Legal
Privacy policy
Subject matter
Below we would like to inform you about which personal data we process from you when you use our services and during the processes described below.
Personal data (hereinafter "data") is all data that can be related to you personally, e.g. your name, your e-mail address and your use of our services.
Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is Dr. Neumann-Wolff AG, Wellseedamm 18, 24145 Kiel, info@neumann-wolff.de.
You can reach our data protection officer by e-mail at info@neumann-wolff.de or by post at our address with the addition "der Datenschutzbeauftragte" (the data protection officer).
Browser data
As soon as you access our website, our web server on which our website is hosted automatically collects the following data transmitted by your browser:
- IP address of your device
- Date and time of the request
- Content of the request (specific page)
- Access status and amount of data transferred
- Product and version information of your browser
- Operating system of your device
- the website from which our website was accessed
This data is technically necessary for us to display our website to you and to ensure the stability and security of our website. The recipient in this context is our server host.
The IP address of your device is only stored for the duration of your use of the website and is then immediately deleted or anonymised by truncation.
The legal basis is Art. 6 (1) sentence 1 lit. f GDPR.
Functional cookies
We use cookies to make the use of our website convenient for you.
Cookies are small text files that are sent from our web server to your browser when you visit our website and stored by it on your computer for later retrieval. Cookies enable your internet browser to be recognised.
We use cookies to make your preferences available, to have your personal data entered into the input mask during future interactions with our website, or to ensure your authorisation.
Session cookies are automatically deleted when you close the browser. Other cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the exact storage period in the settings of your browser.
You can configure your browser settings according to your wishes and, for example, refuse the acceptance of third-party cookies or all cookies. We point out that you may then not be able to use all functions of this website.
You can delete the cookies at any time in the security settings of your browser.
The legal basis is Art. 6 (1) sentence 1 lit. f GDPR, whereby our legitimate interests arise from the aforementioned purposes.
Your enquiry
We offer you various ways to contact us: our postal address, our e-mail address, our telephone number and our contact form.
When you contact us, we use the data you provide, such as your name, your e-mail address, your telephone number and the content of your enquiry, to process your request. Enquiries submitted through the contact form are transmitted to us by e-mail and processed internally in order to answer them.
We delete the data arising in this context once its storage is no longer necessary, or restrict the processing if there are statutory retention obligations.
The legal basis is Art. 6 (1) sentence 1 lit. b GDPR.
Applications
If we are looking for employees, we publish job advertisements.
In order to process your application, we need certain data from you.
In addition to your name and your contact details, we also need and process your other applicant data, e.g. your cover letter, CV, references or interview notes. The application including any uploaded documents (e.g. your CV) is transmitted to us by e-mail and processed solely for the purpose of the application procedure; it is not stored separately on our website.
We delete the data arising during the application procedure when the data is no longer needed for the purpose of the application. This is the case after a period of no more than six months following the end of the application procedure, should no employment result. This does not apply insofar as statutory provisions preclude deletion, the data is required for the purpose of providing evidence, or you have expressly consented to longer storage.
If we ask you for consent, e.g. to store your data for a longer period, the legal basis is Art. 6 (1) sentence 1 lit. a GDPR, Sec. 26 (2) BDSG. Otherwise, the legal basis is Art. 6 (1) sentence 1 lit. b GDPR, Sec. 26 BDSG.
Business relationship
For the conclusion as well as the performance of a contract for the services offered by us or by you, we need personal data.
In the course of initiating or performing the contract, you must provide the personal data required for the establishment, performance and termination of the contractual relationship and for the fulfilment of the associated contractual obligations. We process your data in order to fulfil the contract with you and to comply with existing legal requirements, e.g. of a commercial or tax law nature. This may include the transfer of data to subcontractors, payment service providers or authorities.
Due to commercial and tax law requirements, we are obliged to store the contract data for ten years. However, after two years we restrict the processing, i.e. your data is only used to comply with the legal obligations.
The legal basis is Art. 6 (1) sentence 1 lit. b GDPR.
Advertising to existing customers
Should you become a customer of ours, we may use the e-mail address received in this context to send you advertising for similar goods or services.
You can object to this advertising at any time, in particular by informing us via the contact options given in the imprint. Also, if we do not send you any advertising for a period of two years, we will block your e-mail address for the sending of advertising. The statements regarding commercial and tax law requirements in connection with your purchase from us apply to the storage of your e-mail address as such.
The legal basis is Art. 6 (1) sentence 1 lit. f GDPR in conjunction with Sec. 7 (3) UWG, whereby our legitimate interests arise from the aforementioned purposes.
Third-party services
We use third-party services to optimise our offerings.
When you access an offering that contains such a service, a direct connection to the servers of the third-party provider may be established. The third-party provider therefore receives the information that you or your IP address have accessed the corresponding page of our offering.
If you are logged in with the provider of the service, the third-party provider can assign your visit to our offering to your account. When you interact with the services, for example by pressing a button, this is transmitted directly from your device to the third-party provider. If you do not want a third-party provider with whom you maintain an account to collect data about you via our offerings, you must log out of the respective account before visiting our offerings.
In some cases, methods for identification and recognition are used that are stored on your device and/or generated from automatically transmitted information from your device. These can be, for example, cookies or fingerprinting methods. Where necessary, we offer you a tool with which you can control the use of such methods.
For the purpose and scope of the collection and use of your data as well as your related rights and setting options for protecting your privacy by the third-party provider, please also refer to the privacy notices of the respective third-party provider.
If we ask you for consent to use the services, the legal basis is Art. 6 (1) sentence 1 lit. a GDPR. Otherwise, the legal basis is Art. 6 (1) sentence 1 lit. f GDPR, whereby our legitimate interests arise from the aforementioned purposes.
Service providers
Insofar as we use service providers who act on our behalf within the framework of so-called order processing pursuant to Art. 28 GDPR, we have concluded a corresponding contract with them.
Insofar as we use service providers in so-called third countries outside the European Union or the European Economic Area, we only have your data processed in third countries with a level of data protection reviewed by the EU Commission, on the basis of special guarantees, such as a contractual obligation through so-called standard contractual clauses of the EU Commission.
We will be happy to provide you with further information on request.
Cloudflare Turnstile
To protect our forms (contact and application form) against abusive automated use and spam, we use Cloudflare Turnstile, a service of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA ("Cloudflare"). When you use one of our forms, your IP address and technical information about your browser are transmitted to Cloudflare and processed there in order to distinguish human users from automated bots. Turnstile does not set cookies and does not use the data for advertising or cross-site tracking. Data may be transferred to Cloudflare servers in the USA. Cloudflare is certified under the EU-US Data Privacy Framework, and the transfer is additionally safeguarded by the EU Standard Contractual Clauses agreed in our data processing agreement with Cloudflare. Besides Turnstile, we use internal technical measures on our own server (a hidden honeypot field and rate limiting) that do not transmit any data to third parties. The legal basis is Art. 6 (1) sentence 1 lit. f GDPR; our legitimate interest lies in the security of our website and in the prevention of spam and abuse. Further information can be found in Cloudflare's privacy policy at https://www.cloudflare.com/privacypolicy/.
Your rights
You have the following rights vis-à-vis us with regard to the data concerning you:
- Right to information
- Right to rectification or erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to lodge a complaint with a data protection supervisory authority
If you have given us consent to process your data, you can revoke it at any time with effect for the future.
You can object to direct marketing at any time. If your particular situation requires it, you can also object at any time to processing based on Art. 6 (1) sentence 1 lit. f GDPR.