Privacy Policy

1. Data Controller

The data controller within the meaning of the General Data Protection Regulation (GDPR) is:

Senbert GmbH
Böhmerwaldstr. 2
93444 Bad Kötzting

Tel: +49 (0)9941 / 94540
Email: info@senbert.de

2. Data Protection Officer

You can contact our Data Protection Officer, for example, at:

Email: datenschutz@senbert.de

3. General information on data processing

We process personal data in accordance with the provisions of the GDPR and national data protection laws for the following general purposes:

  • To fulfill contractual obligations (art. 6(1)(b) GDPR): Personal data is processed to carry out pre-contractual measures and to fulfill contractual obligations, particularly in connection with inquiries or the use of our services.

  • To fulfill legal obligations (art. 6(1)(c) GDPR): Processing may be necessary to comply with legal obligations, e.g., commercial or tax-related retention requirements.

  • To protect legitimate interests (art. 6(1)(f) GDPR): Processing may take place to safeguard our legitimate interests or those of third parties. Our legitimate interests may arise, for example, from ensuring IT security, from advertising interests, or from optimizing our offerings.

  • Based on your consent (art. 6(1)(a) GDPR): If you have given us your consent to process your personal data for specific purposes (e.g., to send newsletters or to analyze your user behavior), processing is carried out on this basis. Consent that has been given may be revoked at any time with future effect.

The specific purposes of the processing and the relevant legal bases in each individual case can be found in the following sections of this privacy policy

Unless more specific provisions are set forth below, we will delete or anonymize personal data as soon as the purpose of the processing no longer applies and there are no legal retention obligations to the contrary.

You are under no legal or contractual obligation to provide data when using our website.

Automated decision-making, including profiling as defined in article 22 of the GDPR, does not take place.

4. Data processing in connection with the provision of the website

Nature and scope of data processing for purely informational use

When using our website for informational purposes - that is, if you do not register, consent to services/cookies, or otherwise actively provide us with information about yourself - we collect only the personal data that your browser automatically transmits to our server. This data is technically necessary to display the website correctly and to ensure its stability, security, and functionality.

In particular, the following data is processed:

  • Language, browser type, and browser version
  • Operating system used
  • Referrer URL (the previously visited page)
  • Hostname of the accessing device
  • Date and time of the server request
  • IP address (possibly in truncated form)
  • Amount of data transferred (if applicable) and access status
  • Requested resource / URL
  • Server events and errors


Purposes of processing

Processing is carried out for the following purposes:

  • Proper display of the website
  • Ensuring stability, security, and technical operations (e.g., error analysis, detection of misuse, load balancing) regarding the website


Legal basis

The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in the purposes mentioned above.


Recipients

Our websites are hosted by:

netcup GmbH
Emmy-Noether-Straße 10
D-76131 Karlsruhe

This company therefore receives the above-mentioned data as our data processor on the basis of a data processing agreement pursuant to art. 28 GDPR.

Retention Period

This data is stored for a period of 7 days and then deleted or anonymized, unless further storage is required for evidentiary purposes in individual cases (e.g., in the event of security-related incidents).


Obligation to Provide

The provision of this data is technically necessary for the operation of the website. Without processing the aforementioned data, the website cannot be provided.

5. Cookies and similar technologies

General Information 

Our website uses cookies and similar technologies (hereinafter collectively referred to as “cookies”) to ensure technical functionality and to analyze the usage. Cookies are small data files stored on your device that contain certain information, such as your language settings or duration of visit. Upon a return visit, this information can be retrieved to, for example, provide you with an improved user experience.

Types of Cookies:

  • Technically necessary cookies: These are essential for the operation of the website (e.g., for navigation or access to secure areas). 

  • Functional cookies: These enable certain convenience features, such as saving settings or automatically filling out forms. 

  • Analytics and statistics cookies: These collect information about the use of our website to improve its performance and content. 

  • Marketing and tracking cookies: These are used to tailor content and advertising to your interests.


In addition, we distinguish between:

  • Session cookies: These are stored only for the duration of your visit and are deleted when you close your browser.

  • Persistent cookies: These remain stored beyond the session and are automatically deleted after a certain period of time.

  • First-party cookies: These are set directly by us.

  • Third-party cookies: These are set by third-party companies, e.g., analytics tools or advertising networks.


The processing of personal data via cookies is generally based on: 

  • For technically necessary cookies: Art. 6(1)(f) GDPR (legitimate interest in the operation, security, and optimization of the website). 

  • For all other cookies: Article 6(1)(a) of the GDPR (consent).

You can delete or block cookies via your browser settings. Please note that disabling cookies may result in certain website features being limited or unavailable.


Legal Basis: TDDDG 

To the extent that we store information on your device or retrieve it from there, this is also done on the basis of Section 25(2) TDDDG, provided that such information is strictly necessary to provide you with the requested service.. 

The use of non-essential cookies (e.g., for statistical or advertising purposes) is based exclusively on your consent pursuant to art. 6(1)(a) GDPR and - to the extent that access to device information or storage of information on your device occurs - § 25(1) TDDDG. Further information on the cookies we use can be found here: 

Cookie Table: 

„WSESSIONID“ 

Provider

We, as the operator of this website

Purpose

This cookie assigns a unique session ID to your browser so that the server can track your session data (e.g., login status or form entries) during your visit. No personal data is stored in the cookie itself.

Storage
Duration

Session (deleted when the browser is closed)

Type

Technically necessary

Legal Basis

Art. 6(1)(f) GDPR (legitimate interest in the technical functionality of the website), § 25(2)(2) TDDDG, as the storage of this information and access to it on your device are absolutely necessary to provide you with the desired digital service

6. Application

If you send us applications via email or by mail:

As part of the application process, we generally process the following data about you: 

Master data (name, contact details, address), application documents (cover letter, resume, certificates, qualifications), communication/process data (correspondence, appointment and interview dates, notes), and, if applicable, publicly available professional profiles. 

We process special categories of data (e.g., health data (such as severe disability) or other information you have provided) only to the extent required by law or with your explicit consent 


As a rule, we receive the data from you. Additionally, data may come from recruiters, publicly accessible profiles used for professional purposes, or from recommendations. 

Internally, only the departments involved in the process have access (Human Resources, the relevant functional department, and, if applicable, management/employee representatives). External IT/HR service providers (e.g., hosting of the application portal, video interview or scheduling tools) process your data as processors bound by instructions pursuant to art. 28 GDPR. If service providers outside the EU/EEA are used, the transfer takes place only under the conditions of art. 44 et seq. GDPR. 

Your information will be used to process your application and to decide on the establishment of an employment relationship. The legal basis is article 6(1)(b) of the GDPR. Furthermore, your personal data may be processed to the extent necessary to defend against legal claims asserted against us arising from the application process. The legal basis for this is article 6(1)(f) of the GDPR. The stated purpose also constitutes the legitimate interest in the processing. 

Your personal data will be deleted no later than 6 months after the conclusion of the application process, provided that no other legitimate interests on our part preclude deletion or you have not granted us consent for longer storage. You may revoke your consent to longer storage at any time with future effect. 

The provision of personal data for an application process is neither legally nor contractually required. However, without this information, we cannot process your application.


7. Contact us – including via our contact form

When you contact us, we process the data you provide (e.g., name, email address, phone number, mobile phone number, content of the message, any attachments, as well as timestamps and, if applicable, technical metadata) in order to process, respond to, and document your inquiry. 
If this processing is necessary for the performance of a contract to which you are a party or for the implementation of pre-contractual measures taken at your request, the legal basis for this data processing is article 6(1)(b) of the GDPR.
Otherwise, the processing is based on our legitimate interest in efficient customer communication (article 6(1)(f) of the GDPR).
We delete contact inquiries as soon as the process is completed and there are no retention obligations (e.g., under the German Commercial Code (HGB) or the German Fiscal Code (AO) for contract-related correspondence) or legitimate interests (e.g., for evidentiary or defense purposes, typically until the expiration of the statutory limitation period) that prevent this.
The provision of your personal data is voluntary. However, we can only process your request if you provide us with your email address and the reason for the request. Please note that internet-based data transmissions are generally associated with security risks. In particular, sending unencrypted emails is not secure. 

We therefore ask that you do not send confidential information via unencrypted email but to use postal mail instead.

8. Your rights as a data subject

You have the right to access the personal data we process about you and to the information specified in detail in article 15 of the GDPR. In addition, subject to the respective legal requirements, you have the right to rectification (art. 16 GDPR), the right to restriction of processing (art. 18 GDPR), the right to erasure (art. 17 GDPR), the right to data portability (art. 20 GDPR), and the right to withdraw consent with future effect.

You also have the right to object to the processing under the statutory conditions (art. 21 GDPR):

You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of art. 6(1)(e) (data processing for the performance of a task carried out in the public interest) or (f) (data processing based on legitimate interests); this also applies to profiling based on these provisions. We will no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims (art. 21(1) GDPR).

If personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing (art. 21(2) GDPR).

To exercise your rights, you may contact us at any time using the contact details provided above. 

You also have the right to lodge a complaint with a data protection supervisory authority (art. 77 GDPR).

9. Links

Our website contains links to third-party offerings as well as to other websites operated by us. If you follow a link that leads to a website for which we are not responsible, please note that separate privacy policies apply there. We assume no responsibility or liability for these third-party privacy policies and data processing practices. Therefore, please review the relevant privacy policies before voluntarily entering personal data there.

Data is only transmitted to the destination of the link once you actively click on an external link. In particular, the following information is transmitted: your IP address, the time of your click, and the page on which you clicked the link.

Some links may result in data being transferred to countries outside Europe. As a result, foreign third parties, authorities, or intelligence agencies may gain access to connection data.

10. Social Media (LinkedIn, Facebook)

We maintain a company page on the following social media platforms - links to these can also be found on our website:

  • LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, hereinafter “LinkedIn” 
  • Meta Platforms Ireland Limited, Block J, Serpentine Avenue, Dublin 4, Ireland, hereinafter “Facebook”

We operate our social media pages to provide information and communicate with people who are interested in the content we publish there. In accordance with the terms of use of the respective social media platform, which every user has agreed to when creating an account, we can identify the page’s followers and view their profiles as well as other information shared by users.


For example, your name and profile picture are visible to us (and other users) when you visit our social media page or comment on our posts. 

We therefore only collect personal data that has become an obvious part of our social media page through your active participation. 

We have no interest in collecting and using your personal data for marketing purposes. Your data remains on the respective social media platform.

10.1 Statistics and page insights

When you visit our social media pages, certain information about users is processed. The operators of the social media platforms are solely responsible for this processing of personal data. 

You can find detailed information about the processing of personal data by the respective providers in their privacy policies:


The social media platform providers collect various data to provide us with statistics and insights about our pages in an anonymized form. With the help of these statistics or page insights, we can gain insights into the types of actions that social media users take on our site. We cannot link the information obtained through page insights to individual user profiles that interact with our pages. 

This processing of personal data is carried out by the social media platform providers and us as joint controllers.

The processing serves our legitimate interest in evaluating interactions on our social media page and improving our social media page based on these insights. The legal basis for this processing is article 6(1)(f) of the GDPR.

We have entered into an agreement with the respective social media platform providers in accordance with article 26 of the GDPR.

Details regarding the processing of personal data for the creation of page insights and the agreement concluded between us and the social media platform providers can be found at the following links:

The operation of our respective social media pages and the associated processing of personal data are based on article 6(1)(f) of the GDPR to pursue our legitimate interests in providing an opportunity for information and interaction via social media for and with our users and visitors. 

Additional legal bases for data processing may arise in individual cases under article 6(1)(a), (b), and (c) of the GDPR. 

We delete personal data - to the extent that we collect any at all - once the purpose of the data processing has been achieved and there are no other legal grounds preventing the deletion of the data. 

We generally delete messages on our social media accounts manually after 3 years.

10.2 Exercising Your Rights

You also have the option to exercise your rights with the social media platform providers. You can find further information on this at the following links:

11. Changes to this privacy policy

We reserve the right to amend this Privacy Policy as necessary. The current version is available on our website at any time.