Legal Information
Privacy Policy
1. General Information and Principles of Data Processing
Thank you for visiting our website. Protecting your privacy and your personal data when you use our website is a matter of great importance to us.
According to Art. 4 No. 1 of the GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, and your IP address. Data that cannot be linked to you, such as through anonymization, is not personal data.
Processing (e.g., collection, storage, retrieval, querying, use, transmission, deletion, or destruction) as defined by Art. 4 No. 2 of the GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations to be observed.
Here you will find information on how we handle your personal data when you visit our website. To provide the functions and services of our website, it is necessary for us to collect personal data about you. We also explain the nature and scope of the respective data processing, the purpose and the corresponding legal basis, as well as the respective storage period.
This privacy policy applies only to this website. It does not apply to other websites to which we merely provide a hyperlink. We cannot accept responsibility for the confidential handling of your personal data on third-party websites, as we have no control over whether these companies comply with data protection regulations. Please check those websites directly for information on how they handle your personal data.
2. Controller
The party responsible for the processing of personal data on this website is:
ProCom GmbH, represented by Managing Director Marco Kupski
Dorfplatz 1
31311 Uetze
Email: info@process-commissioning.com · Phone: +49 1522 6145807
3. Provision and use of the website/server log files
a) Nature and scope of data processing
When you use this website without otherwise transmitting data to us (e.g., by registering or using the contact form), we collect technically necessary data via server log files that are automatically transmitted to our server, including:
· IP address
· Date and time of the request
· Name and URL of the retrieved file
· Website from which access is initiated (referrer URL)
· Access status/HTTP status code
· Browser type
· Language and version of the browser software
· Operating system
b) Purpose and legal basis
This processing is technically necessary to enable us to display our website to you. We also use the data to ensure the security and stability of our website.
The legal basis for this processing is Art. 6(1)(f) GDPR. The processing of the aforementioned data is necessary for providing a website and thus serves to protect the legitimate interests of our company.
c) Storage duration
Once the aforementioned personal data is no longer required to display the website, it will be deleted. The collection of data for providing the website and the storage of data in log files is strictly necessary for the operation of the website. Consequently, there is no option for you to object to this aspect. Further storage may occur in individual cases if required by law.
4. Use of cookies
We use Cookiebot to query, store, and take into account your preferences regarding optional cookies and services. The provider is Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark.
When the banner loads, the provider processes technical information such as the IP address, browser information, and the website being visited. When you make your selection, your consent status, the time of consent, a consent ID, and the banner version used are also processed in order to save and verify your decision. Cookiebot uses the necessary “CookieConsent” cookie specifically for this purpose. The decision is generally stored for up to twelve months; according to Cookiebot, it deletes the corresponding end-user data after twelve months.
The processing of consent for administrative and record-keeping purposes is carried out to fulfill our data protection obligations pursuant to Article 6(1)(c) of the GDPR. The storage and retrieval of strictly necessary information on your device is based on Section 25(2)(2) of the TDDDG. Optional statistical cookies and Google Analytics are only activated once you consent via the banner. You can change or withdraw your consent at any time using the cookie settings button. Withdrawal takes effect for the future; the lawfulness of processing that has already taken place remains unaffected. You can also use our contact and job application forms without consenting to the use of statistics.
Google Analytics 4:
With your consent, we use Google Analytics 4 to analyze statistics on our website and improve our services. The Google provider contractually responsible for ProCom must be confirmed prior to publication in accordance with the Analytics Agreement. In particular, page views, technical information about browsers and devices, and interactions such as clicks on contact forms, form initiation, submission attempts, and confirmed form submissions or errors are collected. Pseudonymous identifiers may be used to associate visits and interactions. Names, email addresses, phone numbers, messages, or other content from your form submissions are not transmitted to Google Analytics via the tracking system set up for this purpose. URL search parameters are derived from the page and referrer addresses transmitted by our tracking system.
The legal basis is your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. Without consent for statistical purposes, the Google Analytics script will not be loaded on this site. Google Signals and personalized advertising are not enabled by the integrated configuration. The retention period for user and event data is set to two months, with no automatic extension upon new user activity. Aggregated standard reports may remain available for a longer period. Analytics cookies may be stored for up to two years by default; their retention period depends on the settings and subsequent use. Processing by Google entities outside the European Economic Area, particularly in the U.S., is possible. Prior to publication, the recipients and the data transfer safeguards applicable to ProCom as specified in the Analytics Agreement must be specifically added here.
5. Data collection for the implementation of pre-contractual measures and contract fulfillment
a) Nature and scope of data processing
We collect personal data about you during the pre-contractual phase and upon conclusion of a contract. This includes, for example, your first and last name, address, email address, telephone number, or bank details.
b) Purpose and legal basis of data processing
We collect and process this data exclusively for the purpose of contract execution or for the fulfillment of pre-contractual obligations. The legal basis for this is Art. 6(1)(b) GDPR. If you have also provided consent, the additional legal basis is Art. 6(1)(a) GDPR.
c)Storage period
The data will be deleted as soon as it is no longer required for the purpose of its processing.
Furthermore, there may be statutory retention obligations, such as commercial or tax-related retention requirements under the German Commercial Code (HGB) or the Fiscal Code (AO). If such retention obligations exist, we will block or delete your data once these retention periods have expired.
6. Registration option
a) Nature and scope of data processing
You can register on our website. When you register, we collect and store the data you enter into the input mask (e.g., surname, first name, email address). No data is passed on to third parties.
b) Purpose and legal basis of data processing
Your registration is required for the use of certain content and services on our website, or for the fulfillment of a contract or the implementation of pre-contractual measures. After registration, you are free to modify the personal data provided during registration at any time or to have it completely deleted from the database of the controller.
The legal basis for processing, in the event of consent, is Art. 6(1)(a) GDPR. If your registration is for the purpose of preparing a contract, Art. 6(1)(b) GDPR serves as an additional legal basis.
c) Storage period
The data collected during registration will be stored by us for as long as you are registered on our website and will be deleted thereafter. Statutory retention periods remain unaffected.
7. Submit project inquiry / contact form
a) Type and scope of data processing
We offer you the option to contact us via a contact form provided on our website. As part of the process of submitting your request via the contact form, you are referred to this privacy policy to obtain your consent.
If you use the contact form, the following personal data will be processed:
· Salutation
· Title
· Last name
· First name
· Job title
· Phone
· Company
· Industry
· Project
· Location of commissioning
· Estimated scope/duration
· Qualifications/Degrees
· Personnel requirements
· Message/Information
b) Purpose and legal basis
Providing your email address serves the purpose of allowing us to send you a response to your inquiry via email. When using the contact form, your personal data will not be shared with third parties.
The legal basis for processing is your consent pursuant to Article 6(1)(a) of the GDPR, based on the declaration of consent you provided voluntarily, which may be revoked at any time with future effect.
c) Storage duration
The data you enter in the contact form will remain with us until you request its deletion, revoke your consent for storage, or the purpose for data storage no longer applies (e.g., after your request has been fully processed).
Mandatory legal provisions—in particular, retention periods under the German Commercial Code (HGB) or the Fiscal Code (AO)—remain unaffected.
8. Contact options via email
Our website provides an option to contact us via email.
a) Nature and scope of data processing
You may contact us via email. In doing so, our data collection is limited to the email address of the account you use to contact us, as well as any personal data you choose to provide as part of your inquiry.
b) Purpose and legal basis
The purpose of processing this data is to enable us to respond to your inquiry appropriately. The legal basis for this is Article 6(1)(f) of the GDPR. We have a legitimate interest in processing the aforementioned personal data in order to handle your request effectively.
c) Storage period
The duration for which the aforementioned data is stored depends on the reason for your contact. Your personal data will be deleted as a matter of course once the purpose of the communication has been fulfilled and storage is no longer required. This may occur, for example, once your request has been processed.
9. Application options
a) Type and scope of data processing
You can apply via our website or by email. When you apply, we collect and store the data you enter into the input form or send to us via email.
b) Purpose and legal basis
We process your data solely for the purpose of handling your application.
Data is not shared with third parties. The legal basis for processing is Art. 88 (1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG) and, additionally, Art. 6 (1) (b) GDPR.
If you provide us with consent to be included in our applicant pool, the legal basis is Art. 6 (1) (a) GDPR.
c) Storage period
If we are unable to offer you a position, we will store your data for a maximum of six months after the conclusion of the application process, in accordance with Section 61b (1) of the German Labor Court Act (ArbGG) in conjunction with Section 15 of the General Equal Treatment Act (AGG). The period begins upon receipt of the rejection letter.
If you have given us your consent to be included in our applicant pool, we will store your data for a maximum of two years.
d) Data transfer
Your data will only be accessed by those involved in the decision-making process (relevant HR or specialist departments, management, works council).
In addition, we are required to transmit your data to public authorities and institutions (e.g., public prosecutor's offices, police, regulatory authorities, tax offices, social security agencies, etc.).
Other recipients of your data may include entities for which you have provided your consent for data transfer.
10. Data transfer
We only pass your personal data on to third parties if:
a) you have given your express consent for this in accordance with Art. 6(1)(a) GDPR,
b) this is legally permitted and necessary under Art. 6(1)(b) GDPR for the performance of a contractual relationship with you or for the implementation of pre-contractual measures,
c) there is a legal obligation for the disclosure in accordance with Art. 6(1)(c) GDPR. We are legally required to transmit data to government authorities, e.g., tax authorities, social security institutions, health insurance providers, regulatory bodies, and law enforcement agencies.
d) the disclosure is necessary under Art. 6(1)(f) GDPR for the purposes of our legitimate business interests, as well as for the establishment, exercise, or defense of legal claims, and there is no reason to assume that you have an overriding interest in the non-disclosure of your data that requires protection.
e) we use external service providers, known as data processors, for processing in accordance with Art. 28 GDPR, who have been obligated to handle your data with care.
We use such service providers in the following areas:
· IT
· Logistics
· Telecommunications
When transferring data to external entities in third countries, i.e., outside the EU or the EEA, we ensure that these entities treat your personal data with the same level of care as they would within the EU or the EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection, or where we ensure the careful handling of personal data through contractual agreements or other appropriate safeguards.
11. Data security and protective measures
We are committed to protecting your privacy and treating your personal data confidentially. To this end, we implement extensive technical and organizational security measures that are regularly reviewed and adapted to keep pace with technological advancements.
This includes, among other things, the use of recognized encryption methods (SSL or TLS). Data sent unencrypted, for example via unencrypted email, may potentially be read by third parties. We have no control over this. It is the responsibility of the user to protect the data they provide against misuse through encryption or other means.
12. Changes to the privacy policy
We reserve the right to update this statement as needed at any time.
13. Your rights
Here you can find your rights regarding your personal data. Details can be found in Articles 7, 15-22, and 77 of the GDPR. You can contact the controller (Section 2) regarding these matters.
a) Right to withdraw your consent under data protection law under Art. 7 (3) sentence 1 GDPR
You may withdraw your consent to the processing of your personal data at any time with future effect. However, this does not affect the lawfulness of processing based on consent before its withdrawal.
b) Right of access under Art. 15 GDPR
You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to access this personal data and to receive further information, such as the purposes of processing, the categories of personal data processed, the recipients, and the planned storage period or the criteria for determining that period.
c) Right to rectification and completion under Art. 16 GDPR
You have the right to request the rectification of inaccurate data without undue delay. Taking into account the purposes of the processing, you have the right to have incomplete data completed.
d) Right to erasure ("right to be forgotten") under Art. 17 GDPR
You have the right to erasure, provided that the processing is not necessary.
This is the case, for example, if your data is no longer required for the original purposes, you have withdrawn your consent under data protection law, or the data has been processed unlawfully.
e) Right to restriction of processing under Art. 18 GDPR
You have the right to restrict processing, for example, if you believe that your personal data is inaccurate.
f) Right to data portability under Art. 20 GDPR
You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format.
g) Right to object under Art. 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.
In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling to the extent that it is related to such direct marketing.
h) Automated individual decision-making, including profiling, pursuant to Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing, including profiling, except in the exceptional cases mentioned in Art. 22 GDPR.
We do not engage in automated decision-making, including profiling, as the sole basis for our decisions.
i) Right to lodge a complaint with a data protection supervisory authority pursuant to Art. 77 GDPR
You also have the right to lodge a complaint with a data protection supervisory authority at any time, for example, if you believe that data processing is not in compliance with data protection regulations.