We only process personal data (hereinafter referred to as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Article 4, Paragraph 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” is considered to be any process carried out with or without the help of automated processes or any series of processes carried out in this context with personal data, such as collecting, recording, organizing, arranging, storing, adapting or changing, reading, querying, using, disclosing by transmission, dissemination or any other form of provision, comparison or linking, restricting, deleting or destroying.

With the following data protection declaration we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of processing either alone or jointly with others. We will also inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data under their own responsibility.

Our data protection declaration is structured as follows:

I. Information about us as controllers
II. Rights of users and those affected
III. Information on data processing

I. Information about us as controllers

The responsible provider of this website in terms of data protection law is:

hs2 engineering GmbH
Boschstr. 8/1
89079 Ulm
Deutschland

Telephone: (0731) 940 2374-00
Telefax: (0731) 940 2374-27
E-Mail: [email protected]

The data protection officer at the provider is:

Dr. Sebastian Kraska 

IITR Datenschutz GmbH
Marienplatz 2
80331 München
Germany

Telephone: +49 89 1891 7360
Email: [email protected]

II. Rights of users and those affected

With regard to the data processing described in more detail below, users and those affected have the right

• for confirmation as to whether data concerning you is being processed, for information about the data processed, for further information about data processing and for copies of the data (see also Article 15 GDPR);
• to correct or complete incorrect or incomplete data (see also Art. 16 GDPR);
• to the immediate deletion of the data concerning you (see also Art. 17 GDPR), or, alternatively, to the extent that further processing is necessary in accordance with Art. 17 Para. 3 GDPR, to restriction of processing in accordance with Art. 18 GDPR;
• to receive the data concerning you and provided by you and to transmit this data to other providers/responsible parties (see also Art. 20 GDPR);
• to complain to the supervisory authority if you are of the opinion that the data concerning you is being processed by the provider in violation of data protection regulations (see also Art. 77 GDPR).

In addition, the provider is obliged to inform all recipients to whom data has been disclosed by the provider of any correction or deletion of data or the restriction of processing that takes place on the basis of Articles 16, 17 Paragraph 1, 18 GDPR teach. However, this obligation does not apply if this notification is impossible or involves disproportionate effort. Without prejudice to this, the user has the right to information about these recipients.

According to Article 21 of the GDPR, users and those affected also have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Article 6 (1) (f) of the GDPR. In particular, an objection to data processing for the purpose of direct advertising is permitted.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any legal retention obligations and no different information is subsequently provided about individual processing procedures.

Contact inquiries/contact options

If you contact us via contact form or email, the data you provide will be used to process your request. Providing the data is necessary to process and answer your request – without it, we cannot answer your request or at best respond to a limited extent.

The legal basis for this processing is Article 6 Paragraph 1 Letter b) GDPR.

Your data will be deleted as long as your request has been answered conclusively and the deletion does not conflict with any legal retention obligations, such as in the event of any subsequent contract processing.

Online job applications / publication of job advertisements

We offer you the opportunity to apply to us via our website. With these digital applications, we collect and process your applicant and application data electronically to process the application process.

The legal basis for this processing is Section 26 Paragraph 1 Sentence 1 BDSG in conjunction with Article 88 Paragraph 1 GDPR.

If an employment contract is concluded after the application process, we will store the data you provided during your application in your personnel file for the purpose of the usual organizational and administrative process – of course, taking into account the further legal obligations.

The legal basis for this processing is also Section 26 Paragraph 1 Sentence 1 BDSG in conjunction with Article 88 Paragraph 1 GDPR.

If an application is rejected, we automatically delete the data transmitted to us two months after the rejection was announced. However, the data will not be deleted if the data requires longer storage of up to four months or until the conclusion of legal proceedings due to legal provisions, for example due to the burden of proof under the AGG.

The legal basis in this case is Article 6 Paragraph 1 Letter f) GDPR and Section 24 Paragraph 1 No. 2 BDSG. Our legitimate interest lies in legal defense and enforcement.

If you expressly consent to a longer storage of your data, for example for your inclusion in an applicant or interested party database, the data will be further processed based on your consent. The legal basis is then Article 6 Paragraph 1 Letter a) GDPR. Of course, you can revoke your consent at any time in accordance with Art. 7 Para. 3 GDPR by notifying us with effect for the future.

Sample data protection declaration from the law firm Weiß & Partner