Introduction and general information
Thank you for your interest in our website. The protection of your personal data is very important to us. In the following, you will find information on how we handle your data that is collected through your use of our website. Your data will be processed in accordance with the legal regulations on data protection.
Responsible party according to the GDPR
79098 Freiburg i. Br.
Tel.: 0761 7083940
Contact information of the Data Protection Officer
Proliance GmbH / www.datenschutzexperte.de
Data Protection Officer
When contacting the data protection officer, please name the company to which your request relates. Please refrain from enclosing sensitive information, such as a copy of an ID card, with your request.
Definition of terms
This website is hosted by an external service provider (hoster). The hosting of this website takes place in Germany. Personal data collected on this website is stored on the hoster’s servers. This may include IP addresses, contact information, meta and communication data, website access and other data generated via a website.
We collect the listed data to be able to guarantee a proper connection of the website and a technically error-free provision of our services. The processing of this data is necessary to make the website available to you. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers’ data and not to pass it on to third parties.
When you visit our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:
- Date and time of the request
- Name of the requested file
- Page from which the file was requested
- Access status
- Web browser and operating system used
- (Complete) IP address of the requesting computer
- Amount of data transferred
We collect the listed data to be able to guarantee a proper connection of the website and a technically error-free provision of our services. The processing of this data is necessary to provide you with the website. The log files are used to evaluate system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.
For reasons of technical security, to defend against attempted attacks on our web server, this data is stored by us for a short period of time. After a maximum of 60 days, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a relationship to the individual user.
In addition, the data may be processed anonymously for statistical purposes. This data is never stored together with other personal data of the user, compared with other data or passed on to third parties.
Our website uses so-called “cookies”. Cookies are small text files that are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your terminal device until you delete them yourself or until they are automatically deleted by your web browser.
Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or language settings). Other cookies are used to evaluate user behavior or to display advertising.
The processing of data by necessary cookies is based on a legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR in the technically error-free provision of our services. For details on the processing purposes and legitimate interests, please refer to the explanations on the specific data processing.
You can set your browser to allow you to
- be informed about the setting of cookies,
- allow cookies only in individual cases,
- exclude the acceptance of cookies for certain cases or in general,
- activate the automatic deletion of cookies when closing the browser.
Cookie settings can be managed under the following links for the respective browsers:
You can also manage cookies of many companies and functions used for advertising individually. To do this, use the corresponding user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.
Most browsers also offer a so-called “do-not-track function”. When this feature is enabled, the browser tells ad networks, websites, and applications that you do not want to be tracked for behavioral advertising and the like.
For information and instructions on how to edit this feature, depending on your browser provider, see the links below:
Please note that if you disable cookies, the functionality of our website may be limited.
Changing cookie settings
You can revoke or change your cookie settings at any time. To do this, call up the cookie settings again. You can find this at any time at the bottom right of the website.
Processings on our website
Contact form and contact by e-mail
If you send us inquiries via the contact form, your information from the inquiry form, including the personal data you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. The contact form is aimed exclusively at commercially interested parties, so in addition to the e-mail address, the specification of your first and last name, your job title / role and the company name are mandatory fields, the specification of your telephone number is voluntary.
If you send us inquiries by e-mail, the information you provide in your e-mail, including the personal data you enter there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. Under no circumstances will we pass on this data without your consent. The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) f GDPR and, if applicable, Art. 6 (1) b GDPR, if your request is aimed at concluding a contract.
Your data will be deleted after final processing of your request unless there are legal obligations to retain data. You can object to the processing of your personal data at any time in the case of Art. 6 para. 1 lit. f GDPR.
If you apply to us via our contact form or by e-mail, we collect personal data. This includes your contact data (such as first and last name, telephone number and e-mail address of the user) as well as other data provided by you regarding your career (e.g. resume, qualifications, degrees and work experience) and your person (e.g. cover letter, personal interests). This may also include special categories of personal data (e.g. information on a severe disability).
As a rule, your personal data is collected directly from you as part of the application process and encrypted during electronic transmission. The primary legal basis for this is Section 26 (1) BDSG. In addition, consent pursuant to Art. 6 Para. 1 lit. a GDPR in conjunction with § 26 Para. 2 BDSG can be used as a data protection permission provision. If the processing of your data is based on consent, you have the right to revoke this consent at any time with effect for the future.
Within our company, only those persons and departments (e.g. Human Resources) have access to your personal data who absolutely need it to carry out the application process or to fulfill our legal obligations. If necessary, your applications will be forwarded to the relevant responsible persons for examination. Under no circumstances will your personal data be passed on to third parties without authorization.
Your data relating to an application for a specific job posting will be stored and processed by us during the ongoing application process. After completion of the application process (e.g. in the form of an acceptance or rejection), the application process including all personal data is deleted from the system no later than six months after completion of the application process. You can revoke your consent at any time with effect for the future. For this purpose, an informal e-mail to the contact data of the responsible person listed above is sufficient. In the event of an acceptance, your application documents will be transferred to the personnel file.
You have the option of registering for certain services on our website and thus creating a user profile. This offer is intended exclusively for commercial customers. During registration and setup, we collect and use the following personal data:
- First name, last name
- Job title / role
- E-mail address
- Date and time of registration
In addition, voluntary information can be provided (e.g. telephone number, etc.). Mandatory information provided for the purpose of registration is marked with an asterisk in the input mask as a required field. With your user account, you are given the opportunity to use further parts of our website and to log in for the offers you have purchased. The legal basis for data processing is Art. 6 (1) a GDPR in the case of consent or Art. 6 (1) b GDPR if processing is necessary to provide the requested services. Your data will be deleted as soon as the user account on our website is deleted and insofar as no legal retention obligations exist. After logging in, you can usually change and/or delete your user account, including the data you provided, directly in your user account or by sending a message to the responsible person mentioned above.
Google Tag Manager
This website uses the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Through this service, website tags can be managed via an interface. The Google Tag Manager only implements tags. This means that no cookies are used and only the user’s IP address is transmitted to Google to establish the connection. The Google Tag Manager triggers other tags, which in turn may collect data. However, the Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.
We use Google Tag Manager based on your consent pursuant to Art. 6 (1) lit. a GDPR.
Since the IP address is transferred to Google in the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard contract clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
On our website, we integrate videos from “YouTube”, a social media platform of Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as “Google”). The legal basis for the processing of your personal data is your consent granted for this purpose pursuant to Art. 6 (1) lit. a GDPR.
The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. No cookies are set, but further personal data may be collected. If the playback of embedded YouTube videos is started by your consent, your IP address is sent to the servers in the USA. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. Google stores this data as usage profiles and uses it for purposes of advertising, market research and/or needs-based design of its websites.
Since personal data is transferred to the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, Google uses standard contract clauses in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even by this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
Further information on data protection and data use by Google can be found on the following Google website: https://policies.google.com/privacy?hl=de&gl=de
Our website uses Google Analytics, an internet analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses so-called “cookies”.
Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, and compiling reports on website activity. Google will also use this information to provide the website operator with other services related to the use of the website and the Internet. The IP address sent by your browser as part of Google Analytics is not combined with other data from Google. The processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR based on the consent you have given.
We use Google Analytics only with activated IP anonymization. This means that your IP address is only processed by Google in a shortened form.
We have concluded a data processing agreement with the service provider, in which we oblige him to protect our customers’ data and not to pass it on to third parties.
Since personal data is transferred to the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 Para. 2 lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. Deletion of user-level and event-level data linked to cookies, user identifiers (e.g., user ID), and advertising IDs (e.g., DoubleClick cookies, Android advertising ID, IDFA [Apple identifier for advertisers]) occurs no later than 14 months after their collection.
You can prevent cookies from being saved by adjusting the settings of your browser software accordingly. However, we would like to point out that in this case you may not be able to use all functions of this website without restrictions. You can also prevent Google from collecting the data generated by the cookie and from analyzing your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plugin available at: https://tools.google.com/dlpage/gaoptout?hl=de
On our website we implemented a service from IONOS. The service IONOS WebAnalytics is offered by the company 1&1 IONOS SE, Elgendorfer Straße 57, D-56410 Montabaur. We have concluded a data processing agreement with IONOS pursuant to Art. 28 GDPR. IONOS WebAnalytics is an analysis tool that collects data from website visitors. No person-related data of website visitors is stored, the following data is collected:
- Referrer (previously visited website)
- Requested web page or file
- Browser type and version
- Operating system used
- Type of device used
- Time of access
- IP address in anonymized form (used only to determine the location of the access)
This data is collected exclusively for statistical evaluation and technical optimization of the website. The data is determined either by a pixel or by a log file, no cookies are set. Your IP is transmitted during the transmission of a page request, anonymized directly after transmission and processed without personal reference. No data is passed on to third parties by IONOS. The collected data will be deleted after 2 months.
The legal basis on which we base the use is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. As website operator, we have a legitimate interest in the statistical analysis of user behavior in order to optimize our website. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time.
Social networks (Facebook, LinkedIn, Twitter, YouTube) are only integrated on our website as links to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. User information will only be transferred to the respective provider after the forwarding. For information on the handling of your personal data when using these websites, please refer to the respective data protection provisions of the providers you use.
Appearances in social media
Im Folgenden finden Sie Informationen zum Umgang mit Ihren Daten, die durch Ihre Nutzung unserer Social Media-Auftritte auf sozialen Netzwerken und Plattformen er-fasst werden. Die Verarbeitung Ihrer Daten erfolgt entsprechend den gesetzlichen Regelungen.
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland, is the data controller for the purposes of the GDPR for the data you provide to us. Hereinafter referred to as Meta/ Facebook.
For this purpose, we have concluded an agreement with Meta/ Facebook pursuant to Art. 26 DSGVO on joint responsibility for the processing of data (Control-ler Addendum). This agreement specifies the data processing operations for which we or Meta/ Facebook are responsible when you visit our Facebook fan page. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
Since a transfer of personal data to the USA is carried out by Meta/ Facebook, further protection mechanisms are required to ensure the data protection level of the GDPR. For this purpose, the provider uses standard data protection clauses in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA.
If you as a visitor to the site would like to exercise your rights (information, correction, deletion, restriction, data portability, complaint to the supervisory authority, objection or revocation), you can contact Meta/ Facebook as well as us.
You can adjust your advertising settings independently in your user account. To do so, click on the following link and log in: https://www.facebook.com/settings?tab=ads or http://www.youronlinechoices.com
Data Protection Officer of Meta/ Facebook
To contact Meta/Facebook’s data protection officer, you can use the online contact form provided by Meta/Facebook under the following link https://www.facebook.com/help/contact/540977946302970.
Data Processing for Statistical Purposes by Means of Page Insights
Meta/Facebook provides so-called page insights for our Facebook fan page: https://www.facebook.com/business/a/page/page-insights. These are aggregated data that provide information about how people interact with our site. Page Insights may be based on personal data collected in connection with a visit to or interaction with our site by individuals and in connection with content provided. Please be aware of what personal data you share with us via Meta/ Facebook. Your data may be processed for market research and advertising purposes even if you are not logged into Meta/ Facebook or do not have a Meta/ Facebook account. For example, user profiles can be created from the usage behavior and resulting interests of the users. The user profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. This data collection takes place via cookies that are stored on your terminal device. Furthermore, data that is independent of the devices used by the users may also be stored in the user profiles; in particular, if the users are members of the respective platforms and logged in to them.
The legal basis for the processing is your consent according to Art. 6 para. 1 lit. a GDPR.
Please note that we have no influence on the data collection and further processing by Meta/Facebook. As a result, we cannot provide any information about the extent to which, where and for how long the data is stored by Meta/Facebook. Furthermore, we cannot make any statements about the extent to which Meta/Facebook complies with existing deletion obligations, which evaluations and links are made with the data on the part of Meta/Facebook and to whom the data is passed on by Meta/Facebook. If you wish to avoid the processing of your personal data by Meta/Facebook, please contact us by other means.
Other Social Media-Provider
If your personal data is processed by one of the providers listed below, this provider is the data controller within the meaning of the GDPR. For the assertion of your data subject rights, we point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. Should you still require assistance, please feel free to contact us at any time.
We have online presences on the social media platforms of the following providers:
- Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
- YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
- LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Data Protection Officer
We have online presences on the social media platforms of the following providers:
- Twitter Inc.:
- LinkedIn Ireland Unlimited Company:
- YouTube: To contact YouTube’s Data Protection Officer, please contact Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.
General information on social media platforms
Our Data Protection Officer
General data processing on Social Media
Data processing for market research and advertising
As a rule, personal data is processed on the company website for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognize you when you visit a website. The data collected can be used to create usage profiles. These are used to display advertisements within and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the usage profiles regardless of the devices you use. This is regularly the case if you are a member of the respective platforms and logged in to them.
Data processing upon contact
We ourselves collect personal data when you contact us, for example, via a contact form or a messenger service such as Meta/Facebook Messenger. Which data is collected depends on the information you provide and the contact data you have provided or released. These are stored by us for the purpose of processing the request and in case of follow-up questions. Under no circumstances will we pass on the data to third parties without your consent.
The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR and, if applicable, Art. 6 (1) lit. b GDPR if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, if there are no legal obligations to retain data. We assume that processing is complete when the circumstances indicate that the matter in question has been conclusively clarified.
Data processing for contract management
If your contact via a social network or other platform aims at the conclusion of a contract for the delivery of goods or the provision of services with us, we process your data for the performance of the contract or for the implementation of pre-contractual measures or for the provision of the requested services. The legal basis for the processing of your data in this case is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it is no longer required for the execution of the contract or if it is determined that the pre-contractual measures do not lead to the conclusion of a contract corresponding to the purpose of the contact. Please note, however, that it may be necessary to store personal data of our contractual partners even after the conclusion of the contract to comply with contractual or legal obligations.
Data processing due to consent
If you are asked by the respective providers of the platforms for consent to processing for a specific purpose, the legal basis of the processing is Art. 6 (1) lit. a., Art. 7 GDPR. Consent given can be revoked at any time with effect for the future.
Data transfer and recipients
When visiting and using the platforms listed above, a transfer of personal data to the USA or other third countries outside the EU may occur, which is why further protection mechanisms are required in these cases to ensure the level of data protection of the GDPR. For more information on whether and which suitable guarantees the providers can demonstrate for this, please see the list below.
- Opt-out: https://twitter.com/personalization
- Privacy Pollicy: https://policies.google.com/privacy?hl=de&gl=de
- Opt-out: https://adssettings.google.com/authenticated
- Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Data disclosure and recipients
A transfer of your personal data to third parties does not take place, unless
- if we have explicitly referred to this in the description of the respective data processing,
- if you have given your express consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR,
- the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 (1) sentence 1 lit. f GDPR and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data,
- if a legal obligation exists for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c GDPR, and
- as far as this is necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b GDPR.
In addition, we use external service providers for the processing of our services, which we have carefully selected, commissioned in writing and with whom we have concluded order processing contracts in accordance with Art. 28 GDPR, if necessary. These are bound by our instructions and are regularly monitored by us. These are, among others, service providers for hosting, sending e-mails, and maintenance and care of our IT systems, etc. The service providers will not disclose this data to third parties.
We take appropriate technical and organizational measures in accordance with Article 32 of the GDPR, considering the state of the art, the costs of implementation and the nature, scope, circumstances and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, in order to ensure a level of protection appropriate to the risk. This website uses SSL encryption for security reasons and to protect the transmission of confidential content.
Duration of personal data storage
The duration of the storage of personal data is measured by the relevant statutory retention periods (e.g. from commercial law and tax law). After expiry of the respective period, the corresponding data is routinely deleted. If data is required for the fulfillment or initiation of a contract or if we have a legitimate interest in continuing to store the data, it will be deleted if it is no longer required for these purposes or if you have exercised your right of revocation or objection.
Data subject rights
In the following, you will find information on which data subject rights the applicable data protection law grants you vis-à-vis the controller about the processing of your personal data:
- The right to request information about your personal data processed by us in accordance with Art. 15 DSGVO. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or opposition, the existence of a right of complaint, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making, including profiling and, if applicable, meaningful information about its details.
- The right to request the correction of inaccurate or incomplete personal data stored by us without undue delay in accordance with Art. 16 GDPR.
- The right to request the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
- The right to request the restriction of the processing of your personal data in accordance with Art. 18 GDPR, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its deletion and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing in accordance with Art. 21 GDPR.
- The right, pursuant to Article 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.
- The right to complain to a supervisory authority pursuant to Art. 77 GDPR. As a rule, you can contact the supervisory authority of the federal state of our registered office stated above or, if applicable, that of your usual place of residence or workplace.
- The right to revoke consent granted in accordance with Art. 7 (3) GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The revocation of consent does not affect the lawfulness of the processing carried out based on the consent until the revocation.
Right of objection
If your personal data is processed by us based on legitimate interests pursuant to Article 6 (1) sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that this is done on grounds relating to your particular situation. Insofar as the objection is directed against the processing of personal data for the purpose of direct marketing, you have a general right of objection without the requirement to specify a particular situation.
If you wish to exercise your right of revocation or objection, an e-mail to the following address is sufficient: firstname.lastname@example.org
The provision of personal data for the decision on the conclusion of a contract, the performance of the contract or for the implementation of pre-contractual measures is voluntary. However, we can only make the decision within the framework of contractual measures if you provide personal data that is required for the conclusion of the contract, the fulfillment of the contract or pre-contractual measures.
Automated decision making
Automated decision making or profiling according to Art. 22 GDPR does not take place.
Subject to change