Privacy

1 Data Controller

1.1 The provider of this website and the data controller responsible for the processing of your personal data under the European General Data Protection Regulation (EU GDPR) and the German Federal Data Protection Act (BDSG) is FOERSTER Holding GmbH, represented by its management.1.2 For contact information, please refer to the respective contact addresses in the legal notice.

1.3 You can contact the Data Protection Officer at: Datenschutzberatung Walliser GbR—Mr. Matthias Walliser (external Data Protection Officer), email: datenschutz.de@foerstergroup.com.

1.4 The term “user” encompasses all prospective customers, customers, and visitors to our online platform. The terms used, such as “user,” are to be understood as gender-neutral.

2 General Information on Data Processing

2.1 We process users’ personal data only in compliance with the relevant data protection regulations. Users’ data is processed only where there is a legal basis for doing so.

This means, in particular, when data processing is necessary or required by law to provide our contractual services and online services, when the user has given consent, or based on our legitimate interests (i.e., an interest in the secure and user-friendly operation of our online offering), particularly when collecting access data. Audience measurement and the use of third-party services requiring consent are carried out exclusively on the basis of your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

2.2 With regard to the processing of personal data based on the General Data Protection Regulation (GDPR), which took effect on May 25, 2018, we note that the legal basis for consent is Art. 6(1)(a) and Art. 7 of the GDPR; the legal basis for processing to fulfill our legal obligations is Art. 6(1)(c) of the GDPR, and the legal basis for processing to safeguard our legitimate interests is Article 6(1)(f) of the GDPR.

2.3 We implement state-of-the-art organizational, contractual, and technical security measures to ensure compliance with data protection laws and to protect the data we process against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons.

3 Processing of Personal Data

3.1 Personal data, such as address and communication data as well as navigation data, is processed—in addition to the processing activities expressly mentioned in this Privacy Policy—to fulfill our contractual obligations, carry out pre-contractual measures, and comply with legal obligations. These services include the provision, execution, maintenance, optimization, and security of our services, support, and user-related services.

3.2 When a user contacts us, the user’s information is stored solely for the purpose of processing the inquiry. After the inquiry has been processed, the collected data is deleted immediately, unless statutory retention periods apply.

4 Collection of Access Data

4.1 Based on our legitimate interests, we collect data regarding every access to the server on which this service is located (so-called server log files). Access data includes the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, a notification of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address, and the requesting provider.

4.2 We use the log data in conjunction with the user’s personal information or for other profiling purposes in accordance with legal provisions. To this end, we link this automatically collected data with other personal data such as name, email address, mailing address, and phone number.

5 Use of Cookies and Similar Technologies

5.1 Cookies are, among other things, small files that are stored on your computer system. Our websites and our partners use so-called “cookies” and similar technologies (e.g., JavaScript, web beacons), which serve to analyze trends, administer the website, track users’ movements on the website, and collect aggregated demographic data about our users.

The cookie remains on your computer system and allows us to recognize your computer system the next time you visit (so-called “persistent cookies”).
We also use cookies that are transferred from our servers or our partners’ servers to your computer system; these are known as “session cookies.” Session cookies are deleted 24 hours after you leave the site.

5.2 What is stored in cookies or similar technologies?
Personal data is also stored in the cookies used by FOERSTER Holding GmbH and its affiliates. The cookies we use can therefore be associated with a specific person or user. You have the right to decide at the outset (via the consent banner) whether to accept or reject cookies. If cookies are active, they are assigned an identification number.

6 Integration of Third-Party Services and Content / Social Plug-ins

6.1 We integrate content or services from third-party providers into our online offering, e.g., videos (hereinafter “Content”). To the extent that information is stored on or readout from your device, or personal data is transmitted to the third-party provider, such integration occurs only after you have given your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG). This always requires that the third-party provider of this content collects the user’s IP address, since without the IP address, the provider would not be able to send the content to the user’s browser. The IP address is therefore necessary for the display of this content. We make every effort to use only content whose respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. These “pixel tags” allow information—such as visitor traffic on the pages of this website—to be analyzed. This pseudonymous information may also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, time of visit, and other details regarding the use of our online services; it may also be linked to such information from other sources.

6.2 Below, we provide information about the services used on our website.

Consent Manager

We use a Consent Manager on our website to obtain, manage, and document your consent to the storage of information on your device and to the use of services requiring consent. The provider is ZWEI14 GmbH, Bürkstraße 35, 78054 Villingen-Schwenningen, Germany (“ZWEI14”).

The legal basis for using the Consent Manager is Section 25(2)(2) of the German Telemedia Act (TDDDG), as the storage of your consent decision is absolutely necessary, as well as Article 6(1)(c) of the General Data Protection Regulation (GDPR) in conjunction with Article 7(1) of the GDPR to fulfill our obligation to provide evidence of consent granted.

The data processed includes your IP address, device and browser information, the time of your decision, and your consent choice. Your selection is stored in the “cookiemanager_selection” cookie for 12 months. After this period, or upon deletion of the cookie, you will be asked to provide your consent again.

The purpose of data processing is the legally compliant collection, storage, and verification of your consents.

Processing takes place on servers in Germany. We have entered into a data processing agreement (DPA) with ZWEI14.

You can change or revoke your selection at any time via the “Cookie Settings” in the footer of our website.

Google Tag Manager

We use the “Google Tag Manager” service on our website to centrally manage website tags and scripts. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager itself does not set any cookies and does not analyze user data. However, when the page loads, your IP address is transmitted to Google. Services integrated via Tag Manager are loaded only after you have given your consent and are described separately in this Privacy Policy.

The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time with future effect.

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than those in the EU. Google is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S.

For more information on Google’s privacy policy, please visit: https://policies.google.com/privacy

Google Analytics

We use the “Google Analytics 4” service on our website to statistically analyze website usage and improve our offerings. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Analytics is your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG. You may revoke your consent at any time with future effect via the “Cookie Settings” in the footer of our website.

The data processed by Google Analytics includes device and browser information, approximate location data (derived from the IP address), pages visited, time spent on the site, interactions with the website, and a pseudonymous user ID. According to Google, IP addresses are neither logged nor stored in Google Analytics 4. The service sets the cookies “_ga” and “_ga_PCRBK610VH,” with a time of storage of up to 13 months.

The purpose of data processing is the statistical analysis of user behavior to optimize our online offering.

The data is automatically deleted in Google Analytics after 14 months.

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than those in the EU. Google is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. We have entered into a Data Processing Agreement (DPA) with Google that ensures personal data is processed only in accordance with our instructions and in compliance with the GDPR.

For more information on Google’s privacy policy, please visit: https://policies.google.com/privacy
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies

Google Fonts

In connection with Google reCAPTCHA (see there) and YouTube (see there), fonts from the “Google Fonts” service are loaded from Google’s servers. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of Google Fonts is your consent pursuant to Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

The data processed by Google Fonts includes your IP address, browser and device information, and the time of the request.

The purpose of data processing is to ensure the optimized and consistent display of fonts on the website.

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than those in the EU. Google is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S.

For more information on Google Fonts’ privacy policy, please visit: https://policies.google.com/privacy

For information on the cookies set, please visit: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking this link: https://policies.google.com/privacy#infochoices

Google reCAPTCHA

We use the “Google reCAPTCHA” service on our website to protect ourselves against spam and automated abuse. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The legal basis for the use of reCAPTCHA is your consent pursuant to Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

The data processed by Google reCAPTCHA includes your IP address, browser information, operating system, cookies set by Google, and user interactions necessary to distinguish humans from bots.

The purpose of data processing is to verify user interactions and protect the website from spam and abuse.

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than those in the EU. We have entered into a Data Processing Agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S.

HubSpot Analytics

We use the “HubSpot Analytics” service on our website to analyze user interactions and website performance. The provider is HubSpot Ireland Limited (“HubSpot”), 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.

The legal basis for the use of HubSpot Analytics is your consent pursuant to Art. 6(1)(a) of the GDPR. You may withdraw your consent at any time with future effect.

The data processed by HubSpot Analytics includes your IP address, device and browser information, geographic location data, the time and duration of your visit, pages viewed, and interactions with the website; the service may set cookies to track user behavior.

HubSpot Analytics may collect and combine data to create user profiles for marketing and analytical purposes.

The purpose of data processing is the statistical analysis of user interactions and the optimization of marketing and sales activities.

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than those in the EU. HubSpot is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. We have entered into a Data Processing Agreement (DPA) with HubSpot, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.

For more information on HubSpot Analytics’ privacy policy, please visit: https://legal.hubspot.com/privacy-policy

HubSpot CMS

We use the “HubSpot CMS” service on our website to manage and publish website content. The provider is HubSpot Ireland Limited (“HubSpot”), 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.

The legal basis for using HubSpot CMS is our legitimate interest pursuant to Art. 6(1)(f) of the GDPR to provide a secure, efficient, and user-friendly website, as well as to analyze and improve our online presence.

The data processed by HubSpot CMS includes your IP address, device and browser information, the time and duration of your visit, the pages you viewed, and information provided via forms.

The purpose of data processing is to manage website content, personalize the user experience, and analyze website performance.

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than those in the EU. HubSpot is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. We have entered into a Data Processing Agreement (DPA) with HubSpot, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.

For more information on HubSpot CMS’s privacy policy, please visit: https://legal.hubspot.com/privacy-policy

For information about the cookies used, please visit: https://legal.hubspot.com/cookie-policy

HubSpot Live Chat

We use the “HubSpot Live Chat” service on our website to provide live chat support and communicate with visitors. The provider is HubSpot Ireland Limited (“HubSpot”), 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.

The legal basis for the use of HubSpot Live Chat is your consent pursuant to Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

The data processed by HubSpot Live Chat includes your IP address, device and browser information, chat logs, the time and duration of your visit, and information about your interaction with the website; the service may also set cookies to enable the chat functionality and track user behavior.

HubSpot may collect and use data from chat interactions to create user profiles for marketing and personalization purposes.

The purpose of data processing is to enable real-time communication with website visitors and to manage and respond to customer inquiries.

It cannot be ruled out that personal data may be transferred to non-EU countries (the U.S.), where data protection standards are lower than in the EU. HubSpot is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. We have entered into a Data Processing Agreement (DPA) with HubSpot, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.

For more information on HubSpot LiveChat’s privacy policy, please visit: https://legal.hubspot.com/privacy-policy

For information on the cookies used, please visit: https://legal.hubspot.com/cookie-policy

LinkedIn Insight Tag

We use the “LinkedIn Insight Tag” service on our website to analyze user behavior and measure the effectiveness of our advertising campaigns. The provider is LinkedIn Ireland Unlimited Company (“LinkedIn”), Wilton Plaza, Wilton Place, Dublin 2, Ireland.

The legal basis for the use of the LinkedIn Insight Tag is your consent pursuant to Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

The data processed by the LinkedIn Insight Tag includes your IP address, device and browser information, page events, and information regarding your interaction with the website; the service also uses cookies.

The LinkedIn Insight Tag collects data that can be used to create user profiles for targeted advertising purposes.

The purpose of data processing is to analyze advertising effectiveness, track conversions, and create anonymous user profiles for targeted marketing.

By default, LinkedIn stores data collected via the LinkedIn Insight Tag for 180 days.

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than those in the EU. LinkedIn is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. We have entered into a Data Processing Agreement (DPA) with LinkedIn, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.

For more information on the privacy policy of LinkedIn Insight Tag, please visit: https://www.linkedin.com/legal/privacy-policy

For information on the cookies used, please visit: https://www.linkedin.com/legal/cookie-policy

Microsoft Clarity

We use the “Microsoft Clarity” service on our website to analyze user interactions and improve the user experience. The provider is Microsoft Ireland Operations Limited (“Microsoft”), One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

The legal basis for the use of Clarity is your consent pursuant to Art. 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

The data processed by Microsoft Clarity includes your IP address, location, time of visit, device information, and information regarding your interaction with the website; cookies are set to collect this data.

The purpose of data processing by Microsoft Clarity is the statistical analysis of user interactions and the creation of anonymized user behavior profiles to optimize the website’s user-friendliness.

By default, Microsoft Clarity stores data for a period of 13 months.

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than those in the EU. We have entered into a Data Processing Agreement (DPA) with Microsoft, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Microsoft is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S.

For more information on Clarity’s privacy policy, please visit: https://privacy.microsoft.com/en-us/privacystatement

YouTube

We embed videos from the “YouTube” platform on our website in enhanced privacy mode (youtube-nocookie.com). The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The videos are not loaded until you have consented to the use of “External Media” via the Consent Manager. Prior to that, only a placeholder is displayed, and no connection is established with Google’s servers.

The legal basis for embedding YouTube is your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time with future effect via the “Cookie Settings” in the footer of our website.

Once you have given your consent, YouTube processes, in particular, your IP address, device and browser information, the page you are viewing, and information regarding your interaction with the video. In doing so, information is stored on your device (e.g., in local storage). In addition, thumbnails are loaded from Google servers (ytimg.com, ggpht.com), and fonts are loaded via Google Fonts. If you are signed in to a Google account, YouTube can associate your usage behavior with your account.

The purpose of data processing is to display video content on our website.

It cannot be ruled out that personal data may be transferred to non-EU countries (such as the U.S.) where data protection standards are lower than those in the EU. Google is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S.

For more information on YouTube’s privacy policy, please visit: https://policies.google.com/privacy

7 Online Meetings, Conference Calls, and Webinars via Microsoft Teams

We would like to inform you below about the processing of personal data in connection with the use of Microsoft Teams. We use Microsoft Teams to conduct conference calls, online meetings, video conferences, webinars, and collaboration via chats and channels (hereinafter collectively referred to as “online meetings”) .

Microsoft Teams is a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. As part of the provision of this service, personal data may also be processed by Microsoft Corporation or other companies within the Microsoft group.

The data controller responsible for data processing directly related to the conduct of online meetings is Institut Dr. FOERSTER GmbH & Co. KG.

Note: If you use Microsoft’s websites or applications independently of an online meeting provided by Institut Dr. FOERSTER GmbH & Co. KG, Microsoft is responsible for the data processing that takes place there. To participate in an online meeting, you can use the Microsoft Teams desktop app, the mobile app, or the browser-based version.

When using Microsoft Teams, various types of personal data are processed. The scope of the processing depends, in particular, on which features you use and what information you provide before or during your participation in an online meeting.

The following personal data may be subject to processing:

User data: First name, last name, email address, phone number (optional), profile picture (optional), department (optional), language settings, and login credentials when using a Microsoft account.

Meeting metadata: Topic, description (optional), date, time, and duration of the meeting, list of participants, times of joining and leaving, meeting ID, IP address, device, hardware, and operating system information, as well as technical diagnostic data.

For recordings (optional): Video and audio recordings, screen shares, presentations, chat messages, and—if enabled—the automatically generated transcript of the meeting.

When dialing in by phone: Information regarding the incoming and outgoing phone numbers, country name, start and end times of the connection, and, if applicable, other technical connection data.

Text, audio, and video data: You may have the option to use chat functions, reactions, whiteboards, polls, or questions during an online meeting. The content you enter is processed to display it within the online meeting and—where necessary—to document it.

To transmit voice and video, data from your microphone and camera is processed for the duration of the meeting. You can disable your camera or mute your microphone at any time.

To participate in an online meeting, you must provide at least your name or a display name of your choice.

We use Microsoft Teams to conduct online meetings. If an online meeting is to be recorded, all participants will be informed of this before the recording begins. Microsoft Teams clearly displays the start of a recording and the start of transcription for all participants.

Transcription and AI-powered Features

The Live Transcription feature can be used to better document meetings. This feature automatically converts spoken words into text. If Microsoft 365 Copilot or comparable AI-powered features are enabled in our Microsoft 365 environment, automated summaries, tasks, decisions, or meeting notes can also be generated based on the meeting content.

These features are used exclusively in accordance with internal company guidelines. Participants are informed of this in advance and asked for their consent. The transcription may not be used without the consent of all participants.

Automated transcriptions and AI-powered summaries are used exclusively for documentation, follow-up, and to support collaboration during meetings. They are not used to monitor employee performance or behavior.

If necessary for documenting meeting outcomes, chat messages or transcripts may also be stored. This is done only to the extent necessary.

In the case of webinars, participants’ questions, answers, and survey results may also be processed for the purposes of conducting, following up on, and documenting the webinar.

To the extent that Microsoft Teams technically allows for it, usage and meeting reports (e.g., meeting metadata or technical connection information) may be stored in accordance with the retention periods specified in our Microsoft 365 environment.

There is no automated decision-making within the meaning of Article 22 of the GDPR.

To the extent that personal data of employees of Institut Dr. Foerster GmbH & Co. KG is processed, this is done on the basis of Section 26 of the BDSG and, in addition, Article 6(1)(b) of the GDPR, to the extent that the processing is necessary for the performance of the employment relationship.

To the extent that personal data is processed in connection with the use of Microsoft Teams and such processing is not directly necessary for the performance of the employment relationship, it is carried out on the basis of Article 6(1)(f) of the GDPR. Our legitimate interest lies in the efficient, secure, and modern conduct of online meetings and digital collaboration.

In all other cases, data processing in connection with the conduct of online meetings is based on Article 6(1)(b) of the GDPR, to the extent that the meetings are conducted within the framework of existing contractual relationships.

If no contractual relationship exists, processing is based on Article 6(1)(f) of the GDPR. Here, too, our legitimate interest lies in the efficient conduct of online meetings and digital collaboration.

Personal data processed in connection with participation in online meetings is generally not disclosed to third parties, unless its determination, identification, or disclosure are expressly intended. However, the content of online meetings regularly serves the purpose of communicating with customers, business partners, prospective customers, or other third parties and is, to that extent, intended for disclosure.

Additional Recipients: Microsoft gains access to the aforementioned data in connection with the provision of the service, to the extent that this is necessary for the provision of the service and is provided for in the data processing agreement concluded with Microsoft.

Microsoft Teams is part of Microsoft 365. The processing of personal data may also take place outside the European Union. To the extent that personal data is transferred to third countries, this is done in accordance with the legal requirements of the GDPR. This includes, in particular, the conclusion of the EU Standard Contractual Clauses as well as—where applicable—Microsoft’s participation in the EU-U.S. Data Privacy Framework or comparable appropriate safeguards pursuant to Art. 44 et seq. of the GDPR.

8 Participation in a Survey

To conduct surveys on our website, we use the services of SurveyMonkey Europe UC, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland. When you voluntarily participate in this survey, SurveyMonkey collects information about the device and application you use to participate in the survey. This includes your IP address, your operating system version, your device type, as well as information about your system, performance, and browser type. If you participate in the survey using a mobile device, SurveyMonkey also collects the device’s UUID. SurveyMonkey also uses third-party tracking services, which in turn use cookies and page tags (also known as web beacons) to collect usage data and user statistics. We have no control over the scope of the data collected by SurveyMonkey. For more information about the cookies used by SurveyMonkey, data protection, and the time of storage, please visit the following link: https://www.surveymonkey.de/mp/legal/privacy-policy/#pp-section-10.

You can prevent the installation of cookies by deleting existing cookies and disabling cookie storage in your web browser settings. Please note that in this case, you may not be able to fully use all features of our website.

We use SurveyMonkey to provide you with surveys. Our legitimate interest in processing the aforementioned data for this purpose is based on Article 6(1)(f) of the GDPR.

SurveyMonkey Europe UC is a subsidiary of SurveyMonkey Inc., headquartered in the United States. It cannot be ruled out that personal data may be transferred to non-EU countries (the U.S.), where data protection standards may be lower than in the EU. SurveyMonkey is certified under the EU-U.S. Data Privacy Framework, which governs the secure processing of EU citizens’ data in the U.S. In addition, SurveyMonkey has entered into EU Standard Contractual Clauses.

For more information on SurveyMonkey’s privacy policy, please visit: https://www.surveymonkey.com/mp/legal/privacy/

9 Use of Data for Marketing Purposes

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.

If you object to processing for direct marketing purposes, your personal data will no longer be processed for these purposes.

A written notice sent to the contact information listed in Section 1 (e.g., email, fax, letter) is sufficient.

10 Secure Data Transmission

We transmit your personal data securely using encryption. This applies to your order as well as to the customer login. We use the SSL (Secure Socket Layer) encryption system for this purpose.

11 Disclaimer for Links and References

We assume no liability whatsoever for the content of, or for compliance with, copyrights and labeling requirements on websites outside our area of responsibility.

12 User Rights and Data Deletion

12.1 Users have the right to receive, free of charge, information about the personal data we have stored about them.

In addition, users have the right to have their personal data corrected, deleted, or to restrict its processing. They may exercise their right to data portability and, in the event of unlawful data processing, file a complaint with the competent supervisory authority:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg P.O. Box 10 29 32, 70025 Stuttgart
Lautenschlagerstraße 20, 70173 Stuttgart
Phone: +49 711 615541–0
Fax: +49 711 615541–15
Email: poststelle@lfdi.bwl.de

Website: www.baden-wuerttemberg.datenschutz.de

Users may revoke their consent at any time without providing a reason and without suffering any disadvantages, generally with future effect. You may submit your objection via email, fax, or letter to the following contact information:

In Laisen 70
72766 Reutlingen
Fax: +49 7121-140-488
Email: datenschutz.de@foerstergroup.com

12.2 The data stored by us will be deleted as soon as it is no longer necessary for its intended purpose and no statutory retention requirements prevent its deletion.

13 Changes to the Privacy Policy

13.1 We reserve the right to amend the Privacy Policy to adapt it to changes in the legal landscape or to modifications to the service and data processing. However, this applies only with regard to statements concerning data processing. If user consent is required or if parts of the Privacy Policy contain provisions governing the contractual relationship with users, changes will be made only with the users’ consent.

13. 2 Users are asked to review the content of this Privacy Policy regularly, as adjustments are expected in the near future in light of the implementation of the EU GDPR, the new BDSG, sector- and state-specific regulations, and CJEU case law.

Privacy Notice for the Applicant Portal

In addition to our general privacy notice, the following applies to our applicant portal:

Thank you for your application and for your interest in our company.

In accordance with Art. 13 of the GDPR, we would like to provide you with some information regarding the use of your data during the application process:

1. Name and contact information of the data controller:

Institut Dr. FOERSTER GmbH & Co. KG
In Laisen 70
72766 Reutlingen
Phone: +49 7121 140-409

2 Contact information of the Data Protection Officer:

walliser consulting gmbh - Mr. Matthias Walliser
Email: datenschutz.de@foerstergroup.com

3 Purposes for which the personal data will be processed: Conducting the application process; deciding whether to enter into an employment contract.

4 Legal basis for processing: Art. 6(1)(a) of the GDPR.

5 Recipients or categories of recipients of the personal data: Human Resources department, as well as the manager of the position for which you have applied, and the executive board. Personal data will not be transferred to third parties, with the exception of our service providers in the context of data processing on our behalf.

6 There is no intention to transfer the personal data to a third country or an international organization. Exceptions may arise in the case of assignments to third countries.

7 Duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration: The data will be deleted 6 months after the conclusion of the application process. If an employment contract is concluded, we will inform you separately about the use of the data in the employment relationship.

8 The provision of personal data is not required by law or contract. However, the provision of personal data is necessary for the conclusion of an employment contract. You are not obligated to provide the personal data. Failure to provide such data would mean that we cannot consider your application in the recruitment process.

9 There is no automated decision-making.

10 You have the right to obtain information from the data controller regarding the personal data concerning you, as well as the right to rectification, erasure, or restriction of processing. You have—provided the conditions are met—the right to object to the processing. We also draw your attention to your right to data portability. This means that you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another data controller without hindrance from us.

11 You have the right to lodge a complaint with the data protection authority. The competent supervisory authority for data protection is:

The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
P.O. Box 10 29 32, 70025 Stuttgart
Lautenschlagerstraße 20, 70173 Stuttgart
Tel.: +49 711 615541–0
Fax: +49 711 615541–15
Email: poststelle@lfdi.bwl.de
Website: www.baden-wuerttemberg.datenschutz.de