Data protection

DATA PROTECTION DECLARATION

1) Introduction and Contact Details of the Responsible Party

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data that can be used to personally identify you.

1.2 The responsible party for data processing on this website in the sense of the Swiss Data Protection Act (DSG) is Beauty Mates GmbH, Taunusstraße 23a, 80807 Munich, Germany, Tel.: !""", Email: marie.freesemann@beautymates.com. The responsible party for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website purely for informational purposes, i.e., when you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
Used IP address (possibly in anonymized form)

No transfer or other use of the data takes place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Shopify
For the hosting of our website and the presentation of the content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada. All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. An adequate level of data protection for data transmission to Canada is ensured by an adequacy decision of the Swiss Federal Council.

3.2 Cloudflare
We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA. This service allows us to deliver large media files such as graphics, page content, or scripts faster through a network of regionally distributed servers. Processing is done to safeguard our legitimate interest in improving the stability and functionality of our website. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. For data transmission to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with Swiss data protection standards.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process, in individual scope, certain user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie. Some cookies are used to simplify the ordering process by storing settings (e.g., remembering the content of a virtual shopping cart for a later visit to the website).

We may work with advertising partners who help us make our internet offering more interesting for you. For this purpose, cookies from partner companies may also be stored on your hard drive during your visit to our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in the following paragraphs.

Please note that you can set your browser to inform you about the setting of cookies and to decide individually on their acceptance or to exclude the acceptance of cookies for specific cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this for the respective browsers at the following links:

Microsoft Edge: Link
Firefox: Link
Chrome: Link
Safari: Link
Opera: Link

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting Us

5.1 In the context of contacting us (e.g., via contact form or email), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your inquiry or for contacting you and the associated technical administration. Your data will be deleted after the processing of your request is completed. This is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and if there are no legal retention obligations to the contrary.

5.2 Zendesk
To process customer inquiries, we use the email ticketing system of the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland. If you submit contact inquiries via our website, these are stored and organized in the ticketing system to enable chronological processing and improve the service experience. You can always check the current status of your request using the individually assigned ticket number.

For the organization and processing of inquiries, personal data is collected according to the scope of their provision, at least name, first name, and email address, transmitted to the provider, stored there, and retrieved. The legal basis for the processing of this data is our legitimate interest in efficiently designing our customer service, promptly responding to your request, and optimizing our service offerings. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

6) Data Processing When Opening a Customer Account and for Contract Processing

Personal data is collected and processed when you provide us with this data to carry out a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deleting your customer account is possible at any time and can be done by sending a message to our address. We store and use the data you provided for contract processing. After deleting your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after these periods expire, unless we can demonstrate a prevailing interest for further processing under Article 31(2) DSG or a justification under the law.

7) Use of Your Data for Direct Marketing

7.1 Subscription to Our Email Newsletter
By providing your personal data, you consent to our using this data to send newsletters. We store your IP address registered by the internet service provider (ISP) as well as the date and time of registration to be able to trace possible misuse of your email address at a later time. The data we collect when you subscribe to the newsletter is used exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending us an appropriate message. After unsubscribing, your email address will be deleted from our newsletter distribution list unless we can demonstrate a prevailing interest for further processing under Article 31(2) DSG or a justification under the law.

7.2 Sending the Email Newsletter to Existing Customers
If you provided your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range via email. For this, we do not need to obtain separate consent from you. Data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising. If you initially objected to the use of your email address for this purpose, no email will be sent from us. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the responsible party named at the beginning. This incurs only transmission costs at the basic rates for you. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately ceased.

7.3 Klaviyo
Our email newsletters are sent via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA. Based on our legitimate interest in effective and user-friendly newsletter marketing, we forward the data you provided when subscribing to the newsletter according to Article 6(1)(f) DSGVO to this provider so that it can handle the newsletter dispatch on our behalf. Subject to your express consent according to Article 6(1)(a) DSGVO, the provider additionally conducts statistical evaluations of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but is not merged with other data sets. You can revoke your consent to newsletter tracking at any time with effect for the future. We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

7.4 Mailjet
The sending of our email newsletters is done through this provider: Mailjet GmbH, c/o Workrepublic, Berliner Allee 26, 40212 Düsseldorf, Germany. Based on our legitimate interest in effective and user-friendly newsletter marketing, we forward the data you provided when subscribing to the newsletter according to Article 6(1)(f) DSGVO to this provider so that it can handle the newsletter dispatch on our behalf. Subject to your express consent according to Article 6(1)(a) DSGVO, the provider additionally conducts statistical evaluations of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but is not merged with other data sets. You can revoke your consent to newsletter tracking at any time with effect for the future. We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

7.5 WhatsApp Newsletter
If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information for sending the newsletter is your mobile number. To send the newsletter, you need to add our provided mobile number to the address contacts of your mobile device and send us the message "Start" via WhatsApp. By sending this WhatsApp message, you give us your consent to use your personal data for the purpose of sending the newsletter. We will then include you in our newsletter distribution list. The data we collect when you subscribe to the newsletter will be processed exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time by sending us the message "Stop" via WhatsApp. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve a further use of data that is legally permitted and of which we inform you in this declaration. Please note that WhatsApp gains access to the address book of the mobile device we use for newsletter distribution and automatically transmits phone numbers stored in the address book to a server of Facebook in the USA.

8) Data Processing for Order Processing

8.1 The personal data we collect will be passed on to the transport company entrusted with the delivery as far as this is necessary for the delivery of the goods. Your payment data will be transmitted to the bank responsible for processing the payment as far as this is necessary for the payment processing. If specific service providers are used for order processing, we will explicitly inform you below.

8.2 Use of Specific Service Providers for Order Processing and Execution
- magnalister
Order processing is carried out through the service provider "magnalister" (RedGecko GmbH, Paul-Lincke-Ufer 20-22, 10999 Berlin). Name, address, and possibly further personal data will only be passed on to magnalister for the purpose of processing the online order. The transfer of your data occurs only to the extent necessary for processing the order. Details on data protection at magnalister and the privacy policy of magnalister can be viewed on the magnalister website at https://www.magnalister.com/de/datenschutz.

8.3 Transfer of Personal Data to Shipping Service Providers
- DHL
If the goods are delivered by the transport service provider DHL (DHL Logistics (Switzerland) AG, Pumpwerkstrasse 51, 8105 Regensdorf), we will pass on your email address before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification to DHL, provided you have expressly consented to this in the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery. The transfer takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or the delivery notification is not possible. Consent can be revoked at any time with effect for the future to the responsible party named above or to the transport service provider DHL.

- Post CH
If the goods are delivered by the transport service provider Post CH (Swiss Post AG, Wankdorfallee 4, 3030 Bern), we will pass on your email address before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification to Post CH, provided you have expressly consented to this in the ordering process. Otherwise, we only pass on the name of the recipient and the delivery address to Post CH for the purpose of delivery. The transfer takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Post CH or the transmission of status information for the delivery is not possible. Consent can be revoked at any time with effect for the future to the responsible party named above or to the transport service provider Post CH.

9) Contacting Us for Review Reminders

9.1 Reviews.io
For review reminders, we use the services of the following provider: REVIEWS.io 2020 GmbH, Skalitzer Str. 104, 10997 Berlin, Germany. Exclusively based on your express consent according to Article 6(1)(a) DSGVO, we transmit your email address and possibly other customer data to the provider so that they can contact you with a review reminder via email. You can revoke your consent at any time with effect for the future to us or to the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

9.2 Review Reminder by Trustpilot
If you have given us your express consent during or after your order, we will transmit your email address to the review platform Trustpilot of Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (www.trustpilot.com), so that they can send you a review reminder via email. You can revoke your consent at any time by sending a message to us or to the review platform.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

10) Use of Social Media: Videos

Using YouTube Videos
This website uses the YouTube embedding function to display and play videos from the provider "YouTube," which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The extended privacy mode is used, which, according to the provider's information, only starts storing user information when the video is played. When playing embedded YouTube videos, the provider "YouTube" uses cookies to collect information about user behavior. According to "YouTube," these are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive actions. If you are logged into Google, your data will be directly associated with your account when you click on a video. If you do not wish for this association with your profile on YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates these. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC in the USA. Regardless of the playback of the embedded videos, a connection to the Google network is established with each visit to this website, which can trigger further data processing operations without our influence.

For more information on data protection at "YouTube," please see the provider's privacy policy at: Link.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with Swiss data protection standards.

11) Online Marketing

11.1 Use of Affiliate Programs
11.2 Tradedoubler GmbH
We participate in the affiliate program of the following provider: Tradedoubler GmbH, Herzog-Wilhelm-Straße 26, 80331 Munich, Germany. In this context, we have placed links on our website that lead to offers on the websites of the provider or third parties ("partner sites"). To measure the success of an affiliate link, to evaluate orders generated via such a link, and to account for commission payments, the provider uses cookies and/or comparable technologies, which are generally set on the partner sites and for which we are not responsible under data protection law. The provider regularly processes the IP address and possibly other device information. All the above-described processing, especially the reading or storing of information on your device, only takes place if you have given your explicit consent according to Article 6(1)(a) DSGVO. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites.

12) Web Analysis Services

12.1 Google Analytics 4
This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website. By default, when visiting the website, Google Analytics 4 sets cookies, which are small text blocks stored on your device and collect specific information. This information also includes your IP address, which Google shortens by the last digits to exclude direct personal reference. The information is transmitted to Google servers and processed there. Transfers to Google LLC based in the USA are also possible. Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website use and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. The data collected within the use of Google Analytics 4 is stored for a period of two months and subsequently deleted. All the above-described processing, especially the setting of cookies on the used device, only occurs if you have given us your explicit consent. Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. For further legal information regarding Google Analytics 4, please visit Link and Link.

Demographic Features
Google Analytics 4 uses the special "demographic features" function and can create statistics that make statements about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third parties. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and will be deleted after a storage period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may analyze your usage behavior across devices and create database models, including cross-device conversions, subject to your consent to the use of Google Analytics. We do not receive personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized Advertising" function in your Google account settings. For instructions on how to do this, follow the instructions on this page: Link. For more information about Google Signals, please visit: Link.

UserIDs
As an extension to Google Analytics 4, the "UserIDs" function may be used on this website. If you consent to the use of Google Analytics 4, create an account on this website, and log in on different devices with this account, your activities, including conversions, may be analyzed across devices.

12.2 Microsoft Clarity
On this website, various user information is collected and stored through the "Microsoft Clarity" service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA (hereinafter "Microsoft") for statistical analysis of user behavior and for optimization and marketing purposes. The information collected, where personal reference is always excluded, includes among other things, time zone setting, operating system and platform, geographical origin of the page view, the referral source when redirected to our site, the duration of visits to specific pages, and information about website interaction (e.g., scrolling, clicks, and mouse-overs). Pseudonymized usage profiles can be created and evaluated from this data for the same purpose. Cookies are used for collection and evaluation. Cookies are small text files that are stored locally in the cache of the visitor's internet browser. Cookies enable the recognition of the internet browser. The data collected with Microsoft technologies will not be used to personally identify the visitor to this website without the separate consent of the data subject and will not be merged with personal data about the bearer of the pseudonym.

Information collected may be transmitted to Microsoft servers in the USA and stored there. We have concluded a data processing agreement with Microsoft, obligating them to protect our customers' data and not to disclose it to third parties. If you wish to object to the analysis of user behavior via cookies, you can configure your browser to inform you about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for certain cases or generally. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. For data transmission to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with Swiss data protection standards. For more information on Microsoft's data protection regulations, please visit Link.

13) Retargeting/Remarketing/Referral Advertising

Meta Pixel
This website uses the "Meta Pixel" from Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta"). This allows the behavior of users to be tracked after they have seen or clicked on a Facebook and/or Instagram advertisement. This process is used to evaluate the effectiveness of advertisements for statistical and market research purposes and may help optimize future advertising measures. The collected data is anonymous to us, providing no conclusions about the identity of users. However, the data is stored and processed by Meta, allowing a connection to the respective user profile and enabling Meta to use the data for its own advertising purposes, in accordance with Meta's data usage policy (https://www.facebook.com/about/privacy/). You can enable Meta and its partners to display ads on and off Facebook and/or Instagram. For this purpose, a cookie may be stored on your computer. This may also involve the transfer of personal data to the servers of Meta Platforms Inc. in the USA.

To disable the use of cookies on your computer, you can configure your internet browser so that no cookies can be stored on your computer in the future or delete cookies that have already been stored. Disabling all cookies may, however, mean that some features on our website can no longer be executed. You can also deactivate the use of cookies by third-party providers such as Meta on the following website of the Digital Advertising Alliance: Link.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties. For data transmission to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with Swiss data protection standards.

14) Tools and Miscellaneous

14.1 Amainvoice
To handle our accounting, we use the cloud-based accounting software "Amainvoice" from amaZervice GmbH, Im Öschle 6, 87499 Wildpoldsried ("Amainvoice"). Amainvoice processes incoming and outgoing invoices as well as possibly the bank movements of our company to automatically record invoices, match them to the transactions, and create financial accounting in a partially automated process. If personal data is also processed here, the processing takes place according to Article 6(1)(f) DSGVO based on our legitimate interest in efficient organization and documentation of our business transactions. More information about Amainvoice, the automated processing of data, and the data protection regulations can be found at Link.

- DATEV
To handle our accounting, we use the service of the cloud-based accounting software of the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany. The provider processes incoming and outgoing invoices as well as possibly the bank movements of our company to automatically record invoices, match them to the transactions, and create financial accounting in a partially automated process. If personal data is also processed here, the processing takes place according to Article 6(1)(f) DSGVO based on our legitimate interest in efficient organization and documentation of our business transactions.

14.2 Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain effective user consents for cookies that require consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users in the form of an interactive user interface when accessing the page, on which consents for specific cookies and/or cookie-based applications can be granted by ticking. By using the tool, all cookies/services requiring consent are only loaded when the respective user has granted the corresponding consents by ticking. This ensures that such cookies are only set on the user's device if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here. In individual cases, if personal data (such as the IP address) is processed for the purpose of storage, allocation, or logging of cookie settings, this occurs based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our online presence. Furthermore, as the responsible party, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user consent.

For further information about the operator and the settings of the cookie consent tool, please refer directly to the corresponding user interface on our website.

14.3 Google reCAPTCHA
On this website, we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is abusive through automated processing. The service includes the transmission of the IP address and possibly other data required by Google for the reCAPTCHA service to Google. In the context of using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits unauthorized disclosure to third parties. For data transmission to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with Swiss data protection standards. For further information on Google reCAPTCHA and Google's privacy policy, please visit: Link.

14.4 Google Web Fonts
This page uses web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform presentation of fonts. When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google servers, which may also involve the transmission of personal data to the servers of Google LLC in the USA. This allows Google to know that our website has been accessed via your IP address. The use of Google Web Fonts is done in the interest of a uniform and appealing presentation of our online offerings. If your browser does not support web fonts, a standard font from your computer will be used.

For data transmission to the USA, the provider relies on standard contractual clauses of the Federal Data Protection and Information Commissioner (EDÖB), which are intended to ensure compliance with Swiss data protection standards. For more information about Google Web Fonts, please visit Link and in Google's privacy policy: Link.

14.5 Applications for Job Advertisements by Email
On our website, we advertise currently vacant positions in a separate section, to which interested parties can apply by email to the provided contact address. Participation in the application process requires that applicants provide us with all personal data necessary for a well-founded and informed assessment and selection along with the application by email. Required information includes general personal information (name, address, a telephone or electronic contact option) as well as qualification-specific evidence of the necessary qualifications for a position. Health-related information may also be required, which must be specially considered in the interest of social protection.

Which components an application must contain in individual cases for consideration and how these components should be transmitted by email can be found in the respective job advertisement.

Upon receipt of the application sent using the provided email contact address, we will store the applicant data and evaluate it solely for the purpose of processing the application. For any questions arising during processing, we will use either the email address provided by the applicant with their application or a provided telephone number at our discretion. The legal basis for this processing is the execution of the application process as the initiation of an employment contract.

Insofar as special categories of personal data (e.g., health data such as information about disability status) are requested from applicants during the application process, the processing occurs so that we can exercise and fulfill our rights and obligations arising from labor law and social security and social protection law. Cumulatively or alternatively, the processing of special data categories may also occur for purposes of health protection or occupational medicine, for assessing the applicant's fitness for work, for medical diagnostics, care or treatment in the health or social sector, or for managing systems and services in the health or social sector.

If the above-described evaluation does not result in the selection of the applicant or if an applicant withdraws their application early, the data transmitted by email, as well as all electronic correspondence including the original application email, will be deleted after appropriate notification no later than 6 months after receipt. This period is based on our legitimate interest in answering any follow-up questions regarding the application and fulfilling our evidential obligations under the provisions for equal treatment of applicants.

In the event of a successful application, the provided data will be further processed for the purposes of executing the employment relationship.

15) Rights of the Affected Parties

The applicable data protection law grants you the following rights against the responsible party regarding the processing of your personal data (rights of access and intervention), referring to the legal basis mentioned for the respective exercise conditions:

Right of access according to Article 25 DSG
Right to data release or transfer according to Article 28 DSG
Right to rectification according to Article 32(1) DSG

16) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and, if applicable, the respective statutory retention period (e.g., commercial law retention periods). In the case of processing personal data based on explicit consent, the affected data will be retained until you revoke your consent. If there are statutory retention periods for data, these data will be retained for the legally prescribed duration.

In addition, personal data will be processed as long as you do not explicitly prohibit the processing, unless we can demonstrate a prevailing interest in further processing in accordance with Article 31(2) DSG or a justification under the law.

Status: 05.07.2024, 12:00:00 PM

``` Falls du Anpassungen benötigst oder etwas hinzufügen möchtest, lass es mich wissen!