Data Protection - Advanced Applications GmbH

Data protection declaration

Information on data processing for this website in accordance with Art. 13 EU General Data Protection Regulation (GDPR) when collecting personal data from the data subject
(Version: GDPR 2.1 from July 2024)

Advanced Applications GmbH is responsible for this website and, as a provider of a teleserv-ice, must inform you at the beginning of your visit about the type, scope and purpose of the collection and use of personal data in a precise, transparent, comprehensible and easily ac-cessible form in clear and simple language. This content must be available to you at all times.

We attach great importance to the security of your data and compliance with data protection regulations. The processing of personal data is subject to the provisions of the European and national laws currently in force.

With the following data protection information, we would like to show you how we handle your personal data and how you can contact us:

Advanced Applications GmbH
An ATS Company
Rheinwaldstraße 38
78628 Rottweil
Germany
Commercial Register No.: HRB 460851
Managing Director: Andreas Grupp, Dr. Christian Debus
Phone: +49 741 74416-600
E-mail: service@a2pp.com

Our data protection officer
Alissa Lenz - Data Protection Office Lenz GmbH & Co. KG
Bahnhofstrasse 50
87435 Kempten
Germany

If you have any questions about data protection or other data protection-related concerns, please feel free to send an e-mail to the following e-mail address: datenschutz@a2pp.com.

A. General

For the sake of clarity, we do not use gender-specific differentiation. In the interests of equal treatment, the corresponding terms apply to all genders. The meaning of the terms used, such as “personal data” or their “processing”, can be found in Art. 4 GDPR.

The personal data processed in the context of this website includes
- Usage data (e.g. pages visited on our website) and
- content data (e.g. entries in online forms).

B. Specific

Data protection information

We guarantee that we will only process your data in connection with the handling of your inquiries and for internal purposes as well as to provide the services or content you have requested.

Principles of data processing

We process your personal data only in compliance with the relevant data protection regulations and on the basis of the following legal bases:

-Processing for the fulfillment of our services and implementation of contractual measures
Art. 6 para. 1 lit. b) GDPR

-Processing for the fulfillment of our legal obligations
Art. 6 para. 1 lit. c) GDPR

-Consent
Art. 6 para. 1 lit. a) and Art. 7 GDPR

-Processing for the protection of our legitimate interests
Art. 6 para. 1 lit. f) GDPR

Data transmission to third parties

We would like to point out that data is transmitted when you use our website. This is related to the use of the consent banner and a widget.

We would like to point out that further data transmission may take place when using our web-site if you select the services offered via the “cookie consent tool” provided on the website.

As part of website hosting, the service provider used may gain access to your data. We have outlined which web host we use in this privacy policy.

If we use subcontractors to provide our services, we take appropriate legal precautions and appropriate technical and organizational measures to ensure the protection of personal data in accordance with the relevant legal regulations.

Data transfer to a third country or an international organization

Third countries are countries in which the GDPR is not directly applicable law. This basically includes all countries outside the EU or the European Economic Area.

We would like to point out that when using our website, data may be transferred to a third country if you select the services offered via the “cookie consent tool” provided on the web-site. If you do not select a service, no data will be transferred to a third country.

The following applies to data transfers to the USA: Since July 2023, there has been an ade-quacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as the basis for data transfers to certified organizations in the USA.

The US services used are certified under the Data Privacy Frame-work. Details can be found under the individual services.

Storage duration of your personal data

We adhere to the principles of data minimization and data avoidance. This means that we only store your data for as long as is necessary to fulfill the aforementioned purposes or for as long as the various storage periods stipulated by law require. If the respective purpose no longer applies or after the corresponding periods have expired, your data will be routinely blocked or deleted in accordance with the statutory provisions.

We have created an internal company concept to ensure this procedure.

Contact us

Personal data is processed when you contact us electronically (e.g. via contact form or e-mail). The information you provide will be stored exclusively for the purpose of processing the request and for possible follow-up questions.

We would like to inform you of the legal basis for this:
- Processing for the fulfillment of our services and implementation of contractual measures
Art. 6 para. 1 lit. b) GDPR

We would like to point out that e-mails can be read or changed without authorization and unnoticed during transmission. We would also like to draw your attention to the fact that we use software to filter unwanted emails (spam filter). The spam filter can reject e-mails if they are falsely identified as spam due to certain characteristics.

What rights do you have?
a) Right to information

You have the right to obtain information about your stored data free of charge. On request, we will inform you in writing which of your personal data we have stored. This also includes the origin and recipients of your data as well as the purpose of the data processing.

b) Right to rectification

You have the right to have your data stored by us corrected if it is incorrect. You can also demand a restriction of processing, e.g. if the accuracy of your personal data is disputed.

c) Right to blocking
You can also have your data blocked. To ensure that your data can be blocked at any time, this data must be kept in a lock file for control purposes.

d) Right to erasure
You can request the erasure of your personal data, provided that there are no statutory retention obligations. If such an obligation exists, we will block your data on request. If the relevant legal requirements are met, we will delete your personal data even without your request.

e) Right to data portability
You are entitled to request that we provide you with the personal data transmitted to us in a format that allows it to be transmitted to another location.

f) Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a data protection supervisory authority.

The data protection authority responsible for us:

The State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Postal address: P.O. Box 10 29 32, 70025 Stuttgart, Germany
House address: Lautenschlagerstraße 20, 70173 Stuttgart, Germany
Telephone +49 711 615541-0
Fax: +49 711 615541-15
E-mail: poststelle@lfdi.bwl.de
Web: www.baden-wuerttemberg.datenschutz.de

You can open the complaint form via the following link:
www.baden-wuerttemberg.datenschutz.de/online-beschwerde

Note: It is also possible to lodge a complaint with any data protection supervisory authority within the EU.

g) Right of objection

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data in accordance with Art. 6 (1) (e) and (f); this also applies to pro-filing based on these provisions.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defense of legal claims.

Where personal data are processed for direct marketing purposes, you have the right to ob-ject at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. In the event of such an objection, we will no longer process your personal data for the purposes of direct advertis-ing. All you need to do is send us an email to this effect.

h) Right of revocation
You have the option at any time to withdraw your consent to the processing of your data with effect for the future without giving reasons. You will not suffer any disadvantages as a result of the revocation. All you need to do is send us an e-mail to this effect.

However, such a revocation does not affect the legality of the processing carried out up to the time of revocation on the legal basis of Art. 6 para. 1 letter a) GDPR.

To assert your rights as a data subject, please send us an email to one of the email address-es listed above.

Protection of your personal data

We take contractual, technical and organizational security measures according to the state of the art to ensure that the data protection laws are complied with and thus to protect the pro-cessed data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons.

The security measures include in particular the encrypted transmission of data between your browser and our server. For this purpose, 256-bit SSL (AES 256) encryption technology is used.

Your personal data is protected within the scope of the following points (excerpt):

a) Safeguarding the confidentiality of your personal data
In order to protect the confidentiality of your data stored by us, we have taken various measures to control access and access control.

b) Safeguarding the integrity of your personal data
In order to protect the integrity of your data stored by us, we have taken various measures to control the transfer and input of data.

c) Safeguarding the availability of your personal data
In order to ensure the availability of your data stored by us, we have taken various measures to control orders and availability.

The security measures in use are continuously improved in line with technological develop-ments. Despite these precautions, we cannot guarantee the security of your data transmis-sion to our website due to the insecure nature of the Internet. Therefore, any data transmis-sion by you is at your own risk.

Protection of Minors

Persons who have not yet reached the age of 16 may only provide us with personal infor-mation if they have the express consent of their legal guardians. This data is processed in accordance with this data protection notice.

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are

- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address

This data is not merged with other data sources.

The basis for data processing is our legitimate interest in accordance with Art. 6 para. 1 lit. f) GDPR.

Online applications
We offer applicants a career section on our website in which we advertise vacancies. Applica-tions for the positions can be made either by e-mail or via the ATS Group's career portal, which is forwarded to a subpage.

You will receive information obligations as part of the application process directly in the sys-tem/as a response.

Cookies

Cookies are small text files that are stored locally in the cache of your Internet browser. The cookies make it possible, for example, to recognize the Internet browser. The files are used to help the browser navigate through the website and to make full use of all functions.

Cookie-Consent-Tool
We use a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent.

This website uses the cookie consent tool of Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (“CookieBot”).

The “Cookie Consent Tool” is displayed to users when they access a page in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by ticking the box. This ensures that such cookies are only set on the user's end device if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Another legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

Website hosting
We use the system of the following provider to host our website and display the page content: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany

All data collected on our website is processed on the provider's servers.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.
You can find Hetzner Online GmbH's privacy policy here: www.hetzner.com/de/legal/privacy-policy 

Website CRM
For the administration of the website we use the content management system of the following provider: TYPO3 Association, Gewerbestrasse 10, CH-4450 Sissach, Switzerland.

The provider may gain access to data in the process. We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

Information on the use of Kununu
Kununu is a product of Xing. The controller for Kununu/Xing is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Widget
The Kununu widget is integrated on our website to display our employee ratings.

When you access the subpage on our website, your browser establishes a short-term connection to the servers of New Work SE (“kununu”), with which the “kununu Widget” functions (in particular the display of the kununu Live Score) are provided. kununu does not store any personal data about you when you access this website. There is also no evaluation of your usage behavior through the use of cookies in connection with the “kununu Widget”. If you click on the widget, you will be redirected to our presence on Kununu.

For this processing, we refer to Art. 6 para. 1 lit. f GDPR (legitimate interests). Our legitimate interest lies in the presentation of the current score of our employee ratings on Kununu for the positive presentation of the company.

Cookies
Kununu also sets various marketing and statistics cookies. Kununu/Xing provides the following information
the following information: Provides the user with reviews of the product and/or service based on the experiences of other users. The cookie also determines which products/services are relevant to the user based on the user's geographical location and which job ads are shown to the visitor and which they click on - this information is used to make advertising more relevant.

For the processing of your data as described above, we obtain your consent via the consent banner in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 TDDDG.

You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.

You can find information on data protection at Xing here: https://privacy.xing.com/de/datenschutzerklaerung

Use of videos from YouTube
We use the YouTube implementation function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Where legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TDDDG.

You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.

Data is transferred to a third country (in this case the USA) or an international organization. Since July 2023, there has been an adequacy decision by the EU Commission (Data Privacy Framework), which identifies the USA as a third country with a level of data protection comparable to that of the EU. The adequacy decision can now serve as the basis for data transfers to certified organizations in the USA. According to the list of certified companies published by the US Department of Commerce, Google LLC is listed as a certified company.

According to information from “YouTube”, cookies are used to collect video statistics, improve user-friendliness and prevent abusive behavior, among other things. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button.

Google stores your data (even for users who are not logged in) as user profiles and analyzes them. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence. Further information on data protection at “YouTube” can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

Google cookie NID
A “NID” cookie is set by Google on our website.

Google services use this cookie for analysis and it may also be used to display Google advertising for logged-out users in Google services. The “NID” cookie also enables personalized auto-completion in Google Search as you enter search terms.

To the extent required by law, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TDDDG.

You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.

Further information on data protection can be found in the provider's privacy policy at: https://policies.google.com/technologies/cookies?hl=de

Changes to our privacy policy
We reserve the right to amend our privacy policy at short notice to ensure that it always complies with current legal requirements or to implement changes to our services. This may concern, for example, the introduction of new services. The new data protection information will then apply to your next visit.