Privacy Policy

The operator of this site takes the protection of your personal data very seriously. We treat your personal data as confidential and in accordance with the statutory data protection provisions and this privacy policy.
When you use this website, various personal data is collected. Personal data is data which may identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that the transfer of data on the Internet (e.g. when communicating by email) can present security risks. It is impossible to completely protect the data from access by third parties.

The controller for data processing on this website is:

Annette Holzer
CEIS GmbH
Moosacher Straße 82a
80809 Munich

The controller is the natural or legal person who, either alone or jointly with others, determines the purposes and methods of processing the personal data (e.g. names, email addresses, or similar).

If you have any questions about data protection at CEIS GmbH or would like to assert your rights, you can contact us by post, email or telephone using the contact details provided above.

One of the ways in which your data is collected is when you provide it to us. This might include, for example, data that you enter into a contact form. When you visit the website, other data is collected automatically or following your consent by our IT systems. This is primarily technical data (e.g. relating to your Internet browser, operating system, or the time you view the page). This data is collected automatically as soon as you access this website.

If you contact us (e.g. via the contact form or by email), we will process the data you provide in order to respond to your enquiry. This includes in particular: Surname, first name, company name, email address, telephone number. If the contact is made in connection with a cooperation, Article 6(1)(b) GDPR is the legal basis for this. In all other cases, it is in our legitimate interest to respond to your enquiry in full.

Unless a more specific storage period has been specified within this privacy policy, we will store your personal data until the purpose of storing it for data processing no longer applies. Your data will be deleted if you provide a legitimate request for it to be deleted or withdraw your consent to data processing, provided that we have no other legally permissible reasons to store your personal data (e.g. storage periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

If in the course of processing we disclose data to other persons or companies (processors or third parties), transfer it to them or grant them access to the data, this will only be done if it is necessary for the fulfilment of the contract (Article 6(1)(b) GDPR), it is required by law (Article 6(1)(c) GDPR), you have consented to this (Article 6(1)(a) GDPR) or on the basis of our legitimate interests (Article 6(1)(f) GDPR). We make sure that confidentiality obligations or the necessary data protection agreements (e.g. order processing agreement) are always concluded. It is important to us that data processing takes place in Germany or Europe. If in exceptional cases this is not possible and data is transferred to third countries, we check that there is a legal basis and suitable guarantees for this.

You have the right to receive information free of charge and at any time about the origin, recipient, and purpose of your stored personal data. You also have the right to request that this data be corrected or deleted. If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data.
You have the right to have data that we process automatically on the basis of your consent or as part of the performance of a contract handed over to you or to a third party in a common machine-readable format. If you request the data to be transferred directly to another responsible party, this will only be done insofar as it is technically feasible.
Furthermore, you have a right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged violation. The right to lodge a complaint exists without prejudice to any other administrative or judicial remedies.

You can contact us at any time to assert your rights and for further questions on the subject of data protection.

For security reasons and to secure the transmission of confidential information, such as orders or enquiries that you send to us as the site operator, this website uses SSL or TLS encryption. You can recognise an encrypted connection because the address line of the browser changes from http:// to https:// and there is a padlock symbol in your browser bar.
If SSL or TLS encryption is enabled, the data that you transmit to us cannot be read by third parties.

This website is hosted by an external service provider (a host). The personal data collected on this website is stored on the host's servers. This may include, without limitation, IP addresses, contact requests, meta data and communication data, contract data, contact details, names, website accesses, and other data generated via a website.
The host is used for the performance of contracts with our potential and existing customers (Article 6 (1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online site by a professional provider (Article 6 (1)(f) GDPR).
Our host will only process your data to the extent that is necessary to fulfil its service obligations and will follow our instructions regarding this data. We have concluded a data processing agreement (DPA) in accordance with Article 28 GDPR with the above-mentioned provider.

We use the following host:
united-domains AG
Gautinger Straße 10
82319 Starnberg
Germany

The website uses so-called ‘cookies’. Cookies are small text files and do not cause any damage to your end device. Cookies are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your browser.

In some cases, cookies from third-party companies may also be stored on your end device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or display advertising.

Cookies that are necessary to carry out electronic communication (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for the shopping cart function) or to optimise the website (e.g. cookies to measure the web audience) are stored on the basis of Article 6(1)(f) GDPR, unless an alternative legal basis is specified. The website operator has a legitimate interest in storing cookies on your computer to enable it to provide you with a technically flawless and optimised service. When consent to the storage of cookies is requested, their storage is based exclusively on this consent (Article 6(1)(a) GDPR); consent can be withdrawn at any time.

You can also set your browser to inform you about the setting of cookies and to allow cookies only in certain cases, to exclude the acceptance of cookies in specific cases or in general, as well as to enable automatic deleting of cookies when you close your browser. This website’s functionality may be restricted if you disable cookies.

You can adjust your cookie settings at any time by accessing our Consent Manager via the link at the bottom of our homepage.
In our Consent Manager, we inform you about the third-party providers used on our website, as well as their purpose and whether data is transferred to third countries.

We offer you with the opportunity to apply to us (e.g. by email, by post, or via an online application form). Below we inform you of the scope, purpose, and use of your personal data collected during the application process. We ensure that the collection, processing, and use of your data will be carried out in accordance with applicable data protection law and all other statutory provisions, and that your data will be treated confidentially.

When you send us an application, we process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) to the extent that is necessary to decide whether to establish an employment relationship. The legal basis for this is the initiation of an employment relationship (Article 6(1)(b) GDPR and – if you have given your consent – Article 6(1)(a) GDPR. Consent can be withdrawn at any time. Your personal data will only be passed on within our company to persons involved in processing your application.

If the application is successful, the data you submitted will be stored in our data processing systems for the purpose of implementing the employment relationship.

If we are unable to make you a job offer, if you reject a job offer or if you withdraw your application, we reserve the right to store the data you have submitted with us on the basis of our legitimate interests (Article 6 (1)(f) GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). The data will then be deleted and the physical application documents destroyed. In particular, this storage serves as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued storage no longer applies.

There may also be a longer storage period in place if you have given your corresponding consent (Article 6 (1)(a) GDPR) or if legal storage obligations prevent the data from being deleted.

If we do not make you a job offer, it may be possible to include you in our applicant pool. If you are accepted, all documents and information from your application will be transferred to the applicant pool so that we can contact you if there are other suitable vacancies.
Inclusion in the applicant pool occurs exclusively on the basis of your express consent (Article 6 (1)(a) GDPR). Providing consent is voluntary and is not related to the current application process. The data subject can withdraw their consent at any time. In this case, the data from the applicant pool will be irreversibly deleted, unless there are legal reasons for it to be retained.
The data from the applicant pool will be irreversibly deleted no later than two years after consent has been given.

In order to fill our vacancies, we sometimes commission agencies to support us in this task. To achieve this goal, we also conduct recruiting campaigns via our social media channels (Facebook and Instagram).
If you use social media, the respective operator is responsible for the data processing. Please refer to the privacy policy of the respective operator for information on data protection.
If we place adverts on social media or create links and you click on them, your personal data (in particular usage data and contact details) will be stored by us and/or the agency commissioned by us. The legal basis for this is our legitimate interest in filling our vacancies or the initiation of an employment relationship when an application is received. The data is stored until the purpose no longer applies. It is important to us that data is stored in Germany and that the necessary data protection agreements have been concluded. If data storage in Germany is not possible, we ensure that the data protection requirements for data transfer are met.