Print this page

Privacy Policy - Information on the Processing of Personal Data

This document provides information about how we process personal data.

This privacy notice is a translation of the German document ("Datenschutzerklärung"). In the event of any discrepancies between the German and English versions, the German version shall prevail.

Introduction and structure of the document

We, the company Johs. Boss GmbH & Co. KG (hereinafter referred to as "the company", "we" or "us"), thank you for visiting our website and for your interest in our company and our services. Your personal data will only be processed in accordance with the provisions of German and European data protection law.

Data protection law obliges us, as the entity responsible for data processing, to ensure the protection of your personal data through a variety of measures. One of these obligations is to inform you transparently about the type, scope, purpose, duration and legal basis of the data processing (cf. Art. 13 and 14 EU GDPR). In the following, we also refer to you as the person affected by the data processing as "customer", "user", "you" or "data subject". In this privacy policy, we inform you about how your personal data is processed by us.

Our privacy policy has a modular structure. It consists of a general part for any processing of personal data and processing situations that may arise, and a special part whose content relates only to the processing situation specified there. It is possible that we use this online document to inform you about processing operations that do not primarily take place on the website. You will find these in the special section of the document. If you wish to navigate quickly in the document, many browsers offer a search function using the key combination "CTRL+F".

Definitions

Following the example of Art. 4 EU GDPR, this document is based on the following definitions:

"Personal data" (Art. 4 No. 1 EU GDPR) means any information relating to an identified or identifiable natural person ("data subject"). A person is identifiable if he or she can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, online identifier, location data or by means of information relating to his or her physical, physiological, genetic, mental, economic, cultural or social identity characteristics. Identifiability may also result from linking such information with other additional knowledge. The origin, form or embodiment of the information is irrelevant; photographs, video or audio recordings may also contain personal data.

"Processing" (Art. 4 No. 2 EU GDPR) means any operation involving personal data, whether or not by automated means. This includes, in particular, collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, deletion or destruction of personal data, as well as changes to the purpose for which the data was originally processed.

"Controller" (Art. 4 No. 7 EU GDPR) means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.

"Third party" (Art. 4 No. 10 EU GDPR) means any natural or legal person, public authority, agency or other body other than the data subject, controller, processor and persons authorised to process personal data under the direct responsibility of the controller or processor.

"Processor" (Art. 4 No. 8 EU GDPR) means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller, in particular in accordance with the controller's instructions, for example an IT service provider. A processor is not considered a third party within the meaning of data protection law.

"Consent" (Art. 4 No. 11 EU GDPR) of the data subject means any freely given, specific, informed and unambiguous indication of his or her wishes in the form of a statement or other clear affirmative action by which the data subject signifies agreement to the processing of personal data relating to him or her.

Name and address of the controller

Please refer to the imprint details on our website for the entity responsible for processing your personal data within the meaning of Art. 4 No. 7 EU GDPR, as well as contact details and other information about our company.

Contact details of the data protection officer

Our data protection team, consisting of data protection coordinators and our data protection officer, is available to answer any questions you may have and to act as your contact regarding data protection.

You can reach the data protection team:

• By post at the address stated in our imprint with the addition "Data Protection Team"
• By email at This email address is being protected from spambots. You need JavaScript enabled to view it.

Your rights

You can exercise your rights as a data subject regarding your processed personal data at any time by contacting us using the contact details provided above. You can facilitate your request by contacting the data protection team directly.

As a data subject, you have the right:

• in accordance with Art. 15 EU GDPR, to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data where it was not collected by us, and the existence of automated decision-making including profiling and, where applicable, meaningful information about its details;
• in accordance with Art. 16 EU GDPR, to request the immediate correction of inaccurate data or completion of your personal data stored by us;
• in accordance with Art. 17 EU GDPR, to request deletion of your personal data stored by us unless processing is necessary for exercising the right of freedom of expression and information, compliance with a legal obligation, reasons of public interest or the establishment, exercise or defence of legal claims;
• in accordance with Art. 18 EU GDPR, to request restriction of the processing of your personal data where the accuracy of the data is disputed by you or the processing is unlawful;
• in accordance with Art. 20 EU GDPR, to receive personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller ("data portability");
• in accordance with Art. 21 EU GDPR, to object to processing where processing is based on Art. 6 (1) lit. e or lit. f EU GDPR. This applies in particular where processing is not necessary for the performance of a contract with you. Unless the objection concerns direct marketing, we ask you to explain the reasons why we should no longer process your data as previously carried out. In the event of a justified objection, we will review the situation and either discontinue or adjust the processing or demonstrate compelling legitimate grounds on the basis of which we will continue processing;
• in accordance with Art. 7 (3) EU GDPR, to withdraw consent previously given at any time with effect for the future;
• in accordance with Art. 77 EU GDPR, to lodge a complaint with the competent data protection supervisory authority regarding the processing of your personal data by our company.

Legal basis of data processing

In principle, processing of personal data is only permitted if the processing is based on one of the following legal grounds:

Art. 6 (1) lit. a EU GDPR ("Consent"): if the data subject has freely, specifically, knowingly and unambiguously indicated agreement to the processing of personal data concerning him or her for one or more specific purposes.

Art. 6 (1) lit. b EU GDPR ("Contract"): if processing is necessary for the performance of a contract to which the data subject is party or for taking steps at the request of the data subject prior to entering into a contract.

Art. 6 (1) lit. c EU GDPR ("Legal obligation"): if processing is necessary for compliance with a legal obligation to which the controller is subject.

Art. 6 (1) lit. d EU GDPR: if processing is necessary in order to protect the vital interests of the data subject or another natural person.

Art. 6 (1) lit. e EU GDPR: if processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

Art. 6 (1) lit. f EU GDPR ("Legitimate interests"): if processing is necessary for the purposes of legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, particularly where the data subject is a child.

For the processing operations carried out by us, the applicable legal basis is stated below in each case. Processing may also be based on several legal grounds.

Data deletion and storage duration

For the processing operations carried out by us, we state below how long data is stored and when it is deleted or blocked. Where processing is based on consent, the storage duration stated in the respective consent request applies. Unless a specific storage duration is stated, your personal data will be deleted or blocked as soon as the purpose or legal basis for storage no longer applies.

As a general rule, your personal data is stored only in Germany, another Member State of the European Union or another state party to the Agreement on the European Economic Area. Possible exceptions are described in the following sections.

Storage may continue beyond the stated period in the event of threatened or actual legal disputes or other legal proceedings or where statutory provisions require storage, for example § 257 HGB or § 147 AO. Once the statutory retention period expires, personal data will be blocked or deleted unless further storage is necessary and a legal basis exists.

Data security: Website, Email, Fax

We use technical and organisational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or unauthorised access by third parties, taking into account the state of the art, implementation costs, scope, context and purpose of processing as well as existing risks for the data subject. Our security measures are continuously improved in line with technological developments.

For secure data transmission over the Internet, we use Transport Layer Security (TLS), formerly known as Secure Sockets Layer (SSL). This technology encrypts information transmitted by you.

We would like to point out that the confidentiality of email cannot be guaranteed in every case. Although we provide TLS transport encryption through our mail servers, confidentiality may depend on various mail relay servers over which we have no control.

If you send us a fax, transmission takes place via Internet Protocol (FoIP). The transmission is technically similar to sending an email or website data. We do not know whether all IP-based services encrypt such data and therefore cannot guarantee confidentiality. We do not recommend transmitting sensitive data by fax.

We will be happy to provide further information on request. Please contact our data protection team.

Cooperation with processors

As with any larger company, we use external service providers to handle business processes, for example in the areas of IT, logistics, telecommunications, parcel delivery, letters and emails, database analysis, advertising measures, payment processing, sales and marketing. These service providers have access to personal data required to perform their tasks. They may not use the data for other purposes. Processors act only on our instructions and are contractually bound pursuant to Art. 28 EU GDPR to comply with applicable data protection provisions.

Conditions for the transfer of personal data to third countries

In the context of our business relationships, your personal data may be transferred or disclosed to third-party companies. These may also be located outside the European Economic Area (EEA), i.e. in third countries. Such processing is carried out exclusively for the fulfilment of contractual and business obligations and to maintain your business relationship with us. Details of such transfers are provided below at the relevant points.

The European Commission may determine through adequacy decisions that certain third countries provide a level of data protection comparable to the EEA standard.

Where no comparable level of data protection exists, we generally ensure appropriate safeguards by means of binding corporate rules, Standard Contractual Clauses issued by the European Commission, certifications or recognised codes of conduct.

Automated decision-making

We do not intend to use personal data collected from you for automated decision-making, including profiling.

Obligation to provide personal data

We do not make the conclusion of contracts dependent on you providing personal data in advance. As a customer, you are generally under no legal or contractual obligation to provide us with your personal data. However, we may only be able to provide certain services to a limited extent or not at all if you do not provide the data required for this purpose.

Legal obligation to transmit certain data

We may be subject to a specific legal obligation to provide lawfully processed personal data to third parties, in particular public authorities (Art. 6 (1) lit. c EU GDPR).

Changes to this privacy policy

In the course of developments in data protection law as well as technological or organisational changes, this document is regularly reviewed for the need for amendments or additions. We reserve the right to amend this privacy policy at any time in compliance with applicable data protection law with effect for the future. Changes will be published here. Current status: 23.10.2023.

Information on the processing of personal data in specific processing operations

The following sections describe processing operations grouped according to different categories of persons whose data is processed ("data subjects").

Website visitors

Information about our company and the services we offer is available in particular at www.johs-boss.de and the associated subpages, hereinafter collectively referred to as "websites". When you visit our websites, personal data relating to you is processed.

Your data will only be processed for as long as necessary to achieve the processing purposes described above. The legal bases stated for the respective purposes apply accordingly. Third parties engaged by us will store your data on their systems for as long as necessary to provide their services to us.

The following categories of recipients, which are generally processors, may receive access to your personal data:

Service providers for the operation of our website and processing of data stored or transmitted by our systems, for example providers of data centre services, payment processing or IT security.

Public authorities where this is necessary to comply with a legal obligation.

Persons engaged in carrying out our business operations, such as auditors, banks, insurers, legal advisers, supervisory authorities and parties involved in corporate transactions.

We will otherwise disclose your personal data to third parties only if you have expressly consented to this in accordance with Art. 6 (1) lit. a EU GDPR.

Personal data processed on the website / log data

When you use our websites for informational purposes, the following categories of personal data are collected, stored and processed. When you visit our website, a server log file is temporarily stored on our web server. This may contain in particular:

• the page from which the requested page was accessed (referrer URL)
• the name and URL of the requested page
• the date and time of access
• the type, language and version of the web browser used
• the IP address of the requesting computer
• the amount of data transferred
• the operating system
• the access status / HTTP status code
• the GMT time zone difference

The processing of log data serves statistical purposes and helps improve the quality, stability and security of our website. The legal basis is Art. 6 (1) lit. f EU GDPR.

Additional information provided by your operating system, browser or other technologies may also be processed temporarily in order to provide the website. The legal basis for this is also Art. 6 (1) lit. f EU GDPR.

Web Analytics with Matomo (cookieless)

We use the open-source web analytics tool Matomo on our website and operate it on our own servers (on-premise).

Matomo is configured so that no cookies are set and users are not recognised across multiple sessions. Processing is carried out exclusively on the basis of anonymised or pseudonymised data. In particular, your IP address is shortened before storage (IP anonymisation).

When using Matomo, the following data may be processed:

• pages accessed and page titles
• date and time of access
• referrer URL
• browser, operating system and device type
• anonymised IP address

The processing is based on Art. 6 (1) lit. f EU GDPR. Our legitimate interest lies in statistically analysing the use of our website and optimising it.

The data collected is not passed on to third parties.

You can object to processing by enabling the "Do Not Track" setting in your browser.

The data is stored for a period of six months and then deleted.

Links to social networks

Our website contains links to our profiles on social networks such as Facebook, Instagram and LinkedIn.

These are simple links only. When you access our website, no personal data is transmitted to the providers of these social networks solely as a result of these links.

Only when you click on such a link will you be redirected to the respective platform. In this case, personal data such as your IP address may be processed by the respective provider.

We have no influence over the processing of personal data by these providers. Further information can be found in the privacy policies of the respective providers.

Services for storing information on your terminal device or accessing information already stored on your terminal device (cookies, plugins, JavaScript, etc.)

On our websites we use services and technologies to store information on your terminal device and/or to access information already stored on your terminal device. These technologies may include cookies. Cookies are text files and/or entries in the browser's database that may assign a characteristic identifier to the browser being used.

Cookies and other services may contain data enabling the device used to be recognised. In some cases, cookies and other technologies contain only information relating to settings that cannot be linked to an individual.

You may reject or technically prevent certain services where your browser allows this. We point out, however, that in this case you may not be able to use all functions of our website to their full extent.

The help function in the menu of most web browsers explains how to prevent new cookies from being accepted, how to receive notifications when a new cookie is received and how to delete cookies. Browsers can also be configured so that specific technologies such as JavaScript are not executed.

With regard to their function, services can generally be divided into:

• Technical services: these are required to navigate the website, use basic functions and ensure website security;
• Performance services: these collect information about how our website is used and are intended to improve the website;
• Advertising, targeting and sharing services / social media plugins: these may be used to provide targeted advertising, third-party offers or improved interaction with other services.

General services on the website

We currently use the following services described above. Where processing is based on consent pursuant to Art. 6 (1) lit. a EU GDPR, we also specify how consent is obtained.

Consent Management Tool / Consent Management Provider / Cookie Banner

We use services to request and manage consent for individual services.

Service: Joomla Cookie Consent

This website uses Joomla Cookie Consent, a consent management tool. The service requests consent so that certain services can be used on the website. These consents are obtained and documented. The provider is Open Source Matters, Inc., PO Box 4668 #88354, New York, NY 10163-4668, USA. The service can be hosted locally.

The service uses a necessary cookie. When you visit our website, the following data may be processed: consent or withdrawal of consent, IP address, browser and device information and the time of the website visit. Consent Management also stores a cookie in order to assign consent or its withdrawal.

Processing takes place in order to obtain legally required consent and, where applicable, within the scope of our legitimate interest in operating our website in a legally compliant and low-risk manner. The legal basis is Art. 6 (1) lit. c and, where applicable, lit. f EU GDPR.

Google and Alphabet services, products and technologies

In this section, we have summarised services offered by Alphabet Inc. and in particular Google. Use of these services may involve transfers of personal data to the USA. Further information can be found in the respective sections below and in the privacy information provided by Google.

Service: YouTube

We use services from YouTube, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. The provider belongs to the Google LLC group, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Processing only takes place if you have given your consent pursuant to Art. 6 (1) lit. a EU GDPR. Additional information can be found in the consent request in the consent management tool.

If consent has been given and you visit a page equipped with a YouTube plugin, a connection to YouTube servers is established. YouTube is informed which of our pages you have visited. If you are logged into your YouTube account, YouTube may assign your browsing behaviour directly to your personal profile.

Service: Google reCAPTCHA

We use Google reCAPTCHA on our websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processing only takes place if you have given your consent pursuant to Art. 6 (1) lit. a EU GDPR.

Where consent has been given, reCAPTCHA can be used to determine whether data entered on our websites, for example in a contact form, originates from a human user or an automated program. For this purpose, reCAPTCHA may analyse various characteristics and transmit data to Google.

Service: Google Web Fonts / External Fonts

We use Google Web Fonts on our websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processing only takes place if you have given your consent pursuant to Art. 6 (1) lit. a EU GDPR.

Where consent has been given, Google Web Fonts may be used to provide a consistent display of fonts. In this case your browser may connect to Google's servers and transmit information including your IP address.

Service: Google APIs

Google APIs may be integrated into our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processing only takes place where you have given your consent pursuant to Art. 6 (1) lit. a EU GDPR.

Google APIs may be used to integrate JavaScript libraries and other functionality. In this process, data including your IP address may be transmitted to Google.

Service: Google Static / gstatic

We use Google Static on our website. The provider is Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. gstatic is used to deliver static content such as images, CSS and JavaScript.

Processing only takes place if you have given consent pursuant to Art. 6 (1) lit. a EU GDPR.

Further information can be found at https://policies.google.com/privacy.

Service: Google DoubleClick

We use the online marketing service Google DoubleClick, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

DoubleClick may use cookies in order to display advertising that is relevant to users, improve campaign performance reports and prevent the same advertisements from being shown repeatedly. DoubleClick may use a cookie ID to record which advertisements have been displayed.

Information generated through the use of DoubleClick, including your IP address, may be transmitted to Google servers and stored there. This may also involve transfers to Google LLC servers in the USA.

The legal basis for the use of Google DoubleClick is your consent pursuant to Art. 6 (1) lit. a EU GDPR, which you provide via our consent management tool. You may withdraw this consent at any time with effect for the future by changing the corresponding settings in our cookie banner.

Further information on Google DoubleClick and Google's privacy practices can be found at https://policies.google.com/privacy.

Applicants

You can apply to us in various ways. Regardless of the method used, your applicant data is processed exclusively for the purpose of handling your application. After completion of the selection procedure, applicant data is generally stored for a maximum of six months and then deleted unless you have consented to longer storage, for example in a talent pool.

You may also use a contact or application form on our website. Through this form, you may provide us with information about yourself, contact details, place of residence or postal code, education and qualifications, a request for a callback and, optionally, a message and application documents such as a CV. Data submitted through the form is used exclusively to handle your enquiry or application.

In connection with an application, we may process in particular:

• all data you provide to us during the application process, for example in application documents or interviews;
• where applicable, additional data lawfully obtained during the application process, for example from publicly available professional networks;
• special categories of personal data where you voluntarily provide them to us, for example information relating to disability status, racial or ethnic origin, religious or philosophical beliefs or trade union membership.

The legal basis for processing in connection with the establishment of an employment relationship is § 26 (1) BDSG and Art. 6 (1) lit. b EU GDPR. After completion of the selection procedure, data may be retained for up to six months in order to defend against possible legal claims. This limited retention is based on Art. 6 (1) lit. f EU GDPR.

Service: Application by email

You may apply to us by email. Please send your application documents to This email address is being protected from spambots. You need JavaScript enabled to view it..

We point out that we cannot guarantee the confidentiality of data transmitted by email in every case. Although our mail server supports TLS transport encryption, confidentiality may depend on external mail relay servers over which we have no control. If you have concerns in this regard, please use the postal service.

Service: ChronoForms

For the technical provision of the application form, we use ChronoForms, a form component provided by ChronoEngine, Dmarcos Perez Ramirez, 2713 Franklin Ave, Midland, TX 79701-0000, USA. The software is integrated locally into our website and enables the collection, transmission and technical management of information submitted through the form.

Data submitted through the form may additionally be stored in a technical form log in our website system. This log is used to technically trace submissions, analyse errors and ensure that form submissions are processed correctly. In addition to the information entered in the application form, the IP address as well as the date and time of submission may be processed.

The legal basis for technical provision, security, error analysis and traceability of the form submission is Art. 6 (1) lit. f EU GDPR. Our legitimate interest lies in the secure, functional and reliable provision of the application form.

Data stored in the technical form log is deleted no later than 30 days after storage unless longer retention is required in an individual case. Access to data stored in ChronoForms is restricted to authorised persons. Technical administrators are granted access only where necessary for operation, maintenance or troubleshooting.

To our knowledge, personal data entered through the form is not transferred to ChronoEngine.

Further information about the provider can be found at https://www.chronoengine.com/ and in the ChronoEngine privacy policy at https://chronoengine.tech/privacy.

Business partners and persons seeking information

You may contact us by telephone, fax or email. Please also refer to the section "Data security: Website, Email, Fax".

When you contact us by telephone, information relating to caller identification may be processed. If your telephone number is not suppressed, we can see the number from which you are calling. The telephone number, date and time of the call may be stored automatically by our telephone system and used, for example, to return your call if requested or if the call was interrupted due to technical problems. This data is deleted after no more than four weeks. We do not record telephone calls.

When you contact us by email or fax, your communication is stored and used for the purpose communicated by you, for example to process a product enquiry or order.

If you order products from us or request information material, we may create a customer account containing:

• the name and contact details of the company for which you place the order;
• your first and last name as contact person;
• the date of orders and deliveries;
• the products ordered;
• the current order status.

This data is necessary to process your order and/or enquiry and is used only for this purpose. The legal basis is Art. 6 (1) lit. b or lit. f EU GDPR. Unless otherwise stated, retention periods are governed by statutory retention obligations.

Service: Google Maps

This website uses Google Maps to display maps and site plans. The service is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Processing only takes place if you have given consent pursuant to Art. 6 (1) lit. a EU GDPR.

Where consent has been given, information may be stored on and read from your terminal device when Google Maps is used in order to process user settings and data for displaying the map.

Service: Font Awesome

We use Font Awesome on our websites. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, MA, USA.

Processing only takes place if you have given consent pursuant to Art. 6 (1) lit. a EU GDPR.

Where consent has been given, Font Awesome may be used to provide a consistent display of fonts. Your browser may connect to Fonticons servers and transmit your IP address. Further information is available at https://fontawesome.com/privacy.

Service: Content Delivery Network Bootstrap

We use a Content Delivery Network (Bootstrap) service provided by NetDNA LLC, Cahuenga Blvd Suite 630, Los Angeles, CA 90068, USA.

Processing only takes place if you have given consent pursuant to Art. 6 (1) lit. a EU GDPR.

Where consent has been given, content may be loaded through a distributed network. Further information should be obtained from the provider's current privacy documentation.

Newsletter Subscription

In addition to the purely informational use of our website, we offer a subscription to our newsletter, through which we inform you about current developments in our company.

If you subscribe to our newsletter, the following data may be collected, stored and processed:

• the page from which the registration was requested (referrer URL);
• the date and time of access;
• the type of web browser used;
• the IP address of the requesting computer;
• the email address;
• the date and time of registration and confirmation.

When sending newsletters, we may evaluate user behaviour. For these evaluations, the data listed above and web beacons may be linked to your email address and an individual ID. Links contained in the newsletter may also contain such an ID. The data is collected in pseudonymised form.

The processing of newsletter data takes place for the purpose of sending the newsletter. As part of registration, you consent to the processing of your personal data pursuant to Art. 6 (1) lit. a EU GDPR. We use a double opt-in procedure.

You may withdraw your consent to receiving the newsletter at any time with effect for the future, for example by clicking the unsubscribe link provided in each newsletter email.

Newsletter distribution with Brevo

Our newsletters are sent using Brevo (formerly Sendinblue), operated by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

Brevo is a service that can be used to organise and analyse newsletter distribution. Data entered by you for the purpose of receiving the newsletter, such as your email address, is stored on Brevo servers within the European Union.

Brevo enables us to analyse newsletter campaigns. When you open an email sent through Brevo, a file contained in the email, known as a web beacon, may establish a connection to Brevo servers. This makes it possible to determine whether a newsletter email has been opened and which links, if any, have been clicked.

Processing is based on your consent pursuant to Art. 6 (1) lit. a EU GDPR. You can withdraw your consent at any time, for example using the unsubscribe link in the newsletter.

We have concluded a data processing agreement with Brevo pursuant to Art. 28 EU GDPR.

Further information can be found in Brevo's privacy policy at https://www.brevo.com/de/legal/privacypolicy/.

Participants in online meetings, conference calls with and without video, online support and webinars

For various business purposes, we invite individuals to online meetings, webinars, online support sessions and conference calls with or without video. Unless you have consented to recording, we do not record online meetings.

Depending on how the service is used, data such as first name, last name, telephone number, email address, password, profile picture, department, IP address, device or hardware information, location information, language settings and operating system may be processed.

Depending on the context, processing is based on Art. 6 (1) lit. b or lit. f EU GDPR.

Service: GoToMeeting

We use GoToMeeting or GoToWebinar to conduct online meetings, webinars, conference calls or video conferences. The service is provided by LogMeIn, Inc., 320 Summer Street, Boston, MA 02210, USA.

LogMeIn acts as a processor for us. Processing is based on a Data Processing Agreement including Standard Contractual Clauses. Further information is available at https://www.logmeininc.com/de/gdpr/gdpr-compliance.

Service: Contact Form

When using contact forms, the data you submit is processed, for example salutation, first and last name, address, company, email address and the time of submission.

The processing of contact form data is carried out for the purpose of handling enquiries and is based on Art. 6 (1) lit. b or lit. f EU GDPR.