Privacy Policy

1. Introduction

With the following information, we would like to provide you, as a “data subject,” with an overview of how we process your personal data and of your rights under data protection laws. In general, you can use our website without entering personal data. However, if you wish to use special services offered by our company through our website, it may become necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain your consent.

Personal data, such as your name, address, or email address, is always processed in accordance with the General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to “Reiner Braun Consulting.” The purpose of this Privacy Policy is to inform you about the scope and purpose of the personal data we collect, use, and process.

As the controller responsible for processing, we have implemented numerous technical and organizational measures to ensure the most complete protection possible for personal data processed through this website. Nevertheless, internet-based data transmissions can, in principle, have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us by alternative means, for example by telephone or by mail.
 

2. Controller

The controller within the meaning of the GDPR is:

iPoint-systems GmbH
Managing Directors: Peter Schmidt (CEO), Daniel Halstenberg (CFO)
Ludwig-Erhard-Str. 58
72760 Reutlingen
Germany

Tel.: +49 7121/1 44 89 60
Fax: +49 7121/1 44 89 89
Email: info(at)ipoint-systems.de
 

3. Data Protection Officer

We have appointed a Data Protection Officer for our company:

Reiner Braun
RB Consulting
Sommerhofenstraße 70
71067 Sindelfingen
Germany

You may contact us at any time with questions or suggestions regarding data protection at the following email address: datenschutz(at)ipoint-systems.de
 

4. Technology

4.1 SSL/TLS Encryption

This website uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data, or contact requests that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of your browser changes from “http://” to “https://” and by the lock symbol in your browser bar.

We use this technology to protect the data you transmit.
 

4.2 Data Collection When Visiting the Website

When you use our website for informational purposes only, meaning if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server, known as “server log files.” Each time a page is accessed by you or by an automated system, our website collects a range of general data and information. This general data and information is stored in the server log files. The following may be collected:

• browser types and versions used,
• the operating system used by the accessing system,
• the website from which an accessing system reaches our website, known as the referrer,
• the subpages accessed on our website by an accessing system,
• the date and time of access to the website,
• a shortened Internet Protocol address, meaning an anonymized IP address, and
• the internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about you personally. Rather, this information is needed to:

• correctly deliver the content of our website,
• optimize the content of our website and the advertising for it,
• ensure the long-term functionality of our IT systems and the technology of our website, and
• provide law enforcement authorities with the information necessary for prosecution in the event of a cyberattack.

We therefore evaluate this collected data and information statistically and also with the aim of increasing data protection and data security within our company in order to ultimately ensure an optimal level of protection for the personal data we process. The anonymous data from the server log files is stored separately from all personal data provided by a data subject.

The legal basis for this data processing is Art. 6(1) sentence 1 lit. f GDPR. Our legitimate interest follows from the purposes listed above for data collection.
 

5. Cookies

5.1 General Information About Cookies

We use cookies on our website. Cookies are small files that your browser automatically creates and stores on your IT system, such as your laptop, tablet, or smartphone, when you visit our website.

The cookie stores information that is related to the specific device used. However, this does not mean that we directly obtain knowledge of your identity.

The use of cookies helps us make our offering more convenient for you. For example, we use session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our website.

In addition, we also use temporary cookies to optimize user-friendliness. These cookies are stored on your device for a defined period of time. If you return to our website to use our services again, the system automatically recognizes that you have visited us before and remembers the entries and settings you made so that you do not have to enter them again.

We also use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you. These cookies allow us to automatically recognize that you have already visited our website when you return. These cookies are automatically deleted after a defined period of time.
 

5.2 Legal Basis for the Use of Cookies

Data processed by cookies that are necessary for the proper functioning of the website is required to safeguard our legitimate interests and those of third parties pursuant to Art. 6(1) sentence 1 lit. f GDPR.

For all other cookies, you have given your consent through our opt-in cookie banner within the meaning of Art. 6(1) lit. a GDPR.
 

6. Transfers to Third Countries

As part of the use of certain services on our website, personal data may be transferred to recipients in countries outside the European Union or the European Economic Area, in particular to the United States. This applies in particular to services provided by Google, HubSpot, LinkedIn, YouTube, Vidyard, and other integrated third-party providers.

Personal data is transferred to a third country only if the requirements of Art. 44 et seq. GDPR are met. Where an adequacy decision by the European Commission exists for the relevant third country, the transfer is carried out on the basis of that adequacy decision. For transfers to the United States, this may in particular include the EU-U.S. Data Privacy Framework, provided that the relevant recipient is certified accordingly.

Where no adequacy decision exists or the relevant recipient is not certified under an applicable adequacy decision, the transfer is carried out on the basis of appropriate safeguards, in particular on the basis of the EU Standard Contractual Clauses pursuant to Art. 46 GDPR. Where necessary, we additionally assess whether supplementary technical and organizational measures are required to protect your personal data.

Further information on the respective recipients, purposes, and legal bases can be found in the following sections on the individual services.
 

7. Content of Our Website

7.1 Contacting Us / Contact Form

When you contact us, for example by contact form or email, personal data is collected. The data collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the related technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1) lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6(1) lit. b GDPR. Your data will be deleted after your request has been fully processed. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
 

7.2 Applicant Management / Job Board

We collect and process the personal data of applicants for the purpose of carrying out the application process. Processing may also take place electronically. This is particularly the case if an applicant sends us the relevant application documents electronically, for example by email or through a web form on the website. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with statutory provisions. If we do not conclude an employment contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that no other legitimate interests on our part prevent deletion. Another legitimate interest in this context may include, for example, an obligation to provide evidence in proceedings under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz, AGG).

The legal basis for processing your data is Art. 88 GDPR in conjunction with Section 26(1) of the German Federal Data Protection Act (BDSG).
 

8. Our Activities on Social Networks

To communicate with you on social networks and inform you about our services, we maintain our own pages on those networks. If you visit one of our social media pages, we and the provider of the respective social media platform are joint controllers within the meaning of Art. 26 GDPR with respect to the processing operations triggered by your visit that involve personal data.

We are not the original provider of these pages, but merely use them within the scope of the options offered to us by the respective providers.

We therefore point out, as a precaution, that your data may also be processed outside the European Union or the European Economic Area. Such use may therefore involve data protection risks for you, as it may be more difficult to safeguard your rights, for example your rights of access, deletion, objection, etc. Processing on social networks often takes place directly for advertising purposes or to analyze user behavior by the providers, without us being able to influence this. If usage profiles are created by the provider, cookies are frequently used or usage behavior is directly assigned to your own member profile on the social network, if you are logged in.

The described processing operations involving personal data are carried out pursuant to Art. 6(1) lit. f GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in communicating with you in a contemporary manner and informing you about our services. If you are required to give consent to data processing to the respective providers as a user, the legal basis is Art. 6(1) lit. a GDPR in conjunction with Art. 7 GDPR.

Since we do not have access to the providers’ databases, we point out that you are best advised to exercise your rights, such as access, rectification, deletion, etc., directly with the respective provider. Further information on the processing of your data on social networks and on your options for exercising your right to object or revoke consent, known as opt-out, is listed below for each of the social network providers we use.
 

8.1 LinkedIn

The joint controller responsible for data processing in Europe is:

LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland

Privacy Policy:

https://www.linkedin.com/legal/privacy-policy

Opt-out and advertising settings:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
 

8.2 LinkedIn Insight Tag

We use the LinkedIn Insight Tag on our website. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

The LinkedIn Insight Tag enables us to measure, analyze, and optimize our LinkedIn advertising campaigns and to create audiences for advertising purposes. This allows us to determine whether users visit certain pages on our website or take certain actions after clicking on a LinkedIn advertisement.

In particular, the following data may be processed: IP address, device and browser information, referrer URL, timestamp, pages visited, interactions with our website, and cookie and usage identifiers. LinkedIn may link this information to your LinkedIn account if you are logged in to LinkedIn.

Processing takes place exclusively on the basis of your consent pursuant to Art. 6(1) lit. a GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time through our privacy settings.

Where personal data is transferred to third countries, in particular to the United States, in connection with the use of the LinkedIn Insight Tag, this is carried out in accordance with the section “Transfers to Third Countries” in this Privacy Policy.

Further information on data processing by LinkedIn can be found in LinkedIn’s privacy notices. You can also adjust settings for advertising-related data processing in your LinkedIn account or through the opt-out options provided by LinkedIn.
 

8.3 YouTube

The joint controller responsible for data processing in Europe is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Privacy Policy:

https://policies.google.com/privacy

Opt-out and advertising settings:

https://adssettings.google.com/authenticated
 

8.4 XING

The joint controller responsible for data processing in Germany is:

XING AG
Dammtorstraße 29-32
20354 Hamburg
Germany

Privacy Policy:

https://privacy.xing.com/de/datenschutzerklaerung

Data access requests for XING members:

https://www.xing.com/settings/privacy/data/disclosure
 

9. Web Analytics

9.1 Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter “Google.” In this context, pseudonymized usage profiles are created and cookies are used, see the section “Cookies.” The information generated by the cookie about your use of this website, such as:

• browser type/version,
• operating system used,
• referrer URL, meaning the previously visited page,
• host name of the accessing computer, meaning IP address, and
• time of the server request,

is transmitted to a Google server in the United States and stored there. This information is used to evaluate the use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage for the purposes of market research and tailoring the design of these websites. This information may also be transmitted to third parties if required by law or if third parties process this data on behalf of Google. Under no circumstances will your IP address be merged with other data held by Google. IP addresses are anonymized so that identification is not possible, known as IP masking.

You can prevent cookies from being installed by selecting the appropriate settings in your browser software. However, we point out that in this case you may not be able to use all functions of this website in full.

These processing operations take place exclusively if express consent has been given pursuant to Art. 6(1) lit. a GDPR.

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website, including your IP address, and from processing this data by downloading and installing a browser add-on:

https://tools.google.com/dlpage/gaoptout?hl=en

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent Google Analytics from collecting data by clicking the following link: Deactivate Google Analytics. This sets an opt-out cookie that prevents your data from being collected during future visits to this website. The opt-out cookie applies only to this browser and only to our website and is stored on your device. If you delete cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help Center:

https://support.google.com/analytics/answer/6004245?hl=en
 

9.2 Google Analytics Remarketing

We have integrated Google Remarketing services on this website. Google Remarketing is a Google Ads feature that enables a company to display advertisements to internet users who have previously visited the company’s website. The integration of Google Remarketing therefore allows a company to create user-based advertising and consequently display interest-relevant advertisements to the internet user.

The operator of Google Remarketing services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables us to display advertisements through the Google advertising network or on other websites that are tailored to the individual needs and interests of internet users.

Google Remarketing places a cookie on the data subject’s IT system. By placing the cookie, Google can recognize visitors to our website when they subsequently visit websites that are also part of the Google advertising network. Each time a website is accessed on which the Google Remarketing service has been integrated, your internet browser automatically identifies itself to Google. As part of this technical process, Google obtains knowledge of personal data, such as your IP address or browsing behavior, which Google uses, among other things, to display interest-relevant advertising.

The cookie is used to store personal information, such as the websites you visited. Each time you visit our website, personal data, including your IP address, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose the personal data collected through this technical process to third parties.

As described above, you can prevent our website from setting cookies at any time by selecting the appropriate settings in your internet browser and thereby permanently objecting to the setting of cookies. Such a setting in the internet browser you use would also prevent Google from setting a cookie on your IT system. In addition, a cookie already set by Google Analytics can be deleted at any time through your internet browser or other software programs.

You also have the option to object to interest-based advertising by Google. To do this, you must access www.google.de/settings/ads from the internet browser you use and make the desired settings there.

These processing operations take place exclusively if express consent has been given pursuant to Art. 6(1) lit. a GDPR.

Further information and Google’s applicable privacy policy can be accessed at:

https://www.google.com/policies/privacy/
 

9.3 HubSpot

We use HubSpot on this website for our online marketing activities. HubSpot is a software company based in the United States with a subsidiary in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, phone: +353 1 5187500. HubSpot is an integrated software solution that allows us to cover various aspects of our online marketing. These include, among other things: email marketing, such as newsletters and automated emails, for example to provide downloads; social media publishing and reporting; reporting, such as traffic sources, visits, etc.; contact management, such as user segmentation and CRM; landing pages; and contact forms.

Our registration service allows visitors to our website to learn more about our company, download content, and provide their contact information and other demographic information. This information, as well as the content of our website, is stored on servers of our software partner HubSpot. We may use this information to contact visitors to our website and to determine which of our company’s services may be of interest to them. All information we collect is subject to this Privacy Policy. We use all information collected exclusively to optimize our marketing activities.

In addition, to improve the user experience on our website, we use HubSpot’s live chat service “Messages” on some subpages for sending and receiving messages, represented by a round chat icon in the lower right-hand corner of the screen. If you consent and use this function, the following data will be transmitted to HubSpot’s servers:

• content of all chat messages sent and received,
• contextual information, such as the page on which the chat was used, and
• optionally, the user’s email address, if provided by the user through the chat function.

The legal basis for the use of HubSpot services is Art. 6(1) lit. f GDPR, legitimate interest. Our legitimate interest in using this service lies in optimizing our marketing activities and improving the quality of our service on the website.

More information about HubSpot’s privacy policy, HubSpot’s information regarding EU data protection, and the cookies used by HubSpot is available from HubSpot. If you generally do not want HubSpot to collect data, you can prevent cookies from being stored at any time by changing your browser settings accordingly or by using the HubSpot opt-out link.

Where personal data is transferred to third countries, in particular to the United States, in connection with the use of HubSpot, this is carried out in accordance with the section “Transfers to Third Countries” in this Privacy Policy. A transfer takes place in particular on the basis of an adequacy decision where the relevant recipient is certified under it, or on the basis of appropriate safeguards within the meaning of Art. 44 et seq. GDPR, in particular the EU Standard Contractual Clauses.
 

9.4 Typeform

We use Typeform by TYPEFORM SL, C/Bac de Roda, 163 (Local), 08018 Barcelona, Spain, for our contact form(s). This allows us to provide you with a simple way to contact us.

For this purpose, we share the following personal data with Typeform:

• email address,
• first name,
• last name, and
• telephone number.

Mandatory fields are marked with an asterisk (*).

Typeform is a recipient of your personal data and acts as a processor for us. The processing of the data specified in this section is neither legally nor contractually required. Without your consent and the transmission of your personal data, we cannot provide you with a contact form. However, you have the option to contact us at the email address stated above or below. The data is stored exclusively for the purpose of transmitting inquiries and responding to them. The mandatory information is used to assign and respond to your request.

In addition, Typeform collects the following personal data using cookies: information about your device, such as IP address, device information, operating system, and browser settings. Usage data is also collected, such as the date and time when you used the contact form. Typeform needs this data to display the contact form and ensure its functionality. This corresponds to Typeform’s legitimate interest pursuant to Art. 6(1) lit. f GDPR and serves the performance of a contract pursuant to Art. 6(1) lit. b GDPR. Further information can be found at:

https://help.typeform.com/hc/en-us/articles/360029581691-What-happens-to-my-data

Further information on objection and opt-out options with respect to Typeform can be found at:

https://admin.typeform.com/to/dwk6gt

The legal basis for these processing operations is your consent pursuant to Art. 6(1) lit. a GDPR. You may withdraw your consent to the processing of your personal data at any time. The withdrawal can be made through the specified contact options. Your data will be processed for as long as the corresponding consent exists. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Your data will be deleted after the processing has been completed. Apart from this, it will be deleted after the termination of the agreement between us and Typeform, unless legal requirements make further storage necessary.
 

10. Advertising

10.1 Google Ads, Formerly AdWords

Our website uses functions of Google Ads. We use Google Ads to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google.” For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit.

These processing operations take place exclusively if express consent has been given pursuant to Art. 6(1) lit. a GDPR.

Further data processing only takes place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads you view on the web. If, in this case, you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to create audiences.

You can manage your settings for personalized advertising by Google in “My Ad Center”: https://myadcenter.google.com/

Alternatively, you can obtain information about the setting of cookies and configure settings on the website of the Digital Advertising Alliance at www.aboutads.info. Finally, you can configure your browser so that you are informed when cookies are set and can decide individually whether to accept them or exclude the acceptance of cookies in certain cases or generally. If you do not accept cookies, the functionality of our website may be limited.

Further information and Google’s privacy policy regarding advertising can be found at:

www.google.com/policies/technologies/ads/
 

10.2 Google AdSense

We have integrated Google AdSense on this website. Google AdSense is an online service that enables the placement of advertising on third-party websites. Google AdSense is based on an algorithm that selects the advertisements displayed on third-party websites according to the content of the respective third-party website. Google AdSense permits interest-based targeting of internet users, which is implemented by generating individual user profiles.

The operator of the Google AdSense component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of the Google AdSense component is to integrate advertisements on our website. Google AdSense places a cookie on your IT system. The placement of this cookie enables Alphabet Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, to analyze the use of our website. Each time an individual page of this website, which is operated by us and on which a Google AdSense component is integrated, is accessed, the respective Google AdSense component automatically causes the browser on your IT system to transmit data to Alphabet Inc. for purposes of online advertising and commission settlement. As part of this technical process, Alphabet Inc. obtains knowledge of personal data, such as your IP address, which Alphabet Inc. uses, among other things, to trace the origin of visitors and clicks and subsequently enable commission settlement.

You can prevent our website from setting cookies at any time by selecting the appropriate settings in your internet browser and thereby permanently objecting to the setting of cookies. Such a setting in the internet browser you use would also prevent Alphabet Inc. from setting a cookie on your IT system. In addition, a cookie already set by Alphabet Inc. can be deleted at any time through the internet browser or other software programs.

Google AdSense also uses tracking pixels. A tracking pixel is a miniature graphic embedded in websites to enable log file recording and log file analysis, allowing statistical evaluation. Based on the embedded tracking pixel, Alphabet Inc. can recognize whether and when a website was opened by your IT system and which links you clicked. Tracking pixels are used, among other things, to analyze the flow of visitors to a website.

Through Google AdSense, personal data and information, including the IP address, which is necessary for the collection and billing of the advertisements displayed, is transmitted to Alphabet Inc. in the United States of America. This personal data is stored and processed in the United States of America. Alphabet Inc. may disclose the personal data collected through this technical process to third parties.

Google AdSense is explained in more detail at the following link:

www.google.de/intl/de/adsense/start/

These processing operations take place exclusively if express consent has been given pursuant to Art. 6(1) lit. a GDPR.
 

10.3 Google Ads With Conversion Tracking

We have integrated Google Ads on this website. Google Ads is an internet advertising service that allows advertisers to place advertisements both in Google search engine results and in the Google advertising network. Google Ads allows advertisers to define specific keywords in advance so that an advertisement is displayed in Google’s search engine results only when the user retrieves a keyword-relevant search result through the search engine. In the Google advertising network, advertisements are distributed on topic-relevant websites using an automated algorithm and taking into account the previously defined keywords.

The operator of Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Ads is to promote our website by displaying interest-relevant advertising on third-party websites and in the search engine results of the Google search engine, as well as by displaying third-party advertising on our website.

If you access our website via a Google advertisement, Google places a so-called conversion cookie on your IT system. A conversion cookie expires after thirty days and is not used to identify you. If the cookie has not yet expired, the conversion cookie is used to track whether certain subpages, such as the shopping cart of an online shop system, have been accessed on our website. Through the conversion cookie, both we and Google can determine whether a user who arrived at our website via an Ads advertisement generated revenue, meaning whether the user completed or canceled a purchase.

The data and information collected through the use of the conversion cookie is used by Google to create visitor statistics for our website. We use these visitor statistics to determine the total number of users referred to us through Ads advertisements, in order to determine the success or failure of the respective Ads advertisement and to optimize our Ads advertisements for the future. Neither our company nor other Google Ads advertisers receive information from Google that could identify you.

The conversion cookie is used to store personal information, such as the websites you visited. Each time you visit our website, personal data, including the IP address of the internet connection you use, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may disclose the personal data collected through this technical process to third parties.

You can prevent our website from setting cookies at any time by selecting the appropriate settings in your internet browser and thereby permanently objecting to the setting of cookies. Such a setting in the internet browser you use would also prevent Google from setting a conversion cookie on your IT system. In addition, a cookie already set by Google Ads can be deleted at any time through the internet browser or other software programs.

You also have the option to object to interest-based advertising by Google. To do this, you must access www.google.de/settings/ads from the internet browser you use and make the desired settings there.

These processing operations take place exclusively if express consent has been given pursuant to Art. 6(1) lit. a GDPR.

Further information and Google’s applicable privacy policy can be accessed at:

https://policies.google.com/privacy?hl=en&gl=en
 

11. Plugins and Other Services

11.1 Google Maps

We use Google Maps (API) on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is a web service for displaying interactive maps in order to visually present geographic information. By using this service, for example, our location can be displayed to you and it may be easier for you to find directions to us.

When you access subpages into which a Google Maps map is integrated, information about your use of our website, such as your IP address, is transmitted to Google servers in the United States and stored there. This takes place regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want your data to be associated with your Google profile, you must log out of your Google user account. Google stores your data, even for users who are not logged in, as usage profiles and evaluates them. You have the right to object to the creation of these usage profiles, and you must contact Google to exercise this right.

If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, you also have the option of completely disabling the Google Maps web service by disabling JavaScript in your browser. Google Maps and, therefore, the map display on this website can then no longer be used.

These processing operations take place exclusively if express consent has been given pursuant to Art. 6(1) lit. a GDPR.

Google’s terms of use can be accessed at:

https://policies.google.com/terms?hl=en

The additional terms of use for Google Maps can be accessed at:

https://www.google.com/intl/en_US/help/terms_maps/
 

11.2 Google reCAPTCHA

We also use the reCAPTCHA function on this website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google.” This function is primarily used to distinguish whether an input is made by a natural person or is misused through machine and automated processing. The service also includes the transmission of the IP address and, where applicable, other data required by Google for the reCAPTCHA service to Google.

These processing operations take place exclusively if express consent has been given pursuant to Art. 6(1) lit. a GDPR.

Further information on Google reCAPTCHA and Google’s privacy policy can be accessed at:

https://policies.google.com/terms?hl=en
 

11.3 Google Tag Manager

We use Google Tag Manager on our website, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is used for the technical management of website tags. Through Google Tag Manager, other services, in particular analytics, marketing, and conversion services, can be centrally integrated and controlled.

According to our knowledge, Google Tag Manager itself does not set cookies for analytics or marketing purposes. However, when Google Tag Manager is loaded, a connection to Google servers may be established. In this process, your IP address, browser and device information, and information about the page accessed may in particular be processed.

Other services are controlled through Google Tag Manager. Services requiring consent, in particular analytics and marketing services, are activated only if you have given the corresponding consent through our consent management tool. By default, Google consent signals for analytics and marketing purposes are set to “denied.”

The legal basis for loading and technically managing website tags is, where required, Art. 6(1) lit. f GDPR. Our legitimate interest lies in the secure, efficient, and centralized management of the services used on our website.

Where services requiring consent are triggered through Google Tag Manager, this is done exclusively on the basis of your consent pursuant to Art. 6(1) lit. a GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time through our privacy settings.

Where personal data is transferred to third countries, in particular to the United States, in connection with the use of Google Tag Manager, this is carried out in accordance with the section “Transfers to Third Countries” in this Privacy Policy.

Further information on Google Tag Manager can be found in Google’s privacy notices: https://policies.google.com/terms?hl=en
 

11.4 Google Fonts

Our website generally uses locally embedded fonts. As a result, when our regular website content is displayed, no connection to Google Fonts servers is generally established.

In individual embedded third-party components, in particular forms or external services, fonts may technically be loaded via Google Fonts. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When Google Fonts is accessed, a connection to Google servers is established. In this process, your IP address, browser and device information, the referrer URL, and information about the page accessed may in particular be processed. The integration serves the uniform and appealing display of text and forms within the respective third-party component.

Where Google Fonts is loaded through third-party components requiring consent, processing takes place exclusively on the basis of your consent pursuant to Art. 6(1) lit. a GDPR in conjunction with Section 25(1) TDDDG. Where, in an individual case, Google Fonts is necessary for the technical display of a service actively accessed or used by you, processing may also be carried out on the basis of Art. 6(1) lit. f GDPR. Our legitimate interest then lies in the technically error-free and uniform display of the respective website function.

We endeavor to embed Google Fonts locally whenever possible or to replace them with locally provided fonts. This applies in particular to embedded forms and third-party components.

Where personal data is transferred to third countries, in particular to the United States, in connection with the use of Google Fonts, this is carried out in accordance with the section “Transfers to Third Countries” in this Privacy Policy.

Further information on Google Web Fonts can be found at:

https://developers.google.com/fonts/faq

and in Google’s privacy policy:

https://www.google.com/policies/privacy/
 

11.5 YouTube Videos

We embed videos from the YouTube service on our website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube is a video service through which video content can be provided and played.

Where possible, we use YouTube videos in enhanced privacy mode via the youtube-nocookie.com domain. In addition, we use technical safeguards to ensure that embedded YouTube videos are generally loaded only after you have given your consent. Before you give your consent, a notice or consent overlay is displayed instead of the video. Only after you have given your consent is a connection established to YouTube or Google and the video loaded.

When a YouTube video is loaded or played, additional Google or YouTube services may be integrated, particularly for the delivery of the video player, preview images, or other technical resources. This may also result in connections to domains such as youtube.com, youtube-nocookie.com, ytimg.com, or googlevideo.com. In this context, in particular your IP address, browser and device information, referrer URL, information about the page accessed, and information about the playback of the video may be processed.

If you are logged into your YouTube or Google account while visiting our website, Google may associate your use of the embedded video with your account. You can prevent this by logging out of your Google or YouTube account before visiting our website.

The embedding and playback of YouTube videos takes place exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time via our privacy settings.

Where personal data is transferred to third countries, in particular to the United States, in connection with the use of YouTube, this is carried out in accordance with the “International Data Transfers” section of this Privacy Policy.

Further information on data processing by Google and YouTube can be found in Google’s Privacy Policy: https://policies.google.com/privacy
 

11.6 Vidyard

We use the Vidyard video service on individual subpages. The provider is Vidyard, 1 Queen Street North, Kitchener, Ontario, Canada.

Vidyard enables us to embed, provide, and play videos on our website. Where corresponding functions are activated, Vidyard may also be used to analyze video usage, for example to determine whether and for how long a video was viewed.

When Vidyard is used, the following data in particular may be processed: IP address, device and browser information, referrer URL, page accessed, time of access, video interactions, playback duration, and technical identifiers. Vidyard may use cookies or comparable technologies for this purpose, in particular local storage.

Where Vidyard is required solely for the technical provision of a video accessed by you, processing is carried out on the basis of Art. 6(1) lit. f GDPR. Our legitimate interest lies in the user-friendly provision of video content on our website.

Where Vidyard is used for analytics, tracking, or marketing purposes, or where cookies or comparable technologies are used for these purposes, processing takes place exclusively on the basis of your consent pursuant to Art. 6(1) lit. a GDPR in conjunction with Section 25(1) TDDDG. You may withdraw your consent at any time through our privacy settings.

Where personal data is transferred to third countries in connection with the use of Vidyard, this is carried out in accordance with the section “Transfers to Third Countries” in this Privacy Policy.

Further information on data processing by Vidyard can be found in Vidyard’s privacy notices: https://www.vidyard.com/privacy/
 

12. Your Rights as a Data Subject

12.1 Right to Confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.
 

12.2 Right of Access, Art. 15 GDPR

You have the right to obtain from us, at any time and free of charge, information about the personal data stored about you, as well as a copy of this data, in accordance with statutory provisions.
 

12.3 Right to Rectification, Art. 16 GDPR

You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, taking into account the purposes of the processing, you have the right to request completion of incomplete personal data.
 

12.4 Right to Erasure, Art. 17 GDPR

You have the right to request that we delete personal data concerning you without undue delay if one of the legally provided grounds applies and insofar as processing or storage is not required.
 

12.5 Right to Restriction of Processing, Art. 18 GDPR

You have the right to request that we restrict processing if one of the statutory requirements is met.
 

12.6 Right to Data Portability, Art. 20 GDPR

You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, where the personal data was provided to us and where the processing is based on consent pursuant to Art. 6(1) lit. a GDPR or Art. 9(2) lit. a GDPR, or on a contract pursuant to Art. 6(1) lit. b GDPR, and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority assigned to us.

Furthermore, when exercising your right to data portability pursuant to Art. 20(1) GDPR, you have the right to have the personal data transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of other persons.
 

12.7 Right to Object, Art. 21 GDPR

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that is carried out on the basis of Art. 6(1) lit. e, processing in the public interest, or lit. f, processing based on a balancing of interests, GDPR.

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims.

In individual cases, we process personal data for direct marketing purposes. You may object at any time to the processing of personal data for such advertising purposes. This also applies to profiling insofar as it is related to such direct advertising. If you object to processing for direct marketing purposes, we will no longer process the personal data for these purposes.

In addition, on grounds relating to your particular situation, you have the right to object to the processing of personal data concerning you that we process for scientific or historical research purposes or for statistical purposes pursuant to Art. 89(1) GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

In connection with the use of information society services, and notwithstanding Directive 2002/58/EC, you are free to exercise your right to object by automated means using technical specifications.
 

12.8 Withdrawal of Consent Under Data Protection Law

You have the right to withdraw consent to the processing of personal data at any time with effect for the future.
 

12.9 Complaint to a Supervisory Authority

You have the right to lodge a complaint with a data protection supervisory authority regarding our processing of personal data.

Extended Privacy Information for Applicants

Thank you for your application and for your interest in iPoint-systems gmbh.

Pursuant to Art. 13 GDPR, we would like to provide you with information about the use of your data during the application process:

1. Contact details of the controller:

iPoint-systems gmbh  
Ludwig-Erhard-Straße 58  
72760 Reutlingen  
Germany  
jobs(at)ipoint-systems.de  
+49 7121/14489-60
 

2. Contact details of the Data Protection Officer:

Reiner Braun  
RB Consulting  
Sommerhofenstraße 70  
71067 Sindelfingen  
Germany  

datenschutz(at)ipoint-systems.de
 

3. Your data will be processed and stored for the following purposes:

conducting the application process,

making a decision regarding the conclusion of an employment contract.
 

4. The legal basis for the processing is Art. 6(1)(b) GDPR.
 

5. During the application process, the following persons or groups of persons will have access to your data: employees of the Human Resources department, supervisors responsible for the position for which you have applied, and members of the management. Your data will not be transferred to third parties, except to our service providers within the framework of commissioned processing.
 

6. We do not intend to transfer personal data to a third country or to an international organization. If your profile is considered for a position at one of our international subsidiaries, we will inform you separately about the transfer of your data.
 

7. Your data will be stored for the duration of the application process and, after completion of the recruitment process, deleted no later than six months after the process has been completed. If an employment contract is concluded, we will inform you separately about the use of your data during the employment relationship.
 

8. The provision of personal data is not required by law or contract. However, providing personal data is necessary for the conclusion of an employment contract. You are not obligated to provide personal data. Please note, however, that if you do not provide such data, we will not be able to consider you further in the application process.

9. No automated decision-making takes place.
 

10. You have the right to obtain information from the controller about the personal data concerning you, as well as the right to rectification, erasure, or restriction of processing. Where the legal requirements are met, you also have the right to object to the processing. We also inform you of your right to data portability. This means that you have the right to receive the personal data concerning you that you have provided in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us.
 

11. You have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority for data protection is:

The State Commissioner for Data Protection and Freedom of Information  
Baden-Württemberg

Office address:  
Königstraße 10 a  
70173 Stuttgart  
Germany

Postal address:  
Postfach 10 29 32  
70025 Stuttgart  
Germany

Tel.: +49 711/615541-0  
Fax: +49 711/615541-15  
Email: poststelle(at)lfdi.bwl.de

Effective: May 2026