Privacy Policy

7.1 Google Web Fonts

This website uses web fonts provided by the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into its browser cache in order to correctly display text and fonts and establishes a direct connection to the provider’s servers. In this process, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to: Google LLC, USA

The processing of personal data in connection with the establishment of the connection to the font provider only takes place if you have given your express consent in accordance with Article 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by disabling this service via the cookie consent tool provided on the website. If your browser does not support web fonts, a standard font from your computer will be used. For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision of the European Commission.

7.2 Google reCAPTCHA

This website uses the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC, USA. For the visual design of the CAPTCHA window, the provider uses Google Fonts, which are loaded from Google via the internet. No additional information beyond the data already transmitted to Google through reCAPTCHA functionality is processed. The service checks whether an input is made by a natural person or abusively through automated processing and protects against spam, DDoS attacks, and similar automated malicious access. To ensure that an action is performed by a human rather than an automated bot, the provider collects:

• IP address
• Browser and operating system identification data
• Date and duration of the visit

These data are transmitted to the provider’s servers for evaluation. The legal basis is our legitimate interest in determining individual accountability on the internet and preventing misuse and spam in accordance with Article 6(1)(f) GDPR. We have concluded a data processing agreement with the provider to ensure the protection of our visitors’ data and prohibit unauthorized disclosure to third parties. For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework.

7.3 Zoom

For conducting online meetings, video conferences, and webinars, we use: Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA

The provider processes various types of data depending on the information you provide before or during participation in an online meeting, video conference, or webinar. This may include:

• Name
• Email address
• Phone number (optional)
• Password
• Meeting topic
• Participant IP address
• Device information
• Optional descriptions
• Audio and video contributions
• Chat messages

For the processing of personal data necessary for the performance of a contract or pre-contractual measures, the legal basis is Article 6(1)(b) GDPR. Where consent has been given, processing is based on Article 6(1)(a) GDPR. Consent may be revoked at any time with effect for the future. Otherwise, the legal basis is our legitimate interest pursuant to Article 6(1)(f) GDPR in the effective conduct of online meetings, webinars, and video conferences. We have concluded a data processing agreement with the provider to protect our visitors’ data and prohibit unauthorized disclosure. For data transfers to the United States, the provider relies on Standard Contractual Clauses (SCCs) of the European Commission.

7.4 Online Applications via Form

On our website, we publish vacant positions in a dedicated careers section, to which applicants may apply via a corresponding form. Applicants must provide all personal data necessary for a meaningful assessment, including:

• Name
• Address
• Contact details
• Qualification-related documents
• If applicable, health-related information

Further details are specified in the respective job posting. When submitting the form, applicant data is transmitted to us in encrypted form in accordance with the current state of technology, stored by us, and used exclusively for the purpose of processing the application. The legal basis is Article 6(1)(b) GDPR (or Section 26(1) BDSG in Germany), as the application process is considered a pre-contractual employment measure. If special categories of personal data pursuant to Article 9(1) GDPR are processed (e.g. health data such as disability information), processing is based on Article 9(2)(b) GDPR. Alternatively, processing may also be based on Article 9(2)(h) GDPR if required for healthcare, occupational medicine, assessment of work capacity, medical diagnostics, treatment, or related administration. If no employment relationship is established or an application is withdrawn, applicant data and related communication will be deleted no later than six months after notification. This period is based on our legitimate interest in responding to follow-up questions and fulfilling documentation obligations under equal treatment laws. In the event of successful employment, the data provided will be processed for employment purposes in accordance with Article 6(1)(b) GDPR (in Germany in conjunction with Section 26(1) BDSG).