Privacy Policy

The controller responsible for the described data collection and processing is named in the imprint.

When you visit our website, the data collected from the use of the website is temporarily stored on our web server for statistical purposes in order to improve the quality of our website. This data set contains

- the name and address of the data file,
- the date and time of the query,
- the amount of data transferred,
- the access status (file transmitted, file not found),
- a description of the type of browser used,
- the page, from which the data is requested
- the IP address of the requesting computer shortened to such an extent that no reidentification of any persona data is possible.

The listed usage data is stored anonymously.

In addition, we do not store any IP addresses.

To avoid unauthorized access to your data, we have implemented technical and organisational measures. We use encryption technologies on our website. Your data will be transferred to our servers and back again via a connection that is protected by a TLS encryption technology. You can recognise that you are browsing on an encryption secured website by the lock-symbol shown in the address bar of your browser and by the address bar starting with https://.

We use cookies on our website that are necessary for the use of our website. 

Cookies are small pieces of data that are stored and read in your end-device. A distinction is made between session cookies, which are deleted when you close your browser, and permanent cookies, which are stored even after your visit has expired. 

We do not use these necessary cookies for the purposes of analyses, tracking or advertisement.

Some of these cookies only contain information about certain settings and cannot be related to a person. They may also be necessary to enable user guidance, security and implementation of the site.

We use these cookies in accordance to Art. 6 Para. 1 S. 1 lit. f UK GDPR.

Please be aware that you can set your browser to inform you when cookies are being stored or used on the website you are visiting. Thus, any use of cookies is transparent to you. You have the possibility to delete your browser configuration at any time and prevent any use of new cookies. In the event you refuse the use of cookies, please note that our web sites may not be displayed optimally and some functions are then no longer technically available.

Depending on your settings via our banner, the following cookies are used.

We have integrated the Google Tag Manager on our website, a utility service that itself processes personal data (IP address) only for technically necessary purposes. The Google Tag Manager takes care of loading other components, which in turn may collect data. The Google Tag Manager does not access this data.

You can find more information about the Google Tag Manager in Google's privacy policy.

We use the Google Tag Manager on the basis of Art. 6 Para. 1 S. 1 lit. f UK GDPR and in the legitimate interest of optimal functionality of our website. If you do not wish this, please do not visit our website again.

We use Google Analytics to create pseudonymous user profiles for improving and designing our website on demand. Google Analytics uses “cookies”, which are text files placed on your end device and can be read by us. In this way, we are able to recognize and count returning visitors.

We also use the Google Signals service to create cross-device user statistics (e.g. numbers, user groups) and to play out cross-device remarketing campaigns for Google users. Google only processes the data of users who have activated the "personalised advertising" option in their Google account settings. You can also object in principle to the collection by Google Signals by deactivating the "personalised advertising" function in your Google account. 

Google Ireland Limited and Google LLC (USA) support us as part of Google Analytics as a processor according to Art. 28 UK GDPR. The data processing can therefore also take place outside the EU or the EEA. With regard to Google, an adequate level of data protection is guaranteed on the basis of the adequacy decision (UK Extension to the EU-U.S. Data Privacy Framework). Google also undertakes to conclude standard contractual clauses with other sub-processors.

This data processing is carried out on the basis of Art. 6 Para. 1 S. 1 lit. a UK GDPR provided that you have given your consent via our banner. 

You can withdraw your consent at any time. Please use the following button and make the appropriate settings via our banner.

We also use the Marketing Cloud Account Engagement ("MCAE") tool, a service provided by Salesforce, Inc. Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA. MCAE is a tool linked to our Salesforce CRM system for recording and evaluating the use of a website by website visitors, whereby your click path is recorded when you visit our website and an individual usage profile is created using a pseudonym. We may combine the usage profiles created by MCAE with your other customer data stored by us (e.g. name, professional contact details, information about your organisation and position, etc.) as well as with information from third-party providers (e.g. on your interactions with our social media presences) in order to address you individually, i.e. based on interests and usage. For this purpose, cookies are used that enable recognition of your browser.

As part of the use of MCAE, Salesforce.com Germany GmbH, Erika-Mann-Str. 31-37, 80636 Munich (Germany) supports us as processor according to Art. 28 UK GDPR. Due to data transfers between Salesforce.com Germany GmbH and Salesforce, Inc. data processing may therefore also take place outside the EU or the EEA. With regard to Salesforce, there is an adequate level of data protection based on the adequacy decision (UK Extension to the EU-U.S. Data Privacy Framework).

This data processing is carried out on the basis of Art. 6 Para. 1 S. 1 lit. a UK GDPR, provided that you have given your consent via our banner. 

In addition, you can deactivate the creation of pseudonymised user profiles at any time by configuring your Internet browser so that cookies from the "salesforce.com" domain are not accepted.

You can withdraw your consent at any time. Please use the following button and make the appropriate settings via our banner.

Besides locally stored videos we also embed videos on our websites that are not stored on our servers. So that calling up our website with embedded videos does not automatically result in third-party content being reloaded, in a first step we only display locally saved preview images of the videos. This means that the third party provider does not receive any information.

Only after clicking on the preview image will the content of the third-party provider be reloaded. In this way, the third-party provider receives the information that you have accessed our site and the usage data that is technically required in this context. In addition, the third-party provider is then able to implement tracking technologies. We have no influence on further data processing by the third party provider. By clicking on the preview image, you give us your consent to reload content from the third-party provider.

The embedding takes place on the basis of your consent in accordance with. Art. 6 Para. 1 S. 1 lit. a UK GDPR, provided you have given your consent by clicking on the preview image. Please note that the embedding of many videos means that your data will be processed outside the EU or the EEA. With regard to the providers we use, there is an adequate level of data protection based on the adequacy decision (UK Extension to the EU-U.S. Data Privacy Framework).

We maintain an online presence within social networks and platforms in order to be able to communicate with customers, interested parties and users who are active there and to provide them with additional information about our services. When visiting the respective networks and platforms as well as links to other providers, the terms and conditions and data protection guidelines of the respective operator apply.

We do not integrate any social plugins directly into our website. When you visit our website, no data is transmitted directly to social media services such as Facebook, LinkedIn or Youtube. Only when you click on the logos you will be directed to the respective website. Further data from you may be processed on these. We have no influence on this data processing on the respective linked websites.

We provide information about the processing of your data in this context in the privacy policy for our Social Media Channels - you can find this in the separate tab.

You have the possibility to get in touch with us by telephone, fax, e-mail, post mail or via our contact form. To use our contact form, we first need the data marked as mandatory fields from you. We use this data on the basis of Art. 6 Para. 1 S. 1 lit. f UK GDPR to answer your request.

In addition, you can decide for yourself whether you would like to provide us with further information. This information is provided voluntarily and is not absolutely necessary to contact you. We process your voluntary information on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a UK GDPR.

If the contact is aimed at concluding a contract, Art. 6 Para. 1 lit. b UK GDPR provides an additional legal basis for processing. 

Your data will only be processed to answer your request. We delete your data if it is no longer required and if there are no statutory retention requirements.

If your contact is aimed at concluding a contract with us or if we already have a business relationship with you, we do not delete your data immediately, but may store it in our (CRM) system until the contractual and/or legal obligations have been fulfilled respectively a business relationship no longer exists and legal retention periods do not prevent deletion.

If you have given us your consent via the cookie banner, we will also process your request via the MCAE tool, a service provided by Salesforce, Inc. For details, see MCAE (Marketing Cloud Account Engagement).

Insofar as your data transmitted is processed based on Art. 6 Para. 1 S. 1 lit. f UK GDPR, you can object to the processing at any time. You can also revoke your consent to the processing of the voluntary information at any time. For this purpose, please contact the email address given in the imprint.

You can register with us for various services, e. g. to participate in (online) events and to receive newsletters. For the registration we need certain data (at least your e-mail address, possibly name and other contact data), which are marked accordingly as mandatory information. In addition, you can provide additional information voluntarily.

The processing of your data takes place on your consent in accordance with Art. 6 Para. 1 lit. a UK GDPR. You can revoke your consent at any time. Until your revocation, we store your data for the purpose of reuse for recurring services.

When registering, you will also receive a confirmation e-mail to the e-mail address you provided (so-called double opt-in). If necessary, we store further data so that we can prove that you have registered. This may include the storage of the complete IP address at the time of registration or confirmation as well as a copy of the confirmation e-mail sent by us. The corresponding data processing is carried out on the basis of Art. 6 Para. 1 S. 1 lit. f UK GDPR and is carried out in the interest of being able to account for the legality of the implementation of the services.

We also use MCAE, a service provided by Salesforce, Inc. to process your data. This allows us - if you have given us your consent via the cookie banner - to combine your data with your other customer data stored by us as well as with information from third-party providers in order to address you individually, i.e. based on interests and usage. Furthermore, MCAE can be used to analyse the newsletter. For this purpose, the newsletter messages contain so-called "web beacons". These are pixel-sized files that are retrieved from the server of our service provider when the newsletter is opened. For the evaluations, the data you provide and the "web beacons" are linked to your e-mail address and an individual ID. For details, see MCAE (Marketing Cloud Account Engagement).

If you have noticed a product defect or an undesirable product effect, you can report it to us. In addition, we are legally obliged to clarify suspected cases of side effects in medicinal products and medical devices and to forward them to the competent authorities under certain circumstances. For the notification, we provide you with a registration form on our website. In this context, we require some mandatory information from you, which we use on the basis of Art. 6 Para. 1 S. 1 lit. c and Art. 9 Para. 2 lit. i UK GDPR (in conjunction with further laws such as AMG, MPG, KosmetikV), to assess and answer your product complaints and, if necessary, to comply with our legal obligation. In addition, you can provide us with other information that may be helpful for an evaluation, but is not mandatory. This information is provided voluntarily and we process it on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a, possibly Art. 9 Para. 2 lit. a UK GDPR.

Your notification may contain special categories of personal data in accordance with Art. 9 UK GDPR. The web form offered on our website ensures a correspondingly secure and encrypted recording. The form can be stored locally, printed out and sent as an e-mail attachment. If the message form is to be sent encrypted, take appropriate measures in your e-mail settings.

Due to the medical significance and importance, all data processed in this context will be stored for a period of at least 15 years and then deleted, provided that there are no statutory retention obligations to the contrary.

We have set up a system for reporting breaches of Union law. The processing of your personal data in the context of the use of our whistleblower system and the reporting channels takes place within the framework of the implementation of the obligation to maintain a whistleblower system. This obligation follows from the general compliance obligation according to § 43 GmbHG and is structured in the EU Whistleblower Directive, (DIRECTIVE (EU) 2019/1937 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 23 October 2019).

As part of the whistleblower system, data must be provided in order to clarify, terminate and prevent the reported violations for the future. Data must also be collected if it is transmitted voluntarily, such as a contact option, be it by e-mail, postal address or telephone number. This information is always voluntary. By submitting your consent, you consent to this processing.

In fulfilling this general compliance obligation, we are supported by a service provider - namely datenschutz nord GmbH, Mr. Dominik Bleckmann -, who acts in this context as an external ombudsman office strictly confidential and independent of instructions to us.

We offer vacancies within the corporate group via our job / career portal, which you can use to send us your application. We inform you about the processing of your data in this context in our privacy policy for our career portal. 

Also you have the option of applying for the positions advertised by us via the email or postal address provided. In order to be able to consider your application, at least the following information is required:

· Cover letter
· Curriculum vitae
· Certificates and qualifications
· Further documents and information according to the respective job advertisement.

We process your data exclusively for the purpose of selecting applicants. There is no data processing for other purposes. In addition, you can decide for yourself whether you want to provide us with further information, such as your telephone number, your leisure interests, a picture, etc. for a better assessment of your application or for easier communication. This information is provided voluntarily and is not absolutely necessary for the application. If you include voluntary information in your application, you give your consent that we use this data exclusively for the purpose of applicant selection in accordance with Art. 88 Para. 1 UK GDPR. You can revoke your consent at any time with effect for the future. Please send your revocation to the office named in the imprint.

Your details will be treated as strictly confidential. If your application is unsuccessful, your documents will be deleted no later than six months after you have sent the notification of rejection. The legal basis for this processing is Art. 6 Para. 1 S. 1 lit. f UK GDPR in the legitimate interest of warding off any legal claims.

In the event that your application should also be considered for other or future job advertisements, this will only be done on the basis of your consent. Please inform us of this in your application letter. We then process your data on the basis of Art. 6 Para. 1 S. 1 lit. a UK GDPR and delete your application after 2 years at the latest. You can revoke your consent at any time with effect for the future. Please send your revocation to the office named in the imprint.

Unless we have already informed you in detail about the storage period, we delete personal data when it is no longer required for the aforementioned processing purposes, you have revoked your consent to data processing and there are no statutory retention requirements to prevent destruction/deletion.

We pass on your personal data within our company to the areas and persons who need this data to fulfil the respective purpose. Insofar as this is necessary within the scope of the purposes set out above, we may also transfer your personal data to companies affiliated with us.

Your data will not be transferred to third parties, i. e. outside the schülke group, or only if this is permitted under data protection law. We can also pass on your data to external service providers (a. o. providers for IT service, marketing, sales, data and document destruction) who support us with data processing in the context of order processing, strictly bound by instructions and on the basis of an order processing contract. We make sure that the data processing is limited as far as possible to within the European Union (EU) or the European Economic Area (EEA), e. g. by selecting storage locations on corresponding data centers in the European Union. Should data be processed or transferred to service providers outside the EU or EEA (e. g. the U.S.), the transfer will only take place if the EU Commission has confirmed an appropriate level of data protection for the third country, an appropriate level of data protection has been agreed with the data recipient (for example by means of standard contractual clauses) and further measures required to ensure an adequate level of data protection have been taken or you have given us your consent in accordance with the requirements of Art. 49 Para. 1 S. 1 lit. a UK GDPR.

As a data subject, the UK GDPR grants you certain rights when processing your personal data.

Right of access (Art. 15 UK GDPR)
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case to obtain access to the personal data and the information specified in Art. 15 UK GDPR.

Right to rectification (Art. 16 UK GDPR)
You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and, if necessary, the right to have incomplete personal data completed.

Right to erasure (Art. 17 UK GDPR)
You have the right to obtain an erasure of the personal data concerning you without undue delay, if one of the reasons listed in Art. 17 UK GDPR applies.

Right to restriction of processing (Art. 18 UK GDPR)
If one of the conditions set forth in Art. 18 UK GDPR applies, you shall have the right to restrict the processing of your data to mere storage, e.g. if you revoke consent, to the processing, for the duration of a possible examination.

Right to data portability (Art. 20 UK GDPR)
In certain situations, listed in Art. 20 UK GDPR, you have the right to receive the personal data concerning you in a structured, common and machine-readable format or demand a transmission of the data to another third party.

Right of withdrawal (Art. 7 UK GDPR)
If the processing of data takes place on the basis of your consent, you are entitled according to Art. 7 Para. 3 UK GDPR to revoke your consent to the use of your personal data at any time. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected.

Right to object (Art. 21 UK GDPR)
If the data is processed pursuant to Art. 6 para. 1 s. 1 lit. f UK GDPR (data processing for the purposes of the legitimate interests), you have the right to object to the processing at any time for reasons arising out of your particular situation. We will then no longer process personal data, unless there are demonstrably compelling legitimate grounds for processing, which override the interests, rights and freedoms of the person concerned, or the processing serves the purpose of asserting, exercising or defending legal claims.

Right to lodge a complaint with a supervisory authority (Art. 77 UK GDPR)
Pursuant to Art. 77 UK GDPR, you have the right to lodge a complaint with a supervisory authority if you consider the processing of the data concerning you infringes data protection regulations. The right to lodge a complaint may be invoked in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement.

Asserting your rights
Unless otherwise described above, please contact the office named in the imprint to assert your rights as a data subject.

In fulfilling our data protection obligations, we are supported by our data protection officer, who can be reached under the following contact details:

First Privacy GmbH (a company of the DSN GROUP)
Konsul-Smidt-Str. 88
28217 Bremen
Germany

www.dsn-group.de
www.first-privacy.com
schuelke[at]datenschutz-nord.de

If you contact our data protection officer, please also indicate the responsible body that is named in the imprint.