This English translation is provided for convenience only. In the event of any discrepancies, the German version shall prevail.
Thank you very much for your interest in our company. Protecting your personal data is a matter of particular importance to us. We process your data in accordance with the applicable legal provisions on the protection of personal data, in particular the EU General Data Protection Regulation (GDPR) and the national implementing laws that apply to us. This privacy policy provides you with comprehensive information about the nature, scope and purpose of the processing of your personal data by TakeASP AG and about your rights.
Personal data is any information that makes it possible to identify a natural person or that can be attributed to a natural person. This includes, in particular, name, date of birth, address, telephone number and email address, but also your IP address.
Data is anonymous if it cannot be linked to any individual in any way.
Controller
TakeASP AG
Alfred-Nobel-Str. 20
97080 Würzburg, Germany
Phone +49 931 7808-3500
Email info@takeasp.de
takeasp.de
Data Protection Officer
You can reach our data protection officer (atarax Unternehmensgruppe) at: datenschutz@atarax.de
Storage of Access Data
Each time our website is accessed and each time a file is retrieved, access data about this process is stored in a log file on our server. Each record consists of:
the page from which the file was requested
the name of the file
the date and time of the request
the amount of data transferred
the access status (file transferred, file not found, etc.)
a description of the type of web browser used
the IP address of the client
The stored data is evaluated for statistical purposes, to improve the website and to track misuse, for example in the event of a cyberattack. When using this general data, TakeASP AG does not draw any conclusions about the individual users of the website.
TakeASP AG therefore evaluates this data and information statistically on the one hand and, on the other, with the aim of increasing data security within our company, ultimately to ensure an optimal level of protection for the personal data we process. The server log file data is stored separately from any personal data provided by a data subject and is deleted after 30 days. The legal basis is our legitimate interest in the secure and stable operation of our website (Art. 6(1)(f) GDPR).
This data is not disclosed to third parties for either commercial or non-commercial purposes unless required by law or the data subject has given consent.
Where our website offers the option of entering personal or business data (email addresses, names, postal addresses), this data is disclosed on an expressly voluntary basis. Here, too, your data is treated confidentially and not passed on to third parties unless required by law. It is not linked to the access data mentioned above.
Your Rights as a Data Subject
If your personal data is processed, you have the following rights as a data subject within the meaning of the GDPR vis-à-vis the controller:
Access (Art. 15 GDPR): You can request information on whether and which personal data we process about you.
Rectification (Art. 16 GDPR): You can request the correction of inaccurate data or the completion of incomplete data.
Erasure (Art. 17 GDPR): You can request the erasure of your personal data unless statutory retention obligations prevent this.
Restriction of processing (Art. 18 GDPR): You can request that the processing of your data be restricted.
Data portability (Art. 20 GDPR): You can receive your data in a structured, commonly used and machine-readable format.
Objection (Art. 21 GDPR): You can object to the processing of your data on grounds relating to your particular situation.
Withdrawal of consent (Art. 7(3) GDPR): You can withdraw any consent you have given at any time with effect for the future.
Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.
To exercise these rights, if you have questions about the processing of personal data or if you wish to withdraw consent you have given, please contact: datenschutz@atarax.de
Right to Object
Please note the following regarding your right to object:
If we process your personal data for direct marketing purposes, you have the right to object to this processing at any time without giving reasons. This also applies to profiling insofar as it is related to direct marketing.
If you object to processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, preferably to: info@takeasp.de
Where we process your data to protect legitimate interests, you may object to this processing at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions.
We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.
Purposes and Legal Bases of Data Processing
When processing your personal data, we comply with the provisions of the GDPR and all other applicable data protection regulations. The legal bases for data processing derive mainly from Art. 6 GDPR.
We use your data to initiate business relationships, to fulfill contractual and legal obligations, to perform the contractual relationship, to offer products and services, and to strengthen our customer relationships.
Consent to data processing may also constitute a legal basis under data protection law. Before you give your consent, we inform you of the purpose of the data processing and of your right to withdraw consent.
Disclosure to Third Parties
Your data is only disclosed to third parties within the scope of the statutory provisions or with your corresponding consent. Otherwise, no disclosure to third parties takes place unless we are obliged to do so by mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies).
Recipients / Categories of Recipients
Within our company, we ensure that only those persons receive your data who need it to fulfill contractual and legal obligations.
In certain cases, service providers support our departments in performing their tasks. The necessary data protection agreements have been concluded with all service providers. The categories of service providers include IT service providers supporting the outsourcing environment, supporting the ERP software in use, and processing relevant data for human resources and accounting.
In addition, we use services from Google and Meta on our website. For details, please see the sections “Google Tag Manager and Google Analytics” and “Meta Pixel and Conversions API”.
Transfers to Third Countries
Data is only transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual relationship, required by law, or if you have given us your consent.
As part of the Google and Meta services described in this privacy policy, personal data may be transferred to recipients in the USA. These recipients are certified under the EU-US Data Privacy Framework, so the transfer is covered by an adequacy decision of the European Commission pursuant to Art. 45 GDPR.
Storage Period
Your data is only stored for as long as it is required for the respective processing purpose, unless statutory retention periods require data to be stored for longer. This applies in particular to retention obligations under commercial or tax law (e.g. German Commercial Code, German Fiscal Code). If there is no further retention obligation, the data is routinely deleted once the purpose has been achieved.
We may also retain data if you have given us permission to do so, or in the event of legal disputes where we use evidence within the statutory limitation periods, which can be up to thirty years; the standard limitation period is three years.
Secure Transmission of Your Data
To protect the data stored with us as effectively as possible against accidental or intentional manipulation, loss, destruction or access by unauthorized persons, we use appropriate technical and organizational security measures. Security levels are continuously reviewed in cooperation with security experts and adapted to new security standards.
Data exchanged with our website is always encrypted. We offer HTTPS as the transmission protocol for our website, using current encryption protocols. You can also contact us at any time by other means (e.g. by phone or postal mail).
Obligation to Provide Data
Various personal data are required to establish, perform and terminate the contractual relationship and to fulfill the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides.
We have summarized the details for you in the section above. In certain cases, data must also be collected or made available due to legal provisions. Please note that we cannot process your inquiry or perform the underlying contractual relationship without this data.
Categories, Sources and Origin of Data
The data we process depends on the respective context: for example, whether you send us an inquiry via our contact form, contact us by email or send us an application.
When you submit a contact request, we collect and process the following data:
Company name
First and last name
Email address
Phone number (optional)
Selected topic of your inquiry
Information provided in the message field
For applications, we collect and process the following data:
Your contact details
Information from your message
Information from your application documents
Automated Individual Decision-Making
We do not use purely automated processing to make decisions.
Contact Form / Contact by Email
If you send us an inquiry via the contact form on our website or by email, the information you provide, including your contact details, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. Data submitted via the contact form is stored in our website system on our own servers. This data will not be passed on without your consent.
The legal basis is Art. 6(1)(b) GDPR if your inquiry relates to the initiation or performance of a contract, and otherwise our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR).
Your data will be deleted once your inquiry has been fully processed, unless statutory retention obligations apply.
Applications
Thank you for your interest in working at TakeASP AG. We are aware of the importance of your data and process the personal data you send us as part of your application solely for the purpose of handling the application process effectively and correctly and for contacting you during the application process. Your data will not be passed on to third parties without your consent.
We observe the principle of data minimization: you only need to provide the data we require to fully review your application, such as your CV. You are, of course, free to provide additional information voluntarily.
The legal basis is Art. 6(1)(b) GDPR (steps prior to entering into a contract as part of the application process).
We store your data for the purposes stated above until the application process has been completed and the relevant deadlines have expired – at the latest six months after a decision has been communicated. Your data will only be stored for longer, for example to consider you for future positions, with your consent.
Cookies
Our website uses cookies. They help make our website more user-friendly, effective and secure. Cookies are small text files that are placed on your device and stored locally by your browser. Cookies only contain pseudonymous data. Some cookies remain for the duration of a browser session (session cookies), while others are stored for longer (persistent cookies, e.g. consent settings, language settings). The latter are deleted automatically after the specified period. In addition to our own cookies, we also use cookies controlled by third-party providers. These use the information contained in the cookies, for example, to display content to you or to record the pages you visit.
On the basis of our legitimate interest (Art. 6(1)(f) GDPR), we use technically necessary cookies that are essential for operating the website and ensuring its functionality. We also use cookies without your consent where their sole purpose is to store or access information on your device for the transmission of messages, or where they are strictly necessary to provide a service you have explicitly requested (Section 25(2) of the German Telecommunications Digital Services Data Protection Act, TDDDG). We only use all other cookies with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG), which you give via our cookie banner (Cookiebot, provider: Usercentrics A/S, Denmark) and can change or withdraw at any time.
A complete, up-to-date overview of all cookies used, including provider, purpose and storage period, can be found in the cookie declaration below.
Cookie-Declaration
Google Tag Manager and Google Analytics
Our website uses Google Tag Manager and Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
Google Tag Manager is a tool we use to manage tracking and analytics code on our website and to integrate our consent management platform (Cookiebot). It does not create user profiles or set cookies itself; it only controls which additional services are loaded after you have given your consent. When you visit our website, Tag Manager is loaded from Google servers, which means your IP address is transmitted to Google for technical reasons. The legal basis is our legitimate interest in managing the services used on our website efficiently and in compliance with the law (Art. 6(1)(f) GDPR, Section 25(2) TDDDG).
Google Analytics enables us to analyze how our website is used and to improve our offering. This includes, among other things, pages viewed, time spent on the site, where visits come from (e.g. search engine or link), device and browser information, and approximate location data at country or region level. Google Analytics 4 does not log or store IP addresses. To recognize returning visits, Google Analytics sets cookies (e.g. “_ga” and “ga“) with a storage period of up to 2 years.
Google Analytics is only used if you have given your consent via our cookie banner. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings.
Event data is automatically deleted by Google after 2 months, and user-level data after 14 months.
It cannot be ruled out that data is transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework; the transfer is therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR).
For more information, please see Google’s privacy policy: https://policies.google.com/privacy
Meta Pixel and Conversions API
Our website uses the Meta Pixel and the Meta Conversions API. The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”).
The Meta Pixel allows us to measure the effectiveness of our ads on Facebook and Instagram and to show targeted ads to people who have visited our website (remarketing). Data transmitted to Meta includes, among other things, pages viewed, time of visit, device and browser information, your IP address and interactions on our website (e.g. submitting the contact form). If you are logged in to Facebook or Instagram, Meta may associate the visit with your account. To recognize returning visitors, the Meta Pixel sets a cookie (“_fbp”) with a storage period of up to 3 months.
Via the Conversions API, these events are additionally transmitted directly from our server to Meta. This ensures more reliable measurement, for example if browser settings prevent transmission via the pixel. Hashed, i.e. pseudonymized, contact data may also be transmitted in this process, which Meta uses solely for matching with existing user accounts.
The Meta Pixel and the Conversions API are only used if you have given your consent via our cookie banner. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time with effect for the future via the cookie settings.
We are jointly responsible with Meta for collecting data on our website and transmitting it to Meta (Art. 26 GDPR). The underlying agreement can be found at: https://www.facebook.com/legal/controller_addendum. Meta alone is responsible for any further processing of the data.
It cannot be ruled out that data is transferred to Meta Platforms, Inc. in the USA. Meta Platforms, Inc. is certified under the EU-US Data Privacy Framework; the transfer is therefore covered by an adequacy decision of the European Commission (Art. 45 GDPR).
For more information, please see Meta’s privacy policy: https://www.facebook.com/privacy/policy/. You can adjust your ad preferences at https://www.facebook.com/adpreferences.
Links to Other Providers
Our website also contains links to the websites of other companies. Where there are links to websites of other providers, we have no influence on their content. We therefore cannot accept any responsibility or liability for this content. The respective provider or operator of the linked pages is always responsible for their content.
The linked pages were checked for possible legal violations and recognizable infringements at the time the link was created. No unlawful content was identifiable at that time. However, permanent monitoring of the content of linked pages is not reasonable without concrete evidence of a legal violation. If we become aware of any legal violations, we will remove such links immediately.
Our Social Media Presence
TakeASP AG maintains various presences on social media, currently on Facebook, Xing and LinkedIn. Insofar as we have control over the processing of your data, we ensure that the applicable data protection regulations are complied with. Below you will find the most important data protection information regarding our social media presences.
Name and address of the responsible companies
In addition to TakeASP AG, the following are responsible for the company presences within the meaning of the GDPR and other data protection regulations:
Facebook (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland)
Xing (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany)
LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
However, you use these platforms and their functions at your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).
Please note that user data may be processed outside the European Union. This may result in risks for users, for example because it may be more difficult to enforce their rights. Providers that process or store data in third countries are obliged to comply with the European level of data protection through contractual arrangements and certification under the EU-US Data Privacy Framework. Data may also be processed or stored in third countries on the basis of your consent (Art. 49(1)(1)(a) GDPR); in this case, you will be informed of this and of your right to withdraw consent separately when your consent is obtained.
We maintain these presences to communicate with visitors to these pages and to inform them about our offerings.
We also collect data for statistical purposes in order to develop and optimize our content and make our offering more attractive. The data required for this (e.g. total number of page views, page activity, data provided by visitors, interactions) is processed by the social networks and made available to us. We have no influence on how it is generated and presented.
In addition, the social media providers process your personal data for market research and advertising purposes. For example, usage profiles may be created based on your usage behavior and the resulting interests. These can be used, among other things, to display advertisements within and outside the platforms that match your interests. For this purpose, cookies are usually stored on your computer. Independently of this, data that is not collected directly on your devices may also be stored in your usage profiles. Storage and analysis also take place across devices, in particular, but not exclusively, if you are registered as a member and logged in to the respective platform. Beyond this, we do not collect or process any personal data in this context.
TakeASP AG processes your personal data on the basis of our legitimate interest in effective information and communication pursuant to Art. 6(1)(1)(f) GDPR. If you are asked for consent to data processing, i.e. if you give your consent by confirming a button or similar (opt-in), the legal basis for processing is Art. 6(1)(1)(a) and Art. 7 GDPR.
Your rights and options to object
If you are a member of a social network and do not want the network to collect data about you via our presence and link it to the member data stored with that network, you must:
log out of the respective network before visiting our pages,
delete the cookies on your device, and
close and restart your browser.
Please note that this must be done separately for each device. However, after logging in again, you will once again be identifiable to the network as a specific person.
For a detailed description of the respective processing operations and options to object (opt-out), please refer to the information linked below:
Facebook (Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland) – Privacy policy: https://www.facebook.com/privacy/policy/ – Opt-out: https://www.facebook.com/adpreferences and https://www.youronlinechoices.com
Xing (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany) – Privacy policy: https://privacy.xing.com/en/privacy-policy – Opt-out: https://www.youronlinechoices.com
LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland) – Privacy policy: https://www.linkedin.com/legal/privacy-policy – Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Your rights vis-à-vis TakeASP AG are set out above under “Your Rights as a Data Subject”. However, since TakeASP AG does not have full access to your personal data, you should contact the social media providers directly when asserting your rights, as they each have access to their users’ personal data and can take appropriate action and provide information.
Objection to Advertising Emails
We hereby object to the use of contact details published as part of our legal notice obligations or other statutory provisions for sending unsolicited advertising and information materials. The operators of this website (TakeASP AG) expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.