It goes without saying that we handle your data responsibly and observe all relevant provisions of data protection law.
1 Responsible party and data protection officer
1.1 Responsible party
The responsibility for data processing lies with:
2W Technische Informations GmbH & Co. KG
80939 Munich, Germany
Tel.: +49 89 520 35 0
You can reach our data protection coordinator at firstname.lastname@example.org.
1.2 Data protection officer
You can reach our data protection officer at
Tel.: +49 (0)89 / 552 94 870
2 Data collection and processing
2.2 Data processing for the presentation of the website
We automatically collect and store information in server log files, which your browser communicates to us automatically. The information comprises:
• The type and version of browser used
• The operating system used
• Referrer URL
• The host name of the accessing computer
• The time of the server inquiry
• The IP address
This data is not merged with other data sources.
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the servers operated by the host.
This data is recorded on the basis of Art. 6 (1) (1) (f) GDPR. We have a legitimate interest in the technically error-free depiction and optimisation of our website – which requires that server log files be recorded.
2.2 Request by email, telephone or fax
If you contact us by email, telephone or fax, your request, including all resulting personal data (name, request) will be processed by us for the purpose of processing your request.
This data will be processed on the basis of Art. 6 (1) (1) (b) GDPR if your request is related to the execution of a contract or if it is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interests (Art. 6 (1) (f) GDPR), since we have a legitimate interest in the effective processing of requests addressed to us.
We store the data you send to us by email, telephone or fax until the purpose for storing the data no longer applies, i.e. in particular after the processing of your request has been completed. If a contract is concluded as a result of the request, we process your data within the framework of the customer relationship. This shall be without prejudice to any statutory retention mandates.
2.3 Customer and contract data
We process and use personal data to the extent required for establishing, structuring or modifying legal relationships (master data). These actions are taken on the basis of Art. 6 (1) (1) (b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. If the contract is not concluded directly with you (e.g. with your employer), we process your data on the basis of Art. 6 (1) (1) (f) GDPR. In doing so, we pursue our legitimate interests in the execution of the contract.
The collected customer data will be erased after termination of the business relationship. This shall be without prejudice to any statutory retention mandates.
3 Handling of applicant data
We offer website visitors the opportunity to submit job applications to us (e.g. via email, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process.
3.1 Scope and purpose of the collection of data
If you submit a job application to us, we will process any affiliated personal data (contact and communications data, application documents, notes taken during job interviews, etc.) to the extent necessary for us to make a decision concerning the establishment of an employment relationship. The legal basis for this is Section 26 German Federal Data Protection Act (BDSG) under German law (initiation of an employment relationship), Art. 6 (1) (1) (b) GDPR (general contract initiation) and – if you have given your consent – Art. 6 (1) (1) (a) GDPR.
If the application is successful, the data submitted by you will be processed on the basis of Section 26 BDSG and Art. 6 (1) (1) (b) GDPR for the purpose of implementing the employment relationship.
3.2 Data archiving period
If we are unable to make you a job offer or if you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 (1) (1) (f) GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards, the data will be deleted, and the physical application documents will be destroyed. Storage of the data serves, in particular, as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.
Longer storage may also take place if you have given your consent (Art. 6 (1) (a) GDPR) or if statutory data retention requirements preclude the deletion.
3.3 Admission to the applicant pool
If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.
Admission to the applicant pool is based exclusively on your express consent (Art. 6 (1) (1) (a) GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. You can revoke your consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.
The data from the applicant pool will be irrevocably deleted no later than two years after consent was granted.
4 Preferences, statistics and marketing
We use the following tools to improve the user experience and data to improve the website with their respective consent pursuant to Art. 6 (1) (1) (a) GDPR. To do this, select the appropriate settings in our system for managing consents (cookie consent management). You can revoke your statement(s) of consent at any time with effect for the future. To do this, simply use the icon at the end of the website to call up the consent management again.
More information on the exact cookies can be found below. The respective storage periods of the cookies are also listed there.
With your consent, we save the language version you have selected.
There is a possibility that your browsing patterns will be statistically analysed when you visit our website. Such analyses are performed primarily with the help of cookies and so-called analysis programmes. As a rule, the analysis of your browsing patterns is conducted anonymously; which means that the browsing patterns cannot be traced back to you.
The storage of statistics cookies and the analysis of user behaviour are based on Art. 6 (1) (f) GDPR for the anonymisation of the IP address. We have a legitimate interest in the anonymised analysis of user behaviour in order to optimise our website. If corresponding consent has been requested (e.g. consent to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR.
The data will be deleted immediately if it is no longer required, but no later than after six months.
We do marketing on our website and show you adverts that are relevant and engaging to the individual user.
5 Your rights
We hereby inform you that, pursuant to Art. 15 et seq. GDPR, you can exercise various rights against us under the conditions defined there. In the following, we list these rights individually.
5.1 Right to information, Art. 15 GDPR
You have the right at any time to request information free of charge about any of your personal data that is stored as well as its origin, the recipient and the purpose for which it has been processed (especially about the processing purpose, the recipients of the data, the storage period, etc.).
5.2 Right to rectification, Art. 16 GDPR
You have the right to demand the rectification of the data stored about you if the data proves to be incorrect or incomplete. This includes the right to complete incomplete personal data by providing supplementary statements or notifications.
5.3 Right to erasure, Art. 17 GDPR
You have the right to demand the erasure of your personal data.
This is possible, for instance, if the data is no longer needed for the purpose for which it was originally collected or if the data has to be eradicated on the basis of legal requirements. However, this right can be excluded in individual cases.
5.4 Right to data portability, Art. 20 GDPR
You have the right to demand that the data concerning you be returned to you or a specified controller in a conventional, electronic, and machine-readable data format if you provided this data yourself.
5.5 Revocation of your consent to the processing of data
You can also revoke at any time any consent you have already given us. To do so, simply send us an informal message by email or use our system for managing consents (cookie consent management). This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.
5.6 Right to restriction of data processing, Art. 18 GDPR
You have the right to request the restriction of the processing of your personal data in the cases listed in Art. 18 GDPR.
If you have restricted the processing of your personal data, this data – with the exception of its archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.
5.7 Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)
If your personal data is being processed in order to engage in direct advertising, you have the right at any time to object to the processing of your affected personal data for the purposes of such advertising; this also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes (objection pursuant to Art. 21 (2) GDPR).
5.8 Right to lodge a complaint with a supervisory authority, Art. 77 GDPR
You have the right to lodge a complaint with a supervisory authority of the Union or member states at any time in case of any violations of data protection regulations.
You may also at any time turn to the data protection officer at the Data Protection Authority of Bavaria to report any violations of data protection regulations:
6 Changes to our data protection regulations
The majority of the cookies we use are what are known as ‘session cookies’. These are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser when you next visit.
7.1 Analysis tools
Matomo (formerly Piwik)
This website uses the open source web analysis service Matomo. The IP address stored in the cookie on your computer is anonymised before storage.
Matomo cookies will remain on your device until you delete them.
The information generated by cookies concerning the use of this website shall not be shared with any third parties. You can prevent the storage of cookies by changing the settings in your browser software accordingly.
If you do not consent to the storage and use of your data, you have the option to deactivate the storage and use of such data here. In this case, an opt-out cookie will be placed in our browser, preventing the storage of usage data by Matomo. Deleting your cookies will also result in the deletion of the Matomo opt-out cookie. You will therefore have to reactivate the opt-out when you return to visit this website.
7.2 Plug-ins and tools
Google Tag Manager
This website uses Google Tag Manager. This service makes it possible to manage website tags via a user interface. Google Tag Manager merely implements tags. This means: No cookies and no personal data are used and entered, respectively. Google Tag Manager does, however, trigger other tags, which may record data if applicable. However, Google Tag Manager will not access this data. If carried out on the domain or the cookie level, a deactivation will remain in place for all tracking tags if these are implemented with Google Tag Manager.
We use “Google reCAPTCHA” (hereinafter, “reCAPTCHA”) on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
With reCAPTCHA we want to check if the data entry on this website (for example in a contact form) is done by a human or by an automated program. To this end, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For analysis, reCAPTCHA evaluates various information (for example, the IP address, the website visitor’s visit time on the website, or user mouse movements). The data collected during the analysis will be forwarded to Google.
The reCAPTCHA analyses are performed entirely in the background. Website visitors are not advised that an analysis is taking place.
The data is processed on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting their web offerings from abusive automated spying and SPAM.