Responsible data controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

MDS Holding GmbH

Kirchhörder Str. 29 44229 Dortmund

Telefon: (+49) 231 9735-0

Fax: (+49) 231 9735-35

Mail: kontakt@mds-holding.de

 

Data Protection Officer

You can reach our data protection officer at:

AGAD Service GmbH

Waldring 43 – 47

44789 Bochum

Telefon: 0234 282 533-20

Mail: datenschutz@agad.de

Rights of the data subject

As a data subject, you have the following rights under the EU General Data Protection Regulation (GDPR):

Right to access (Art. 15 GDPR)

You have the right to request information about what personal data is stored about you, for what purpose it is processed, from whom it was received or to whom it is disclosed, and how long it will be stored.

Right to rectification (Art. 16 GDPR)

You can request the immediate rectification of inaccurate personal data or the completion of incomplete personal data.

Right to erasure (‘right to be forgotten’) (Art. 17 GDPR)

Under certain circumstances, you may request the erasure of your personal data, e.g. if it is no longer necessary for the purposes for which it was collected or if you have withdrawn your consent.

Right to restriction of processing (Art. 18 GDPR)

You have the right to request the restriction of the processing of your personal data, for example if you dispute the accuracy of the data or if the processing is unlawful but you request restriction instead of erasure.

Right to data portability (Art. 20 GDPR)

You can request that the personal data concerning you that you have provided to us be transmitted to you in a structured, commonly used and machine-readable format – or that we transfer this data directly to another controller.

Right to object (Art. 21 GDPR)

You have the right to object to the processing of your personal data at any time, provided that the processing is based on the legitimate interests of our company or on a task that is in the public interest. In the event of a justified objection, we will cease processing unless there are compelling legitimate grounds for the processing.

Withdrawal of consent (Art. 7 GDPR)

If you have given us your consent, you can withdraw it at any time for the future without giving reasons.

Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

Hosting and Server Logfiles

The servers of our website are operated by the provider Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. We have concluded an order processing contract with the provider in accordance with Art. 28 GDPR. The legal basis for the use of external hosting is the fulfillment of a contract with our potential and existing customers in accordance with Art. 6 para. 1 lit. b GDPR and our legitimate interest in the secure and high-performance provision of our website in accordance with Art. 6 para. 1 lit. f GDPR.

Each time our website is accessed, our system’s web server collects information from the end device used. We collect the following data:

• Information about the browser type
• Operating system of the user’s device
• Date and time of access
• The previous website from which the user accessed our websites (referrer)

We only collect IP addresses anonymously, so we do not store any personal data in our log files within the meaning of the GDPR.

Subscription to our newsletter

You have the option of subscribing to our email newsletter, which we use to inform you about our company’s offers.

The legal basis for sending the newsletter is your consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect, for example by using the “unsubscribe” link in each newsletter email or by contacting the data controller.

When you subscribe, we might send you a double opt-in email to verify your email address. In addition to the data entered in the registration form, we process your IP address and the time of registration.

The purpose of data processing is exclusively to send our newsletter.

The data stored in connection with the newsletter will be stored until you unsubscribe from the newsletter. Data that we have stored for other purposes remains unaffected by this.

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular information about goods or services similar to those you have already purchased by email, unless you have objected to this. Data processing is carried out on the basis of our legitimate interest in accordance with Art. 6 (1) lit. f GDPR in conjunction with §7 (3) UWG (German Unfair Competition Act).

Applications

When you apply for a job with us, your personal data will be processed. The legal basis for processing is Art. 6 (1) (b) GDPR in connection with the implementation of pre-contractual measures. If your data is required after the application process has been completed in order to defend against legal claims, processing will be carried out on the basis of our legitimate interest in a duty of proof in accordance with Art. 6 (1) lit. f GDPR, for example in connection with the Equal Treatment Act.

We process the data that you have provided to us in your application and that we need to assess your suitability for the position in question.

The purposes of the processing are to manage your application, assess your suitability for the vacant position, and contact you in connection with your application or possible alternative positions.

We delete your data after six months. If you have agreed to be included in the applicant pool, we will delete it after two years. If your application leads to employment, we will store your data for the duration of your employment with us.

Contact

You can contact us by email, telephone, contact form, or letter, which may involve the processing of personal data. We process your data for the purpose of handling and processing your request. We will not disclose your data to third parties without your consent.

The legal basis for processing is our legitimate interest in the effective processing of your request in accordance with Art. 6 (1) lit. f GDPR.

When you contact us by email, we store your email address and the information contained in the email. If you use the contact form, your IP address will also be pseudonymized in addition to the information provided in the contact form. If you contact us by letter, your sender address and the content of the letter will be stored. If you contact us by telephone, we will collect personal data depending on the individual case.

We store your data until you request us to delete it or until the purpose of processing (the processing of your request) has been fulfilled.

Social media profiles

We maintain online profiles on the following social networks (hereinafter referred to as “social media”) in order to communicate with customers, interested parties, and the public and to draw attention to our services:

• Instagram (Meta Platforms, Inc.)
• Facebook (Meta Platforms, Inc.)
• X (formerly Twitter; X Corp.)
• LinkedIn (LinkedIn Ireland Unlimited Company)
• Xing (New Work SE)

For information on the scope and purpose of data processing, please refer to the applicable privacy policies of the respective networks:

• Instagram: (https://privacycenter.instagram.com/policy)
• Facebook: (https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer)
• X (Twitter): (https://x.com/de/privacy)
• LinkedIn: (https://de.linkedin.com/legal/privacy-policy?)
• Xing: (https://privacy.xing.com/de/datenschutzerklaerung)

Processing is carried out on the basis of Art. 6 (1) lit. f GDPR, as we have a legitimate interest in contemporary public relations work. If consent is required, processing is carried out on the basis of Art. 6 (1) lit. a GDPR.

If you provide additional data (e.g., personal messages) to the services, your consent is generally required. Please note that we have no influence on data processing by social media providers. If you have any questions or wish to exercise your rights as a data subject (e.g., information, deletion), please contact the respective platform operator directly.

You can subscribe to or unsubscribe from our social media profiles at any time. If you do not want social media service providers to collect data about your visit to our profiles, please use the deactivation options (e.g., log out, advertising tracker blocking) in your user account or install appropriate browser add-ons.

Borlabs Cookie

We use the ‘Borlabs Cookie’ service on our website to manage cookie consent preferences of our visitors. The provider is Borlabs GmbH Hamburger Str. 11 22083 Hamburg, Deutschland. Borlabs Cookie is hosted on our own servers so that no data is passed on to third parties.

The legal basis for the use of Borlabs Cookie is the fulfillment of a legal obligation pursuant to Art. 6 para. 1 lit. c GDPR.

The data processed by Borlabs Cookie includes your consent preferences, consent status, and cookie settings, and the service sets cookies in your browser to store these preferences.

The purpose of data processing is to manage user consent for cookies and store user preferences regarding cookie usage.

elfsight

We use the ‘Elfsight’ service on our website to embed interactive widgets and enhance user experience. The provider is Elfsight, LLC (“Elfsight”), 901 N. Pitt Street, Suite 325, Alexandria, VA 22314, United States.

The data processed by Elfsight includes your IP address, device and browser information, usage data such as pages visited and interactions with widgets, and may involve the use of cookies.

The purpose of data processing is to provide and display interactive website widgets and to analyze their usage for improving user experience.

Further information on the privacy policy of elfsight can be found at: https://elfsight.com/privacy-policy/

Information about the cookies used can be found at: https://elfsight.com/privacy-policy/#cookies

You can prevent the processing of your data by clicking on this link: https://elfsight.com/privacy-policy/#your-rights

Google Fonts

We use the ‘Google Fonts’ service on our website to integrate external fonts for improved visual presentation. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Fonts is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Google Fonts includes your IP address, browser and device information, and the time of the request.

The purpose of data processing is the optimized and uniform presentation of fonts on the website.

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.

Further information on the privacy policy of Google Fonts can be found at: https://policies.google.com/privacy

Information about the cookies used can be found at: https://policies.google.com/technologies/cookies

You can prevent the processing of your data by clicking on this link: https://policies.google.com/privacy#infochoices

Google Maps

We use the ‘Google Maps’ service on our website to visually display geographic information and provide directions. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.

The legal basis for the use of Google Maps is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.

The data processed by Google Maps includes your IP address, location data, device information, browser details, usage data, and it may set cookies.

If you are logged into a Google account, Google Maps data can be linked to a user profile.

The purpose of data processing is to display interactive maps and provide location-based services to users.

It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.

Further information on the privacy policy of Google Maps can be found at: https://policies.google.com/privacy#infocollect

jQuery

We use the ‘jQuery’ service on our website to enhance user interface functionality and improve user experience. jQuery is an open source project and is operated by Fastly (475 Brannan Street, Suite 300, San Francisco, CA 94107, USA). It cannot be ruled out that personal data may be transferred to unsafe third countries (USA) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Fastly that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Fastly is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA.

The legal basis for the use of jQuery is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to ensure the proper functioning and user-friendly design of our website.

The data processed by jQuery may include your IP address and device information, as it enables the loading of scripts from external servers.

The purpose of data processing is to enable interactive website features and improve user experience through dynamic content manipulation.

Further information on the privacy policy of jQuery can be found at: https://openjsf.org/privacy

Bootstrap CDN

We use the ‘Bootstrap CDN’ service on our website to deliver Bootstrap libraries and related assets efficiently. The provider is Volentio JSD Limited (“Volentio”), Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB, United Kingdom.

The legal basis for the use of BootstrapCDN is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to ensure the efficient and reliable delivery of website content as well as to improve the loading speed and user experience of our website.

The data processed by Bootstrap CDN includes your IP address, browser type, operating system, and the time and date of your request; Bootstrap CDN may also set cookies to optimize content delivery.

The purpose of data processing is to deliver website assets efficiently and securely by loading Bootstrap libraries from a content delivery network.

Further information on the privacy policy of BootstrapCDN can be found at: https://www.bootstrapcdn.com/privacy-policy/

jsDelivr

We use the ‘jsDelivr’ service on our website to deliver and optimize static assets such as JavaScript libraries and CSS files. The provider is Volentio JSD Limited (“Volentio”), Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB, United Kingdom.

The legal basis for the use of jsDelivr is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to ensure the fast and reliable delivery of website resources and improve the performance and user experience of our website.

The data processed by jsDelivr includes your IP address, browser type, operating system, and request details such as the time and content requested; jsDelivr does not set cookies.

The purpose of data processing is to deliver website assets such as JavaScript libraries efficiently via a content delivery network (CDN).

Further information on the privacy policy of jsDelivr can be found at: https://www.jsdelivr.com/terms/privacy-policy