ArchiveFilmverleihFilmmuseumJobs

Privacy Policy

Website Privacy Policy https://www.progress.film/

I. Introduction and terminology

1. GENERAL

We process personal data in connection with the operation of our website with the URL https://www.progress.film/ (hereinafter referred to as the “website”). We treat this data confidentially and process it in accordance with applicable laws, in particular the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG), and the Telecommunications Digital Services Data Protection Act (TDDDG). With these data protection provisions, we want to inform you about what personal data we collect from you, for what purposes and on what legal basis we use it, and, if applicable, to whom we disclose it. In addition, we will explain what rights you have to protect and enforce your data protection.

2. TERMS

Our privacy policy contains technical terms that are used in the GDPR and the BDSG. To help you understand them better, we would like to explain these terms in simple words in advance:

2.1 Personal data

“Personal data” is any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Information about an identified person can be, for example, their name or email address. However, data is also considered personal if the identity is not immediately apparent but can be determined by combining your own or third-party information to find out who you are. For example, a person can be identified by providing their address or bank details, date of birth or username, IP addresses and/or location data. All information that in any way allows conclusions to be drawn about a person is relevant here

2.2 Processing

Art. 4 No. 2 GDPR defines “processing” as any operation or set of operations performed on personal data. This applies in particular to the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction of personal data.

II. Responsible person and data protection officer

3. RESPONSIBLE PERSON

The entity responsible for data processing is:

Company: PROGRESS Film GmbH ("we") Legal representative: Gunnar Dedio (Managing Director) Address: Gut Passendorf 34, 06124 Halle (Saale), Germany Phone: +49 (0) 341 234 29 138 E-Mail: [email protected]

4. DATA PROTECTION OFFICER

We have appointed an external data protection officer for our company. You can contact him at:

Company: HABEWI GmbH & Co. KG Legal representative: Complementary partner HABEWI Beteiligungs GmbH, represented by Arne Platzbecker (Managing Director)  Address: Palmaille 96, 22767 Hamburg, Germany  Phone: 040/ 46008966  Fax: 040/ 46008977  Email: [email protected]

III. Processing framework

5. PROCESSING FRAMEWOKR: WEBSITE

Within the scope of the website, we process your personal data as detailed in section IV below. We only process data that you actively provide on the website (e.g., by filling out forms) or that you automatically provide when using our services.

Your data will be processed exclusively by us and will not be sold, lent, or passed on to third parties. If we use external service providers to process your personal data, this is done within the framework of so-called order processing, in which we, as the client, are authorized to issue instructions to our contractors. We use external service providers for the hosting of our website. We host our website with the external provider Digital Ocean, LLC (address: 101 6th Ave New York, NY 10013, USA) at the data center location in Frankfurt, Germany. If additional external service providers are used for individual processing operations listed in Section IV, they will be named there.

We do not transfer data to third countries and do not plan to do so. We will provide information about exceptions to this principle in the processing described below. Any data transfer to third countries is then carried out on the basis of the EU-US Data Privacy Framework (https://www.dataprivacyframework.gov/) or the EU Standard Contractual Clauses.

IV. Processing in detail

6. COOKIES AND OTHER TRACKING TECHNOLOGIES
6.1 Description of processing

Our website uses cookies. Cookies are small text files that are stored on the user's device when visiting a website. Cookies contain information that enables the recognition of a device and, if necessary, certain functions of a website. We distinguish between our own cookies and external, so-called third-party cookies. Our website uses so-called “session cookies” and “persistent cookies.” “Session cookies” are automatically deleted when you end your Internet session and close your browser. Persistent cookies remain stored on your device for a longer period of time. In addition to cookies, we also use other tracking technologies, such as pixels or fingerprinting. If cookies are technically necessary for the operation of our site, your consent is not required. All other cookies and tracking technologies that are not technically necessary are only set after you have actively consented to the use of cookies/tracking technologies via our consent tool. To obtain and document consent, we use the “Cookiebot by Usercentrics” service, which is operated by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany. The consent tool stores your selection in a cookie on your device. This means that you do not need to make a new decision when you visit our website again.

You can find out which cookies are used on our website, for what purpose, how long they are stored on your device and what consents you may have already given in the settings of the consent tool, which can be accessed via the widget at the bottom left of the screen.

6.2 Purpose

We use cookies/tracking technologies to make our website more user-friendly and to offer the functions described in section 6.1.

6.3 Legal basis

Processing is necessary with regard to technically necessary cookies and the use of the consent tool to safeguard the overriding legitimate interests of the controller (Art. 6 (1) (f) GDPR in conjunction with § 25 (2) TDDDG). Our legitimate interest lies in the purpose specified in section 6.2. For processing with regard to all other cookies/tracking technologies that are not technically necessary, the legal basis is consent (Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG). Such consent is voluntary.

6.4 Storage period, revocation of consent

Cookies are automatically deleted at the end of a session or when the specified storage period expires. Since cookies are stored on your device, you as the user have full control over the use of cookies. You can deactivate or restrict the transfer of cookies by changing the settings in your Internet browser. Cookies that have already been stored can be deleted. This can also be done automatically. If cookies/tracking technologies are deactivated, deleted, or restricted for our website, it is possible that individual functions of our website cannot be used or can only be used to a limited extent. You can revoke any consent you have given to the use of cookies at any time in the settings of the consent tool, which can be accessed via the widget at the bottom left of the screen, with effect for the future.

6.5 Recipient

When cookies/tracking technologies are used, data may be transmitted to the respective providers of these third-party services. In some circumstances, this may also involve transmission to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and any transmission to third countries in the settings of the consent tool or in the relevant section on the third-party service in these data protection provisions. Where applicable, personal data may be transferred to the service provider of the consent tool “Cookiebot by Usercentrics,” Usercentrics GmbH.

7. CONTACT VIA EMAIL
7.1 Description of processing

When cookies/tracking technologies are used, data may be transmitted to the respective providers of these third-party services. In some circumstances, this may also involve transmission to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and any transmission to third countries in the settings of the consent tool or in the relevant section on the third-party service in these data protection provisions. Where applicable, personal data may be transferred to the service provider of the consent tool “Cookiebot by Usercentrics,” Usercentrics GmbH.

7.2 Purpose

The data transmitted with and in your email will be used exclusively for the purpose of processing and responding to your request.

7.3 Legal basis

Processing is necessary to safeguard the legitimate interests of the controller (Art. 6 (1) (f) GDPR). Our legitimate interest lies in the purpose specified in section 7.2. If the email contact is aimed at concluding or fulfilling a contract, the data processing is carried out for the purpose of fulfilling the contract (Art. 6 (1) (b) GDPR.

7.4 Storage

We will delete the data as soon as it is no longer required for the purpose for which it was collected. This is usually the case when the respective communication with you has ended. Communication is terminated when it can be inferred from the circumstances that your request has been conclusively clarified. If statutory retention periods prevent deletion, deletion will take place immediately after the statutory retention period has expired

8. NEWSLETTER
8.1 Description of processing

We send out a newsletter at irregular intervals. The newsletter provides information about our offers and promotions. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe by filling out and submitting a newsletter registration form on our website.

To subscribe to the newsletter, you only need to provide your email address. All other information (such as your first and last name) is voluntary and is used solely to personalize the emails. We use the double opt-in procedure to process and verify newsletter subscriptions. Registration takes place in several steps. First, you sign up for the newsletter on our website. You will then receive an email from us at the email address you provided. In this email, we ask you to confirm that you have actually signed up for the newsletter and wish to receive it. Confirmation is done by clicking on a confirmation link in the email. Only after successful confirmation will we add you to our newsletter distribution list and send you emails in the future. As part of the double opt-in procedure, we store the date, time, and your IP addresses both during registration and confirmation.

8.2 Purpose

The processing is carried out to offer the newsletter function and to send newsletter emails to subscribers. The collection and storage of date, time, and IP addresses during newsletter registration serves to document consent given and to protect against the misuse of email addresses.

8.3 Legal basis

Processing for our subscriber newsletter is based on consent in accordance with Art. 6 (1) (a) GDPR. You can access the declaration of consent at any time on our website at https://www.progress.film/filmverleih/news. Your consent is voluntary. The collection and storage of date, time, and IP addresses when registering for the newsletter is necessary to safeguard the overriding legitimate interests of the controller (Art. 6 (1) (f) GDPR). Our legitimate interest lies in the purpose specified in section 8.2

8.4 Storage period and withdrawal of consent

If you do not confirm your subscription to our newsletter within 24 hours of receiving the corresponding registration email, your data will be automatically deleted. We will otherwise process your personal data for the duration of your newsletter subscription. You can unsubscribe from our newsletter at any time by revoking your consent. To do so, simply send us a statement (by email to [email protected] or by post to PROGRESS Film GmbH, Gut Passendorf 34, 06124 Halle (Saale), Germany). You can also unsubscribe from the newsletter by clicking on the unsubscribe link in each newsletter email or here https://www.progress.film/filmverleih/news. Once you have withdrawn your consent, you will no longer receive newsletters and your personal data will be removed from our active distribution list.

8.5 Recipients and transfer to third countries

We use the services of the newsletter provider Mailchimp to manage our newsletter distribution list and send emails. This is done within the scope of order processing. Mailchimp is a service provided by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000 Atlanta, GA 30308 USA (hereinafter referred to as “Mailchimp”). When you subscribe to our newsletter, the data provided during the registration process is transferred to Mailchimp and processed on Mailchimp servers in the USA. For more information about data protection at Mailchimp, please refer to the service provider's privacy policy at mailchimp.com/legal/privacy/.

9. SOCIAL NETWORKS
9.1 Description of processing

Our website does not use any social media plugins. The Facebook, Instagram, YouTube, TikTok, and LinkedIn logos displayed on our website are merely linked to our company's corresponding profiles on social networks. No data is transferred to social networks when the logos are integrated. If you click on one of the logos, you will simply be redirected to the external website of the respective social network.

However, our profiles on social networks do involve data processing. If you are logged into the respective social network when visiting such a profile, this information will be assigned to your user account there. If you interact with our profile, e.g., by commenting on, “sharing,” “liking,” or “retweeting” a post, this information will also be stored in your user account. As a rule, we can also view your interactions with our profile.

On the social networks Facebook and Instagram, we have the option of obtaining statistical data on the use of our Facebook page or our Instagram profile via the “Insights” function. These statistics are provided by Facebook or Instagram. The “Insights” function cannot be disabled. We cannot decide to enable or disable this feature. It is available to all Facebook fan page operators and all operators of an Instagram business account, regardless of whether you use the Insights feature or not.

Facebook-Insights provides us with the following data in anonymized form for a selectable period of time with regard to fans, subscribers, people reached and people interacting: Total number of page views, likes including origin, page activity, post interactions, reach, post reach (broken down into organic, viral, and paid interactions), comments, shared content, responses, and demographic evaluations, i.e., country of origin, gender, and age. With the Insights-statistics, we are unable to identify subscribers and fans of our page or view their profiles.

Furthermore, Instagram-Insights provides us with anonymized data on the development and reach of our Instagram profile, as well as the posts, stories, and videos we publish there. Instagram-Insights also provides us with statistical information on the location, gender, and age of our Instagram profile subscribers.

The social networks with which you communicate store your data using pseudonyms as user profiles and use them for advertising purposes and market research. This means, for example, that advertisements corresponding to your presumed interests may be displayed to you within the social network and on other third-party websites. Cookies are generally used for this purpose, which the social network stores on your device. You have the right to object to the creation of these user profiles, which you must exercise by contacting the social networks directly.

9.2 Purpose

We maintain profiles on the aforementioned social networks for the purposes of public relations and corporate communication with customers and interested parties. We use the “Insights” feature on Facebook and Instagram to evaluate the reach of our posts on social networks and make them more appealing to our visitors in the future.

9.3 Legal basis

The legal basis for data processing within the scope of our profiles on social networks is the protection of our overriding legitimate interests (Art. 6 (1) (f) GDPR). Our legitimate interest lies in the purpose specified in section 9.2. If you are asked for consent by the respective operator of a social network, the legal basis is Art. 6 (1) (a) GDPR.Data processing with regard to our presence on Facebook, Instagram and LinkedIn is otherwise based on joint responsibility in accordance with Art. 26 GDPR.

9.4 Recipients and transfer to third countries

The respective social networks are operated by the companies listed below. Further information on data protection with regard to our profile on social networks can be found in the linked privacy policies.

Social networks also process your personal data in the United States.

10. FRONT REPLACEMENT

When displaying our website, the standard fonts on your device are replaced by fonts. This is done to make the text on our website more readable and aesthetically appealing. We have opted for a privacy-friendly solution for font replacement. We do not integrate any external services, such as Google Fonts or Adobe Fonts. Instead, we store the fonts to be replaced locally on our server. This has the advantage that when you visit our site, your browser does not send any requests to external font replacement services and therefore no data, in particular your IP address in connection with the address of our website, is transmitted to third parties.

11. YOUTUBE
11.1 Description of processing

Our website uses services from YouTube, a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter referred to as YouTube). YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as so-called iFrames, so that they can be played directly on our website. The videos are embedded in the “extended data protection mode” offered by YouTube, i.e. no personal data about you is transferred to Google as long as you do not play the videos. Only when you play a video is data transferred to Google, over which we have no influence. If you play an embedded video on a subpage of our website, Google will be notified which subpage you visited and which video you watched. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google will assign this information to your user account. Google stores your data as usage profiles and uses it for advertising purposes, market research, and/or to tailor the Google websites to your needs. You have the right to object to the creation of these user profiles, which you must exercise directly with Google. Further information on data protection at Google can be found at www.google.com/intl/de-DE/policies/privacy/.

11.2 Purpose

Processing is carried out in order to display videos on our website.

11.3 Legal basis

Processing is based on consent in accordance with Art. 6 (1) (a) GDPR. We obtain this consent via the consent tool “Cookiebot by Usercentrics” (see section 6.1) or as part of a content blocker at the point on our website where a YouTube video is to be displayed. Such consent is voluntary.

11.4 Withdrawal of consent

You can revoke your consent to display YouTube videos on our website at any time in the settings of the consent tool, which can be accessed via the widget at the bottom left of the screen, with effect for the future.

11.5 Recipients and transfer to third countries

Through the integration of YouTube, personal data may be transmitted to YouTube LLC or Google. Google also processes your personal data in the USA.

12. META PIXEL
12.1 Description of processing

Our website uses the remarketing service “Meta Pixel” (formerly “Facebook Pixel”), which is operated by Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA, or Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”). Meta Pixel enables us to place advertisements on the social networks Facebook and Instagram that are specifically targeted at Facebook/Instagram users who have shown an interest in our offering, e.g., by previously visiting our website. With the help of the “Meta Pixel,” we can also track and evaluate the effectiveness and reach of our advertising on Facebook/Instagram by recording whether Facebook/Instagram users interact with our advertisements on the two social networks by clicking on the advertisements and being redirected to our website. When you visit our website, a connection to the Meta servers is therefore established and the “Meta Pixel” is embedded in our website. In addition, Meta may store a cookie (see section 6 above) on your device. If you are logged in to Facebook or Instagram or log in to Facebook or Instagram later, your visit to our website will be associated with your respective user account. The data collected about you via the “Meta Pixel” is anonymous to us. It does not provide us with any information about your identity. However, Meta may be able to link it to your user profile. Data processing by Meta is carried out in accordance with the company's data policy, which can be accessed for Facebook at www.facebook.com/policy.php and for Instagram at privacycen-ter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.

12.2 Purpose

The processing is carried out in order to conduct targeted online advertising for our own offers on Facebook and Instagram and to evaluate their effectiveness and reach.

12.3 Legal basis

Processing is based on consent in accordance with Art. 6 (1) (a) GDPR. We obtain this consent using the consent tool “Cookiebot by Usercentrics” (see section 6.1). Such consent is voluntary.

12.4 Storage period and right to object, revocation of consent

We have explained the storage period and your control and setting options for cookies/tracking pixels in section 6. You can revoke your consent to data collection by the “Meta Pixel” and the use of your data for the display of Facebook ads at any time in the settings of the consent tool with effect for the future. www.facebook.com/settings?tab=ads You can also object to the collection of data by the “Meta Pixel” and the use of your data for the display of Facebook/Instagram advertisements to Meta at any time. You can decide which types of ads are displayed to you on Facebook in the settings of your Facebook account at www.facebook.com/settings?tab=ads. This setting is applied across all devices.

12.5 Recipients and transfer to third countries

By integrating the Meta Pixel, personal data may be transmitted to Meta. Meta also processes your personal data in the USA.

13. CONTENT DELIVERY NETWORK (CDN)
13.1 Description of processing

Our website uses content delivery networks (CDNs). CDNs reduce the loading time of common JavaScript libraries because the files are transferred from fast, local, or underutilized servers belonging to external service providers. Another advantage over storing JavaScript libraries locally on our server is that the files are regularly checked for security and kept up to date by the external service providers. We have integrated JavaScript libraries from external service providers for the implementation of some programming functions on our website. When you visit our website, a connection to the servers of the aforementioned external services is established and the JavaScript library is loaded onto our website. This transmits the website you have visited to the external service providers.

13.2 Purpose

Processing is carried out in order to shorten the loading time of our website and to be able to integrate JavaScript and libraries quickly and securely.

13.3 Legal basis

The processing is necessary to safeguard the legitimate interests of the controller (Art. 6 (1) (f) GDPR). Our legitimate interest lies in the purpose specified in section 13.2.

13.4 Recipients and transfer to third countries

By integrating JavaScript libraries, your data is transmitted to one of the following CDNs: Cloudflare. See section 14.

14. CLOUDFLARE
14.1 Description of processing

Our website uses services provided by the content delivery network (CDN) Cloudflare, which is operated by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA. CDNs reduce website loading times by transferring files from fast, local, or underutilized servers belonging to external service providers. CDNs enable our website to be made available globally via an internationally distributed server landscape in order to reduce access times for visitors. CDNs also perform security functions. Our website is distributed via the external service provider Cloudflare. When you visit our website, it is delivered to you from a server located close to your location. We also use Cloudflare to be prepared for high traffic volumes at the start of a subscription campaign

14.2 Purpose

Processing is carried out in order to reduce the loading time of our website, distribute loads, and implement a digital waiting room.

14.3 Legal basis

The processing is necessary to safeguard the legitimate interests of the controller (Art. 6 (1) (f) GDPR). Our legitimate interest lies in the purpose specified in section 14.2.

14.4 Recipients and transfer to third countries

By using CDNs on our website, your data will be transmitted to the following CDN Cloudflare. Cloudflare is a service provided by Cloudflare, Inc. For more information, please refer to Cloudflare's privacy policy at www.cloudflare.com/security-policy/.

15. USHERU
15.1 Description of processing

Our website uses the “Usheru select” widget, which is operated by Usheru Ltd., based in Ireland (hereinafter referred to as “Usheru”). The widget allows you to purchase movie tickets directly. When using the widget, certain usage data is processed, such as the frequency with which the widget is loaded, the frequency of use by scrolling, and other activities you perform within the widget. This data is collected by Usheru in anonymized form without storing personal data such as your IP address or information about your device. For more information on data protection at Usheru, please visit: https://www.usheru.com/privacy-policy-2/.

15.2 Purpose

Processing by Usheru is carried out to enable you to purchase movie tickets directly on our website and to analyse the use of this service.

15.3 Legal basis

Processing is based on consent in accordance with Art. 6 (1) (a) GDPR. We obtain this consent using the consent tool “Cookiebot by Usercentrics” (see section 7.1). Such consent is voluntary.

15.4 Storage period and revocation of consent

We have explained the storage period and your control and setting options for cookies and similar technologies in section 7. You can revoke your consent to data processing by Usheru at any time with future effect in the settings of the consent tool, which can be accessed via the widget at the bottom left of the screen. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until revocation.

15.5 Recipients and transfer to third countries

When using the Usheru widget, anonymized usage data is transmitted to Usheru Ltd. in Ireland. No data is transferred to third countries.

16. MEDIALABEL
16.1 Description of processing

Our website uses a tracking pixel from medialabel Network GmbH, Unter den Linden 32-34, 10117 Berlin (hereinafter referred to as “MediaLabel”), which enables us to measure the success of our cooperation with influencers. The pixel is activated when you access our website via a special tracking link and then use the “Get your ticket” function on our website via the Usheru widget. When activated, certain parameters such as the influencer ID and a click ID are transmitted to MediaLabel to enable the assignment of successful ticket purchases to specific influencer campaigns. For more information on data protection at MediaLabel, please visit: https://medialabel.com/datenschutz/.

16.2 Purpose

Processing by the MediaLabel pixel serves to measure the success of influencer campaigns in order to track which campaigns lead to ticket purchases.

16.3 Legal basis

Processing is based on consent in accordance with Art. 6 (1) (a) GDPR. We obtain this consent using the consent tool “Cookiebot by Usercentrics” (see section 7.1). Such consent is voluntary.

16.4 Storage period and revocation of consent

We have explained the storage period and your control and setting options for cookies and similar technologies in section 7. You can revoke your consent to data processing by the MediaLabel pixel at any time with future effect in the settings of the consent tool, which can be accessed via the widget at the bottom left of the screen. Revoking your consent does not affect the legality of the processing carried out on the basis of your consent until revocation.

16.5 Recipients and transfer to third countries

When using the MediaLabel pixel, data is transmitted to medialabel Network GmbH in Germany. The data is processed and stored exclusively within the European Union. It is not transferred to third countries.

17. Processing of application data
17.1 Description of processing

We process the data you provide in connection with your application in order to assess your suitability for the position (or other open positions in our company, if applicable) and to carry out the application process. This includes general personal data (such as your name, address, and contact details), information about your professional qualifications and education, information about professional training, knowledge, and skills, as well as other information that you disclose to us in connection with your application. This includes general personal data (such as your name, address, and contact details), information about your professional qualifications and education, information about professional training, knowledge, and skills, as well as other information that you disclose to us in connection with your application. This is usually done through your cover letter, resume, references, correspondence, and information provided by you over the phone or in person.

We would like to evaluate all applicants solely on the basis of their qualifications and therefore ask that you refrain from including any “special categories of personal data” as defined in Article 9 of the General Data Protection Regulation in your application (e.g., a photo that reveals your ethnic origin, information about severe disabilities, etc.). If your application contains such information, we ask you to send us a corresponding declaration of consent, as otherwise your application cannot be considered.

If your application is successful, we will transfer your data to your personnel file and use it to implement and terminate your employment relationship.

If we are unable to offer you employment at this time, we will continue to process your data even after sending you a rejection letter in order to defend ourselves against any legal claims, in particular those relating to alleged discrimination in the application process.

If you are not selected for the vacant position, we will transfer your data to our applicant pool, provided we have your consent to do so.

17.2 Purpose

The processing is carried out for the purpose of conducting the application process, deciding on the establishment of an employment relationship with us, and documenting compliance with legal requirements in the application process.

17.3 Legal basis

The legal basis for data processing in connection with the application process is Section 26 (1) sentence 1 BDSG and Article 6 (1) (b) GDPR. If your application is successful, further data processing will be carried out in accordance with Art. 6 (1) sentence 1 lit. b GDPR in conjunction with Art. 88 (1) GDPR in conjunction with Section 26 (1) BDSG for the purpose of establishing, implementing, and terminating the employment relationship. If you have given your consent, e.g. to include your data in our applicant pool, data processing will be carried out on the basis of Art. 6 (1) (a) GDPR. The legal basis for data processing after a rejection is Art. 6 (1) (f) GDPR. Our legitimate interest lies in defending ourselves against legal claims.

17.4 Storage period

If your application is successful, your data will be transferred to your personnel file and deleted in accordance with the regulations applicable to personnel files. If we are unable to offer you employment at this time, we will continue to process your data for up to six months after sending you a rejection letter. If we add your data to our applicant pool after completing the application process, we will delete it in the event that an employment relationship is established at a later date or, otherwise, two years after adding it to the applicant pool.

17.5 Recipients of your data, disclosure of data to third parties, and transfer to third countries

Your application data will be reviewed by the Human Resources department upon receipt of your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective vacant position. The next steps will then be coordinated. Within the company, only those persons who need your data for the proper execution of our application process have access to it. Your data will not be transferred to third parties. Nor will your data be transferred to third countries, nor are there any plans to do so.

18. PLAUSIBLE.IO
18.1 Description of processing

Our website uses “Plausible Analytics,” a web analytics service provided by Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia (hereinafter referred to as “Plausible”). Plausible Analytics does not use cookies and does not collect any personal data for the purpose of analysing your use of our website. Plausible Analytics collects and stores data on user behaviour on websites. This includes, for example: the number of visitors to the site, how often which pages were visited, interactions such as clicks, scrolling, and hovering, the device type, the operating system, and the browser used by the user. Further information on data protection at Plausible can be found in the privacy policy at: https://plausible.io/data-policy.

18.2 Purpose

Processing is carried out in order to evaluate the use of our website. The information obtained in this way is used to improve and tailor our online presence to your needs.

18.3 Legal basis

The processing is necessary to safeguard the legitimate interests of the controller (Art. 6 (1) (f) GDPR). Our legitimate interest lies in the purpose specified in section 18.2.

18.4 Storage period

The data will be deleted as soon as it is no longer required for the purpose for which it was collected. The processed data will be stored for a maximum period of 30 days. After this period, the data will be automatically deleted.

18.5 Recipient

Plausible acts as a service provider for us in the context of order processing.

19. GOOGLE ANALYTICS
19.1 Description of processing

Our website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google Analytics uses cookies (see section 6) to analyze your use of our website.The information generated by the cookies is usually transferred to a Google server in the USA and stored there. However, we only use Google Analytics with IP anonymization. This means that your IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and truncated there. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. The statistics generated by Google Analytics record, in particular, how many users visit our website, from which country or location the access originates, which subpages are accessed, and via which links or search terms visitors arrive at our website. The Google Analytics terms of use can be found at www.google.com/analytics/terms/de.html. An overview of data protection at Google Analytics is available at www.google.com/intl/de/analytics/learn/privacy.html. Die Datenschutzerklärung von Google lässt sich unter www.google.de/intl/de/policies/privacy einsehen. Google's privacy policy can be viewed at www.google.de/intl/de/policies/privacy.

19.2 Purpose

The processing is carried out in order to evaluate the use of our website. The information obtained in this way is used to improve and tailor our online presence to your needs.

19.3 Legal basis

Processing is based on consent in accordance with Art. 6 (1) (a) GDPR. We obtain this consent using the consent tool (see section 6.1). Such consent is voluntary.

19.4 Storage period and right to object, withdrawal of consent

We have explained the storage period and your control and setting options for cookies in section 6.4. You can revoke your consent to Google Analytics at any time with future effect in the settings of the consent tool, which can be accessed via the widget at the bottom left of the screen. Alternatively, you can object to data processing by Google Analytics at any time by downloading and installing the browser add-on offered by Google at tools.google.com/dlpage/gaoptout?hl=en. The analysis data processed and stored by Google Analytics is automatically deleted by us after 14 months.

19.5 Recipients and transfer to third countries

According to the German data protection supervisory authorities (Data Protection Conference), Google Analytics acts as a joint controller in data processing. Against this background, we have also concluded the “Google Measurement Controller-Controller Data Protection Terms” with Google. Google also processes your personal data in the USA.

V. Safety measures

20. Safety measures

To protect your personal data from unauthorized access, we have equipped our website with an SSL or TLS certificate. SSL stands for “Secure Sockets Layer” and TLS for “Transport Layer Security” and encrypts the communication of data between a website and the user's device. You can recognize active SSL or TLS encryption by a small padlock logo displayed on the far left of the browser's address bar.

VI. Your rights

21. Rights of data subjects

With regard to the data processing described above by our company, you have the following rights as a data subject:

21.1 Information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether we process personal data relating to you. If this is the case, you have the right to obtain information about this personal data and the information specified in Article 15 GDPR under the conditions set out in Article 15 GDPR.

21.2 Correction (Art. 16 GDPR)

You have the right to request that we immediately correct any inaccurate personal data concerning you and, if necessary, complete any incomplete personal data.

21.3 Deletion (Art. 17 GDPR)

You have the right to request that we delete personal data concerning you without delay if one of the reasons specified in Art. 17 GDPR applies, e.g. if your data is no longer required for the purposes we pursue.

21.4 Restriction of data processing (Art. 18 GDPR)

You have the right to request that we restrict processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that allows us to verify the accuracy of your data.

21.5 Data portability (Art. 20 GDPR)

You have the right, under the conditions set out in Art. 20 GDPR, to request the disclosure of data concerning you in a structured, commonly used, and machine-readable format.

21.6 Withdrawal of consent (Art. 7 Abs. 3 GDPR)

You have the right to withdraw your consent at any time in the case of processing based on consent. The withdrawal is effective from the time it is asserted. In other words, it takes effect for the future. The withdrawal of consent does not make the processing retroactively unlawful.

21.7 Complaint (Art. 77 3 GDPR)

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You can exercise this right with a supervisory authority in the EU member state of your residence, your place of work, or the location of the alleged violation.

21.8 Prohibition of automated decisions/profiling (Art. 22 3 GDPR)

Decisions that have legal consequences for you or significantly affect you may not be based solely on automated processing of personal data, including profiling. We would like to inform you that we do not use automated decision-making, including profiling, with regard to your personal data

21.9 Right to object (Art. 21 3 GDPR)

If we process your personal data on the basis of Art. 6 (1) lit. f GDPR (to safeguard overriding legitimate interests), you have the right to object to this under the conditions set out in Art. 21 GDPR. However, this only applies if there are reasons arising from your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. We are also not required to cease processing if it serves to assert, exercise, or defend legal claims. In any case—even independently of a particular situation—you have the right to object at any time to the processing of your personal data for direct marketing purposes.

Status: July 2025

Scroll to top
© 2025, PROGRESS