+49 (0) 431 23 71 81 00

Jobs

Privacy Policy

Subject

In the following, we would like to inform you about which of your personal data we process when you use our offers and the processes described below.
Personal data (hereinafter referred to as “data”) is all information that can be related to you personally, e.g. your name, your e-mail address and your use of our offers.

Controller

The “controller“ within the meaning of the General Data Protection Regulation (GDPR) (responsible person) is HASYTEC Holding GmbH, Liebigstraße 17, 24145 Kiel, info@hasytec.com.
You can contact our data protection officer by e-mail at info@hasytec.com or by post to our address, with the addition “the Data Protection Officer”.

Browser data

When you visit our website, the web-server, on which our website is hosted, automatically collects the following data which is transmitted by your browser:

  • IP address of your device
  • Date and time of the request
  • Content of the request (specific page)
  • Access status and transferred data volume
  • Product and version information of your browser
  • Operating system of your device
  • The website from which our website was accessed

This data is necessary for us to display our website, and ensure the stability and security of our website. The recipient in this context is our server host.
The IP address of your device is only stored for the time you use the website and is then immediately deleted or anonymised.

The legal basis is Art. 6(1), subparagraph 1(f) GDPR, whereby our legitimate interests arise from the aforementioned purposes.

Functional Cookies

We use cookies to facilitate your use of our website.

Cookies are small text files that are sent to your browser by our web server when you visit our website and are stored on your computer for later retrieval. Cookies enable us to identify your internet browser.
We use cookies to access your preferences, enter your personal data into the input mask in future interactions with our website, or validate your authorization.
Session cookies are automatically deleted when you close the browser. Other cookies are automatically deleted after a preset period, which may vary depending on the cookie. You can find the exact storage period in your browser settings.
You can configure your browser settings according to your requirements, for example, you may refuse to accept third-party cookies or all cookies. Please note that you may not be able to use all of the functions of this website if you do so.
You may delete the cookies in the security settings of your browser at any time.

The legal basis is Art. 6(1), subparagraph 1(f) GDPR, whereby our legitimate interests arise from the aforementioned purposes.

Your Enquiry

We provide various methods for contacting us, e.g. our address, our e-mail address, our telephone number, social media and our contact form.
When you contact us, we use the information which you provide, such as your e-mail address, your name and the content of your enquiry, in order to process your request.
During the communication, we may also use Messenger. You are entitled to use our other means of communication at any time. The Messenger provider cannot access the message content If the end-to-end encryption is used. However, the Messenger service provider may have access to the information that a communication was made, and which device was used. This information is processed by the Messenger provider, the privacy policy of the Messenger provider applies.
We delete the data that is collected in this process when it is no longer necessary, or we restrict processing if there are legal storage obligations to do so.

The legal basis is Art. 6(1), subparagraph 1(b) GDPR.

Applications

We publish job advertisements for recruitment purposes.
To process your application, we need certain data from you.
In addition to your name and contact details, we also need and process your other applicant data, e.g. your application letter, CV, certificates or interview notes.
We delete the data collected during the application process when the data is no longer needed for the purpose of the application. This is the case after a maximum of six months subsequent to the completion of the application process if the applicant has not been appointed. This does not apply if legal regulations do not permit deletion, if the data is required for the provision of evidence, or if you have expressively agreed to a longer storage period.

If we request your consent, e.g. to store your data for a longer period of time, the legal basis is Art. 6(1), subparagraph 1(a) GDPR, § 26(2) BDSG (German Data Protection Act). Otherwise, the legal basis is Art. 6(1), subparagraph 1(b) GDPR, § 26 BDSG.

Business Relationship

We require personal data for the conclusion and execution of contracts for the services offered either by us or by you.
Within the context of initiation or implementation of the contract, we require your personal data for the establishment, implementation and termination of the contractual relationship and fulfilment of the associated contractual obligations. We process your data in order to fulfil the contract with you, as well as to comply with existing legal requirements, e.g. commercial or tax law. This may include the transfer of data to subcontractors, payment service providers or authorities.
According to commercial and tax law requirements, we are obliged to store the contract data for ten years. However, we restrict processing after two years, i.e. your data is only be used in order to comply with legal obligations.

The legal basis is Art. 6(1), subparagraph 1(b) GDPR.

Credit assessment

In individual cases, we reserve the right to obtain credit information from credit agencies prior to the conclusion of a contract if we are obliged to make significant advance payments. This is to protect against payment defaults.
The data communicated by the credit agency is deleted after the decision regarding the conclusion of the respective contract.

The legal basis is Art. 6(1), subparagraph 1(f) GDPR, whereby our legitimate interests arise from the aforementioned purposes.

Advertisements to existing customers

If you become a customer, we may use your e-mail address to offer you advertisements for similar goods or services.
You can object to this advertising at any time, in particular by informing us via the contact details given in the Legal Notice. If we do not send you any advertisements for a period of two years, we will bar your e-mail address from receiving advertising. The commercial and tax law provisions relating to your purchase from us apply to the storage of your e-mail address accordingly.

The legal basis is Art. 6(1), subparagraph 1(f) GDPR in conjunction with § 7(3) UWG (German Act Against Unfair Competition), whereby our legitimate interests arise from the aforementioned purposes.

Web Conferences

Web conferences include holding of online meetings, video conferences, screen sharing or webinars. We use service providers to implement these. For this purpose, your registration and contact data as well as the communication data which is collected during the conference will be processed.
The service provider may process usage and metadata for purposes of optimising its services. The purpose and scope of the collection and use of your data, as well as your related rights and the setting options for protection of your privacy by the third-party provider can be found in the privacy statements of the respective provider.

Specifically, we use the following service providers:

If we request your consent to use the services, the legal basis is Art. 6(1), subparagraph 1(a) GDPR. Otherwise, the legal basis is Art. 6(1), subparagraph 1(b) GDPR.

Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or they are permanently archived on your device (permanent cookies). Session cookies are automatically deleted once you terminate your visit. Permanent cookies remain archived on your device until you actively delete them, or they are automatically eradicated by your web browser.

Cookies can be issued by us (first-party cookies) or by third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services of third-party companies into websites (e.g., cookies for handling payment services).

Cookies have a variety of functions. Many cookies are technically essential since certain website functions would not work in the absence of these cookies (e.g., the shopping cart function or the display of videos). Other cookies may be used to analyze user behavior or for promotional purposes.

Cookies, which are required for the performance of electronic communication transactions, for the provision of certain functions you want to use (e.g., for the shopping cart function) or those that are necessary for the optimization (required cookies) of the website (e.g., cookies that provide measurable insights into the web audience), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a different legal basis is cited. The operator of the website has a legitimate interest in the storage of required cookies to ensure the technically error-free and optimized provision of the operator’s services. If your consent to the storage of the cookies and similar recognition technologies has been requested, the processing occurs exclusively on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be notified any time cookies are placed and to permit the acceptance of cookies only in specific cases. You may also exclude the acceptance of cookies in certain cases or in general or activate the delete-function for the automatic eradication of cookies when the browser closes. If cookies are deactivated, the functions of this website may be limited.

Which cookies and services are used on this website can be found in this privacy policy.

Consent with Borlabs Cookie

Our website uses the Borlabs consent technology to obtain your consent to the storage of certain cookies in your browser or for the use of certain technologies and for their data privacy protection compliant documentation. The provider of this technology is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany (hereinafter referred to as Borlabs).

Whenever you visit our website, a Borlabs cookie will be stored in your browser, which archives any declarations or revocations of consent you have entered. These data are not shared with the provider of the Borlabs technology.

The recorded data shall remain archived until you ask us to eradicate them, delete the Borlabs cookie on your own or the purpose of storing the data no longer exists. This shall be without prejudice to any retention obligations mandated by law. To review the details of Borlabs’ data processing policies, please visit https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

We use the Borlabs cookie consent technology to obtain the declarations of consent mandated by law for the use of cookies. The legal basis for the use of such cookies is Art. 6(1)(c) GDPR.

Gravatar

We have integrated Gravatar on this website. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA (hereinafter Gravatar).

Gravatar is a tool that lets you provide personal images (avatars) to users of our website. The avatars serve as visual representations of the users and are displayed wherever a user interacts with the platform (e.g., in forums or chats). When a user interacts with the platform, their avatar is displayed based on the choices associated with their email address. This adds a personal touch to the users’ online presence and simplifies the identification process, as the selected image is associated with the users when they are active online.

When commenting or interacting on our website with Gravatar enabled, the hash of the email address of the user using Gravatar (used as an ID) is processed by Gravatar.

The use of Gravatar is based on Art. 6 (1)(f) GDPR. The website operator has a legitimate interest in an appealing presentation of its forums. Insofar as a corresponding consent was requested, the processing is carried out exclusively on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. This consent can be revoked at any time.

For further details, please refer to the provider’s privacy policy: https://automattic.com/privacy/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/4709.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

Analysis tools and advertising

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any independent analyses. It only manages and runs the tools integrated via it. However, the Google Tag Manager does collect your IP address, which may also be transferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the quick and uncomplicated integration and administration of various tools on his website. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior patterns of website visitors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized operating system and the user’s origin. This data is assigned to the respective end device of the user. An assignment to a user-ID does not take place.

Furthermore, Google Analytics allows us to record your mouse and scroll movements and clicks, among other things. Google Analytics uses various modeling approaches to augment the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that make the recognition of the user for the purpose of analyzing the user behavior patterns (e.g., cookies or device fingerprinting). The website use information recorded by Google is, as a rule transferred to a Google server in the United States, where it is stored.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

IP anonymization

Google Analytics IP anonymization is active. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. On behalf of the operator of this website, Google shall use this information to analyze your use of this website to generate reports on website activities and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.

Browser plug-in

You can prevent the recording and processing of your data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data processing

We have executed a contract data processing agreement with Google and are implementing the stringent provisions of the German data protection agencies to the fullest when using Google Analytics.

WP Statistics

This website uses the WP Statistics analysis tool to evaluate visitor accesses statistically. The provider is Veronalabs, Tatari 64, 10134, Tallinn, Estonia (https://veronalabs.com).

WP Statistics can be used to analyze the use of our website. In doing so, WP Statistics records, among other things, log files (IP address, referrer, browser used, origin of the user, search engine used) and actions that the website visitors have taken on the site (e.g. clicks and views).

The data collected with WP Statistics is stored exclusively on our own server.

The use of this analysis tool is based on Art. 6(1)(f) GDPR. We have a legitimate interest in the anonymized analysis of user behavior in order to optimize both our websites and our advertising. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

IP anonymization

We use WP Statistics with anonymized IP. Your IP address is shortened so that it can no longer be directly assigned to you.

The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g., location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

Plug-ins and Tools

YouTube with expanded data protection integration

This website integrates videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of these websites on which YouTube is integrated, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in extended data protection mode. According to YouTube, videos that are played in extended data protection mode are not used to personalize browsing on YouTube. Ads that are played in extended data protection mode are also not personalized. No cookies are set in extended data protection mode. Instead, so-called local storage elements are stored in the user’s browser, which contain personal data similar to cookies and can be used for recognition. Details on the extended data protection mode can be found here: https://support.google.com/youtube/answer/171780.

After activating a YouTube video, further data processing operations may be triggered over which we have no influence.

The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6(1)(f) GDPR, this is a legitimate interest. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

For more information on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Fonts (local embedding)

This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connection to Google’s servers will not be established in conjunction with this application.

For more information on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Google Maps

This website uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. With the means of this service, we can integrate map material on our website.

To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer. In case Google Maps has been activated, Google has the option to use Google Fonts for the purpose of the uniform depiction of fonts. When you access Google Maps, your browser will load the required web fonts into your browser cache, to correctly display text and fonts.

We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. This constitutes a legitimate interest as defined in Art. 6(1)(f) GDPR. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. This consent can be revoked at any time.

Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the US, which is intended to ensure compliance with European data protection standards for data processing in the US. Every company certified under the DPF is obliged to comply with these data protection standards. For more information, please contact the provider under the following link: https://www.dataprivacyframework.gov/participant/5780.

Service provider

We have concluded corresponding contracts with service providers who cooperate with us for processing in accordance with Art. 28 GPDR.

If we utilise service providers in so-called third countries outside the European Union or the European Economic Area, on the basis of special guarantees such as contractual obligations, your data will only be processed in third countries with a level of data protection which is approved according to the standard data protection clauses of the EU Commission.

We will be glad to provide you with more detailed information on request.

Presentations on social media

We make presentations on social media to communicate with our customers, interested parties and users and inform them about our services. In general, cookies are stored on the users’ computers. Cookies are small text files which are stored on the hard drive, from which the site which sets the cookie (in this case the social network) can obtain certain information.

Cookies enable the creation of statistics on the use of a presentation on the social network. For this reason, we have concluded an agreement on the joint control of the processing of personal data. The processing may take place regardless of whether you have a profile on the social network and are logged in to it during your visit. In addition, user data is also regularly used for advertising purposes by creating user profiles (especially of registered users) for usage behaviour. User data is also used to place suitable advertisements. The social network can also associate the visit to our presentation with your profile. In relation to our posts or visits to our presentation, we can view statistics (esp. demographic and geographic) about usage in anonymized form. If necessary, the social network offers you a tool or setting options with which you can control the use of these procedures.

The legal basis for the operation of our presence on social media is Art. 6(1), subparagraph 1(f) GDPR. Our legitimate interest is the comprehensive and optimised information of users. We wish like to point out that only the relevant social network has access to the full data and therefore any demand for information should be made directly to the social network.

Joint Controller agreement:

The social network may provide us with information about the behaviour of visitors to our presentation, but only in the form of statistics. The insights gained help us to improve our offers and make them more interesting to you as a visitor. We have entered into a joint controller agreement with the social network for this purpose, in connection with the collection of data from our visitors.

In detail, we have concluded an agreement with the following social networks:

Information, including the nature, scope and purpose of processing and exercise of your rights can be found in the information provided.

Your rights

You have the following rights with respect to your data:

  • Right to information
  • Right of correction or deletion
  • Right to limit processing
  • Right to object to processing
  • Right to data transferability
  • Right to complain to a data protection supervisory authority

If you have granted us permission to process your data, you may revoke this permission at any time with effect for the future.

You can object to direct mail at any time. If your particular circumstances require, you can also object to processing at any time on the basis of Art. 6(1), subparagraph 1(f) GDPR.

Download

Download