Privacy notice for Gauss Fusion website

GaussFusion GmbH (hereinafter referred to as “Gauss” or “we”) sets a high value onthe protection of your personal data. Below, we would like to inform you aboutthe processing of your personal data in accordance with Art. 13 GDPR.

A. Controller

Controller responsible forprocessing your personal data is

Gauss Fusion GmbH
Parkring 29
85748 Garching bei München
E-Mail: info@gauss-fusion.com

B. Contact details of our data protection officer

datenschutz süd GmbH
Wörthstraße 15
97082 Würzburg
Tel.: +49 931 30 49 76 – 0
E-Mail: office@datenschutz-sued.de

C. Processing of personal data of website visitors

I. Storage of your IP address

We store the IP address transmitted by your web browser strictly for the purpose of detecting, limiting, and eliminating attacks on our websites for a maximum period of 24 hours. After this period has expired, we delete or anonymize the IP address. The legal basis for data processing is Art. 6 (1) (f) GDPR.

II. Usage data

When you visit our website, so-called usage data is temporarily stored on our web server for statistical purposes in order to improve the quality of our website. This data set consists of

The aforementioned log data is only stored anonymously.

III. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.


When SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

IV. Hosting

We use Webflow Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94130, USA to host our website. We have carefully selected this external service provider and concluded a data processing agreement in accordance with Art. 28 GDPR. With regard to Webflow, an adequate level of data protection is guaranteed on the basis of the adequacy decision (EU-U.S. Data Privacy Framework). Webflow also undertakes to conclude standard contractual clauses with other sub-processors.

V. Consent-Management-platform

We use the consent management platform Cookiebot on our website. We have concluded a contract for order processing in accordance with Art. 28 GDPR with the external service provider Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, which obliges the service provider to process data in accordance with our instructions. The processing of personal data in connection with the use of Cookiebot and the logging of your settings is based on Art. 6 (1) (f) GDPR. Our legitimate interest is to display our content according to your preferences and to be able to prove that you have given your consent. Your settings, the consents you have given, and parts of your usage data are stored in a cookie. This means that it is retained for subsequent page requests and your consents can still be traced.n.

VI. Cookies

We use cookies on our websites. Cookies are small text files that can be stored and read on your device. A distinction is made between session cookies, which are deleted as soon as you close your browser, and permanent cookies, which are stored beyond the individual session. Cookies may contain data that enables the device used to be recognized. In some cases, however, cookies only contain information about certain settings that cannot be traced back to a specific person.

We use necessary permanent cookies to display and operate our website. Processing is based on Art. 6 (1) (f) GDPR, § 25 (2) TDDDG. Our interest lies in enabling the display of our website. You can object to the processing at any time. To do so, please click on the cookie functions. You can set your browser to inform you about the placement of cookies. You can also delete cookies at any time via the corresponding browser setting and prevent new cookies from being set. In this case, our website may not be displayed optimally and some functions may no longer be technically available.

We also use tracking cookies on our website to track your user behavior and then send you targeted advertising. Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR, § 25 (1) TDDDG, if you have previously given your consent to tracking on our cookie banner. We use the following tracking cookies on our website:

Google Fonts/ Google API (local hosting)

To ensure uniform font display, we use web fonts provided by Google LLC on our website. Google fonts are installed on our local servers. There is no connection to Google servers at any time.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy https://policies.google.com/privacy?hl=de.

You can revoke your consent to the use of a tracking cookie at any time with future effect, without this affecting the legality of the previous processing. Please click on the following link.

Matomo

We use the web analysis tool “Matomo” to design our websites in line with user needs. Matomo creates usage profiles based on pseudonyms. For this purpose, permanent cookies are stored on your device and read by us. This enables us to recognize returning visitors and count them as such.

The cookies set are generally deleted after 12 months or after you revoke your consent via the cookie banner under the “Marketing” section or are no longer processed.

VII. Contact

You have the option of contacting us via our web form. To do so, we require your email address and your request/question. The legal basis for the processing of this personal data is Art. 6 (1) (f) GDPR, as we have a legitimate interest in responding to your request as simply, promptly, and customer-oriented as possible. Unfortunately, we cannot process your request without your data. You have the right to object to data processing in accordance with Art. 21 GDPR. However, we will then no longer be able to respond to your request.

Your personal data will be deleted 12 months after the request has been answered. Statutory retention periods remain unaffected. Your telephone number will be deleted as soon as you revoke your consent.

We do not transfer your personal data to third parties.

D. Processing of applicants' personal data

If you are interested in one of our advertised vacancies, please send us your application documents via our applicant portal on the website. We process your application documents, in particular your name, address, email address, telephone number, resume, references, qualifications, and answers to questions, on the legal basis of Art. 6 (1) (b) GDPR (Art. 88 (1) GDPR in conjunction with § 26 BDSG). This information is necessary in order to process your application.

In addition, we collect and process personal data that you provide to us voluntarily. These fields, marked as voluntary or optional, do not have to be filled in. This data is processed on the basis of your consent in accordance with Art. 6 (1) sentence 1 lit. a) GDPR, Art. 7 GDPR, Art. 88 (1) GDPR in conjunction with § 26 (2) BDSG. You can withdraw your consent at any time at HR@gauss-fusion.com.

We will, of course, treat your data confidentially and will not pass it on to third parties.

We use the external service provider Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, to process your application documents in strict accordance with our instructions. We have concluded a data processing agreement with this provider.

We do not transfer your data to locations outside the EU or the EEA.

We store your application data for three months after completion of the application process. In individual cases, some data may be stored for longer. The data is then deleted and the physical application documents are destroyed. The duration of storage is then determined by the statutory retention requirements. These may be based on the German Fiscal Code (six years) or the German Commercial Code (10 years).

E. Processing of personal data of business/cooperation partners

If a contract between Gauss and you as a natural person is initiated or concluded, we process personal data such as names, professional email addresses, and professional telephone numbers within the scope of our business relationship with you. We base this data processing on the legal basis of Art. 6 (1) (b) GDPR, as it is necessary for the performance of the contract with you.

In the event that a contract is concluded between Gauss and your company as a legal entity, we process your above-mentioned contact details on the legal basis of Art. 6 (1) (f) GDPR. Our legitimate interest lies in being able to contact you as a contact person and fulfill the contract with the legal entity.

We do not share your data with third parties.

Gauss Fusion GmbH stores your personal data for the duration of the business relationship with you and until the expiry of the applicable limitation periods and any resulting claims and statutory retention obligations.

F. Processing of personal data of social media users

Gauss Fusion GmbH operates a social media page on LinkedIn:

https://www.linkedin.com/company/gauss-fusion-gmbh

Public relations

The data you provide on our social media pages, such as user names, comments, videos, images, likes, public messages, etc., is published by the social media platform and is not processed by us for any other purpose at any time. We reserve the right to delete content if necessary. We may share your content on our page if this is a feature of the social media platform and communicate with you via the social media platform.

If you send us an inquiry via social media, we may refer you to other secure communication channels that guarantee confidentiality, depending on the content. For example, you can send your inquiries to us at any time at the address listed in the legal notice or to info@gauss-fusion.com. The choice of the appropriate communication channel is your responsibility.

The legal basis for the aforementioned processing of your data is Art. 6 (1) (f) GDPR. Data processing is carried out in the legitimate interest of conducting public relations work for our company and being able to communicate with you.

We are jointly responsible with the respective operator of the social media platform for some of the processing activities.

We have therefore concluded the necessary agreement in accordance with Art. 26 GDPR, provided that the operator of the social media platform allows this.

LinkedIn

https://www.linkedin.com/static?key=privacy_policy

https://legal.linkedin.com/pages-joint-controller-addendum

The key components of shared responsibility are outlined in the following section.

Statistics (Insights)

The social media platforms used regularly compile statistics (insights) based on usage data that contain information about your interaction with our social media page. We cannot influence or prevent the compilation and provision of these statistics.

However, we do not use optional statistics from the social media platform.

We process the aforementioned information (statistics) in accordance with Art. 6 (1) (f) GDPR in the legitimate interest of validating the use of our social media pages and improving our content in line with our target groups.

The operator of the social media platform uses web tracking methods. Web tracking can also take place regardless of whether you are logged in or registered with the social media platform.

We would therefore like to point out that it cannot be ruled out that the operator of the social media platform may use and evaluate your profile and behavioral data for its own purposes. We have no influence on the processing of your data by the operator of the social media platform. Please bear this in mind when using the social media platform.

For more information on data processing by the operator of the social media platform, configuration options for protecting your privacy, and other options for objecting, please refer to the operator's privacy policy.

We will delete your personal data when it is no longer required for the aforementioned processing purposes and there are no legal retention obligations preventing deletion.

G. Data subject rights

When processing your personal data, the GDPR grants you, as a website user, certain rights:

I. Right of access (Article 15 GDPR)

You have the right to request confirmation as to whether personal data concerning you is being processed; if this is the case, you have the right to access this personal data and to the information specified in detail in Art. 15 GDPR.

II. Right to rectification and erasure (Articles 16 and 17 GDPR)

You have the right to request the immediate correction of inaccurate personal data concerning you and, if necessary, the completion of incomplete personal data.

You also have the right to request that personal data concerning you be deleted immediately if one of the reasons specified in Art. 17 GDPR applies, e.g. if the data is no longer required for the purposes pursued.

III. Right to restriction of processing (Article 18 GDPR)

You have the right to request the restriction of processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you have lodged an objection to the processing pursuant to Art. 21 GDPR or for the duration of any review of whether our legitimate interests outweigh your interests as the data subject.

IV. Right to data portability (Art. 20 GDPR)

In certain cases, which are listed in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to request that this data be transferred to a third party.

V. Right to object (Art. 21 GDPR)

If data is collected on the basis of Art. 6 (1) (f) GDPR (data processing to safeguard legitimate interests), you have the right to object to the processing at any time for reasons arising from your particular situation. We will then no longer process the personal data unless there are demonstrably compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

VI. Right of withdrawal (Art. 7 (3) GDPR)

If data processing is based on your consent, you can revoke this consent at any time without affecting the legality of the data processing up to the point of revocation.

VII. Right to appeal to the supervisory authority

Pursuant to Art. 77 GDPR, you also have the right to lodge a complaint with the supervisory authority if you believe that the processing of your data violates data protection regulations. The right to lodge a complaint can be exercised in particular with the supervisory authority in the member state of your place of residence, your place of work, or the place of the alleged violation.