The protection of your personal data is important to us, DGS GmbH ("we"). We only process your personal data in accordance with the statutory regulations, in particular Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and the German Federal Data Protection Act (BDSG).
This privacy policy informs you about the processing of your personal data and your rights as a data subject if
- you use our website (www.dgs-group.com);
- you contact us for business purposes by other means
- and when you apply for a position in our company.
You will also find more detailed information on the use of so-called "cookies" on our website below.
1. Responsible person and contact to the data protection officer
The controller under data protection law for the data processing described in this privacy policy is
DGS GmbH
Admiralstr. 96 28215 Bremen
Phone: +49 441 99 87 87 00
Email: contact@dgs-group.com
You can reach our data protection officer at data-protection@dgs-group.com.
2. Purposes and legal basis of our data processing
2.1 Data processing when using our website
When you use our website, we may process the following types of data. This data may be personal data.
2.1.1 Internet connection data
When you access our website,we collect and process your so-called Internet connection data (e.g. date and time of access, name of the page accessed, amount of data transferred and the requesting provider and your IP address), which your browser automatically transmits to our server when you access our website. We need this information to enable you to use our website, for example by adapting the website to the technical requirements of your end device. We store this data for a period of up to six months in order to identify and rectify possible malfunctions of our website. The legal basis for this data processing is our legitimate interest in ensuring the security and usability of our website, Art. 6(1)(f) GDPR.
2.1.2 Access and storage on your end device ("cookies")
We may use tracking technologies on our website that enable us or our service providers to collect data relating to the use of our website. These tracking technologies are usually referred to as cookies, which is why we also use this term below. However, the following explanations also apply accordingly to other tracking technologies or file formats, such as local storage, pixels, beacons or tags. What such technologies have in common is that when they are used, informationcan be stored or read on your end device (e.g. in the browser you use on your computer).
2.1.2.1 Technically necessary cookies
In certain cases, the storage of information on your end device or access to information already stored on your end device is absolutely necessary so that we can make our website available to you for use ("technically necessary cookies"). The legal basis for the use of such cookies is Section 25(2)(2) of the German Telecommunications and Telemedia Data Protection Act (TTDSG).
Insofar as this information has a personal reference and is further processed by us in our IT systems, the legal basis for this data processing is our legitimate interest in the provision of our website and the fulfilment of our accountability under data protection law, Art. 6(1)(f) GDPR in conjunction with Art. 5(2) GDPR. Please note: Currently, we do not use any cookies.
2.1.2.2 Optional cookies
We only use cookies that are not technically necessary (“optional cookies”) with your consent. When you visit our website for the first time, we display a so-called cookie banner to inform you about the tracking technologies we use and to give you the choice of which optional cookies you would like to consent to.
If you click on the corresponding button in the banner (“Accept all”), you consent to the storage and reading of all technically unnecessary cookies on your device (§ 25(1) TTDSG) and to the processing of your personal data stored for the cookie (Art. 6(1)(a) GDPR). Your consent is voluntary. You can also reject all optional cookies instead by clicking on "Reject". Finally, you can also select or deselect individual categories of cookies or services. To do this, please click on "Individual data protection settings" and use the sliders in the consent settings.
You can withdraw your consent at any time, but only with effect for the future. To do so, please click on the "Cookies" tab at the bottom of our website. In the consent settings, you have the option of withdrawing the consent you have already given (Reject) or granting new consent (Accept all). You can also deselect or select individual cookies or services there. Please use the sliders in the consent settings to do this. Alternatively, you will find the "Manage Cookie Consent" button at the bottom left of the website, which you can use to call up the menu for changing the cookie consent settings.
Please note: We currently do not use optional cookies.
2.1.3. Contact form
You have the option of sending us enquiries via the contact form on our website. In this case, we collect your name, the name of your company, your email address and your enquiry. We process your data to respond to your enquiry.
If your enquiry is made in connection with the performance of a contract concluded with you or for the initiation of such a contract, the legal basis for our data processing is Art.6(1)(b) GDPR. Otherwise, the legal basis is our legitimate interest in the efficient processing of your enquiry addressed to us (Art. 6(1)(f) GDPR). You can object to this data processing under the conditions of Art. 21(1) GDPR.
2.2 Data processing for other business contacts
If you contact us by means other than our website, for example by e-mail, telephone, post or at trade fairs and other events, we will collect your contact details, including your position in your company if applicable. We store this data in our CRM system and process your data in order to contact you.
If your enquiry is made in connection with the performance of a contract concluded with you or for the initiation of such a contract, the legal basis for our data processing is Art.6 para. 1 lit. b GDPR. Otherwise, the legal basis is our legitimate interest in the efficient processing of your enquiry addressed to us (Art. 6(1)(f) GDPR). You can object to this data processing under the conditions of Art. 21(1) GDPR.
2.3 Processing of applicant data
You have the opportunity to apply for a job with us by post, e-mail . When you apply for a position with us, we collect, store and process your applicant data. This applicant data includes your contact details, your salary expectations and information on your availability, your application documents including any cover letters you have enclosed, your CV, certificates and supporting documents, data relating to your job interviews and any notes we have taken during job interviews.
If your application is successful, we will store and process your data based on Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship.
If we are unable to make you a job offer, you reject a job offer or withdraw your application, we will store your data for a period of up to six months from the end of the application process. This storage is in our legitimate interest (Art. 6(1)(f) GDPR) to be able to prove compliance with legal regulations for the application process, in particular those of the German General Act on Equal Treatment (AGG). If we are not currently making you a job offer, we may offer to include you in our applicant pool in order to offer you a position at a later date. We will only include you in the applicant pool if you consent to this (Art. 6(1)(a) GDPR). In this case, we will store your applicant data for a period of up to two years. You can revoke your consent at any time with effect for the future.
2.4 Processing for the purposes of IT security
Your personal data may be subject to rolling data backups. We create such backups in pursuit of our legitimate interest (Art. 6(1)(f) GDPR) in ensuring data security and the recoverability of data in the event of malfunctions or external attacks. You can object to this data processing under the conditions of Art. 21(1) GDPR.
3. Recipients of your personal data and third country transfers
When processing your personal data, we use various technical service providers who host our website for us and provide us with cloud and SaaS services. Insofar as these service providers may have access to your personal data, they process your data within the framework of a data processing agreement (Art. 28 GDPR) that we have concluded with these companies.
In this context, we may transfer your personal data to processors or sub-processors in countries outside the European Union ("EU") and the European Economic Area, namely to the USA. These data transfers are based on the adequacy decision of the EU Commission of 10 July 2023 (C(2023) 4745). Our service providers are certified under the Data Privacy Framework.
4. Deletion of your personal data
We delete your personal data as soon as its processing is no longer necessary for the purposes explained in this privacy policy. If and for as long as statutory retention obligations prevent deletion, we restrict the processing of your data to this archiving purpose (so-called data blocking) and delete your data when the retention period expires. Such retention obligations exist under German commercial and tax law, in particular for business letters for six years at the end of the year and for accounting-related documents for ten years at the end of the year.
5. Your rights
As a data subject of data processing by our company, you have the following rights under the respective legal requirements:
- The right to confirmation as to whether we are processing personal data relating to you (Art. 15 GDPR).
- The right to information about your personal data processed by us and to a copy of the data (Art. 15GDPR)
- The right to rectification in the event that your personal data is incorrect (Art. 16 GDPR).
- The right to erasure of your personal data (Art. 17 GDPR).
- The right to restriction (blocking) of your personal data (Art. 18 GDPR).
- The right to data portability (Art. 20 GDPR).
If your personal data is processed based on Art.6(1)(e) or (f) GDPR, you can also object to the processing in question under the conditions of Art. 21(1) GDPR. You can object to the processing of your personal data for direct marketing purposes at any time and without giving reasons with effect for the future (Art. 21(2) GDPR).
If the processing is based on your consent pursuant to Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, you can withdraw your consent at any time with effect for the future (Art. 7(3) GDPR).
You also have the right to contact the competent data protection supervisory authority (Art. 77 GDPR).
6. No automated decision in individual cases
Your personal data will not be used for automated individual case decisions within the meaning of Art. 22(1)GDPR.
7. Changes to the privacy policy
New legal requirements, business decisions or technical developments may require changes to this privacy policy. The privacy policy will then be adapted accordingly. You will always find the latest version on our website.
Status: February 2024
