{"id":54184,"date":"2023-07-14T10:17:48","date_gmt":"2023-07-14T08:17:48","guid":{"rendered":"https:\/\/esz.dyncom.de\/datenschutzerklaerung\/"},"modified":"2026-07-24T09:48:31","modified_gmt":"2026-07-24T07:48:31","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/www.esz-ag.de\/en\/privacy-policy\/","title":{"rendered":"Privacy policy"},"content":{"rendered":"<div class=\"wpb-content-wrapper\">[vc_row bg_position=&#8221;right center&#8221; css=&#8221;.vc_custom_1666910764921{margin-bottom: 120px !important;background-position: center !important;background-repeat: no-repeat !important;background-size: contain !important;}&#8221; el_class=&#8221;hero-section-subpage&#8221; responsive_css=&#8221;margin_top_medium:32px&#8221;][vc_column width=&#8221;1\/2&#8243;][vc_column_text css=&#8221;.vc_custom_1715779868088{margin-bottom: 24px !important;}&#8221;]\r\n<h1 id=\"dkd-labor-und-dakks-kalibrierung\">Privacy policy according to GDPR<\/h1>\r\n[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1784877339985{margin-bottom: 24px !important;}&#8221;]\r\n<p id=\"dkd-labor-und-dakks-kalibrierung\">(Last updated: July 2026)<\/p>\r\n[\/vc_column_text][vc_column_text css=&#8221;&#8221;]\r\n<h2>Controller responsible for data processing<\/h2>\r\nesz AG calibration &amp; metrology\r\nMax-Planck-Strasse 16\r\n82223 Eichenau, Germany\r\n\r\nPhone: <a href=\"tel:+498141888870\">+49 (0) 8141 88887-0<\/a>\r\n<h2>Data Protection Officer<\/h2>\r\nMr Daniel Jank\r\nEmail: <a href=\"mailto:datenschutz@esz-ag.de\">datenschutz@esz-ag.de<\/a>\r\n\r\n&nbsp;\r\n\r\n[\/vc_column_text][\/vc_column][vc_column width=&#8221;1\/2&#8243;][vc_column_text css=&#8221;.vc_custom_1662636845792{margin-bottom: 48px !important;}&#8221; el_class=&#8221;hero-img&#8221;]<img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-1544 size-full\" src=\"https:\/\/www.esz-ag.de\/wp-content\/uploads\/yellow_header_kalibrierscheine_2.png\" alt=\"\" width=\"1074\" height=\"320\" title=\"\">[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=&#8221;.vc_custom_1666911392809{margin-bottom: 32px !important;}&#8221;][vc_column offset=&#8221;vc_col-md-offset-2 vc_col-md-8&#8243;][vc_column_text css=&#8221;.vc_custom_1784879054931{margin-bottom: 35px !important;}&#8221;]\r\n<h2>I. General information on data processing<\/h2>\r\n[\/vc_column_text][vc_column_text css=&#8221;&#8221;]\r\n<h3 id=\"1-scope-of-the-processing-of-personal-data\">1. Scope of the Processing of Personal Data<\/h3>\r\nAs a rule, we process our users&#8217; personal data only to the extent necessary to provide a functional website and our content and services. We generally process our users&#8217; personal data only with the user&#8217;s consent. An exception applies where obtaining prior consent is not possible for practical reasons and the processing is permitted by law.\r\n<h3 id=\"2-legal-basis-for-the-processing-of-personal-data\">2. Legal Basis for the Processing of Personal Data<\/h3>\r\nWhere we obtain the data subject&#8217;s consent to the processing of personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.\r\n\r\nWhere the processing of personal data is necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.\r\n\r\nWhere the processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis.\r\n\r\nWhere the vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis.\r\n\r\nWhere processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, and those interests are not overridden by the interests or fundamental rights and freedoms of the data subject, Article 6(1)(f) GDPR serves as the legal basis for the processing.\r\n<h3 id=\"3-erasure-of-data-and-storage-period\">3. Erasure of Data and Storage Period<\/h3>\r\nThe data subject&#8217;s personal data will be erased or blocked as soon as the purpose for which it was stored ceases to apply. Data may also be stored where this is provided for by the European or national legislature in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or erased when a storage period prescribed by the aforementioned provisions expires, unless the data must continue to be stored for the conclusion or performance of a contract.\r\n\r\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=&#8221;.vc_custom_1666911392809{margin-bottom: 32px !important;}&#8221;][vc_column offset=&#8221;vc_col-md-offset-2 vc_col-md-8&#8243;][vc_column_text css=&#8221;.vc_custom_1784879155152{margin-bottom: 35px !important;}&#8221;]\r\n<h2>II. Provision of the website and creation of log files<\/h2>\r\n[\/vc_column_text][vc_column_text css=&#8221;&#8221;]\r\n<h2><\/h2>\r\n<h3>1. Description and Scope of Data Processing<\/h3>\r\nWhenever our website is accessed, our system automatically collects data and information from the computer system of the device accessing the website.\r\n\r\nThe following data is collected:\r\n\r\n&#8211; Information about the browser type and version used\r\n&#8211; The user&#8217;s operating system\r\n&#8211; The user&#8217;s internet service provider\r\n&#8211; The user&#8217;s IP address\r\n&#8211; The date and time of access\r\n&#8211; Websites from which the user&#8217;s system reaches our website\r\n&#8211; Websites accessed by the user&#8217;s system via our website\r\n\r\nThe data is also stored in our system&#8217;s log files. This data is not stored together with any other personal data relating to the user.\r\n<h3>2. Legal Basis for Data Processing<\/h3>\r\nThe legal basis for the temporary storage of the data and the log files is Article 6(1)(f) GDPR.\r\n<h3>3. Purpose of Data Processing<\/h3>\r\nThe temporary storage of the IP address by the system is necessary to deliver the website to the user&#8217;s device. For this purpose, the user&#8217;s IP address must remain stored for the duration of the session.\r\n\r\nThe data is stored in log files to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not analysed for marketing purposes in this context.\r\n\r\nThese purposes also constitute our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR.\r\n<h3>4. Storage Period<\/h3>\r\nThe data will be erased as soon as it is no longer required for the purpose for which it was collected. Where data is collected for the purpose of providing the website, this is the case when the relevant session ends.\r\n\r\nWhere data is stored in log files, it will be erased after no more than seven days. Storage beyond this period is possible. In such cases, users&#8217; IP addresses will be erased or anonymised so that the accessing client can no longer be identified.\r\n<h3>5. Right to Object and Options for Removal<\/h3>\r\nThe collection of data for the provision of the website and the storage of data in log files are strictly necessary for the operation of the website. Consequently, users have no right to object in this respect.\r\n<h3>6. Consent Management Tool<\/h3>\r\nBecause we use cookies on our website that require consent, we must manage whether you grant or refuse consent. For this purpose, we use a consent management tool, also known as a cookie banner. The tool stores the settings you select in cookies.\r\n\r\n<strong>Purpose(s) of data processing<\/strong>\r\n\r\nManagement of consent to data processing.\r\n\r\n<strong>Legal basis for reading information from or storing information on the user&#8217;s terminal equipment<\/strong>\r\n\r\nSection 25(2) no. 2 of the German Telecommunications Digital Services Data Protection Act (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz &#8211; TDDDG).\r\n\r\n<strong>Legal basis for the processing of personal data<\/strong>\r\n\r\nArticle 6(1)(c) GDPR in conjunction with the judgment of the German Federal Court of Justice (Bundesgerichtshof &#8211; BGH) of 28 May 2020, I ZR 7\/16 (legal obligation).\r\n\r\n<strong>Recipients or categories of recipients to whom data is disclosed<\/strong>\r\n\r\nNone.\r\n\r\n<strong>Transfer of data to a third country and the legal basis for such transfer<\/strong>\r\n\r\nNo such transfer takes place.\r\n\r\n<strong>Storage period or criteria used to determine the storage period<\/strong>\r\n\r\nFor the duration of the session or for 365 days.\r\n\r\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=&#8221;.vc_custom_1666911392809{margin-bottom: 32px !important;}&#8221;][vc_column offset=&#8221;vc_col-md-offset-2 vc_col-md-8&#8243;][vc_column_text css=&#8221;.vc_custom_1784879163020{margin-bottom: 35px !important;}&#8221;]\r\n<h2>III. Use of cookies<\/h2>\r\n[\/vc_column_text][vc_column_text css=&#8221;&#8221;]\r\n<h3 id=\"description-and-scope-of-data-processing\">Description and Scope of Data Processing<\/h3>\r\nOur website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user&#8217;s device. When a user accesses a website, a cookie may be stored on the user&#8217;s operating system. This cookie contains a unique string of characters that enables the browser to be identified when the website is accessed again.\r\n\r\nWe use cookies to make our website more user-friendly. Certain elements of our website require the accessing browser to be identified even after the user moves to another page.\r\n\r\nThe following data is stored and transmitted in the cookies:\r\n<ul>\r\n \t<li>Items in a shopping cart<\/li>\r\n \t<li>Login information<\/li>\r\n<\/ul>\r\n<h3 id=\"legal-basis-for-data-processing\">Legal Basis for Data Processing<\/h3>\r\nFor access to terminal equipment that is strictly necessary for technical reasons, the legal basis is Section 25(2) no. 2 TDDDG.\r\n\r\nDepending on the relevant purpose, the subsequent processing of personal data may be based on Article 6(1)(f) GDPR or Article 6(1)(b) GDPR.\r\n\r\nNon-essential cookies or tracking technologies are used only with prior consent pursuant to Section 25(1) TDDDG and Article 6(1)(a) GDPR.\r\n<h3 id=\"purpose-of-data-processing\">Purpose of Data Processing<\/h3>\r\nTechnically necessary cookies are used to make websites easier to use. Certain functions of our website cannot be provided without cookies. These functions require the browser to be recognised even after the user moves to another page.\r\n\r\nWe require cookies for the following applications:\r\n<ul>\r\n \t<li>Shopping cart<\/li>\r\n \t<li>Login information<\/li>\r\n<\/ul>\r\nUser data collected through technically necessary cookies is not used to create user profiles.\r\n\r\nThese purposes also constitute our legitimate interest in processing personal data pursuant to Article 6(1)(f) GDPR.\r\n<h3 id=\"storage-period-right-to-object-and-options-for-removal\">Storage Period, Right to Object and Options for Removal<\/h3>\r\nCookies are stored on the user&#8217;s device and transmitted from it to our website. As a user, you therefore have full control over the use of cookies. You can disable or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been stored can be erased at any time. This can also be done automatically.\r\n\r\nIf cookies are disabled for our website, some of the website&#8217;s functions may no longer be available in full.\r\n<h3 id=\"calendly\">Calendly<\/h3>\r\nYou can schedule appointments with us through our website. We use the Calendly tool for appointment bookings. The provider is Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA (hereinafter &#8220;Calendly&#8221;).\r\n\r\nTo book an appointment, you enter the requested data and your preferred appointment time in the form provided. The data entered is used to plan, conduct and, where necessary, follow up on the appointment. The appointment data is stored on Calendly&#8217;s servers on our behalf. Calendly&#8217;s privacy information is available at:\r\n\r\n<a href=\"https:\/\/help.calendly.com\/hc\/de\/sections\/4411772410519-Sicherheit-und-Einhaltung-gesetzlicher-Vorschriften\" target=\"_blank\" rel=\"noopener\">https:\/\/help.calendly.com\/hc\/de\/sections\/4411772410519-Sicherheit-und-Einhaltung-gesetzlicher-Vorschriften<\/a>\r\n\r\nThe data you enter will remain with us until you ask us to erase it, withdraw your consent to its storage or the purpose for storing the data ceases to apply. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.\r\n\r\nThe legal basis for the processing is Article 6(1)(f) GDPR. The website operator has a legitimate interest in making it as straightforward as possible for prospective and existing customers to arrange appointments. Where corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user&#8217;s terminal equipment, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.\r\n\r\nData transfers to the United States are based on the European Commission&#8217;s Standard Contractual Clauses. Details are available at:\r\n\r\n<a href=\"https:\/\/calendly.com\/pages\/dpa\" target=\"_blank\" rel=\"noopener\">https:\/\/calendly.com\/pages\/dpa<\/a>\r\n<h3 id=\"friendly-captcha\">Friendly Captcha<\/h3>\r\nWe use Friendly Captcha (hereinafter &#8220;Friendly Captcha&#8221;) on this website. The provider is Friendly Captcha GmbH, Am Anger 3-5, 82237 Woerthsee, Germany. Friendly Captcha is used to determine whether data entered on this website, for example in a contact form, is being entered by a human or by an automated program. For this purpose, Friendly Captcha analyses the behaviour of website visitors on the basis of various characteristics. As part of this analysis, Friendly Captcha evaluates various items of information, such as an anonymised IP address, the referrer and the time of the visit. Further information is available at:\r\n\r\n<a href=\"https:\/\/friendlycaptcha.com\/legal\/privacy-end-users\/\" target=\"_blank\" rel=\"noopener\">https:\/\/friendlycaptcha.com\/legal\/privacy-end-users\/<\/a>\r\n\r\nThe data is stored and analysed on the basis of Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its online services against abusive automated scraping and spam. Where corresponding consent has been requested, the processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user&#8217;s terminal equipment, such as device fingerprinting, within the meaning of the TDDDG. Consent may be withdrawn at any time.\r\n\r\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=&#8221;.vc_custom_1666911392809{margin-bottom: 32px !important;}&#8221;][vc_column offset=&#8221;vc_col-md-offset-2 vc_col-md-8&#8243;][vc_column_text css=&#8221;.vc_custom_1784879172839{margin-bottom: 35px !important;}&#8221;]\r\n<h2>IV. Newsletter<\/h2>\r\n[\/vc_column_text][vc_column_text css=&#8221;&#8221;]\r\n<h3 id=\"1-description-and-scope-of-data-processing-1\">1. Description and Scope of Data Processing<\/h3>\r\nYou can subscribe to a free newsletter on our website. When you register for the newsletter, the data entered in the registration form is transmitted to us. To receive the newsletter offered on our website, you can register using our form. We use a double opt-in procedure. First, a confirmation email is sent to the email address you provide, asking you to confirm your registration. Your registration becomes effective only when you click the activation link in the confirmation email.\r\n\r\nThe following data is also collected during registration:\r\n<ul>\r\n \t<li>The IP address of the device used to access the website<\/li>\r\n \t<li>The date and time of registration<\/li>\r\n \t<li>The email address<\/li>\r\n<\/ul>\r\nAs part of the registration process, we obtain your consent to the processing of the data and refer you to this Privacy Policy.\r\n\r\nThe data is not disclosed to third parties for their own purposes. We use rapidmail GmbH as a processor for sending the newsletter. The data is used exclusively to send the newsletter. We use rapidmail to distribute our newsletter, and your data is therefore transmitted to rapidmail GmbH. rapidmail GmbH is prohibited from using your data for any purpose other than sending the newsletter. rapidmail GmbH is not permitted to disclose or sell your data. rapidmail is a certified German newsletter software provider that was carefully selected in accordance with the requirements of the GDPR and the German Federal Data Protection Act (BDSG).\r\n<h3 id=\"2-legal-basis-for-data-processing-1\">2. Legal Basis for Data Processing<\/h3>\r\nWhere the user has given consent, the legal basis for processing data following registration for the newsletter is Article 6(1)(a) GDPR.\r\n<h3 id=\"3-purpose-of-data-processing-1\">3. Purpose of Data Processing<\/h3>\r\nThe user&#8217;s email address is collected in order to deliver the newsletter.\r\n\r\nOther personal data collected during the registration process is used to prevent misuse of the services or of the email address provided.\r\n<h3 id=\"4-storage-period-1\">4. Storage Period<\/h3>\r\nThe data will be erased as soon as it is no longer required for the purpose for which it was collected. The user&#8217;s email address will therefore be stored for as long as the newsletter subscription remains active.\r\n\r\nOther personal data collected during the registration process is generally erased after seven days.\r\n<h3 id=\"5-right-to-object-and-options-for-removal-1\">5. Right to Object and Options for Removal<\/h3>\r\nThe data subject may unsubscribe from the newsletter at any time. Every newsletter contains a link for this purpose.\r\n\r\nUnsubscribing also enables the data subject to withdraw consent to the storage of the personal data collected during the registration process.\r\n\r\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=&#8221;.vc_custom_1666911392809{margin-bottom: 32px !important;}&#8221;][vc_column offset=&#8221;vc_col-md-offset-2 vc_col-md-8&#8243;][vc_column_text css=&#8221;.vc_custom_1784879211906{margin-bottom: 35px !important;}&#8221;]\r\n<h2>V. Registration:<\/h2>\r\n[\/vc_column_text][vc_column_text css=&#8221;&#8221;]\r\n<h3 id=\"1-description-and-scope-of-data-processing-2\">1. Description and Scope of Data Processing<\/h3>\r\nOur website allows users to register by providing personal data. The data is entered in a form, transmitted to us and stored. The data is not disclosed to third parties.\r\n\r\nThe following data is collected during the registration process:\r\n<ul>\r\n \t<li>Name<\/li>\r\n \t<li>Company<\/li>\r\n \t<li>Customer number<\/li>\r\n \t<li>Email address<\/li>\r\n \t<li>Any other information requested in the registration form<\/li>\r\n<\/ul>\r\nThe following data is also stored at the time of registration:\r\n<ul>\r\n \t<li>The user&#8217;s IP address<\/li>\r\n \t<li>The date and time of registration<\/li>\r\n \t<li>The email address<\/li>\r\n<\/ul>\r\nAs part of the registration process, the user&#8217;s consent to the processing of this data is obtained.\r\n<h3 id=\"2-legal-basis-for-data-processing-2\">2. Legal Basis for Data Processing<\/h3>\r\nThe legal bases for processing the data are Article 6(1)(a) and Article 6(1)(b) GDPR.\r\n<h3 id=\"3-purpose-of-data-processing-2\">3. Purpose of Data Processing<\/h3>\r\nUser registration is required in order to provide certain content and services on our website, including:\r\n<ul>\r\n \t<li>Access to price lists<\/li>\r\n<\/ul>\r\n<h3 id=\"4-storage-period-2\">4. Storage Period<\/h3>\r\nThe data will be erased as soon as it is no longer required for the purpose for which it was collected.\r\n\r\nFor data collected during the registration process, this is the case when the registration on our website is cancelled or amended.\r\n<h3 id=\"5-right-to-object-and-options-for-removal-2\">5. Right to Object and Options for Removal<\/h3>\r\nAs a user, you may cancel your registration at any time. You may also have the data stored about you amended at any time.\r\n\r\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=&#8221;.vc_custom_1666911392809{margin-bottom: 32px !important;}&#8221;][vc_column offset=&#8221;vc_col-md-offset-2 vc_col-md-8&#8243;][vc_column_text css=&#8221;.vc_custom_1784879186990{margin-bottom: 35px !important;}&#8221;]\r\n<h2>VI. Contact form and email contact<\/h2>\r\n[\/vc_column_text][vc_column_text css=&#8221;&#8221;]\r\n<h3 id=\"1-description-and-scope-of-data-processing-3\">1. Description and Scope of Data Processing<\/h3>\r\nOur website provides a contact form that can be used to contact us electronically. If a user makes use of this option, the data entered in the form is transmitted to us and stored.\r\n\r\nThe following data is also stored when the message is sent:\r\n<ul>\r\n \t<li>The user&#8217;s IP address<\/li>\r\n \t<li>The date and time of submission<\/li>\r\n \t<li>Name<\/li>\r\n \t<li>Customer number<\/li>\r\n \t<li>Company<\/li>\r\n \t<li>Postal code<\/li>\r\n \t<li>City<\/li>\r\n \t<li>Telephone number<\/li>\r\n \t<li>Email address<\/li>\r\n<\/ul>\r\nAs part of the submission process, we obtain your consent to the processing of the data and refer you to this Privacy Policy.\r\n\r\nAlternatively, you may contact us using the email address provided. In this case, the user&#8217;s personal data transmitted with the email will be stored.\r\n\r\nWe may engage service providers to provide and operate the contact form. These service providers process personal data solely on behalf of and in accordance with the instructions of esz AG. Data processing agreements pursuant to Article 28 GDPR have been concluded with these service providers.\r\n<h3 id=\"2-legal-basis-for-data-processing-3\">2. Legal Basis for Data Processing<\/h3>\r\nWhere the user has given consent, the legal basis for processing the data is Article 6(1)(a) GDPR.\r\n\r\nThe legal basis for processing data transmitted when an email is sent is Article 6(1)(f) GDPR. Where the email correspondence is aimed at entering into a contract, Article 6(1)(b) GDPR provides an additional legal basis for the processing.\r\n<h3 id=\"3-purpose-of-data-processing-3\">3. Purpose of Data Processing<\/h3>\r\nThe personal data entered in the form is processed solely for the purpose of handling the contact request. Where contact is made by email, this purpose also constitutes the necessary legitimate interest in processing the data.\r\n\r\nOther personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our information technology systems.\r\n<h3 id=\"4-storage-period-3\">4. Storage Period<\/h3>\r\nThe data will be erased as soon as it is no longer required for the purpose for which it was collected. In the case of personal data entered in the contact form and personal data sent by email, this is the case when the relevant conversation with the user has ended. The conversation is deemed to have ended when the circumstances indicate that the matter in question has been conclusively resolved.\r\n\r\nAdditional personal data collected during the submission process will be erased after no more than seven days.\r\n<h3 id=\"5-right-to-object-and-options-for-removal-3\">5. Right to Object and Options for Removal<\/h3>\r\nThe user may withdraw consent to the processing of personal data at any time. If the user contacts us by fax, email or telephone, the user may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.\r\n\r\nAll personal data stored in connection with the contact request will then be erased.\r\n\r\n[\/vc_column_text][\/vc_column][\/vc_row][vc_row css=&#8221;.vc_custom_1666911392809{margin-bottom: 32px !important;}&#8221;][vc_column offset=&#8221;vc_col-md-offset-2 vc_col-md-8&#8243;][vc_column_text css=&#8221;.vc_custom_1784879202283{margin-bottom: 35px !important;}&#8221;]\r\n<h2>VII. Rights of the data subject<\/h2>\r\n[\/vc_column_text][vc_column_text css=&#8221;&#8221;]\r\n\r\nIf your personal data is processed, you are a data subject within the meaning of the GDPR and have the following rights in relation to the controller:\r\n<h3 id=\"1-right-of-access\">1. Right of Access<\/h3>\r\nYou may request confirmation from the controller as to whether personal data concerning you is being processed by us.\r\n\r\nWhere such processing takes place, you may request the following information from the controller:\r\n<ul>\r\n \t<li>The purposes for which the personal data is processed<\/li>\r\n \t<li>The categories of personal data concerned<\/li>\r\n \t<li>The recipients or categories of recipient to whom the personal data concerning you has been or will be disclosed<\/li>\r\n \t<li>The envisaged period for which the personal data concerning you will be stored or, if specific information cannot be provided, the criteria used to determine that period<\/li>\r\n \t<li>The existence of a right to rectification or erasure of personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing<\/li>\r\n \t<li>The existence of a right to lodge a complaint with a supervisory authority<\/li>\r\n \t<li>Any available information as to the source of the data where the personal data was not collected from the data subject<\/li>\r\n \t<li>The existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject<\/li>\r\n<\/ul>\r\nYou also have the right to request information as to whether personal data concerning you is transferred to a third country or to an international organisation. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.\r\n<h3 id=\"2-right-to-rectification\">2. Right to Rectification<\/h3>\r\nYou have the right to obtain rectification and\/or completion from the controller where personal data concerning you is inaccurate or incomplete. The controller must rectify the data without undue delay.\r\n<h3 id=\"3-right-to-restriction-of-processing\">3. Right to Restriction of Processing<\/h3>\r\nYou may request restriction of the processing of personal data concerning you where one of the following applies:\r\n<ul>\r\n \t<li>You contest the accuracy of the personal data concerning you, for a period enabling the controller to verify its accuracy<\/li>\r\n \t<li>The processing is unlawful and you oppose the erasure of the personal data and request restriction of its use instead<\/li>\r\n \t<li>The controller no longer needs the personal data for the purposes of the processing, but you require it for the establishment, exercise or defence of legal claims<\/li>\r\n \t<li>You have objected to processing pursuant to Article 21(1) GDPR and it has not yet been determined whether the controller&#8217;s legitimate grounds override your grounds<\/li>\r\n<\/ul>\r\nWhere processing of personal data concerning you has been restricted, that data may, apart from storage, be processed only with your consent, for the establishment, exercise or defence of legal claims, for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or of a Member State.\r\n\r\nIf processing has been restricted under the above conditions, the controller will inform you before the restriction is lifted.\r\n<h3 id=\"4-right-to-erasure\">4. Right to Erasure<\/h3>\r\n<h4 id=\"a-obligation-to-erase\">a) Obligation to Erase<\/h4>\r\nYou may request that the controller erase personal data concerning you without undue delay, and the controller is obliged to erase that data without undue delay where one of the following grounds applies:\r\n<ul>\r\n \t<li>The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed<\/li>\r\n \t<li>You withdraw the consent on which the processing is based pursuant to Article 6(1)(a) or Article 9(2)(a) GDPR, and there is no other legal basis for the processing<\/li>\r\n \t<li>You object to the processing pursuant to Article 21(1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Article 21(2) GDPR<\/li>\r\n \t<li>The personal data concerning you has been unlawfully processed<\/li>\r\n \t<li>The personal data concerning you must be erased in order to comply with a legal obligation under European Union or Member State law to which the controller is subject<\/li>\r\n \t<li>The personal data concerning you was collected in relation to the offer of information society services referred to in Article 8(1) GDPR<\/li>\r\n<\/ul>\r\n<h4 id=\"b-information-to-third-parties\">b) Information to Third Parties<\/h4>\r\nWhere the controller has made personal data concerning you public and is obliged pursuant to Article 17(1) GDPR to erase it, the controller, taking account of the available technology and the cost of implementation, will take reasonable steps, including technical measures, to inform controllers processing the personal data that you, as the data subject, have requested the erasure of any links to, or copies or replications of, that personal data.\r\n<h4 id=\"c-exceptions\">c) Exceptions<\/h4>\r\nThe right to erasure does not apply to the extent that processing is necessary:\r\n<ul>\r\n \t<li>For exercising the right of freedom of expression and information<\/li>\r\n \t<li>For compliance with a legal obligation that requires processing under European Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller<\/li>\r\n \t<li>For reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) GDPR<\/li>\r\n \t<li>For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89(1) GDPR, insofar as the right referred to in subsection (a) is likely to render impossible or seriously impair the achievement of the objectives of that processing<\/li>\r\n \t<li>For the establishment, exercise or defence of legal claims<\/li>\r\n<\/ul>\r\n<h3 id=\"5-right-to-notification\">5. Right to Notification<\/h3>\r\nIf you have exercised your right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate that rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort.\r\n\r\nYou have the right to be informed by the controller about those recipients.\r\n<h3 id=\"6-right-to-data-portability\">6. Right to Data Portability<\/h3>\r\nYou have the right to receive the personal data concerning you that you have provided to the controller in a structured, commonly used and machine-readable format. You also have the right to transmit that data to another controller without hindrance from the controller to which the personal data was provided, where:\r\n<ul>\r\n \t<li>The processing is based on consent pursuant to Article 6(1)(a) GDPR or Article 9(2)(a) GDPR, or on a contract pursuant to Article 6(1)(b) GDPR; and<\/li>\r\n \t<li>The processing is carried out by automated means<\/li>\r\n<\/ul>\r\nIn exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another, where technically feasible. This must not adversely affect the rights and freedoms of others.\r\n\r\nThe right to data portability does not apply to processing that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.\r\n<h3 id=\"7-right-to-object\">7. Right to Object<\/h3>\r\nYou have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is based on Article 6(1)(e) or (f) GDPR, including profiling based on those provisions.\r\n\r\nThe controller will no longer process the personal data concerning you unless the controller demonstrates compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is required for the establishment, exercise or defence of legal claims.\r\n\r\nWhere personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, including profiling to the extent that it is related to such direct marketing.\r\n\r\nIf you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for those purposes.\r\n\r\nIn connection with the use of information society services, and notwithstanding Directive 2002\/58\/EC, you may exercise your right to object by automated means using technical specifications.\r\n<h3 id=\"8-right-to-withdraw-consent\">8. Right to Withdraw Consent<\/h3>\r\nYou have the right to withdraw your consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.\r\n<h3 id=\"9-automated-individual-decision-making-including-profiling\">9. Automated Individual Decision-Making, Including Profiling<\/h3>\r\nYou have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects concerning you or similarly significantly affects you. This does not apply where the decision:\r\n<ol type=\"1\">\r\n \t<li>Is necessary for entering into or performing a contract between you and the controller;<\/li>\r\n \t<li>Is authorised by European Union or Member State law to which the controller is subject and that law lays down suitable measures to safeguard your rights, freedoms and legitimate interests; or<\/li>\r\n \t<li>Is based on your explicit consent.<\/li>\r\n<\/ol>\r\nSuch decisions may not be based on special categories of personal data referred to in Article 9(1) GDPR unless Article 9(2)(a) or (g) GDPR applies and suitable measures to safeguard your rights, freedoms and legitimate interests are in place.\r\n\r\nIn the cases referred to in points 1 and 3 above, the controller will implement suitable measures to safeguard your rights, freedoms and legitimate interests, including at least the right to obtain human intervention on the part of the controller, to express your point of view and to contest the decision.\r\n<h3 id=\"10-social-plugins\">10. Social Plugins<\/h3>\r\nThis website contains links to Facebook, YouTube, X, LinkedIn and Xing. These services are provided by Meta Platforms Ireland Limited (ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland), Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), X Internet Unlimited Company (One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland), LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland) and New Work SE (Baumwall 7, 20459 Hamburg, Germany).\r\n\r\nWhen you visit a page and follow one of these links, your browser establishes a connection to Facebook, YouTube, X, LinkedIn or Xing, as applicable, and content is loaded from the relevant website. As a result, your visit to this website may be tracked by Facebook, YouTube, X, LinkedIn or Xing even if you do not actively use the relevant function. If you have an account with Facebook, YouTube, X, LinkedIn or Xing, you can use such a link to share information with your contacts. We have no influence over the behaviour of external websites or the information they transmit.\r\n\r\nFacebook, YouTube, X, LinkedIn and Xing provide detailed information on their websites about the scope, nature, purpose and further processing of your data. You will also find further information there about your rights and the settings available to protect your privacy.\r\n<ul>\r\n \t<li>Facebook Privacy Policy: <a href=\"https:\/\/www.facebook.com\/privacy\/policy\/\" target=\"_blank\" rel=\"noopener\">https:\/\/www.facebook.com\/privacy\/policy\/<\/a><\/li>\r\n \t<li>Google\/YouTube Privacy Policy: <a href=\"https:\/\/policies.google.com\/privacy\" target=\"_blank\" rel=\"noopener\">https:\/\/policies.google.com\/privacy<\/a><\/li>\r\n \t<li>X Privacy Policy: <a href=\"https:\/\/x.com\/de\/privacy\">https:\/\/x.com\/de\/privacy<\/a><\/li>\r\n \t<li>LinkedIn Privacy Policy: <a href=\"https:\/\/www.linkedin.com\/legal\/privacy-policy\" target=\"_blank\" rel=\"noopener\">https:\/\/www.linkedin.com\/legal\/privacy-policy<\/a><\/li>\r\n \t<li>Xing Privacy Policy: <a href=\"https:\/\/privacy.xing.com\/de\/datenschutzerklaerung\" target=\"_blank\" rel=\"noopener\">https:\/\/privacy.xing.com\/de\/datenschutzerklaerung<\/a><\/li>\r\n<\/ul>\r\n<h3 id=\"11-youtube\">11. YouTube<\/h3>\r\nThis website uses YouTube&#8217;s embedding function to display and play videos from YouTube. The website uses enhanced privacy mode, which, according to the provider, initiates the storage of user information only when a video is played. When playback of an embedded video begins, YouTube sets cookies to collect information about your user behaviour.\r\n\r\nAccording to information provided by YouTube, these cookies are used, among other things, to compile video statistics, improve user-friendliness and prevent misuse.\r\n\r\nIrrespective of whether an embedded video is played, a connection to Google&#8217;s DoubleClick network is established whenever this website is accessed. This may trigger further data processing operations over which we have no control.\r\n<h3 id=\"12-right-to-lodge-a-complaint-with-a-supervisory-authority\">12. Right to Lodge a Complaint with a Supervisory Authority<\/h3>\r\nWithout prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.\r\n\r\nIn the German federal state of Bavaria, the competent supervisory authority is:\r\n\r\nBavarian State Office for Data Protection Supervision\r\n(Bayerisches Landesamt f\u00fcr Datenschutzaufsicht &#8211; BayLDA)\r\nPromenade 18\r\n91522 Ansbach\r\nGermany\r\n\r\nThe supervisory authority with which the complaint has been lodged will inform the complainant of the progress and outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78 GDPR.\r\n\r\n[\/vc_column_text][vc_column_text css=&#8221;.vc_custom_1784879000426{margin-top: 65px !important;}&#8221;]\r\n\r\nNote: This English-language version is a translation of the German Privacy Policy. In the event of any discrepancy between the English and German versions, the German-language version shall prevail.\r\n\r\n[\/vc_column_text][\/vc_column][\/vc_row]<!-- \/wp:post-content --><\/div>","protected":false},"excerpt":{"rendered":"<p>[vc_row bg_position=&#8221;right center&#8221; css=&#8221;.vc_custom_1666910764921{margin-bottom: 120px !important;background-position: center !important;background-repeat: no-repeat !important;background-size: contain !important;}&#8221; el_class=&#8221;hero-section-subpage&#8221; responsive_css=&#8221;margin_top_medium:32px&#8221;][vc_column width=&#8221;1\/2&#8243;][vc_column_text&#8230;<\/p>\n","protected":false},"author":22,"featured_media":0,"parent":0,"menu_order":54,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"class_list":["post-54184","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.esz-ag.de\/en\/wp-json\/wp\/v2\/pages\/54184","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.esz-ag.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.esz-ag.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.esz-ag.de\/en\/wp-json\/wp\/v2\/users\/22"}],"replies":[{"embeddable":true,"href":"https:\/\/www.esz-ag.de\/en\/wp-json\/wp\/v2\/comments?post=54184"}],"version-history":[{"count":7,"href":"https:\/\/www.esz-ag.de\/en\/wp-json\/wp\/v2\/pages\/54184\/revisions"}],"predecessor-version":[{"id":60892,"href":"https:\/\/www.esz-ag.de\/en\/wp-json\/wp\/v2\/pages\/54184\/revisions\/60892"}],"wp:attachment":[{"href":"https:\/\/www.esz-ag.de\/en\/wp-json\/wp\/v2\/media?parent=54184"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}