We collect and process various personal data depending on the specific processing situation. Processing is always carried out in accordance with the provisions of the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), or other applicable legal requirements. The relevant legal bases for us arise from Article 6(1) GDPR as follows:<\/p>\n<\/div>
2.2.1 Based on your consent<\/strong>
\nWhere you have given us consent for a specific processing of your personal data, we will process your personal data on this basis. Such consent may, for example, relate to the sharing of data with partner companies, the analysis of your data for targeted advertising measures, or the sending of newsletters. <\/p>\nConsent is always voluntary. Refusal to give consent or withdrawal of consent will not have any negative consequences for you.<\/p>\n<\/div>
2.2.2 For the performance of contractual obligations<\/strong>
\nWe process your personal data to fulfill contractual or pre-contractual obligations, or to establish a contract, for example for customer support or to respond to inquiries from prospective customers.<\/p>\nIf you apply to us by postal or electronic means and provide personal data, we process this data exclusively for the purpose of initiating a future employment relationship.<\/p>\n<\/div>
2.2.3 Due to legal obligations<\/strong>
\nWithin the scope of our legal obligations, we process your personal data where required or mandated by law. This may include, for example, the disclosure of your data to public authorities in the context of tax or criminal investigations, the analysis of your data to comply with regulatory requirements, or the provision of certain information to legal institutions. <\/p>\nProcessing your data on this basis is always necessary. The legal obligation to which we as an organization are subject cannot be affected by any refusal or restriction on your part. We assure you that your personal data will be processed in compliance with the law and will be fully protected.<\/p>\n<\/div>
2.2.4 Based on legitimate interest<\/strong>
We also process your personal data to safeguard our legitimate interests, provided that your interests or fundamental rights and freedoms requiring the protection of your personal data do not override these interests.
Subject to a case-by-case balancing of interests, we generally assume that our legitimate interests prevail in the following (non-exhaustive) processing situations:<\/p>\n\n- for ongoing customer support;<\/li>\n
- to inform you about offers of services and products, if we have received your name, email address, or postal address in connection with the provision of our services and\/or the sale of our products;<\/li>\n
- to process your inquiries after you contact us;<\/li>\n
- to optimize our processes (e.g., identifying sources of errors), offers, and services;<\/li>\n
- to maintain a customer database within our corporate group to improve customer service;<\/li>\n
- for legal enforcement in cases of suspicion of or actual criminal acts;<\/li>\n
- to ensure the security, confidentiality, and integrity of our IT systems (e.g., through security and effectiveness tests);<\/li>\n
- to process your data for testing IT systems and software products as well as performing migrations to ensure the functionality of new products and the correctness and completeness of migrations;<\/li>\n
- in the event of a security incident affecting your data, we are obliged under Article 33 GDPR to report it without undue delay to the competent data protection supervisory authority. In our legitimate interest to comply with this legal obligation as quickly as possible, it may be necessary to process your personal data as part of the incident investigation. However, no personal data about you will be included in the reports to the supervisory authority; <\/li>\n
- to carry out internal audits, internal reviews, and other control measures (e.g., checks by the data protection or information security officer) to ensure compliance with legal requirements, transparency in our business processes, and continuous improvement. This may require processing documents or files containing your personal data; <\/li>\n
- for corporate management and compliance with our financial and tax obligations (e.g., reporting, audits, internal reviews, and other control measures such as those carried out by tax authorities, external auditors, tax advisors, or certified accountants);<\/li>\n
- to maintain a suppression list in order to implement objections to processing pursuant to Article 21 GDPR. <\/li>\n<\/ul>\n<\/div><\/div><\/div>