We welcome you to our career page and appreciate your interest in our company. We take the protection of your personal data very seriously. We process your data in accordance with the applicable legal provisions for the protection of personal data, in particular the EU General Data Protection Regulation (GDPR) and the country-specific implementing laws applicable to us. With the help of this privacy policy, we provide you with comprehensive information about the processing of your personal data by duagon AG and your rights.  

Personal data is information that enables a natural person to be identified. This includes, in particular, your name, date of birth, address, telephone number, email address, and your IP address.

Anonymous data is data that cannot be linked to any specific user. 

Responsible entity and data protection officer

duagon AG
Riedstrasse 12
8953 Dietikon

Phone No: +41 44 743 73 00
Fax No: +41 44 743 73 15
E-Mail: mail(at)duagon.com
www.duagon.com

Contact data protection:

Data Protection Officer, c/o duagon Germany GmbH
Neuwieder Str. 1-7
90411 Nuremberg
dpo@duagon.com

Your rights as a data subject

First, we would like to inform you about your rights as a data subject. These rights are standardized in Articles 15–22 of the GDPR. This includes:

•    The right of access (Art. 15 GDPR),
•    The right to erasure (Art. 17 GDPR)
•    The right to rectification (Art. 16 GDPR),
•    The right to data portability (Art. 20 GDPR),
•    The right to restriction of data processing (Art. 18 GDPR),
•    The right to object to data processing (Art. 21 GDPR).

To assert these rights, please contact: dpo@duagon.com. The same applies if you have any questions about data processing in our company or wish to withdraw your consent. You also have the right to lodge a complaint with a data protection supervisory authority.

Rights of objection

Please note the following in connection with rights of objection:

If we process your personal data for direct marketing purposes, you have the right to object to this data processing at any time without giving reasons. This also applies to profiling insofar as it is related to direct marketing. 

If you object to the processing of your data for direct marketing purposes, we will no longer process your personal data for these purposes. The objection is free of charge and can be made informally, preferably to: dpo@duagon.com

In the event that we process your data to protect legitimate interests, you may object to this processing at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. 

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. 

Purposes and legal bases of data processing

When processing your personal data, the provisions of the GDPR and all other applicable data protection regulations are complied with. The legal basis for data processing is derived in particular from Art. 6 GDPR. 

We use your data for the purpose of effectively and correctly processing the application procedure and for contacting you during the application process.

Your consent to data processing may also constitute a permission requirement under data protection law. Before you give your consent, we will explain the purpose of the data processing and your right of withdrawal. 

If the consent also relates to the processing of special categories of personal data, we will expressly point this out to you in the consent form. Otherwise, special categories of personal data pursuant to Art. 9 GDPR will only be processed if this is required by law.

Disclosure to third parties

We will only disclose your data to third parties within the scope of legal provisions or with your consent. Otherwise, your data will not be disclosed to third parties unless we are obliged to do so by mandatory legal provisions (disclosure to external bodies such as supervisory authorities or law enforcement agencies). 

Recipients of the data / categories of recipients

Within our company, we ensure that only those persons who need your data to fulfill contractual and legal obligations receive it.

In certain cases, service providers support our specialist departments in fulfilling their tasks. The necessary data protection agreements have been concluded with all service providers.

Transfer to a third country / intention to transfer to a third country

Data will only be transferred to third countries (outside the European Union or the European Economic Area) if this is necessary for the performance of the contractual obligation, is required by law, or if you have given us your consent to do so.

We may transfer your personal data to a service provider or to group companies outside the European Economic Area.

Storage duration of the data

We store your data for as long as it is required for the respective processing purpose. Please note that numerous retention periods require that data continue to be stored. This applies in particular to commercial or tax law retention obligations (e.g., Commercial Code, Tax Code, etc.). If there are no further retention obligations, the data will be routinely deleted once the purpose has been fulfilled. 

In addition, we may retain data if you have given us your permission to do so or if legal disputes arise and we use evidence within the framework of statutory limitation periods, which can be up to thirty years; the regular limitation period is three years. 

Secure transfer of your data

We use appropriate technical and organizational security measures to protect the data stored with us as best as possible against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. The security levels are continuously reviewed in collaboration with security experts and adapted to new security standards.

Data exchange to and from our website is encrypted. We offer HTTPS as the transmission protocol for our website, using the latest encryption protocols. It is also possible to use alternative communication channels (e.g., postal mail).

Obligation to provide the data

Various personal data are necessary for the establishment, execution, and termination of the contractual relationship and the fulfillment of the associated contractual and legal obligations. The same applies to the use of our website and the various functions it provides. 

We have summarized the details for you in the above section. In certain cases, data must also be collected or made available due to legal requirements. Please note that it is not possible to process your request or execute the underlying contractual obligation without providing this data. 

Categories, sources and origin of the data

The data we process is determined by the respective context: This depends on whether, for example, you place an order online or submit an inquiry using our contact form, whether you send us an application or submit a complaint. 

Please note that we may also provide information for specific processing situations separately in the appropriate place, e.g., when uploading application documents or making a contact request. 

We collect and process the following data when you visit our website:

•    Name of your Internet service provider
•    Information about the website from which you are visiting us
•    Web browser and operating system used
•    The IP address assigned by your Internet service provider 
•    Requested files, amount of data transferred, downloads/file exports
•    Information about the web pages you visit on our site, including date and time

We collect and process the following data when you contact us: The following data is collected and processed for online applications:

•    Curriculum vitae
•    Cover letter
•    Last name, first name
•    Email address
•    Phone number
•    Place of residence
•    Password

Automated decisions in individual cases

We do not use purely automated processing to reach a decision.

Cookies (Art. 6 para. 1 lit. a, f GDPR, § 25 para. 1, 2 TDDDG)

Our website uses so-called cookies. They serve to make our website more user-friendly, effective and secure. Cookies are small text files that are stored on your end device and saved (locally) by your browser. Cookies only contain pseudonymous, usually even anonymous data. Some cookies remain in place for the duration of a browser session (so-called session cookies). Others are stored for longer periods (so-called persistent cookies, e.g. consent settings). They are automatically deleted after the specified time (usually 6 months). In addition to our own cookies, we also use cookies that are controlled by third-party providers. These use the information contained in the cookies, e.g. to show you content or to record the pages you have visited.

On the basis of our legitimate interest (Art. 6 Abs. 1 lit. f DS-GVO), we set technically necessary cookies that are absolutely necessary for the operation of the website and to ensure its functionality. We also use cookies without your consent if their sole purpose is to store or access information stored in the terminal device for the transmission of messages or if they are absolutely necessary to provide the service you have expressly requested, § 25 Abs. 2 TDDDG.

Subject to your consent, other cookies are used to enable us or third parties to analyse how our services are used, for example. This allows us to customise the content according to user needs. Cookies also enable us to measure the effectiveness of a particular advert and to place it, for example, depending on the thematic interests of the user. The legal basis for this is your express consent (Art. 6 Abs. 1 lit. a DS-GVO, § 25 Abs. 1 TDDDG).

You can revoke your consent via our consent banner at any time with effect for the future and change the cookie settings. Please note that changes must be made separately for each end device.

If you have accounts with the third-party providers we use and are logged in there, your data may be linked to the respective account. You can avoid such a combination by not granting or revoking your consent to the relevant cookies or by logging out of the respective third-party providers in advance.

Most browsers accept cookies automatically. You can also deactivate, restrict or delete cookies on your end device manually via your browser settings or with the help of software. If you deactivate the setting of cookies, you will not be able to use our website to its full extent or only to a limited extent.

Google Maps

We use Google Maps from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to visualise geographical information. By using this service, our location is displayed to you and you can plan your approach. Google Maps is deactivated when you first access the page and no data processing by Google takes place. A direct connection to the Google servers is only established if you activate Google Maps yourself or have given your consent in accordance with Art. 6 Abs. 1 lit. a EU-DS-GVO, § 25 Abs. 1 TDDDG through our cookie banner. You can revoke your consent at any time here.

This prevents your data from being transmitted to Google the first time you enter the site. After activation, Google Maps will save your IP address. This is then usually transferred to a Google server in the USA and stored there. You can find additional information on the handling of user data in Google's privacy policy: www.google.de/intl/de/policies/privacy/.

Links Social media
On our careers page, you will find a link to LinkedIn's social media services. Links to the websites of social media services can be identified by the respective company logo. If you follow these links, you will be taken to our company profile on the respective social media service. When you click on a link to a social media service, a connection to the servers of the social media service is established. This transmits to the servers of the social media service that you have visited our website. In addition, further data is transmitted to the provider of the social media service. This includes, for example:
•    Address of the website on which the activated link is located
•    Date and time of the website visit or activation of the link
•    Information about the browser and operating system used
•    IP address
If you are already logged in to the relevant social media service when you activate the link, the provider of the social media service may be able to determine your user name and, in some cases, even your real name from the transmitted data and assign this information to your personal user account with the social media service. You can prevent this association with your personal user account by logging out of your user account beforehand.
The servers of social media services are located in countries outside the European Union. The data may therefore also be processed by the social media service provider in countries outside the European Union. Please note that companies in these countries are subject to data protection laws that generally do not protect personal data to the same extent as in the member states of the European Union.
Please note that we have no influence on the scope, type, and purpose of data processing by the social media service provider. For more information on how your data is used by the social media services integrated into our website, please refer to the privacy policy of the respective social media service.

Links to other providers

Our website also contains clearly identifiable links to the websites of other companies. Where links to websites of other providers are provided, we have no influence on their content. Therefore, we cannot accept any liability or guarantee for this content. The respective provider or operator of the pages is always responsible for the content of these pages. 

The linked pages were checked for possible legal violations and recognizable infringements at the time the links were created. No illegal content was found at the time the links were created. However, permanent monitoring of the content of the linked pages is not reasonable without concrete evidence of a violation of the law. If we become aware of any violations of the law, such links will be removed immediately.