Data Protection Information

Information on How We Process Your Personal Data

Overview

1      Scope of This Data Protection Information

2      Data Controller

3      Data Protection Inquiries / Data Protection Officer

4      Purposes and Legal Bases for Processing Your Personal Data

5      Use of Cookies on Our Website

6      General Recipients.

7      Your Rights in Relation to Your Personal Data.

8      Necessity to Provide Your Personal Data.

9      Transfer of Your Personal Data to Third Countries

10    LinkedIn Insight Tag

11    Google Tag Manager

12    Integration of Third-party Services and Content

13    Provision of Online Offer and Web Hosting

14    Changes to This Data Protection Information

1 Scope of This Data Protection Information

This Data Protection Information applies to how your personal data is processed on the website.

“Personal data” is any information about an identified or identifiable natural person. You are identifiable as a person if you can be identified directly (e.g. by your name) or indirectly (e.g. by a pseudonym email address) using this information.

“Processing” means any operation or sequence of operations performed upon personal data, whether or not by automated means.

2 Data Controller

The controller (hereinafter also “we” or “us”) responsible for your personal data processed on this website is:

Continental Aktiengesellschaft
Continental-Plaza 1, 30175 Hanover, Germany
Email: mail_service@conti.de

3 Data Protection Inquiries / Data Protection Officer

If you have any questions about data protection or data security, you can contact our Data Protection Officer by writing to Continental AG, Continental-Plaza 1, 30175 Hanover, Germany, or by sending an email to dataprotection@conti.de.

4 Purposes and Legal Bases for Processing Your Personal Data

4.1 Processing on our website

The purposes pursued with data processing on our website are explained below:

4.2 Recipients of personal data

During the above-mentioned data processing, we transfer data in part to the following service providers:

The service providers process your data as our contracted processors on the basis of a corresponding data processing contract. Insofar as the service providers are located outside the European Economic Area, the transfer takes place on the basis of the standard contractual clauses provided by the EU Commission and further technical and organizational measures to safeguard the security of your data.

5 Use of Cookies on Our Website

We use cookies on or website.

A cookie is a small data file that is stored on your terminal device. Cookies are used to analyze user interest and to make our website more user-friendly. In principle, you can also use our website without cookies. However, if you want to use the full range of functions of our website and make your experience as user-friendly as possible, you should accept the cookies that enable the use of certain functions or provide convenience features. The purpose of the cookies we use is shown in the following list.

By using our website, you consent to the use of those cookies that your browser accepts based on your browser settings. You can, however, configure your browser so that you are notified before accepting cookies that you only want to accept or reject certain cookies or that you want to reject all cookies. You can also delete cookies from your device’s memory at any time.

You can view and disable the currently enabled cookies in the cookie settings on our website. The following types of cookies are used:

5.1 Technically necessary cookies:

These cookies are technically necessary to provide the following core functions of the app and cannot be disabled by you:

• Display of website content
• De-identification of IP addresses in log files
• Cookie consent status
• Verification and identification of users
• Front-end login for sub-pages with access restrictions

Please refer to the cookie settings on our website for the specific technically necessary cookies that are used.

The legal basis governing storage of the technically necessary cookies is Section 25 (2) (2) of the German Telecommunications and Telemedia Data Protection Act (TTDSG). The legal basis governing processing personal data resulting from the cookies is Art. 6 (1) sentence 1 (f) GDPR and, accordingly, a legitimate interest on our part in providing the functions of our website.

5.2 Other technically non-necessary cookies

Other non-technical cookies are provided to make certain convenience functions available to you, to measure the performance of the website and user behavior, or to utilize third-party services. However, these are not absolutely necessary to provide the website and must therefore be activated by you independently in the cookie settings on our website. The legal basis governing storage of non-technical cookies is Section 25 (1) TTDSG.

For supplementary information on data processing in connection with individual cookies, please refer to the information in the cookie settings and the partly supplementary information of this Data Protection Information under Section 12. 

5.3 Deletion of your personal data

Your personal data will only be processed for the duration of the processing purposes specified in Section 4. In addition, however, there are further retention obligations or legal bases that make processing necessary for a longer period of time.

5.4 Legal retention periods

Your personal data will be stored if required by legal retention periods, in particular within the scope of the retention periods pursuant to Section 147 of the German Fiscal Code (AO), which provides for a retention period of six years for commercial and business letters including emails, and ten years for accounting records (e.g. invoices), as well as within the scope of Section 257 of the German Commercial Code (HGB), which provides for a corresponding retention period of six or ten years. Legal basis: Art. 6 (1) sentence 1 (c) GDPR (legal obligation).

5.5 Statutes of limitations

Your personal data may also be stored to preserve evidence for the assertion of or defense against legal claims under the statutes of limitation. According to Sections 195 et seq. of the German Civil Code (BGB), these statutes of limitation can be up to 30 years, with the regular statute of limitation being three years. The regular limitation period begins at the end of the year in which the claim arose and the creditor became aware of the circumstances giving rise to the claim and of the identity of the liable party, or should have become aware of them in the absence gross negligence. Legal basis: Art. 6 (1) sentence 1 (f) GDPR (legitimate interest: assertion, exercise or defense of or against legal claim(s)).

6 General Recipients

Your personal data may also be transferred to the following categories of recipients:

• Third parties who provide the contractually agreed services on our behalf and support us in the provision of our services;
• Providers who receive data for the purpose of arranging and providing services (e.g. our social media channels, content management providers, etc.);
• Payment service providers or service providers for the purpose of checking customer creditworthiness;
• Other internet users on our social media channels, insofar as you share personal data with them on the social media platform, and internet search engines;
• Our insurance partners;
• Authorities (e.g. tax authorities);
• Lawyers and courts in the event of legal disputes.

7 Your Rights in Relation to Your Personal Data

The GDPR grants you various rights with regard to your personal data, which are described in brief below.

• Right of access
  You can request information about whether your personal data is being processed. If this is the case, you can request further information, in particular on the purposes of the processing, the categories of personal data processed, the recipients, the storage period or, if this is not possible, the criteria for determining the period, as well as further information.
  You can request a copy of your personal data, which will be provided to you following receipt of a request to this effect by email in a common electronic format, provided that this does not affect the rights or freedoms of other persons. For this purpose, please specify precisely which data you require.
• Right to rectification
  You can immediately request the correction of incorrect personal data pertaining to your person as well as the completion of incomplete personal data.
• Right to erasure
  You have the right to request the erasure of your personal data, in particular if the data is no longer necessary for the purposes for which it was processed. Your data will be deleted immediately unless an exception applies, in which case your data may continue to be stored. This is the case, for example, if there is an obligation to store pertinent data for tax or commercial law reasons. In this case, processing will be restricted and will then only take place for that purpose.
• Right to restriction
  You may request the restriction of processing of your personal data, in particular if:
  • you contest the accuracy of the data and the data is being verified;
  • the processing is unlawful and you object to the erasure;
  • the data is no longer required, but you need it for the assertion, exercise or defense of legal claims, or
  • you have objected to processing.
    In the event that processing is restricted, your personal data may in principle only be stored; specifically, it may only be processed with your consent or for the assertion or exercise of as well as for the defense against legal claims.
• Right to data portability
  You may request to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format so that you can transmit it to another controller. You also have the right to have this data transmitted directly to another person responsible. However, the prerequisite for this right is that the processing of your data is based on consent, the implementation of pre-contractual measures or the performance of a contract.
• Right to object
  You may object to the processing of personal data pertaining to you if the processing is based on a legitimate interest (Art. 6 (1) sentence 1 (f) GDPR). Your right to object also applies in the case of any direct marketing (e.g. newsletter mailings), including any profiling that may be associated with this. The data will then no longer be processed unless compelling reasons are provided for such processing.
• Revocation of consent to data processing
  If you have consented to processing of your personal data, you can withdraw this consent at any time. Any processing that has taken place up to the time of revocation remains unaffected.
• Assertion of your rights
  If you wish to exercise the rights described above, please contact our data protection officer (Section 3).
• Right of appeal to a data protection authority
  You have a right of appeal to a supervisory authority.

The supervisory authority responsible for Continental AG is:

Die Landesbeauftragte für den Datenschutz Niedersachsen
Prinzenstraße 5
30159 Hannover

(The State Representative for Data Protection in Lower Saxony
Prinzenstraße 5
30159 Hanover, Germany)

If you have any questions or complaints, please first contact us directly (see Section 3) – your concern is certain to be resolved to your satisfaction.

8 Necessity to Provide Your Personal Data

You are neither legally nor contractually obligated to provide us with personal data. To the extent that our website or the social media channels used by us require the provision of personal data, this is necessary in order to provide you with these services. Insofar as the provision of personal data beyond this purpose is not mandatory and you choose not provide it, we cannot supply any separate or individual information to you (e.g. we cannot answer or process any request or complaint you may have sent to us or send you a newsletter).

9 Transfer of Your Personal Data to Third Countries

Your personal data is processed on servers within the scope of GDPR (in the EU / EEA). It will in principle not be transferred to third countries, unless explicitly stated otherwise in this Data Protection Information.

10 LinkedIn Insight Tag

We use the LinkedIn Insight Tag (and LinkedIn Pixel) from LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). By integrating this tag, we can display interest-based ads that are relevant to you as a user of our website when you visit the LinkedIn social network or other websites that also use the method, and we obtain statistics about the website visitors and demographics. Furthermore, we can evaluate your use of our LinkedIn advertising and your interest in our offers by means of a conversion tracking function, and also show you LinkedIn ads on other websites by means of retargeting. We do this in the interest of improving the effectiveness of LinkedIn ads and making our website more interesting for you.

If you accept the relevant cookie, your browser establishes a direct connection with LinkedIn’s server, both when you visit the LinkedIn website as well as when you visit websites that incorporate the LinkedIn Insight tag. LinkedIn and we are jointly responsible for collecting your usage data when you visit our website and transferring it to the provider, but LinkedIn is solely responsible for processing to implement the described objectives once the data has been transferred. We have no influence on the scope or nature of the use made of the data by LinkedIn. Please therefore be advised of the following in accordance with our state of knowledge: Through integration of the LinkedIn Insight Tag, LinkedIn receives notification that you have accessed the relevant page on our website, or have clicked on one of our ads. If you are registered for a LinkedIn service, LinkedIn can associate the visit to your account. Even if you are not registered with LinkedIn or have not logged in, the provider may learn your IP address, the time slot and other identifiers and link these to the actions associated with you.

You can disable the LinkedIn Insight Tag and object to other forms of marketing in the ad settings under Manage ad settings | LinkedIn Help and also under Unsubscribe from ads (linkedin.com). For further settings options and information, please refer to the LinkedIn Privacy Center: Privacy Policy (linkedin.com). The legal basis for processing your data is Art. 6 (1) sentence 1 (a) GDPR, by consenting to setting the relevant cookies. At the same time, you agree that your personal data may also be transferred to LinkedIn in the USA. Please note that third countries such as the USA (except certified companies under the Data Privacy Framework Program) generally do not offer a comparable level of data protection and access by third parties (e.g. local authorities) cannot be ruled out. You can revoke your consent at any time. The easiest way to do so is to use our cookie manager. 

Further information on data processing by LinkedIn is available from the provider, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland; information on the LinkedIn Insight Tag: LinkedIn Insight-Tag | LinkedIn Marketing Solutions; data protection information: https://www.linkedin.com/legal/privacy-policy.

General information on the social media channels operated by Continental is available at Site Notice and Data Protection Information for Users of Continental’s Social Media Channels - Continental AG.

11 Google Tag Manager

We use the Google Tag Manager provided by Google Ireland Limited, incorporated and operating under the laws of Ireland (Registered Number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland, “Google”) on this website.

The Google Tag Manager only manages and implements tags. This means that no personal data is collected by the Google Tag Manager. The data processed by the Google Tag Manager does not contain user IP addresses or any user-specific identifiers that could be associated with a specific person. Other than data in standard HTTP request logs, all of which is deleted within 14 days of receipt, Google Tag Manager does not collect, store or share information about visitors to our customers’ properties, including page URLs visited.

More information about Google Tag Manager can be found at https://www.google.com/analytics/terms/tag-manager/ and https://support.google.com/tagmanager/answer/9323295?hl=en.

12 Integration of Third-party Services and Content

We use third-party services and content on this website. In defined areas, external services and content from third-party providers may be integrated and displayed on our websites.

Services and content from the following third-party providers are integrated on our website:

12.1 Function for sharing content on social networks:

When you use the share function on our website, no personal data is transmitted to the relevant social media service unless you log in to your social media platform and share content on your social media profile.

If you share content from our website using your personal social media profile, we have no influence on the content or scope of the data collected by the networks. Here, the terms of use and data protection provisions of the respective social network apply.

12.2 Google Analytics

For the purpose of statistical evaluation, we obtain information about your use of our website in order to improve our website and its functionalities on this basis. However, no Personal Data is transmitted or stored that can be used to identify you as a user.

For this purpose, we use the analysis tool Google Analytics provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google") on our website. This tool supports us in analyzing the traffic to and on our website. For this purpose, Google collects various information about your visit of our website like for example your IP address, a User or Client-ID applied to you, your first visit to the website, your click on a link to a new domain, your scrolling to the end of the website, the viewing of a video, the length of stay on the website, internal searches on the website, country and city [latitude and longitude] from where you access the website, device information [brand, model], screen resolution, browser and operating system information. This data is evaluated by Google in order to create reports, which may include, among other things, statements about your length of stay, approximate geographical origin, origin of visitor traffic, exit pages and usage processes.

Information that Google generates about your use of our website is regularly transmitted to data centers in the USA and stored there. If you are using our website within the EU, the data collected by Google Analytics is first send to a Google data center in the EU, where the IP address is analyzed in terms of longitude and latitude and associated information and then deleted before the collected dataset is transferred to other Google data centers, possibly outside the EU, for further analysis. This function ensures the anonymization of the Personal Data before any data is stored and processed within the framework of Google Analytics, so that a clear determinability of your person by Google is excluded.

As part of Google Analytics, we also use the Google Signals extension, which enables tracking across multiple devices. For this purpose, Google uses the Personal Data of users who are logged into a Google service at the same time when visiting websites and have activated the "personalized advertising" option in their Google account settings (https://adssettings.google.com/authenticated).

In Google Analytics, interactions with you as a visitor to our website are primarily recorded with the help of cookies. These cookies are used to store non-personal data and are not made accessible in browsers across domains. These cookies are only activated if you provide your consent in the cookie settings of our website. If you do not provide your consent for the use of cookies, Google Analytics will try to fill the resulting data gaps through AI-based extrapolation based on models using known user data.

The legal basis for the processing of your Personal data within the framework of Google Analytics is your consent in accordance with Art. 6 (1) p. 1 lit. a GDPR, which we also obtain via the cookie settings [link] of our website. Hence, if you do not provide your consent to the activation of the Google Analytics cookies, you also do not consent into the processing of your Personal Data in general and no processing in google Analytics will take place.

Data Processing Agreement

We have concluded a data processing agreement with Google for data processing and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Personal data transferred to data centers in the U.S. is processed by Google LLC, 1600 Amphitheatre Parkway Mountain View, California 94043 and its subsidiaries as sub-processor of Google. Google LLC is certified under the EU-U.S. Privacy Framework. Against this background, an adequate level of data protection is assumed and the transfer of Personal data by Google is permitted based on Art. 45 (1) GDPR.

Revocation of your Consent

You can withdraw your consent to the processing of your Personal Data within the framework of Google Analytics at any time with effect for the future as follows:

• Revocation via our Cookie Settings
  You can deactivate the processing of your Personal Data within the framework of Google Analytics in the cookie settings [link] of our website and thus withdraw the consent you have given to the processing of your Personal Data in connection with Google Analytics.
• Deactivation of Google Analytics by Browser add-on
  You can deactivate Google Analytics by installing a small program, a so-called browser add-on, which you can download from the following address: https://tools.google.com/dlpage/gaoptout. The add-on prevents your Personal Data from being evaluated in Google Analytics. However, the use of the browser add-on to deactivate Google Analytics does not prevent Personal Data from being sent to our website or other web analysis services.

For more information on how Google Analytics handles Personal Data, please refer to Google's Google Analytics Privacy Notice.

12.3 Mouseflow

This website uses Mouseflow, a web analytics tool provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark. The data processing serves the purpose of analyzing this website and its visitors. Data is collected and stored for marketing and optimization purposes. Based on this data, usage profiles can be created under a pseudonym. Cookies may be used for this purpose. In the case of the Mouseflow web analysis tool, randomly selected individual visits (only with de-identified IP address) are recorded. A log of mouse movements and clicks is created on this basis with a view to randomly replaying individual website visits in order to derive potential improvements for the website. The data collected by Mouseflow is not used to personally identify visitors to this website without the express consent of the individual concerned and will not be merged with personal data relating to the bearer of the pseudonym.

The legal basis for processing is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR, which we obtain via the cookie settings of our website.

Processing contract

We have concluded a processing contract with Mouseflow and fully implement the strict requirements of the German data protection authorities when using Mouseflow.

Revocation of your consent

You can revoke your consent to the processing of your personal data within the scope of Mouseflow at any time with effect for the future as follows:

• Revocation via our cookie settings
  You can disable the processing of your personal data within Mouseflow in the cookie settings [link] on our website, which revokes the consent you have given to the processing of your personal data in connection with Mouseflow.
   
• Disabling Mouseflow on the Mouseflow website
  For this purpose, you can disable recording on all websites that use Mouseflow as well as globally for the browser you are currently using, using the following link: https://mouseflow.com/opt-out/
   

12.4 Google Ads Remarketing

We use Google Ads on this website. We do so to advertise in Google search results and on third-party websites. When you visit our website, a remarketing cookie is set by Google, which automatically enables interest-based advertising by means of a pseudonym cookie ID and on the basis of the pages you visit.

When the purpose has been served and the use of Google Ads Remarketing is ended by us, the data collected in this context is deleted.

This data processing is based on your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR, which we determine via our cookie consent tool.

Beyond this, data processing only takes place if you have consented to Google linking your web and app browsing history to your Google Account, and information from your Google Account is used to personalize the ads that you see on the web. In this case, if you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked with Google Analytics data by Google in order to form target groups.

You can revoke the consent given to us at any time with effect for the future. Click on the cookie settings, where you can revoke your consent by removing the check mark next to “Marketing.”

12.5 AdmiralCloud

AdmiralCloud is a digital media and document management tool that we use to display images and videos. The data collected is used for performance measurement and is stored to ensure system security. To deliver content, AdmiralCloud uses Amazon Cloudfront, a globally distributed content delivery network. For the purpose of billing, error and threat analysis, traffic data (including IP addresses, timestamps) is collected and stored by Amazon.

The website from which the videos are embedded is operated by AdmiralCloud AG, Fidicinstraße 3, 10965 Berlin, Germany.

The legal basis for processing and forwarding your data is Art. 6 (1) sentence 1 (f) GDPR and, accordingly, a legitimate interest on our part in providing you with an attractive website.

12.6 Webcast

Webcast is the streaming provider for our Annual Shareholders’ Meeting and for our annual press conference. The website on which the video streaming is embedded is operated by NC3 GmbH, Altenburger Str. 7, 04275 Leipzig, Germany (“NC3”).

You can find the NC3 Privacy Policy here.

The legal basis for processing and forwarding your data is Art. 6 (1) sentence 1 (f) GDPR and, accordingly, a legitimate interest on our part in providing this functionality for you on our website.

12.7 iCIMS Video Studio

We use iCIMS Videos Studio to show you videos of employees talking about their experiences at Continental. These videos are displayed at the bottom of our career pages.

The website on which the videos are embedded via a Javascript widget is operated by iCIMS, Inc, 101 Crawfords Corner Road, Suite 3-100, Holmdel, NJ 07733 USA.

You can find the iCIMS Privacy Notice here.

This provider may transfer, store or process your personal data outside the EEA/EU. iCIMS is certified under the EU-US Data Privacy Framework. More information can be found here: https://www.dataprivacyframework.gov/

The legal basis for processing is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR, which we obtain via the cookie settings of our website. You can revoke the consent given to us at any time with effect for the future by removing the relevant check mark in the cookie settings on the web page.

​​​​​​​12.8 Brightcove video hosting

We use the video hosting and publishing service of Brightcove Inc., 290 Congress Street, Boston, MA 02210, USA, on our website.

In the context of usage, we transfer the following data to Brightcove for further processing:

Mouse movements, timestamp, IP, tracked media, timezone, time and date, user location, visitor behavior, user agent, language, website visited.

This provider may transfer, store or process your personal data outside the EEA/EU.Brightcove is certified under the EU-US Data Privacy Framework. More information can be found here: https://www.dataprivacyframework.gov/

The legal basis for processing is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR, which we obtain via the cookie settings of our website. You can revoke the consent given to us at any time with effect for the future by removing the relevant check mark in the cookie settings on the web page.

​​​​​​​12.9 SmartRecruiters

SmartRecruiters is an applicant tracking system that we use to advertise or subscribe to job vacancies and enable candidates to apply.

The website on which the subscription widget is embedded is operated by SmartRecruiters GmbH, Wilhelmstr, 118, 10963 Berlin, Germany.

You can find the SmartRecruiters Privacy Policy here.

The legal basis for processing and forwarding your data is Art. 6 (1) sentence 1 (f) GDPR and, accordingly, a legitimate interest on our part in using this functionality in the context of our applications management and selection process.

This provider may transfer, store or process your personal data outside the EEA/EU. These countries may not have the same level of data protection and the enforcement of your rights may be restricted or not possible.

​​​​​​​12.10 Bing Maps

We employ a module on our website that uses map material from Microsoft Bing Maps, which is provided via an API from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (Microsoft).

When you view the maps, a connection is established to Microsoft’s servers, during which process your IP address (among other data) is transmitted to Microsoft. Microsoft may evaluate the use of the features offered by Microsoft Bing Maps by website users. Furthermore, Microsoft is able to write or read cookies. These may include cookies that allow conclusions to be drawn about your person.

If you have a Microsoft account and are logged in, the data collected by Microsoft will be associated to your Microsoft account.

For more information on Microsoft Bing Maps, please refer to the Microsoft Bing Maps Terms of Use and Privacy Statement:

    https://www.microsoft.com/en-us/maps/product
    https://privacy.microsoft.com/en-us/privacystatement/

The legal basis for processing is your consent pursuant to Article 6 (1) sentence 1 (a) GDPR. You can revoke the consent given to us at any time with effect for the future by removing the relevant check mark in the cookie settings on the web page.

Microsoft is certified under the EU-US Data Privacy Framework. More information can be found here: https://www.dataprivacyframework.gov/

​​​​​​​12.11 YouTube

YouTube, from which videos are embedded via iFraming is operated by Google Ireland Limited, headquartered at Gordon House, Barrow Street, Dublin 4, Ireland. When external content/videos are accessed, this/these is/are identified by the YouTube logo. You can find YouTube’s Privacy Policy here: https://policies.google.com/privacy.

If you visit one of our websites with embedded videos, your browser will not automatically establish a connection to the server of the above-mentioned website. By clicking on the embedded video, you consent to communication with the above-mentioned website and to cookies being set by that website. After clicking on the relevant embedded video, the information that you have accessed our website is forwarded to the above-mentioned website operator and cookies are set on your computer by the above-mentioned website.

If you are logged in to the above-mentioned website during a visit to our website, the data transferred will be associated with your relevant user account. If you wish to prevent a website operator from linking information to your user account in this manner, please log out of the above-mentioned website before clicking on the relevant video.

Even if you have not registered with the above-mentioned website or are not currently logged in, your data may be stored by the operators of the above-mentioned website after you have clicked on the link. We have no influence on how cookies are set by the providers of the above-mentioned website, nor on the content or scope of the data that the website collects and uses. Please familiarize yourself accordingly in the Privacy Policy of the above-mentioned website.

The legal basis for processing is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR, which we obtain via the cookie settings​​​​​​​ of our website. You can revoke the consent given to us at any time with effect for the future by removing the relevant check mark in the cookie settings on the web page.

In case personal data will be transfered to the US, YouTube is certified under the EU-US Data Privacy Framework. More information can be found here: https://www.dataprivacyframework.gov/

​​​​​​​12.12 Glassdoor

We embed the Glassdoor website on our website via iFraming. The website from which third-party content is embedded via iFraming is operated by Glassdoor, Inc., 100 Shoreline Highway, Building A, Mill Valley, CA 94941, USA. The external content displayed is identified by the “powered by glassdoor” logo. You can find Glassdoor’s Privacy Policy here.

If you visit one of our websites with embedded third-party content, your browser will not automatically establish a connection to the server of the above-mentioned website. The third-party content will merely be displayed.

Glassdoor is certified under the EU-US Data Privacy Framework. More information can be found here: https://www.dataprivacyframework.gov/

13 Provision of Online Offer and Web Hosting

Data and information is automatically collected from the website visitor’s system and stored in server log files. This data stored includes:

• the browser type and version used (if transmitted by the user);
• the operating system;
• the date and time of the server request;
• the number of visits;
• the requested URL;
• the data volume transferred;
• the website previously visited (if transmitted by the user);
• the IP address of the client and loadbalance.

The storage duration of IP addresses is seven (7) days. The legal basis for processing is Article 6 (1) sentence 1 (f) GDPR. The legitimate interest for processing the IP address is to enable communication between our server and your terminal device as well as to ensure the general functionality of our website in order to track attacks on our systems. The processing of the other data serves to compile statistics.

14 Changes to This Data Protection Information

This Data Protection Information is updated on a periodic basis; changes or additions are published here. We therefore recommend that you check this page regularly.

Thank you for reading this Data Protection Information.

Status: October 2023