top of page

data protection

Contents

​

1. Responsible body
2. Definitions
3. Scope of processing of personal data
4. Purpose limitation of the processing of personal data
5. Disclosure of data to third parties
6. Data transfers to a third country
7. Legal basis for processing personal data
8. Data deletion and storage period
9. Data that is automatically collected when you visit our website
10. Cookies

10.1 General
10.2 Use of CookieYes

11. Analysis and Tracking Tools

11.1 General

11.2 Google Analytics
11.3 Google Maps

11.4 kununu

12. Social media

12.1 Facebook
12.2 Twitter
12.3 LinkedIn
12.4 XING    
12.5 YouTube

12.6 YouTube videos

13. Contact form
14. Application process

14.1 General
14.2 Scope of data processing
14.3 Purpose and legal basis of data processing
14.4 Duration of storage
14.5 Miscellaneous

15. Children and young people
16. Security
17. Your rights as a data subject

17.1 Revocation of consent
17.2 Right to information
17.3 Right to rectification
17.4 Right to Deletion
17.5 Right to restrict processing
17.6 Right to data portability
17.7 Right to object
17.8 Right to lodge a complaint with the supervisory authority

18. Questions, suggestions, complaints to the data protection officer
19. Changes to our privacy policy

​

​

Data protection declaration from aestimo GmbH.

 

 

We are pleased that you are interested in our company and our products and services and we want you to feel safe when visiting our website with regard to the protection of your data. Because we take the protection of your data very seriously. Compliance with the provisions of the European General Data Protection Regulation (GDPR) and the Federal Data Protection Act (BDSG) is a matter of course for us.

As part of our information obligations, we would like to make this data protection declaration as transparent as possible. Below we will describe the purpose of processing your data, the use of cookies, tracking/analysis tools, social media and other third-party services and inform you about your rights.

If you still have any questions about the handling of your personal data, please feel free to contact us or our data protection officer (see contact details below).

 

​

1. Responsible body

As the operator of this website, aestimo GmbH is the responsible body (person responsible) within the meaning of the European General Data Protection Regulation (GDPR), which alone or jointly with others decides on the purposes and means of processing personal data, hereinafter referred to as “data”.

​

​

2. Definitions

We would like to inform you below about the processing of your personal data when you visit our website and use our content and services.

According to the GDPR, “personal data” is all information that relates to an identified or identifiable natural person (data subject). A natural person is identifiable if they are directly or indirectly, in particular by means of an identifier (such as name, address, telephone number, email address, IP address, location data or special characteristics such as the genetic, economic and social identity of this natural person ) can be identified.

“Processing” means any process or series of processes carried out in connection with data, with or without the aid of automated processes. This includes, in particular, collecting, recording, organizing, arranging, storing, adapting or changing, reading out, querying, using, disclosing by transmission, disseminating or making available, comparing, linking and restricting , deletion or destruction.

With regard to the other data protection terms used, we refer to the definitions in Article 4 GDPR.

​

​

3. Scope of processing of personal data
In order to use our website, it is generally not necessary for you to provide any data. However, in certain cases we need your name and address and other information so that we can provide the requested services.

The same applies, for example, to sending information material and ordered goods or to answering individual questions. Where this is necessary, we will inform you accordingly. In addition, we only process data that you voluntarily provide to us and, if necessary, data that we automatically collect when you visit our website (e.g. IP address and the names of the pages you have accessed and the ones you have used browser and your operating system, date and time of access, search engines used, names of downloaded files).

If you use services, we generally only collect the data that we need to provide the services. If we ask you for further data, this is voluntary information.


4. Purpose limitation of the processing of personal data
We process the data you provide in accordance with the principles of data minimization and purpose limitation. The principle of purpose limitation states that data is collected for specified, explicit and legitimate purposes and may not be further processed in a manner incompatible with those purposes. Further processing for archival purposes in the public interest, for scientific or historical research purposes or for statistical purposes is not considered incompatible with the original purposes.

Basically, we process your data for the purpose of answering your inquiries, processing your orders or providing you with access to certain information or offers. In order to maintain customer relationships, it may also be necessary for us or a service company commissioned by us to use this data to inform you about product offers or to conduct online surveys in order to better meet the tasks and requirements of our customers.

We will only process the data you provide online for the purposes communicated to you.

​

​

5. Disclosure of data to third parties
Your data will only be passed on to third parties in exceptional cases,

  • to external service providers commissioned by us (contract processors), if this is necessary for the purpose of carrying out the contractual relationship,

  • to state institutions and authorities if we are legally obliged to do so or

  • if you agree to this.


We conclude the corresponding agreements for order processing with the processors on the basis of Article 28 GDPR. The service companies we commission are obliged to maintain confidentiality and to comply with the provisions of the GDPR and the BDSG. The data passed on may only be used by our service providers to fulfill their task. Any other use of the information is not permitted and does not occur with any of the service providers we engage.

Data will only be transmitted and further processed to government institutions and authorities entitled to receive information within the framework of the relevant laws or if we are obliged to do so by a court decision.

Furthermore, we do not pass on any data to third parties unless you have expressly consented.

Of course, we respect it if you do not want to provide us with your data to support our customer relationship (particularly for direct marketing or market research purposes). We will neither sell your data to third parties nor market it in any other way unless you have given us your consent to do so.


6. Data transfers to a third country
If, as part of the use of third-party services, data is disclosed or transmitted to third parties in a third country, i.e. H. outside the European Union (EU) or the European Economic Area (EEA), and data is further processed, this will only be done on the basis of your consent, a legal obligation, our legitimate interests or if it is necessary to fulfill our (pre-)contractual obligations . Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 ff. GDPR are met. This means that the processing e.g. B. takes place on the basis of special guarantees, such as the officially recognized determination of a data protection level that corresponds to the EU or compliance with officially recognized special contractual obligations (so-called “EU standard contractual clauses”).


7. Legal basis for processing personal data
To the extent that we obtain your consent for the processing of personal data, the consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR represents the legal basis for the processing of your data.

When processing personal data that is necessary to fulfill the requested service, we rely on Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR as the legal basis.

If the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Paragraph 1 Sentence 1 Letter c GDPR serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 Paragraph 1 Sentence 1 Letter f GDPR forms the legal basis for the processing .


8. Data deletion and storage period
We only store your data until the purpose is fulfilled and there are no other legal retention obligations (e.g. commercial or tax retention obligations).

If you have given us your consent, we will store your data until you revoke your consent, provided there is no other legal basis for processing your data and no statutory retention periods prevent deletion.

In addition, in individual cases, e.g. For example, longer storage may be advisable for evidentiary purposes in order to defend/enforce civil or public law claims.


9. Data that is automatically collected when you visit our website
When using our website, the following data may be processed for organizational and technical reasons: the names of the pages you access, the browser you use and your operating system, date and time of access, search engines used, names of files downloaded and your IP address.

​

​

10. Cookies

​

​

10.1 General

When you visit one of our websites, we may store information on your computer in the form of a cookie. Cookies are small text files that are sent to your browser from a web server and stored on your computer's hard drive.

Some cookies are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable you to recognize your browser the next time you visit (so-called persistent cookies). If cookies are set, they process certain user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.

Apart from the Internet protocol address, no personal data of the user is stored. This information is used to automatically recognize you the next time you visit our website and to make navigation easier for you. For example, cookies allow us to tailor a website to your interests or to save your password so you don't have to re-enter it each time.

Necessary cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website. The website cannot function properly without these cookies.

Convenience cookies make it easier for you to use our websites. They allow a website to remember information that affects the way a website behaves or looks, such as: B. Your preferred language or the region you are in.

Statistics cookies collect anonymized data for statistics and analysis. They thus help to further improve the offerings of our website and optimize content.

Of course, you can also view our websites without cookies. If you do not want us to recognize your computer again, you can prevent cookies from being stored on your hard drive by selecting “do not accept cookies” in your browser settings. Please refer to the instructions for your browser to find out how this works in detail -Manufacturer. If you do not accept cookies, this may lead to functional restrictions on our offers.

When you start our website, you can decide for yourself which categories you want to allow in the cookie settings. We use Cookiebot (see point 10.2) as a cookie banner.

Cookies that are necessary for the technically error-free and optimized provision of our services (“technically necessary cookies”) are stored on the basis of our legitimate interest in accordance with Article 6 (1) (f) GDPR. Cookies that are not technically necessary are only set after you have given your consent (based on the legal basis of Art. 6 Para. 1 lit. a GDPR).

You can change the cookie settings at any time by clicking on the button “Change cookie settings” adjust and revoke consent that has already been given.

​

​

10.2 Use of CookieYes
Our websites use the cookie consent technology of “CookieYes” to obtain your consent to store certain cookies in your browser and to document them in accordance with data protection regulations. CookieYes is a product of CookieYes Limited, 3 Warren Yard, Wolverton Mill, Milton Keynes, England, MK12 5NW, Great Britain (“CookieYes”).

When you access our website, you will be shown a banner via a JavaScript code and can decide individually which cookies and/or cookie-based applications you give your consent to. The cookie consent tool blocks the setting of all cookies requiring consent until you grant the relevant consent. This ensures that such cookies are only set on your respective device after you have explicitly given your consent.

Through the CookieYes application, certain user information (including the IP address) is collected, transmitted to CookieYes servers and stored there. This serves to enable a clear individual user allocation of page views and to individually record, log and save the consent settings you have made as a user for the duration of a session. The consent you have given or withdrawn will be stored in a CookieYes cookie.

The data collected will be stored until you request us to delete it or delete the CookieYes cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

This data processing is carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and therefore in a legally compliant design of our website. In addition, as those responsible, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective user consent. Accordingly, the use of the CookieYes consent technology is also based on the legal basis of Article 6 Paragraph 1 Sentence 1 Letter c GDPR.

Details about CookieYes’ data processing can be found at https://www.cookieyes.com/privacy-policy.

​

​

11. Analysis and Tracking Tools

​

​

11.1 General
When you visit our website, your surfing behavior can be statistically evaluated. This happens primarily with cookies and with so-called analysis programs. The analysis of your surfing behavior is usually anonymous; surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. Further information on this can be found below.
 


11.2 Google Analytics
Google Analytics is used on our website. This is a web analysis service provided by Google LLC (“Google”), 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, or if the service is provided in the European Union (EU), Google Ireland Limited, Gordon House , 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics uses “cookies” to enable analysis of your use of the website.

The following data, among others, is recorded during your website visit:

  • Pages viewed

  • Orders including sales and the products ordered

  • Achieving “website goals” (e.g. contact requests)

  • Your behavior on the pages (e.g. clicks, scrolling behavior and length of stay)

  • Your approximate location (country and city)

  • Your IP address (in shortened form so that no clear assignment is possible)

  • Technical information such as browser, internet provider, device and screen resolution

  • Source of origin of your visit (i.e. which website or advertising medium you came to us from)

​

The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area (so-called IP masking).

Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.

The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

 

The data will be transferred if the special requirements of Art. 44 ff. GDPR are met (e.g. EU standard contractual clauses with additional measures).

Google Analytics stores cookies in your web browser for a period of two years since your last visit. These cookies contain a randomly generated user ID that can be used to recognize you on future website visits. The recorded data is stored together with the randomly generated user ID, which enables the evaluation of pseudonymous user profiles. This user-related data is automatically deleted after 14 months. Other data remains stored in aggregated form indefinitely. If you do not agree with the recording, you can do so by installing the software once.Browser add-ons to deactivate Google Analytics prevent.

If appropriate consent has been requested to set or store cookies, processing is carried out exclusively on the basis of Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR. You can withdraw your consent at any time with effect for the future by clicking on the button “Change cookie settings” withdraw. An opt-out cookie is then set which prevents your data from being collected on future visits to this website.

Otherwise, your data will be processed on the basis of our legitimate interests (analysis, optimization and the economic operation of our online offering) in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.

You can read Google's privacy policy at https://policies.google.com/privacy?hl=de and the Google Terms of Service at https://policies.google.com/terms?hl=de retrieve.

​

​

11.3 Google Maps
This website uses Google Maps from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA, or if the service is provided in the European Union (EU), Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps to visually display geographical information. By using this service, our location will be displayed to you and any journey will be made easier.


When you access the subpages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there. This may also result in a transmission to the Google LLC servers. come to the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR on the basis of Google's legitimate interest in displaying personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.

 

In the event that personal data is transmitted to Google LLC. based in the USA, Google LLC has taken appropriate measures (such as the conclusion of EU standard contractual clauses) which ensure compliance with the data protection level applicable in the EU.


If appropriate consent has been requested to set or store cookies, processing is carried out exclusively on the basis of Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR. You can withdraw your consent at any time by clicking on the button.“Change cookie settings” withdraw. An opt-out cookie is then set which prevents your data from being collected on future visits to this website.

​

Furthermore, your data will be processed on the basis of our legitimate interests (in displaying our location and making it easy to find the places we indicate on the website) in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR.


If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and therefore the map display on this website cannot then be used.
 

Further information can be found at: http://www.google.de/intl/de/policies/privacy/  

The terms of use of Google Maps can be found at https://www.google.de/intl/de/policies/terms/regional.html and under https://www.google.com/intl/de_US/help/terms_maps.html.

​

​

11.4 kununu

Our website uses functions from the employer rating platform “kununu”. The provider is kununu GmbH, represented by XING SE, Dammtorstraße 30, 20354 Hamburg, Germany.

To make our website attractive, we include our current employer rating from the social platform kununu in our careers section. As an advertising third party, kununu sets cookies for analysis and/or marketing purposes when you visit a page that includes kununu employer reviews.

We would like to point out that as the provider of this website, we have no knowledge of the content of the transmitted data or its use by kununu.

Further information can be found in kununu's privacy policy at: privacy.xing.com/de/datenschutzerklaerung/druckversion
 
If consent to the storage of corresponding cookies has been requested and given, processing is carried out on the basis of Article 6 Paragraph 1 Sentence 1 Letter a GDPR. You can withdraw your consent at any time with effect for the future by clicking on the button “Change cookie settings” withdraw.

​

​

12. Social media
Our website contains links to the social networks (social media) Facebook, Twitter, LinkedIn, XING and YouTube. After clicking on the embedded links, you will be redirected to the respective provider's website. Only after forwarding is user information transferred to the respective provider. For information on how your personal data is handled when using these websites, please refer to the respective data protection regulations of the providers.
 


12.1 Facebook
On our pages there are links to the social network Facebook from the social network Facebook, 1601 Willow Rd, 94025 Menlo Park, USA or, if the service is made available in the European Union (EU), Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).

You can recognize the (image) link by the button with the Facebook logo (small “f” in a round shape).

After clicking on the integrated Facebook button, you will be redirected to our Facebook page.

This creates a direct connection between your browser and a Facebook server. Facebook thereby receives your IP address, the time of your visit and the information that you have visited our Facebook page.

The information generated by Facebook is usually transferred to a Facebook server and stored there. This may also result in a transmission to the Facebook Inc. servers in the USA. Facebook Inc., based in the USA, has taken appropriate measures (such as the conclusion of EU standard contractual clauses) which ensure compliance with the data protection level applicable in the EU.

Facebook stores your IP address even if you are not a member of Facebook. For European users, however, only an anonymized IP address should be stored.

If you click the Like button (e.g. in posts) while you are logged in to Facebook, you can link the content of our Facebook page in your Facebook profile. As the provider of the site, we have no knowledge of the content of the data transmitted to Facebook or its use by Facebook.

If you do not want Facebook to be able to assign your visit to our website to your Facebook user account, you must log out of your Facebook user account and delete your cookies before accessing our website.

We use the Facebook links based on our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Here these are the analysis, optimization and economic operation of our online offering.

For further information, in particular the exact purpose and scope of data collection, visit the https://de-de.facebook.com/policy.php.

Data protection settings, including the possibility of objecting to the use of your data for advertising purposes, are here possible.

​

​

12.2 Twitter
Links from the Twitter service are integrated on our pages. These functions are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco CA 94107 in the USA (“Twitter”). The (image) link is marked with a Twitter logo (bird in a round shape).

Twitter has signed standard contractual clauses and is taking additional measures to ensure compliance with European data protection law.

We use the Twitter links based on our legitimate interests in accordance with Article 6 (1) (f) GDPR. Here these are the analysis, optimization and economic operation of our online offering.

If you click on the links mentioned, information that you have accessed certain pages on our website will be forwarded to Twitter's servers. This has e.g. for users who are logged in at the same time. B. from Twitter results in the usage data being assigned to your respective personal account. If you click on the links, this information will be transmitted directly from your browser to Twitter and stored there. Even if you are not a member of the social networks mentioned, there is still the possibility that Twitter will determine and store your IP.

To find out the purpose and scope of the collection, processing and use of your data, as well as your rights and setting options to protect your privacy, please visit the Twitter website with the data protection information at http://twitter.com/privacy.

If you do not agree to Twitter collecting data about you via our website, we ask you to log out of Twitter before visiting our website.

​

​

12.3 LinkedIn
Our pages contain links to the service linkedin.com, which is operated by LinkedIn Inc., 2029 Stierlin Court, Mountain View CA 94043 in the USA (“LinkedIn”). The LinkedIn link is marked with a LinkedIn logo with the letters “in”.

We use the LinkedIn links based on our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Here these are the analysis, optimization and economic operation of our online offering.

If you click on the LinkedIn link, information that you have accessed certain pages on our website will be forwarded to LinkedIn's servers. For LinkedIn users who are logged in at the same time, this means that the usage data is assigned to your respective personal account. If you click on the LinkedIn link, this information will be transmitted directly from your browser to LinkedIn and stored there. Even if you are not a member of the social networks mentioned, there is still the possibility that LinkedIn can determine and store your IP.

To find out the purpose and scope of processing your data, as well as your rights and setting options to protect your privacy, please visit the following websites with LinkedIn's data protection information at http://de.linkedin.com/legal/privacy-policy.

If you do not agree to LinkedIn collecting data about you via our website, we ask you to log out of LinkedIn before visiting our website.

​

​

12.4 XING
Our website uses links to the social network XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. The XING link is marked with an “X” modeled on the Xing logo.

We use the XING links based on our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Here these are the analysis, optimization and economic operation of our online offering.

If you use the XING link, i.e. H. If you click on the respective button, information that you have accessed certain pages on our website will be forwarded to the XING servers. For XING users who are logged in at the same time, this means that the usage data is assigned to your respective personal account. If you click on the XING link, this information will be transmitted directly from your browser to XING and stored there. Even if you are not a member of the social network mentioned, there is still the possibility that XING will determine and store your IP.

To find out the purpose and scope of the processing of your data, as well as your rights and setting options to protect your privacy, please visit the websites with the XING data protection information at https://www.xing.com/privacy.

If you do not agree to XING collecting data about you via our website, we ask you to log out of XING before visiting our website.


12.5 YouTube
Our websites use links to YouTube, which is provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA or, if the service is provided in the European Economic Area and Switzerland, by Google Ireland Limited, based in Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

When using YouTube, personal data may also be transmitted to the servers of Google LLC. come to the USA. To the extent that data is processed in the USA, we would like to point out that Google has committed itself to complying with the European data protection guidelines by, for example, signing the EU standard contractual clauses and other measures.

We use the YouTube links based on our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR. Here these are the analysis, optimization and economic operation of our online offering.

If you activate the link by clicking on it, a connection will be established to the YouTube servers and you will be redirected to the YouTube website.

This sends information to the YouTube server about which website you have visited. If you are logged in as a member of YouTube or Google, YouTube assigns this information to your personal user accounts on these platforms. When using these plugins such as: B. clicking/start buttons on a video or sending a comment, this information will be sent to your e.g. B. assigned to YouTube user account. You can prevent this by logging out before using the link.

Further information can be found in the privacy policy of YouTube and Google, which you can access here: www.google.com/policies/privacy/

Information about Google's privacy settings can be found at: https://privacy.google.com/take-control.html?categories_activeEl=sign-in

​

​

12.6 YouTube videos

Our websites contain so-called embeds of videos on YouTube. However, these only enable a connection to YouTube. YouTube is an offer from Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA or, if the service is made available in the European Economic Area and Switzerland, from Google Ireland Limited with its registered office in Gordon House, Barrow Street, Dublin 4, Ireland, (hereinafter referred to as “Google”).

To the extent that data is processed in the USA, we would like to point out that Google has committed itself to complying with the European data protection guidelines by, for example, signing the EU standard contractual clauses and other measures.

By integrating YouTube, our purpose is to be able to present you various videos on our website so that you can watch them directly on our website.

By integrating external videos, we reduce the load on our servers and can use the corresponding resources for other purposes. This can, among other things, increase the stability of our servers. YouTube and Google use the (personal) data collected to improve their own services.

If appropriate consent to set or store cookies has been requested and given, processing is carried out exclusively on the basis of Article 6 Paragraph 1 Sentence 1 Letter a GDPR. You can withdraw your consent at any time with effect for the future by clicking on the button “Change cookie settings” withdraw. An opt-out cookie is then set which prevents your data from being collected on future visits to this website.

Further information can be found in the privacy policy of YouTube and Google, which you can access here: www.google.com/policies/privacy/

 

Information about Google's privacy settings can be found at: https://privacy.google.com/take-control.html?categories_activeEl=sign-in

​​

​

13. Contact form        
If you use our contact form to contact us, we will ask you for personal information. In order for us to answer the request, you must provide a name and a valid email address.

If you would like information to be sent by post, you will also need to provide your address (street, house number, postal code, city) in order to be able to send the information to you by post.

Further information can be provided voluntarily.

The data you enter in the input mask will be transmitted to us and stored. We also record your IP address and the time of sending.

Your information will be further processed via email.

The contact form is sent using end-to-end encryption.

Your data will be stored on protected servers in Germany in compliance with data protection regulations.

Data processing for the purpose of contacting us is based on our legitimate interests and your voluntarily given consent. By clicking the “Send” button, you consent to the processing of your contact information for the purposes mentioned above. If you do not agree, you must cancel the process. The contact form will then not be sent and your data will not be processed.

The data entered into the contact form is processed based on your consent (Art. 6 Para. 1 Sentence 1 Letter a GDPR). You can revoke this consent at any time with future effect. To do this, please write to MK Holding GmbH & Co. KG, Am Falbenholzweg 12a, 91126 Schwabach, Germany or send an email to info(at)9elf26.com.

If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Sentence 1 Letter b GDPR.

The legal basis for processing the IP address and the time of sending results from Art. 6 Para. 1 lit. f GDPR (balancing of interests)

We only use your data to the extent necessary to process your inquiries and for further correspondence with you. The data we collect for using the contact form will be stored by us for the purpose of processing the request and in the event of follow-up questions and will be deleted in accordance with data protection law after the request you have made, unless there is another legal obligation to retain it.

​

​

14. Application Process
 


14.1 General
You have the option of applying to us by email and post. You can find out about open positions and send us your application under the “Jobs” section on our website.


14.2 Scope of data processing
In order to participate in the application process, you must provide personal data. This data includes, among other things, identification data such as first name, last name, date of birth, contact details such as address, telephone number or e-mail address as well as data in connection with your school and/or professional career such as school and work references, data about Training, internships or previous employers act. This data can come from the documents you provide, such as a cover letter, a CV, an application photo, certificates or other professional evidence.


14.3 Purpose and legal basis of data processing
We process the above data for the purpose of carrying out the application process. If you have given us your consent, the legal basis for processing the data is Article 6 Paragraph 1 Sentence 1 Letter a GDPR. If the above data is processed to initiate an employment relationship/contractual relationship, the legal basis is Art. 88 Para. 1 GDPR in conjunction with. V. m. § 26 para. 1 BDSG or Art. 6 para. 1 sentence 1 lit. b GDPR.


14.4 Duration of storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. In the event that an employment relationship, training relationship, internship or other employment relationship arises following the application process, the data will initially continue to be stored and transferred to the personnel file. Otherwise, the application process ends with receipt of a rejection. In this case, the data will be deleted after six months. Deletion will not occur if further processing and storage of your personal data is necessary in individual cases to assert, exercise or defend legal claims. In this case, we have a legitimate interest in further processing and storing your personal data. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter f GDPR. Deletion will not take place even if we are obliged to continue storing your personal data due to legal regulations.

a. Revocation and objection
You can revoke your consent given to us at any time with effect for the future. You can object to the processing of your personal data at any time. In particular, you have the option to withdraw your application at any time. As part of the application process, you should only provide us with the personal data that is necessary to participate in and carry out the application process. There is no legal or contractual obligation to provide data. However, we would like to point out that without this data we cannot carry out the application process and cannot consider your application. The same applies in the event of an objection to the processing of your data. You can have the data stored about you changed at any time.


14.5 Miscellaneous
For further information, please refer to the information letter for applicants about the collection of personal data. in accordance with Articles 13 and 14 GDPR.

​

​

15. Children and young people
Our website is aimed exclusively at potential applicants/customers as well as business partners and press representatives.

Persons under the age of 16 should not submit any data to us without the consent of their parent or guardian. We do not request data from children and young people who have not reached the age of sixteen. We do not collect these and do not pass them on to third parties.
 


16. Security
We have taken technical and organizational security measures in accordance with legal requirements to protect your data from loss, destruction, manipulation and unauthorized access.

The security measures include, in particular, the encrypted transmission of data between your browser and our server.

All of our employees and all people involved in data processing as well as the service companies commissioned by us are obliged to comply with the GDPR, the BDSG and other data protection-relevant laws and to handle data confidentially.

Our security measures are regularly reviewed and continually revised in line with technological developments.

​

​

17. Your rights as a data subject
If we process your data, you have extensive rights as a data subject, which are listed in detail below:


17.1 Revocation of consent
If we need your consent to process your data, we will obtain this from you and use your data for the purposes stated in connection with the consent. Your consent will be recorded digitally.

If you have given us your consent to process your data, you can revoke your consent at any time with future effect. To do this, please write to MK Holding GmbH & Co. KG, Am Falbenholzweg 12a, 91126 Schwabach, Germany or send an email to info(at)9elf26.com.


17.2 Right to information
You can obtain information about your data processed by us at any time in accordance with Art. 15 GDPR.
In particular, you can request information about the purposes of processing, the categories of data processed, categories of possible recipients and the planned storage period.

Please direct your request for information to MK Holding GmbH & Co. KG, Am Falbenholzweg 12a, 91126 Schwabach, Germany or send an email to info(at)9elf26.com.


17.3 Right to rectification
If the data is incorrect, you are entitled to request that your data stored by us be corrected or completed in accordance with Art. 16 GDPR.

You can assert your rights using the contact details listed above.


17.4 Right to Deletion
According to Art. 17 GDPR, you can request the deletion of the data if the storage of the data is no longer necessary and there is no other legal basis for the processing. You can also request deletion if you have objected to the processing and there are no overriding, legitimate reasons for the further processing of your data and if your data has been processed unlawfully or if there is a legal obligation to delete it under EU or national law.

You can assert your rights using the contact details listed above.


17.5 Right to restrict processing
In addition, according to Art. 18 GDPR, you have the right to restrict processing if you dispute the accuracy of the data for a period that enables the person responsible to check the accuracy of the data; if the processing is unlawful but you refuse the deletion of the data; the purpose of the processing has been fulfilled, but the data is necessary to assert your legal claims or if you have objected in accordance with Art. 21 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your interests.

You can assert your rights using the contact details listed above.


17.6 Right to data portability
According to Art. 20 GDPR, you have the right to receive the data concerning you in a common, structured and machine-readable format (data portability). In addition, under certain conditions, you can request that your data be transmitted directly by a person responsible, if this is technically possible.

You can assert your rights using the contact details listed above.


17.7 Right to object
You have the right to object to the use of your data for the above-mentioned purposes at any time (Article 21 GDPR). This is possible if the objection is directed against direct advertising or there are reasons for this that arise from your particular situation. If you object to direct advertising, you have a general right to object, which we will implement without specifying a particular situation.

To exercise your right to object, please write to MK Holding GmbH & Co. KG, Am Falbenholzweg 12a, 91126 Schwabach, Germany or send an email to info(at)9elf26.com.


17.8 Right to lodge a complaint with the supervisory authority
We would also like to point out that, without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work or the place of the alleged infringement, if you are of the opinion that the processing the data concerning you violates the GDPR.

You can find a list of the supervisory authorities (for non-public areas) with addresses at:
https://www.bfdi.bund.de/DE/Infothek/Anschrift_Links/anschrift_links-node.html

 

 

18. Questions, suggestions, complaints to the data protection officer

If you have any questions about our data protection information or the processing of your personal data, please contact:

 

aestimo GmbH

Isartorplatz 8

D 80331 Munich

Email: info(at)@aestimo.io

​

​

19. Changes to our privacy policy
We reserve the right to change our security and data protection measures if this becomes necessary due to technical developments. In these cases, we will also adapt our data protection information accordingly. Please note the current version of our data protection declaration. The current status is August 2023.

bottom of page