Source: https://www.cpbau.de/en/data-protection/
Timestamp: 2019-04-21 08:54:42+00:00

Document:
We place great importance on data protection. The collection and processing of your personal data takes place in compliance with the applicable data protection regulations, in particular those set forth in the General Data Protection Regulation (GDPR).
You can contact our data protection officer at the aforestated address or by sending an email to: datenschutz(at)cpbau.de.
Personal data is information that can be used to find our about personal or material circumstances about you such as your name, address, telephone number and email address .
The browser and operating system running on the visitor's device and the name of the access provider used by the visitor.
The processing of this personal data is justified pursuant to Art. 6 para. 1 (f) GDPR. The legitimate interest lies in guaranteeing the security and stability of our website.
The type of cookie we use is a so-called "session cookie". This cookie allows us to recognize your browser when you next visit our website.
Cookies are generally accepted in accordance with browser default settings. The browser settings can be altered such that cookies are either not accepted by the devices used to access the website or to display a special message each time a new cookie is set. However, please note that if you deactivate cookies you may not be able to use the full functionality of this website to the best possible extent.
If you use the contact form on our website to contact us, we process the personal data you provide us (among others your name and contact details). We use this data for the purpose of processing the contact request you made.
The legal basis for processing lies in Art. 6 para. 1 a) and lit. f) GDPR. Processing is necessary for communication with you and lies in the legitimate interest of the company.
When you entrust us with personal data in line with a job application (among others your name, contact details and application documents), these will only be processed in line with the job application. The purpose is the selection of an applicant for an employment contract. Your data will not be used for other processing purposes.
The legal basis for processing lies in the conduct of a pre-contractual relationship pursuant to Art. 6 para. 1 (b) GDPR in conjunction with § 26 of the German Federal Data Protection Act (BDSG).
This website uses functions of the web analytics service Google Analytics. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
On this website we have only activated the IP anonymization function. This causes your IP address to be truncated within the geographical area of the member states of the European Union or other parties to the Agreement on the European Economic Area before it is transfered to the USA. Only in exceptional cases will your complete IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity for the website operator and for providing other services relating to website activity and internet usage. Google will not correlate your IP address – which is transmitted by your browser in the context of Google Analytics – with any other data held by Google.
You can prevent the installation of cookies by selecting the appropriate settings in your web browser software; however we draw your attention to the fact that if you do this you may not be able to use the full functionality of this website. You can furthermore prevent the data relating to your usage of the website (including your IP address) that is generated by the cookie from being tracked and processed by Google by downloading and installing the browser plugin which is available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find more information on how Google Analytics handles user data in Google's data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de.
We have concluded a contract data processing agreement with Google and we implement the strict requirements of the German data protection authorities relating to the use of Google Analytics in full.
The use of Google Analytics takes place on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in analyzing the user behavior in order to optimize both his web content and his advertising.
On this website the provider used components (videos) from the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company of Google Inc., Amphitheatre Parkway, Mountain View, CA 94043, USA.
We use YouTube videos in the "-extended data protection mode-" option offered by YouTube.
If you open a web page that contains an embedded video a connection is established with the YouTube servers and the content is displayed on the web page by sending a notification to your browser.
According to information from YouTube, when you view a video in "-extended data protection mode-" data is only sent to YouTube servers about which of our web pages you have visited, in particular. If you are logged into YouTube at the same time, this information is assigned to your YouTube membership account. You can prevent this by logging out of your YouTube membership account before visiting our website.
Google provides further information about data protection relating to YouTube under the following link: https://www.google.de/intl/de/policies/privacy/.
The use of YouTube components takes place on the basis of Art. 6 para. 1 (f) GDPR. The website operator has a legitimate interest in effectively providing information to users, communicating with users and presenting the corporate profile on the Internet.
This is necessary pursuant to Art. 6 para. 1 (b) GDPR for the purpose of fulfilling a contract with you.
Other companies, during the course of executing the contract.
We adhere to the principles of data avoidance and data economy. Your personal data will, therefore, only be stored for as long as required for achieving the stated purposes of data processing or as stipulated by the various storage periods provided for by the legislator. Following discontinuance of the respective purpose or expiry of these storage periods the corresponding data will be routinely deleted in accordance with the statutory regulations.
Your personal data may be transferred to a destination outside the European Economic Area ("third country") and processed and stored there. Transfer of the data to a third country shall, in particular, take place if this is necessary for fulfilling a business relationship that exists with you or for asserting, exercising or defending legal claims or if you have granted us your consent for such data transfer. We will only transfer data to recipients that ensure the protection of your data pursuant to Art. 44 to 49 GDPR. Provided that data transfer is based on Art. 46 para. 2 GDPR and corresponding guarantees have been concluded, you are entitled to receive a copy of the corresponding agreement upon written request.
Automated decision-making, including profiling, does not take place.
Right of access to the processes personal data pursuant to Art. 15 GDPR.
Right to the immediate rectification of incorrect personal data pursuant to Art. 16 GDPR.
Right to the immediate erasure of personal data pursuant to Art. 17 GDPR.
Right to restriction of processing pursuant to Art. 18 GDPR.
Right of data portability pursuant to Art. 20 GDPR.
Right to object to data processing pursuant to Art. 21 GDPR, if processing is performed for a task carried out in the public interest or in the exercising of official authority pursuant to Art. 6 para. 1 (e) GDPR or on the basis of a legitimate interest of the controller pursuant to Art. 6 para. 1 (f) GDPR.
Right to withdraw consent at any time pursuant to Art. 7 para. 3 GDPR.
Should you wish to assert one of the rights listed above, please contact our data protection officer. You will find the contact details under point 1.
Moreover, data subjects are also entitled to lodge a complaint with the data protection regulator. The regulatory authority responsible for us is the "Information Commissioner's Office" in Great Britain.

References: Art. 6
 Art. 6
 Art. 6
 § 26
 Art. 6
 Art. 6
 Art. 6
 Art. 44
 Art. 46
 Art. 15
 Art. 16
 Art. 17
 Art. 18
 Art. 20
 Art. 21
 Art. 6
 Art. 6
 Art. 7