Privacy Policy

Introduction and General Information

Thank you very much for your interest in our website. Protecting your personal data is very important to us. Below you will find information about how we handle the data collected through your use of our website. Your data is processed in accordance with applicable data protection laws.

Responsible for GDPR

ESFORIN SE
Ruhrallee 201
45136 Essen
+49.201.220.38-100
info@esforin.com

Contact Details of the Data Protection Officer

Proliance GmbH / www.proliance.ai
Data Protection Officer
Leopoldstr. 21
80802 Munich
datenschutzbeauftragter@proliance.ai

Definitions

Our Privacy Policy is intended to be simple and easy to understand for everyone. This Privacy Policy generally uses the official terms of the General Data Protection Regulation (GDPR). The official definitions are explained in Article 4 of the GDPR.

Webhosting

This website is hosted by an external service provider (Mittwald GmbH). This website is hosted in Germany. Personal data collected on this website is stored on the host’s servers. This may primarily include IP addresses, contact requests, metadata and communication data, website visits, and other data generated through a website.

We have entered into a data processing agreement with the provider in accordance with the requirements of Article 28 of the GDPR, in which we require the provider to protect our customers’ data and not to disclose it to third parties.

Access to and Storage of Information on Terminal Equipment

By using our website, information (e.g. IP address) may be accessed or stored (e.g. cookies) in your terminal equipment. This access or storage may involve further processing of personal data within the meaning of the GDPR.

In cases where such access to or storage of information is absolutely necessary for the technically flawless provision of our services, this is done in accordance with § 25(1), sentence 1, and (2), no. 2 of the TTDSG.

In cases where such a process serves other purposes (e.g., tailoring our website to your needs), it is carried out on the basis of Section 25(1) of the TTDSG only with your consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. The processing of your personal data is subject to the provisions of the GDPR and the Federal Data Protection Act (BDSG).

For more information about the processing of your personal data and the relevant legal bases in this context, please refer to the following sections on specific processing activities on our website.

Server log files

When you visit our website, it is technically necessary for data to be transmitted from your web browser to our web server. The following data is recorded during an active connection for communication between your web browser and our web server:

Name and URL of the retrieved file
Date and time of retrieval
Amount of data transferred
Notification of a successful retrieval (HTTP response code)
Browser type and browser version
Operating system
Referrer URL (i.e. the previously visited website)
Websites accessed by the user's system through our website
Internet service provider of the user
IP address and the requesting provider

We collect the listed data to ensure that the website connects smoothly and to enable users to use our website conveniently. In addition, the log file is used to evaluate system security and stability, as well as for administrative purposes. The legal basis for the temporary storage of the data and log files is Article 6(1)(f) of the GDPR.

For technical security reasons, particularly to defend against attempted attacks on our web server, we store this data temporarily. We cannot use this data to identify individual users. After no more than 90 days, the data is anonymized by truncating the IP address to the domain level, so that it is no longer possible to establish a connection to an individual user. In its anonymized form, the data may also be processed for statistical purposes. This data is never stored together with other personal data of the user, compared with other data sets, or disclosed to third parties at any time.

Cookies

Our website uses so-called „cookies.“ Cookies are small text files that are stored on your device either temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them yourself or your web browser deletes them automatically.

Cookies serve various purposes. Many cookies are technically necessary, as certain website features would not work without them (e.g., the shopping cart feature or language settings). Other cookies are used to analyze user behavior or display advertisements.

Technically necessary cookies are stored pursuant to Article 6(1)(f) of the GDPR. We have a legitimate interest in storing cookies to ensure the technically flawless and optimized provision of our services. Other cookies are stored only with your consent pursuant to Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect. The legal basis may also arise from Article 6(1)(b) of the GDPR if the processing is necessary for the performance of a contract to which the data subject is a party, or for the implementation of pre-contractual measures taken at the data subject’s request.

To the extent that cookies are used for analytical purposes, we will inform you separately about this in this Privacy Policy and obtain your consent.

You can configure your browser so that you

be informed about the use of cookies,
allow cookies only in individual cases,
disable cookies in specific cases or in general,
Enable the automatic deletion of cookies when you close your browser.

You can manage your cookie settings for each browser using the following links:

You can also manage cookies from many companies and features used for advertising on an individual basis. To do so, use the appropriate user tools, available at https://www.aboutads.info/choices/ or http://www.youronlinechoices.com/uk/your-ad-choices.

Most browsers also offer a feature known as „Do Not Track.“ When this feature is enabled, the browser notifies advertising networks, websites, and applications that you do not wish to be „tracked“ for the purposes of behavioral advertising and similar activities.

For information and instructions on how to configure this feature, please refer to the links below, depending on your browser provider:

In addition, you can prevent so-called scripts from loading by default. „NoScript“ allows JavaScript, Java, and other plug-ins to run only on trusted domains of your choice. For information and instructions on how to configure this feature, please contact your browser’s provider (e.g., for Mozilla Firefox, see: https://addons.mozilla.org/de/firefox/addon/noscript/).

Please note that disabling cookies may limit the functionality of our website.

Change Cookie Settings

You can revoke or change your cookie settings at any time. To do so, access the cookie settings again via this link .

External Links

Social networks (LinkedIn) are integrated into our website solely as links to the corresponding services. When you click on the embedded text or image link, you will be redirected to the respective provider’s website. User information is transmitted to the respective provider only after the redirection. For information on how your personal data is handled when using these websites, please refer to the respective privacy policies of the providers you use.

Data Disclosure and Recipients

Your personal data will not be disclosed to third parties, except

if we explicitly referred to this in the description of the respective data processing,
if you have given your explicit consent pursuant to Article 6(1), first sentence, subparagraph (a) of the GDPR,
the disclosure is necessary under Article 6(1), first sentence, subparagraph (f) of the GDPR to assert, exercise, or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in preventing the disclosure of your data,
if there is a legal obligation to disclose the data pursuant to Article 6(1), sentence 1, subparagraph (c) of the GDPR, and
to the extent that this is necessary for the performance of contractual relationships with you pursuant to Article 6(1), first sentence, letter b of the GDPR. In addition, we use external service providers to deliver our services; we have carefully selected these providers, commissioned them in writing, and, where necessary, entered into data processing agreements with them in accordance with Article 28 of the GDPR. These providers are bound by our instructions and are regularly monitored by us. These include, among others, service providers for hosting, sending emails, and the maintenance and upkeep of our IT systems, etc. The service providers will not disclose this data to third parties.

Contact Form and Contact by E-Mail

If you submit inquiries to us via the contact form or by email, we will store the information you provide in the inquiry form or in your email—including any personal data you provide there—for the purpose of processing your inquiry and in case of follow-up questions. Providing an email address and your first and last name is required for contact purposes; providing your phone number is optional. We will not disclose this data under any circumstances without your consent. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR, as well as, where applicable, Article 6(1)(b) of the GDPR, if your inquiry is aimed at entering into a contract. Your data will be deleted once your inquiry has been fully processed, provided there are no legal retention requirements to the contrary. In cases falling under Article 6(1)(f) of the GDPR, you may object to the processing of your personal data at any time.

If you would like to subscribe to the newsletter offered on the website, which provides regular updates on our offers and products, we require your email address as a mandatory field.

Additional data may be collected, if necessary, to address you personally in the newsletter and/or to identify you in the event that you wish to exercise your rights as a data subject.

We use the so-called double opt-in process to send out the newsletter. This means that we will only send you our newsletter via email once you have explicitly confirmed that you consent to receiving newsletters. To do this, you will first receive an email containing a link that you can use to confirm that you, as the owner of the email address in question, wish to receive future newsletters. By confirming, you grant us your consent in accordance with Art. 6(1)(a) of the GDPR to use your personal data for the purpose of sending you the requested newsletter.

When you subscribe to the newsletter, in addition to the email address required for delivery, we store the IP address you used to subscribe, as well as the date and time of your subscription and confirmation, so that we can investigate any potential misuse at a later date.

You can unsubscribe from the newsletter at any time by clicking the link included in each newsletter or by sending an email to the data controller listed above. Once you have unsubscribed, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to the continued use of the collected data or the continued processing is otherwise permitted by law.

If you give us your consent, you also authorize us to process data regarding whether you receive our marketing emails and whether you have opened them, the extent to which you have interacted with the content, specifically, which links you clicked on and to what extent you read or skimmed our emails (newsletter tracking).

Download one-pagers

Requirements for accessing free services: Through our website, we offer you the opportunity to download a one-pager as a free service. Consent pursuant to Article 6(1)(a) of the GDPR to receive an email containing further information about ESFORIN’s products and services may be required as a condition for receiving the one-pager. You may revoke your consent at any time by sending an email to [email]. To receive the one-pager and the follow-up email containing further information about ESFORIN’s products and services, you must provide your email address in the download form on our website.

The personal data processed in this context will be deleted once the purpose of the processing has been fulfilled or no longer applies, or if you withdraw your consent.

Chatbot with Landbot

We use the „Landbot“ chatbot on our website, provided by HELLO UMI S.L., located at Carrer de París, 82, Bajo 1, Derecha, CP 08029, Barcelona, Spain. With Landbot, we offer visitors to our website the opportunity to learn about ESFORIN’s services tailored to their specific needs by answering specific questions, download informational materials, and—if interested in ESFORIN’s services—initiate contact from ESFORIN by entering their contact information.

In order to technically integrate Landbot into our website, it is necessary that, when a user visits a subpage of our website where Landbot is integrated, a connection to Landbot’s servers is established and the visitor’s device information (e.g., the IP address of the end device) is transmitted to Landbot’s server.

Landbot continues to use cookies that are stored on the devices of visitors to our website for the technical operation of the chatbot. These cookies are stored only on the basis of prior consent from visitors to our website in accordance with Section 25(1) of the TDDDG. Consent may be revoked at any time with future effect by changing the settings in the cookie banner.

If a visitor to our website wishes to initiate contact with ESFORIN via Landbot, they must provide their name, company name, and—depending on the preferred method of contact—an email address or phone number. The data entered is then stored by Landbot.

The legal basis for processing your data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) of the GDPR and, if applicable, Article 6(1)(b) of the GDPR, provided that your inquiry is aimed at entering into a contract. Your data will be deleted once your inquiry has been fully processed, provided there are no legal retention requirements to the contrary. In cases covered by Article 6(1)(f) of the GDPR, you may object to the processing of your personal data at any time.

We have entered into a data processing agreement with the service provider, in which we require the provider to protect our customers' data and not to disclose it to third parties.

Legal basis for data processing

The legal basis for the integration and use of the service is your consent, provided that you have given it through our consent management platform.

The use of cookies and similar technologies is based on Section 25(1) of the TDDDG. The subsequent data processing is based on Article 6(1), first sentence, subparagraph (a) of the GDPR.

Your consent is voluntary and may be freely revoked at any time with future effect. To revoke your consent, please use the link „Cookie settings“ at the bottom of the webpage to access the consent management platform again and change your settings.

Submission of Applications

If you apply for a position with us via our contact form or by email, we collect personal data. This includes, in particular, your contact information (such as first and last name, phone number, and email address) as well as other information you provide regarding your background (e.g., resume, qualifications, degrees, and work experience) and personal details (e.g., cover letter, personal interests). This may also include special categories of personal data (e.g., information regarding a severe disability). Your personal data is generally collected directly from you as part of the application process and is encrypted during electronic transmission. The primary legal basis for this is Article 6(1)(b) of the GDPR in conjunction with Section 26(1) of the BDSG. In addition, consent pursuant to Article 6(1)(a) and Article 7 of the GDPR in conjunction with Section 26(2) of the BDSG may be invoked as a legal basis for data processing. If the processing of your data is based on consent, you have the right to withdraw your consent at any time with effect for the future.

Within our company, access to your personal data is limited exclusively to those individuals and departments (e.g., Human Resources) who absolutely need it to conduct the application process or to fulfill our legal obligations. Your applications may be forwarded to the appropriate personnel for review. Under no circumstances will your personal data be disclosed to third parties without authorization.

Your data related to an application for a specific job posting will be stored and processed by us during the application process. Once the application process is complete (e.g., upon acceptance or rejection), the application records—including all personal data—will be deleted from the system no later than six months after the process ends. You may revoke your consent at any time with future effect. To do so, simply send an informal email to the contact information for the data controller listed above. If you are offered the position, your application documents will be added to your personnel file.

Softgarden & career page

This section of the Privacy Policy applies to ESFORIN SE’s career portal and applicant tracking system: Data Processing on Behalf of a Client

To ensure the efficient handling of the application process, we use an applicant tracking system provided by softgarden e-Recruiting GmbH, Tauentzienstr. 14, 10789 Berlin (Contact: datenschutz@softgarden.de), which operates the applicant management as a processor within the meaning of Art. 4 No. 8 GDPR. A contract for order processing in accordance with Art. 28 GDPR has been concluded with the provider, which ensures compliance with data protection regulations.

We remain your primary point of contact for exercising your rights as a data subject and for handling the application process. You may contact us directly using the contact information for the data controller provided above or, where indicated, contact the data protection officer confidentially.

Subject matter of data protection

The subject of this privacy policy is the processing of personal data, in this case in the context of applicant management. According to Article 4(1) of the GDPR, this includes all information relating to an identified or identifiable natural person (hereinafter referred to as the „data subject“) that is necessary for conducting the application process and establishing an employment relationship, § 26 BDSG.

In addition, when using the applicant management system, we also collect data related to its use, known as usage data. Usage data consists of information necessary to operate our websites, such as details regarding the start, end, and scope of use of our website, including login information. This processing complies with data protection and telemedia laws.

As part of the application process and/or the use of the system, processing activities may also take place that are based either on a legitimate interest pursuant to Article 6(1)(f) of the GDPR or on your consent pursuant to Article 6(1)(a) of the GDPR. Processing activities may also be carried out where there is a legal obligation to process data or where there is a public interest, as provided for in Article 6(1)(c) and (e) of the GDPR, such as in the context of criminal prosecution or investigations by government agencies. You can determine and control the scope of the processing yourself through individual settings in your web browser, the configuration of the relevant cookie settings, and your user behavior.

Collection and use of your data

Website visit

For operational and maintenance purposes, and in accordance with telemedia law, interactions are recorded („system logs“), which are necessary for the operation of the website or are processed for system security purposes, such as to analyze attack patterns or unlawful usage behavior („evidence function“).

When you access the career portal, your web browser automatically transmits the following data:

Date and time of access,
Browser type and version,
operating system used,
Amount of data sent.
IP address of the access

This data is not used for direct assignment within the context of applicant management and is promptly deleted in accordance with the legitimate retention periods, unless longer retention is required for legal or factual reasons, such as for evidentiary purposes. In individual cases, retention for the stated purposes may be considered. The legal basis is Article 6(1)(f) of the GDPR and the Telemedia Act.

Session cookies

We use „cookies“ to provide you with a comprehensive range of features and to make your experience on our websites more convenient. „Cookies“ are small files that are stored on your computer via your web browser. If you do not wish to use „cookies,“ you can prevent them from being stored on your computer by adjusting the settings in your web browser. Please note that this may limit the functionality and scope of our website.

On the Careers page, we use the JSESSIONID cookie as a technically necessary session cookie. This cookie stores a so-called session ID, which allows us to associate various requests from your browser with the same session. This enables us to recognize your computer when you return to our website. This session cookie is deleted when you log out or close your browser.

Data entered by the user

Application process

As part of the application process, once you have set up your username and password, you can create and manage an account on the career portal. In addition to submitting individual applications, you can take advantage of other features in the softgarden applicant tracking system and customize your settings (e.g., joining a talent pool).

To ensure your application is efficient and successful, please include the following information when applying with us:

Contact details (address, telephone number)
Curriculum vitae data e.g.
- School education
- Vocational training
- Professional experience
- Language skills
Profiles in social networks (e.g. XING, LinkedIn, Facebook)
Documents in connection with applications (application photos, cover letters, certificates, references, work samples, etc.)

The legal basis for processing data for the purposes of conducting the application process and establishing an employment relationship is Section 26(1) of the German Federal Data Protection Act (BDSG). In addition, the controller’s use of the applicant tracking system is based on a legitimate interest pursuant to Article 6(1)(f) of the GDPR. If consent within the meaning of Article 6(1)(a) is required for a specific processing activity, the controller will obtain this consent from you separately and transparently, unless it is implied by your clear and voluntary conduct in accordance with the transparency requirement, such as voluntary participation in a video interview.

Forwarding of data

Your data will not be disclosed to unauthorized third parties as part of the applicant management process and will be processed for the purposes specified in this Privacy Policy. Thus, access by internal departments and designated personnel of the data controller is in the legitimate interest of the data controller, to the extent that knowledge of the information from the application process is necessary and permissible for the selection of applicants or for the company’s internal administrative purposes. For this purpose, your information may be forwarded to third parties within the company via email or within the management system. The legal basis for this may be Section 26(1) of the German Federal Data Protection Act (BDSG), Article 6(1)(f) and (a) of the General Data Protection Regulation (GDPR).

Furthermore, the disclosure to third parties takes place within the framework of data processing on behalf of the controller pursuant to Article 28 of the GDPR, that is, within the context of processing activities in which the controller has a legitimate interest in outsourcing processing activities that it would otherwise be entitled to carry out itself. To this end, the controller takes the necessary measures to ensure compliance with data protection regulations.

Disclosure to external third parties may also occur for the purpose of defending legal claims based on legitimate interest or in connection with investigations by or disclosures to government agencies, to the extent that a law requires it or there is an obligation to disclose. The obligations to inform data subjects within the meaning of Articles 13 and 14 of the GDPR are fulfilled prior to the relevant disclosure, to the extent that these obligations must be met separately.

Feedback module

In connection with your application, we may ask you to provide feedback after an interview and 3 months after you are hired. We will send you an invitation link that will direct you to the rating system where you can submit your feedback. The purpose of this data processing is to further develop and optimize our recruiting and application processes, as well as our corporate image.

The following data is processed automatically for this purpose:

Contact details (name, e-mail)
Position title of the job you have applied for
Location of the position
Job category
Applicant identification

The feedback itself is stored anonymously in the database. No connection to a specific individual is established. In addition to rating individual questions with stars, you have the option to leave comments here. We expressly ask that you do not include any personal information in your comments. The information collected in this way may be displayed on our review page along with your feedback or shared with external partners such as kununu.

Participation is entirely voluntary and will only take place with your consent; without it, you will not be able to submit feedback. The legal basis is Article 6(1)(a) of the GDPR.

Subscription to Job Listings: „Job-Abo“

To stay informed about new job openings, you can subscribe to the job newsletter or view relevant positions on our career board (RSS feed). You can refine your subscription by specifying your desired job type and location.

To subscribe, you must also provide your email address. The legal basis for this is your consent to receive the newsletter pursuant to Article 6(1)(a) of the GDPR. You may revoke your consent to receive the newsletter at any time by clicking the unsubscribe link in the newsletter (opt-out).

The RSS feed itself does not process any personal data related to information about new job postings.

Salary Statistics Module „Salary Statistics“

Throughout the various stages of the application process, softgarden will give you the opportunity to provide feedback on your salary expectations and the salaries offered to you.

The information transmitted in this process is anonymized and processed without being linked to your name or contact information. softgarden processes this data in anonymized form for its own purposes (statistics, analysis, studies) and is the controller of this processing within the meaning of Article 4(7) of the GDPR.

Data processing takes place only with your consent through your participation and on a strictly voluntary basis. The legal basis is Article 6(1), first sentence, subparagraph (a) of the GDPR.

Social Share Buttons

You can share job postings on various social networks. Different buttons are provided for each network. After clicking on one of these buttons, you will be redirected to the respective social networks and taken to their login pages. These buttons are not plug-ins and do not transmit any personal data directly to the operators of the social networks.

Currently, job postings can be shared on the following social media platforms:

Facebook ( https://de-de.facebook.com/privacy/explanation )
Twitter ( https://twitter.com/de/privacy)
LinkedIn ( https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-join-privacy-policy )
Xing ( https://privacy.xing.com/de/datenschutzerklaerung )

The legal basis is Art. 6 para. 1 lit. f) GDPR for statistical analysis and reach measurement of job advertisements.

You can also use the links provided to learn how the social networks mentioned process your personal data. We have no control over how these social networks process your personal data.

„Easyfeedback“ Online Surveys“

At the end of the application process, softgarden may display a link inviting you to complete a survey. The survey is conducted through a service provided by easyfeedback GmbH to gather feedback on the application experience. softgarden conducts this survey as the controller within the meaning of Article 4(7) of the GDPR and processes the collected data in an anonymized form for its own purposes (statistics, analysis, studies) as well as for the further development of softgarden products.

The collection of survey data is secured by default using SSL encryption, and softgarden does not link the data to specific individuals during the analysis process. You may discontinue the survey at any time. The data processed up to the point of discontinuation may be used for the purposes stated.

Your participation in the survey is entirely voluntary, and by participating, you are giving your consent—without which your participation would not be possible—pursuant to Article 6(1)(a) of the GDPR. softgarden processes the data in an anonymized form for the purpose of analysis.

For more information about easyfeedback's privacy policy, please refer to the following notes:https://easy-feedback.de/privacy/datenschutzerklaerung.

Talent pool

As part of your application or by clicking the „Get in Touch“ button, you have the opportunity to submit your application to our talent pool. This data processing is necessary so that you can be automatically considered for future job postings, including similar or otherwise suitable positions.

If you register for the talent pool by clicking the „Get in Touch“ button, you will be asked to provide the following information:

Salutation, academic title (optional)
First name, last name, e-mail address
Job fields of interest
Current career level
Preferred location(s)
XING profile or curriculum vitae

Inclusion in the talent pool is entirely voluntary and requires your consent, as well as the use of an opt-in link. The legal basis is Article 6(1)(a) of the GDPR. Additionally, we will contact you after 12 months to ask whether you would still like to remain part of the talent pool.

Video interview with Jitsi

We use “Jitsi,” a video conferencing service integrated into the system, to conduct conferences and interviews. This establishes a direct “peer-to-peer connection” between participants, meaning that the system does not record or store any video interviews or personal data. The softgarden server serves only as an intermediary in this process. Participation in a video interview is voluntary and is based on your consent, Article 6(1)(a) of the GDPR, unless it is necessary for the application process, Section 26 of the BDSG.

Registration Customer Portal

You have the option to register for certain services provided on our website and thereby create a user profile (customer portal). As part of the registration and setup process, we collect and use the following personal data:

First and last name
E-mail address
Date and time of registration

In addition, you may provide voluntary information (e.g., phone number, etc.). Required information provided for registration purposes is marked as a required field in the input form with an asterisk. Your user account allows you to access additional sections of our website and log in to the services you have purchased. The legal basis for data processing is, in the case of consent, Article 6(1)(a) of the GDPR or Article 6(1)(b) of the GDPR, provided that the processing is necessary to provide the requested services. Your data will be deleted as soon as your user account on our website is deleted, provided there are no legal retention requirements. You can generally make changes to and/or delete your user account—including the data you have provided—directly within your user account after logging in, or you can request this by sending a message to the data controller named in the introduction.

Google Analytics

Our website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google Analytics uses so-called „cookies.“.

Google will use this information on behalf of the operator of this website to evaluate your use of the website and to compile reports on website activity. Google will also use this information to provide the website operator with other services related to the use of the website and the Internet. The IP address transmitted by your browser as part of Google Analytics will not be combined with other data held by Google. Processing is carried out in accordance with Article 6(1)(a) of the GDPR based on the consent you have provided.

We use Google Analytics only with IP anonymization enabled. This means that Google processes your IP address only in truncated form.

We have entered into a data processing agreement with the service provider, in which we require the provider to protect our customers' data and not to disclose it to third parties.

Since Google may transfer personal data to affiliated companies and subcontractors in countries outside the EU and the EEA, additional safeguards are required to ensure the level of data protection mandated by the GDPR. For the United States, the European Commission has issued an adequacy decision pursuant to Article 45(1) of the GDPR with respect to companies certified under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards, which can be viewed at the following link: https://www.dataprivacyframework.gov/s/participant-search

For potential transfers to other third countries outside the EU and the EEA for which there is no adequacy decision by the European Commission, we have also agreed with the provider on standard data protection clauses in accordance with Article 46(2)(c) of the GDPR. These clauses require the recipient of the data in the third country to process the data in accordance with the level of protection in Europe.

The Google Analytics Terms of Service and information on data protection can be accessed via the following links:

http://www.google.com/analytics/terms/de.html

https://www.google.de/intl/de/policies/

The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Data at the user and event levels that is linked to cookies, user identifiers (e.g., user ID), and advertising IDs (e.g., DoubleClick cookies, Android Advertising ID, IDFA [Apple Identifier for Advertisers]) takes place no later than 14 months after it is collected.

You can prevent cookies from being stored by adjusting your browser settings accordingly. However, please note that in this case, you may not be able to use all features of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and analyzing your use of the website (including your IP address), as well as from processing this data by Google, by downloading and installing the browser plugin available at https://tools.google.com/dlpage/gaoptout?hl=de is available.

Google Tag Manager

This website uses Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). This service allows website tags to be managed through a single interface. Google Tag Manager merely implements tags. This means that no cookies are used, and only the user’s IP address is transmitted to Google to establish a connection. Google Tag Manager triggers other tags, which in turn may collect data. However, Google Tag Manager does not access this data. If a deactivation has been set at the domain or cookie level, it remains in effect for all tracking tags, provided they are implemented using Google Tag Manager.

We use Google Tag Manager based on your consent in accordance with Article 6(1)(a) of the GDPR.

Google Fonts

We integrate the „Google Fonts“ service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA, into our websites. In the European Union (EU) and the European Economic Area (EEA), the service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Description of the data processing and the purpose

„Google Fonts“ allows us to use web fonts. To do this, when you visit our website, the necessary Google Fonts are loaded from your web browser into your browser cache. This is necessary so that your browser can also display our text with improved visual quality. If your browser does not support this feature, a standard font from your computer will be used for display.

Since Google Fonts Since this content is provided by Google and is loaded from its servers when the page is accessed, the usage data technically required to display the page is also transmitted. In this regard, Google also receives your IP address, which is technically necessary to retrieve the content.

Cookies and similar technologies, particularly JavaScript, may be used to store and retrieve data on your device. For more details, see „Access to and Storage of Information on Terminal Equipment“.

The purpose of data processing and our legitimate interest is to make our website more visually appealing to you.

Legal basis for data processing

The legal basis for the integration and use of the service is your consent, provided that you have given it through our consent management platform.

The use of cookies and similar technologies is based on Section 25(1) of the TDDDG. The subsequent data processing is based on Article 6(1), first sentence, subparagraph (a) of the GDPR.

Recipient

In connection with the use of the service, the data collected through our websites is transferred to the following recipients:

Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

Further information on the handling of personal data by the provider of the service can be found at https://policies.google.com/privacy?hl=de.

Data processing in third countries

Your data will be transferred to Google LLC in the United States. For data transfers to the United States, the European Commission has issued an adequacy decision regarding companies certified under the EU-U.S. Data Privacy Framework. The Google LLC is certified in accordance with the EU-U.S. Data Privacy Framework.

Storage duration

By integrating the service into our websites, data is transmitted to the recipients listed above and processed there for as long as necessary to achieve the stated purposes. We do not store the data processed by the service and made available to us in our own systems beyond this period.

YouTube

On our website, we embed videos from „YouTube,“ a social media platform operated by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as „Google“). The legal basis for the processing of your personal data in this context is the consent you have provided pursuant to Article 6(1)(a) of the GDPR.

If playback of embedded YouTube videos is initiated with your consent, a server request is made—typically to a Google server in the United States. This transmits information to the server about which page you have visited, and the IP address of the visitor’s device browser is transmitted to Google and stored by Google.

In addition, the provider „YouTube“ uses cookies—with your consent—to collect information about user behavior. According to „YouTube,“ these cookies are used, among other things, to track video statistics, improve the user experience, and prevent abusive behavior. If you are signed in to Google, your data may also be associated with your account when you click on a video. If you do not wish for this data to be associated with your YouTube profile, you must log out before clicking the button. Google stores this data as usage profiles and uses it for advertising, market research, and/or to tailor its websites to user needs. Such analysis is carried out in particular (even for users who are not signed in) to display targeted advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles. Please contact Google directly regarding this matter.

For more information about data protection and Google's use of data, please visit the following Google website: https://policies.google.com/privacy?hl=de&gl=de

Google Maps

Our website uses the online map service provider Google Maps via an interface. This allows us to display interactive maps directly on the website and enables you to conveniently use the map feature. The map service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. To use the features of Google Maps, it is necessary to store your IP address.

Google uses cookies to collect information about user behavior. The legal basis for the processing of your personal data is the consent you have provided pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TTDSG.

For more information on how user data is handled, please see Google's Privacy Policy:

https://www.google.de/intl/de/policies/privacy/Opt-out:https://www.google.com/settings/ads/

Letscast

On our website, we integrate the „LetsCast.fm“ service provided by Produktgenuss GmbH, Vereinsstraße 51, 20357 Hamburg, Germany.

„LetsCast“ is a podcast tool that allows us to embed the podcasts we create on our website. To do this, when you visit a subpage on our website that links to a podcast episode, your web browser uses JavaScript to load the embedded podcasts and corresponding thumbnails into your browser cache. Personal data, such as your IP address and your interactions with the podcast, is processed in order to play the desired podcast.

Hosting the podcast on the provider's servers allows us to quickly deliver podcasts with larger file sizes without causing long loading times, while also conserving the limited resources of our own web server. This ensures that our websites perform optimally every time they are accessed.

The purpose of data processing is to make our website visually appealing to you and to ensure that it is efficient and resource-efficient for us.

Data processing through LetsCast takes place only and exclusively when you visit a page on our website that includes a podcast via LetsCast.

The legal basis for the integration and use of the service is our legitimate interest in optimizing the delivery of our podcasts on our website, in accordance with Article 6(1)(f) of the GDPR.

In connection with the use of the service, the data collected through our websites is transferred to the following recipients:

LetsCast fm, Produktgenuss GmbH, Vereinsstraße 51, 20357 Hamburg, Germany

Further information on the handling of personal data by the provider of the service can be found at Privacy | LetsCast.fm

No data is transferred to third countries in connection with the use of LetsCast.

By integrating this service into our websites, data is transmitted to the recipients listed above and processed there for as long as necessary to achieve the stated purposes.

We do not store the data processed by the service and made available to us in our own systems beyond what is necessary.

Compliance

To manage consent on our website in compliance with data protection regulations, we use the „Complianz“ software solution provided by Complianz BV, CoC 717814475, Kalmarweg 14-5, 9723 JG, Groningen (NL).

When visiting our website, essential cookies are stored in the user's browser, in which the consent given or the revocation of consent is stored together with the time of granting/refusal.

With Complianz, we provide you with a so-called cookie banner through which you can give us your consent to the use of cookies and other website services and features. The cookie banner informs you about the use of cookies and other website services and features when you first visit our website and asks for your consent to the use of cookies and other website services and features. Until you grant your consent, all processes on our website that require consent will be automatically blocked. Through the cookie banner, you have the option to reject unwanted cookies while still continuing to use the website.

The purpose of data processing and our legitimate interest is to centrally manage cookies and similar technologies, as well as integrated services, on our website and to provide you with a simple way to give and withdraw your consent, thereby enabling us to fulfill our legal obligations to obtain consent as well as our accountability requirements under Article 5(2) of the GDPR.

We do not use the user data collected through cookies to create user profiles. To the extent that we use cookies and similar technologies in connection with the integration of the service, or to the extent that data is stored on or read from your device by the service, this is done in accordance with Section 25(2)(2) of the TDDDG. Subsequent data processing is carried out on the basis of Article 6(1), first sentence, letter f of the GDPR.

We use Complianz locally, so no personal data is passed on to the provider of Complianz.

By default, the collected data and cookies are stored for 12 months or are deleted when you request that we delete them or when you delete the Complianz cookies yourself. Mandatory statutory retention periods remain unaffected. For details on Complianz’s data processing, please visit the Complianz website at https://complianz.io/privacy-statement/

DeepL API for Website Translation

On our website, we integrate the „DeepL“ service provided by DeepL SE, Maarweg 165, 50825 Cologne, in.

Description of the data processing and the purpose

This service allows us to reliably translate our website content from German into English and French so that we can also make our website content available to English- and French-speaking visitors. To establish a connection to the DeepL API and translate the website content, a connection to the servers of the provider DeepL is required. Specifically, the service processes the following types of data:

Technical usage data

Full IP address
Date and time of access
Volume of data transferred
Requested domain
Search term when using a web browser
Truncated/anonymized IP
Diagnostic information in the event of errors

Device and Browser Information

Browser type and version
Operating system
Language used

User-related data

URL of the previously visited website
Notification of Successful Data Retrievals

The purpose of data processing and our legitimate interest is to be able to reliably provide our website content in other languages to interested parties who speak those languages, as needed.

Legal basis for data processing

To the extent that we use cookies and similar technologies in connection with the integration of the service, or to the extent that data is stored on or read from your device by the service, this is done in accordance with § 25(2)(2) of the TDDDG. Any subsequent data processing is carried out on the basis of Article 6(1), sentence 1, subparagraph (f) of the GDPR.

Recipient

As part of the data processing, your data will be transferred to the following recipients:

DeepL SE, Maarweg 165, 50825 Cologne

Storage duration

Data Security

In accordance with Article 32 of the GDPR, we implement appropriate technical and organizational measures, taking into account the state of the art, the costs of implementation, and the nature, scope, circumstances, and purposes of the processing, as well as the varying likelihood and severity of the risk to the rights and freedoms of natural persons, to ensure a level of security appropriate to the risk. This website uses SSL encryption for security purposes and to protect the transmission of confidential content.

Duration of the Storage of Personal Data

The duration of the storage of personal data is determined by the applicable statutory retention periods (e.g., under commercial and tax law). Once the respective retention period has expired, the corresponding data is routinely deleted. If data is necessary for the performance of a contract or for entering into a contract, or if we have a legitimate interest in continuing to store the data, the data will be deleted when it is no longer necessary for these purposes or when you exercise your right of withdrawal or objection.

Your Rights

Below you will find information on the rights granted to you under applicable data protection law with respect to the controller regarding the processing of your personal data:

The right, pursuant to Article 15 of the GDPR, to request information about your personal data that we process. In particular, you may request information regarding the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and the existence of automated decision-making, including profiling, and, where applicable, meaningful information regarding its details.

The right, pursuant to Article 16 of the GDPR, to request the immediate rectification of inaccurate personal data or the completion of your personal data stored by us.

The right, pursuant to Article 17 of the GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.

The right, pursuant to Article 18 of the GDPR, to request the restriction of the processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure, and if we no longer need the data but you require it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Article 21 of the GDPR.

The right, pursuant to Article 20 of the GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller.

The right to lodge a complaint with a supervisory authority pursuant to Article 77 of the GDPR. As a general rule, you may contact the supervisory authority of the federal state where our registered office is located, as indicated above, or, if applicable, the supervisory authority of your usual place of residence or workplace.

The right to withdraw consent pursuant to Article 7(3) of the GDPR: You have the right to withdraw your consent to the processing of your data at any time, with effect for the future. In the event of withdrawal, we will delete the relevant data immediately, unless further processing can be based on a legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to the withdrawal.

Right of Objection

If we process your personal data on the basis of legitimate interests pursuant to Article 6(1), first sentence, subparagraph (f) of the GDPR, you have the right under Article 21 of the GDPR to object to the processing of your personal data, provided that such objection is based on grounds arising from your particular situation. If the objection is directed against the processing of personal data for the purposes of direct marketing, you have a general right to object without being required to specify a particular situation.

If you wish to exercise your right of withdrawal or right to object, simply send an email to datenschutz@esforin.com

Legal Obligations

The provision of personal data for the purpose of deciding whether to enter into a contract, fulfilling a contract, or carrying out precontractual measures is voluntary. However, we can only make a decision in the context of contractual measures if you provide the personal data necessary for the conclusion of a contract, the performance of a contract, or precontractual measures.

Automated Decision Making

There is no automated decision-making or profiling as defined in Article 22 of the GDPR.

Subject to Change

We reserve the right to amend or update this Privacy Policy as necessary, in accordance with applicable data protection regulations. This allows us to bring it into line with current legal requirements and to reflect changes to our services, such as the introduction of new services. The most current version applies to your visit.

Date of this Privacy Policy: November 2025