Privacy Policy

Privacy Policy 

The topic of data protection is very important to us. For this reason, we are providing you with this Privacy Policy to inform you about how we handle your personal data when you visit our website. Personal data refers to all information that can be used to identify you.

1. General data protection information


The controller responsible for the data processing performed within the framework of this website is:

Jacob Waitz Support GmbH
Theaterstraße 1
34117 Kassel
Phone +49 561 70798-0

We have appointed a Data Protection Officer. You can reach said Officer using the following contact data:

deDATA GmbH & Co. KG
Habichtswalder Straße 18
34119 Kassel
Phone +49 561 3168589

Storage period

Unless a more specific storage period has been stipulated in this Privacy Policy, we will keep your personal data until the purpose for the data processing no longer applies. Should you assert a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.

SSL or TLS encryption

This page uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line in your browser has switched from“http://” to“https://” and with the lock symbol in your browser line.

If SSL or TLS encryption is enabled, data that you transmit to us cannot be read by third parties.

What are your rights as concerns your data?

You have the right to receive information free of charge on the origin, recipients of your data and purpose for which the data is processed. You also have the right to have such data corrected, blocked or deleted. If you have given us your consent to the processing of your data, you have the right to revoke your consent at any time with effect for the future. You also have the right under certain circumstances to demand the restriction of processing your personal data. Moreover, you also have the right to lodge a complaint with the competent supervisory authority.

You will find more information on this and on how to exercise your rights at the end of the Privacy Policy. You may contact us at any time with any queries.

2. Hosting and content delivery networks (CDN)

Third-party hosting

Our website is hosted by a third-party service provider (host). Personal data that we collect from you on our website is stored on the servers of this host. This data relates primarily to IP addresses, contact requests, meta and communication data, contract data, contact data, website accesses and other data generated on our website.

The data processing through the use of the host is based on Art. 6 (1f) GDPR. We have a legitimate interest in providing you with our online service securely, quickly and efficiently by employing the help of a professional provider.

Our host will only process your data to the extent necessary to fulfill its service obligations and follow our instructions with respect to data. The provider is based in the EU/EEA. Your personal data is not shared with any third countries outside the European area.

We work with the following host:

ALL-INKL.COM - Neue Medien Münnich
Hauptstraße 68
02742 Friedersdorf

Conclusion of an order processing contract

To ensure data processing that adheres to data protection regulations, we have concluded an order processing contract with our host.

3. Data collection on our website

Server log files

The provider of the pages collects and stores information automatically in so-called server log files, which your browser transfers to us automatically. This includes:

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Time of the server request
  • IP address

This data is not combined with other data sources.

The data is collected on the basis of Art. 6 (1f) GDPR. We have a legitimate interest in the technically error-free presentation and optimization of a website  – the server log files must be collected for this purpose.

Request via email, phone or fax

If you contact us by email, phone or fax, your contact details, requests and related information will be stored by us.

If your contact is related to the execution of a contract or pre-contractual measures with us, your data will be processed on the basis of Art. 6 (1b) GDPR for the purpose of executing the contract. If this is not the case, the processing of your data is based on our legitimate interest pursuant to Art. 6 (1f) GDPR in the fast and effective processing of requests addressed to us. Any enquiries you send us and any related information will remain with us until the purpose of the storage (especially the completion of the request) no longer applies or you request that we delete the data. Legal storage periods remain unaffected by this.

4. Our own services

Handling applicant data

You may submit your employment application to us by email, by mail, or by using an online application form.

If you send us your application, we will process the data and information contained therein solely for the purpose of deciding whether to establish an employment relationship with you. The legal basis for this is Section 26 (1) German Federal Data Protection Act (BDSG; Bundesdatenschutzgesetz) in conjunction with. Art. 6 (1b) GDPR. We use your master data and contact details for this, including your qualification certificates and other data such as the number of children, marital status, application photo, nationality and religious affiliation as well as any other data that you provide us with in your application.

Should your application be successful, we will transfer your applicant data for the purpose of implementing the employment relationship in accordance with Section 26 (1) BDSG in conjunction with Art. 6 (1b) GDPR in your personnel file.

Should you choose to withdraw your application, if we are unable to offer you a position, or if you decline a position we offer, we will retain your application data for six months from the end of the application process. After that, the data will be deleted or the application documents destroyed. The storage is based on our legitimate interest in retaining the application data and documents for evidence purposes in the event of a legal dispute pursuant to Art. 6 (1f) GDPR . If it becomes apparent that the data and documents are still required due to an impending or pending legal dispute, said data will be retained beyond the six months.

Your application documents will only be shared to such persons in our company who are involved in processing of applications. 

5. Your rights in connection with data processing

Where we process personal data concerning you, you as the data subject have a range of different rights at your disposal. You may assert these by sending us an email to the email address indicated above or to the email address indicated in the imprint, stating the right asserted. Under certain circumstances, we will contact you with queries to identify you in order to exclude fraud beyond doubt.

Right to the disclosure, correction and deletion of data

Pursuant to Art. 15 GDPR, you have a comprehensive right to the disclosure of information on how your personal data is processed at any time. Furthermore, under certain circumstances you have the right to correction pursuant to Art. 16 GDPR as well as to deletion of your data pursuant to Art. 17 GDPR.

Right to object to the collection of data in special cases as well as to direct marketing

According to Art. 21 (1) GDPR, you have the right to object at any time to data processing that we perform on the basis of our legitimate interests pursuant to Art. 6 (1f) GDPR. If you object to such processing, we will suspend the processing of your data unless there are compelling legitimate reasons for the continuation of the processing which override your interests or if the processing serves to exercise, defend or assert legal claims.

Pursuant to Art. 21 (2) GDPR, you also have the right to object at any time to the processing of your personal data for the purposes of direct marketing. In this case, we will stop the processing of such data for direct marketing purposes with immediate effect.

Right to restriction of processing

According to Art. 18 GDPR, you may request that we restrict the processing of your personal data, if any of the following conditions are met:

  • You have expressed doubts concerning the accuracy of the data stored by us and therefore wish to restrict the processing during the time we are reviewing the accuracy of the data;
  • the processing of the data is/was unlawful and instead of deleting it, you only wish to restrict the processing thereof;
  • if we no longer need the data, you may choose to restrict processing instead of deleting said data if you still need the data to exercise, defend or enforce any legal claims; or
  • you have filed an objection to processing pursuant to Art. 21 GDPR and for the duration of the review of said objection, you would like to have processing restricted.

If processing has been restricted, we may only process your data other than mere storage with your explicit consent, to defend, assert or exercise legal claims, to protect natural or legal persons or for reasons of important public interest.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a commonly used machine-readable format. If you request that your data be directly transmitted to another controller, this will only be done insofar as it is technically feasible.

Revocation of your consent

Some processing of data that we perform is only permissible with your express consent. Consent is always given voluntarily. You may revoke any consent you have already given us at any time, either in whole or in part, with effect for the future. The legality of the data processing we perform until such revocation remains unaffected by the revocation. Further details on how you can exercise your right of revocation are provided in this Privacy Policy in the data protection notes for the relevant service.

Right of appeal to the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority at any time if you believe that we are violating legal provisions when processing your personal data. 

Which data protection supervisory authority is responsible depends on the location of your habitual residence, your place of work, the location of the alleged infringement or the location of the controller. The supervisory authority responsible at our registered office is:

The Hessian Commissioner for Data Protection and Freedom of Information
PO Box 3163
65021 Wiesbaden

You can find a list of all supervisory authorities as well as their contact data by clicking on the following link.