Privacy Policy

With this Privacy Policy, Academia Holding AG (hereinafter referred to as “we”, “us” or “our”) informs users of our online services about the processing of personal data in connection with the use of our website. Our online services include this website and our social media profiles (hereinafter referred to as the “Online Services”). The Online Services are operated by us and serve to present the entire Academia group of companies externally (hereinafter referred to as the “Academia Group”).

We would like to point out that individual content within our Online Services, in particular representations of employees or job advertisements, may involve personal data for which other companies within the group of companies, in particular subsidiaries and affiliated companies, may be responsible under data protection law. In such cases, processing is carried out on the basis of a legitimate interest pursuant to Art. 6 para. 1 lit. f) of the EU General Data Protection Regulation (GDPR), which consists in the group-wide external presentation and uniform corporate communication.

I. General Information on Data Processing

With this Privacy Policy, we, as the Academia Group, inform you which personal data (hereinafter referred to as “data”)

we or, where applicable, companies of the Academia Group process about you, for which purposes and to what extent.

The operator and generally responsible controller for the processing of data in connection with the Online Services is:

Controller:

ACADEMIA Holding AG
Landwehrstraße 2
80336 Munich
info@academia-gruppe.de

For data protection questions or concerns, please contact:
dsb@academia-gruppe.de

Definitions

With regard to the data protection terms used in this Privacy Policy, we refer to the definitions set out in Art. 4 GDPR. The most relevant terms are briefly explained below.

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter referred to as the “data subject”). A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, an online identifier, such as a cookie, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
“Processing” means any operation or set of operations performed on data, whether or not by automated means. The term is broad and includes virtually any handling of data, such as collecting, recording, organising, storing, adapting, retrieving, transmitting, combining, restricting, erasing or destroying personal data.
“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing data.
“Data subjects” within the meaning of the processing of personal data in connection with these Online Services are the visitors and users of our website.

Relevant Legal Bases

Below you will find an overview of the legal bases under the GDPR on which we process data. Please note that, in addition to the provisions of the GDPR, national data protection regulations, for example those of your or our country of residence or registered office, may also apply. Where more specific legal bases are relevant in individual cases, we will inform you separately in this Privacy Policy.

Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR) – Where you have consented to data processing, such processing is carried out on the basis of Art. 6 para. 1 sentence 1 lit. a) GDPR. If special categories of personal data within the meaning of Art. 9 para. 1 GDPR are processed, the processing is based on Art. 9 para. 2 lit. a) GDPR. In the case of express consent to the transfer of personal data to a third country, the processing is additionally based on Art. 49 para. 1 lit. a) GDPR. If you have also consented to the storage of cookies or access to information on your device, for example by means of device fingerprinting, the processing is additionally based on Section 25 para. 1 of the German Telecommunications Digital Services Data Protection Act (TDDDG). Consent may be withdrawn at any time.
Performance of a contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR) – Where the processing of your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, it is carried out on the basis of Art. 6 para. 1 sentence 1 lit. b) GDPR. This applies, for example, if you send enquiries about our services by email, register for an event or otherwise submit contract-related enquiries to us. In these cases, we require your data in order to process your enquiry, prepare a contract or provide the contractual service.
Legal obligation (Art. 6 para. 1 sentence 1 lit. c) GDPR) – We process your data where this is necessary to comply with legal obligations. This may be the case, for example, where we are legally required to store, retain or disclose data to authorities, for instance under tax or commercial law requirements or in order to fulfil disclosure and documentation obligations.
Legitimate interest (Art. 6 para. 1 sentence 1 lit. f) GDPR) – Your data may also be processed on the basis of our legitimate interest. This is the case where the processing is necessary to safeguard our legitimate interests and your interests or fundamental rights do not override them. A legitimate interest exists, for example, in the secure and uninterrupted provision of this website, the improvement of our Online Services or the defence of legal claims.

Overview of Processing Activities

Which data of users of our Online Services is processed in detail and how this is done depends largely on the functions and services used. The following categories of data, processing purposes and groups of data subjects may be relevant.

Categories of Data

Access and usage data (f.e. IP-address, time of access, and requested pages)
Meta, communication and procedural data (f.e. device information, browser type, language settings, and technical log data)
Cookies and similar technologies
Contact data (f.e. name, email address, and telephone number – f. e. when contacting us)

Data Subjects

Data subjects include visitors and users of our Online Services

Purposes of Processing

Provision and operation of our Online Services, including the display of content and functions
Optimisation of user-friendliness and technical improvement of the website
Management and response to enquiries, communication with users and processing of feedback
Operation of the information technology infrastructure, including hosting
Public relations and external communication, in particular via website content and social media platforms
Ensuring IT and data security, for example through logging, access controls and prevention of misuse
Maintaining business relationships, including contact management with customers, partners and interested parties
Safeguarding legitimate interests, f.e. to defend legal claims or for internal administration.

Security Measures

Taking into account the state of the art, implementation costs, the nature, scope, circumstances and purposes of processing as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk.

The following security measures should be mentioned in particular:

Redirect from HTTP to HTTPS: To secure data transmission, we use the HTTPS encryption protocol on our website. Any unencrypted HTTP request is automatically redirected to an encrypted HTTPS connection. This serves to protect transmitted content from unauthorised access by third parties.
TLS/SSL-Verschlüsselung (HTTPS): To protect user data transmitted via our Online Services, we use TLS/SSL encryption on our website. Secure Sockets Layer (SSL) is the standard technology for securing internet connections by encrypting data transmitted between a website or application and a browser, or between two servers. Transport Layer Security (TLS) is an improved and more secure version of SSL. Hyper Text Transfer Protocol Secure (HTTPS) appears in the URL when a website is secured by an SSL/TLS certificate. You can also recognise a page secured by an SSL/TLS certificate by the lock symbol in the browser bar.
Purpose limitation: The processing or use of user data is carried out only for the purposes specified in this Privacy Policy and only to the extent necessary to achieve the respective purpose. We neither publish data nor disclose it to third parties without authorisation. Transfers of data to public institutions and authorities are made only within the scope of mandatory national legal provisions or where disclosure is necessary in the event of attacks on the network infrastructure for legal or criminal prosecution purposes. The legal basis for processing in this case is Art. 6 para. 1 sentence 1 lit. c) GDPR in conjunction with Section 24 para. 1 no. 1 BDSG.
Retention and deletion: All stored data and pseudonymised usage data will be deleted immediately and irreversibly as soon as they are no longer required to achieve the purpose for which they were stored or if the user requests this, unless we are legally obliged to retain them. Where we are legally obliged to retain data, the stored data and pseudonymised usage data will be irreversibly deleted after expiry of the statutory retention periods.

Transfer of Data

In connection with our processing of data, such data may, under certain circumstances, be forwarded or disclosed to other bodies, companies within the Academia Group or individuals. Recipients of such data include, in particular, providers of services and content that are made available or integrated as part of our Online Services, or service providers commissioned with IT tasks.

In these cases, we comply with the legal requirements and, in particular, conclude corresponding agreements with the recipients of your data.

International Data Transfers / Transfers to Third Countries

Data will only be transferred to companies in third countries (i.e., outside the European Union (EU) or the European Economic Area (EEA)) to the extent that this is expressly stated in the context of specific processing operations—for example, to fulfill contractual obligations related to certain services.

Where we process data in a third country or have data processed by third parties, for example by service providers or in connection with disclosures to other persons, bodies or companies, this is done exclusively in accordance with the legal requirements of the GDPR. If the transfer is made to a third country for which an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists, this adequacy decision forms the legal basis for the data transfer.

Adequacy decisions: Information on existing adequacy decisions of the European Commission in connection with data transfers to third countries can be found here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de.
EU-US Trans-Atlantic Data Privacy Framework: Under the so-called EU-US Trans-Atlantic Data Privacy Framework (DPF), the European Commission recognised the level of data protection for certain companies in the United States as adequate in its adequacy decision of 10 July 2023. The list of certified companies and further information on the DPF can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/. In the following Privacy Policy, we inform you which service providers used by us are certified under the DPF.

Where no adequacy decision exists, data is transferred to third countries only if an adequate level of data protection is otherwise ensured, in particular by

the conclusion of standard contractual clauses pursuant to Art. 46 para. 2 lit. c) GDPR,
certifications under the DPF,
the application of binding internal data protection rules in accordance with Art. 47 of the GDPR,
your express consent pursuant to Art. 49 para. 1 lit. a) GDPR, or
a transfer required by law or necessary under a contract pursuant to Article 49(1) of the GDPR.

The following section provides a detailed overview of the legal basis for data transfers to third countries by the respective service providers. Where available, adequacy decisions by the European Commission serve as the primary legal basis for such data transfers.

Rights of Data Subjects

As a data subject, you have various rights under the GDPR, in particular pursuant to Art. 15 to 21 GDPR:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to notification (Art. 19 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent given to us at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Rights in connection with automated decision-making (Art. 22 GDPR)
Right to lodge a complaint with a competent data protection supervisory authority regarding our processing of your data (Art. 77 GDPR).

The supervisory authority responsible for the registered office of the controller is:

Bavarian State Office for Data Protection Supervision (BayLDA)
Address: Postfach 1349, 91504 Ansbach, Germany
Telephone.: 49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-Mail-Adresse: poststelle@lda.bayern.de
Website: https://www.lda.bayern.de

II. Data Processing within Our Online Services

The individual processing operations within our Online Services are described in more detail below for each type of processing. This information and explanation is intended to provide users of the Online Services with an overview of how we handle data protection and what types of data are collected for which purposes. For reasons of clarity, the respective use is divided below into different thematic areas of data processing.

1. Provision and Operation of the Website

1.1 Provision of the Website and Web Hosting

Whenever you access our website, your internet browser automatically transmits certain data to our web server for technical reasons.

To design and optimise our Online Services, we use a content management system (CMS), which, like the web fonts integrated into our website, is operated entirely within our own server infrastructure. No data is transferred to third parties in this context. The processing is carried out under our own responsibility under data protection law.

Categories of data processed: Usage data (f.e. visited websites, accessed content, access times, access status, and data volume transferred); meta, communication and procedural data (f.e. IP addresses of the end device, date and time of access, referrer URL, consent status, session IDs, and identification numbers);device and browser data (f.e. identification data of the browser and operating system type used on the end device and the name of the internet service provider); content data (f.e. entries in online forms).

Data subjects: Users of the website.

Purpose of processing: Your data is processed to provide our Online Services, in particular to establish the connection, deliver content and ensure stable and user-friendly use of the website.

This also includes the operation and provision of the necessary information technology infrastructure, including servers, hosting environment, and other technical systems.

No comparison with other data sets or disclosure to third parties, even in excerpts, takes place.

Legal bases: Performance of a contract and legitimate interest (Art. 6 para. 1 sentence 1 lit. b) and f) GDPR).

Processing Operations and Service Providers

Provision of the Online Services on rented storage space: To provide our Online Services, we use storage space, computing capacity and software services that we rent or otherwise obtain from a specialised server provider, hereinafter referred to as the “web host”. The processing is carried out on the basis of our legitimate interest in the secure, stable and efficient provision of our Online Services pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR.
Collection of access data and log files: When our Online Services are accessed, certain information is recorded in so-called server log files. These server log files may contain the following data:
- address and name of the accessed websites and files,
- date and time of access,
- data volume transferred,
- notification of successful retrieval,
- browser type and version,
- operating system used,
- referrer URL, i.e. the previously visited page,
- IP address,
- name of the requesting internet service provider. The processing of this data is carried out for the technical monitoring and security of our server, in particular to detect and prevent abusive access, such as DDoS attacks, and to ensure the stability and performance of our systems. The legal basis is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interest lies in the secure, stable and technically error-free provision of our website. Server log files are stored for a maximum of 30 days and then deleted or anonymised. Excluded from deletion are data whose further retention is necessary for evidentiary purposes until the respective incident has been finally clarified.
Provider – Web agency / hosting: For the technical implementation, maintenance and further development of our online presence, we work with the web agency Pyro Pyro GmbH, Stiftgasse 31/9, 1070 Vienna, Austria. As part of this cooperation, the web agency may, in individual cases, gain access to data, for example in the course of maintenance work, technical error analysis or the setup of functions involving data processing. Processing is carried out exclusively as commissioned processing pursuant to Art. 28 GDPR on the basis of a corresponding agreement. The web agency acts exclusively on instructions and is contractually obliged to maintain confidentiality and comply with data protection requirements. Further information can be found here: https://www.pyropyro.com/datenschutz. The web agency also operates the hosting of our website on servers of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, within the framework of its own contractual relationship with Hetzner. In this context, Hetzner is used by the web agency as a sub-processor. Hosting includes, in particular, services relating to infrastructure, computing capacity, storage space, security services and technical maintenance. Further information about Hetzner can be found at: https://www.hetzner.com; Privacy Policy: https://www.hetzner.com/de/rechtliches/datenschutz; Data Processing Agreement: https://docs.hetzner.com/de/general/general-terms-and-conditions/data-privacy-faq/.
Provider – Content Management System (CMS): We use a CMS to create, edit, manage and publish digital content on our website. The CMS is hosted exclusively locally in our own server infrastructure at the web host. The service provider is Statamic LLC., 260 Williamson Blvd, Ormond Beach, FL 32174, USA. Further information can be found here: https://statamic.com; Privacy Policy: https://statamic.com/privacy.
Provider – Web fonts: For a user-friendly and consistent presentation of our Online Services, we use fonts from the Google Fonts service. The font files are hosted locally on our own server, so that no connection to Google servers is established and no data is transferred to Google. The purpose of the processing is the technically optimised and visually consistent presentation of our website content across all devices.

1.2 Use of Cookies

Cookies are small text files or other storage technologies that store information on end devices and read information from end devices. They may be used, for example, to store login status in a user account, the contents of a shopping basket in an online shop, accessed content or functions used within an online service. Cookies may also be used for various other purposes, for example to ensure the functionality, security and user-friendliness of online services or to analyse visitor flows.

Information on consent: If and insofar as we use cookies, this is done in accordance with the statutory provisions. We therefore obtain the user’s consent in advance unless consent is not required by law. Consent is not required, in particular, where the storage and reading of information, including cookies, is strictly necessary in order to provide the user with a telemedia service expressly requested by them, i.e. our Online Services. Strictly necessary cookies are generally cookies with functions that serve the display and functionality of the Online Services, load balancing, security, storage of user preferences and choices or similar purposes related to the provision of the main and ancillary functions of the Online Services requested by the user. Revocable consent is clearly communicated to the user and contains information about the respective use of cookies.

Information on data protection legal bases: The data protection legal basis on which we process your data using cookies depends on whether we obtain the user’s consent via the cookie consent tool. If users give their consent, the legal basis for processing their data is consent. Otherwise, the data processed using cookies is processed on the basis of our legitimate interests, for example in the economical operation of our Online Services and the improvement of user-friendliness, or, where this occurs in the context of fulfilling our contractual obligations, if the use of cookies is necessary to fulfil our contractual obligations. The purposes for which we process cookies are explained in this Privacy Policy or as part of our consent and processing procedures.

Storage period: With regard to the storage period, the following types of cookies are distinguished:

Temporary cookies (Session Cookies): Temporary cookies are deleted at the latest after a user leaves an online service and closes their end device, such as a browser or mobile application.
Permanent cookies: Permanent cookies, also known as persistent cookies, remain stored even after the end device is closed. For example, login status may be saved or preferred content may be displayed directly when a website is visited again. Usage data collected with the help of cookies may also be used for reach measurement. Unless we explicitly inform users about the type and storage period of cookies, for example when obtaining consent, users must assume that cookies are stored permanently and that the storage period may be up to two years.
First-party cookies: First-party cookies are set by us.
Third-party cookies: Third-party cookies are primarily used by advertisers, i.e. third parties, to process user information.
Necessary (essential or strictly necessary) Cookies: Cookies may be strictly necessary for the operation of a website (f.e. uto store logins or other user inputs or for security reasons).
Statistics, marketing and personalisation cookies: Cookies are also generally used for reach measurement and where a user’s interests or behaviour, such as viewing certain content or using certain functions, are stored in a user profile on individual websites. Such profiles are used, for example, to display content to the user that may correspond to their interests. This process is also referred to as “tracking”, i.e. tracking the user’s possible interests. Where we use cookies or “tracking” technologies, we inform you separately in our Privacy Policy or when obtaining your consent.
General information on withdrawal and objection, so-called opt-out: Users may withdraw any consent given at any time and object to processing in accordance with the statutory provisions. This may be done, among other ways, by restricting the use of cookies in the settings of the user’s browser, although this may lead to functional limitations of our Online Services. Objection to the use of cookies for online marketing purposes may also be declared via the websites https://optout.aboutads.info and https://www.youronlinechoices.com/.
Cookie settings / objection option: You can change your cookie settings at any time during your visit to our website by clicking on the lock symbol at the bottom left of the screen.

Categories of data processed: Usage data (f.e. visited websites, interest in content, and access times).

Data subjects: Users (f.e. website visitors and users of our Online Services.

Purposes of processing: Provision of our Online Services and user-friendliness.

Legal bases: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR); consent (Art. 6 para. 1 sentence 1 lit. a) GDPR and Section 25 TDDDG).

Non-essential cookies are not used on our website.

3. . Data Processing in the Application Process and Relating to Business Partners

Further information on the application process and recruiting can be found in the separate Privacy Policy for Applicants: Datenschutzerklärung für Bewerber.

For applications submitted via our applicant management system Personio, the Privacy Policy of Personio SE applies in addition: Datenschutzerklärung der Personio SE.

Further information on the processing of business partner data can be found in the Privacy Policy for Business Partners.

4. Social Networks / Social Media

We maintain publicly accessible profiles on social networks. The social networks we use in detail are listed below. The social media icons available on this website are HTML links. This means that your data is not processed by the providers of the social media platforms on our website. If you click on the “plug-ins”, you will be redirected to our respective social media presence.

Social networks such as Facebook, Instagram and others can generally analyse your user behaviour comprehensively when you visit their website or a website with integrated social media content, such as like buttons or advertising banners. Visiting our social media presences triggers numerous data protection-relevant processing operations.

In Detail

If you are logged into your social media account and visit our social media presence, the operator of the social media portal may associate this visit with your user account. Under certain circumstances, your data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, data may be collected, for example, via cookies stored on your end device or by recording your IP address.

Using the data collected in this way, the operators of the social media portals may create user profiles in which your preferences and interests are stored. In this way, interest-based advertising may be displayed to you within and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising may be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing operations on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. Details can be found in the terms of use and privacy policies of the respective social media portals.

Legal Basis

Our social media presences are intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks (f.e. consent within the meaning of Art. 6 para. 1 sentence 1 lit. a) GDPR).

Controller and Exercise of Rights

If you visit one of our social media presences, such as Facebook, we are, for certain social media platforms, jointly responsible together with the operator of the social media platform for the data processing operations triggered by this visit. You may generally exercise your rights, such as access, rectification, erasure, restriction of processing, data portability and complaint, both against us and against the operator of the respective social media portal (f.e. Facebook).

Please note that, despite joint controllership with the operators of social media portals, we do not have full influence over the data processing operations of the social media portals. Our options are largely determined by the corporate policy of the respective provider.

Storage Period

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for storing it no longer applies, you ask us to delete it, you withdraw your consent to storage or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory statutory provisions, in particular retention periods and limitation periods, remain unaffected.

Wir haben keinen Einfluss auf die Speicherdauer Ihrer Daten, die von den Betreibern der sozialen Netzwerke für eigene Zwecke gespeichert werden.

We have no control over how long your data is stored by social media platform operators for their own purposes. For more details, please contact the social media platform operators directly (e.g., by reviewing their privacy policies, see below).

Our Social Networks in Detail

Instagram: We maintain a profile on the social media platform Instagram, a service provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (hereinafter “Meta”). Instagram allows users to share photos and videos, comment on and like posts, send messages, and follow profiles and pages.
We are jointly responsible with Meta for data processing operations within the meaning of Article 26 of the GDPR. We have entered into a joint controller agreement with Meta pursuant to Article 26(1) of the GDPR, known as the Page Insights Controller Addendum. You may therefore generally exercise your rights as a data subject under the GDPR (see Section 9) with respect to both us and Meta. Please note that despite the joint responsibility under Article 26 of the GDPR, we do not have full control over the data processing activities of individual social networks. The corporate policies of the respective provider have a significant influence on our options. In the event that you exercise your data subject rights, we would only be able to forward these requests to the social network operator. Meta describes in general terms in its Data Use Guidelines what information Meta receives in connection with your use of Facebook and Instagram and how this information is used. There you will also find information on how to contact Meta, your options for objecting, and settings for advertisements. The Data Use Guidelines are available at the following links: http://de-de.facebook.com/about/privacy (for Facebook), https://help.instagram.com/519522125107875 (for Instagram). Meta does not clearly and definitively specify how it uses data from visits to Facebook and/or Instagram pages for its own purposes, to what extent activities on the Facebook or Instagram page are attributed to individual users, how long Meta stores this data, or whether data from a visit to the Facebook or Instagram page is shared with third parties; we are not aware of this information. When accessing an Instagram page, the IP address assigned to your device is transmitted to Meta. According to Meta, this IP address is anonymized (for “German” IP addresses) and deleted after 90 days. Meta also stores information about its users’ devices (for example, as part of the “login notification” feature); in some cases, this may allow Meta to associate IP addresses with individual users. If you are currently logged into Instagram as a user, a cookie containing your Instagram ID is stored on your device. This enables Meta to track that you visited our Instagram page and how you used it. This also applies to all other Instagram pages. Based on this data, content or advertising can be tailored to you. The data collected about you in this context is processed by Meta and may be transferred to countries outside the European Union. If you wish to prevent this, you should log out of Instagram or disable the “Stay Logged In” feature, delete the cookies stored on your device, and close and restart your browser. This will delete Instagram information that can be used to directly identify you. This allows you to use our Instagram page without your Instagram ID being revealed. If you access interactive features on the page (like, comment, share, messages, etc.), an Instagram login screen will appear. After logging in, Meta will once again be able to identify you as a specific user. Alternatively, you can use a different browser than usual to visit our Instagram page. For information on how to manage or delete information the Meta Group has about you via Facebook, please visit the following Facebook Support pages: https://de-de.facebook.com/about/privacy# or in the Instagram Help Center: https://help.instagram.com/811572406418223/?helpref=hc_fnav.
LinkedIn: We have a profile on LinkedIn. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn"). We have entered into an agreement with LinkedIn on joint controllership ("Page Insights Joint Controller Addendum", https://legal.linkedin.com/pages-joint-controller-addendum). This agreement regulates which security measures LinkedIn must observe and in which LinkedIn has agreed to fulfil the rights of data subjects (i.e. users may, for example, address access or deletion requests directly to LinkedIn). The rights of users against us (in particular the right of access, erasure, objection and complaint to the competent supervisory authority) are not restricted by the agreements with LinkedIn. The data collected by LinkedIn cannot be assigned by us as website operator to specific persons. LinkedIn may store the data collected from website visitors on its servers in the United States and use it for its own purposes. Details can be found in LinkedIn’s Privacy Policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig. Data transfers to the United States are carried out on the basis of the standard contractual clauses. Further information can be found here: Website: https://www.linkedin.com; Privacy Policy: https://www.linkedin.com/legal/privacy-policy; standard contractual clauses (https://legal.linkedin.com/dpa), Switzerland - Data Privacy Framework (DPF), standard contractual clauses (https://legal.linkedin.com/dpa and https://www.linkedin.com/legal/l/eu-sccs); opt-out option (Opt-Out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

5. Changes and Updates to this Privacy Policy

We reserve the right to amend this Privacy Policy in order to adapt it to changed legal requirements or changes to our services, for example when introducing new services. The version current at the time of your next visit to our website shall apply.