Privacy Policy

We are pleased about your interest in our website.
The protection of your personal data during collection, processing and use on the occasion of your visit to our website is an important concern for us. Your data is protected within the framework of the legal regulations.
Please take a moment to read the following information. It tells you how we handle your personal data, how and for what purpose this data is used, to whom we pass on this data and how we protect your personal data.
Your personality rights have the highest priority for us and we make every effort to protect and guarantee these rights.

The controller responsible for the processing of your personal data within the meaning of the European General Data Protection Regulation is:

Dr. Bittner Group GmbH
Podbielskistraße 386
30659 Hanover
Phone: 0800 88 44 66 88
Email: office@drbg.de

Data Protection Officer

If you have questions about data protection, our data protection officer will be happy to assist you at: datenschutz@drbg.de

Collection and processing of data

Every access to our website and every retrieval of a file stored on the website is logged. The storage serves internal system-related and statistical purposes.
The following are logged:

name of the retrieved file,
date and time of retrieval,
amount of data transferred,
message about successful retrieval,
operating system used,
browser and browser type,
the website from which the referral was made,
the internet service provider,
pages visited and
requesting domain.

In addition, the IP addresses of the requesting computers are logged. However, the controller does not draw any conclusions about a person.
This data is only required in order to display the contents of our website correctly, to permanently optimise the contents for you and to support criminal prosecution in the event of hacker attacks. The data is processed on the basis of our legitimate interest in accordance with Art. 6(1) subpara. 1 lit. f) GDPR. The processing of the data is necessary for the operation of the website.
The data is stored for as long as it is needed to fulfil the purpose and is then automatically deleted.

Rights of data subjects

In accordance with Art. 15 GDPR, you have the right to information about the processing of your personal data.
In addition, you are free to exercise your rights to rectification, erasure or, if erasure is not possible, restriction of processing and data portability in accordance with Articles 16–18, 20 GDPR. Should you wish to exercise this right, please contact our data protection officer.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority at any time. If you are of the opinion that the processing of your personal data does not comply with the data protection laws, we would kindly ask you to get in touch with our data protection officer.
You also have the right to object to the processing of your personal data at any time.

Protection of the stored data

We use technical and organisational security measures to protect the personal data you provide to us against manipulation, loss, destruction or access by unauthorised persons. Our security measures are continuously improved and adapted in line with the state of the art. It cannot be ruled out that data transmitted by you in unencrypted form may be viewed by third parties during transmission. It is pointed out that with regard to data transmission over the internet (e.g. when communicating by email), completely secure transmission cannot be guaranteed. Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL) over the internet.

Protection of minors

Consent to the processing of personal data can only be given by a person of legal age. For information society services, the consent of a child from the age of sixteen is permissible in accordance with Art. 8 GDPR.

Hosting

The contents of this website are hosted at IONOS SE.
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter IONOS). Further details can be found in the privacy policy of IONOS at https://www.ionos.de/terms-gtc/datenschutzerklaerung/ The use of IONOS takes place on the basis of Art. 6(1) lit. f) GDPR. We have a legitimate interest in the most reliable presentation of our website possible. If corresponding consent was requested, the processing takes place exclusively on the basis of Art. 6(1) lit. a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time. Furthermore, we have concluded a data processing agreement with the provider.

Email contact and telephone

On our website, it is possible to make contact via the email address provided. You can also contact us via the telephone number provided on the website. If you make use of these options, the personal data transmitted in the process is stored and collected and processed only for the purpose of processing and answering your enquiry.

Insofar as you contact us, you give your consent for the data processing in accordance with Art. 6(1) subpara. 1 lit. a) GDPR.
Should you be interested in an offer, your personal data will be processed for the purpose of initiating a contract in accordance with Art. 6(1) subpara. 1 lit. b) GDPR
If not provided, we are unfortunately unable to process your request.
Automated decision-making does not take place.

Your personal data is not passed on to external third parties.
A transfer of the personal data provided by you to a third country or an international organisation does not take place and is also not planned.

You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing carried out up to the withdrawal remains unaffected.
Your personal data, which you communicate to us, is stored by us for the duration of the processing of your request and retained until the expiry of the corresponding statutory periods.

Contact form

All your personal data and further information that you communicate to us via the contact form set up on our website is collected and processed only for the purpose of processing and answering your enquiries.
Insofar as you contact us, you give your consent for the data processing in accordance with Art. 6(1) subpara. 1 lit. a) GDPR.

Should you be interested in an offer, your personal data will be processed for the purpose of initiating a contract in accordance with Art. 6(1) subpara. 1 lit. b) GDPR.
Your data is forwarded to us by email via our provider. If not provided, we are unfortunately unable to make contact with you and process your request.
Automated decision-making does not take place.

You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing carried out up to the withdrawal remains unaffected.
Your personal data, which you communicate to us via the contact form, is stored by us for the duration of the processing of your request and retained until the expiry of the corresponding statutory periods.

Online application

The personal data transmitted by you is collected, processed and used for the purpose of deciding on the establishment of an employment relationship in accordance with Art. 6(1) subpara. 1 lit. b) GDPR. The provision of your personal data is necessary for handling the application process and for deciding on the establishment of an employment relationship. If not provided, we are unfortunately unable to consider you in the selection for filling the advertised position.
Automated decision-making does not take place.

We process the personal data transmitted by you exclusively in the application procedure. Your data is transmitted to us encrypted via so-called Transport Layer Security (TLS).

Your personal data is not passed on to external third parties. To assess your documents, these are forwarded to the responsible employees of the human resources department and to the responsible contact persons for whom the application is intended.

A transfer to a third country or an international organisation of the personal data provided by you does not take place and is also not planned

Your application documents are stored by us for the duration of the applicant procedure and retained beyond that for 3 months in order to be able to answer any questions from you. After this time has expired, the documents are deleted. Documents sent by post are returned or destroyed after the 3 months have expired. Insofar as employment in our company results, your application documents are transferred to your personnel file.

Only after your express written consent in accordance with Art. 6(1) subpara. 1 lit. a) GDPR do we store your data until revoked in order to be able to contact you in future regarding job offers within our company that are of interest to you.

You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing up to the withdrawal remains unaffected.

Cookies

Technically necessary cookies (session cookies)

On our website we use technical cookies in order to make the website more user-friendly. To use the full range of functions of our website, it is therefore necessary for technical reasons to allow the session cookies.

The purpose of using such cookies is to give you the opportunity to use the website in a simplified and more user-friendly way. It is therefore necessary that the browser can identify you even after a page change.

The data is not used to create a user profile of you. The legal basis for the use of technical cookies is Section 25(2) TDDDG. Use of the website without session cookies is not possible.

Cookies for analysis (tracking cookies)

In addition to the use of technical cookies, tracking cookies are used on this website. Cookies are text files that are stored on your computer and that enable an analysis of your use of the website. However, these collect and store the data exclusively in pseudonymous form. They are not used to identify you personally and are not combined with data about the bearer of the pseudonym. We use this information to determine the attractiveness of our website and to continuously improve its content.
The legal basis for the use of tracking cookies is the consent given by you in accordance with Section 25(1) TDDDG.
You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing up to the withdrawal remains unaffected.
You can adjust the cookie settings at any time.

Individual information about the cookies and analysis services used, as well as the purpose and the legal basis of the data processing, is also described in detail in the privacy policy.

Google Analytics

This website uses Google Analytics, a web analytics service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google"), which uses cookies. Cookies are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by cookies about your use of this website is generally transmitted to a Google server in the European Union (EU) or in the European Economic Area (EEA). However, since this website carries out IP anonymisation, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

In exceptional cases, the full IP address is transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google uses this information to evaluate your use of the website, to compile reports on website activity and to provide further services associated with website use and internet use to the website operator. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

The collection within the scope of this service only takes place after you have given your express consent. The legal basis for this is Art. 6(1) subpara. 1 lit. a) GDPR in conjunction with Section 25(1) TDDDG. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing up to the withdrawal remains unaffected.

The purpose of the collection is the evaluation of the use of our website. Furthermore, by using Google Analytics, we can create reports on website activity and thus improve our website. In addition to us, Google is to be named as the recipient of the data.

The data is deleted as soon as it is no longer needed for our recording purposes. You can prevent the collection of your data by Google Analytics at any time, even after giving your consent.

The data transfer by Google to the USA is based on the EU standard contractual clauses, details of which you can view here: https://privacy.google.com/businesses/controllerterms/mccs/. Further information can be found at: https://support.google.com/analytics/answer/6004245?hl=de

Google LLC is certified under the "EU-US Data Privacy Framework" (DPF). This is an agreement between the European Union and the USA that is intended to ensure that European data protection standards are observed when processing data in the USA. Every company that has received the DPF certification commits to complying with these data protection standards. Further detailed information on this can be found at the following link: https://www.dataprivacyframework.gov/participant/5780

Google Fonts

Our website uses Google Fonts for the integration of external fonts, a service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter: "Google").

The integration of Google Fonts takes place locally on our own server, so that no direct connection with Google's servers is established when visiting our website.
Insofar as data processing is carried out, this takes place for the purpose of the uniform presentation of fonts and icons. The legal basis is therefore our legitimate interest in the uniform presentation in accordance with Art. 6(1) subpara. 1 lit. f) GDPR.

Google Tag Manager

Our website uses Google Tag Manager, a service of Google Ireland Ltd. (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google"). This allows us to manage website tags via an interface. Google Tag Manager triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been carried out at domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager.

This data processing takes place on the basis of Art. 6(1) subpara. 1 lit. a) GDPR and Section 25(1) TDDDG, insofar as the consent within the meaning of the TDDDG relates to the setting of cookies or access to information on your device. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing up to the withdrawal remains unaffected.

There is a possibility that, within the scope of the use of this Google service, personal data is transferred to the USA to Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Further information about the collection and processing of your data by Google as well as your relevant data subject rights can be found in Google's privacy policy at: https://policies.google.com/privacy?hl=de

The data transfer by Google to the USA is based on the EU standard contractual clauses, details of which you can view here: https://privacy.google.com/businesses/controllerterms/mccs/
Further information can be found at: https://support.google.com/analytics/answer/6004245?hl=de

Web conferencing tools

We want to make communication with prospects, customers and users simpler and adapted to the current technical and practical reality. We therefore use conferencing tools for video and audio conferences. Which individual web conferencing tools we use can be found in the following section.

As a rule, data is first collected that represents metadata and technical data of the users and the conferences. Metadata includes, for example, the duration of the conference, the period of participation, the number of participants or the name and/or description of the meeting. Technical data is data such as the IP addresses and device and hardware information of the participants, such as MAC addresses, device and operating systems or information about peripheral devices and connection quality. With optional participation via a mobile phone, further connection data in addition to the telephone number may be stored. In addition, the collected data includes everything that you provide for the use of the service (in some cases optionally). Common data here is the name, telephone number, email address and further log and profile data.

During a meeting in a web conferencing tool, video and audio data recorded by your microphone/camera, as well as any content that can be uploaded (messages in chats, surveys and the like, as well as other files such as presentation documents), may be processed, logged or displayed. When optionally using the recording function of web conferences, this data may be stored permanently, including on the servers of the service providers.

However, we would like to point out that we generally have no influence on which data is collected. Accordingly, not providing the data mentioned may mean that it is not possible for you to participate in the web conference. Automated decision-making does not take place. Details on the processing of the data by the relevant services can be found in the privacy notices of the respective services, which are named in the following section.

We use the web conferencing tools to communicate with you in a simple, effective and direct way. The legal basis for this is our legitimate interest in accordance with Art. 6(1) subpara. 1 lit. f) GDPR. Where a contractual relationship exists, the use of such a service serves the purpose of providing a service, for which the legal basis of the processing is Art. 6(1) subpara. 1 lit. b) GDPR. The same legal basis applies to registration for and participation in an online webinar offered by us. If your consent has been obtained, the legal basis for the processing of the data is Art. 6(1) lit. a) GDPR and Section 25(1) TDDDG, insofar as the consent within the meaning of the TDDDG relates to the setting of cookies or access to information on your device. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing carried out up to the withdrawal remains unaffected.

We have no influence on the storage period of the data stored by the service providers for their own purposes. If you request us to delete it or the purpose for storing the data ceases to apply, we will delete your data unless mandatory legal provisions prevent this. Cookies stored by you remain on your device until you delete them.

Microsoft Teams

We use the web conferencing tool Microsoft Teams. This is an application of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; hereinafter: "Microsoft").

The personal data transmitted by you is collected and processed exclusively for the purpose of conducting external and internal video conferences within the framework of a contractual relationship in accordance with Art. 6(1) subpara. 1 lit. b) GDPR.

If no contractual relationship exists, the legal basis is Art. 6(1) subpara. 1 lit. f) GDPR. Our interest here lies in the effective communication and exchange of those involved.

The provision of your personal data is necessary for conducting the video conferences. If not provided, it is unfortunately not possible for you to participate. Automated decision-making does not take place.

Personal data processed in connection with video conferences is generally not passed on to third parties unless it is specifically intended for disclosure.

Microsoft's privacy policy can be found at: https://privacy.microsoft.com/de-de/privacystatement

Microsoft Corporation is certified under the "EU-US Data Privacy Framework" (DPF). This is an agreement between the European Union and the USA that is intended to ensure that European data protection standards are observed when processing data in the USA. Every company that has received the DPF certification commits to complying with these data protection standards. Further detailed information on this can be found at the following link: https://www.dataprivacyframework.gov/participant/6474

The data transfer to the USA is also based on the EU standard contractual clauses, details of which you can view here: https://docs.microsoft.com/de-de/compliance/regulatory/offering-EU-Model-Clauses