1. Accountability

The controller within the meaning of data protection law is Hofmann & Vratny OHG, Steinkirchen 4 1/2, 85617 Aßling, Tel: +49 8092 85333-0, Contact: info[at]vhmhv.de (hereinafter referred to as “we”).

2. Contact details of our Data Protection Officer

You can contact our Data Protection Officer at:

[email protected]

3. Storage of access data

Each time you access our website, access data is stored in a log file on our provider’s web server.

This data record consists of

§ The IP address of the requesting device

§ The date and time of retrieval

§ The name and URL of the requested file

§ The volume of data transferred

§ Notification of whether the retrieval was successful

§ Identification data of the browser and operating system used

§ The website from which access is made

§ The name of your Internet access provider

Collection of this data is necessary for technical reasons. This data does not allow us to draw any conclusions about your person. Unfortunately, it is not technically possible to use our website without providing your IP address.

4. Cookies

4.1 Use to ensure ease of use

We store cookies on the storage medium of your device to make your visit to our website attractive and to enable the use of certain functions. Cookies will only be used if you have consented to this on the banner on the homepage of our website and your browser settings allow cookies to be saved.

Cookies are small text files that are sent from the web server of our provider to the browser on your device and stored there. The cookies are required, for example, in order to identify you for the entire duration of your visit. These “session cookies” are deleted from the storage medium of your device at the end of your browser session.

In most cases the browser on your device is set to accept the creation and storage of cookies. You can set up your browser in such a way that it rejects the storage and use of cookies in general or in individual cases. In this case, however, the functionality of our website may be limited.

4.2 Use for advertising, market analysis and need-based design purposes (Google Analytics and Hotjar)

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google LLC (“Google”). Google uses “cookies”, which are text files that are stored on your computer to facilitate the analysis of your usage of the website. The information generated by these cookies

regarding your use of the website is generally transmitted to a Google server in the USA and stored there. Google uses this information on our behalf to evaluate your use of the website, to compile reports about website activities and to provide us with other services related to website and Internet usage. The usage thus serves our sales interest as a legitimate interest.

For the US, the EU Commission has issued an adequacy decision in the form of the EU-US Privacy Shield. Google is currently certified according to the EU-US Privacy Shield.

To ensure the anonymous collection of IP addresses, the source code of Google Analytics has been extended by the code “_anonymizeIP”. This ensures that the IP addresses are only processed further in truncated form to prevent them from being traced to a specific user. The IP address transmitted by your browser within Google Analytics is not merged with other data held by Google.

You can prevent the storage of cookies by making the corresponding settings in your browser. You can also prevent the collection of the data generated by the cookie about your usage of the website (incl. your IP address) and the processing of this data on the part of Google by downloading and installing the browser plug-in available at the following link:

tools.google.com/dlpage/gaoptout

Alternatively, you can prevent Google from collecting and using your data by clicking on the following link:

Disable Google Universal Analytics

Clicking on this link sets an opt-out cookie that prevents Google from collecting your information.

Further information regarding terms of use and data protection can be found at the following links:

www.google.com/analytics/terms/de.html
www.google.com/intl/de/analytics/learn/privacy.html
www.google.de/intl/de/policies/privacy

Hotjar

On our website, data is collected and stored for marketing and optimisation purposes using technologies from Hotjar Ltd (hereinafter referred to as “Hotjar”), Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta.

The tool provided by Hotjar enables movements on the pages recorded by Hotjar to be tracked, creating “Heatmaps”. This captures clicks and scrolling by users. Hotjar uses cookies and other technologies to collect information about the behaviour of our users and their devices, in particular, the IP address of the device (collected and stored only in an anonymised form), screen size, unique device identifiers, information about the browser used, location (country only), preferred language for displaying our website. Websites that collect or display personal data are excluded from tracking. The collection and processing of data by the Hotjar tool is anonymous.

You have the option to disable the data processing by Hotjar by clicking on the following link:

https://www.hotjar.com/legal/compliance/opt-out

Please note that this setting is made only on the device from which you click on the link.

Hotjar Ltd.’s privacy policy can be found at www.hotjar.com/privacy

5. Social plug-ins

Our website contains embedded plug-ins for social networks for the German market Facebook (operator: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland), Twitter (operator: Twitter International Company One Cumberland Place Fenian Street

Dublin 2 D02 AX07 Ireland), Instagram (operator: Instagram LLC, 1601 Willow Rd. Menlo Park CA 94025 USA) and Google (operator: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The plug-ins are identifiable by the respective logo.

We use the “two-click solution” to protect your data. This means that when you visit our website, none of your personal data is initially passed on to Facebook, Twitter Instagram or Google (hereinafter referred to as “plug-in providers”). Personal data will only be transmitted to the plug-in provider if you click on the corresponding plug-in.

If you activate a plug-in, the corresponding plug-in provider is informed that your browser has visited our website even if you do not have an account with the plug-in provider or are not logged in to the provider at the time. This information (including your IP address) is transmitted from your browser directly to a server of the respective plug-in provider in the USA and stored there.

If you are logged in to the respective plug-in provider, the plug-in provider can assign the visit to our website directly to your account with the plug-in provider. If you press the button for the respective plug-in provider or make a comment, the corresponding information is also transmitted directly to a server of the plug-in provider and stored there. The information is also published on the plug-in provider’s pages and displayed to your friends.

If you do not want the respective plug-in provider to assign the data collected via our website to your account with the respective plug-in provider, you must log out of the respective plug-in provider before visiting our website.

The plug-in providers can use the data collected for the purposes of advertising, market research and designing their respective sites. To this end, the respective plug-in provider creates usage, interest and relationship profiles, for example, to evaluate your use of our website with regard to the advertisements shown to you by the respective plug-in provider, to inform other users of the platforms of the plug-in providers about your activities on our website and to provide further services associated with the use of the platform of the respective plug-in provider. You may object to the creation of these profiles if you are not in agreement. In order to exercise this right of objection, however, you must contact the respective plug-in provider directly.

Google currently has the necessary certification according to the EU-US Privacy Shield.

We have no influence over the data collected and data processing operations, nor are we aware of the full scope of the data collection, the purposes and the retention periods. You can find out more information about this and about your rights and the settings you can make to protect your data in the plug-in providers’ data protection policies by clicking on the following links:

www.facebook.com/privacy/expla...

https://twitter.com/privacy

help.instagram.com/155833707900388

www.google.com/intl/de/+/polic...

6. Retargeting

We use Google AdWords and Facebook to remind you of our website and services if you have previously visited our website and shown an interest in our services.

Google AdWords

This website uses Google’s online advertising program “Google AdWords”, in particular conversion tracking. A conversion can be a purchase, signup, access to a webpage or a request, for example. Google has developed a tool to measure these conversions and ultimately the effectiveness of AdWords ads. The conversion tracking cookie is saved on your device when you click on an ad placed by Google. These cookies lose their validity after 30 days and are not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, we and Google can see that you have clicked on the ad and been redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot therefore be traced through the websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers see the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you will not receive any information that personally identifies users. If you do not wish to participate in tracking, you can easily deactivate the Google conversion tracking cookie in your Internet browser settings. You can also prevent the use of these cookies in your Google advertising settings.

Facebook Pixel

Your consent to the use of cookies also includes the use of a “visitor action pixel” from Facebook Ireland Ltd. 4 Grand Canal Square Grand Canal Harbour Dublin 2 Ireland (“Facebook”). This allows us to track the actions of users after they have viewed or clicked on a Facebook ad. This allows us to measure the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected in this way is anonymous for us, i.e. we do not see the personal data for individual users. However, this data is saved and processed by Facebook. Facebook may link this information to your Facebook account and may also use it for its own promotional purposes, in accordance with Facebook’s Privacy Policy https://www.facebook.com/privacy/explanation. You can enable Facebook and its affiliates to show ads on and off Facebook. A cookie may also be stored on your device for these purposes.

7. Vacancies

You can find out about our current vacancies by clicking on the “Vacancies”, “Career” and “Job Details” links. It is not possible to apply for positions online. However, you are welcome to send your application documents to us by e-mail. Please make sure that you have sufficient data protection in this case.

All data will be used to process your application and thus for pre-contractual purposes. The e-mail address is required in order to directly confirm receipt of your application. Your contact details will be used to get in touch with you, for example, to arrange an interview.

Your applicant data will be stored for up to six months after appointment of the desired training or position, or in the case of unsolicited applications, after rejection. Immediately after the appointment of the training or employment position, the data of the applicants who have not been awarded the contract will be blocked for any use other than the clarification of applicant’s claims. In the case of unsolicited applications, the data will be blocked following rejection. Any further storage and use of applicant data will only take place provided you have given us your express consent to the further retention of your applicant data or in the case of a legitimate interest on the part of Exutec, for example, in the event of a burden of proof in court proceedings. If an employment or training contract is concluded with an applicant, the data will be stored and processed for the performance and processing of the employment relationship and thus for contractual purposes.

8. Contact form

When using our contact form, which can be accessed via the “Contact” link, you will be asked to enter certain details (name, e-mail address, message, telephone number). The above details are mandatory and are used to process your request. The company name is a voluntary entry. We use the data to process your inquiry and thus for pre-contractual measures or in our legitimate interest.

Unfortunately, you will not receive an answer from us if you do not provide the mandatory information. Failure to provide voluntary information has no impact.

9. Legal and contractual obligations for provision

You are neither contractually nor legally required to make your data available to us.

10. Retention period and deletion of data

The data that you provide to us when using our contact form will be deleted as soon as the communication has ended or your request has been clarified in full and this data has not been collected for contractual purposes at the same time. Communication regarding legal claims will be saved until the end of the limitation period.

IP numbers will be deleted or anonymised within seven days of collection.

Section 7 of this Privacy Policy applies to applicant data.

11. Disclosure of your data

We will pass your data on to third parties only if we are authorised or obliged to do so in accordance with applicable law. The same applies if we receive your data from third parties.

Authorisation is also deemed to exist if third parties process the data on our behalf: If we do not carry out our business activities (e.g. operation of the website, modification of the product range, support for participants, creation and sending of advertising material, data analysis and, if applicable, data cleansing, payment processing) ourselves, but instead commission other companies to carry them out, and these activities are connected with the processing of your data, we have previously contractually obliged these companies to use the data solely for the purposes permitted to us by law. We are authorised to monitor these companies to that extent.

12. Data security

We take all necessary technical and organisational security measures to protect your personal data from loss and misuse. Your data is stored in a secure operating environment that is not accessible to the public. In this context, procedures will also be implemented to regularly review, assess and evaluate the effectiveness of technical and organisational measures to ensure the security of processing. Furthermore, the confidentiality, integrity, availability and resilience of the systems and services in connection with the processing shall be ensured, as shall the rapid restoration of the availability of personal data in the event of a physical or technical incident.

The personal data that you enter in the contact form is encrypted. We use SSL (Secure Socket Layer) encryption technology for this purpose. Please note that while we strive to provide a secure and reliable website for users, access by third parties cannot be 100% excluded.

Please note that complete confidentiality and data security is not guaranteed for communication by e-mail. We therefore recommend sending confidential information by post.

13. Your rights (information, correction, blocking, deletion, objection, revocation, transfer, complaint)

13.1 Objection

You can object to the processing of your personal data by us at any time for reasons arising from your particular situation. You can use the contact details provided in Sections 1 and 2 to do so. If you file an objection, we will no longer process your personal data unless we can prove compelling and legitimate grounds for processing that outweigh your interests, rights and freedoms.

13.2 Revocation

Furthermore, you have the right to revoke any consent you have given with future effect. The legality of data processing to which you have consented remains unaffected by this until the revocation is exercised.

13.3 Other rights

You have the right at any time to receive information about the personal data that we hold about you free of charge, to correct incorrect data and to have data blocked or deleted. Furthermore, you have the right to receive your data in a structured, common and machine-readable format and to have your data transferred by us to someone else. Finally, you have the right to complain to a data protection authority.

With the exception of your right to complain to the data protection authority, you can address any concerns to us using the contact data provided in Sections 1 and 2.