Privacy policy

2) Your rights

a) You have the following rights regarding the personal data concerning you:

• Right of access,
• right to rectification or erasure,
• right to restriction of processing,
• right to object to processing,
• right to data portability.

b) You also have the right to complain to data protection supervisory authority about our processing of your personal data.

3) Collection of personal data when visiting our website

a) In case of mere informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is art. 6 para. 1 p. 1 lit. f DS-GVO):

• IP address
• Date and time of the request
• Time zone difference from Greenwich Mean Time (GMT)
• Content of the request (specific page)
• Access status/HTTP status code
• Amount of data transferred in each case
• Website from which the request came
• Browser
• Operating system and its interface
• Language and version of the browser software

b) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive in relation to the browser you are using, and which provide the party setting the cookie (in this case, us) with certain information. Cookies cannot execute programmes or transfer viruses to your computer. They serve to make the internet offer as a whole more user-friendly and effective. The use of these cookies is also based on Art. 6 para. 1 p. 1 lit. f DS-GVO.

4) Use of cookies

a) This website uses the following types of cookies, the scope and functionality of which are explained below:

• Transient cookies (see b)
• Persistent cookies (see c)

b) Transient cookies are automatically deleted when you close the browser. These include session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the joint session. This means that your computer can be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

c) Persistent cookies are automatically deleted after the predefined period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

d) You can configure your browser settings according to your preferences and, for example, refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all the functions of this website.

5. Further functions and offers of our website

a) In addition to the purely informative use of our website, we offer various services that you can use if you are interested. For this purpose, you usually have to provide further personal data which we use to provide the respective service and for which the data processing principles apply.

b) In some cases, we use external service providers to process our data. These have been carefully selected and commissioned by us, are bound by our instructions, and are regularly monitored.

c) Furthermore, we may pass on your personal data to third parties if we offer participation in activities, competitions, conclusion of contracts or similar services together with partners. You will receive more detailed information on this when you provide your personal data of in the description if the offer below.

d) If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you on the consequences of this circumstance in the description of the offer.

6. Objection or revocation against the processing of your data

a) If you have given your consent to the processing of your data, you may withdraw this consent at any time. Such a revocation affects the permissibility of the processing of your data after you have expressed it to us.

b) Insofar as we base the processing of your personal data on the balance of interests, you can object to the processing. This is the case if the processing is in particular not necessary for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adapt the data processing or show you our compelling legitimate grounds based on which we will continue processing.

c) Of course, you can object to the processing of your personal data for the purposes of advertising and data analysis at any time. You can inform us of your advertising objection using the following contact details: info@ctl-ag.de.

7. Integration of Google Maps

a) On this website, we use the Google Maps service. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

b) By visiting the website, Google receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned under point 3. a) of this declaration will be transmitted. This occurs regardless of whether Google provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

c) Further information on the purpose and scope of the data collection and its processing by the plug-in provider can be found in the provider’s privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy: http://www.google.de/intl/de/policies/privacy. The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f DS-GVO. Currently, the possible transfer of data to the USA is based on the standard contractual clauses (SCCs) provided by Google. We reserve the right to deactivate Google Map should a judicial or regulatory decision identify these SCCs as not being in compliance with data protection.

8. Integration of Google Web Fonts

This site uses so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you use must establish a connection to Google’s servers. This informs Google that our website has been accessed via your IP address. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. If your browser does not support web fonts, a standard font will be used by your computer. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy.

9. Contact possibility via e-mail or contact form

You have the option of contacting us by e-mail. You will find the corresponding addresses on our website under Contact.

If you contact us via the e-mail address provided by us, the personal data transmitted with your e-mail will be stored. The legal basis for the processing of your data is Article 6 (1) (f) of the German Data Protection Act (DSGVO), as we have a legitimate interest in contacting you as a (potential) customer.

If the contact via e-mail is in connection with the conclusion or execution of a contract between you and us, then Art. 6 (1) (b) DSGVO is also the legal basis for the processing.

Personal data that we store in connection with your contact via e-mail is processed exclusively for the purpose of handling your contact. The data will not be passed on to third parties.

We delete your data as soon as they are no longer required for the purpose for which they were collected. For personal data transmitted by e-mail, this occurs when the respective correspondence with you has ended and it is clear from the circumstances that the matter concerned has been conclusively clarified.

If the data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, it can only be deleted if this is permitted by contractual or legal obligations. Which storage periods apply here must be determined individually for the respective contracts and contracting parties.

You can revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. To do so, simply send an informal message to the contact details given at the beginning of this data protection declaration.

10. Data processing for job applications

When you apply to us, we process the information we receive from you as part of the application process, e.g. through your letter of application, CV, references, correspondence, telephone or verbal details. In addition to your contact details, information about your education, qualifications, work experience and skills is particularly relevant to us. We will only assess you according to your suitability for the position in question, so you do not need to send us a photo.

Your data will initially be processed solely for the purpose of carrying out the application process. If your application is successful, it will become part of your personnel file and will be used to carry out and terminate your employment and will be deleted in accordance with the rules applicable to personnel files. If we are currently unable to offer you employment, we will continue to process your data for up to six months after sending the rejection in order to defend ourselves against any legal claims, in particular due to alleged discrimination in the application process. Insofar as you receive cost reimbursements or there are other tax-relevant transactions, the corresponding accounting records will be retained in order to fulfil the budgetary and tax law retention obligations in accordance with the respective applicable retention obligations. Your data is initially accessed by our HR department and the “Recruiting” department, but also by the specialist department of the position for which you have applied and, if required, by the accounting department. Our administrators and order processors have technically necessary access to data processed by means of IT. They are strictly bound by our instructions and may not process the data for their own purposes. In certain cases, we have to disclose your personal data to third parties, such as to our bank if you receive a reimbursement or to the post office if we communicate with you by letter.

The legal basis for data processing in the application process and as part of the personnel file is Section 26 (1) sentence 1 BDSG and Art. 6 (1) lit b DSGVO and, if you have given your consent, for example by sending us information that is not necessary for the application process, Art. 6 (1) lit a DSGVO. The legal basis for data processing after a rejection is Art. 6 para. 1 lit f DSGVO. The legal basis for storage under budgetary and tax law is Art. 6 para. 1 lit. c DSGVO in conjunction with. § 147 AO. Legitimate interest for processing on the basis of Art. 6 para. 1 lit f DSGVO is the defence against legal claims.

As a rule, we do not require any special categories of personal data within the meaning of Art. 9 DSGVO for the application process. We ask you not to provide us with any such information from the outset. If such information is exceptionally relevant to the application process, we process it together with your other applicant data. This may, for example, relate to information about a severe disability which you may provide to us voluntarily and which we then need to process to fulfil our specific obligations in relation to severely disabled persons. In these cases, the processing serves the exercise of rights or the fulfilment of legal obligations arising from labour law, social security law and social protection. The legal basis for data processing is then Art. 9 para. 2 lit. b DSGVO, §§ 26 para. 3 BDSG, 164 SGB IX. Exceptionally, it may be necessary to obtain information about your health or a disability or information from the Federal Central Register, i.e. about previous convictions, to assess your suitability for the intended activity. The legal basis for this is § 26 BDSG. Your data will not be used by us for automated decision-making or profiling. Your data will be processed by us or on our behalf exclusively in Germany.

11. Data processing by social networks

We maintain publicly accessible profiles on social networks. The individual social networks used by us can be found below.

Social networks. can usually comprehensively analyse your user behaviour when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media presences triggers numerous processing operations relevant to data protection. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, you can be shown interest-related advertising inside and outside the respective social media presence. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we are not able to track all processing procedures on the social media portals. Depending on the provider, further processing procedures may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Legal basis

Our social media sites are intended to ensure the most comprehensive possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSG-VO. The analysis processes initiated by the social networks may be based on different legal grounds, which are to be stated by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 lit. a DSGVO).

Person responsible and assertion of rights

If you visit one of our social media sites, we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal.

Please note that despite the joint responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, revoke your consent to store it or the purpose for storing the data no longer applies. Stored cookies remain on your terminal device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Social networks in detail

Facebook

We have a profile on Facebook. The provider is Facebook Inc, 1 Hacker Way, Menlo Park, California 94025, USA.

We have concluded a joint processing agreement (Controller Addendum) with Facebook. This agreement specifies the data processing operations for which we or Facebook are responsible when you visit our Facebook page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can adjust your advertising settings yourself in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads.

Details can be found in the Face-book data protection declaration: https://www.facebook.com/about/privacy/.

YouTube

We have a channel on YouTube. The operator of the YouTube service is Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland. Details on how they handle your personal data can be found in the YouTube privacy policy: https://policies.google.com/privacy?hl=de&gl=de.

LinkedIn

We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Details on how they handle your personal data can be found in the LinkedIn data protection declaration: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.

XING

We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Details on how they handle your personal data can be found in the XING privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.