Home »
Privacy
Privacy Policy
1. Privacy at a glance
General information
This page provides a simple overview of what happens to your personal data when you visit this website. Personal data are all data which allow you to be personally identified. More detailed information about privacy can be found in our Privacy Policy below.
Data collection on this website
Who is responsible for collecting data on this website?
The website owner is responsible for collecting data on this website. You can find their contact details in the “Controller information” section of this Privacy Policy.
How do we collect your data?
Some of the data we collect are data that you share with us, such as data that you enter in a contact form.
Other data are collected automatically, or once you have given consent, by our IT systems when you visit this website. These are primarily technical data (e.g. internet browser, operating system and time you visited the site). These data are collected automatically as soon as you access our website.
What do we use your data for?
Some of the data are collected to ensure this website works properly. Other data may be used to analyse your user behaviour.
What rights do you have in relation to your data?
At all times you have the right to obtain information free of charge about the origin, recipient and purpose of your personal data stored by us. You also have a right to obtain the rectification or erasure of these data. If you have given your consent for data processing, you can withdraw this consent at any time with future effect. In addition, you have the right to obtain restriction of the processing of your personal data in certain circumstances, plus the right to lodge a complaint with the competent supervisory authority.
If you have any questions about these rights, or any other questions about data privacy, you can contact us at any time.
2. General information and required information
Privacy
The operators of this website take protecting your personal data very seriously. We treat your personal data confidentially and in accordance with both the data protection legislation and this Privacy Policy.
When you use this website, various personal data are collected. Personal data are data which allow you to be personally identified. This Privacy Policy explains which data we collect, what we use them for, and how and for what purpose this takes place.
Please note that data transmission on the internet (e.g. in email communication) may not be fully secure and cannot be protected completely from third-party access.
Controller information
The controller for data processing on this website is:
AuTeBa GmbH
Managing Director: Andreas Leder
Ludwig-Erhard-Strasse 4
34131 Kassel
Germany
Tel.: +49 561 574 338 10
Email: info@auteba.com
The controller is the natural person or legal entity which decides on the purposes and means of processing personal data (e.g. names, email addresses and the like), either alone or in conjunction with others.
Duration of storage
Unless a more specific duration of storage is stated in this Privacy Policy, we will store your personal data until they are no longer required for the purpose of the data processing. If you make a justified request for erasure or withdraw consent for data processing, your data will be erased, unless we have any other legally permissible grounds for continuing to store your personal data (e.g. retention periods for tax or commercial law); if the latter is the case, your data will be erased once these grounds no longer apply.
General information about the legal basis for data processing on this website
If you have given your consent for data processing, we will process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, inasmuch as specific data categories as stated in Art. 9(1) GDPR are processed. If you give your express consent for transmission of personal data to third countries, your data will be processed on the basis of Art. 49(1)(a) GDPR. If you consent to the storage of cookies or to access to information on your device (e.g. via device fingerprinting), your data will be processed on the basis of Section 25 Para 1 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). You can withdraw consent at any time. If your data are necessary for the performance of a contract or the implementation of pre-contractual measures, we will process your data on the basis of Art. 6(1)(b) GDPR. Inasmuch as your data are necessary for compliance with a legal obligation, we will process your data on the basis of Art. 6(1)(c) GDPR. We may also process your data on the basis of our legitimate interests in accordance with Art. 6(1)(f) GDPR. The following sections of this Privacy Policy explain the relevant legal basis in each individual case.
Recipients of personal data
In the course of our business activities, we work with various external organisations. In some cases, we need to disclose personal data to these external organisations. We only disclose personal data to external organisations if this is necessary for the performance of a contract, if a legal obligation exists to do so (e.g. disclosure of data to tax authorities), if we have a legitimate interest in disclosing the data in accordance with Art. 6(1)(f) GDPR, or if another legal basis permits disclosure of the data. When processors are used, we only disclose the personal data of our clients on the basis of a valid processing contract. If data are processed jointly, a contract for joint processing will be concluded.
Withdrawing your consent for data processing
Many data processing procedures are only possible with your express consent. If you have given consent, you can withdraw it at any time. This does not affect the lawfulness of the data processing carried out until consent was withdrawn.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
Where data are processed on the basis of Art. 6(1)(e) or (f) GDPR, you have the right to object at any time to the processing of your personal data on grounds related to your particular situation, including profiling based on these provisions. The respective legal basis for processing can be found in this Privacy Policy. Where you object, we will no longer process your personal data, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims (objection in accordance with Art. 21(2) GDPR).
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, your personal data will no longer be processed for such purposes (objection in accordance with Art. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of an infringement of the GDPR, you as the data subject have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement. You have this right to lodge a complaint without prejudice to any other administrative or judicial remedy.
Right to data portability
You, or a third party, have the right to receive the personal data that we process by automated means on the basis of your consent or for the performance of a contract in a commonly used, machine-readable format. You have the right to have your personal data transmitted directly from one controller to another, where technically feasible.
Access, rectification and erasure
The applicable privacy laws give you the right at all times to access, provided free of charge, to your personal data stored by us, the origin and recipients of these data, and the purpose of the data processing. You also have the right to rectification or erasure of these data if you wish. If you have questions about these rights, or any further questions about personal data, you can contact us at any time.
Right to restriction of processing
You have the right to obtain restriction of the processing of your personal data. You can contact us at any time if you wish to exercise this right. The right to restriction of processing applies in the following circumstances:
- If you dispute the lawfulness of your personal data stored by us, we usually need time to review this. During this review process, you have the right to obtain restriction of the processing of your personal data.
- If your personal data have been / are being processed unlawfully, you can obtain restriction of the processing of the data rather than erasure of the data.
- If we no longer require your personal data, but you need them for the establishment, exercise or defence of legal claims, you have the right to obtain restriction of the processing of your personal data rather than erasure of the data.
- If you have objected in accordance with Art. 21(1) GDPR, your interests and our interests must be weighed up against each other. Until the overriding interests are determined, you have the right to obtain restriction of the processing of your personal data.
Where you have restricted processing, your personal data will – with the exception of storage – only be processed with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.
SSL/TLS encryption
For security reasons and to protect transmission of confidential information, such as orders or queries, that you send to us as the operator of the site, this website uses SSL/TLS encryption. You can identify an encrypted connection from the address bar in your browser, which will switch from “http://” to “https://”, and from the lock symbol in your browser’s title bar.
When SSL/TLS encryption is enabled, the data you send to us cannot be read by third parties.
Objecting to marketing emails
The use of contact data published as a result of our obligation to publish a Legal Notice for the purpose of sending unsolicited advertising and information material is hereby expressly prohibited. The operators of this website expressly reserve the right to take legal action in the event of the unsolicited sending of marketing information, for example through spam emails.
3. Data collection on this website
Cookies
Our website uses cookies, small data packets which do not cause any harm to your device. They are saved either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device. Session cookies are deleted when you leave our website. Persistent cookies are stored on your device until you delete them yourself or they are automatically deleted by your browser.
Cookies may originate from us (first-party cookies) or from third-party companies (third-party cookies). Third-party cookies enable specific services from third-party companies to be embedded into websites (e.g. cookies for providing payment services).
Cookies have various functions. Many cookies are technically necessary, as without them certain website features would not work correctly (e.g. the shopping basket, or displaying videos). Other cookies can be used to analyse user behaviour or for marketing purposes.
Essential cookies, i.e. cookies which are required to enable electronic communication, to provide specific features you wish to use (e.g. for the shopping basket) or to optimise the website (e.g. cookies for measuring web audience), are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated. The website operator has a legitimate interest in storing essential cookies, so that its services to be optimised and provided without any technical errors. Where users are asked to give their consent to the storage of cookies and similar recognition technology, data are processed exclusively on the basis of this consent (Art. 6(1)(a) GDPR and Section 25 Para 1 TTDSG); this consent can be withdrawn at any time.
You can configure your browser to notify you of the use of cookies and to allow you to only accept cookies in individual cases, to reject cookies in certain or all cases, or to automatically delete cookies when you close the browser. Disabling cookies may restrict the functionality of this website.
This Privacy Policy explains which cookies and services are used on this website.
Consent with Borlabs Cookie
Our website uses the consent technology from Borlabs Cookie to obtain your consent for the storage of certain cookies in your browser or the use of certain technologies, and to document this in compliance with data privacy laws. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg (hereafter Borlabs).
When you access our website, a Borlabs cookie is stored in your browser which saves the consent you have given or the withdrawal of this consent. These data are not disclosed to the provider of Borlabs Cookie.
The collected data are stored until you request its erasure from us, you delete the Borlabs cookie yourself, or the purpose for storage of the data no longer applies. This does not affect the obligatory legal retention periods. Visit https://borlabs.io/kb/what-information-does-borlabs-cookie-store/ for more details about data processing by Borlabs Cookie.
We use the Borlabs Cookie consent technology to obtain the consent legally required in order to use cookies. The legal basis for this is Art. 6(1)(c) GDPR.
Server log files
The provider of this website uses automated means to collect and store data in server log files, which your browser automatically sends to us. These data are:
- Browser type and version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
These data are not combined with other data sources.
These data are collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring its website is optimised and displayed without any technical errors – server log files must be generated for this purpose.
Contact form
If you send us queries using a contact form, we will store the information you enter in the form, including the contact details you provide, for the purpose of processing the query and in the event of follow-up questions. We will not disclose these data to any other parties without your consent.
These data are processed on the basis of Art. 6(1)(b) GDPR, inasmuch as your query relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other instances, the data are processed on the basis of our legitimate interest in the effective processing of queries sent to us (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR) if this was requested; this consent can be withdrawn at any time.
We will store the data you enter in the contact form until you request erasure of these data from us, you withdraw your consent for the storage of the data, or the purpose for storage of the data no longer applies (e.g. after your query has been processed). This does not affect the obligatory legal provisions – in particular retention periods.
Queries sent by email, telephone or fax
When you contact us by email, telephone or fax, we will store and process your query, including all the personal data it contains (name, query), for the purpose of processing your query. We will not disclose these data to any other parties without your consent.
These data are processed on the basis of Art. 6(1)(b) GDPR, inasmuch as your query relates to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other instances, the data are processed on the basis of our legitimate interest in the effective processing of queries sent to us (Art. 6(1)(f) GDPR) or your consent (Art. 6(1)(a) GDPR) if this was requested; this consent can be withdrawn at any time.
We will store the data you send to us via contact queries until you request erasure of these data from us, you withdraw your consent for the storage of the data, or the purpose for storage of the data no longer applies (e.g. after your query has been processed). This does not affect the obligatory legal provisions – in particular legal retention periods.
4. Plugins and tools
YouTube in privacy-enhanced mode
Videos from YouTube are embedded in this website. The operator of these sites is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in privacy-enhanced mode. YouTube states that this mode means YouTube does not store any information about visitors to this website before they watch the video. However, privacy-enhanced mode does not guarantee that data will not be disclosed to YouTube partners. YouTube establishes a connection to the Google marketing network, whether or not you watch a video.
When you start watching a YouTube video on this website, a connection to the YouTube servers is established. Information about which of our pages you have visited is sent to the YouTube server. If you are logged in to your YouTube account, you allow YouTube to associate your browsing behaviour directly with your personal profile. You can prevent this by logging out of your YouTube account.
After you start watching a video, YouTube can also store various cookies on your device or use similar recognition technology (e.g. device fingerprinting). This gives YouTube information about visitors to this website. This information is used for various purposes, including to collect video statistics, make the experience more user-friendly, and prevent attempted fraud.
After a YouTube video starts, more data processing may be initiated, over which we have no influence.
We use YouTube in the interests of making our online services and content appealing, which represents a legitimate interest in accordance with Art. 6(1)(f) GDPR. Where users are asked to give their consent, data are processed exclusively on the basis of Art. 6(1)(a) GDPR and Section 25 Para 1 TTDSG, inasmuch as this consent applies to the storage of cookies or to accessing information on the user’s end device (e.g. device fingerprinting) in accordance with the TTDSG. You can withdraw consent at any time.
For more information about privacy on YouTube, see their privacy policy at https://policies.google.com/privacy?hl=en.
The company has “EU-US Data Privacy Framework” (DPF) certification. The DPF is an agreement between the European Union and the USA to ensure compliance with European data protection standards when data are processed in the USA. Every DPF-certified company is committed to complying with these data protection standards. You can find out more from the provider at https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active.
Google Fonts (local hosting)
To ensure consistent fonts, this website uses the Google Fonts provided by Google. The Google Fonts are installed locally, and no connection to Google servers is established.
For more information about Google Fonts, visit https://developers.google.com/fonts/faq or see the Google privacy policy at https://policies.google.com/privacy?hl=en.
5. Services provided by us
How we process applicant data
We give you the opportunity to apply for jobs at our company (e.g. by email, by post or using the online application form). This section explains the scope, purpose and use of your personal data that we collect during the application process. We guarantee that your data will be collected, processed and used in accordance with the applicable data protection laws and all other legal provisions, and that your data will be treated in strict confidence.
Scope and purpose of data collection
When you send us an application, we process your personal data sent as part of the application (e.g. contact and communication details, application documents, notes from interviews etc.) as far as this is required in order to make a decision on the justification for employment. The legal basis for this is Section 26 (initiation of employment) of the German Federal Data Protection Act (BDSG), Art. 6(1)(b) GDPR (general initiation of a contract), and – if you have given your consent – Art. 6(1)(a) GDPR. You can withdraw consent at any time. We will only disclose your personal data to people at our company who are involved in processing your application.
If your application is successful, we will store the data you sent to us in our data processing systems on the basis of Section 26 BDSG and Art. 6(1)(b) GDPR for the purpose of facilitating employment.
Data retention period
If we are not able to offer you a job, if you reject a job offer from us or if you withdraw your application, we reserve the right to store the data you sent to us on the basis of our legitimate interest (Art. 6(1)(f) GDPR) for up to 6 months after the end of the application process (rejection or withdrawal of the application). We will then erase your data and destroy the physical application documents. We store these data for the particular purpose of providing evidence in the event of a legal dispute. If it is evident that the data will continue to be required after the 6-month period has elapsed (e.g. owing to an imminent or pending legal dispute), we will not erase the data until the purpose of continued retention no longer applies.
We may also store the data for a longer period if you have given your consent for this (Art. 6(1)(a) GDPR), or if legal retention obligations prevent erasure of the data.
