When you visit our websites, our web server temporarily evaluates so-called usage data for statistical purposes, to improve the quality of our websites. This data consists of:

• The location and IP address of the contents requested
• The date and time of the visit
• The amount of data transmitted
• The access status (contents transferred, contents not found)
• The description of the web browser and operating system used
• The referral link, which indicates from which page you came to our website
• The IP address of the computer making the inquiry, which is shortened within 24 hours, so that a personal reference can no longer be established.

The aforementioned log data is only analysed in anonymised form.

The legal basis for the processing of usage data is Art. 6 para. 1 sentence 1 lit. f GDPR. The processing is carried out in the authorised interest of providing the contents of the website and ensuring a device- and browser-optimised display.

In order to protect your data from unwanted access as securely as possible, we take various technical and organisational measures. We use encryption technology on our websites. Your information is transferred from your computer to our server and vice versa via the internet using TLS encryption. You can usually recognise this by the closed padlock symbol in your browser's status bar and the address bar beginning with https://.

We use cookies on our websites that are necessary for the use of our websites.

Cookies are small text files that can be saved and read on your device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond an individual session.

We do not use these essential cookies for analysis, tracking or advertising purposes.

In some cases, these cookies only contain information on certain settings and are not personally identifiable. They may also be necessary to enable user guidance, safety and implementation of the website.

We use these cookies on the basis of our authorised interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR.

You can set your browser to notify you when cookies are used. You can also delete them at any time via the relevant browser settings and prevent new cookies from being set. Please note this may result in our websites not displaying properly and some features becoming unavailable.

We use a consent management platform (consent or cookie banner) on our websites. The processing in connection with the use of the consent management platform and the logging of the settings you have made is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, in our legitimate interest to display our content in accordance with your preferences and to be able to prove your consent(s). The settings you have made, the consents you have given and parts of your usage data are stored in the cookie. This ensures that it remains intact for subsequent website requests and that your consent can still be traced. Further information can be found under the heading “Required cookies”.

The provider of the consent management platform acts as a strictly bound service provider (processor) on our behalf. A data processing contract in accordance with Art. 28 GDPR has been agreed between the parties.

We collect anonymised visitor statistics on our websites. For this purpose, the log data of the web server and the shortened IP address are analysed. It is not possible to draw conclusions about any individual from this data.

We use the web analysis tool “Google Analytics” to tailor our websites to your needs. Google Analytics creates user profiles on the basis of pseudonyms. To do this, permanent cookies are stored on your device and read by us. With this service, we can recognise and count returning visitors.

As part of the Google Analytics service, Google Ireland Limited supports us as a data processor in accordance with Art. 28 GDPR. Data processing may also be carried out by Google outside the EU or the EEA (in particular in the USA). With regard to Google, an adequate level of data protection is warranted on the basis of the adequacy decision (EU-U.S. Data Privacy Framework). Google also undertakes to conclude standard contractual clauses with other subcontractors.

Data processing is carried out on the basis of your consent, provided that you have given your consent via our banner. You can revoke your consent at any time. Please follow this link and make the appropriate settings via our banner.

We use cross-device tracking technologies so that targeted advertising can be displayed to you on other websites based on your visit to our websites. This also allows us to determine how effective our advertising measures have been.

Data processing is carried out on the basis of your consent, provided that you have given your consent via our banner. Your consent is voluntary and can be revoked at any time.

How does tracking work?

When you visit our websites, it is possible that the third-party providers (listed below) may retrieve recognition features for your browser or your end device (e.g. a so-called browser fingerprint), analyse your IP address, save or read recognition features on your end device (e.g. cookies) or gain access to individual tracking pixels.

The individual characteristics can be used by third-party providers to recognise your device on other websites. We may commission third-party providers to place advertisements based on our website visits.

What does cross-device tracking mean?

If you log in to the third-party provider with your own user data, the respective recognition features of different browsers and end devices can be linked with each other. If, for example, the third-party provider has created a separate feature for the laptop, desktop PC and smartphone or tablet you use, these individual features can be linked to each other as soon as you use a third-party service with your login details. This enables the third-party provider to target our advertising campaigns across different devices.

Which third-party providers do we use in this context?

We have listed below the third-party providers with whom we cooperate for advertising purposes. If the data in this context is processed outside the EU or the EEA (in particular in the USA), we provide information on the level of data protection in the table below.

You can get in touch with us using our contact form. To use our contact form, we first need the data marked as mandatory fields.

We use this data on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR to answer your request.

In addition, you may decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not required for establishing contacts. We process your voluntarily-provided information on the basis of your consent.

Your data will only be processed to enable us to respond to your request. We will delete your data if it is no longer required and there are no legal obligations to retain it.

If your data transmitted via the contact form is processed on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, you can object to the processing at any time. You can also withdraw your consent to the processing of voluntarily-provided data at any time. To do so, please contact us at the email address provided in the imprint.

We enable you to use social plugins. However, for data protection reasons, no data is transferred to social media services when you visit our websites.

You have the option, though, to give your consent to this data processing via our banner to activate and use the social plugins integrated on our websites. Only then will your browser establish a connection to the servers of the respective social media service provider.

If you activate a plugin via the corresponding setting in the banner, the social media service will receive your IP address in particular, as well as information about your visit to our website (usage data). This does not depend on whether or not you have an account with the respective social media service. If you are logged in, the data can be assigned directly to your social media profile.

Overall, we have no influence on whether and to what extent the respective social media service processes personal data after activation. It is likely, though, that the social media service will create usage profiles from your data and use them for personalised advertising. In addition, your data will be shared with other users of the social media service to let them know about your activities on our websites. 

Embedding is carried out on the basis of your consent, provided that you have given your consent via our banner.  If the data in this context is processed outside the EU or the EEA (in particular in the USA), we provide information on the level of data protection in the table below.

If you no longer wish your personal data to be processed by the activated social plugins, you can prevent future processing by withdrawing your consent. Please follow this link and make the appropriate settings via our banner.

We embed videos on our websites that are not saved on our servers. For data protection reasons, however, no third-party content is downloaded when you visit our websites, and the third-party provider does not receive any information.

Only when you give your consent via our banner, will content from third-party providers  be downloaded. This provides the third-party provider with information that you have accessed our website, as well as the usage data technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on further data processing by the third-party provider. Your consent includes the downloading of third-party content. 

Embedding is carried out on the basis of your consent, provided that you have given your consent via our banner. If the data in this context is processed outside the EU or the EEA (in particular in the USA), we provide information on the level of data protection in the table below.

To protect our web forms from automated requests, we use a third-party captcha. As part of the captcha function, you may be asked to solve tasks or tick checkboxes. The user input provided in this context and, if applicable, mouse movements are used to assess whether the input originates from a human being or an automated programme.

As the function is provided by a third-party provider, the display of the captcha causes the third-party provider's content to be downloaded. This provides the third-party provider with information that you have accessed our website, as well as the usage data technically required in this context. We have no influence on further data processing by the third-party provider. 

The embedding is based on Art. 6 para. 1 sentence 1 lit. f GDPR and in the interest of protection against spam and misuse.

If the data in this context is processed outside the EU or the EEA (in particular in the USA), we provide information on the level of data protection in the table below.

You have the opportunity to apply for the positions we advertise or to send an unsolicited application to the following e-mail address career@aerzen.com. You decide how much data you want to send us in your e-mail application. In order for your application to be considered, however, at least the following information is required: name, address, e-mail address, cover letter or details of the position you are applying for, CV, references and qualifications.

We process this information exclusively for the purpose of selecting applicants in accordance with § 26 para. 1 sentence 1 BDSG, as it is necessary for deciding whether to establish an employment relationship. Your data is not processed for any other purpose.

In addition, you can decide for yourself whether you would like to provide us with further information, such as your hobbies, date of birth, telephone number or a photo of yourself. The provision of this data is voluntary and is not mandatory for the application. If you include voluntary data in your e-mail application, we will process this on the basis of your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 26 para. 2 BDSG. You can revoke your consent at any time. To do so, please contact the address given in the imprint.

Your data will be treated confidentially within our company. Where necessary, we use service providers, who are strictly bound by our instructions, e.g. to support us with IT, and with whom separate contracts have been concluded for data processing. Your data will not be passed on to any third parties. If an employment contract is concluded following the application process, we will retain the data from your application which is required for the performance of your employment relationship. The legal basis for this processing is § 26 para. 1 sentence 1 BDSG. If your application is unsuccessful, your documents will be deleted after 6 months. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Data processing until deletion is carried out in our legitimate interest to defend ourselves against any legal action relating to the application. We only process the personal data provided by you during your application.

If you allow us to consider your application for other or future vacancies, please indicate this on your application. We will then process your data on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR and § 26 para. 2 BDSG. You can revoke your consent at any time. To do so, please contact the address given in the imprint.

You can subscribe to a newsletter on our website. Please note that we require certain data (at least your e-mail address) to subscribe to the newsletter. 

The newsletter will only be sent if you have given us your explicit consent. After successful registration, you will receive a confirmation email at the email address you provided (known as double opt-in). You can revoke your consent at any time. You can easily cancel your subscription by clicking on the “unsubscribe” link provided in every newsletter.

When you subscribe to our newsletter, we store additional data beyond the data already mentioned, if this is necessary to prove that you have subscribed to our newsletter. This may include storing the full IP address at the time of registration or confirmation of the newsletter, as well as a copy of the confirmation e-mail sent by us. The corresponding data processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR and in the legitimate interest of being able to account for the legality of the newsletter dispatch.

If you wish to use our access-protected area, prior registration is required.

We only collect data necessary for registration and provision of the service. Data processing is carried out on the basis of Art. 6 (1) (1) (f) GDPR in our legitimate interest to provide you with the services and information in the access-protected area.

If we collect additional data which is marked as voluntary, we process this data on the basis of your consent. You can revoke your consent at any time with future effect. To do so, please use the relevant functions in the access-protected area or send an e-mail to the address specified in the imprint.

If you wish to permanently unsubscribe from our access-restricted area (withdrawal of consent), please use the unsubscribe option in the access-restricted area or use the address given in the imprint.

We use the technical functions and contents of the third-party providers listed below to display our websites.

When you visit our website, content from third-party providers, who provide these functions and content, are downloaded. This provides the third-party provider with information that you have accessed our website, as well as the usage data technically required in this context.

We have no influence on further data processing by the third-party provider. 

Data processing is carried out on the basis of your consent, provided that you have previously given your consent via our banner solution.

Please note that the use of third-party content and functions may result in your data being processed outside the EU or the EEA (in particular in the USA). For transfers to the USA, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework).

Unless we have already provided detailed information about the storage duration, we will delete personal data when it is no longer required for the aforementioned processing purposes and there are no legitimate interests or other (legal) reasons for storage that prevent deletion.

When processing your personal data, the GDPR grants you, as the data owner, certain rights:

Right to information (Art. 15 GDPR)

You have the right to require confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to information about this personal data and to the information listed in detail in Art. 15 GDPR.

Right to rectification (Art. 16 GDPR)

You have the right to request the immediate correction of inaccurate personal data concerning you and, if necessary, the completion of incomplete data.

Right to erasure (Art. 17 GDPR)

You have the right to request that personal data concerning you be deleted immediately if one of the reasons specified in Art. 17 GDPR applies.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR is met, e.g. if you have objected to the data processing, for the duration of the review by the responsible party.

Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format or to request that this data be transferred to a third party.

Right of cancellation (Art. 7 GDPR)

If the processing of data is based on your consent, you are authorised to withdraw your consent to the use of your personal data at any time in accordance with Art. 7 para. 3 GDPR. Please note that the cancellation is only effective for the future. Data processing that took place before the cancellation is not affected by this.

Right of objection (Art. 21 of GDPR):

If data is collected on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR (data processing to protect legitimate interests) or on the basis of Art. 6 para. 1 sentence 1 lit. e GDPR (data processing to protect public interests or in the exercise of official authority), you have the right to object to the data processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrable compelling legitimate reasons for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your data violates data protection regulations. The right to lodge a complaint may be exercised in particular with a supervisory authority in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Exercising your rights

Unless otherwise stated above, please contact the entity named in the Imprint to assert your rights as data owner.

Our external Data Protection Officer is available to provide you with information on data protection. Contact details are as follows:

datenschutz nord GmbH
Konsul-Smidt-Strasse 88
28217 Bremen
Web: https://www.dsn-group.de/
E-mail: office@datenschutz-nord.de

When contacting our data protection officer, please also indicate the entity responsible as specified in the Imprint.