Privacy policy

I. Privacy Policy Auren Germany
II Privacy Policy Auren Germany for Facebook

III Privacy Policy Auren Germany for Instagram
IV. Privacy Policy Auren Germany for YouTube
V. Privacy Policy Auren Germany for Xing
VI Privacy Policy Auren Germany for LinkedIn
VII Privacy Policy Auren Germany for reCAPTCHA
VIII. Privacy Policy for applications Auren Germany

Status 01.04.2024

I. Privacy policy

1. Preliminary remark

Thank you for visiting the website of Auren Deutschland GbR and its affiliated companies (in future Auren Deutschland). All companies to which this privacy policy applies can be found in the imprint.

This privacy policy serves to provide information about the processing of personal data when using our website.

Your privacy and the associated protection of personal data are important to us. Therefore, please read the following information carefully. If you have any questions, you can contact Auren Deutschland or our external data protection officer directly.

To improve the flow of reading, only the masculine form is used in the following, e.g. employees instead of staff members. In these cases, unless explicitly stated otherwise, all genders are of course meant.

2. Definitions

Data protection is a complex topic. We have summarised some basic meanings to make it easier for you to understand this privacy policy.

In simple terms, “order processing” (abbreviated to “AV”) within the meaning of Art. 28 of the General Data Protection Regulation (GDPR) refers to a service in which personal data is processed by a service provider (processor under the GDPR) on behalf of and in accordance with the instructions of the so-called controller. The service provider processes the personal data exclusively in accordance with our instructions and does not acquire any ownership or interest of its own in your data. Before such an order is placed with a service provider, we conclude a special contract with the service provider and ensure further measures to protect your personal data.

Cookies” are small text files that are stored on the end device you use (e.g. computer or smartphone) and that store certain settings and data for exchange with our system via your browser. A cookie usually contains the name of the visited website from which the cookie data was sent, information about the age of the cookie and an alphanumeric identifier. Cookies enable the systems to recognise the user’s device and make any default settings immediately available.

“Third party” means any natural or legal person or entity other than the data subject, the controller, the processor and the persons who, under the direct authority of the controller or processor, are authorised to process the personal data, see Art. 4 No. 10 GDPR. It is therefore not a third party, for example, if personal data is given to a service provider in the course of commissioned processing in accordance with Art. 28 GDPR.

“IP addresses” are sequences of numbers that can be assigned to individual IT devices or a group. Similar to postal addresses, the IP is used to assign data to the correct recipient.

Personal data” means any information relating to an identified or identifiable natural person, see Art. 4 No. 1 GDPR.

Controller” pursuant to Art. 4 No. 7 GDPR is any person or body which alone or jointly with others determines the purposes and means of the processing of personal data (in this case: the website operator).

3. Responsible person and general information

Auren Deutschland is committed to the responsible collection, processing and use of personal data and to compliance with the applicable data protection laws of Germany, the European Union or other countries with which Auren Deutschland maintains business relations.

Auren Germany is committed to maintaining the security and confidentiality of personal data by taking necessary and appropriate measures in the course of its business activities.

Controller in relation to the processing of your personal data:

Auren Deutschland GBR
Rotebühlplatz 23, 70178 Stuttgart
Phone: +49 (0) 711 997868-0
E-mail: info@auren.de

All companies to which this privacy policy applies can be found in the legal notice. With regard to the question of the controller, it is therefore possible that in individual cases the responsibility within the group may be assigned to another company. However, only Auren Deutschland GbR is expressly named here, as this company is the lead company and has corresponding contractual interfaces with all other companies.

Auren Deutschland GbR is therefore responsible for the personal data processed, regardless of whether the data is processed by Auren Deutschland itself and/or Auren Deutschland’s processors. If an entity other than the aforementioned entity is the “controller” within the meaning of Art. 4 No. 7 of the General Data Protection Regulation (GDPR), you will be informed explicitly and separately, unless this is obvious.

Auren Germany is committed to continuously reviewing, supplementing and expanding its data protection processes in order to maximise compliance with applicable laws.

4. General legal information

4.1 Consent

The fact that you send us your personal data via one of the forms on our website means that you give your consent to their processing in accordance with Art. 6 para. 1 a) GDPR.

By ticking the box “I have read and accept the privacy policy” in all data collection forms on this website and clicking on the “Send” or similar buttons, you therefore give your express and unequivocal consent to the processing of your personal data for the above-mentioned purposes and declare that you have read, understood and expressly accepted the disclaimer and the privacy policy.

You can revoke the consent you have given without this rendering the processing previously carried out unlawful.

4.2 Use of the website

Auren Deutschland informs users of the website https://auren.com/de that access to, browsing and use of this website implies express acceptance of all the terms and conditions contained in these Terms of Use, which must be complied with by any person accessing, browsing or using this website.

4.3 Legal advice

This website contains general information which may under no circumstances be construed as legal or other advice.

4.4 Exclusion of liability

Auren Deutschland makes this website available to the general public on the condition that it is exempt from any liability for damages that may arise from its use or the use of its content as a basis for making or executing a decision, to the extent permitted by law.

Auren Deutschland is not liable for, among other things:

a. the malfunctioning and/or errors in the website when this is due to maintenance work, incidents, improper errors in the terminal or its insufficient capacity to operate the systems required to use the service.

b. any virus and/or other harmful components on the Website or the server on which it is hosted.

c. all damages incurred by the user if the service cannot be provided due to unforeseen circumstances, force majeure or other causes for which Auren Deutschland is not responsible.

d. Damage that the user causes to himself or third parties by violating the terms of use established by Auren Deutschland on the Internet or by violating the security systems of the Internet.

e. all information published on the website if this information has been manipulated or entered by third parties.

Auren Deutschland declares that it has taken all necessary measures within the scope of its possibilities and the state of the art to ensure the functioning of the website and to reduce possible system errors to a minimum, both in technical and in legal and organisational terms.

Auren Germany will take the appropriate measures to ensure a prompt response without being liable for any delays that may be attributable to telecommunication services.

4.5 Rules for accessing and using the content

The following content in particular is prohibited, by way of example only:

a) The procurement of content made available on the Internet by unlawful or fraudulent means, theft or plagiarism.

b) The use of services and content provided by Auren Deutschland for unlawful purposes.

c) Any activity that could damage, overload, impair or prevent normal activity on the web or on a third party computer.

d) Using the web to transmit, install or publish viruses, malware or other harmful programmes or files;

e) Unauthorised access to any part of the Web, to other connected networks or systems, to any Auren Deutschland server or to any of the services offered on the Website by hacking or forgery, theft of passwords or any other unlawful means;

In the event that the user causes damage to third parties through the use of a service or content offered on the web, he expressly releases Auren Deutschland from any liability that can be attributed to him. For this purpose, only the user assumes any liability that may arise.

Auren Deutschland reserves the right to take appropriate legal action in the event of a breach of any of the aforementioned obligations by the user.

4.6 Suspension of the website

Auren Deutschland reserves the right to suspend, modify, restrict or interrupt, temporarily or permanently, with or without prior notice, access to the content and/or the use of services on the website, as well as the browsing, use, hosting and/or downloading of content, without the user being able to claim any compensation.

4.7 Intellectual property

Auren Deutschland owns or holds the intellectual property rights to the elements that make up the design of the Website, such as the trade mark, the trade name or the distinctive sign. In particular, Auren Deutschland owns the intellectual property rights to the logos, the colour combinations, the choice and form of presentation, the website source code, the menus, the browser buttons, the HTML code, the texts, the photographs, the graphics and all other web content relating to the services, content and/or tools offered by Auren Deutschland.

Access, browsing or use of the Website by the User shall not, under any circumstances, constitute a complete or partial assignment, transfer or waiver of such rights by Auren Deutschland.

The user may view, print and copy the contents of this website for his/her private use. However, the use for commercial purposes or the exercise of rights of exploitation, reproduction, distribution, public communication, availability and transformation of all or part of the contents of this website is prohibited without the prior express written consent of Auren Deutschland.

4.8 Applicable law and jurisdiction

These Terms of Use are governed by applicable law. The resolution of any problems or disputes relating to this website shall be governed by the applicable law to which the parties expressly submit, with the courts and, where appropriate, the consumer arbitration tribunals having jurisdiction to resolve any disputes that may arise from these terms.

5. Use of the website

In addition to pure information, we offer you various services on our website that you can use if you are interested. This may also involve the provision of further personal data that we require in order to provide the respective service, which we will inform you about below.

General access to this website and browsing does not require the user to register, with the exception of requesting certain services or functions, for which the information requested in the corresponding login or registration forms must be provided. All fields marked with an asterisk (*) in these forms must be completed, so the omission of any of these fields may mean that the requested services or information cannot be obtained.

We collect the necessary contact data in the contact form in order to answer your enquiry or provide you with the requested information.

We will process your CV and contact details for the purposes of the selection procedures that are open in the “Careers” section. More on this under the section Applications.

5.1 Log files

(1) Every time this website is accessed, data is automatically logged, which also applies to the retrieval of files (log data). We collect and use the technically necessary data to make the website available to you. The technically necessary data transmitted by your browser to our web server includes, for example

  • IP address
  • Date and time of the enquiry
  • Time zone difference to Greenwich Mean Time (GMT)
  • Pages accessed
  • Content of the request (specific page)
  • Access status / HTTP status code
  • Amount of data transferred in each case
  • Website from which the request comes
  • Browser
  • Language and version of the browser software
  • Operating system and its interface

We need this data to ensure the functionality of the website and to make your visit to this website as pleasant as possible. We reserve the right to analyse the logged data on an ad hoc basis for the purpose of data security. We do not create individual profiles that provide information about your personalised usage behaviour based on the technically necessary data. We also do not link or merge the data transmitted by you with other data sources.

The legal basis for the processing of the described data – insofar as it is personal – is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to offer you an appealing, user-friendly and technically functional website.

(2) If you have the option of entering personal or business data (e-mail addresses, names, addresses) and you make use of this option, you provide this data voluntarily. The data is stored exclusively in Germany and within the European Union. The data will not be passed on to third parties who do not process it for us as part of an order processing relationship

5.2 Consent management with Cookiebot

We use the Consent Management Platform of the provider Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark to manage consents.

The purpose of this is to manage your consent or lack of consent for cookie-based, non-cookie-based and external services and to inform you about their use. If you do not consent to the use of a specific service, the consent manager prevents your personal data from being processed in connection with this service.

You can revoke your consent given in the consent manager at any time with effect for the future by changing your settings in the consent manager.

The legal basis for this is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the user-friendly design of our website, the analysis and optimisation of the technical functionality of our website and the implementation of data protection requirements.

The transfer of the collected personal data to Cookiebot as a recipient in a third country takes place on the basis of so-called standard contractual clauses, which we have concluded with Cookiebot together with an order processing agreement.

You can find more information on data protection with Cookiebot’s consent manager at Privacy Policy (cookiebot.com)

We also inform you in detail about the type, purpose, duration and recipient of the cookies used on our website in our cookie policy.

5.3 Use of newsletter

5.3.1 General information

If you subscribe to our newsletter, with which we inform you about our current interesting information and offers, your personal data may be processed:

  • E-mail address

are collected by us as mandatory data. The provision of further, separately marked data is voluntary and is used to be able to address you personally. We use this personal data exclusively for sending the newsletter and for statistical evaluations in order to analyse and optimise our system performance.

We use Brevo, a service provided by the:

Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany

Purpose: Organisation, analysis and dispatch of our newsletter.

The data required for the aforementioned purpose is stored on the servers of Sendinblue GmbH in Germany. We have concluded an order processing contract with Sendinblue GmbH in accordance with Art. 28 GDPR. The provider works for us in accordance with our instructions.

The server location is Germany. The locations of Brevo’s subcontractors are partly outside Germany and also in third countries.

Information on data protection at Sendinblue GmbH can be found at:

https://www.brevo.com/de/datenschutz-uebersicht/

and

https://www.brevo.com/de/legal/privacypolicy/.


Under the aforementioned links, you can also view the respective valid test report on Brevo from TÜV-Rheinland and a preview of a standard order processing contract with Sendinblue GmbH (“Brevo”). You can view the respective valid subcontractors of Brevo, including their registered offices, server locations and any applicable data protection law or guarantees for data transfer to third countries or certification in the order processing contract.

Detailed information on the functions of Brevo can be found at the following link:

https://www.brevo.com/de/features/.

5.3.2 Analysing the newsletter

With the help of Brevo, we are able to analyse our newsletter campaigns. We are able to see whether newsletters are opened and which links are clicked on. In this way, we can determine, among other things, which links were clicked on particularly often and whether certain actions previously defined by us were carried out [Conversion Rate Definition (CR)]. We can also divide our newsletters into different categories in order to customise content more specifically to our target groups.

If you do not wish to be analysed by Brevo, you must unsubscribe from the newsletter. We provide a link for this purpose at the end of each newsletter. You can also unsubscribe/unsubscribe from the newsletter under Unsubscribe from the Auren newsletter.

5.3.3 Storage period / your rights

The data provided will be stored and processed by us as long as you do not unsubscribe from the newsletter or cancel your subscription. If you unsubscribe from the newsletter or cancel your subscription, we will delete your data from the newsletter lists and from Brevo. Your data stored by us for other purposes remains unaffected by this.

If necessary, your e-mail address will be stored by us or Brevo in a blacklist if this is necessary to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data.

This measure serves both your interest and our legitimate interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). Storage in the blacklist is indefinite. You can object to the storage and processing in connection with the newsletter.

You can revoke your consent to the processing of your personal data at any time and with effect for the future in accordance with Art. 7 para. 3 GDPR without incurring costs that exceed the transmission costs according to the basic tariffs. Specifically, this means

If you revoke your consent to receive the newsletter or unsubscribe from it, you will only incur costs for the use of the Internet or a telephone (e.g. for an Internet or telephone flat rate). Of course, we do not charge any fees for unsubscribing or cancelling your consent to receive the newsletter. Your further rights as a data subject can be found below.

5.3.4 Newsletter tracking

We would like to point out that we evaluate your user behaviour when sending the newsletter. For this analysis, the emails sent contain so-called web beacons, also known as tracking pixels. These are one-pixel image files that link to our websites and applications and thus enable us to evaluate your user behaviour. This is done by collecting the data mentioned in § 4 as well as web beacons that are assigned to your e-mail address and linked to your own ID. Links in the newsletter also contain this ID. The information collected in this way is stored by the newsletter provider on its server at our service provider.

You can object to this tracking at any time by clicking on the separate link provided in each e-mail. Such tracking is also not possible if you have deactivated the display of images in your e-mail programme by default. In this case, however, the newsletter will not be displayed in full and you may not be able to use all the functions. If you display the images manually, the above-mentioned tracking will take place.

5.3.5 Legal bases

If you have subscribed to our newsletter, the data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the cancellation.

5.4 Communication by e-mail, online form, fax, telephone or post 

5.4.1 Contact by e-mail, fax, telephone or post

If you contact us by e-mail, fax, telephone or post, we will use the information you provide to contact you and to process and respond to your enquiry. Your data will not be passed on to third parties. Your personal data will be deleted if you have asserted a claim for deletion, if the data is no longer required to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons. Provided that there are no other legal provisions to the contrary (e.g. statutory retention periods).

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in responding to and processing your enquiry appropriately. If your enquiry is made to prepare/initiate the conclusion of a contract with you, Art. 6 para. 1 lit. b GDPR is the alternative legal basis.

5.4.2 Contact via online form

You can contact us by using a form provided on our website.

To use our contact form, it is only necessary to provide a valid e-mail address. This is necessary in order to be able to allocate and answer your enquiry. Further data can be provided voluntarily, but is not mandatory for use.

When you use the online form, we collect and store the personal data that you have entered in the input mask according to the purpose of your contact, for example:

  • First name,
  • Surname,
  • Company name,
  • E-mail address,
  • Comment,
  • Telephone number.

We use your data exclusively for the purpose of processing and responding to your enquiry. Your data will not be passed on to third parties.

Your personal data will be deleted if you have asserted a claim for deletion, if the data is no longer required to fulfil the purpose for which it was stored or if its storage is inadmissible for other legal reasons. Provided that there are no other legal provisions to the contrary (e.g. statutory retention periods).

The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the appropriate processing and answering of your enquiry. If your enquiry is made to prepare/initiate the conclusion of a contract with you, Art. 6 para. 1 lit. b GDPR is the alternative legal basis.

You are also entitled to withdraw your consent at any time before your enquiry has been dealt with.

6. Integration of third-party services and content

6.1 General

If you give us your consent via our consent manager when you visit our website, third-party content (e.g. videos, maps or graphics from other websites) may be integrated within this online offering. This always presupposes that the third-party providers recognise your data (e.g. IP address; browser data; operating system and device; websites visited; date and time of access, etc.) as well as other data from cookies or non-cookie-based forms. Without the IP address, for example, they would generally not be able to send the content to your browser. The IP address is therefore required to display this content. We endeavour to only use content whose respective providers only use the IP address to deliver the content. However, we have no influence on whether the third-party providers store the IP address, e.g. for statistical purposes. If we are aware of this, we will inform you.

6.2 Social media plugins / social share plugins

With social plugins, we enable you to set bookmarks or share interesting content with other users. You can use these plugins to connect to social networks and other users. This helps us to improve our offering and make it more interesting for our users. However, we have no influence on the data collected and the data processing, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods or the deletion of the data collected.

As a rule, plug-in providers use your data to create cross-device user profiles for the purposes of advertising, market research and/or customising the design of their websites. Such an evaluation is carried out in particular – even if you do not have an account with the plug-in provider or are not logged in there – to display customised advertising and to inform other users of the social network about your activities on our website. If you are logged in with the plug-in provider, your data collected by us will be directly assigned to your existing account with the plug-in provider and, if applicable, publicly communicated to your contacts.

When social plugins are used, external servers are called up which may be located in another third country. As a result, it is possible that information about your use (e.g. IP address; data on the browser, operating system and device; websites visited; date and time of access) may be logged and stored outside the EU. As part of our consent manager and also at this point, we expressly point out that a data transfer to a third country could generally be associated with a transfer to a third country that is unsafe from a data protection perspective.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our consent manager.

6.3 Use of YouTube

Information on data protection regarding the use of YouTube can be found here.

6.4 Use of Instagram

Information on data protection regarding the use of Instagram can be found here.

6.5 Use of Facebook

Information on data protection regarding the use of Instagram can be found here.

6.6 Use of Xing

Information on data protection regarding the use of Xing can be found here.

6.7 Use of LinkedIn

Information on data protection regarding the use of LinkedIn can be found here.

6.8 Use of Matomo (formerly PIWIK)

We use the open source software tool Matomo (formerly PIWIK) on our website to analyse the surfing behaviour of our users. The software places a cookie on the user’s computer. For the use of cookies, please refer to the information in this statement. The following data is collected when individual pages of our website are accessed:

  • Two bytes of the IP address of the user’s calling system
  • The time at which the website is accessed
  • The website accessed (page title and URL)
  • The website from which the user accessed the website (referrer)
  • The subpages that are accessed from the accessed website
  • The time spent on the website
  • The frequency of visits to the website
  • The screen resolution used
  • The time in the user’s local time zone
  • Files that are clicked for download
  • The page generation time
  • The user’s location (country, region, city, approximate longitude and latitude)
  • Language settings of the browser used
  • Operating system, browser version, end device (such as desktop, tablet, smartphone, TV, vehicle, console, etc.)

6.9 Google Analytics

This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The purpose of using Google Analytics is to be able to analyse and regularly improve the use of our website by using the knowledge gained from the statistics to improve our offer and make it more interesting for website visitors. Google Analytics records, collects and evaluates data about the behaviour of visitors to websites. Cookies are stored on your computer for this purpose. The information generated/requested by cookies (such as your IP address, the subpages you have visited, etc.) about your use of this website is generally transmitted to a Google server in the USA and stored there. However, your IP address will first be truncated by Google within the EU/EEA, as we have preset the anonymisation of the IP address accordingly. Only in exceptional cases will your full IP address be transmitted to a Google server in the USA and only shortened there. In addition to your IP address, Google processes online identifiers (including cookie identifiers) and device identifiers in connection with Google Analytics.

On our behalf, Google will use the information collected to evaluate the usage behaviour of users of our website and to compile reports on their website activities. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. In order to ensure that Google processes the relevant data exclusively in accordance with our instructions and for our purposes, we have concluded an order processing agreement (AVV) with Google.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our consent manager.

In addition, you can prevent the collection of data generated by Google Analytics cookies (including your IP address) and their transmission and processing by Google in principle and beyond this website by downloading and installing the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de.

Further information on terms of use and data protection can be found at:

https://marketingplatform.google.com/about/analytics/terms/de/

 and

https://policies.google.com/technologies/partner-sites.


6.11 Google Tag Manager

On this website, we use Google Tag Manager from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), with which website tags can be managed via an interface. Google Tag Manager is a cookie-free domain that does not itself collect or store any personal data. However, Google states that it processes online identifiers (including cookie identifiers) and IP addresses in connection with Google Tag Manager. Google Tag Manager ensures that other tools are used which, for their part and independently of Google Tag Manager, may collect data, which we will inform you about separately in this privacy policy. If you have opted out at domain or cookie level, this also applies to tools that are implemented with Google Tag Manager.

As a rule, your IP address will be truncated by Google within the EU/EEA. In exceptional cases, your full IP address may be transmitted to a Google server in the USA and thus only truncated in the USA. The transfer of the personal data collected to Google as a recipient in a third country (USA) takes place on the basis of so-called standard contractual clauses, which we have concluded with Google together with an agreement on order processing for the use of Google Tag Manager.

In addition, the European Commission and the US government agreed on the “EU-U.S. Data Privacy Framework” in March 2023. This is an adequacy decision in accordance with Art. 45 GDPR.

By means of such an adequacy decision in accordance with Art. 45 GDPR, the European Commission can determine that a third country, a territory of a third country or a specific sector of a third country offers an adequate level of data protection. If the Commission has adopted such a decision, companies may transfer personal data to the relevant recipients in the third country without any further requirements.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our consent manager.

Further information on terms of use and data protection can be found at

https://www.google.com/intl/de/tagmanager/use-policy.html

and under

https://policies.google.com/privacy.

6.12 Use of Google Maps

The Google Maps application can be used on our website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently.

We have integrated the Google Maps service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) to show you how to reach us. In this context, corresponding map content is retrieved from Google servers.

By accessing external Google servers, which may be located in the USA, there is a possibility that Google may log and store your IP address outside the EU and assign it to a user profile. Even if you are not registered with Google or have not logged in, Google could assign your data to a user profile. Cookies may also be stored on your computer.

The information generated by the cookies may be transmitted by Google to a server in the USA for analysis and stored there. However, we have no influence on the data collected and the data processing, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods or the deletion of the data collected.

The information generated by the cookies may be transferred to a server in the USA and stored there. From a data protection perspective, the USA is a third country for which the EU Commission has issued an adequacy decision, as explained above. This certifies that the USA has a level of data protection comparable to that of the EU/EEA.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our consent manager.

Further information on terms of use and data protection can be found at

https://www.google.com/intl/de_de/help/terms_maps.html

 and under

https://policies.google.com/privacy.

6.13 Web Fonts

Our website uses so-called web fonts for the standardised display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the provider’s servers. 

By accessing external Google servers, which may be located in the USA, there is a possibility that your IP address may be logged, stored and assigned to a user profile outside the EU. Cookies may also be stored on your computer.

The information generated by the cookies may be transmitted by Google to a server in the USA for analysis and stored there. However, we have no influence on the data collected and the data processing, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods or the deletion of the data collected.

The information generated by the cookies may be transferred to a server in the USA and stored there. From a data protection perspective, the USA is a third country for which the EU Commission has issued an adequacy decision, as explained above. This certifies that the USA has a level of data protection comparable to that of the EU/EEA.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our consent manager.

6.13.1 Google Fonts

  • Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  • Further information on terms of use and data protection can be found at https://developers.google.com/terms
  • and at https://policies.google.com/privacy.

 6.14 Use of reCAPTCHA

Information on data protection regarding the use of reCAPTCHA can be found here.

6.15 Use of WordPress

We use the WordPress service, a software company from the USA with a branch in Ireland, for various purposes on this website. The contact details of WordPress are:

Aut O’Mattic A8C Ireland Ltd, Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86

6.16 Use of Issuu

On this website we use the service Issuu, a software company from the USA with a branch in Denmark, for various purposes. Issuu’s contact details are:

Issuu ApS, Gasvaerksvej 16, DK 1656 Copenhagen, Denmark.

privacy@issuu.com

6.17 Use of OVDCloud

On this website, we use the service OVDCloud, a software company from France with a branch in Germany, for various purposes. The contact details of OVDCloud are:

OVH GmbH, Christophstraße 19, 50670 Cologne

Germany

Phone : +49 681 906730

Fax : +49 (0) 681 8761827

E-mail : kundendienst@ovh.de

OVH GmbH is a subsidiary of the OVH SA Group, Lille , 2, Rue Kellermann, 59100 Roubaix.

6.18 Use of jQuery

Our website uses jQuery technologies that are integrated via Google APIs. In this context, corresponding programme libraries are called up by Google servers.

By accessing external Google servers, which may be located in the USA, there is a possibility that Google may log and store your IP address outside the EU and assign it to a user profile. Even if you are not registered with Google or have not logged in, Google could assign your data to a user profile. Cookies may also be stored on your computer.

The information generated by the cookies may be transmitted by Google to a server in the USA for analysis and stored there. However, we have no influence on the data collected and the data processing, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods or the deletion of the data collected.

The information generated by the cookies may be transferred to a server in the USA and stored there. From a data protection perspective, the USA is a third country for which the EU Commission has issued an adequacy decision, as explained above. This certifies that the USA has a level of data protection comparable to that of the EU/EEA.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our consent manager.

You can find more information on data protection at

https://policies.google.com/privacy.

6.19 Use of Polyfill.io

We have integrated the polyfill.io service of the provider The Financial Times Limited, Bracken House, 1 Friday Street, London, England, EC4M 9BT (“Financial Times”) on our website. A polyfill retrofits functions of a browser that are not provided by default. Poliyfill.io is a service that accepts a request for a set of browser functions and returns only the polyfills that the requesting browser requires. The service aims to simplify support for different browsers by attempting to replicate the missing functions with polyfills.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our consent manager.

The information generated by the cookies may be transferred to a server in the United Kingdom and stored there. From a data protection perspective, the United Kingdom is a third country for which the EU Commission has issued an adequacy decision. This certifies that the United Kingdom has a level of data protection comparable to that of the EU/EEA.

Further information on terms of use and data protection can be found at

https://polyfill.io/v3/terms/

and

https://polyfill.io/v3/privacy-policy/.

6.20 Content Delivery Networks (CDN)

We and, if applicable, some of the services we use, about which we also inform you in this privacy policy, use so-called Content Delivery Networks (CDN) to optimise the loading times of web resources that are loaded when you visit our website. If your browser accesses these web resources during this process, information about your use of our website (e.g. IP address; browser data; operating system and device; websites visited; date and time of access, etc.) may be transmitted to servers outside the EU and stored there.

The information generated by the cookies may be transferred to a server in the USA and stored there. From a data protection perspective, the USA is a third country for which the EU Commission has issued an adequacy decision, as explained above. This certifies that the USA has a level of data protection comparable to that of the EU/EEA.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our consent manager.

6.21 AddThis bookmarking

On our website we use a social plugin of the social network AddThis of the provider Oracle America, Inc, 500 Oracle Parkway, Redwood Shores, CA 94065, USA (“Oracle”). The plugin transmits your data (e.g. your IP address) to Oracle and, if applicable, to the selected social network or bookmarking service. To the best of our knowledge, Oracle receives information about which of our websites you have currently and previously visited.

If you wish to object to the collection and storage of data by Oracle, you can do so at any time by setting an opt-out cookie with effect for the future:

https://datacloudoptout.oracle.com/#optout

Further information on terms of use and data protection can be found at

https://www.oracle.com/legal/privacy/addthis-privacy-policy.html.

7. Categories of recipients of your data

7.1 Within Auren Germany

Within our company, access to your personal data is only granted to those departments and employees who need it to fulfil their duties.

7.2 Outside of Auren Germany

We will only share your personal data with third parties outside Auren Germany to the extent permitted or required by law; we will limit the transfer of your personal data to what is necessary for each purpose. We share your personal data with the following categories of recipients:

(1) Payment service provider

(2) external service providers for sending invoices by post or e-mail,

(3) Logistics service providers,

(4) Auditor,

(5) Consultant,

(6) Auditors,

(7) IT service provider,

(8) Telecommunications service providers,

(9) Collection agencies and legal advisors in the assertion of our claims,

(10) Service providers for the creation and dispatch of marketing and advertising material.

When we share your personal data with third parties outside Auren Germany, we process your personal data on the basis of the following legal grounds:

  1. Your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by making the appropriate setting in our consent manager;
  2. For the fulfilment of a contract or for the implementation of pre-contractual measures pursuant to Art. 6 para. 1 lit. b GDPR;
  3. For compliance with legal obligations pursuant to Art. 6 para. 1 lit. c GDPR.

7.3 Processors

We may need to use processors and then give them access to your personal data so that they can carry out a transaction or provide other services to you or us on our behalf. We will enter into a data processing agreement (“DPA”) with a carefully selected processor before granting them access to your personal data. In this way, we ensure that the processor processes your personal data in accordance with this privacy policy and applicable law in accordance with our instructions and is regularly monitored by us. We will inform you about the processors we use as part of this privacy policy.

7.4 Links to other websites and applications

The Sites may contain various links to other third-party websites or applications that may provide additional information, goods, services and/or promotional content. These third-party websites or applications are not owned by Auren Germany and are operated independently of Auren Germany. They may be subject to their own, differing privacy and data collection policies. We are not responsible for the privacy practices of third parties. Therefore, you should review their privacy policies and practices before visiting their websites or applications, using their programmes or submitting personal data to them.

8. Transfers to third countries

8.1 Auren Germany International

Auren Germany operates worldwide. Like many other international companies, Auren Germany has centralised parts of its client administration and data management and storage at locations within the EU. In addition, transnational projects may require different Auren Germany entities in different countries to access the personal data collected. As a result, it is possible that your personal data may leave the country of origin and be transferred to third countries within and also outside the European Economic Area (EEA) and may be accessed by Auren Germany on a global basis.

Auren Germany will take all necessary security and legal measures to ensure the integrity of personal data transferred within Auren Germany’s internal global data exchange and originating in the EEA area in accordance with applicable European and German data protection legislation. Regardless of the place of processing, Auren Germany will in any case apply the same data protection measures throughout the Group.

Your personal data will also be processed by service providers on behalf of Auren Germany, which may be located in other jurisdictions. You can find more detailed information on this in the section “Processors”.

8.2 Basis of transmission

Data transfers to third countries – countries outside the European Union (EU) / the European Economic Area (EEA) – are carried out if:

(1) an adequacy decision by the EU Commission exists for them,

(2) this is exceptionally permitted for certain cases in accordance with Art. 49 GDPR,

(3) it is required by law,

(4) you have expressly given your consent, which you can revoke in our consent manager, or

(5) we have concluded standard contractual clauses in conjunction with additional security measures.

9 Duration of data use / storage

9.1 General

We process your personal data for the duration of the business relationship. This may not only be for the time required to respond to a user enquiry, but may also include the initiation of a contract (pre-contractual legal relationship) and the fulfilment of a contract.

In addition, we are subject to various retention and documentation obligations which, however, cannot be derived conclusively from the German Commercial Code (HGB) and the German Fiscal Code (AO). The retention or documentation periods specified therein are up to (10) ten years after termination of the business relationship or the pre-contractual legal relationship.

In addition, special statutory regulations may require a longer retention period, e.g. the preservation of evidence within the scope of the statutory limitation period or during the course of legal proceedings. According to §§ 195 ff. BGB, the regular limitation period is three years, but limitation periods of up to 30 (thirty) years may also apply.

9.2 Cookies

You also have the option of revoking installed cookies at any time or deleting them yourself by preventing the storage of cookies through a corresponding setting in our consent manager.

You can view the list of cookies used in the cookie pop-up.

9.3 Deletion of data

If the personal data are no longer required for the fulfilment of contractual or legal obligations and rights, they are regularly deleted, unless their – limited – further processing is necessary for the fulfilment of the aforementioned obligations. In these cases, we may also store and, if necessary, use your data after the end of our business relationship or our pre-contractual legal relationship for a period that is compatible with the purposes.

10. Data security / secure data transmission

We would like to inform you that data transmission over the Internet (e.g. via e-mail) may be subject to security breaches. It is therefore not possible for us to provide complete protection against access by third parties. We secure our qIT systems (including the website) by means of so-called technical and organisational measures (TOM for short) against unwanted access by third parties: Access, disclosure, input, loss and dissemination as well as destruction and modification by unauthorised persons.

Your personal data is transmitted securely over the Internet using modern encryption methods with a minimum key size of 2048 bytes.

Your IP address and the date and time of your visit are also logged for data security purposes.

11. Rights of data subjects

You are entitled to the following rights as a data subject under the legal requirements, which you can assert against us:

The contact person for safeguarding your rights as a data subject is our external data protection officer.

Brands Consulting | Data Protection & Consulting
Mr Bernhard Brands
Auf dem Hahn 11
D-56412 Niedererbach (Westerwald)

Homepage: https://Brands-Consulting.eu
E-Mail: auren@brands-consulting.eu

The list of all data protection officers appointed by Auren Germany can be found under point 15 of this privacy policy.

11.1 Right to information

Under the legal requirements of Art. 15 GDPR, you can of course request information at any time as to whether we process your personal data. If we process your personal data, you can also request information about the circumstances and organisation of the processing and more detailed information about the processed data.

11.2 Right to rectification

In accordance with Art. 16 GDPR, you can request that incorrect information about you be corrected if you are unable to make a change yourself.

11.3 Right to cancellation

Under the legal requirements of Art. 17 GDPR, you are entitled to demand that we erase personal data concerning you without undue delay. The right to erasure does not exist, among other things, if the processing of personal data is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation to which we are subject (e.g. statutory retention obligations) or for the assertion, exercise or defence of legal claims.

11.4 Right to restriction of processing

You can request the restriction of the processing of your personal data in accordance with Art. 18 GDPR.

11.5 Right to data portability

Under the conditions of Art. 20 GDPR, you are entitled to demand that we provide you with the personal data concerning you that we process in a structured, commonly used and machine-readable format.

11.6 Right of cancellation

You can revoke your consent to the processing of your personal data at any time and with effect for the future in accordance with Art. 7 para. 3 GDPR, without incurring costs that exceed the transmission costs according to the basic tariffs.

11.7 Right of objection

Under the conditions of Art. 21 GDPR, you have the right to object to the processing of your personal data and to demand that we stop processing it. The right to object exists only to the extent provided for by law. Your objection may be opposed by legitimate interests that make further processing necessary.

11.8 Automated decision-making in individual cases including profiling

We also ensure your rights in accordance with Art. 22 GDPR. Automated decision-making or profiling (automated analysis of your personal circumstances) does not take place.

11.9 Right of appeal/supervisory authority

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority or a competent body if you have a reason for complaint, in particular if you believe that the processing of your personal data is not in accordance with the legal requirements and the provisions of this privacy policy.

Auren Deutschland GbR has its registered office in Stuttgart. However, the other companies included here are based at different locations in Germany. We also endeavour to offer highly qualified services at even more locations. You can therefore address your rights to any state data protection authority. If the data protection authority you have selected is not responsible, it will forward your request to the competent authority without further action. For the sake of completeness, here is the address of the state data protection authority in Baden-Württemberg

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg. Corporation under public law. Represented by the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg Prof. Dr Tobias Keber.

House address:

Lautenschlagerstraße 20

70173 Stuttgart

Postal address:

P.O. Box 10 29 32

70025 Stuttgart

Phone: 0711/615541-0

FAX: 0711/615541-15

E-mail: poststelle@lfdi.bwl.de

However, we recommend that you always contact our external data protection officer first (see point 15). If possible, your requests to exercise your rights should be addressed in writing to our data protection officer.

11.10 Scope of your obligation to transfer data

In principle, you are not obliged to provide us with your personal data. However, if you do not provide this data, we may not be able to make our website or some of its functions available to you, answer your questions or conclude a contract with you.

12. Updating your data

Auren Germany endeavours to ensure the principles of data protection in accordance with Art. 5 GDPR, including the accuracy of your data. Auren Germany therefore relies on you to inform us of any changes to your contact and personal data. Please get in touch with your personal Auren Deutschland contact in this regard. You can also make requests for changes to your personal data directly by e-mail to datenschutz@auren.de or by contacting our data protection officer.

13. Storage

Your personal data will only be stored by Auren Deutschland for as long as required for the purpose of processing – provided that this does not conflict with statutory retention obligations – or you have not already asserted a claim for deletion or storage is not permitted for other legal reasons.

In certain circumstances, Auren Germany is required to retain information for longer periods of time, for example if it is used to enforce or defend rights and for legally compliant archiving. Where possible and appropriate, personal data is anonymised by removing, replacing or redacting personal identifiers.

14. Transfer of business

Auren Germany or any part of the business, including the Sites, may be sold at a future date. If this occurs, your personal data may be transferred to the successor in interest, co-owner or operator of the business or site. We may also disclose and transfer your personal data in the event of a business combination, consolidation, reorganisation, sale of shares or assets, or corporate reorganisation, including without limitation in the event of a due diligence review. In all such cases, this Privacy Policy will continue to apply in relation to the use and disclosure of your personal data.

If we pass on your personal data as part of a business transfer, we process your personal data on the basis of the following legal bases:

To protect our legitimate interests in growing our business and deciding how the corporate structure of Auren Germany supports the needs of our business, in accordance with Art. 6 para. 1 lit. f GDPR.

15. Data protection officer

If you wish to exercise your rights as a data subject, please contact one of our data protection officers. Since several companies are united under the term Auren Germany, but each of these companies has its own separate legal relationship, they also have different data protection officers. Here is a list of the data protection officers:

15.1 Brands Consulting

Brands Consulting | Data Protection & Consulting
Mr Bernhard Brands
Auf dem Hahn 11
D-56412 Niedererbach (Westerwald)

Homepage: https://Brands-Consulting.eu
E-Mail: auren@brands-consulting.eu

15.2 Max Luber

Max Luber
Siegburger Str. 12
14197 Berlin
E-mail max.luber@ihr-datenschuetzer.de
Mobile: +49 (0)1577 6099509

15.3 Peter Menneke

Peter Menneke
IT Strategy, IT Security & Data Protection | M1512
DATEV eG
Freie-Vogel-Str. 391, 44269 Dortmund
Phone: +49(172)8108403
E-mail: peter.menneke@datev.de
Postal address: DATEV eG, 90329 Nuremberg

16. Changes to the privacy policy

Advances in technology, legal requirements or changes to processes may have an impact on this privacy policy, among other things. We therefore reserve the right to amend this privacy policy at any time with effect for the future. The current version of this privacy policy can be found on this website. Please visit this subpage of the website regularly to inform yourself about the applicable provisions.


 Status: 01.04.2024

II Privacy policy of Auren Germany for Facebook

We use under

https://www.facebook.com/aurendeutschland/

the Facebook fan page of the provider Meta Platforms Ireland Ltd (“Facebook”) to inform you about our offers and to communicate with you. We would like to point out that your data may be processed outside the European Union (EU). The processing of personal data outside the EU harbours fundamental risks with regard to the enforcement of the rights of data subjects and the protection of general data protection objectives.

1. Are jointly responsible for the processing:

Meta Platforms Ireland Ltd.
4 Grand Canal Square
Dublin 2
Ireland
impressum@support.instagram.com
Fax: +1 650 543 5340

and

Auren Deutschland GbR

Rotebühlplatz 23,

70178 Stuttgart

Phone: +49 (0) 711 997868-0

E-mail: info@auren.de

Facebook assumes primary responsibility for the processing of Insights data to fulfil the obligations arising from the GDPR. This includes the fulfilment of (1) necessary information obligations, (2) data subject rights that can be asserted against Facebook, (3) reporting obligations in the event of data breaches and (4) ensuring appropriate technical and organisational measures for secure processing.

Of course, you can also assert your request for information or other rights against us. In this case, we will be happy to forward your request to Facebook, as Facebook has access to the relevant user data and can take measures in accordance with your user rights.

2 Data processing with Facebook

2.1 Operation of a Facebook fan page

We use our Facebook fan page to provide you with news about our offers and to get in touch with you. For example, if you comment on our posts, we process the content of your comment and any other data that you share with us or that is transmitted during your Facebook activity. Depending on the privacy settings of your user profile, we may also have access to further information about your user profile and your Facebook activities (e.g. posts and “likes”).

Every time you visit our Facebook fan page, your personal data (e.g. IP address; browser data; operating system and device; websites visited; date and time of access, etc.) is processed by Facebook and cookies are set. However, we have no influence on the data collected and the data processing, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods or the deletion of the data collected. This enables Facebook to use your data to create cross-device user profiles for the purposes of advertising, market research and/or customising the design of its websites. Such use may take place even if you do not have a Facebook account or are not logged in there. If you are logged in to Facebook, your data will be assigned directly to your existing Facebook account and, if applicable, shared publicly with your contacts.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the external presentation and communication with you.

2.2 Use of Facebook Insights

The processing of personal data in the context of the use of Facebook takes place with Facebook Insights and also includes processing purposes for market research, advertising and the collection of statistical data. For example, usage profiles can be created from your usage behaviour and your resulting interests.

The user profiles can in turn be used, for example, to place adverts inside and outside Facebook that presumably correspond to your interests. Cookies are usually stored on your device to record your user behaviour, preferences and interests and to create and store user profiles. The purpose of Facebook is to show you customised advertising inside and outside Facebook. Furthermore, data can also be stored in the user profiles independently of the devices you use (especially if you are a member of Facebook and are logged in to them). However, even if you do not have a Facebook profile or are not logged into it during your visit to our fan page, Facebook can assign this data to a user profile. Cookies remain on your end device until you delete them.

Data from Facebook Insights is only available to us in anonymised form, so that we can only analyse the general user behaviour of visitors to our fan page. However, this does not allow us to draw conclusions about individual users.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in analysing the reach and effectiveness of our Facebook activities in order to optimise our online offering on this basis.

2.3 Further information

For a detailed description of the respective processing, the possibilities of objection (opt-out) and legal bases, we refer to the following linked information on data protection from Facebook:

Information about Facebook Insights:

https://www.facebook.com/business/pages/manage#page_insights

Agreement on joint responsibility with Facebook:

https://www.facebook.com/legal/terms/page_controller_addendum

Privacy policy:

https://www.facebook.com/about/privacy

Opt-out option:

https://www.facebook.com/help/568137493302217/

Legal basis of the processing:

https://www.facebook.com/about/privacy/legal_bases and https://de-de.facebook.com/policy.php

3 Rights of data subjects

We draw your attention to your rights as a data subject within the meaning of Art. 13 et seq. GDPR. In particular, you have a right of access (Art. 15 GDPR), a right to rectification (Art. 16 GDPR), a right to erasure (Art. 17 GDPR), a right to restriction of processing (Art. 18 GDPR), a right to data portability (Art. 20 GDPR) and a right to object to processing (Art. 21 GDPR). We also ensure your rights in accordance with Art. 22 GDPR. You or your data in our area of responsibility are therefore not subject to decisions based solely on automated processing – including profiling. You also have the right to lodge a complaint with a supervisory authority at any time (Art. 77 GDPR). Furthermore, you have the right to withdraw your consent with effect for the future (Art. 7 para. 3 GDPR).

4 Data protection officer

If you would like information about the processing of your personal data in connection with Facebook or wish to assert your rights as a data subject in this context, we would like to point out that the most effective way to do this is to address your request directly to Facebook. You can contact Facebook’s data protection officer at the following link

https://www.facebook.com/help/contact/540977946302970

possible.

If you wish to make use of your rights as a data subject, please contact our external data protection officer at the following e-mail address

datenschutz@auren.de

and tell us about your specific concern in as much detail as possible. We will be happy to forward your request to Facebook, as Facebook has access to the relevant user data and can take measures in accordance with your user rights.

Further information on data protection can be found in the privacy policy of the Auren Deutschland website.

Status: 01.04.2024

III Privacy policy of Auren Germany for Instagram

This privacy policy applies in addition to our existing privacy policy, in which you will find all specific information on how we process your personal data in principle and in the context of your website visit.

We use under

https://www.instagram.com/aurendeutschland

the Instagram company profile of the provider Meta Platforms Ireland Ltd (“Facebook”) in order to inform you about our offers with photos and videos. We would like to point out that your data may be processed outside the European Union (EU). The processing of personal data outside the EU harbours fundamental risks with regard to the enforcement of the rights of data subjects and the protection of general data protection objectives.

1 Responsible person

1.1 Instagram

Responsible for the processing of your data, insofar as these are processed exclusively by Instagram, is

Meta Platforms Ireland Ltd.
4 Grand Canal Square
Dublin 2
Ireland
impressum@support.instagram.com
Fax: +1 650 543 5340

1.2 Auren Germany

Responsible for the processing of your data, insofar as these are processed exclusively by Auren Deutschland, is

Auren Deutschland GbR

Rotebühlplatz 23,

70178 Stuttgart

Phone: +49 (0) 711 997868-0

E-mail: info@auren.de

1.3 Jointly responsible for processing

Insofar as your transmitted data is processed jointly by Facebook and Auren Deutschland and both decide on the purposes and means of processing, Metaverlag and Auren Deutschland are jointly responsible within the meaning of Art. 26 GDPR.

By operating our Instagram company profile, we enable Facebook to process your data, which is made available to us in the form of statistics via the Instagram Insights analytics service. For this reason – in connection with the ruling of the European Court of Justice of 5 June 2018 (Ref.: C-210/16) on the existence of joint responsibility for the operation of a Facebook fan page and the use of Facebook’s own analysis service – we also assume joint responsibility for our Instagram company profile and the use of Instagram Insights. However, Facebook does not currently provide an agreement on joint responsibility in accordance with Art. 26 GDPR, in which the data protection obligations of each controller can be defined and delimited from each other.

(https://www.facebook.com/legal/terms/page_controller_addendum).

2 Data processing with Instagram

2.1 Operation of an Instagram company profile

We use our Instagram company profile to provide you with news about our offers and to get in touch with you. For example, if you comment on our posts, we process the content of your comment and any other data that you share with us or that is transmitted during your Instagram activity. Depending on the privacy settings of your user profile, we may also have access to further information about your user profile and your Instagram activities (e.g. “likes”).

Every time you access our Instagram company profile, your personal data (e.g. IP address; browser data; operating system and device; websites visited; date and time of access, etc.) is processed by Facebook and cookies are set. However, we have no influence on the data collected and the data processing, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods or the deletion of the data collected. This enables Facebook to use your data to create cross-device user profiles for the purposes of advertising, market research and/or customising the design of its websites. Such use may take place even if you do not have an Instagram account or are not logged in there. If you are logged in to Instagram, your data will be directly assigned to your existing Instagram profile and, if applicable, publicly shared with your contacts.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the external presentation and communication with you.

2.2 Use of Instagram Insights

The processing of personal data in the context of the use of Instagram takes place with Instagram Insights and also includes processing purposes for market research, advertising and the collection of statistical data. The usage profiles can in turn be used, for example, to place adverts inside and outside Instagram or Facebook that presumably correspond to your interests. Cookies are usually stored on your device to record your user behaviour and to create and store user profiles. For example, usage profiles can be created from your usage behaviour for certain posts, stories, IGTV videos, reels, live videos and your resulting interests. Furthermore, data may also be stored in the user profiles regardless of the devices you use (especially if you are a member of Instagram or Facebook and are logged in to these platforms). However, even if you do not have an Instagram profile or are not logged into it during your visit to our company profile, Facebook can assign this data to a user profile. Cookies remain on your end device until you delete them.

Data from Instagram Insights is only available to us in anonymised form, so that we can only analyse the general user behaviour of visitors to our Instagram profile. However, this does not allow us to draw conclusions about individual users.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in analysing the reach and effectiveness of our Instagram activities in order to optimise our online offering on this basis.

3. Further information

For a detailed description of the respective processing, the possibilities of objection (opt-out) and legal bases, we refer to the following linked information on data protection from Instagram or Facebook:

Information about Instagram Insights:

https://www.facebook.com/help/instagram/788388387972460

Privacy policy:

https://www.facebook.com/about/privacy

and https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram help section&bc[1]=Guidelines%20and%20messages

Opt-out and customisation options:

https://www.facebook.com/help/instagram/2885653514995517?locale=de

and

https://help.instagram.com/615366948510230

Legal basis of the processing:

https://www.facebook.com/about/privacy/legal_bases

and

https://de-de.facebook.com/policy.php

4. Rights of data subjects

We draw your attention to your rights as a data subject within the meaning of Art. 13 et seq. GDPR. In particular, you have a right of access (Art. 15 GDPR), a right to rectification (Art. 16 GDPR), a right to erasure (Art. 17 GDPR), a right to restriction of processing (Art. 18 GDPR), a right to data portability (Art. 20 GDPR) and a right to object to processing (Art. 21 GDPR). We also ensure your rights in accordance with Art. 22 GDPR. You or your data in our area of responsibility are therefore not subject to decisions based solely on automated processing – including profiling. You also have the right to lodge a complaint with a supervisory authority at any time (Art. 77 GDPR). Furthermore, you have the right to withdraw your consent with effect for the future (Art. 7 para. 3 GDPR).

5 Data protection officer

If you would like information about the processing of your personal data in connection with Instagram or Facebook or wish to assert your rights as a data subject in this context, we would like to point out that the most effective way to do this is to address your request directly to Facebook. You can contact Facebook’s data protection officer at the following link

https://www.facebook.com/help/contact/540977946302970

possible.

If you wish to make use of your rights as a data subject, please contact our data protection officer at the following e-mail address

datenschutz@auren.de

and tell us about your specific concern in as much detail as possible. We will be happy to forward your request to Facebook, as Facebook has access to the relevant user data and can take measures in accordance with your user rights.

Further information on data protection can be found in the privacy policy of the Auren Deutschland website.

Status: 01.04.2024

IV. Privacy policy of Auren Germany for YouTube

We use under

https://www.youtube.com/channel/UC62-p2T3He8ccf2s-vHfo7g

the YouTube channel of the provider Google Ireland Limited (“Google”) and would like to point out that your data may be processed outside the European Union (EU). The processing of personal data outside the EU harbours fundamental risks with regard to the enforcement of data subjects’ rights and the safeguarding of the general data protection objectives.

1 Responsible person:

1.1 Google

This privacy policy applies in addition to our existing privacy policy, in which you will find all specific information on how we process your personal data in principle and in the context of your website visit.

Responsible for the processing of your data, insofar as these are processed exclusively by Google, is

Google Ireland Limited
Gordon House, Barrow Street
Dublin 4
Ireland

Phone: +353 1 543 1000
Fax: +353 1 686 5660
E-mail: support-Deutschland@google.com

1.2 Auren Germany

Responsible for the processing of your data, insofar as these are processed exclusively by Auren Deutschland, is

Auren Deutschland GbR

Rotebühlplatz 23,

70178 Stuttgart

Phone: +49 (0) 711 997868-0

E-mail: info@auren.de

1.3 Jointly responsible for processing

Insofar as your transmitted data is processed jointly by Google and Auren Germany and both decide on the purposes and means of processing, Google and Auren Germany are jointly responsible within the meaning of Art. 26 GDPR.

By operating our YouTube channel, we enable Google to process your data, which is made available to us in the form of statistics via the YouTube Analytics analysis service. For this reason – in connection with the judgement of the European Court of Justice of 5 June 2018 (Ref.: C-210/16) on the existence of joint responsibility for the operation of a Facebook fan page and the use of Facebook’s own analytics service – we also assume joint responsibility for our YouTube channel and the use of YouTube Analytics.

However, Google does not currently provide an agreement on joint responsibility in accordance with Art. 26 GDPR, in which the data protection obligations of each controller can be defined and delimited from each other.

2 Data processing with YouTube

2.1 Operation of a YouTube channel

We use our YouTube channel to inform you with videos about our offers and to get in touch with you. For example, if you comment on our posts, we process the content of your comment and any other data that you share with us or that is transmitted during your YouTube activity. Depending on the privacy settings of your user profile, we may also have access to further information about your user profile and your YouTube activities (e.g. posts and “liked videos”).

Every time you access our YouTube channel, your personal data (e.g. IP address; browser data; operating system and device; websites visited; date and time of access, etc.) is processed by Google and cookies are set. However, we have no influence on the data collected and the data processing, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods or the deletion of the data collected. This enables Google to use your data to create cross-device user profiles for the purposes of advertising, market research and/or the customised design of its websites. Such use may also take place if you do not have a YouTube or Google account or are not logged in there. If you are logged in to YouTube or Google, your data will be assigned directly to your existing YouTube or Google account and, if applicable, publicly shared with your contacts.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the external presentation and communication with you.

2.2 Use of YouTube on the Auren Germany website

The Auren Deutschland website integrates YouTube videos from the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), which can be played directly from our website. These YouTube videos are all integrated in “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will your data be transmitted.

Use of YouTube Analytics

The processing of personal data as part of the operation of our YouTube channel takes place with YouTube Analytics and also includes processing purposes for market research, advertising and the collection of statistical data. The user profiles can in turn be used, for example, to place adverts within and outside the Google advertising network that presumably correspond to your interests. Cookies are usually stored on your device to record your user behaviour and to create and store user profiles. For example, user profiles can be created from your user behaviour in relation to certain videos and comments and your resulting interests. Furthermore, data can also be stored in the user profiles independently of the devices you use (especially if you have an account with YouTube or Google and are logged in to these platforms). However, even if you do not have a YouTube or Google account or are not logged into it during your visit to our YouTube channel, Google can assign this data to a user profile. Cookies remain on your end device until you delete them.

Data from YouTube Analytics is only available to us in anonymised form, meaning that we can only analyse the general user behaviour of visitors to our YouTube channel. However, this does not allow us to draw conclusions about individual users.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in analysing the reach and effectiveness of our YouTube activities in order to optimise our online offering on this basis.

Further information

For a detailed description of the respective processing, we refer to the following linked information on data protection from YouTube or Google:

Information about YouTube Analytics:

https://developers.google.com/youtube/analytics

 and

https://support.google.com/youtube/topic/9257532?hl=en&ref_topic=9257610

Terms of use:

https://www.youtube.com/static?gl=DE&template=terms&hl=de

Privacy policy:

https://policies.google.com/privacy

and

https://kids.youtube.com/t/privacynotice

Use of cookies:

https://policies.google.com/technologies/cookies?hl=de&gl=de

Opt-out and customisation options:

https://support.google.com/youtube/answer/9487666?hl=de

and

https://www.youtube.com/intl/de_be/howyoutubeworks/user-settings/ad-settings/

Data protection aids / privacy settings for YouTube:

https://support.google.com/youtube/answer/9315727?hl=de&ref_topic=9386940

and

https://support.google.com/policies/answer/9581826?p=privpol_privts&hl=de&visit_id=637217551183067910-377434558&rd=1

3 Rights of data subjects

We draw your attention to your rights as a data subject within the meaning of Art. 13 et seq. GDPR. In particular, you have a right of access (Art. 15 GDPR), a right to rectification (Art. 16 GDPR), a right to erasure (Art. 17 GDPR), a right to restriction of processing (Art. 18 GDPR), a right to data portability (Art. 20 GDPR) and a right to object to processing (Art. 21 GDPR). We also ensure your rights in accordance with Art. 22 GDPR. You or your data in our area of responsibility are therefore not subject to decisions based solely on automated processing – including profiling. You also have the right to lodge a complaint with a supervisory authority at any time (Art. 77 GDPR). Furthermore, you have the right to withdraw your consent with effect for the future (Art. 7 para. 3 GDPR).

4 Data protection officer

If you would like information about the processing of your personal data in connection with YouTube or Google or wish to assert your rights as a data subject in this context, we would like to point out that the most effective way to do this is to address your request directly to Google. You can contact Google’s data protection officer via the link https://support.google.com/policies/contact/general_privacy_form.

If you wish to make use of your rights as a data subject, please contact our data protection officer at the following e-mail address

datenschutz@auren.de

and tell us about your specific concern in as much detail as possible. We will be happy to forward your request to Google, as Google has access to the relevant user data and can take measures in accordance with your user rights.

Further information on data protection can be found in the privacy policy of the Auren Deutschland website.

Status: 01.04.2024

V. Privacy policy of Auren Germany for Xing

This privacy policy applies in addition to our existing privacy policy, in which you will find all specific information on how we process your personal data in principle and in the context of your website visit.

We use under

https://www.xing.com/pages/aurendeutschland

a Xing company profile of the provider New Work SE (“New Work”) and would like to point out that your data may be processed outside the European Union (EU). The processing of personal data outside the EU harbours fundamental risks with regard to the enforcement of data subjects’ rights and the protection of general data protection objectives.

1 Responsible person

1.1 New Work

Responsible for the processing of your data, insofar as these are processed exclusively by New Work, is

New Work SE
Dammtorstraße 30
20354 Hamburg
Germany

Phone: +49 40 419 131-0
Fax: +49 40 419 131-11
E-mail: info@xing.com

1.2 Auren Germany

Responsible for the processing of your data, insofar as these are processed exclusively by Auren Deutschland, is

Auren Deutschland GbR

Rotebühlplatz 23,

70178 Stuttgart

Phone: +49 (0) 711 997868-0

E-mail: info@auren.de

1.3 Jointly responsible for processing

Insofar as your transmitted data is processed jointly by New Work and Auren Germany and both decide on the purposes and means of processing, New Work and Auren Germany are jointly responsible within the meaning of Art. 26 GDPR. By operating our Xing company profile, we enable New Work to process your data, which is made available to us via analysis functions (e.g. click path) in the form of statistics. For this reason – in connection with the judgement of the European Court of Justice of 5 June 2018 (Ref.: C-210/16) on the existence of joint responsibility for the operation of a Facebook fan page and the use of Facebook’s own analysis service – we also assume joint responsibility for our Xing company profile and the use of analysis functions. However, New Work does not currently provide an agreement on joint responsibility in accordance with Art. 26 GDPR, in which the data protection obligations of each controller can be defined and delimited from each other.

2 Data processing with Xing

2.1 Operation of a Xing company profile

We use our Xing company profile to provide you with news about our offers and to get in touch with you. For example, if you comment on our posts, we process the content of your comment and any other data that you share with us or that is transmitted during your Xing activity. Depending on the privacy settings of your user profile, we may also have access to further information about your user profile and your Xing activities (e.g. posts).

Each time you access our Xing company profile, your personal data (e.g. IP address; browser data; operating system and device; websites visited; date and time of access, etc.) is processed by New Work and cookies are set. However, we have no influence on the data collected and the data processing, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods or the deletion of the data collected. This enables New Work to use your data to create cross-device user profiles for the purposes of advertising, market research and/or customised design of its websites. Such use may also take place if you do not have an account with Xing or are not logged in there. If you are logged in to Xing, your data will be directly assigned to your existing Xing account and, if applicable, publicly communicated to your contacts.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the external presentation and communication with you.

2.2 Use of Xing analysis functions

The processing of personal data as part of the operation of our Xing company profile takes place with analysis functions (e.g. click path) and also includes processing purposes for market research and the collection of statistical data. This data can in turn be used, for example, to identify valuable business contacts or potential employees. Cookies are usually stored on your device to record your user behaviour and to create and store user profiles. For example, usage profiles can be created from your usage behaviour for certain comments and your resulting interests. Furthermore, data can also be stored in the user profiles independently of the devices you use (especially if you have a Xing account and are logged in to this platform). However, even if you do not have a Xing profile or are not logged into it during your visit to our company profile, Xing can assign this data to a user profile. Cookies remain on your end device until you delete them.

Data from Xing analysis functions is only available to us in anonymised form, so that we can only analyse the general user behaviour of visitors to our Xing company profile. However, this does not allow us to draw conclusions about individual users.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in analysing the reach and effectiveness of our Xing activities in order to optimise our online offering on this basis.

2.3 Further information

For a detailed description of the respective processing, we refer to the following linked information on data protection at New Work:

Terms of use:

https://www.xing.com/terms

Privacy policy:

https://privacy.xing.com/de/datenschutzerklaerung

and

https://privacy.xing.com/de/datenschutzerklaerung/druckversion

Use of cookies:

https://faq.xing.com/de/sicherheit/was-sind-cookies-und-warum-brauche-ich-sie-beim-einloggen

3 Rights of data subjects

We draw your attention to your rights as a data subject within the meaning of Art. 13 et seq. GDPR. In particular, you have a right of access (Art. 15 GDPR), a right to rectification (Art. 16 GDPR), a right to erasure (Art. 17 GDPR), a right to restriction of processing (Art. 18 GDPR), a right to data portability (Art. 20 GDPR) and a right to object to processing (Art. 21 GDPR). We also ensure your rights in accordance with Art. 22 GDPR. You or your data in our area of responsibility are therefore not subject to decisions based solely on automated processing – including profiling. You also have the right to lodge a complaint with a supervisory authority at any time (Art. 77 GDPR). Furthermore, you have the right to withdraw your consent with effect for the future (Art. 7 para. 3 GDPR).

4 Data protection officer

If you would like information about the processing of your personal data in connection with Xing or wish to assert your rights as a data subject in this context, we would like to point out that the most effective way to do this is to address your request directly to New Work. You can contact New Work’s data protection officer at the e-mail address Datenschutzbeauftragter@xing.com.

If you wish to make use of your rights as a data subject, please contact our data protection officer at the following e-mail address

datenschutz@auren.de

and tell us about your specific concern in as much detail as possible. We will be happy to forward your request to New Work, as New Work has access to the relevant user data and can take measures in accordance with your user rights.

Further information on data protection can be found in the privacy policy of the Auren Deutschland website.

Status: 01.04.2024

VI Privacy policy of Auren Germany for LinkedIn

This privacy policy applies in addition to our existing privacy policy, in which you will find all specific information on how we process your personal data in principle and in the context of your website visit.

https://www.linkedin.com/company/auren-deutschland/

a LinkedIn company profile of the provider LinkedIn Ireland Unlimited Company (“LinkedIn”) and would like to point out that your data may be processed outside the European Union (EU). The processing of personal data outside the EU harbours fundamental risks with regard to the enforcement of data subjects’ rights and compliance with the general data protection objectives.

1 Jointly responsible for processing

LinkedIn Ireland Unlimited Company
Wilton Place,
Dublin 2, Ireland

and

Auren Deutschland GbR

Rotebühlplatz 23,

70178 Stuttgart

Phone: +49 (0) 711 997868-0

E-mail: info@auren.de

LinkedIn assumes responsibility for the processing of Page Insights data to fulfil the obligations arising from the GDPR. This includes the fulfilment of (1) necessary information obligations, (2) data subject rights that can be asserted against LinkedIn, (3) reporting obligations in the event of data breaches and (4) ensuring appropriate technical and organisational measures for secure processing.

Of course, you can also assert your request for information or other rights against us. In this case, we will be happy to forward your request to LinkedIn, as LinkedIn has access to the relevant user data and can take measures in accordance with your user rights.

2 Data processing with LinkedIn

2.1 Operation of a LinkedIn company profile

We use our LinkedIn company profile to provide you with news about our offers and to get in touch with you. For example, if you comment on our posts, we process the content of your comment and any other data that you share with us or that is transmitted during your LinkedIn activity. Depending on the privacy settings of your user profile, we may also have access to further information about your user profile and your LinkedIn activities (e.g. posts).

Each time you access our LinkedIn company profile, your personal data (e.g. IP address; browser data; operating system and device; websites visited; date and time of access, etc.) is processed by LinkedIn and cookies are set. However, we have no influence on the data collected and the data processing, nor are we aware of the full extent of the data collection, the purposes of the processing, the storage periods or the deletion of the data collected. This enables LinkedIn to use your data to create cross-device user profiles for the purposes of advertising, market research and/or customising the design of its websites. Such use may take place even if you do not have a LinkedIn account or are not logged in there. If you are logged in to LinkedIn, your data will be directly assigned to your existing LinkedIn profile and, if applicable, publicly shared with your contacts.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the external presentation and communication with you.

2.2 Use of Page Insights

The processing of personal data as part of the operation of our LinkedIn company profile takes place with the Page Insights analysis service and also includes processing purposes for market research, advertising and the collection of statistical data. This data can in turn be used, for example, to identify valuable business contacts or potential employees. Cookies are usually stored on your device to record your user behaviour and to create and store user profiles. For example, usage profiles can be created from your usage behaviour for certain posts and your resulting interests. Furthermore, data can also be stored in the user profiles independently of the devices you use (especially if you are a member of LinkedIn and are logged in to these platforms). However, even if you do not have a LinkedIn profile or are not logged into it during your visit to our company profile, LinkedIn can assign this data to a user profile. Cookies remain on your end device until you delete them.

Data from Page Insights is only available to us in anonymised form, so that we can only analyse the general user behaviour of visitors to our LinkedIn company profile. However, this does not allow us to draw conclusions about individual users.

Our legal basis for processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in analysing the reach and effectiveness of our LinkedIn activities in order to optimise our online offering on this basis.

2.3 Further information

For a detailed description of the respective processing, please refer to the LinkedIn data protection information linked below:

Agreement on joint responsibility with LinkedIn:

https://legal.linkedin.com/pages-joint-controller-addendum

Terms of use:

https://legal.linkedin.com/linkedin-pages-terms

Privacy policy:

https://de.linkedin.com/legal/privacy-policy?

Use of cookies:

https://www.linkedin.com/legal/cookie-policy

Opt-out options:

https://www.linkedin.com/psettings/guest-controls

Safety Centre:

https://safety.linkedin.com/

Help Centre “Data and Privacy”:

https://www.linkedin.com/help/linkedin/topic/104742?trk=hc-hp-recommendedTopics

3 Rights of data subjects

We draw your attention to your rights as a data subject within the meaning of Art. 13 et seq. GDPR. In particular, you have a right of access (Art. 15 GDPR), a right to rectification (Art. 16 GDPR), a right to erasure (Art. 17 GDPR), a right to restriction of processing (Art. 18 GDPR), a right to data portability (Art. 20 GDPR) and a right to object to processing (Art. 21 GDPR). We also ensure your rights in accordance with Art. 22 GDPR. You or your data in our area of responsibility are therefore not subject to decisions based solely on automated processing – including profiling. You also have the right to lodge a complaint with a supervisory authority at any time (Art. 77 GDPR). Furthermore, you have the right to withdraw your consent with effect for the future (Art. 7 para. 3 GDPR).

4 Data protection officer

If you would like information about the processing of your personal data in connection with LinkedIn or wish to assert your rights as a data subject in this context, we would like to point out that the most effective way to do this is to address your request directly to LinkedIn. You can contact LinkedIn’s data protection officer at the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO

If you wish to make use of your rights as a data subject, please contact our data protection officer at the following e-mail address

datenschutz@auren.de

 and tell us about your specific concern in as much detail as possible. We will be happy to forward your request to LinkedIn, as LinkedIn has access to the relevant user data and can take measures in accordance with your user rights.

Further information on data protection can be found in the privacy policy of the Auren Deutschland website.

Status: 01.04.2024

VII Privacy policy of Auren Germany for reCAPTCHA

This privacy policy applies in addition to our existing privacy policy, in which you will find all specific information on how we process your personal data in principle and in the context of your website visit.

Auren Deutschland would like to protect you and its own homepage. To make this possible, Auren Deutschland uses reCAPTCHA from Google Inc.

With reCAPTCHA, Auren Deutschland can determine whether our homepage is actually being used by a robot or malware. reCAPTCHA from Google is a captcha service designed to protect websites from spam software and misuse by non-human visitors. When reCAPTCHA is used, data is transmitted to Google. This is used to determine whether the user is really a human being.

In doing so, reCAPTCHA collects personal data from users in order to check whether the usage actually originates from users.

In Europe, Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, is responsible for Google services.

The IP address and other data that Google requires for the use of the reCAPTCHA service will be sent to Google. It is standard practice that IP addresses within the EU or other signatory states to the Agreement on the European Economic Area are almost always truncated before this data is forwarded to the servers in the USA.

The IP address will not be associated with any other data held by Google unless you sign in with an existing Google account while using reCAPTCHA.

 reCAPTCHA first checks whether Google cookies from other Google services are already present. Then reCAPTCHA places an additional cookie in the browser and determines an inventory of the respective browser window.

The following are examples of data that, to the best of our knowledge, are processed by Google. It should be noted that this list of data is not exhaustive:

  • IP address
  • Cookies
  • Information about the operating system
  • Using the mouse and keyboard
  • date
  • Language settings
  •  Screen resolution
  • All Javascript objects

The following cookies are used by reCAPTCHA:

NamePurposeCancellationValue
ANIDAdvertising270 daysU7j1v3dZa3316859514920xgZFmiqWppRWKOr
1P_JARThis cookie collects statistics on website usage and measures conversions. A conversion occurs, for example, when a user becomes a buyer. The cookie is also used to display relevant adverts to users. The cookie can also be used to prevent a user from receiving the same advert more than once.30 days 2019-5-14-12
CONSENTThe cookie stores the status of a user’s consent to various Google services. CONSENT is also used for security purposes to check users, prevent fraudulent login information and protect user data from unauthorised attacks.Not clearly definedYES+AT.de+20150628-20-0
DVThe cookie is used by Google Analytics for personalised advertising. Information is collected in anonymised form and user distinctions are made. 10 minutesgEAABBCjJMXcI0dSAAAANbqc331685951492-4
NIDNID is used to customise advertisements.180 days0WmuWqy331685951492zILzqV_nmt3sDXwPeM5Q
IDEThis cookie is used to recognise and forward the actions of a user on the homepage in connection with advertising. IDE is stored under the domain doubleclick.net and is provided by the company DoubleClick,12 monthsWqTUmlnmv_qXyi_DGNPLESKnRNrpgXoy1K-pAZtAkMbHI-331685951492-8

This list is based on the reCAPTCHA demo version from Google at

https://www.google.com/recaptcha/api2/demo.

The cookies listed require a unique identifier for tracking purposes.

This list does not claim to be exhaustive.

If no data is to be transmitted to Google, the user must log out of Google completely and delete all Google cookies before visiting our website or using the reCAPTCHA software.

The data is automatically transmitted to Google as soon as our site is accessed. To delete this data again, you must contact Google support at

https://support.google.com/?hl=de&tid=331685951492

To be contacted.

When using our website, the user agrees that Google LLC and its representatives automatically collect, process and use data.

When using this tool, data may also be stored and processed outside the EU. Most third countries are not considered secure under current European data protection law. Data may not simply be transferred to insecure third countries, stored and processed there unless there are suitable guarantees (such as EU standard contractual clauses).

If consent has been given for Google reCAPTCHA to be used, the legal basis for the corresponding data processing is this consent. According to Art. 6 para. 1 lit. A GDPR (consent), this consent constitutes the legal basis for the processing of personal data, as may occur when Google reCAPTCHA is used.

Auren Deutschland also has a legitimate interest in using Google reCAPTCHA to improve our online service and make it more secure. The legal basis is Art. 6 para. 1 lit. F GDPR.

Google also processes your data in the USA, among other places

The information generated by the cookies may be transferred to a server in the USA and stored there. From a data protection perspective, the USA is a third country for which the EU Commission has issued an adequacy decision, as explained above. This certifies that the USA has a level of data protection comparable to that of the EU/EEA.

Further information on reCAPTCHA can be found at

https://developers.google.com/recaptcha/.

And

https://www.google.com/intl/de/policies/privacy/.

To find.

VIII. Privacy policy for job applications

This privacy notice for job applicants informs you about how Auren Germany processes your personal data when you apply for a job advertised by us. It also informs you about your data protection rights, including the right to object to some of the processing that Auren Germany carries out.

This data protection declaration applies in addition to our existing data protection declaration, in which you will find all specific information on how we process your personal data in principle and in the context of your website visit or for non-application-specific topics.

1. Responsible

The controller for the processing of personal data within the meaning of Article 4(7) of the General Data Protection Regulation (GDPR) is

Auren Deutschland GbR

Rotebühlplatz 23,

70178 Stuttgart

Phone: +49 (0) 711 997868-0

E-mail: info@auren.de

If you have applied to another company, this company is initially the responsible party. However, due to the connections between the individual companies within the Auren Association as described above, Auren Deutschland GbR is initially named here as the responsible party.

2. Data collection

We collect and process the following categories of personal data as part of the selection process:

  • Contact details in your application profile (e.g. first and last name, country, e-mail, telephone number).
  • Information from the application form (including, for example, desired salary, your motivation, information on disability if applicable (only if relevant for the advertised position).
  • Application documents (including, for example, CV, cover letter, data on professional development, qualifications and language skills).
  • If applicable, references that you provide to us.

We may also include the above data about you from other sources, including external business partners, e.g. recruitment agencies. In addition, we may also use data that you have made public in professionally orientated social networks or that you have transmitted to us via other websites or obtained from other publicly accessible sources (only if the data is relevant to your professional life). The reason for this is to contact you about possible job offers or to check the accuracy of the information you have provided in your application documents.

3. Nature and purposes of the processing of personal data

Your personal data will be processed exclusively for the following purposes:

  • Initiation and establishment of the employment relationship
  • To contact you if you should be considered for an alternative position
  • If you have given us your consent to ask you about your satisfaction with the application process.
  • To contact you on the basis of your unsolicited application.
  • To send you personalised information about vacancies at Auren Germany in accordance with the consent you have given.

4. Legal basis

We collect and process your personal data in order to be able to offer advertised positions and carry out the selection process.

The legal basis for the cognitive performance test is Section 26 para. 1 in conjunction with para. para. 8 sentence 2 of the Federal Data Protection Act (BDSG) and § 22 para. 1 b) BDSG. The provision of your personal data as part of the application process is voluntary. However, the provision of personal data is necessary for the processing of your application or the conclusion of an employment contract with us.  The legal basis for the personality test is your consent in accordance with Section 26 (2) BDSG. Participation in the personality test is voluntary.

If we obtain information from your public profile on professional social networks, we base the processing on our legitimate interest in forming a basis for a decision to establish an employment relationship with you. The legal basis is Art. 6 para. 1 f) GDPR in conjunction with Art. 9 para. 2 e) GDPR.

If we invite you to participate in a survey about your satisfaction with the application process at Auren Germany, the relevant legal basis is your consent in accordance with § 26 BDSG in conjunction with Art. 6 para. 1 a GDPR. Your registration for the Job Agent, in which you receive personalised information about current job vacancies at Auren Germany, is also based on this legal basis.

Furthermore, we may process personal data about you if this is necessary for the defence of legal claims asserted against us in the application process. The legal basis for this is Art. 6 para. 1 b) and f) GDPR. The legitimate interest is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

5. Recipient of the data

We may transfer your personal data to companies affiliated with us, insofar as this is permitted within the scope of the purposes and legal bases set out above. For the data processing in our online application for job applications, Auren Germany has jointly determined the purposes and means of data processing. You can control the visibility of your application profile by requesting the deletion of your profile.

In addition, personal data may be processed on our behalf on the basis of contracts in accordance with Art. 28 GDPR, in particular by providers of systems for applicant management and applicant selection procedures. Personal data will not be transferred to third parties if there is no connection to the applicant management and selection process.

The transfers may involve the transfer of personal data to recipients outside the European Union / European Economic Area. Standard contractual clauses have been concluded with these external service providers, unless they are based in countries with an adequacy decision pursuant to Art. 45 GDPR.

In the event of a legal obligation, we reserve the right to disclose information about you if we are required to do so by lawful authorities or law enforcement agencies. The legal basis is Art. 6 (c) GDPR.

6. Your rights

6.1 Right to information

You have the right to information about the personal data stored about you in our company. To do so, please contact the controller named above or the external data protection officer.

6.2 Right to rectification or erasure

You can correct your personal data by sending an e-mail to

datenschutz@auren.de

or make the correction yourself in your application profile. You can also request the deletion of your data under certain conditions. 

6.3 Right to restriction of processing

Under certain circumstances, you can request the restriction of the processing of your data, e.g. if the accuracy of your data is disputed and needs to be verified by us. You can adjust the visibility of your application profile at any time.

6.4 Right to data portability

Under certain conditions, the data will be made available to you in a structured, commonly used and machine-readable format.

6.5 Right to object to the processing

You can object to the processing of your data on the basis of our legitimate interests.

Furthermore, you have the right to lodge a complaint with a supervisory authority at any time.

7. Retention period

We store your personal data for a period of 6 months after your last registration in your application profile. This is necessary for the burden of proof in proceedings under the General Equal Treatment Act (AGG). We also store your data for this period in the event of an alternative job advertisement for which you are a suitable candidate.

8. Objection to our withdrawal of your consent to the processing of your data

If you have given your consent to the processing of your data, you can revoke this at any time. This revocation only affects the permissibility of processing your personal data from the date of receipt.

Insofar as we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the fulfilment of a contract with you. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and will either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.