Privacy Policy

I. Name and contact details of the controller and the data protection officer

1. The controller pursuant to Art. 4 para. 7 of the EU General Data Protection Regulation (GDPR) is … datenschutz[at]i-sg.eu (see our legal notice)

II. General information on the collection, disclosure, and storage duration of personal data

1. We process your personal data in compliance with the provisions of the GDPR, the German Federal Data Protection Act (BDSG), and all other applicable laws.
2. The primary purpose of processing your data is to establish and fulfill a contractual relationship with you. When you contact us by email, via a contact form, or by telephone, the data you provide (your email address, and if applicable your name and telephone number) is stored by us to answer your inquiries. The main legal basis for this is Art. 6 (1) b) GDPR. In addition, your separate consent pursuant to Art. 6 (1) a), 7 GDPR may serve as a legal basis for data processing. We also process your data in order to comply with our legal obligations, particularly in the area of commercial and tax law. This is based on Art. 6 (1) c) GDPR. Where necessary, we further process your data based on Art. 6 (1) f) GDPR to safeguard our legitimate interests or those of third parties.
3. Your personal data will not be transferred to third parties for purposes other than those listed below. We only transfer your personal data to third parties if you have given your explicit consent pursuant to Art. 6 (1) a) GDPR, if the transfer is necessary pursuant to Art. 6 (1) f) GDPR for the establishment, exercise, or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data, if there is a legal obligation to transfer data pursuant to Art. 6 (1) c) GDPR, or if it is legally permissible and necessary pursuant to Art. 6 (1) b) GDPR for processing contractual relationships with you.
4. If we use commissioned service providers for individual functions of our services or if we wish to use your data for advertising purposes, we will inform you in detail about the respective processes below. We will also specify the criteria for the storage period.
5. We delete your personal data as soon as it is no longer required for the following purposes. After termination of the contractual relationship, your personal data will be stored for as long as we are legally obligated to do so. This typically arises from statutory documentation and retention obligations, which are governed, among other things, by the German Commercial Code and the German Fiscal Code. The retention periods are up to ten years. It may also occur that personal data is retained for the period during which claims may be made against us (statutory limitation period of three or up to thirty years).

III. Collection of personal data on our website

1. Visiting our website
   1. When you use our website purely for informational purposes, meaning you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the data that is technically necessary for us to display our website to you and to ensure stability and security. These data are also stored in our system’s log files. These data are not stored together with other personal data of the user. These include the IP address, date and time of the request, time-zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, the amount of data transmitted, website from which the request originated, browser, operating system and its interface, as well as the language and version of the browser software.
   2. The legal basis for the temporary storage of the data and log files is Art. 6 (1) lit. f) GDPR.
   3. Temporary storage of the IP address by the system is necessary to enable the website to be delivered to your browser. For this, your IP address must remain stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. Additionally, the data help us optimize the website and ensure the security of our IT systems. These purposes also constitute our legitimate interest in data processing under Art. 6 (1) lit. f) GDPR. No evaluation of the data for marketing purposes takes place in this context.
   4. The data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. In the case of data collected to provide the website, this is when the respective session ends. Log files are deleted within 7 days after the website is accessed.
   5. The collection of data when visiting the website and the storage of data in log files is absolutely necessary for the operation of the website. Therefore, there is no option for you to object.
2. Use of cookies
   1. When you use our website, cookies are stored on your computer system. Cookies are text files that are stored in or by your Internet browser on your computer system. When you access a website, a cookie may be stored on your operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.
   2. This website uses the following types of cookies, whose scope and functionality are explained below:
      1. Transient cookies (temporary use)
      2. Persistent cookies (time-limited use)
      3. Third-party cookies (from third-party providers according to separate information)
   3. Transient cookies are automatically deleted when you close your browser. These include session cookies in particular. These store a so-called session ID, which assigns various requests from your browser to a common session. This allows your computer to be recognized when you return to our website. Session cookies are deleted when you log out or close your browser. The legal basis for processing personal data using transient cookies is Art. 6 (1) lit. f) GDPR. The purpose of these cookies is to simplify the use of websites for you. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. These purposes also constitute our legitimate interest in processing personal data under Art. 6 (1) lit. f) GDPR.
   4. Persistent cookies are used exclusively in connection with the web analytics services we employ and only for as long as required by the purpose; they have a maximum lifespan of two years. You may delete cookies at any time in your browser’s security settings. In this case, some functions and usability of the website may be limited. The legal basis for processing personal data using persistent cookies is Art. 6 (1) lit. f) GDPR. The use of analytics cookies aims to improve the quality of our website and its content. Analytics cookies allow us to see how the website is used and thus continually optimize our offering. These purposes also constitute our legitimate interest under Art. 6 (1) lit. f) GDPR.
   5. Cookies that are not technically necessary for providing our service are only set with your consent, which you may withdraw at any time. By continuing to use the website with corresponding browser settings, you agree to the use of cookies within the scope of this privacy policy. You may give consent through your browser settings, for example by specifying that you are informed about the setting of cookies and that cookies are only accepted after your explicit confirmation. You may also specify that cookies are accepted only in certain cases or generally. You may configure your browser settings according to your wishes, such as blocking third-party cookies or all cookies. However, please note that in such cases you may not be able to use all features of this website. The legal basis for processing personal data using cookies for analytics purposes is Art. 6 (1) lit. a) GDPR, provided the user has given consent.
3. Additional functions and services on our website
   1. In addition to pure informational use of our website, we offer various services that you may use if interested. To do so, you generally need to provide additional personal data that we use to provide the respective service, and for which the aforementioned principles of data processing apply.
   2. In some cases, we use external service providers to process your data. These providers are carefully selected and commissioned by us, are bound to our instructions, and are regularly monitored.
   3. We may also transfer your personal data to third parties if promotions, competitions, contract conclusions, or similar services are offered jointly with partners. You will receive detailed information when providing your data or within the description of the offer below.
   4. If our service providers or partners are located in a country outside the European Economic Area (EEA), we will inform you about the implications of this in the description of the respective offer.
4. Use of Google Analytics
   1. This website uses Google Analytics, a web analytics service provided by Google Ireland Limited (“Google”). Google Analytics uses “cookies,” text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will first be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and Internet usage to the website operator.
   2. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
   3. You may prevent the storage of cookies through the appropriate settings in your browser software; however, please note that in this case you may not be able to fully use all features of this website. You may also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at: http://tools.google.com/dlpage/gaoptout?hl=de.
   4. This website uses Google Analytics with the “_anonymizeIp()” extension. This ensures that IP addresses are processed in a shortened form, preventing them from being linked to a person. If data collected about you could be linked to a person, such personal reference is immediately excluded and the data deleted.
   5. We use Google Analytics to analyze and regularly improve the use of our website. The statistics gained help us improve our offering and make it more interesting for you as a user. For exceptional cases in which personal data is transferred to the USA, Google is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. The legal basis for using Google Analytics is Art. 6 (1) lit. f) GDPR.
   6. Third-party provider information: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Terms of use: http://www.google.com/analytics/terms/de.html, privacy overview: http://www.google.com/intl/de/analytics/learn/privacy.html, privacy policy: http://www.google.de/intl/de/policies/privacy.
5. Integration of Google Fonts
   1. We use Google Fonts on our website. We use this service in the interest of a uniform and appealing presentation of our website. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly. If your browser does not support web fonts, a default font from your computer will be used. The legal basis for using Google Fonts is Art. 6 (1) lit. f) GDPR.
   2. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. The data listed under III. 1. of this statement are also transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data are directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data as user profiles and uses them for advertising, market research, and/or demand-oriented website design purposes. Such analysis is performed in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google.
   3. Further information on the purpose and scope of data collection and its processing by this provider can be found in the provider’s privacy policies. There you can also find more information about your rights and settings to protect your privacy: http://www.google.de/intl/de/policies/privacy. Google also processes your personal data in the USA and is certified under the EU-US Privacy Shield: https://www.privacyshield.gov/EU-US-Framework. Opt-out: https://adssettings.google.com/authenticated
6. Data security

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

IV. Collection of personal data when contacting us by email, post, or telephone

1. Collection of personal data from customers, prospective clients, and suppliers
   1. We collect your personal data as a customer, prospective client, or supplier only if you voluntarily provide it to us by email, post, or telephone. In this case, we record the information that arises within the context of the contact. This includes, in particular, names and transmitted contact details, as well as the date and reason for the contact. The personal data you provide will be used solely for the purpose of providing you with the requested products or services (legal basis Art. 6 (1) b) GDPR), or for other purposes for which you have given your consent (legal basis Art. 6 (1) a) GDPR) and which are described in this privacy policy. You may revoke your consent to the processing of personal data at any time.
   2. You are not required to provide the aforementioned personal data. The data provided may be necessary for concluding a contract. Without providing the data, communication, contract conclusion, or contract execution may not be possible.
   3. Disclosure of the data relevant in each individual case occurs based on statutory provisions or a contractual agreement to public bodies where overriding legal provisions exist, to external service providers or other contractors, and to other external parties if you have given your consent or if disclosure is permissible due to overriding interests. There is no intention to transfer your data to a recipient in a third country (not a member state of the EU/EEA) or to an international organization.
   4. The data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. For the personal data provided, this is the case when the respective conversation with you has ended. A conversation is deemed to have ended when it can be inferred from the circumstances that the relevant matter has been conclusively clarified. If the provided data are subject to statutory tax and commercial retention obligations, they will be stored for the duration of the retention period of ten years and then deleted, unless you have consented to longer storage or further processing of the data is necessary for the establishment, exercise, or defense of legal claims. The legal basis for processing personal data for the purpose of fulfilling statutory archiving and retention obligations is Art. 6 (1) lit. c) GDPR.
2. Collection of personal data from applicants
   1. We collect your personal data as an applicant only if you voluntarily provide it to us by email, post, or telephone. This applies both to applications for advertised positions and unsolicited applications. In doing so, we record the information provided during the application process. This includes, in particular, name, date of birth, contact details, interests, qualification data, as well as educational and professional background. The personal data you provide will be used solely for the purpose of carrying out the application process (legal basis Art. 6 (1) lit. a), b), and f) GDPR, § 26 BDSG).
   2. You are not required to provide the aforementioned personal data. The data provided may be necessary for a future contract conclusion after completion of the application process. Without providing the data, communication, conducting the application process, or concluding a contract may not be possible.
   3. Disclosure of the data relevant in each individual case occurs based on statutory provisions or a contractual agreement. Data may be transferred to employees of the HR department, management, and the respective department head. Personal data will not be transferred to third parties. There is no intention to transfer your data to a recipient in a third country (not a member state of the EU/EEA) or to an international organization.
   4. The data are deleted as soon as they are no longer necessary for achieving the purpose of their collection. Therefore, after the application process has been completed, we store your data for six months following the notification of a rejection. If you have consented to longer storage, the retention period is two years. After that, we will either delete your data or request your consent again. You may revoke your consent to the processing of personal data at any time.

V. Objection or withdrawal of consent regarding the processing of your data

1. If you have given consent for the processing of your data, you may withdraw this consent at any time. Such a withdrawal affects the lawfulness of the processing of your personal data after you have communicated it to us.
2. If we base the processing of your personal data on a balancing of interests, you may object to the processing. This applies in particular when the processing is not required for the performance of a contract with you, as explained in the descriptions of the respective functions below. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have been doing. In the event of a justified objection, we will examine the situation and either cease or adjust the data processing, or demonstrate our compelling legitimate grounds on the basis of which we will continue the processing.
3. You may, of course, object to the processing of your personal data for advertising and data analysis purposes at any time. You may inform us of your objection to advertising at any time.

VI. Your rights

1. In accordance with Art. 15 GDPR, you have the right to request information about the personal data we process concerning you. In particular, you may request information about the purposes of processing, the category of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right to lodge a complaint, the source of your data if they were not collected by us, and the existence of automated decision-making including profiling, and, where applicable, meaningful information about its details.
2. In accordance with Art. 16 GDPR, you may request the immediate rectification of inaccurate personal data stored by us or the completion of your personal data. In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless processing is necessary for exercising the right to freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for establishing, exercising, or defending legal claims.
3. In accordance with Art. 18 GDPR, you have the right to request the restriction of processing of your personal data if you contest the accuracy of the data, if the processing is unlawful but you oppose its erasure, if we no longer need the data but you require them to establish, exercise, or defend legal claims, or if you have objected to processing pursuant to Art. 21 GDPR.
4. You have the right, in accordance with Art. 20 GDPR, to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer of such data to another controller.
5. In accordance with Art. 7 (3) GDPR, you have the right to withdraw your previously granted consent at any time. As a result, we may no longer continue the data processing based on this consent in the future.
6. You also have the right, in accordance with Art. 77 GDPR, to lodge a complaint with a supervisory authority about our processing of your personal data, for example with the responsible Berlin Commissioner for Data Protection and Freedom of Information, Friedrichstraße 219, 10969 Berlin, Phone: 030 / 138 89-0, Email: mailbox[at]datenschutz-berlin.de.

VII. Updates and changes to this privacy policy

1. This privacy policy is currently valid and was last updated in August 2025.
2. Due to the further development of our website and the services offered on it, or as a result of amended legal or regulatory requirements, it may become necessary to modify this privacy policy. The latest version of the privacy policy can be accessed and printed at any time on the website at Link.