Imprint and Data Protection

PRODYNA SE
Dornhofstraße 38A
63263 Neu-Isenburg

Phone +49 69 597724-0
Fax +49 69 597724-700
E-mail: info@prodyna.com

Supervisory Board: Hüseyin Cifci (Chairman), Gregor Hansbuer and Ralph Weichelt

Managing Directors: Christoph Körner (CEO), Dirk Hehrmann (COO), Moritz Schmidt (CFO), David Wainwright (CSO), and Jens Weimar (CRO)

‍Identification numbers:
Commercial register: Frankfurt/Main HRB 112240
Identification number: DE122113119 VAT

PRODYNA (Schweiz) AG
Grosspeteranlage 29
4052 Basel

Phone +41 44 532359-0
Fax +41 44 532359-1
E-mail: info@prodyna.ch

Supervisory Board: Georges P. Faddoul (Chairman), Jens Nixdorf and Anke Miriam Kunz

Managing Directors: Jens Nixdorf and Anke Miriam Kunz

Foundation: 2013

Identification numbers:
Commercial register: CH-270.3.014.934-7
Sales tax identification number: CHE-246.758.723 VAT

PRODYNA UK LIMITED
35 New Broad Street
London EC2M 1NH

Phone +44 203 90323-40
Fax +44 203 90323-39
E-mail: info@prodyna.co.uk

Managing Directors: Hüseyin Cifci (CEO), Jens Weimar (CMO)

Registered Office: C/O Sobell Rhodes Llp The Kinetic Centre, Theobald Street, Elstree, Borehamwood, Hertfordshire, United Kingdom, WD6 4PJ

Foundation: 2017

Identification numbers:
Commercial register: 10986386
Sales tax identification number: GB281120244 VAT

PRODYNA D.O.O. BEOGRAD
Starine Novaka 23
11060 Beograd

Phone +49 69 597724-0
Fax +49 69 597724-700
E-mail: info@prodyna.com

Managing Directors: Hüseyin Cifci (CEO), Simo Vuleta (COO)

Foundation: 2013

Identification numbers:
Commercial register: 20964553
Sales tax identification number: 108266440 VAT

Qnit AG
Dornhofstr. 38A
63263 Neu-Isenburg

Phone +49 69 597724-600
Fax +49 69 597724-601
E-mail: info@qnit.de

Supervisory Board: Stefan Körner (Chairman)

Managing Directors: Hüseyin Cifci (CEO), Cezara Gales

Foundation: 2021

Identification numbers:
Commercial register: HRB 102815
Sales tax identification number: DE815578822 VAT

QNIT Austria GmbH
Leonard-Bernstein-Straße 10
1220 Wien

Phone +49 69 597724-600
Fax +49 69 597724-601
E-mail: info@qnit.at

Managing Directors: Hüseyin Cifci (CEO), Thomas Neubacher

Foundation: 2021

Identification numbers:
‍Commercial register: FN 560414p
Sales tax identification number: ATU77150823 VAT

Qnit D.O.O.
Starine Novaka 23
11060 Beograd

Phone +49 69 597724-0
Fax +49 69 597724-700
E-mail: info@qnit.de

Managing Directors: Hüseyin Cifci (Chairman), Milica Milojevic (COO)

Foundation: 2021

Identification numbers:
Commercial register: 21703443
Sales tax identification number: 112595643 VAT

Bolzhauser AG
Dornhofstr. 38A
63263 Neu-Isenburg

Phone +49 69 597724-900
Fax +49 69 597724-970
E-mail: info@bolzhauser.de

Supervisory Board: Stefan Körner (Chairman)

Managing Directors: Marcus Bolzhauser (CEO), Hüseyin Cifci

Foundation: 2022

Identification numbers:
‍Commercial register: HRB 125994
Sales tax identification number: DE350098378 VAT

mainlevel Consulting AG
Kölner Str. 3
65760 Eschborn

Phone +49 69 15324092-0
Fax +49 69 15324092-9
E-mail: info@mainlevel.de

Supervisory Board: Hüseyin Cifci (Chairman), Jens Weimar, Christoph Körner

Managing Directors: Dr. Felipe Bodewig Isidor Serrano, Olaf Haasner, David Thomas Haasner

Foundation: 2016

Identification numbers:
Commercial register: HRB 106287
Sales tax identification number: DE308716880 VAT

exciting AG
Dornhofstr. 38A
63263 Neu-Isenburg

Phone +49 6102 2082-0
Fax +49 6102 2082-9999
E-mail: info@exciting.de

Supervisory Board: Stefan Körner (Chairman)

Managing Directors: Hüseyin Cifci (Chairman), Rafik Ankour

Foundation: 2015

Identification numbers:
Commercial register: HRB 124460
Sales tax identification number: DE300678217 VAT

exciting Hellas M.E.P.E.
Chalkis 7
55535 Thessaloniki

Phone +49 6102 2082-0
Fax +49 6102 2082-9999
E-mail: info@exciting.de

Managing Directors: Rafik Ankour

Foundation: 2013

Identification numbers:
Commercial register: 144686006000
Sales tax identification number: 800909060 VAT

exciting D.O.O.
Starine Novaka 23
11060 Beograd

Phone +49 6102 2082-0
Fax +49 6102 2082-9999
E-mail: info@exciting.de

Managing Director: Hüseyin Cifci (CEO)

Foundation: 2020

Identification numbers:
Commercial register: 21602329
Sales tax identification number: 112073736 VAT

Data protection notice applies for the website, social media presences, applicants and employees of PRODYNA SE and group-affiliated companies (hereinafter referred to as PRODYNA) and for the sending of e-mails by PRODYNA.

In order to inform you about our policies and activities regarding the collection, use and disclosure of personal data on the Internet, PRODYNA provides this policy in electronic form. This Policy applies to all websites owned or operated by PRODYNA, its affiliates, subsidiaries and/or companies directly or indirectly controlled by PRODYNA, such as Qnit AG (collectively "PRODYNA"), applicants and employees, as well as appearances on various social media platforms. It does not apply to websites that have their own privacy policy. The website you are currently using is hereinafter referred to as the "Website".

The Website and the social media presences serve to provide information about PRODYNA's services and about PRODYNA as an employer. Through the Website and the social media appearances, individuals also have the opportunity to contact PRODYNA.

Personal data is processed in connection with the website, the offers provided on the website, the social media appearances and the sending of emails.

Below you will find information about the company responsible for processing your personal data, its representative and the data protection officer, as well as your rights in relation to the processing of your personal data.

Below you will also find information about the processing of your personal data and information about the use of cookies in connection with the website, the offers provided on the website and the sending of emails for event invitations, offers and information about PRODYNA and its companies belonging to the group, such as Qnit AG.

In this policy, the term "personal data" refers to data that relates to an individual and identifies that individual either directly or indirectly (in conjunction with other information that may come into PRODYNA's possession), such as your name, email address or telephone number, particularly in connection with job applications.

Information about each responsible company
PRODYNA SE, Dornhofstr. 38A, 63263 Neu-Isenburg, Germany
PRODYNA (Schweiz) AG, Grosspeteranlage 29, 4052 Basel, Switzerland
PRODYNA UK Ltd., 31/35 Kirby Street, EC1N 8TE London, United Kingdom
PRODYNA D.O.O. BEOGRAD, Starine Novaka 23 / 14th floor, 11060 Belgrade, Serbia
QNIT AG, Dornhofstr. 38A, 63263 Neu-Isenburg, Germany
QNIT Austria GmbH, Leonard-Bernstein-Straße 10, 1220 Vienna, Austria
QNIT D.O.O., Starine Novaka 23 / 14th floor, 11060 Belgrade, Serbia
mainlevel Consulting AG, Kölner Str. 3, 65760 Eschborn, Germany
Bolzhauser AG, Dornhofstr. 38A, 63263 Neu-Isenburg, Germany
exciting AG, Dornhofstr. 38A, 63263 Neu-Isenburg, Germany
exciting Hellas M.E.P.E., Chalkis 7, 55535 Pilea (Thessaloniki), Greece
exciting D.O.O., Starine Novaka 23 / 1st floor, 11060 Belgrade, Serbia

‍Collection of personal data
In general, you can access PRODYNA's website without providing any personal information. Your browser transmits information to our server, auf der Grundlage der Annahme von Cookies, that is technically necessary to display our website and to ensure its stability and security. This is IP address, date and time of the request, time zone difference to GMT, content of the requests, access status / http status code, amount of data transferred, website from which the request comes, browser, operating system and its interface as well as language and version of the browser software.

To access some areas of our website, e.g. to apply for a job, we may require personal data from you. In these cases, the entry of personal data is voluntary, and you will be expressly requested to provide this personal data and informed about the intended use of this personal data. If you do not provide us with the required personal data, you may not be able to use some features of our website. The typical reasons we collect personal information are listed below, along with a brief description of how your personal information will be handled in each case.

Communication with you. We will respond to any comments or requests you submit to us through our website, such as online inquiries, comments, or conference registration. This may mean that we call or email you.

Generating aggregate statistics about the use of our website.

Your personal information will be stored on our systems accordingly.

Training and education. Your personal data will be used for certification exams and certificates of attendance for the purpose of legitimizing and issuing your training certificate. PRODYNA or external trainers use participant lists with personal data for internal organization, e.g. for individual preparation of participants or for sending training documents. Participation in feedback questionnaires on training quality is voluntary and anonymous. Online registration for public training courses takes place via Eventbrite.de or XING.de; their data protection provisions apply.

The following table lists the categories of personal data that PRODYNA processes or could process as part of the processing activities described in this global privacy statement.

Personal data: Name, preferred gender pronoun, contact information of any kind (such as email, phone numbers, address), gender, date of birth, age, place of birth.

Confidential Data: PRODYNA may also collect certain types of confidential information where permitted or consented to by the laws of the relevant country, such as health/medical data (including disability status and dietary requirements/allergies at events organized/sponsored by us). PRODYNA will only use this confidential information for the purposes described in Table 3.

Audiovisual: photographs and images/recordings taken with CCTV or other video systems, as well as voice recordings.

Position: description of current position, job title, employer, location, PRODYNA contact(s).

System and Application Access Data: When you access PRODYNA systems, PRODYNA may collect data necessary to access such PRODYNA systems and applications, such as system ID, LAN ID, email account, instant messaging account, mainframe ID, system passwords, access and activity logs, and electronic content created using PRODYNA systems.

In addition, PRODYNA may process the personal data listed in the table below for recruitment purposes.

Personal Data: In addition to the personal data listed above, PRODYNA may collect other personal data for recruitment purposes, such as national identification number, social security number, insurance information, marital/partnership status, domestic partners, relatives, emergency contacts, military service.

Confidential Data: PRODYNA may collect certain types of confidential sensitive information when permitted by applicable local law or when you have consented to it, such as health/medical information (including disability), information about union membership, religion, race or ethnicity, minority flag, and (to the extent permitted by law) information about criminal convictions and offenses. PRODYNA collects this information for certain purposes, such as health/medical information to treat and provide care for a disability or illness; background checks; religious or church affiliation in countries such as Germany where such information is required for legal tax deductions; and personal diversity information (such as race or ethnicity) to comply with legal obligations and internal policies related to diversity and equal treatment.

Immigration Data: PRODYNA may collect citizenship, passport, residence or work permit information (physical copy and/or electronic copy).

Talent Management Information: information required for a background check, details of performance decisions and outcomes, performance feedback and alerts, e-learning/training programs, performance and development reviews (including information you provide when requesting/providing feedback, prioritizing and updating your inputs into relevant tools), driver's license and vehicle registration, and biographical information.

As indicated in the Global Privacy Policy, PRODYNA processes your personal data for a variety of purposes. The following table lists each of the purposes for which PRODYNA processes your personal data.

Facilitating communication with you (including in emergency situations): Facilitating communication with you, ensuring business continuity, protecting the health and safety of employees and others, protecting IT infrastructure, office equipment and other assets, facilitating communication with you and emergency contacts you provide.

Regulatory Compliance: meeting legal requirements, e.g., legal submission, accounting and reporting requirements, conducting audits, approving government audits and meeting other requirements of government or public agencies, participating in legal proceedings, e.g. in subpoenas, pursuing legal claims and remedies, defending litigation and resolving internal complaints or claims, conducting investigations and complying with internal policies and procedures, protecting, enforcing or defending PRODYNA's legal rights, privacy rights, security or property, PRODYNA affiliates or their employees, agents and contractors (including the enforcement of relevant agreements and terms of use), protecting the data security, privacy and safety of users of PRODYNA products or services or the public, protecting against fraud, or policies for risk management purposes.

Tracking your use of PRODYNA's property: monitoring activities in accordance with the laws of the land and/or applicable PRODYNA policies (including monitoring the use of PRODYNA resources).

Data analytics: analyzing business processes and data to describe, predict, and improve PRODYNA's economic performance and/or to provide a better user experience. In particular, the analyses include descriptive analyses, predictive analyses, analyses of the behavior of individuals (customers, business contacts) through the use of personal data, as well as marketing, individual customer view and customer journey analyses.

Recruitment: managing applications, including conducting interviews and appraisals, performance appraisals, financial planning, administering payments, managing inclusion and diversity programs, conducting background checks, scheduling and monitoring training requirements.

Use of personal data for marketing purposes

Most of the personal information we collect and use for marketing purposes relates to individual employees of our customers and other companies with whom we have an existing business relationship. We may also obtain contact information from public sources, including content posted on social media sites, to make initial contact with a relevant individual at a customer or other business.

We send commercial emails to individuals at our customers or other companies with whom we wish to establish or maintain a business relationship, in accordance with applicable marketing laws. Our targeted email messages typically contain web beacons, cookies and similar technologies that allow us to know whether you open, read or delete the message and which links you click. If you click on a link in a marketing email you receive from PRODYNA, we will also use a cookie to log which pages you view and what content you download from our websites, even if you are not registered or logged in to our site.

Targeted emails from PRODYNA may contain additional privacy information as required by applicable laws.

Like most companies, PRODYNA uses Customer Relationship Management (CRM) database technology to manage and track our marketing efforts. Our CRM databases contain personal information that belongs to individuals at our clients and other companies with whom we already have a business relationship or wish to establish one. Personal data used for these purposes includes relevant business information such as: Contact information, publicly available information (e.g., board membership, published articles, press releases, your public posts on social media sites when relevant to the business purpose), your responses to targeted emails (including web activity following links in our emails), website activity from registered users of our website, and other business information recorded by PRODYNA professionals based on their personal interactions with you. If you wish to be excluded from our CRM databases, please contact us.

We may combine data from publicly available sources and from our various email, website, and personal interactions with you (this includes information collected through our various websites, such as our career and corporate websites, and information collected when you register or log in to our websites or connect to our websites using your social media credentials (such as LinkedIn and Xing)). We combine this data to better assess your experience with PRODYNA and to carry out the other activities described in our Privacy Policy.

We may share personal data with our service providers, professional advisors, public and government authorities, or third parties in connection with a (potential) corporate or commercial transaction. These third parties may be located in other countries. Before doing so, we will take the necessary steps to ensure that your personal data is adequately protected as required by relevant data protection laws and PRODYNA's internal policies.

Unless you are notified otherwise, transfers of your personal data from the European Economic Area (EEA) to third parties outside the EEA will be made on the basis of an adequacy decision or in accordance with standard contractual clauses. All other transfers of your personal data outside the EEA will be made in accordance with the relevant international data transfer mechanisms and standards.

Your rights regarding marketing communications
You may exercise your right to prevent marketing communications to you by checking certain boxes on the forms we use to collect your personal information or by using opt-out mechanisms in the emails we send you. You may also exercise your right to stop receiving marketing communications or to delete your personal information from our CRM databases by contacting us. In this case, we will retain a minimum amount of personal data to note that you have unsubscribed so that we do not need to contact you again. Alternatively, you may email us at dataprivacy@prodyna.com to notify us of your unsubscribe request.

If you have any questions about data privacy or would like to provide us with permissions for websites or promotional purposes, please contact us.

Use of personal data during your visit to our business premises
In addition to the information above, this section tells you how we use personal information when you visit PRODYNA's offices.

This information also refers to the possible processing of your personal data by video surveillance and access control systems, if such systems are active.

When you enter our business premises, personal data such as your surname, first name and, if applicable, employer, as well as your time of arrival and departure and Video recording at the entrance are collected. This is based on project-specific requirements that have an increased security level and make this documentation necessary. This data is also generally stored for 12 months.

If you have received an access card from us, access to the premises is recorded and stored by the office complex's own access control system. If you would like more information about this, please contact us at the address you provided.

Particularly sensitive personal data
PRODYNA does not generally collect "particularly sensitive personal data" through its website. "Particularly sensitive personal data" is personal data about race, political opinion, religious or philosophical beliefs, trade union membership, health or sex life. By voluntarily providing us with particularly sensitive personal data (e.g., by submitting your resume or applying for a job online), you expressly consent to the use of your personal data as described in this policy.

Sharing your personal data
PRODYNA is a global organization. We have various legal entities (e.g., national subsidiaries) and partners in Switzerland, certain EU member states, and other European countries. Our internal processes and infrastructures are therefore international in nature and scope.

Accordingly, you should be aware that we may share your personal data with third parties to process it on our behalf. We require that third parties handle the personal data they receive in accordance with PRODYNA's privacy and security policies.

Your personal data may therefore also be subject to cross-border transfer. Cross-border transfer of your personal data will only occur (i) to countries with equivalent data protection standards or (ii) on the basis of officially recognized data protection agreements or (iii) on the basis of officially recognized standard data protection clauses.

Your rights
Below you will find more detailed information about your rights in relation to the processing of your personal data under the General Data Protection Regulation (GDPR):

I. Right of access
As a data subject, you have a right of access and information under the conditions set out in Article 15 of the General Data Protection Regulation. This means that you have the right to obtain confirmation from us as to whether we are processing your personal data. If this is the case, you also have the right to access the personal data and information listed in Article 15(1) of the General Data Protection Regulation. This includes information about the purposes of the processing, the categories of personal data processed and the recipients or categories of recipients to whom the personal data have been or will be disclosed (Article 15(1)(a), (b) and (c) of the General Data Protection Regulation). The full scope of your right of access and information can be found in Article 15 of the General Data Protection Regulation, which you can access via this link.

II. Right to rectification
As a data subject, you have the right to rectification under the conditions set out in Article 16 of the General Data Protection Regulation. This means that you have the right to request from us, without undue delay, the rectification of inaccurate personal data and the completion of incomplete personal data. The full scope of your right to rectification can be found in Article 16 of the General Data Protection Regulation, which you can access via this link.

III. Right to erasure (“right to be forgotten”)
As a data subject, you have a right to erasure ("right to be forgotten") under the conditions set out in Article 17 of the General Data Protection Regulation. This means that you have the right to request that we delete your personal data and that we are obliged to delete your personal data without undue delay if one of the reasons listed in Article 17(1) of the General Data Protection Regulation applies. This may be the case, for example, if personal data are no longer necessary for the purposes for which they were collected or otherwise processed (Article 17(1)(a) of the GDPR). Furthermore, if we have made the personal data public and are obliged to erase it, we are obliged to take reasonable steps, including technical measures, having regard to the available technology and the cost of implementation, to inform the controllers that process the personal data that you have requested the erasure of links to, or copies or replications of, those personal data from those controllers (Article 17(2) of the GDPR). The right to erasure ("right to be forgotten") does not apply if the processing is necessary for one of the reasons listed in Article 17(3) of the GDPR. This may be the case, for example, where processing is necessary for compliance with a legal obligation or for the establishment, exercise or defense of legal claims (Article 17(3)(a) and (4) of the GDPR). The full scope of your right to erasure ("right to be forgotten") can be found in Article 17 of the General Data Protection Regulation, which you can access via this link.

IV. Right to restriction of processing
As a data subject, you have the right to restriction of processing under the conditions set out in Article 18 of the General Data Protection Regulation. This means that you have the right to request that we restrict processing if one of the conditions set out in Article 18(1) of the General Data Protection Regulation applies. This may be the case, for example, if you dispute the accuracy of the personal data. In this case, the restriction of processing applies for a period of time that allows us to verify the accuracy of the personal data (Article 18(1)(a) of the General Data Protection Regulation). Restriction means that stored personal data are marked with the aim of limiting their future processing (Article 4(3) of the GDPR). The full scope of your right to restrict processing can be found in Article 18 of the General Data Protection Regulation, which you can access via this link.

V. Right to data portability
As a data subject, you have a right to data portability under the conditions set out in Article 20 of the GDPR. This means that you generally have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format and to transfer this data to another controller without hindrance from us, if the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR and the processing is carried out using automated means (Article 20(1) of the GDPR). For information on whether processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the GDPR or on a contract pursuant to Article 6(1)(b) of the GDPR, please refer to the information on the legal basis for processing in Section C of this Privacy Notice. When exercising your right to data portability, you also have the right in principle to have your personal data transferred directly from us to another controller, provided that this is technically feasible (Article 20(2) of the GDPR). The full scope of your right to data portability can be found in Article 20 of the General Data Protection Regulation, which you can access via this link.

VI. Right to object
As a data subject, you have a right to object under the conditions set out in Article 21 of the GDPR. At the latest during the first communication with you, we will expressly point out your right to object as a data subject. As a data subject, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f); this also applies to profiling based on these provisions. In the event of an objection based on your particular situation, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims. The full scope of your right to object can be found in Article 21 of the General Data Protection Regulation, which you can access via this link.

VII. Right to withdraw consent
If a processing operation is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) of the General Data Protection Regulation, you as the data subject have the right to withdraw your consent at any time pursuant to Article 7(3) of the General Data Protection Regulation. The revocation of your consent does not affect the lawfulness of the processing carried out on the basis of your consent until the revocation. We will inform you of this before you give your consent.

VIII. Right to complain to a supervisory authority
As a data subject, you have the right to lodge a complaint with a supervisory authority under the conditions set out in Article 57(1)(f) of the General Data Protection Regulation.

Duration of retention
PRODYNA stores your personal data only for as long as necessary. In addition, PRODYNA maintains specific policies and procedures for the management and retention of records and data so that personal information is deleted after a reasonable period of time in accordance with the following retention criteria:

PRODYNA will retain your personal information for as long as we have a business relationship with you.

PRODYNA will retain your personal information for as long as it is necessary to comply with a legal obligation.

PRODYNA will retain your personal information for as long as necessary to maintain or improve PRODYNA's legal position (e.g., in relation to statutes of limitations, litigation or government investigations).

Please keep your personal information up to date and notify PRODYNA of any material changes to your personal information.

Third-party websites
PRODYNA's websites may contain links to third-party websites. PRODYNA makes no warranties with respect to such third party websites and assumes no responsibility with respect to such third party websites. You should be aware that the owners and operators of such third party websites may collect, use or disclose personal information in a manner different from PRODYNA. When you access Internet links to third party websites, you should review the privacy policies of those third party websites. You should also be aware that third party websites may use cookies.

Corporate restructuring
As with many other organizations, PRODYNA may restructure its business units around the world, either as a result of acquiring new units or divesting or merging existing units. When this occurs, personal information may be disclosed to potential or actual purchasers of parts of our business, or personal information may be received from potential sellers. In doing so, we strive to ensure that the confidentiality of personal data disclosed in the course of such transactions is appropriately maintained.

Legal notice
PRODYNA may disclose personal information to enforce the terms of use of our website or to protect personal safety or the PRODYNA website in urgent circumstances. We may also be required to disclose your personal information for legal reasons, as a result of judicial or other government subpoenas, orders or warrants, in any jurisdiction in which we do business.

Data security and integrity
PRODYNA takes various technological and procedural security measures to protect the personal information we collect, use or transmit from loss, misuse, alteration or destruction. Please note, however, that due to the openness and uncertain nature of the Internet, PRODYNA cannot assume responsibility for the security of any transmission of personal information over the Internet.

Analysis software and cookies
The website uses analytics software, cookies and social media plug-ins. For more information, please refer to the Cookie Policy.

Contact details
If you have any questions about this Data Privacy Policy or requests relating to the use of your personal data by PRODYNA, you are welcome to contact us via the email address info@prodyna.com or on +49 69 597 724 0.

Data Protection Officer
PRODYNA SE
Dornhofstraße 38A
63263 Neu-Isenburg, Germany
E-Mail: dataprivacy@prodyna.com

We make every effort to respond to inquiries promptly, but a reasonable processing time must be expected.

This policy was last updated on 10 March 2023. Please visit this page regularly to see if this policy has changed.

Cookie Policy

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google"). The use includes the operating mode "Universal Analytics". This enables the assignment of data, sessions and interactions across multiple devices to a pseudonymous user ID and thus the cross-device analysis of a user's activities.

Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymization is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. Our legitimate interest in data processing also lies in these purposes. The legal basis for the use of Google Analytics is § 15 para. 3 TMG and Art. 6 para. 1 lit. f GDPR. The data sent by us and linked to cookies, user IDs (e.g. user IDs) or advertising IDs are automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month. For more information on terms of use and privacy, please click here or here.

‍Use of HubSpot
We use the marketing automation software HubSpot of the American company HubSpot Inc., 25 First Street, Cambridge, MA 02141 USA (hereinafter "HubSpot") on our website on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our website in order to optimize it and provide you with the best possible and user-friendly service). HubSpot is an integrated software solution that we use to cover various aspects of our digital marketing, sales and customer relationship management.

We use HubSpot for:
Contacting customers via the contact form.

Landing pages as part of promotional campaigns with options such as downloading whitepapers or similar content.

Social media linking and/or social media sharing.

Evaluation of the use of our websites (e.g. accesses, pages visited, session duration, etc.) as well as publications in social networks.

The content of our websites as well as your personal data, which you provide e.g. when using our contact form, are usually transferred to a server of HubSpot in the USA and stored there. HubSpot, Inc. has certified to the EU-U.S. and Swiss-U.S. Privacy Shield Framework administered by the U.S. Department of Commerce to implement appropriate protections for such transfers under Article 46 of the GDPR.

For more information about HubSpot's data use, settings, and opt-out options, please visit HubSpot's website: Privacy Policy, Cookie Policy, and Data Protection (GDPR).

Cookies

General
We use cookies on this website. Cookies are small pieces of information that a website sends to your computer's web browser when you visit a website. Cookies are stored on your computer for a certain period of time, which depends on the expiration date of the cookie. You can find more information about cookies here.

By using our website, you consent to the placement of cookies on your device, as explained in more detail below.

The PRODYNA website uses the following cookies:

Google Analytics
Recognition cookie: identifies unique visitors. The Google Analytics utma cookie assigns a unique ID that is used to identify the visitor on repeat visits (duration: 2 years).

Session cookie: counts the number of visits and not the number of unique visitors. The Google Analytics utmb cookie automatically deletes after 30 minutes. It is stored on a device together with the utmc cookie.

Session cookie: automatically deleted when the browser window is closed. It is stored on the device together with the Google Analytics utmb cookie.

Campaign cookie: Measures traffic across all online marketing channels. This means that within this period it transfers the data of the last traffic source to the website and thus statistically assigns the conversion or conversion rate to the respective online marketing channel (name: utmb cookie and duration: 6 months).

ShareThis
These cookies are used by the ShareThis widget. The ShareThis widget allows the user to share content on various social media. No personal information is stored (name: stid _unam and duration: 1 year depending on the browser).

These cookies are used by the ShareThis widget. The ShareThis widget allows the user to share content on various social media. No personal information is stored (name: _uset and duration: 8 hours).

Additional cookies placed through ShareThis to analyze the size of the audience. Opting out of these two cookies is possible here (name: _UID _UIDR and duration: 2 years).

If you do not want cookies to be assigned to you by our website, you must set your browser to not allow cookies or to notify you when a cookie is placed on your device. You can then refuse this placement when you receive the notification. You can find out how to do this in the "Help" section of your browser.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on. Opt-out cookies prevent the future collection of your data when visiting this website. To prevent cross-device collection by Universal Analytics, you must opt-out on all systems used. If you click here, the opt-out cookie will be set. To disable Google Analytics, use the browser add-on.

Google Analytics cookies
As explained above, PRODYNA uses Universal Analytics cookies to obtain standard internet login information as well as details about user behavior. PRODYNA does this in order to improve the website. This information does not contain any personal data. The data used for analytics purposes may be linked to personal data obtained from this website or otherwise.

To get more information about Universal Analytics cookies, please click here.

Browser add-on for disabling Google Analytics and opt-out cookie
To give website visitors more control over how their data is collected through Universal Analytics, Google has developed a Universal Analytics opt-out browser add-on. The add-on communicates with the Google Analytics JavaScript (analytics.js) to indicate that information about your visit to the website should not be sent to Google Analytics. The browser opt-out add-on does not prevent information from being sent to the website itself.

Please click here to learn more about the Google Analytics opt-out browser add-on.

Alternatively, you can set a cookie to prevent Universal Analytics from collecting data. Click here to set the opt-out cookie.

Social media / ShareThis cookies
PRODYNA offers users the opportunity to share pages of our website and blog posts on social networks such as Facebook, Instagram and Twitter. To provide this service, the website uses a plug-in from a third-party website called ShareThis. When you use our Share button, you are redirected to a website managed by ShareThis and then to a website managed by the relevant social media platform. We have no control over the cookies set by ShareThis or the relevant social media platform when you use their services. Cookies from ShareThis can be disabled here.

Facebook Social Plugins
PRODYNA uses social plugins from Facebook, Facebook Inc. 1601 S. California Ave, Palo Alto, CA 94394, USA (so-called: plugins). When you use this service, your browser establishes a direct connection with Facebook or Instagram, which belong to Facebook. Unless you are already on Facebook or Instagram, the content of the plugins is transmitted to your browser and integrated into the website by it.

PRODYNA has no influence on the data that Facebook collects or processes via the plugins. For the purpose and scope of the data collected and processed by Facebook, as well as the settings options for protecting your privacy, please refer to Facebook's privacy policy.

More information about the plugins from Facebook.

You can also prevent the transmission of data to Facebook with a corresponding plugin for your browser. Sharing PRODYNA's offer with Facebook (e.g. "Like" or "Share") is then no longer possible.

Twitter
PRODYNA also uses the Twitter button, a messaging service provided by Twitter Inc. 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. You can share a post via Twitter or follow PRODYNA on Twitter. When you call up the service, your browser establishes a direct connection with Twitter. Unless you are already on Twitter, the content of the button is transmitted to your browser and integrated into the website.

PRODYNA has no influence on the data that Twitter collects and processes via this button. The purpose and scope of data collection and processing by Twitter, as well as the privacy settings, can be found in Twitter's privacy policy.

You can also prevent data transmission to Twitter with a corresponding plugin for your browser. Sharing PRODYNA's offer with Twitter (e.g. "share") is then no longer possible.

LinkedIn
PRODYNA also uses the LinkedIn button, a social network of LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. You can share a post with LinkedIn via LinkedIn. When you use this service, your browser establishes a direct connection to LinkedIn. Unless you are on LinkedIn anyway, the content of the button is transmitted to your browser and integrated into the website.

PRODYNA has no control over the data that LinkedIn collects or processes via this button. For the purpose and scope of the data collected and processed by LinkedIn as well as the data protection settings, please refer to LinkedIn's privacy policy.

You can also prevent the transmission of data to LinkedIn with a corresponding plugin for your browser. Sharing PRODYNA's offer together with LinkedIn (e.g. "share") is then no longer possible.

XING
PRODYNA also uses the share button of XING, a social network of XING AG, Dammtorstr. 29-32, 20354 Hamburg, Germany. You can use the button to share a post via XING. When you use this service, your browser establishes a direct connection with XING. Unless you are on XING anyway, the content of the button is transmitted to your browser and integrated into the website.

PRODYNA has no influence on the data that XING collects or processes via this button. The purpose and scope of the data collected and processed by XING can be found in the privacy policy. Setting options for protecting your privacy can be found in the XING help area.

You can also prevent data transmission to XING with an appropriate plugin for your browser. Sharing PRODYNA's offer together with XING (e.g. "share") is then no longer possible.

Further information on the collection, use and disclosure of personal data within the scope of our application process.

Purpose of the collection of personal data
All personal data, including the personal data contained in the attachments, which you provide to us via the applicant portal or by e-mail, will be collected, processed and used by PRODYNA exclusively for the purpose of processing your application.

Your data will only be used by the respective company to fill the positions for which you have applied. They will not be passed on to other companies. If you have submitted a speculative application, we will consider your data for all current application procedures that fit your profile. The same applies in the event that you have given us your express consent to the further storage of your applicant profile after the conclusion of an application procedure.

Legal basis for data processing, type and purpose of data collection

We collect your personal data primarily to carry out the application process on the legal basis of § 6(1)(b), § 88 General Data Protection Regulation (GDPR) in conjunction with § 26(1) sentence 1(1) of the Federal Data Protection Act (old) (BDSG-alt). Further legal bases are § 6(1)(a) GDPR ("permission") and § 6(1)(f) GDPR ("balancing of interests"), e.g. for personnel evaluations and reporting. If the processing of personal data is necessary for compliance with a legal obligation to which the controller is subject, the legal basis is § 6(1)(c) GDPR.

If special categories of personal data are processed pursuant to Section 9(1) of the GDPR (e.g., health data), this is done on the basis of Section 9(2)(b) of the GDPR. In addition, the processing might be necessary to assess your ability to work in accordance with § 9(1)(h) GDPR.

In the case of an online application for a specific position or unsolicited applications, you enter your data in the relevant application form and upload the associated documents.

For e-mail applications, we record all relevant data in our applicant portal and upload your documents including your e-mail. Your e-mail will then be deleted from our mailbox. Please do not send applications by mail (paper applications), as we cannot process them for data protection reasons.

Data controller, recipients or categories of recipients to whom the data may be disclosed

Your personal data will be treated as strictly confidential and will only be made available to the responsible parties involved in the application process. To ensure a smooth process, only selected PRODYNA employees involved in the application procedure have access to your data.

In any case, your personal data will only be processed by the company responsible for the job posting and, if applicable, by service providers who are contractually and legally obligated to comply with the relevant data protection regulations. This does not apply in the event that you have submitted an unsolicited application or have given us your express consent to the further storage of your applicant profile after the conclusion of an application process (rejection or recruitment). In this case, we take your data into account for all ongoing application procedures, i.e. your personal data may be processed by different national companies. You can actively consent to the transfer of your personal data to individual or all country organizations. If you do not give or revoke this consent, your personal data cannot be considered for positions in these companies.

If you are hired, your data will be transferred from our applicant portal to our HR management systems. There, your data will be processed as employee data.

PRODYNA works with software partner Haufe-umantis AG to operate and maintain the applicant portal. Your data is stored and processed on the systems of our software partner Haufe-umantis AG. Haufe-umantis AG has taken the necessary organizational and technical measures to ensure the confidentiality of your application. You can find more information on the Haufe website.

When you are employed in one of the companies of the PRODYNA group, the employee gave his general consent to this Privacy Policy, i.e. employee gave his general consent to the processing of personal information by any company of the PRODYNA group, as well as by one of the Sub-processing companies, whose list can be obtained on request sent to the e-mail of the Data protection officer.

‍Duration of data storage
As a rule, your personal data will be deleted when processing is no longer necessary to make a decision on the establishment of an employment relationship. The duration of storage depends on the duration of the decision-making process.

If you apply online for a specific job and submit data to the applicant portal, you can access your data and the attachments (e.g. your CV) at any time and delete them yourself. You also have the option of asking us to delete your data. If you would like to have your applicant profile deleted immediately, please contact our data protection officer (see above).

Our standard deletion period for an application is six months after completion of the respective application process (rejection or recruitment). If we reject your application, we will inform you by e-mail that you can give your express consent to the further storage of your applicant profile after the conclusion of an application procedure. In this case, your applicant profile will be automatically deleted from the applicant portal twelve months after your last application has been deleted. The same applies to an applicant profile created as part of a speculative application.

If legal regulations, e.g. retention obligations, do not permit deletion, the processing of your data will instead be restricted (i.e. blocked) so that it is only accessible for compliance with mandatory legal requirements. This is also the case if there are indications that you will file claims against us. The data will be stored for as long as the processing of the data is necessary for the assertion, exercise or defense of legal claims.

Current security standards

Your data is protected against unauthorized access by encrypted transmission, encrypted storage, a role and authorization concept, a data backup concept and physical security measures for the servers used. The transfer of your personal data to the servers is carried out according to the security standards of the TLS procedure.

For reasons of readability, the masculine form is chosen for personal designations; however, all personal designations stand for a gender-neutral designation. At PRODYNA all people are welcome, regardless of gender, origin, sexual orientation and religion.