­ma­tion pro­vid­ed to us;
  • to exer­cise and defend our inter­ests, rights and claims;
  • to be able to demon­strate legal­ly com­pli­ant behav­iour if claims are made against us;
  • The data pro­cess­ing is car­ried out in response to your request and serves the fol­low­ing pur­pos­es pur­suant to Art. 6 (1) sen­tence 1 lit. b of the Ger­man Data
  • Pro­tec­tion Reg­u­la­tion (DSG­VO) in con­junc­tion with Art. 88 DSG­VO. Art. 88 DSG­VO i.V.m. § Sec­tion 26 of the Fed­er­al Data Pro­tec­tion Act (BDSG) as well as all oth­er rel­e­vant laws such as, in par­tic­u­lar, the Gen­er­al Equal Treat­ment Act (AGG) for the appro­pri­ate pro­cess­ing of your appli­ca­tion doc­u­ments and for the ini­ti­a­tion of contracts.

In addi­tion, con­sent may be required in accor­dance with Art. 6 Para. 1 S.1 lit.a DSG­VO in con­junc­tion with Art. 88 DSG­VO. Art. 88 DSG­VO in con­junc­tion with. § Sec­tion 26 (2) BDSG may con­sti­tute a legal basis.

Inso­far as we are legal­ly oblig­ed to process data that we have received as part of the appli­ca­tion process, we car­ry out this data pro­cess­ing on the basis of Art. 6 para. 1 sen­tence 1 lit. c DSGVO.

In addi­tion, we have a legit­i­mate inter­est in iden­ti­fy­ing you as an appli­cant in accor­dance with Art. 6 para. 1 sen­tence 1 lit. f DSG­VO and to use the infor­ma­tion you have pro­vid­ed that goes beyond the manda­to­ry data. Obvi­ous­ly irrel­e­vant data will be delet­ed by us imme­di­ate­ly. The legit­i­mate inter­est can also be based on the eval­u­a­tion and man­age­ment of your application.

We process per­son­al data used for the exer­cise and defence of our inter­ests, rights and claims on the basis of our legit­i­mate inter­ests pur­suant to Art. 6 para.1 p.1 lit.f DSG­VO. We also have a legit­i­mate inter­est pur­suant to Art.6 Abs.1 S.1 lit.f DSG­VO in demon­strat­ing legal­ly com­pli­ant behav­iour if claims are assert­ed against us aris­ing from the appli­ca­tion process.

In the case of the pro­cess­ing of spe­cial cat­e­gories of per­son­al data pur­suant to Art. 9 DSG­VO, this serves the exer­cise of rights or the ful­fil­ment of legal oblig­a­tions aris­ing from labour law, social secu­ri­ty law or social pro­tec­tion. The legal basis here is Art. 9 (2) lit. b DSG­VO in con­junc­tion with Art. 88 DSG­VO. Art. 88 DSG­VO in con­junc­tion with. § 26 para.3 BDSG. In order to exer­cise or defend our legal claims, we process spe­cial cat­e­gories of per­son­al data on the basis of Art. 9 para.2 lit.f DS-GVO.

Con­sent to the pro­cess­ing of spe­cial cat­e­gories of per­son­al data is required on the basis of Art. 9 para. 2 lit. a, Art. 6 para. 1 sen­tence 1 lit. a, 7 DSG­VO in con­junc­tion with Art. 88 DSG­VO. Art. 88 DSG­VO in con­junc­tion with. § Sec­tion 26 para. 3, para. 2 BDSG possible.

§ 3 Who receives my data?

Inso­far as this is nec­es­sary for the pro­cess­ing of the appli­ca­tion pro­ce­dure with you, your per­son­al data will be passed on with­in our com­pa­ny to per­sons and, if applic­a­ble, depart­ments for exam­i­na­tion; this includes in par­tic­u­lar the per­son­nel depart­ment, the spe­cial­ist department.

We have com­mis­sioned third par­ties to sup­port us in the per­for­mance of tasks. These include for exam­ple: IT ser­vices, job por­tals, e-mail providers, The data passed on may only be used by the third par­ty for the agreed pur­pos­es. In the event of com­mis­sioned pro­cess­ing, the con­trac­tors act on our behalf and accord­ing to our instructions.

No fur­ther data will be passed on to third parties.

§ 4 What data pro­tec­tion rights can I assert as a data subject?

You have the right

  • In accor­dance with Art. 7 Para.3 DSG­VO, to revoke your con­sent once giv­en to us at any time. This means that we may no longer process the data based on this con­sent in the future; if you wish to exer­cise your right of revo­ca­tion, sim­ply send an e-mail to datenschutz@​th-​berater.​de. In the event of a revo­ca­tion, we may no longer be able to pro­vide the agreed ser­vices or not to the desired extent;
  • to request infor­ma­tion about your per­son­al data processed by us in accor­dance with Art. 15 DSG­VO. In par­tic­u­lar, you may request infor­ma­tion about the pro­cess­ing pur­pos­es, the cat­e­go­ry of per­son­al data, the cat­e­gories of recip­i­ents to whom your data have been or will be dis­closed, the planned stor­age peri­od, the exis­tence of a right to rec­ti­fi­ca­tion, era­sure, restric­tion of pro­cess­ing or objec­tion, the exis­tence of a right of com­plaint, the ori­gin of your data if it has not been col­lect­ed by us, as well as the exis­tence of auto­mat­ed deci­sion-mak­ing, includ­ing pro­fil­ing, and, if applic­a­ble, mean­ing­ful infor­ma­tion about its details;
  • in accor­dance with Art. 16 DSG­VO, to demand the imme­di­ate cor­rec­tion of inac­cu­rate or incom­plete per­son­al data stored by us;
    in accor­dance with Arti­cle 17 of the Reg­u­la­tion, to request the era­sure of your per­son­al data stored by us, unless the pro­cess­ing is nec­es­sary for the exer­cise of the right to free­dom of expres­sion and infor­ma­tion, for com­pli­ance with a legal oblig­a­tion, for rea­sons of pub­lic inter­est, or for the estab­lish­ment, exer­cise or defence of legal claims;

pur­suant to Art. 18 DSG­VO, to request the restric­tion of the pro­cess­ing of your per­son­al data if the con­di­tions set out in Art. 18 DSG­VO are met; and
pur­suant to Art. 20 DSG­VO, to receive your per­son­al data that you have pro­vid­ed to us in a struc­tured, com­mon­ly used and machine-read­able for­mat or to request that it be trans­ferred to anoth­er controller.

§ 6 Do I have the pos­si­bil­i­ty to complain?

If you are of the opin­ion that the pro­cess­ing of your per­son­al data by us is unlaw­ful or, if applic­a­ble, vio­lates data pro­tec­tion law for oth­er rea­sons, you can com­plain to a super­vi­so­ry author­i­ty. You may con­tact a super­vi­so­ry author­i­ty in the mem­ber state of your place of res­i­dence, your place of work or the place of the alleged infringement.

§ 7 How long will my per­son­al data be stored?

Your per­son­al data col­lect­ed for the appli­ca­tion process will be delet­ed after four months fol­low­ing the send­ing of a rejec­tion let­ter, unless we have received your con­sent to keep your data longer, for exam­ple for inclu­sion in an appli­cant pool.

If the appli­ca­tion was suc­cess­ful and the data pro­cess­ing is based on our legit­i­mate inter­ests (Art. 6 para.1 p.1 lit.f DSG­VO), the data will be stored for as long as our inter­ests pre­vail and the data is required to ful­fil an over­rid­ing legit­i­mate interest.

If the data pro­cess­ing is based on a legal oblig­a­tion to which we are sub­ject (Art. 6 para. 1 sen­tence 1 lit. c DS-GVO), the data will be stored for as long as is nec­es­sary to ful­fil our legal oblig­a­tion. For exam­ple, we are sub­ject to the reten­tion peri­ods pro­vid­ed for in the tax laws and the Ger­man Com­mer­cial Code.

Under cer­tain cir­cum­stances, per­son­al data may have to be stored in indi­vid­ual cas­es until the respec­tive claims can no longer be assert­ed or are time-barred because we are defend­ing our­selves against assert­ed claims.

§ 8 Will my per­son­al data be trans­ferred to a third country?

If we trans­fer per­son­al data to ser­vice providers or affil­i­at­ed com­pa­nies out­side the Euro­pean Eco­nom­ic Area (EEA), the trans­fer will only take place if the third coun­try has been con­firmed by the EU Com­mis­sion as hav­ing an ade­quate lev­el of data pro­tec­tion or if oth­er appro­pri­ate data pro­tec­tion guar­an­tees (e.g. EU stan­dard con­trac­tu­al claus­es) are in place. You can also request the infor­ma­tion using the con­tact infor­ma­tion above.

§ 9 Am I oblig­ed to pro­vide my data?

In prin­ci­ple, there is no legal oblig­a­tion to pro­vide your per­son­al data. Refusal to do so will not have any adverse legal con­se­quences for you.

How­ev­er, if you send us your appli­ca­tion, you are ini­tial­ly pro­vid­ing us with your data on a vol­un­tary basis. As part of the appli­ca­tion process, it is also nec­es­sary for you to pro­vide us with your data for the Page 4 of 4

for the prop­er con­duct of the pro­ce­dure. The pro­cess­ing of data for the pur­pose of ini­ti­at­ing an employ­ment rela­tion­ship is legal­ly reg­u­lat­ed in § 26 para.1 p.1 BDSG in con­junc­tion with § 26 para.8 p.2 BDSG. § 26 para. 8 p.2 BDSG. If you do not pro­vide us with the data, we will unfor­tu­nate­ly not be able to con­sid­er your appli­ca­tion further.

§ 10 Do auto­mat­ed indi­vid­ual deci­sions or pro­fil­ing mea­sures take place?

No auto­mat­ed indi­vid­ual deci­sions or pro­fil­ing mea­sures take place in order to ful­fil our con­trac­tu­al obligations.