In order to provide the functions and services of our digital offerings, it is necessary for us to collect personal data about you. Personal data is data that can be used to identify you personally. Below we explain what data we collect about you, why this is necessary and what rights you have in relation to your data.

1.2.1 Legal basis
We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the BDSG as amended. Data processing by us only takes place on the basis of legal permission. We process personal data when you use this website

• only with your consent (Art. 6 para. 1 a GDPR),
• for the performance of a contract to which you are a party or at your request for the implementation of pre-contractual measures (Art. 6 para. 1 b GDPR),
• to fulfill a legal obligation (Art. 6 para. 1 c GDPR) or
• if processing is necessary for the purposes of our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require protection of personal data (Art. 6 (1) f GDPR).

1.2.2 Data storage
Unless otherwise stated in the following information, your personal data will be deleted or blocked as soon as you withdraw your consent to processing or the purpose for storing the data no longer applies or the data is no longer required for the purpose, unless its continued storage is required for evidence purposes or there are statutory retention obligations to the contrary.

1.2.3 Forwarding of data
Personal data will not be passed on without your express consent in accordance with Art. 6 para. 1 lit. a GDPR, unless

• there is a legal obligation pursuant to Art. 6 para. 1 lit. c,
• this is required by law and in accordance with Art. 6 para. 1 b GDPR for the processing of contractual relationships or
• the disclosure pursuant to Art. 6 para. 1 f GDPR is necessary for the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data.

1.2.4 Transfer of data outside the EU
In principle, no personal data is transferred to countries outside the European Economic Area and associated countries (no "third country transfer"). If this should be necessary, we will inform you separately.

1.2.5 Minors
Our services are not aimed at children under the age of 16. We do not knowingly collect data from children under the age of 16. If you have not yet reached the age limit, do not use the services and do not provide us with your personal data.

Within the framework of the applicable legal provisions, you have the right at any time to

• free information (Art. 15 GDPR) about your stored personal data, its origin and recipients and the purpose of the data processing and
• a right to rectification (Art. 16 GDPR),
• Erasure (Art. 17 GDPR),
• Blocking (Art. 18 GDPR) or
• Transfer (Art. 20 GDPR) of this data.

1.3.1 Revocation of a given consent
Furthermore, you have the right to revoke your declaration of consent under data protection law (Art. 6 para. 1 lit. a GDPR) at any time (Art. 7 para. 3 GDPR). All you need to do is send us an informal email. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

1.3.2 Objection to processing
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying a particular situation. If you wish to exercise your right to object, simply send us an e-mail.

If you have any questions about the collection, processing or use of your personal data, or if you wish to request information, correct, block or delete data, please contact us:

To the data protection officer
DPL Professionals GmbH
Carl-Benz-Strasse 27
48734 Reken

E-mail: dsb@dplp.de

If you believe that the processing of your data violates data protection law or that your data protection rights have been violated in any other way, you can lodge a complaint with the competent data protection authority (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf).

We reserve the right to change our security and data protection measures if this is necessary due to technical and legal developments. In such cases, we will also adapt our data protection information accordingly. Please therefore refer to the latest version of our data protection information.

Last change: September 2023

Every time a user accesses our website, we or our web space provider collect data about each access to our website (so-called server log files). The access data includes Name of the website accessed, date and time of access, referrer URL (the previously visited page), web browser used, IP address and the country from which the request was made. Our web space provider is used on the basis of an order processing contract in accordance with Art. 28 para. 3 GDPR.

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.

The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

The log file data is generally stored for 30 days; connection data is deleted immediately after the HTTP/S call has been executed.

2.2.1 Request by e-mail, telephone or fax
If you contact us by e-mail, telephone or fax, we will store and process your inquiry, including all personal data (name, inquiry), for the purpose of processing your request. No data will be passed on to third parties in this context.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on your consent (Art. 6 para. 1 lit. a GDPR) and / or on our legitimate interests (Art. 6 para. 1 lit. f GDPR), as we have a legitimate interest in the effective processing of the inquiries addressed to us.

The data you send to us will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

2.2.2 Contact form
For questions of any kind, we also offer you the option of contacting us using a form provided on the website. If you send us inquiries via the contact form, your details from the contact form will be stored by us for the purpose of processing the inquiry and in the event of follow-up questions. No data will be passed on to third parties in this context.

The legal basis for the processing of the data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR and, if applicable, Art. 6 para. 1 lit. b GDPR, if your request is aimed at concluding a contract or implementing pre-contractual measures.

We will retain the data you provide on the contact form until you request its deletion or the purpose for its storage no longer pertains (e.g. after fulfilling your request). Mandatory statutory provisions - in particular retention periods - remain unaffected.

2.2.3 Publication of job advertisements and online applications
We process the personal data provided by you as part of the application process only for the purpose of the effective and correct handling of the application process and for contacting you as part of the application process on the basis of Art. 6 para. 1 lit. b, 88 GDPR in conjunction with. § 26 BDSG new version.

As part of the application form, you will be asked to provide personal data. We observe the principle of data minimization and data avoidance in that you only have to provide us with the data that we need to fully review your application documents, such as your CV, or that we are legally obliged to collect. This mandatory information is marked with an * (asterisk). In order to protect the security and confidentiality of your data in the best possible way, your application documents will be transmitted to us in encrypted form.

For the purpose of processing your data on the application form, the external service provider zvoove Development GmbH & Co. KG, Rudolf-Vogt-Straße 2, 93053 Regensburg, Germany, which processes the data strictly in accordance with instructions as part of order processing pursuant to Art. 28 (3) GDPR.

If your job application is rejected, the data you have submitted will be deleted three months after notification of the rejection. This does not apply if longer storage is necessary due to legal requirements (e.g. the burden of proof under the General Equal Treatment Act) or if you have expressly consented to longer storage in our database of interested parties.

Further information on how we process your data in the application process can be found here.

A web browser cookie is a small text file that is sent from a website to your computer or mobile device, where it is stored by your web browser. Web browser cookies may store information such as your IP address or other identifier, your browser type and information about the content you view and interact with on the Digital Services. By storing such information, web browser cookies can store your preferences and settings for online services and analyze how you use online services.

You can prevent or restrict the installation of cookies by changing the settings of your Internet browser. You can also delete cookies that have already been saved at any time. However, the steps and measures required for this depend on the specific Internet browser you are using and are described in the help function of the respective web browser. However, if you prevent or restrict the installation of cookies, this may mean that not all functions of our website can be used to their full extent.

There are also other technologies that can be used for similar purposes, such as web beacons, Flash cookies, HTML 5 cookies and embedded plugins/scripts.

In principle, you can also visit our website without using embedded functions. This does not apply to technically necessary technologies. These technologies are used in accordance with §25 TDDDG and Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a user-friendly design of our website.

2.3.1 Use of web fonts
We use so-called web fonts provided by Google on our website for the uniform display of fonts. The Google fonts are installed locally on our server. There is no connection to Google servers.

2.3.2 Links to third-party platforms
We also advertise our presence on the third-party platforms listed below on our website in order to raise awareness of our company, products and services. The underlying advertising purpose is to be regarded as a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

The integration takes place via a linked graphic of the respective provider. The use of this linked graphic prevents a connection from being automatically established to the respective provider's server when a website with a third-party platform application is called up in order to display a graphic from the respective provider itself. Only by clicking on the corresponding graphic is the user forwarded to the service of the respective provider. After the user has been forwarded, the respective provider collects information about the user.

The following third-party platforms are integrated into our website through links:

• Facebook
  (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
• Instagram
  (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

As the website operator, we treat the data provided as strictly confidential and protect the interests of users. Personal data is neither sold nor passed on to third parties. We make every reasonable effort to protect the databases from unauthorized access, loss, misuse or falsification.

All data that you transmit via our website is transmitted in encrypted form. The data is encrypted using the Security Socket Layer (SSL), a security standard that is supported by most browsers. You can tell that secure data transmission via SSL is actually taking place by the small lock symbol in your browser status bar. Access to pages where you enter your private data is password-protected.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) may be subject to security vulnerabilities. Complete protection of data against access by third parties is not possible. You should therefore encrypt important or confidential information when communicating via the Internet or send us the information by post.