Privacy policy

This English version is provided for convenience only. Only the German version of this privacy policy is legally binding.

We take data protection seriously

Protecting your privacy when processing personal data is an important concern for us. When you visit our website, our web servers store by default the IP address of your internet service provider, the website from which you visit us, the pages you visit on our website, and the date and duration of your visit. This information is strictly necessary for the technical transmission of the web pages and for secure server operation. This data is not evaluated on a personalised basis.

If you send us data via the contact form, this data is stored on our servers as part of data backup. We use your data exclusively to handle your enquiry. Your data is treated as strictly confidential. It is not passed on to third parties.

Controller:

syskomp gehmeyr GmbH
Max-Planck-Str. 1
92224 Amberg
Germany
+49 9621 67547-0
Email: amberg@syskomp-group.com

Personal data

Personal data is data about you as a person. This includes your name, your address and your email address. You do not have to disclose any personal data in order to visit our website. In some cases we need your name and address as well as further information in order to provide the service you have requested.

The same applies if we send you information material at your request or answer your enquiries. In these cases we will always point this out to you. In addition, we only store the data that you have transmitted to us automatically or voluntarily.

When you use one of our services, we generally only collect the data necessary to provide that service. We may ask you for further information, but this is voluntary. Whenever we process personal data, we do so in order to offer you our service or to pursue our commercial objectives.

Contacting us

When you contact us (e.g. via contact form, email, telephone or social media), the details of the enquiring persons are processed to the extent necessary to answer the enquiry and any requested measures.

Enquiries within the scope of contractual or pre-contractual relationships are answered in order to fulfil our contractual obligations or to respond to (pre-)contractual enquiries, and otherwise on the basis of our legitimate interest in answering enquiries.

• Types of data processed: master data (e.g. names, addresses), contact data (e.g. email, telephone numbers), content data (e.g. entries in online forms).
• Data subjects: communication partners.
• Purposes of processing: contact enquiries and communication.
• Legal bases: performance of a contract and pre-contractual enquiries (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR).

Automatically stored data

Server log files

The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• date and time of the request
• name of the requested file
• page from which the file was requested
• access status (file transferred, file not found, etc.)
• web browser and operating system used
• full IP address of the requesting computer
• amount of data transferred

This data is not combined with other data sources. Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

For reasons of technical security, in particular to defend against attacks on our web server, we store this data for a short period. We are not able to draw conclusions about individual persons from this data. After seven days at the latest, the data is anonymised by shortening the IP address to domain level, so that it is no longer possible to establish a link to the individual user. In anonymised form, the data is also processed for statistical purposes; it is not compared with other data sets or passed on to third parties, not even in extracts. Only within the scope of our server statistics, which we publish every two years in our activity report, is the number of page views presented.

Cookies

When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a character string through which websites and servers can be assigned to the specific internet browser in which the cookie was stored. This enables the websites and servers visited to distinguish the individual browser of the data subject from other internet browsers that contain other cookies. A specific internet browser can be recognised and identified via the unique cookie ID.

By using session cookies, the controller can provide users of this website with a user-friendly service that would not be possible without setting cookies. Without your consent, we only use technically necessary cookies on the legal basis of legitimate interest pursuant to Art. 6(1)(f) GDPR.

We only use personal cookies to improve our website or for marketing/advertising purposes with your consent. On your first visit you can voluntarily consent to tracking or analysis via the cookie banner displayed. Your data may be passed on to partners or third-party providers. These cookies are only stored if you explicitly consent; the legal basis is then your consent pursuant to Art. 6(1)(a) GDPR.

You can change your cookie settings here at any time: Open cookie settings

Cloudflare

We use the “Cloudflare” service. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter “Cloudflare”).

Cloudflare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed through Cloudflare’s network. This enables Cloudflare to analyse the data traffic between your browser and our website and to act as a filter between our servers and potentially malicious data traffic from the internet. Cloudflare may also use cookies or other technologies to recognise internet users, but these are used solely for the purpose described here.

The use of Cloudflare is based on our legitimate interest in providing our website as error-free and securely as possible (Art. 6(1)(f) GDPR).

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.cloudflare.com/privacypolicy/.

Further information on security and data protection at Cloudflare can be found here: https://www.cloudflare.com/privacypolicy/.

We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with the above-mentioned provider. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Cookiebot

Our website uses Cookiebot’s consent technology to obtain your consent to the storage of certain cookies on your device or to the use of certain technologies and to document this in compliance with data protection law. The provider of this technology is Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).

When you enter our website, a connection is established to Cookiebot’s servers in order to obtain your consents and other declarations regarding the use of cookies. Cookiebot then stores a cookie in your browser in order to be able to assign the consents given or their revocation to you. The data collected in this way is stored until you ask us to delete it, delete the Cookiebot cookie yourself or the purpose for storing the data no longer applies. Mandatory statutory retention obligations remain unaffected.

Cookiebot is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6(1)(c) GDPR.

We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with the above-mentioned provider. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Google Tag Manager

We use Google Tag Manager on our website, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to manage website tags via an interface. The Tag Manager itself does not process any personal data; in particular, it does not create user profiles, store cookies or carry out its own analyses. It is used solely to manage and deliver other tools (e.g. tracking or statistics tools). These tools may, however, collect data themselves – information on this can be found in the relevant sections of this privacy policy.

When the Tag Manager is used, your IP address may be transferred to servers of the parent company Google LLC in the USA. There is currently no adequacy decision of the EU Commission for the USA. Any transfer is therefore based on EU standard contractual clauses and, where necessary, your consent.

Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in the technically error-free and efficient integration and management of third-party services on our website.

Further information: https://policies.google.com/privacy

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyse the behaviour of website visitors. In doing so, the website operator receives various usage data, such as page views, length of stay, operating systems used and origin of the user. This data is combined in a user ID and assigned to the respective end device of the website visitor.

Furthermore, Google Analytics allows us, among other things, to record your mouse and scroll movements and clicks. Google Analytics also uses various modelling approaches to supplement the collected data sets and uses machine learning technologies in data analysis.

Google Analytics uses technologies that make it possible to recognise the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to a Google server in the USA and stored there. This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

Google is also certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under the DPF undertakes to comply with these data protection standards.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. More information on how Google Analytics handles user data can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising programme of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms on Google (keyword targeting). Furthermore, targeted advertisements can be displayed on the basis of user data available to Google (e.g. location data and interests) (audience targeting). As the website operator, we can evaluate this data quantitatively, for example by analysing which search terms led to our advertisements being displayed and how many advertisements led to corresponding clicks.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.

For the USA there is also an adequacy decision of the European Commission, provided that companies are certified under the Data Privacy Framework programme. Google is certified accordingly and thus meets the requirements of the EU Commission.

Microsoft Advertising

We use the Microsoft Advertising service of Microsoft Ireland Operations Limited (Ireland/EU) (formerly Bing Ads) on our website. Microsoft Advertising is an online marketing service that helps us, via the Universal Event Tracking (UET) tool, to display targeted advertisements via the Microsoft Bing search engine. Microsoft Advertising uses cookies for this purpose. Personal data is processed in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about device and browser settings.

Via UET, Microsoft Advertising collects data with which we can track target groups using remarketing lists. For this purpose, a cookie is stored on the device used when you visit our website. This allows Microsoft Advertising to recognise that our website has been visited and to display an advertisement the next time you use Microsoft Bing or Yahoo. The information is also used to create conversion statistics, i.e. to record how many users reached our website after clicking on an advertisement. This tells us the total number of users who clicked on our advertisement and were redirected to our website. However, we do not receive any information with which users can be personally identified.

Further information on these processing activities, the technologies used, the data stored and the storage period can be found in the settings of our consent management tool. Processing only takes place with your consent pursuant to Section 25 TDDDG or Art. 6(1)(a) GDPR. You can revoke your consent via our consent management tool.

In the case of Microsoft services, a transfer of data to Microsoft Corp. in the USA cannot be ruled out. Microsoft is certified under the Data Privacy Framework and thus meets the requirements of the EU Commission’s adequacy decision for the USA. Further information on data protection at Microsoft can be found in Microsoft’s privacy statement at https://privacy.microsoft.com/en-us/privacystatement.

Clarity

This website uses Clarity. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 (USA), https://docs.microsoft.com/en-us/clarity/ (hereinafter “Clarity”).

Clarity is a tool for analysing user behaviour on this website. In particular, Clarity records mouse movements and creates a graphical representation of which parts of the website users scroll to most frequently (heatmaps). Clarity can also record sessions so that we can view page usage in the form of videos. We also receive information about general user behaviour within our website.

Clarity uses technologies that make it possible to recognise the user for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). Your personal data is stored on Microsoft’s servers (Microsoft Azure Cloud Service) in the USA.

Clarity is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective user analysis. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.

Further details on data protection at Clarity can be found here: https://www.microsoft.com/en-us/privacy/privacystatement

We have concluded a data processing agreement (DPA) pursuant to Art. 28 GDPR with the above-mentioned provider. This is a contract required by data protection law which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Social plugins from Facebook, Twitter, Instagram, Pinterest, Xing, AddThis, WhatsApp etc.

Our website uses social buttons of social networks. These are only integrated into the page as HTML links, so that no connection is established with the servers of the respective provider when our website is accessed. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser. There you can, for example, press the like or share button.

Use of personal data in the application process

Purpose of data collection

We generally use your personal data to answer your enquiry, process your order or give you access to specific information or offers. Further information on data protection can also be found on this website. However, we would also like to make your job search easier. You can therefore apply for positions with us directly online or by email. We assure you that your details will be treated confidentially. The data you provide will be processed and used exclusively for the purpose of selecting applicants.

What data is collected?

We only collect the information required for an application procedure with us.

When you apply for a position with us, you will be asked for certain personal data (name, address, email). In addition, position-related questions may be asked. For an application to our company it is also mandatory to enclose your professional background.

Please note that your data is not stored anonymously, but is accessible to the HR department and the departments relevant to the position.

Application information

By submitting your application, you confirm that the information you have provided is true. Please note that any false statement or omission may constitute grounds for rejection or later dismissal.

We seek applicants regardless of race, ethnic origin, gender, religion, belief, disability, age or sexual identity. We do not require any information from you that may not be used under the German General Equal Treatment Act (AGG). Please do not forward us any confidential internal information or trade secrets of your former or current employer. Please also do not provide any unnecessary information on: illnesses, pregnancy, ethnic origin, political opinions, philosophical or religious beliefs, trade union membership, physical or mental health, sex life, defamatory or libellous information, or information unrelated to the job profile.

Who processes the data?

The data we collect is processed exclusively internally or by contractually bound service providers. Personal data is only passed on for a specific purpose within the scope of commissioned processing in accordance with data protection regulations to bodies that, for example, operate our servers or provide certain services. These bodies are located in Germany and in EU countries and are bound by contractual obligations and data protection instructions to handle personal data in compliance with data protection law.

The data and files you submit will be processed and used exclusively for the purpose of handling your application. If your application is successful, the data and files you have provided may be further processed and used by us for employment purposes within an employment relationship. If the application for a job offer is not successful, we store the submitted data and files for six months in an applicant database in order to be able to answer later questions about the application. After six months, the data and files are deleted. You can withdraw your application at any time. Withdrawing the application results in your data and files in the applicant database being deleted immediately – subject to the restrictions below. Furthermore, during the application process you can request at any time that individual data or files you have submitted be deleted. However, we reserve the right to store a limited amount of your data for a limited period of three months in order to comply with legal provisions, in particular obligations to provide evidence under the German General Equal Treatment Act (AGG).

With whom do we share your personal data?

The information you provide to us is treated confidentially and only passed on to those persons involved in a specific application procedure. Your personal data will only be passed on to other group companies after your separate, explicit consent.

Please refer to the corresponding notice on this website.

Access, editing and deletion of your CV

You can view, change or delete your CV at any time. You can also ask us to help you do so.

Please understand that changing or deleting data during an ongoing application procedure and for a period of approximately three months after the conclusion of an application procedure is not possible for legal reasons.

Security

We have taken technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorised access. All our employees and service providers working for us are bound by the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process and our privacy policies are constantly revised. Please make sure that you have the latest version.

Rights of data subjects

You have the right at any time to information, rectification, erasure or restriction of the processing of your stored data, a right to object to processing, a right to data portability and a right to lodge a complaint in accordance with the requirements of data protection law.

Right of access:
You can request information from us as to whether and to what extent we process your data.

Right to rectification:
If we process data about you that is incomplete or incorrect, you can request that we correct or complete it at any time.

Right to erasure:
You can request that we delete your data if we process it unlawfully or if the processing disproportionately interferes with your legitimate interests in protection. Please note that there may be reasons that prevent immediate deletion, e.g. in the case of statutory retention obligations.
Irrespective of the exercise of your right to erasure, we will delete your data immediately and completely, provided that no contractual or statutory retention obligation prevents this.

Right to restriction of processing:
You can request that we restrict the processing of your data if

• you dispute the accuracy of the data, for a period that enables us to verify the accuracy of the data,
• the processing of the data is unlawful, but you refuse erasure and instead request a restriction of the use of the data,
• we no longer need the data for the intended purpose, but you still need this data to assert or defend legal claims, or
• you have objected to the processing of the data.

Right to data portability:
You can request that we provide you with the data you have provided to us in a structured, commonly used and machine-readable format and that you can transmit this data to another controller without hindrance from us, provided that

• we process this data on the basis of a consent given by you that can be revoked or for the performance of a contract between us, and
• this processing is carried out using automated procedures.

Where technically feasible, you can request that we transmit your data directly to another controller.

Right to object:
If we process your data on the basis of legitimate interest, you can object to this data processing at any time; this would also apply to profiling based on these provisions. We will then no longer process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims. You can object to the processing of your data for the purpose of direct marketing at any time without giving reasons.

Right to lodge a complaint:
If you believe that we are violating German or European data protection law in processing your data, please contact us so that we can clarify any questions. You of course also have the right to contact the supervisory authority responsible for you, the respective state data protection supervisory authority.

If you wish to assert any of the rights mentioned against us, please contact our data protection officer. In case of doubt, we may request additional information to confirm your identity.

Changes to this privacy policy

We reserve the right to change our privacy policy if this should become necessary due to new technologies. Please make sure that you have the latest version. If fundamental changes are made to this privacy policy, we will announce them on our website.

All interested parties and visitors to our website can contact us regarding data protection at:

Mr Matthias Haßler LL.M.
Projekt 29 GmbH & Co. KG
Ostengasse 14
93047 Regensburg
Germany

Tel.: +49 941 2986930
Fax: +49 941 29869316
Email: anfragen@projekt29.de
Website: www.projekt29.de