Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws of the EU Member States as well as other data protection regulations is:

DAS Environmental Expert GmbH
Goppelner Straße 44
01219 Dresden
Germany

Telephone: +49 351 40494-000
Email: contact@das-ee.com

This privacy policy informs users (hereinafter referred to as "you" or "users") about the nature, scope and purpose of the collection and use of personal data by the responsible provider DAS Environmental Expert GmbH (hereinafter also referred to as "controller") on this website.

Contact Data protection officer

General information on data processing

Provision of the website

Contact options via the website

Application platform

Website analysis services

Our activities on social networks

Rights of data subjects

Right to object

Data protection information for customers (natural persons) and customer contact persons

Use of our webinar service via "ClickMeeting"

You can contact the data protection officer of the controller at:

Data protection officer
DAS Environmental Expert GmbH
Goppelner Straße 44
01219 Dresden
Germany

Telephone: +49 351 40494–000
Email: privacy@das-ee.com

1. Links to other websites

Our online offering contains links to websites of other providers. We have no influence on whether these providers comply with the applicable data protection regulations. We are not responsible for the data protection measures or the content of other websites. We hereby expressly distance ourselves from all content on linked pages and do not adopt this content as our own. We therefore recommend that you also inform yourself about the respective data protection declaration on other websites.

2. Objection to the use of contact details

We hereby expressly object to the use of contact data published within the scope of the imprint obligation by third parties for sending unsolicited advertising and information material. We expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam emails.

 3. Changes to the privacy policy

The status of the privacy policy is indicated by the date (below). We reserve the right to change this privacy policy at any time with future effect. The current version is available directly via the online offer. Please visit our online offer regularly and inform yourself about the applicable privacy policy.

Status: January 2026

1. Description and scope of data processing

Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer. The following data is collected:

• Information about the browser type and version used

• The user's operating system

• The user's internet service provider

• The user's IP address

• Date and time of access

• Websites from which the user's system accesses our website (referrer URL)

• Websites accessed by the user's system via our website

The data is also stored in our system's log files. This data is not stored together with other personal data relating to the user.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Art. 6(1)(f) GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session.

Storage in log files is done to ensure the functionality of the website. In addition, the data helps us to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing in accordance with Art. 6(1)(f) GDPR.

4. Duration of storage

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collection for the provision of the website, this is the case when the respective session has ended.

In the case of storage of the data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated so that an assignment of the calling client is no longer possible.

5. Right to object and right to erasure

The collection of data for the provision of the website and the storage of data in log files is essential for the operation of the website. Consequently, there is no possibility for the user to object.

1. Description and scope of data processing

Our website uses only technically necessary cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change.

The following data is stored and transmitted in the cookies:

• Language settings

• Login information (identification of whether the user is logged in as an administrator of the website)

• Last page visited

An overview of all cookies used on our website can be found in our cookie policy in the cookie consent banner.

2. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

We require cookies for the following applications:

• Transfer of language settings

The user data collected by technically necessary cookies is not used to create user profiles.

These purposes also constitute our legitimate interest in the processing of personal data in accordance with Art. 6 (1) lit. f GDPR.

4. Duration of storage

Cookies are stored on the user's computer and transmitted to our site. Your objection to the use of cookies will be stored for a period of one year.

5. Objection and removal option

As a user, you therefore have full control over the use of cookies. You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

1. Description and scope of data processing

Our website features a contact form that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored. This data includes:

• First name*

• Surname

• Company

• Country

• Email

• Telephone number (business)*

• Street and house number*

• Postcode*

• Town/city*

• Subject/Your message*

When the message is sent, the following data is also stored:

• The user's IP address

• Date and time of contact/registration

• Websites from which the user's system accessed our website (last page visited)

• Websites accessed by the user's system via our website

Alternatively, contact can be made via the email address provided. In this case, the user's personal data transmitted with the email will be stored.

In this context, the data will not be passed on to third parties. The data will be used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for data processing is Art. 6 (1) lit. f GDPR. If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) lit. b GDPR.

3. Purpose of data processing

The processing of personal data from the input mask and the data transmitted with the email serves us solely for the purpose of processing the contact. In addition, it is used to assign various enquiries and emails to a person and, if applicable, a topic in order to enable more efficient communication, including for direct marketing purposes (Art. 6(1)(f) in conjunction with EC 47) for our products. This also constitutes the necessary legitimate interest in the processing of the data.

The other personal data processed during the sending process serves to prevent misuse of the contact form and to ensure the security of our information technology systems.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For personal data from the input mask of the contact form and that sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. Insofar as we also process the data for direct marketing purposes for our products in order to ensure efficient communication, we store it for a period of 6 months after the end of the last communication.

If the purpose of the contact is to conclude a contract, the data will be stored for as long as is necessary for the conclusion and execution of the contract or to determine the final termination of the contract negotiations.

Irrespective of this, longer storage may be necessary in accordance with Article 6(1)(c) GDPR due to tax and commercial law retention and documentation obligations (from the German Commercial Code, Criminal Code or Fiscal Code), because you have consented to further storage in accordance with Article 6(1)(a) GDPR, or because it is necessary for the assertion, exercise or defence of legal claims in accordance with Article 17(3)(e) GDPR. In individual cases, longer storage may be necessary to preserve evidence within the framework of the statutory limitation periods. According to Sections 195 et seq. of the German Civil Code (BGB), these limitation periods can be up to 30 years, with the regular limitation period being 3 years.

The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

5. Objection and removal option

The user has the option at any time to revoke their consent to the processing of personal data or to object to the processing, insofar as it is based on Art. 6 (1) lit. f GDPR. In such a case, the conversation cannot be continued.

The revocation or objection can be made informally. You can make it easier for us to process your request by sending us an email with the subject line "Revocation or objection to contact form/email data" to the email address privacy@das-ee.com.

In this case, all personal data stored in the course of establishing contact will be deleted, unless otherwise specified by the aforementioned storage obligations and rights.

If the processing is based on Art. 6 (1) (b) GDPR (conclusion of a contract), deletion is not possible.

Data protection information pursuant to Art. 13 General Data Protection Regulation (GDPR) for applicants

1. Data processing when using our application platform

a) Description and scope of data processing

You can use our applicant platform to apply online for the job vacancies we advertise using the application form provided, as well as to send us speculative applications.

When you use the application form provided by us, we collect and process the following data from you (* = mandatory field):

• Salutation*, title, first name*, surname*

• Email address

• Telephone number (landline and/or mobile)*

• Availability/notice period

• Salary expectations

• Application submission channel

• Cover letter

• Curriculum

• Other documents related to the application (certificates, references, work samples, application photo, etc.)

We use CV parsing to evaluate your uploaded data. You can find more detailed information on data processing in section 2 below.

When you submit the application form, the following data is also transmitted automatically:

• IP address

• Date and time of access

• Browser type and version

• Operating system used

• Amount of data sent

For the processing of data, your consent is obtained during the submission process and reference is made to this privacy policy.

For our application process, we use the web-based applicant management software "softgarden" from softgarden e-Recruiting GmbH, Tauentzienstr. 14, 10789 Berlin/Germany (contact: datenschutz@softgarden.de), which softgarden operates on our behalf under the domain https://das-ee.softgarden.io (hereinafter referred to as the applicant platform). We have concluded a contract with "softgarden" for order processing in accordance with Art. 28 GDPR, which ensures compliance with data protection regulations.

b) Processing purposes and legal basis

We collect and process your personal data only to the extent necessary to carry out the application process for the purpose of preparing to conclude a possible employment contract with you, in particular to assess the suitability of candidates for a position and to organise and administer the application process. The legal basis is Art. 6 (1) (b) GDPR. In addition, we process your personal data with regard to the use of our applicant platform on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. Your consent is voluntary. You can revoke it at any time without giving reasons for the future (see section on rights of the data subject below).

We also process your data on the basis of your consent (legal basis Art. 6 (1) (a) GDPR, insofar as you have given us your consent to process personal data for specific purposes (e.g. transfer of data to companies within the group). This will be requested from you separately. Consent that has been given can be revoked at any time (see section on rights of the data subject below).

There is no automated decision-making.

c) Recipients

Your data will be forwarded to various recipients within our company for processing as part of the application process or granted access to them, including the human resources department, specialist department (managers), secretariat, etc.

Your data will also be forwarded to recipients outside our company with whom order processing agreements have been concluded in accordance with Art. 28 GDPR, namely the provider of the online applicant management platform "softgarden".

Furthermore, third parties may receive data for specific purposes if this is done in the context of investigation by or disclosure to government agencies, insofar as this is required by law or there is an obligation to disclose (legal basis Art. 6 (1) (c) GDPR) or insofar as this is necessary for the initiation and, if applicable, conclusion of a contract with you (e.g. travel bookings) (legal basis: Art. 6(1)(b) GDPR) or to assert and defend our rights (legal basis: Art. 6(1)(f) GDPR).

We only pass on data to companies based outside the European Union with your consent (e.g. travel bookings outside the EU, flight bookings with airlines based outside the EU, etc.).

d) Duration of storage

Your personal data will be stored for as long as is necessary for the duration of the application process and the exclusion of any recourse claims. This storage period is usually 6 months after rejection or recruitment.

Even after the application process has been completed, it may be necessary in individual cases to store personal data in order to fulfil contractual or legal obligations (e.g. compliance with commercial and tax law retention periods of 10 years).

In individual cases, longer storage may be necessary to preserve evidence within the framework of the statutory limitation periods.

2. Data processing through CV parsing

a) Description and scope of data processing

We process and analyse the documents you upload using "CV parsing". We use artificial intelligence to filter out the relevant content from your CV and put it into a structured form.

The technology behind "CV parsing" is provided to us by softgarden, which softgarden obtains from the ISO27991-certified company Textkernel B.V., based at Nieuwendammerkade 26 A 5, (1022AB) Amsterdam, Netherlands. Textkernel B.V. is a subcontractor of softgarden. To protect the rights of data subjects and maintain security standards, softgarden and Textkernel B.V. have entered into a contract for order processing. Data processing takes place in a secure environment on a server in Germany.

b) Processing purposes and legal basis

The legal basis for CV parsing is Art. 6 (1) (f) GDPR. Our legitimate interest in using CV parsing is to streamline the application process.

c) Recipients

The personal data processed in the context of CV parsing is only forwarded to recipients outside our company with whom order processing agreements have been concluded in accordance with Art. 28 GDPR. As already stated in section 4 lit. c of this privacy policy, these are softgarden and its subcontractor Textkernel B.V. Personal data is not transferred to unsafe third countries.

d) Duration of storage

After processing, your data will be deleted from Textkernel's temporary storage. Textkernel's privacy policy is available at https://www.textkernel.com/de/datenschutzerklaerung/.

3. Data processing when using the talent pool

a) Description and scope of data processing

You can join our talent pool by clicking on the "Unsolicited application" button. This allows us to consider you for other suitable positions.

When you register in our talent pool via the "Unsolicited application" button, the following information is requested (* = mandatory field):

• Title

• Academic title

• First name, surname*

• Email address*

• Job fields of interest*

• Current career level*

• Preferred locations*

• XING profile or CV*

b) Processing purposes and legal basis

We process the aforementioned data in order to be able to consider you for further job vacancies, including similar or otherwise suitable positions. Registration for the talent pool is voluntary and only takes place with your consent by using an opt-in link. The legal basis for this is Art. 6 (1) (a) GDPR. Your consent is voluntary. You can revoke it at any time without giving reasons for the future (see section on rights of the data subject below).

There is no automated decision-making.

c) Recipients

Within our company, various recipients have access to your data within the framework of the talent pool, including the human resources department, specialist departments (managers), secretarial staff, etc.

Your data will also be forwarded to recipients outside our company with whom order processing agreements have been concluded in accordance with Art. 28 GDPR, namely the provider of the online applicant management platform softgarden e-recruiting GmbH, Tauentzienstraße 14, 10789 Berlin, contact: datenschutz@softgarden.de).

d) Duration of storage

Data will be deleted when it is no longer required for the purpose for which it was collected. Your data will therefore be stored for as long as you agree to be included in the talent pool. After 6 months, we will contact you and ask whether you would like to remain listed in the talent pool. If we do not receive a response from you, we will delete your data from the talent pool after 14 days at the latest.

4. Data processing when using our feedback module

a) Description and scope of data processing

We use the email address you provided during the application process to send you an invitation link after an interview and 3 months after your hiring, asking you to provide your feedback. By clicking on the invitation link, you will be redirected to the rating system to submit your feedback.

When you use the feedback form, the following data is collected and processed:

• Date

• Job title of the position you applied for

• Location of the position

• Job category

• Applicant ID

• Feedback: Number of stars awarded per question, any information you may have provided in the comments section

The above information is stored in the database as feedback without using your personal data (name, email address). This means that no connection to your person is made externally. We therefore expressly ask you not to leave any personal data in your comment. Your feedback can be displayed on our review page or published as part of our company profiles with external partners such as kununu.

b) Processing purposes and legal basis

The purpose of processing is to further develop and optimise our recruiting and application processes as well as our company image. Providing feedback is voluntary and only takes place with your consent. The legal basis for this is Art. 6 (1) (a) GDPR. Your consent is voluntary. You can revoke it at any time without giving reasons for the future (see section on rights of the data subject below).

c) Recipients

We may also publish your feedback evaluation as part of our company profiles with external partners such as kununu and forward it to these partners for these purposes. However, your personal data will not be transferred to these external partners.

Your data will be forwarded to recipients outside our company with whom order processing agreements have been concluded in accordance with Art. 28 GDPR, namely the provider of the online applicant management platform softgarden e-recruiting GmbH, Tauentzienstraße 14, 10789 Berlin/Germany, contact: datenschutz@softgarden.de).

d) Duration of storage

Your feedback evaluation will remain available in anonymised form for an indefinite period.

5. Data processing in connection with the use of the job subscription/job newsletter

To be informed about new job vacancies, softgarden offers you the opportunity to subscribe to a free job newsletter. You can refine your subscription by specifying your desired job and location. The processing of your personal data in connection with the use of the job subscription/job newsletter is carried out solely and exclusively by softgarden as the data controller.

To subscribe, you must provide softgarden with your email address. The legal basis for this is your consent to receive the newsletter in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent to receive the newsletter at any time (opt out) by clicking on the unsubscribe link in the newsletter.

6. Data processing for applications in connection with our referral manager

As part of the applicant management software we use, we have the option of sharing our job advertisements on social networks or personally via email with people we know (recommendation) via a so-called recommendation manager.

Even if you apply for such an indirectly or directly suggested position, i.e. if you do not access our career pages directly, but via these shared job advertisements in order to send us your application, the processing of your personal data within the application process will follow the regular procedure as described in section 1.

However, before submitting your application, you will be given the option of having your application displayed anonymously in our referral manager. If you take advantage of this option, we will see in our referral manager that a person has applied for an open position with us on the basis of a referral. If you do not make use of this option, your name, the vacancy and, if applicable, your application photo will also be displayed in the recommendation manager.

The legal basis for processing your data for referral and application purposes is Art. 6 (1) (f) GDPR. The data will be processed and deleted in the same way as in the regular application process. Detailed information on data processing in connection with the use of our application platform can be found in section 1.

7. Data processing for online surveys

At the end of the application process, softgarden may display an invitation to a survey via a link. The survey is conducted via a service provided by easyfeedback GmbH in order to gather feedback on the application experience. softgarden conducts this survey as the controller within the meaning of Art. 4 No. 7 GDPR and, according to its own statements, processes the collected data anonymously for its own purposes (statistics, analysis, studies) and for the further development of softgarden products.

According to softgarden, the collection of survey data is secured by default using SSL encryption, and softgarden does not establish any personal references during processing. The survey can be cancelled at any time. The data processed up to the point of discontinuation may be used for the purposes mentioned above. Your participation in the survey is purely voluntary and by participating you declare your consent, without which your participation is not possible, Art. 6 para. 1 lit. a) GDPR. According to softgarden, the data is processed anonymously. Anonymised data is therefore not subject to the material scope of the GDPR.

For more information on easyfeedback's data protection, please refer to the following notes: https://easy-feedback.de/privacy/datenschutzerklaerung.

8. Data processing when using social share buttons

We offer you the opportunity to share our job advertisements on various social networks. You can use the social share buttons of the respective networks for this purpose. When you use the social share buttons, you will be redirected directly to the respective social networks and taken to their home page. The social share buttons are not plug-ins, so no personal data is transferred to the operators of the social media services when you use our career pages.

If you use the social media pages of the respective network operators, you do so at your own risk. The respective operator of the network is solely and exclusively responsible for the processing of your personal data on these networks. We have no influence on this.

You can currently use the social share buttons for the following networks:

• Facebook (https://de-de.facebook.com/privacy/explanation)

• X (https:/x.com/de/privacy)

• LinkedIn ( https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-join-privacy-policy )

• Xing (https://privacy.xing.com/de/datenschutzerklaerung)

The links provided contain information about how your personal data is processed by the respective network operators, as well as information about contact options and settings for advertisements.

9. Obligation to provide data

The provision of personal data is necessary for the initiation and, if applicable, conclusion of an employment contract or other contract with you in the context of your application for the above-mentioned purposes of data processing. Without this personal data, we are unable to process your application and, if applicable, conclude a contract with you.

10. Rights of the data subject

Every data subject has the right to information under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to object under Art. 21 GDPR and the right to data portability under Art. 20 GDPR. The restrictions under Sections 34 and 35 BDSG apply to the right to information and the right to erasure.

You can revoke your consent to the processing of personal data at any time without giving reasons. This also applies to the revocation of declarations of consent that were given to us before the GDPR came into force, i.e. before 25 May 2018. Please note that the revocation only applies to the future. Processing that took place before the revocation is not affected.

In addition, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR). To do so, you can contact the supervisory authority at your usual place of residence or workplace or at our company headquarters; the latter can be reached at

The Saxon Data Protection and Transparency Commissioner
Devrientstr. 5, 01067 Dresden
Telephone: 0351/85471–101
Fax: 0351/85471–109
Website: www.datenschutz.sachsen.de
Email: post@sdtb.sachsen.de

Information about your right to object under Art. 21 GDPR

If data processing is based on Art. 6(1)(e) GDPR or Art. 6(1)(f) GDPR, you can object to the use of your data at any time (Art. 14(2)(c) in conjunction with Art. 21 GDPR). The objection can be made informally. You can help us to process your objection quickly by using our email address privacy@das-ee.com with the subject line "Objection" and stating your name and address.

A distinction must be made with regard to the legal consequences of your objection: If you object for reasons arising from your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

1. Description and scope of data processing

We use the Matomo web analysis service on our website to obtain and evaluate statistical information about the usage behaviour of visitors to our website. We use these analyses to improve our website and make it more attractive to our users. Matomo is open-source software. You can view Matomo's privacy policy here: https://matomo.org/privacy-policy/. We operate the Matomo application within our IT infrastructure, i.e. the software application is located on our servers in Germany. Matomo does not further process the user information collected for its own purposes. We use a version of Matomo that does not require cookies for web analysis, so no cookies or other identifiers are stored on your device.

By using Matomo, we process the following user data:

• Technical information (browser type and version, operating system, screen resolution, device information, anonymised IP address, e.g. 192.168.xxx.xxx, browser user agent string, browser language and country settings)

• Visitor behaviour (pages visited and length of stay, click path, i.e. sequence of pages visited, entry and exit pages, number of page views per visit, total visit duration, bounce rate)

• Origin information (referrer URL, i.e. website from which access is made, search engines and search terms used, direct visits vs. visits via links, UTM parameters, i.e. campaign parameters)

• Time-related data (date and time of visits, user's time zone, returning vs. new visitors, frequency of visits)

When using Matomo, your IP address is only processed in truncated form. This anonymisation means that it is not possible to trace the data back to you personally. We also do not link your IP address to other data collected by us.

2. Legal basis for data processing

The legal basis for the use of Matomo is Art. 6 (1) lit. f) GDPR. We have a legitimate interest in analysing the user behaviour of our website visitors. This is because we want to improve our online offering and adapt it to the needs of our users.

3. Purpose of data processing

The analysis service is used for the purpose of improving the quality of our website and its content. The Matomo application tells us how the website is used, enabling us to continuously optimise our offering.

4. Duration of storage

The anonymised data collected by us as a result of website analysis with Matomo is deleted from our servers after a period of 3 years.

5. Objection and removal option

You can object to the collection and analysis of your user behaviour by Matomo by removing the corresponding check mark in the cookie consent banner. To do so, please click on the cookie link in the footer.
This will place an opt-out cookie in your browser, which prevents Matomo from storing your user data and, according to Matomo, does not contain any personal data. Please note that this Matomo opt-out cookie will also be deleted when you delete your cookies. You will therefore have to opt out again when you visit our website again.

We operate a corporate presence on various social media platforms. We operate these presences on the following providers :

• Social media platform "Facebook", operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, at the URL https://www.facebook.com/waterandair

• Social media platform "Instagram", operated by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, at the URL https://www.instagram.com/das_career/

• Social media platform "LinkedIn", operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, at the URL https://www.linkedin.com/company/das-environmental-expert-gmbh

• Social media platform "XING", operated by the German provider New Work SE, Am Strandkai 1, 20457 Hamburg, Germany, at the URL https://www.xing.com/pages/dasenvironmentalexpertgmbh

• Social media platform "X", operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, at the URL https://x.com/das_ee

• Social media platform "YouTube", operated by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, at the URL https://www.youtube.com/user/EuropaDas

We use the technical platforms and services of the respective providers for these information services. We are not the original provider of these platforms. The aforementioned providers – with the exception of Facebook and LinkedIn, with whom we are jointly responsible for data processing within the framework of the Page Insights web analysis tool – process your personal data on their own responsibility and under their own responsibility.

We would like to point out that you use our presence on the aforementioned social media platforms and the functions offered there at your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our pages, the providers of the social media platforms collect, among other things, your IP address and other information that is available on your device in the form of cookies. This information is used to create user profiles based on your preferences and interests and to display tailored advertising (within and outside the social media platforms) and to provide us, as the operator of the profile page, with statistical information about the interaction with us.

As the operator of these company profiles, we only use the services of the providers within the scope of the options offered by the respective provider and only process the data from your use of our respective service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, or if you send us your contact information via a lead generation form on LinkedIn, we will process your information solely for the purpose of responding to your enquiry on the basis of our legitimate interests. We can view statistical evaluations using the Page Insights function on Facebook or LinkedIn, which is available to us in our respective profile on the Facebook or LinkedIn platform. The legal basis for the processing of your data on the aforementioned social media platforms is Art. 6 (1) (f) GDPR.

The data and usage content collected about you in this context is also processed by the platform operators on their own responsibility for their own purposes. Service providers based in the EU (such as XING) are subject to the same data protection requirements as we are. Furthermore, according to their own information, all other service providers are certified under the EU-US Privacy Framework. We do not know and have no influence on how the respective providers use your data from your visit to our account on and your interaction with our posts for their own purposes, how long this data is stored, and whether data is passed on to third parties and transferred to countries outside the European Union. Data processing may also differ depending on whether you are registered and logged in to the respective social network or visit the site as a non-registered and/or non-logged-in user. When you access a post or account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your device can be used to track how you have moved around the network. Buttons embedded in websites, which we do not currently use on our website, also enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you wish to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies on your device and restart your browser.

Even under our agreement with Facebook and LinkedIn on the joint processing of your personal data, we do not have access to the usage data that Facebook and LinkedIn collect for the purpose of compiling statistics. Facebook and LinkedIn have committed to us that they will assume primary responsibility under the GDPR for the processing of this data, fulfil all obligations under the GDPR with regard to this data, and provide data subjects with the essentials of this obligation. Further information about the content of our agreement with Meta Platforms Ireland Ltd and LinkedIn Ireland Unlimited Company on joint responsibility can be found at https://www.facebook.com/legal/terms/page_controller_addendum and https://de.linkedin.com/legal/l/dpa.

We use the technical platforms of the above-mentioned service providers for these information services to provide information about our company, our products and services, to share our job vacancies and to get in touch with interested parties. These purposes also constitute our legitimate interest in data processing in accordance with Art. 6 (1) lit. f GDPR.

The personal data that you have provided to us yourself, from your use of our company page, or that you actively communicate to us via a personal message on our profile, which we store in order to respond to your enquiry, will be deleted as soon as it is no longer necessary for the purpose for which it was collected. All public posts made by you on one of our social media sites will remain in the timeline for an unlimited period of time, unless we delete them due to an update of the underlying topic, a legal violation or a violation of our guidelines, or unless you delete the post yourself.
We have no influence on the duration of the storage of your data by the respective operator of the platform itself. The data protection provisions of the respective operator therefore apply in addition. Facebook states in its privacy policy that the data will be deleted as soon as it is no longer necessary for the purpose for which it was collected or when you delete your profile.

To exercise your rights as a data subject, you can contact either us or the respective social media platform provider. If one party is not responsible for responding or needs to obtain the information from the other party, we or the provider will forward your request to the respective partner. If you have any questions about profile creation or the processing of your data when using the website, please contact the operator of the social media platform directly. If you have any questions about the processing of your interaction with us on our site, please write to us using the contact details provided above.

The privacy policy of the respective platforms is included below. There you will also find information about contact options and settings for advertisements.

Facebook: https://www.facebook.com/about/privacy (English) https://de-de.facebook.com/about/privacy  (German)
Instagram: https://www.facebook.com/about/privacy  (English)
LinkedIn: https://www.linkedin.com/legal/privacy-policy
XING: https://privacy.xing.com/de/datenschutzerklaerung
X: https://x.com/de/privacy
YouTube: https://policies.google.com/privacy

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. Right to information

You can request confirmation from the controller as to whether personal data concerning you is being processed by us.

If such processing is taking place, you may request the following information from the controller:

1. the purposes for which the personal data is processed;

2. the categories of personal data that are being processed;

3. the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

4. the planned duration of storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;

5. the existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

6. the existence of a right to lodge a complaint with a supervisory authority;

7. any available information on the origin of the data if the personal data is not collected from the data subject;

8. the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information on whether personal data concerning you is being transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR in connection with the transfer.

2. Right to rectification

You have the right to rectification and/or completion vis-à-vis the controller if the personal data processed concerning you is inaccurate or incomplete. The controller must rectify the data without delay.

3. Right to restriction of processing

Under the following conditions, you may request the restriction of the processing of personal data concerning you:

1. if you dispute the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

2. the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;

3. the controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims; or

4. if you have objected to the processing pursuant to Article 21(1) GDPR and it is not yet clear whether the legitimate grounds of the controller override your grounds.

Where processing of personal data concerning you has been restricted, such data may – apart from being stored – only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to erasure

a) Obligation to erase

You may request the controller to erase personal data concerning you without undue delay, and the controller is obliged to erase such data without undue delay if one of the following reasons applies:

1. The personal data concerning you is no longer necessary for the purposes for which it was collected or otherwise processed.

2. You withdraw your consent on which the processing was based in accordance with Art. 6(1)(a) or Art. 9(2)(a) GDPR, and there is no other legal basis for the processing.

3. You object to the processing pursuant to Art. 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21(2) GDPR.

4. The personal data concerning you has been processed unlawfully.

5. The erasure of personal data concerning you is necessary to comply with a legal obligation under Union law or the law of the Member States to which the controller is subject.

6. The personal data concerning you has been collected in relation to the services offered by information society services pursuant to Art. 8(1) GDPR.

b) Information to third parties

If the controller has made the personal data concerning you public and is obliged to erase it pursuant to Art. 17(1) GDPR, the controller shall take reasonable steps, including technical measures, taking into account the available technology and implementation costs, to inform controllers who process the personal data that you, as the data subject, have requested them to erase all links to this personal data or copies or replications of this personal data.

c) Exceptions

The right to erasure does not apply if processing is necessary

1. for exercising the right of freedom of expression and information;

2. for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

3. for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) GDPR;

4. for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

5. to assert, exercise or defend legal claims.

5. Right to information

If you have asserted your right to rectification, erasure or restriction of processing against the controller, the controller is obliged to notify all recipients to whom your personal data has been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves disproportionate effort.

You have the right to be informed by the controller about these recipients.

6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit this data to another controller without hindrance from the controller to whom the personal data has been provided, provided that

1. the processing is based on consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR or on a contract pursuant to Art. 6(1)(b) GDPR and

2. the processing is carried out using automated means.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, where technically feasible. The freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to revoke the data protection consent form

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

8. Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

1. is necessary for entering into, or performance of, a contract between you and the controller,

2. is authorised by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests, or

3. is based on your explicit consent.

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 (1) GDPR, unless Art. 9 (2) (a) or (g) GDPR applies and appropriate measures have been taken to protect your rights and freedoms and your legitimate interests.

With regard to the cases referred to in 1 and 3, the controller shall take appropriate measures to safeguard your rights and freedoms and your legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.

9. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 of the GDPR.

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.

The controller shall no longer process the personal data concerning you unless the controller can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing purposes; this also applies to profiling insofar as it is related to such direct marketing.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

In connection with the use of information society services, you have the option of exercising your right to object by means of automated procedures using technical specifications, irrespective of Directive 2002/58/EC.

Information about your right to object under Article 21 of the GDPR

Insofar as data processing is based on Art. 6(1)(e) GDPR or Art. 6(1)(f) GDPR, you can object to the use of your data at any time (Art. 14(2)(c) in conjunction with Art. 21 GDPR). The objection can be made informally. You can help us to process your objection quickly by sending an email to privacy@das-ee.com with the subject line "Objection" and stating your name and address.

A distinction must be made with regard to the legal consequences of your objection:

• If you object for reasons arising from your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

• If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes.

Here you will find the data protection information on data collection in our protocols (PDF).

1. Description and scope of data processing

We use the services of ClickMeeting Sp. z.o.o., Grunwaldzka 413, 80–309 Gdansk, Poland, as the provider of the browser-based webinar software "ClickMeeting" to conduct webinars.

As the organiser of the webinars, we are responsible for processing your data that is collected in direct connection with your participation in our webinars.

When you participate in our webinars or use ClickMeeting, various types of data are processed. The scope of the data also depends on the information you provide before or during your participation in a webinar. The following personal data is subject to processing:

• Participant details: first name, surname, company, position, telephone number (optional), email address

• Webinar metadata: Data on use of the service, data processed using cookies, data collected using website navigation files, data on the web browser, location data, device IP data (e.g. webinar topic, description (optional), display name, participant IP addresses, device/hardware information, cookie settings)

• Text, audio and video data: If you use the chat, question or survey functions during a webinar, the text you enter will be processed in order to display it in the webinar and to log it. If you use the video and/or audio function during the webinar, the data from the microphone and/or video camera of your device will be processed for the duration of the webinar in order to display the video or play back the sound.

The general part of our webinars is recorded. The recording ends when a question and answer session follows at the end of the webinar. Recording by participants is prohibited.
The service provider used to conduct our webinars, ClickMeeting, necessarily obtains knowledge of the above-mentioned data. The service provider has been carefully selected and processes data in accordance with instructions. Data processing takes place exclusively in member states of the European Union. Beyond that, we do not transfer your data to any other recipients.

There is no automated decision-making within the meaning of Art. 21 GDPR.

Please note: When you visit the website of our service provider "ClickMeeting", ClickMeeting is responsible for data processing as the provider of the website. Information on data processing by ClickMeeting can be found at: https://clickmeeting.com/de/legal.

2. Legal basis for data processing

The legal basis for the processing of your personal data is your consent in accordance with Art. 6 (1) (a) GDPR.

3. Purpose of data processing

The purpose of data processing is to ensure the implementation of/participation in our webinars.

4. Objection and removal option

The information under Rights of the data subject applies. In particular, participants have the option of revoking their consent to the processing of their personal data at any time. In such cases, participation in the webinar cannot be facilitated.