Data protection

Your cookie settings
Change cookie settings

Status: January 2024

The owner of the Internet portal www.axytos.com (as well as axytos.org and other pages on which this data protection information is provided) is axytos GmbH, Langen (hereinafter axytos).

Our website(s) are directed only to persons over the age of 16.

axytos is aware of the significance and importance of personal data. axytos sees it as a primary obligation to ensure the confidentiality of the data entrusted to it by customers and visitors to this Internet portal. We treat your personal data confidentially and in accordance with the statutory data protection regulations, as well as this data protection notice. Personal data is information with the help of which a person can be identified, i.e., information that can be traced back to a person. These include e.g., the name, e-mail address or telephone number.

Below are the data protection information of our company with which we comply with our information obligations in accordance with the General Data Protection Regulation (GDPR) and the Federal Data Protection Act (FDPA):

1. General information

1.1. Name and address of the person responsible

The person responsible within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

axytos GmbH
Pittlerstr. 47
DE 63225 Langen
Telephone: +49 (0)6103 599 84 00
Internet: www.axytos.com
E-mail: info@axytos.com
Managing Director:
Dr. Jörg Seelmann-Eggebert
Commercial register: HRB 52140, Offenbach District Court, 63065 Offenbach am Main

1.2. Name and address of the data protection officer

The data protection officer of axytos GmbH is:

Kristin Pagnia
axytos GmbH
Pittlerstr. 47
63225 Langen
Telephone: +49 (0) 6103 599 84 20
E-mail (general): datenschutz@axytos.com
Direct contact with the data protection officer: datenschutzbeauftragter@axytos.com

1.3. Rights of the person concerned

The applicable data protection law grants you comprehensive data subject rights (rights of information and intervention) as the person responsible regarding the processing of your personal data, about which we inform you below:

1.3.1. Right to information

You can request confirmation from the controller as to whether personal data concerning you is processed by us.

If such processing exists, you can request information from the person responsible about the following information:

the purpose for which the personal data are processed;
the categories of personal data that are processed;
the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
the planned duration of the storage of personal data concerning you or, if specific information is not possible, criteria for determining the storage period;
the existence of a right to rectification or deletion of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
the existence of a right of appeal to a supervisory authority.
all available information about the origin of the data if the personal data are not collected from the data subject.
the existence of automated decision-making including profiling in accordance with Art. 22 para. 1 and 4 GDPR and at least in these cases meaningful information about the logic involved as well as the scope and intended effects of such processing on the data subject.

You have the right to request information about whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request that the appropriate guarantees acc. Art. 46 GDPR in connection with the transmission.

1.3.2. Right to rectification

You have the right to rectification and/or completion compared to the controller if the processed personal data concerning you is incorrect or incomplete. The person responsible must make the correction immediately.

1.3.3. Right to restriction of processing

You can request the restriction of the processing of personal data concerning you under the following conditions:

if you dispute the accuracy of the personal data concerning you for a period of time that enables the controller to verify the accuracy of the personal data
the processing is unlawful, and you refuse to delete the personal data and instead request the restriction of the use of the personal data.
the controller no longer needs the personal data for the purpose of processing, but you need them to assert, exercise or defend legal claims, or
if you object to the processing in accordance with Art. 21 para. 1 GDPR and it is not yet clear whether the legitimate reasons of the person responsible outweigh your reasons.

If the processing of personal data concerning you has been restricted, these data may only be processed except for their storage with you consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or Member Sate.

If the restriction of processing according to the above-mentioned Conditions restricted, you will be informed by the person responsible before the restriction is lifted.

1.3.4. Right to deletion

Deletion obligation:

You can request from the controller that the personal data concerning you be deleted immediately, and the controller is obliged to delete this data immediately if one of the following reasons applies:

The personal data concerning you are no longer necessary for the purpose for which they were collected or otherwise processed.
You revoke your consent to which the processing pursuant to Art. 6 para. 1 sentence 1 lit.a. or Art. 9 para. 2 lit. a GDPR, and there is no longer legal basis for the processing.
You place acc. Art. 21 para. 1 GDPR objects to the processing and there are no overriding legitimate reasons for the processing, or you submit in accordance with Art. 21 para. 2 GDPR objects are processing.
The personal data concerning you have been unlawfully processes.
The deletion of personal data concerning you is necessary to fulfill a legal obligation under Union law or the law of the Member State to which the controller is subject.
The personal data concerning you have been processed in relation to information society services offered in accordance with Art.8 para. 1 GDPR.

Information to third parties:

If the person responsible publicized the personal data concerning you and is, in accordance with Art. 17 para. 1 GDPR, obliged to delete them, the person responsible shall take appropriate measures, including technical measures, considering the available technology and the implementation costs, to inform controllers who process the personal data that you as the data subject have requested them to delete all links to this personal data or copies or replications of this personal data.

Exceptions:

The right to deletion does not exist if the processing is necessary

to fulfill the right of freedom of expression and information;
to fulfill a legal obligation required by Union or Member State law to which the controller is subject, or to preform a task in public interest or in the exercise of official authority conferred on the controller;
for reasons of public interest in the field of public health in accordance with Art. 9 para. 2 lit.h as well as Art. 9 para. 3 GDPR;
for archival purposes in the public interest, scientific or historical research purposes or for statistical purposes acc. Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is impair the achievement of the objectives of this processing, or
to assert, exercise or defend legal claims.

1.3.5. Right to notification

If you have asserted the right to correction, deletion or restriction of the processing against the controller, the controller is obliged to notify all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right to be informed about these recipients by the person responsible.

1.3.6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common, and machine-readable format. In addition, you have the right to transfer this data to another controller without hindrance by the controller whom the personal data was provided that the processing is based on consent acc. Art. 6 para. 1 sentence 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract acc. Art. 6 para. 1 sentence 1 lit. b GDPR and the processing is carried out using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to the processing of personal data necessary for the performance of a task that is in the public interest or in the exercise of official authority conferred to the controller.

1.3.7. Right of objection

You have the right, for reasons arising from your situation to object at any time to the processing of personal data concerning you, which is based on Art. 6 para. 1 sentence 1 lit. e or f GDPR; this also applies to profiling based on these provisions.

The controller no longer processes the personal data concerning you, unless he can prove compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

If the personal data concerning you are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it relates to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the opportunity to exercise your right of objection in connection with the use of information society services – notwithstanding Directive 2002/58/EC – by means of automated procedures using technical specifications.

1.3.8. Right to withdraw the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the legality of the processing carried out based on the consent until revocation.

1.3.9. Automated decision-making in individual cases including profiling

You have the right not to be subject to a decision based solely on automated processing – including profiling – that has legal effect on you or similarly significant effects on you. This does not apply if the decision

is necessary for the conclusion or performance of a contract between you and the person responsible,
is permitted by Union or Member State legislation to which the controller is subject, and this legislation contains appropriate measures to protect your rights and freedoms as well as your legitimate interests, or
has been done with your express consent.

However, these decisions must not be based on special categories of personal data in accordance with Art. 9 para. 1 GDPR, unless Art.9 para. 2 lit. a or g GDPR applies, and appropriate measure have been taken to protect rights and freedoms as well as your legitimate interests.

Regarding the cases mentioned in the first and third bullet points, the controller shall take appropriate measures to protect the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her own point of view and to challenge the decision.

1.3.10. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to complain to a supervisory authority, particularly in the Member State of your residence, place of work or place of alleged infringement, if you believe that the processing of the personal data concerning you violates the GDPR.

The supervisory authority to which the complaint was filed shall inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy under Art. 78 GDPR.

Below are the contact details of the supervisory authority responsible for our company:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
Telephone: +49 (0) 611-1408 0

2. Special Information

2.1. Data processing

2.1.1. Scope of processing of personal data

In principle, we only process personal data of our users to the extent necessary to provide a functional website as well as our content and services. The processing of personal data of our users takes place regularly only with the consent of the user. An exception applies in cases where prior consent is not possible for actual reasons, or the processing of the data is permitted by legal regulations.

2.1.2. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing personal data, Art. 6 para. 1 sentence 1 lit. a EU General Data Protection Regulation (GDPR) as the legal basis.

In the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 para.1 sentence 1 lit.b GDPR is the legal basis. This also applies to processing operations necessary to carry out precontractual measures.

Insofar as processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 para. 1 sentence 1 lit.c GDPR is the legal basis.

In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 para. 1 sentence 1 lit.d DG-GVO is the legal basis.

If the processing is necessary to safeguard a legitimate interest of our company or third party and the interests, fundamental rights and freedoms of the person concerned do not outweigh the former interests, Art. 6 para. 1 sentence 1 lit. f GDPR is the legal basis for processing.

2.1.3. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage can also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other regulations to which the controller is a subject. A blocking or deletion of the data also takes place if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

2.2. Provision of the websites and creation of log files

2.2.1. Server log files

You can visit our websites without providing any personal information.
However, the provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

Browser type and browser version
Operating system used
Referrer URL
Host name of the accessing computer
Time of the server request
IP address

This data will not be merged with other data sources.

2.2.2. Legal basis for data processing

The processing takes place in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR based on our legitimate interest to improve the stability and functionality of our website. The data will not be passed on or will be used otherwise. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

2.2.3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the IP address of the user must remain stored for the duration of the session.

The storage log files take place to ensure the functionality of the website in addition, the data serves us to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 p. 1 lit. f GDPR.

2.2.4. Duration of storage

The data will be deleted as soon as it is no longer needed according to the purpose of its collection. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

In the case of storage of the data in log files, this is the case after seven days at the latest. Further storage is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible.

2.2.5. Possibility of objection and elimination

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Therefore, there is no possibility to object for the user.

2.3. Use of cookies and other services (plugins and tools)

The website uses so-called “cookies” or similar technologies. Cookies are small text information that is stored as a file in the end device via your browser.

They are stored either temporarily for the duration of session (session cookies) or permanently (permanent cookies) on your device.

Session cookies are automatically deleted after the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or an automatic solution is made by your web browser. These Cookies allow us, for example, to recognize your browser on your next visit.

In some cases, third-party cookies can also be stored on your device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company.

Cookies have various functions. Numerous cookies are technically necessary because certain website functions would not work without them (essential or necessary cookies). Other cookies are used to evaluate user behavior or display advertising.

Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions requested by you (functional cookies), to optimize the website or for marketing purposes are processed on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services.

If consent to store cookies has been requested, the cookies in question are stored exclusively on the basis of this consent (Art. 6 para. 1 sentence 1 lit. a GDPR); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

A detailed overview of the cookies or other technologies and service providers we use, their purposes and storage periods for the use of cookies as well as further information can be found under Cookie Settings.

With this tool, you can accept or reject individual or all cookies separately the first time you visit our website and at any time thereafter (except for the essential cookies) by ticking or removing the checkbox next to the respective cookie and saving the settings or pressing the off and on button. These settings are stored on your computer or mobile device. Therefore, they must be made and saved again if the device setting is deleted, or another device or browser is used. Please note that you may have to manually delete cookies that have already been set if you revoke your consent. If you do not accept cookies, the functionality of our website may be limited. Under Cookie Settings, we also indicate which cookies are set in which categories on our website.

Insofar as you have given your consent to the use of cookies in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact option described in the privacy policy in addition to deselecting it in the cookie settings.

You have the possibility to revoke the processing of necessary cookies at any time if you have valid reasons against these cookies. The revocation can be made informally by e-mail to info@axytos.com or by post.
If cookies are used by third-party companies or for analysis purposes, we will inform you separately in the context of this data protection information and, if necessary, request consent.

Within our online offer, we use content or service offers of third-party providers via plugins or tools based on our legitimate interests (i.e., interest in the optimization and economic operation of our online offer within the meaning of Art.6 para. 1 lit. f. GDPR) or consents granted by you (within the meaning of Art. 6 para 1 lit. a GDPR) to integrate their content and services, such as fonts or languages.

This always assumes that the third-party providers of this content perceive the IP address of the users, as they could not send the content to their browsers without the IP address. The IP address is therefore necessary for the presentation of this content. We only endeavor to use content whose respective providers only use the IP address to deliver content.

We also use cookies or other services from service providers who are based outside the EU. Regarding the associated risks, please refer to the notes under the section Third-country transfer.

We use:

2.3.1. Cookie consent with Borlabs Cookie

Our website uses Borlabs Cookie Consent technology to obtain your consent to the storage of certain cookies in your browser and to document them in accordance with data protection regulations. Provider of this technology is Borlabs – Benjamin A. Bornschein, Georg Wilhelm Str. 17, 21107 Hamburg (hereinafter Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given, or the revocation of these consents are stored. This data will not be passed on to the provider of Borlabs Cookie.

The collected data will be stored for one year and then deleted. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

Borlabs cookie consent technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 sentence 1 lit. c GDPR.

2.3.2. WPML

This website uses the WPML voice plugin from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong to offer a German and English language version of the website. WPML uses cookies to determine the current language of the visitor, the last visited language and the language of the users who have logged in. Information on the cookies used can be found at https://wpml.org/documentation/support/browser-cookies-stored-wpml.

2.3.3. Google Maps

This site uses the map service Google Maps.

Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information.

The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

By using Google Maps, information about the use of this website, including your IP address and the (start) address entered as part of the route planner function and possibly other personal data may be transmitted to the USA.

Through a two-click solution via “Borlabs cookie”, we ensure that no data is transferred from our website to Google Maps when you merely call up our page. However, as soon as you call up the map via the “Load map” function, you leave our site and use Google Maps.

We have no influence on the scope, further processing and use of the data collected by Google in this way and therefore cannot accept any responsibility for this.

When activating the first video via Google Maps on our site, you have the option to permanently unblock Google Maps by setting a check mark, if you have not already done so via the cookie banner.
However, you can also decide individually each time you call up the map via the “Load map” function whether you want to give consent to the use of Google Maps for this.

If you give your consent to the use of Google Maps, the processing is based exclusively on Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device as defined by the TTDSG.

You give us your consent, which you can revoke at any time with future effect by deselecting “external media” in the cookie settings on our site. You can also change your consent at any time by clicking on the “Privacy” button in the footer of our page/”Cookie settings” and thus revoke it for the future.

The purpose of the processing is to provide a comprehensive and professional online offer with smooth integration of the map function on an appealing website.

We store and delete cookie consent setting data only to the extent set forth in Section 2.3.1. Beyond that, we do not store any data from you when loading the map(s).

More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=en.

We expressly point out that a transfer to the USA currently takes place without the existence of an adequacy decision and without guarantees and thus, in the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. There are corresponding risks from access to the data by US authorities.

2.3.4. YouTube

We implement videos of the video portal “YouTube” of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA on our internet pages via a two-click solution.

The implementation is based on Art. 6 para. 1 p. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device) within the meaning of the TTDSG. You give us your consent, which you can revoke at any time with future effect by deselecting “external media” in the cookie settings on our site. You can also change your consent at any time by clicking on the “Privacy” button in the footer of our page/”Cookie settings” and thus revoke it for the future.

The purpose of the processing is to provide a comprehensive and professional online offer with smooth integration of the videos on an appealing website.

We use the plugin “Content-Blocker” from Borlabs Cookie.

This means that through the functions of Borlabs Cookies, on the one hand, cookies are set first when the user has given consent and, on the other hand, that no information/data from website visitors is collected and stored by YouTube unless they play the video. In doing so, we also use the extended data protection mode provided by YouTube. According to Google’s information, in “extended data protection mode” your data – in particular which of our web pages you have visited, as well as device-specific information including the IP address – is only transmitted to the YouTube server in the USA when you watch the video. By clicking on the video, you consent to this transmission.

When activating the first video via YouTube on our site, you have the option to permanently unblock YouTube by setting a check mark, if you have not already done so via the cookie banner. However, you can also decide individually for each video whether you want to give consent for the use of YouTube for this. Via “Privacy” (in the footer of the website) and “Change cookie settings” you can revoke this functionality.

We store and delete cookie consent setting data only to the extent set forth in Section 2.3.1. Beyond that, we do not store any data from you when loading the video(s).

For the purpose and scope of data collection and the further processing and use of data by the provider Google, as well as your rights in this regard and setting options for protecting your privacy, please refer to the privacy policy of Google https://policies.google.com/privacy?hl=de.

If you are logged into your YouTube account when you activate a YouTube video, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account beforehand.

We expressly point out that currently a transfer to the USA takes place without the existence of an adequacy decision and without guarantees and thus, in the opinion of the European Court of Justice, there is currently no adequate level of protection for the transfer of data to the USA. There are corresponding risks from access to the data by US authorities.

2.3.5. Vimeo

We also use videos from the company Vimeo on our website via a two-click solution. The video portal is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA (“Vimeo”).

The implementation is based on Art. 6 para. 1 p. 1 lit. a GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device as defined by the TTDSG. You give us your consent, which you can revoke at any time with future effect by deselecting “external media” in the cookie settings on our site. You can also change your consent at any time by clicking on the “Privacy” button in the footer of our page/”Cookie settings” and thus revoke it for the future.

The purpose of the processing is to provide a comprehensive and professional online offer with smooth integration of the videos on an appealing website.

We use the plugin “content blocker” from Borlabs Cookie.

This means that through the functions of Borlabs Cookies, on the one hand, cookies are set first when the user has given consent and, on the other hand, that no information/data of website visitors is collected and stored by Vimeo unless they play the video. When clicking on “Load Video”, personal data of the user such as the IP address, contact data, data on user behavior, information about your device are transmitted to Vimeo. Further data is collected by Vimeo when the user starts the video and is logged in as a registered member of Vimeo. This also links the actions on our website directly to the Vimeo account. This can be prevented if the user logs out of Vimeo before starting the video.

When activating the first video via Vimeo on our site, you have the option to permanently unblock Vimeo by setting a check mark, if you have not already done so via the cookie banner. However, you can also decide individually for each video whether you want to give consent for the use of Vimeo for this. Via “Privacy” (in the footer of the website) and “Change cookie settings” you can revoke this functionality.

We store and delete cookie consent setting data only to the extent set forth in Section 2.3.1. Beyond that, we do not store any data from you when loading the video(s).

For the purpose and scope of the data collection and the further processing and use of the data by the provider Vimeo, as well as your rights in this regard and setting options for protecting your privacy, please refer to the data protection information of Vimeo at https://vimeo.com/privacy and on the use of cookies at https://vimeo.com/cookie_policy.

For example, the tracking tool Google Analytics is automatically integrated into videos from Vimeo. We have no influence on the tracking settings and the analysis results collected via this and cannot view them. To prevent the setting of Google Analytics tracking cookies, you can prevent the storage of cookies by selecting the appropriate settings on your browser software.

2.4. Google Web Fonts

This site uses so-called web fonts provided by Google to uniformly display fonts. The Google Fonts are installed locally. There is no connection to Google servers. No personal data is collected.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google´s privacy policy: https://policies.google.com/privacy?Hl=en

2.5. Contact form and e-mail contact

2.5.1. Description and scope of data processing

A contact form is available on our website, which can be used for electronic contact. If used, the data entered in the input mask will be transmitted to us and stored. These data are:

First name
Last name
Position
E-mail address
Phone number
Day of the week
Time of day
Company
Subject
Your message

Mandatory fields are marked as such, because in these cases we absolutely need the data to process your contact and you cannot send the message without providing it.

At the time the message is sent, the following data is also stored:

Date and time

For the processing of the data, reference is made to this data protection notice during the sending process.

Alternatively, it is possible to contact us via the provided e-mail address. In this case, the personal data of the user transmitted with the e-mail will be stored.

In this context, the data will not be passed on to third parties. The data will be used exclusively for the processing of the conversation.

The same applies to inquiries by phone.

2.5.2. Legal basis for data processing

The legal basis for the processing of data is Art. 6 para. 1 sentence 1 lit. a, f GDPR. If the e-mail contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 sentence 1 b GDPR.

2.5.3. Purpose of data processing

This data will be stored and used exclusively for the purpose of answering your request or for contacting you and the associated technical administration.

Your data will be deleted after final processing of your request; this is the case if it can be inferred from the circumstances that the facts concerned have been finally clarified and if there are no legal retention obligations to the contrary.

2.5.4. Possibility of objection and elimination

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such case, the conversation cannot continue.

Please contact us if you wish to withdraw your consent and object to storage by mail or by email to info@axytos.com.

All personal data stored in the course of establishing contact will be deleted in this case.

2.6. Rights of the person concerned

Information in this regard can be found under “General information”

2.7. Special information about “career”/applicant portal

We are pleased that you are applying or have applied for a position in our company.

2.7.1. Scope of processing personal data

For the application process, we work within the framework of processing in accordance with Art. 28 GDPR with HRworks GmbH, Waldkircher Str. 28, 79106 Freiburg, Website: www.hrworks.de summarized. Your data will be transmitted to HRworks. The controller is axytos GmbH.

If you click on “Careers” on our website and then on “Vacancies”, a subpage of our website will open and you will find yourself on the careers page (the applicant portal) of our company. This career site is operated on the servers of our service provider. There you also enter your applicant data.

2.7.2. Legal basis for the processing of personal data

The legal basis for the processing of personal data in the application process is Art. 6 para 1 sentence 1 lit. b and f GDPR. We process personal data that you provide to us as part of your application. These are personal and communication data (first name, last name, telephone number (private or mobile, e-mail address), desired salary incl. all allowances, earliest starting date, information on how you became aware of us, application documents (cover letter, resume, references, certificates, etc.), as well as notes in the course of conducting interviews, if applicable.

The legal basis for the processing of personal data for our “talent pool” is Art. 6 para. 1 s. 1 lit. a GDPR. Insofar as you consent to the use of your entire application documents for further application processes at axytos, your application data and documents will be stored with your personal data beyond the one-time application process for a specific job offer and regularly reviewed to determine whether they can be used for future job postings. The same applies to unsolicited applications that cannot be considered immediately.

Consent can be revoked at any time with effect for the future. Checking the box for inclusion in the talent pool is optional and has no influence on your original application.

If the data may be necessary for legal prosecution after completion of the application process, data processing may take place in accordance with Art. 6 GDPR, in particular for the exercise of legitimate interests according to Art. 6 para. 1 sentence 1 lit. f) GDPR. Our interest then exists in asserting or defending claims.

2.7.2.1. Purpose of data processing

The data processing is carried out for the purpose of initiating an employment relationship.

We process the data you have sent us in connection with your application for filling positions within our company. Your data will only be forwarded to the persons and specialist departments responsible for the application process. Any further use or disclosure of your application data to third parties does not take place.

The application data may be processed for statistical purposes (e. g. Reporting). It is not possible to draw conclusions about individual persons

2.7.2.2. Duration of storage

Your application data will be deleted six months after completion of the application process. This does not apply if statutory provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have consented to a longer storage.

If you agree to the storage of your application data beyond the current vacancy, we will continue to store your application data for future vacancies. In this case, we will delete your data after 24 months.

2.7.2.3. Place of data processing

The processing of your data takes place in Germany and in a member state of the European Union (Ireland).

2.7.2.4. Cookies on the HRworks job portal server

As part of the applicant management function in HRworks, three essential cookies are set when using the function on the job portal server.

The cookie “HrwJobApplicationmanagementSession” represents the session of the person on the job portal. This is necessary for operation, as you can therefore distinguish the users of the session.

In addition, there are two AWS cookies (“AWSALB” and “AWSALBCORS”), which are needed on the one hand to correctly control the behavior or to get to the right instance. Furthermore, they are necessary for the upload of the application documents, so that this process can be guaranteed smoothly for applicants.

The cookies are set and received by AWS and only process the user’s IP address within the session. AWS is the recipient of the data. For more information on the privacy policy of the HRworks data processor, please visit: https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice__German_Translation_2022-03-08.pdf

2.7.2.5. Possibility of objection and removal

According to Art. 21 para. 1 GDRP, the data processing can be objected to for reasons relating to the particular situation of the data subject. The objection can be made informally and must be addressed to:

axytos GmbH, Pittlerstr. 47, 63225 Langen or by email to info@axytos.com.

2.7.3. Rights of the data subject

For more information, see “General Information” in section 1.3.

3. E-Mail-Newsletter

If you would like to receive the newsletter offered on our website, we need an e-mail address from you, as well as information that allows us to verify that you are the owner of the e-mail address provided and agree to receive the newsletter. Further data is not collected or only collected on a voluntary basis. We use this data exclusively for the purpose of sending the requested information and do not pass it on to third parties – except for the purpose mentioned below.

The newsletter is sent as part of an ordered processing by our service provider “Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin”, to whom we pass on your e-mail address, surname and first name exclusively for this purpose.

The data collected as part of the newsletter can be processed for statistical purposes. It is not possible to draw conclusions about individual persons.

As part of the verification of your newsletter order, we carry out a double opt-in procedure via the WordPress Premium Plugin Contact Form 7 Double Opt-In. No cookies are set and no data is transmitted to third parties.

We store the following data as part of the double opt-in procedure:

Registration date and time
Registration IP
Confirmation date and time
Confirmation IP
E-mail address

Our newsletter is usually sent every two weeks. In addition, we send out special newsletters at irregular intervals, as far as we would like to inform you about special topics deviating from our regular newsletter.

The processing of the data entered into the newsletter registration form takes place exclusively on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time, for example via the “unsubscribe” link in the newsletter or by sending an e-mail to info@axytos.com. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you have stored with us for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list immediately after unsubscribing from the newsletter. Data stored by us for other purposes remains unaffected by this.

After you unsubscribe from the newsletter distribution list, your e-mail address will be blacklisted to prevent future mailings. We proceed in the same way with e-mail addresses to which the newsletter cannot be delivered (hard bounces).

The blacklist data will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 sentence 1 lit. f GDPR). The storage in blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

4. Social media appearances

We maintain publicly accessible profiles in social networks. Your personal data will be processed by us when you communicate with us via the above-mentioned social media platforms. The social networks we use in detail can be found below.

When you visit our website, the buttons of these social plug-ins are deactivated by default. i.e., we do not send any data to the respective social networks without your intervention. Before you can use these buttons, you must activate them with your click.

Social networks such as Facebook, Twitter, etc. can usually comprehensively analyze your user behavior if you use their website or a website with integrated social media content (e.g., like buttons or advertising banners). Visiting our social media presence triggers numerous data protection relevant processing operations. In detail:

If you are logged into your social media account and visit our social media presence, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your device or by collecting your IP address.

By collecting data in this way, the operators of the social media portal can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media presence. If you have an account with the respective social network, interest-based advertising can be displayed on all devices on which you are logged in. Please also note that we cannot trace all processing processes on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals.

We have limited influence on the processing of your personal data carried out by the platform operators. At the points where we can influence, we work towards the data protection complaint handling by the operator of the social media platform within the scope of the possibilities available to us. In many places, however, we cannot influence the data processing by the operator of the social media platform and do not know exactly what data processes is and to what extent. This also applies to functionalities such as the “like” button (or comparable designation) as well as functions that share content and other functionalities of the respective social media provider, which it makes available for use in connection with texts/offers of axytos. Information on the processing carried out by the operators can be found at any time in the data protection information of the respective platform operators.

Legal basis

Our social media presence should ensure the widest possible presence on the internet. The legal basis is our legitimate interest in carrying out public relations and communication of our company with you in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on different legal bases to be specified by the operators of the social networks (e.g., consent within the meaning of Art. 6 para. 1 sentence 1 lit. a GDPR).

Responsible and assertion of rights

If you use one of our social media sites (e.g. Facebook), we are jointly responsible for the data processing operations triggered during this visit together with the operator of the social media platform. In principle, you can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective social media portal (e.g. against Facebook) assert.

Please note that despite the joint reasonability with the social media portal operators, we do not have a full influence on the data processing processes of the social media portals. Our possibilities depend significantly on the company policy of the respective provider.

Data deletion and storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as the purpose for their storage no longer applies, you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them. Mandatory legal provisions – retention periods – remain unaffected.

We have no influence on the storage period of your data stored by the operators of the social networks for their own purposes. For details, please directly contact the operators of the social networks (e.g. in their data protection information, see below).

Recipient and place of processing

We do not pass on your personal data collected in the context of the use of the social media pages to third parties and we do not process it outside Germany. However, please note that the data may be passed on by the operators of the social media platforms.

Social networks in detail
XING
We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Details on their handling of your personal data can be found in XINGs’ privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.

LinkedIn
We have a LinkedIn profile. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is certified according to the EU-US Privacy Shield. LinkedIn uses cookies.

If you would like to deactivate LinkedIn advertising cookies, please use the following Link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
Details on their handling of your personal data can be found in LinkedIns´ privacy policy: https://www.linkedin.com/legal/privacy-policy.

5. Third country transfer

Here we inform you about the processing of personal data concerning you in third countries without an adequacy decision.

axytos uses service providers. Some of them use servers in third countries, i.e. outside the EU or the EEA. This includes the USA. The associated transfer of personal data must be permissible pursuant to Art. 44 et seq. GDPR. The ECJ ruled in July 2020 that the EU-USA Privacy Shield Agreement can no longer be used to transfer personal data to the USA. This means that the sectoral adequacy decision is thus cancelled.

axytos agrees with service providers who process personal data in an unsafe third country on the standard data protection clauses issued by the EU Commission, which continue to apply. If possible, we also agree on additional guarantees to ensure that sufficient data protection is guaranteed in the USA or other third countries.

Nevertheless, it may happen that despite all contractual and technical measures, the level of data protection in the third country does not correspond to that in the EU. In these cases, we ask you, if necessary, in the context of cookie consent, in (contact) forms or in other registrations and applications in accordance with Art. 49 para. 1 lit. a GDPR for the transfer of your personal data to a third country. This applies in particular to the transfer of data to the USA. In the USA, US-authorities and intelligence services may have access rights and opportunities to personal data without us as a data exporter or you as a data subject aware of this and without sufficient legal means at your disposal to prevent this or to take action against such access.

In this declaration you will find information about all service providers from third countries that we use.

6. Hosting

We host our website at Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen (hereinafter referred to as Hetzner). For details, please refer to Hetzner’s privacy policy:
https://www.hetzner.com/de/rechtliches/datenschutz.

The use of Hetzner is based on Art. 6 para. 1 sentence 1 lit. f GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. Insofar as a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 sentence 1 lit. a GDPR and Section 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information in the user’s terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

Order processing: We have concluded an order processing agreement with the above-mentioned provider. This is a contract required by data protection law, which ensures that this provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

7. Changes to this data protection notice

axytos GmbH reserves the right to update this data protection declaration at any time if necessary to adapt to technical developments or in connection with the offer of new services or products.

Contact

If you have any further questions about data protection, you can contact us at any time by e-mail: datenschutz@axytos.com