9.1 Vimeo

This website uses plugins to display and play videos from the following provider: Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. In the process, certain information—including your IP address—is transmitted to the provider.

If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider while visiting the site, your data will be directly associated with your account when you click on a video. If you do not want your data to be associated with your account, you must log out before clicking the play button.

All of the aforementioned processing activities—in particular, the use of cookies to read information from the device you are using—take place only if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service using the “Cookie Consent Tool” provided on the website.

For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.2 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers—at the latest when the video begins playing—in order to load the content. In the process, certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider while visiting the site, your data will be directly associated with your account when you click on a video. If you do not want your data to be associated with your account, you must log out before clicking the play button.

All of the aforementioned processing activities—in particular, the use of cookies to read information from the device you are using—take place only if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service using the “Cookie Consent Tool” provided on the website.

For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.3 Mapbox

This website uses an online map service provided by the following company: MapBox Inc., 740 15th St NW, Suite 500, Washington, DC 20005, USA

The online map service is a tool for displaying interactive (map) maps to visually present geographic information. Using this service shows you our location and makes geolocation easier.

As soon as you visit any of the subpages that include the provider’s map, information about your use of our website (such as your IP address) is transmitted to the provider’s servers and stored there.

Your personal data is processed in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in designing our website to meet user needs. If you do not consent to the future transmission of your data to the provider, you have the option to completely disable the provider’s online map service by turning off JavaScript in your browser. The online map service on this website will then no longer be available for use.

To the extent required by law, we have obtained your consent to the processing of your data described above in accordance with Article 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect. To exercise your right to withdraw consent, please follow the procedure for filing an objection described above.

For the transfer of data to the United States, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with European data protection standards.

9.4 Adobe Fonts (Typekit)

This site uses so-called web fonts from the following provider to ensure consistent font display: Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA

When you visit a page, your browser loads the necessary web fonts into its cache to display text and fonts correctly, and establishes a direct connection to the provider’s servers. In the process, certain browser information, including your IP address, is transmitted to the provider.

The processing of personal data in connection with establishing a connection with the font provider will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service using the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font from your computer will be used.

For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.5 Google reCAPTCHA

On this website, we use the CAPTCHA service provided by the following company: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA.

“Google Fonts”—fonts downloaded from the Internet via Google—are used to style the CAPTCHA window. No information other than that mentioned above, which is already transmitted to Google via the reCAPTCHA functionality, is processed in this context.

The service checks whether an input is made by a human or, in an abusive manner, through machine-based and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access attempts. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the device used, identification data regarding the browser and operating system types used, as well as the date and duration of the visit, and transmits this information to the provider’s servers for evaluation. Cookies—small text files stored in the end device’s browser—may be used for this purpose.

If the processing described above is based on cookies, these will only be set if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual accountability on the Internet and preventing misuse and spam, in accordance with Article 6(1)(f) of the GDPR.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.

For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.6 Google Meet

We use the following provider to host online meetings, video conferences, and/or webinars: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This may also involve the transfer of data to Google LLC’s servers in the United States.

The provider processes various types of data, and the scope of the data processed depends on what information you provide before or during your participation in an online meeting, video conference, or webinar. Your data is processed as a participant in the communication and stored on the provider’s servers. This may include, in particular, your login information (name, email address, phone number (optional), and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, participants’ video and audio contributions, as well as text entered in chats, may be processed.
The legal basis for the processing of personal data necessary to fulfill a contract with you (this also applies to processing operations necessary to implement precontractual measures) is Article 6(1)(b) of the GDPR. To the extent that you have given us your consent to process your data, the processing is based on Article 6(1)(a) of the GDPR. You may revoke any consent you have given at any time with future effect.
Furthermore, the legal basis for data processing in connection with the conduct of online meetings, video conferences, or webinars is our legitimate interest pursuant to Article 6(1)(f) of the GDPR in the effective conduct of the online meeting, webinar, or video conference.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.

For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

For more information about Google’s privacy policy, click here: https://business.safety.google/intl/de/privacy/

9.7 Microsoft Teams

We use the following provider to conduct online meetings, video conferences, and/or webinars: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

The provider processes various types of data, and the scope of the data processed depends on what information you provide before or during your participation in an online meeting, video conference, or webinar. Your data is processed as a participant in the communication and stored on the provider’s servers. This may include, in particular, your login information (name, email address, phone number (optional), and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, participants’ video and audio content, as well as text entered in chats, may be processed.
The legal basis for the processing of personal data required to fulfill a contract with you (this also applies to processing operations necessary to implement pre-contractual measures) is Article 6(1)(b) of the GDPR. To the extent that you have given us your consent to process your data, the processing is based on Article 6(1)(a) of the GDPR. You may revoke any consent you have given at any time with future effect.
Furthermore, the legal basis for data processing in connection with the conduct of online meetings, video conferences, or webinars is our legitimate interest pursuant to Article 6(1)(f) of the GDPR in the effective conduct of the online meeting, webinar, or video conference.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.

For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

9.8 TeamViewer

We use the following provider to conduct online meetings, video conferences, and/or webinars: TeamViewer Germany GmbH, Bahnhofsplatz 2, 73033 Göppingen, Germany

The provider processes various types of data, and the scope of the data processed depends on what information you provide before or during your participation in an online meeting, video conference, or webinar. Your data is processed as a participant in the communication and stored on the provider’s servers. This may include, in particular, your login information (name, email address, phone number (optional), and password) and session data (topic, participant IP address, device information, description (optional)).

In addition, participants’ video and audio contributions, as well as text entered in chats, may be processed.
The legal basis for the processing of personal data necessary to fulfill a contract with you (this also applies to processing operations necessary to implement pre-contractual measures) is Article 6(1)(b) of the GDPR. To the extent that you have given us your consent to process your data, the processing is based on Article 6(1)(a) of the GDPR. You may revoke any consent you have given at any time with future effect.
Furthermore, the legal basis for data processing in connection with the conduct of online meetings, video conferences, or webinars is our legitimate interest pursuant to Article 6(1)(f) of the GDPR in the effective conduct of the online meeting, webinar, or video conference.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.

9.9 Gravity Forms

To conduct surveys or for online forms, we use the services of the following provider: Rocketgenius Inc., 1620 Centerville Turnpike STE 102, Virginia Beach, VA 23464, USA

The provider enables us to create and analyze surveys and online forms. In addition to the personal data you enter into the forms, information about your operating system, browser, the date and time of your visit, the referrer URL, and your IP address is also collected, transmitted to the provider, and stored on the provider’s servers.

The information you enter into the forms is stored in a password-protected manner to ensure that third-party access is prevented and that only we can process the data for the purpose specified in each form.

When processing personal data necessary to fulfill a contract with you (this also applies to processing operations necessary to take steps prior to entering into a contract), Article 6(1)(b) of the GDPR serves as the legal basis. If you have given us your consent to process your data, the processing is based on Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.

For the transfer of data to the United States, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with European data protection standards.

9.10 Applications for Job Postings via Email

On our website, we post current job openings in a separate section; interested candidates can apply by emailing the contact address provided.

Applicants must provide all personal information necessary for a thorough evaluation, including general information such as name, address, and contact information, as well as evidence of performance and, if applicable, health-related information. Details regarding the application can be found in the job posting.

Once we receive your application via email, your data will be stored and reviewed solely for the purpose of processing your application. If we have any questions, we will contact the applicant using either their email address or phone number. This processing is based on Article 6(1)(b) of the GDPR (or Section 26(1) of the BDSG), under which the application process is considered a preliminary step toward entering into an employment contract.

To the extent that, as part of the application process, special categories of personal data within the meaning of Article 9(1) of the GDPR (e.g., health data such as information regarding severe disability status) are requested from applicants, such processing is carried out in accordance with Article 9(2)(b) GDPR, so that we can exercise the rights arising from labor law and the law on social security and social protection and fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9(1)(h) of the GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant’s ability to work, for medical diagnosis, health or social care, or for the administration of systems and services in the health or social care sector.

If an applicant is not selected or withdraws their application early, the data they submitted, as well as all electronic correspondence—including the application email—will be deleted no later than 6 months after the applicant is notified. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, in fulfilling our obligations to provide evidence under the regulations governing the equal treatment of applicants.

If your application is successful, the data you provide will be processed on the basis of Article 6(1)(b) of the GDPR (in conjunction with Section 26(1) of the BDSG for processing in Germany) for the purpose of carrying out the employment relationship.