Careers

Privacy Policy

Privacy Policy

§ 1 Basics on the Collection of Personal Data

(1) The following provides information on the collection of personal data when using our website. Personal data is any data that relates to you personally, e.g. your name, address, email addresses, contact details, IP address.

(2) Personal data is collected and processed in accordance with the provisions of the German Federal Data Protection Act (BDSG) and the EU General Data Protection Regulation (GDPR). Personal data will only be processed if you, as the data subject, have given your consent or if another law permits or requires the processing.

(3) The data controller within the meaning of Article 4(7) of the EU General Data Protection Regulation (GDPR) is:

expopartner GmbH
Steinmühlenweg 4
65439 Flörsheim am Main, Germany
Phone: +49 6145 599.770

represented by Managing Directors Mr. Gerald Ambrozus and Mr. Andreas Weber.

You can contact our data protection officer at Datenschutz@expopartner.de or at our street address by adding the line “FAO Data Protection Officer.”

 

§ 2 Collection of Personal Data when Using This Website

(1) Data Collection via Contact Form
Our website lets you contact us via a contact form. By using the form, you provide us with your personal contact details (your first and last name, company, email address, and your message). By submitting the contact request, you give us your consent to contact you [legal basis: GDPR Article 6(1)(a)]. We will delete your data as soon as it is no longer necessary to store it, or restrict its processing if there is a legal obligation to retain it. You may revoke your consent at any time. To revoke your consent, an informal notification by email is sufficient.

(2) Contact by Email
Our website allows you to contact us by email. By contacting us with questions of any kind, you give us your consent to contact you (legal basis: GDPR Article 6(1)(a)]. When you contact us by email, the data you provide (your email address and, if applicable, your name and other contact details) will be stored by us in order to respond to your inquiry. We delete the data collected in this context as soon as it is no longer necessary to store it, or restrict its processing if there are legal obligations to retain it. You may revoke your consent at any time. To revoke your consent, an informal notification by email is sufficient.

(3) Collection of Personal Data when Applying for Positions in Our Company
What categories of data do we use and where do they come from?
If you contact us or have contacted us with an application, we process the following categories of personal data:

Your master data (such as your first name, last name, post- or pre-nominals such as academic degrees/titles, and nationality), contact details (such as home address, (mobile) telephone number, email address), and data relating to the entire application process (cover letter, certificates, questionnaires, interviews as well as any performance evaluations, qualifications, and previous positions). Furthermore, you may have voluntarily provided us with special categories of personal data (such as health data, religious affiliation, degree of disability) and social media profiles in your application letter or in the course of the application process, in which case processing will only take place if you have consented to it.

As a rule, your personal data will be collected directly from you as part of the recruitment process. In addition, we may have received data (applicant data) from third parties (e.g. recruitment agencies).

For what purposes and on what legal basis is data processed?
We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR), the new German Federal Data Protection Act (BDSG), and all other relevant laws (e.g. BetrVG, AGG, etc.). The primary purpose of our data processing activities is to carry out and process the application procedure and to assess the candidate’s suitability for the position in question. The processing of your application data is necessary in order to decide on establishing an employment relationship. The primary legal basis for this is Article 6(1)(b) of the GDPR in conjunction with section 26 (1) of the new BDSG. In addition, Article 88(1) of the GDPR in conjunction with section 26(4) of the new Federal Data Protection Act (BDSG) and, if applicable, your separate consent pursuant to Article 6(1)(a) and Article 7 of the GDPR in conjunction with Section 26(2) of the new Federal Data Protection Act (BDSG). Where necessary, we also process your data on the basis of Article 6(1)(f) of the GDPR in order to protect our legitimate interests or those of third parties (e.g. authorities). The processing of special categories of personal data (e.g. health data) is based on your consent in accordance with Article 9(2)(a) of the GDPR in conjunction with Section 26(2) of the BDSG, unless statutory permissible circumstances such as Article 9(2)(b) in conjunction with Section 26(3) of the BDSG are relevant.

If you are not considered for a position and are rejected, we will ask you if you would like to be added to our talent pool. If you give your consent, we will add your application documents and all data collected during the application process to our talent pool. Your data is then always processed on the basis of your consent in accordance with Article 6(1)(a) of the GDPR.

You can revoke your consent to the processing and storage of your data at any time. To revoke your consent, an informal notification by email is sufficient.

How do we store and process your data?
We store the application data collected in our Softgarden application system. The system is provided by softgarden e-recruiting GmbH from Germany. We have concluded a data processing agreement with this provider in order to meet the requirements of data protection and to be able to offer you maximum protection for your data. The provider’s data protection requirements are reviewed regularly. Access to the data in this system is restricted to a few employees by means of an authorization system.

The system provider’s privacy policy can be viewed here:

https://www.softgarden.de/unternehmen/datenschutz-produkte/>;

We will delete your application data four months after completion of the application process for the position for which you have applied. We will only keep your data for a longer period if you have given your consent for us to do so.

If we have added your application data to our talent pool, we will store your data until you withdraw your consent. Every three months, we will ask you by email whether you still consent to your data being stored. If you object or do not respond within 14 days, we will delete your data.

We do not intend to disclose your data to other third parties. However, if we are legally obliged to do so, we will inform you accordingly.

We also offer you the option of contacting us by email at any time during the application process. When you contact us by email, the data you provide (your email address and, if applicable, your name and telephone number) will be stored by us in our email system in order to answer your questions. We delete the data collected in this context as soon as it is no longer necessary to store it, or restrict its processing if there are legal obligations to retain it.

(4) Cookies

(5) Web Analytics with Matomo

Data is collected and stored on this website using the web analytics service software Matomo, matomo.org, a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”) on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes in accordance with Article 6(1)(f) of the GDPR. Pseudonymized user profiles may be created and evaluated from this data for the same purpose.

Cookies may be used for this purpose. The data collected using Matomo technology (including your pseudonymized IP address) is processed on our servers.

The information generated by the cookie in the pseudonymized user profile is not used to personally identify the visitor to this website and is not combined with personal data about the bearer of the pseudonym.

If you do not agree to the storage and evaluation of this data from your visit, you can object to the storage and use at any time by clicking here. In this case, an opt-out cookie will be stored in your browser, which means that Matomo will not collect any session data. Please note that the complete deletion of your cookies will also delete the opt-out cookie and you may have to reactivate it.

Alternatively, most modern browsers have a so-called “Do Not Track” feature, which tells websites not to track your user activity. Matomo respects this option.

(6) Storage of Web Server Logs

In order to guarantee and monitor the stability and security of our application, we store personal data in log files. In addition to your email address, these include the IP address, the date and time of the request, the time zone difference from Greenwich Mean Time (GMT), the content of the request (specific page), access status/HTTP status code, the amount of data transferred in each case, the website from which the request comes, the browser, the operating system and its interface, the language and version of the browser software. The legal basis is our legitimate interest (GDPR Article 6 (1)(1)(f)). We store this data for up to six months.

(7) Links to Our Social Media Profiles

Our website contains links to our profiles on Facebook, Twitter, Instagram, LinkedIn, and Xing. We do not actively send any additional information to the platform operator with these links. However, every time a link is accessed, your browser sends various data to the platform operator, including the information that you have previously visited our site. If you are already logged in to the social media platform, this data may be associated with your profile and used by the platform operator for other purposes.

(8) Use of AI-based Tools

Our employees may use AI-based tools such as Langdock to help process queries and create content. In individual cases, personal data may be processed in the course of this work. AI-based tools are only used in compliance with applicable data protection regulations and are used to optimize our services. AI-based tools may be used for the following purposes:

  • To translate text and run grammar and spelling checks
  • To generate text suggestions or format information
  • To conduct research
  • To analyze, evaluate, and summarize raw data

The legal basis for data processing is usually our legitimate interest [GDPR Article 6 (1)(1)(f)]. In this case we assess the interest prior to processing your data and determine whether your interests or basic rights and freedoms outweigh the legitimate interest of expopartner GmbH to process the data.

 

§ 3 Data processing when Visiting and Using Our Social Media Pages

(1) Data Processing when Visiting Our Social Media Pages

Certain information about you is processed when you visit our social media pages, where we present our company or individual products and services from our range. The operators of the social media platforms are solely responsible for processing this personal data. Further information about the processing of personal data can be found in their privacy policies, which we link to in the following:

The operators of the social media platforms collect and process event and profile data and provide us with anonymized statistics and insights for our pages, which we use to learn more about the types of actions individuals take on our page (information known as “page insights”). These page insights are generated based on certain information about the visitors to our pages. Responsibility for processing this personal data is shared by the social media operators and us. Processing this personal data serves our legitimate interest to analyze the types of actions taken on our pages and use these insights to improve our pages. The legal basis for processing this personal data is Article 6(1)(f) GDPR.

We are not able to connect the information received from page insights to individual user profiles that have interacted with our pages. We have agreements in place with the operators of the social media platforms on data processing with shared responsibility, which set out which data protection obligations lie with us and which lie with the operators. Details on the processing of personal data to produce page insights and on the agreements concluded between the operators of the social media platforms and us can be found at the following links:

You can also assert your rights with the operators. More information can be found at the following links:

With Meta and LinkedIn, we have agreed that the Irish Data Protection Commission is the supervisory authority responsible for monitoring the processing of page insights. You have the right to submit a complaint to the Irish Data Protection Commission (see www.dataprotection.ie) or any other supervisory authority at any time.

(2) Communication via Social Media Pages

We also process information you provide to us through our company pages on the respective social media platforms. This information may be your username, contact details, or a message or post. We are solely responsible for processing this data. We process this data based on our legitimate interest to make contact with individuals who have sent us queries. The legal basis for processing this data is Article 6(1)(f) GDPR. Further data may be processed if you have consented to this [Article 6(1)(a) GDPR] or if required to comply with a legal obligation [Article 6(1)(c) GDPR].

 

§ 4 Automated Decision-Making (Including Profiling)

There is no automated decision-making process and no profiling takes place.

 

§ 5 Retention Period or Criteria for Determining the Retention Period

Your personal data is only stored for as long as it is needed to fulfill the purpose of processing it. We have describes the retention periods for individual processing purposes in § 2 “Collection of Personal Data when Using This Website.”

If you have given your consent to process your personal data, this data is deleted when you revoke your consent. For everything else, your personal data is retained for as long as is required legally, constitutionally, or contractually. For example, personal data that is relevant under tax law is generally retained for a period of 10 years, while other personal data is generally retained for 6 years according to trade law stipulations. It may be necessary to retain your data for a longer period of time in individual cases, based on the legal retention periods set out in §§ 195 ff. of the German Civil Code (BGB) – in exceptional cases this retention period can be up to 30 years.

 

§ 6 Recipients of Personal Data

We will only share your personal data with other recipients or provide other recipients with access to your personal data if this is required for the respective purposes of processing or if we have entrusted other recipients to fulfill individual tasks or services, for which access to your personal data is necessary or cannot be ruled out.

The recipients or categories of recipients of personal data are:

  • Internal roles involved in the execution of relevant business processes (for example, Purchasing, Human Resource, Accounting, Billing, IT)
  • Service providers for the hosting, maintenance, and administration of our website or databases
  • Service providers for hosting, maintenance, administration, and support (for example, for our network, Office 365, applicant management system, the Langdock AI tool)

 

§ 7 Transmission of Data to Recipients in a Third Country or to an International Organization

We do not anticipate transmitting data to recipients in a third country or to an international organization. If such a transmission of data becomes necessary, we will inform you in advance.

 

§ 8 Objecting or Revoking Consent to the Processing of Your Data

(1) If you have given your consent to the processing of your data, you may revoke it at any time. To revoke your consent, an informal notification by email is sufficient. Revoking consent affects the lawfulness of the processing of your personal data after you have given it to us.

(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is shown by us in each case in the following description of the functions. If you exercise your right to object, we ask you to explain the reasons why we should not process your personal data as we have done. In the event that you submit a justified objection, we will examine the situation and either stop or amend our data processing activities or show you our compelling legitimate grounds on which we will continue processing.

§ 9 Your Rights

(1) You have the following rights vis-à-vis us with regard to your personal data:

  • Right of access as per Article 15 GDPR
  • Right to rectification as per Article 16 GDPR
  • Right to erasure as per Article 17 GDPR
  • Right to restriction of processing as per Article 18 GDPR
  • Right to data portability as per Article 20 GDPR
  • Right to object to processing as per Article 21 GDPR

(2) You also have the right to lodge a complaint with a data protection supervisory authority about the processing of your personal data by us. The data protection supervisory authority responsible for us is:

Der Hessische Datenschutzbeauftragte
Postfach 3163
65021 Wiesbaden, Germany
Phone: +49 611 140 80
Fax: +49 611 1408 – 900
Email: poststelle@datenschutz.hessen.de

Last updated: 06/02/2025
Version 5.0

We shape impact