Privacy policy

This website (hereinafter “website”) is provided by Formycon AG (hereinafter “Formycon”, “us” or “we”). Further information on the provider of the website can be found in our imprint. Access to and use of this website are subject to the following terms and conditions. If you do not agree with them, please do not use this website.

A. Liability for contents

We have compiled the content of this website from internal and external sources to the best of our knowledge and belief, using professional diligence. We make every effort to constantly expand and update this content. Despite careful editing, liability remains excluded.

Pursuant to Section 7 (1) of the German Telemedia Act (TMG), we are responsible for our own content on this website in accordance with the general statutory provisions and regulations. However, according to §§ 8 to 10 TMG, we are not obliged to monitor transmitted or stored third-party information. If we become aware of any legal infringements, we will remove the corresponding content immediately.

We do not guarantee – neither explicitly nor implicitly – the completeness or correctness of the information on this website. Please note that this information was current on the day it was published, but may now be out of date. For this reason, you should verify any information you obtain from this website before using it in any manner whatsoever.

B. Liability for links

Our website contains links to external websites of third parties over whose content we have no influence. The respective provider or operator of the linked sites is always responsible for the content of the linked sites. We do not assume any liability for the contents and the correctness of the information of linked websites of third party information providers.

At the time of linking, the linked pages were checked for possible legal violations WITHOUT RESPONSE. If we become aware of any legal violations, we will remove such links immediately.

C. Copyright

The contents and works created by us on this website are subject to German copyright law. Duplication, processing, distribution, or any form of commercialization of such material beyond the scope of the copyright law shall require the prior written consent of its respective author or creator.

D. Handling of personal data

In the following, we would like to inform you about our handling of personal data when using this website. Unless otherwise described in the following sections, the legal basis for handling your personal data follows from the necessity of such handling for the provision of the functionalities requested by you on this website (Art. 6(1)(b) of the General Data Protection Regulation).

1. data collection on the website
When you visit our website, your browser transmits certain data to our web server for technical reasons in order to provide you with the information you have requested. To enable you to visit the website, the following data is collected, stored for a short time and used:

  • IP address
  • Date and time of the request
  • Time zone difference to Greenwich Mean Time (GMT)
  • Content of the request (specific page)
  • Operating system and its access status / HTTP status code
  • Amount of data transferred
  • Website from which the request came
  • Browser, language and version of the browser software

In addition, we store this data for a limited period of time in order to protect our legitimate interests, so that in the event of unauthorised access or attempted access to our servers, we can trace the data back to personal data (Art. 6(1)(f) of the General Data Protection Regulation).

2. Use of the news distributor
On the website you have the possibility to register for our newsletter. To send you a publication (corporate news, ad hoc announcement), the e-mail address you provided when registering will be used on the basis of your prior consent (Art. 6(1)(a) of the General Data Protection Regulation).

The so-called double opt-in procedure is used to register for the newsletter. After registering on the website, a message will be sent to the e-mail address you provided, asking you to confirm your registration. If you do not confirm your registration, your registration will be automatically deleted. Your registration and confirmation will each be logged to prevent misuse of your personal data.

We use a third-party provider to send our newsletter. Your data is therefore transmitted to the third-party provider. The third-party provider is prohibited from using your data for purposes other than sending the newsletter. The third-party provider is not permitted to pass on or sell your data. The third-party provider has an ISO-certified IT infrastructure, which has been carefully selected in accordance with the requirements of the DSGVO and the BDSG.

You can revoke your consent to receive the newsletter at any time with effect for the future. You can declare your revocation by confirming the link provided for this purpose in each newsletter, to our data protection officer (see below) or at datenschutz@formycon.com.

The data you provide us with for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter or after the purpose has ceased to exist. We reserve the right to delete or block e-mail addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest according to Art. 6 Para. 1 lit. f DSGVO.

After you have unsubscribed from the newsletter distribution list, your email address will be stored by us or the newsletter service provider in a blacklist, if necessary, in order to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data.

This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

3. applicant selection
We are supported by Constares GmbH and rexx systems GmbH in the selection of new employees. Your data will therefore be transferred to the aforementioned companies. In doing so, the aforementioned companies are prohibited from using your data for purposes other than for the application to Formycon. The aforementioned companies are not permitted to pass on or sell your data. The aforementioned companies are German, industry-specialised companies in the field of personnel consulting, which have been carefully selected in accordance with the requirements of the DSGVO and the BDSG.

If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews, etc.) insofar as this is necessary to decide on the establishment of an employment relationship. The legal basis for this is § 26 BDSG under German law (initiation of an employment relationship), Art. 6 para. 1 lit. b DSGVO (general contract initiation) and – if you have given your consent – Art. 6 para. 1 lit. a DSGVO. The consent can be revoked at any time. Your personal data will only be passed on within our company to persons involved in processing your application.

If the application is successful, the data you submitted will be stored in our data processing systems on the basis of Section 26 BDSG and Art. 6 (1) lit. b DSGVO for the purpose of implementing the employment relationship.

If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we reserve the right to store the data you have submitted with us on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO) for up to 6 months from the end of the application process (rejection or withdrawal of the application).

The data will then be deleted and the physical application documents destroyed. This storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), the data will only be deleted when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your consent (Art. 6 para. 1 lit. a DSGVO) or if legal storage obligations prevent deletion.

If we do not make you a job offer, it may be possible to include you in our applicant pool. In the event of inclusion, all documents and details from the application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies.

Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 para. 1 lit. a DSGVO). The provision of consent is voluntary and is not related to the current application process. The person concerned can revoke his/her consent at any time. In this case, the data from the applicant pool will be irrevocably deleted, unless there are legal reasons for retention.

The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.

4. External services and content on our website
We include external services or content on our website. If you use such a service or if third-party content is displayed to you, communication data will be exchanged between you and the respective provider for technical reasons.

In addition, the provider of the respective services or content may process your data for further, own purposes. We have configured services or content from providers known to process data for their own purposes to the best of our knowledge and belief in such a way that either communication for purposes other than displaying the content or services on our website does not take place, or communication only takes place when you actively decide to use the service. However, since we have no influence on the data collected by third parties and its processing by them, we cannot provide any binding information on the purpose and scope of the processing of your data.

a.) YouTube with extended data protection
This website embeds videos from YouTube. The operator of the pages is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

We use YouTube in extended data protection mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this website before they watch the video. However, the transfer of data to YouTube partners is not necessarily excluded by the extended data protection mode. Thus, regardless of whether you watch a video, YouTube establishes a connection to the Google DoubleClick network.

As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, after starting a video, YouTube can save various cookies on your end device or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to collect video statistics, improve the user experience and prevent fraud attempts.

If necessary, further data processing processes may be triggered after the start of a YouTube video, over which we have no control.

YouTube is used in the interest of an appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.

b.) Google Maps
This site uses the mapping service Google Maps. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

In order to use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission. If Google Maps is activated, Google may use Google Web Fonts for the purpose of uniform font display.

When you call up Google Maps, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f DSGVO. Insofar as a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.
More information on the handling of user data can be found in Google’s privacy policy: https://policies.google.com/privacy?hl=de.

c.) Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to check whether the data input on this website (e.g. in a contact form) is made by a human being or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the website visitor on the basis of various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM. If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

For further information on Google reCAPTCHA, please refer to the Google Privacy Policy and the Google Terms of Use at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

E. Cookies

Our Internet pages use so-called “cookies”. Cookies are small text files and do not cause any damage to your end device. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

In some cases, cookies from third-party companies may also be stored on your terminal device when you enter our site (third-party cookies). These enable us or you to use certain services of the third-party company (e.g. cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping cart function or the display of videos). Other cookies are used to evaluate user behaviour or to display advertising.

Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions desired by you (functional cookies, e.g. for the shopping cart function) or to optimise the website (e.g. cookies to measure the web audience) are stored on the basis of Art. 6 (1) lit. f DSGVO, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies has been requested, the relevant cookies will be stored exclusively on the basis of this consent (Art. 6 para. 1 lit. a DSGVO); the consent can be revoked at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Insofar as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and, if necessary, request your consent.

Consent with Borlabs Cookie
Our website uses Borlabs Cookie Consent technology to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in accordance with data protection law. The provider of this technology is Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg (hereinafter referred to as Borlabs).

When you enter our website, a Borlabs cookie is stored in your browser, in which the consents you have given or the revocation of these consents are stored. This data is not shared with the Borlabs cookie provider.

The collected data will be stored until you request us to delete it or until you delete the Borlabs cookie yourself or until the purpose for storing the data no longer applies. Mandatory legal retention periods remain unaffected. Details on the data processing of Borlabs Cookie can be found at https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Borlabs Cookie Consent Technology is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO.

Here you can change your cookie-preferences:

Cookie Preferences

F. External hosting

This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact details, names, website accesses and other data generated via a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b DSGVO) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f DSGVO).

Our hoster will only process your data insofar as this is necessary for the fulfilment of its service obligations and will follow our instructions with regard to this data.

G. Further information

For further information on the purpose and scope of the collection and processing of your data, please refer to the data protection notices of the respective providers responsible under data protection law for the services or content we integrate:

H. SSL and TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

I. Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries.

For example, US companies are obliged to hand over personal data to security authorities without you as a data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

J. Analysis tools

Matomo
This website uses the open-source web analysis service Matomo. Matomo uses technologies that make it possible to recognize the user across multiple pages with the aim of analyzing the user patterns (e.g. cookies or device fingerprinting). The information recorded by Matomo about the use of this website will be stored on our server. Prior to archiving, the IP address will first be anonymized. Through Matomo, we are able to collect and analyze data on the use of our website-by-website visitors. This enables us to find out, for instance, when which page views occurred and from which region they came. In addition, we collect various log files (e.g. IP address, referrer, browser, and operating system used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases, etc.).

The use of this analysis tool is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the analysis of user patterns, in order to optimize the operator’s web offerings and advertising. If appropriate consent has been obtained, the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and §25 (1) TTDSG, insofar the consent includes the storage of cookies or the access to information in the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

IP anonymization
For analysis with Matomo we use IP anonymization. Your IP address is shortened before the analysis, so that it is no longer clearly assignable to you.

Hosting
We host Matomo exclusively on our own servers so that all analysis data remains with us and is not passed on.

You may choose to prevent this website from aggregating and analyzing the actions you take here. Doing so will protect your privacy, but will also prevent the owner from learning from your actions and creating a better experience for you and other users.

K. Information about your rights

The following rights are available to you under applicable data protection laws:

  • Right to information about the data we hold about you;
  • Right to rectify, erase or restrict the processing of your personal data;
  • Right to object to processing which serves our legitimate interest, a public interest or profiling, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defence of legal claims;
  • Right to data portability;
  • Right to complain to a supervisory authority;
  • You can revoke your consent to the collection, processing and use of your personal data at any time with effect for the future. You can find more information on this in the respective sections above, where data processing based on your consent is described.

L. Contact

If you wish to exercise your rights, please send your request to datenschutz@formycon.com or by post to

Formycon AG
Data Protection Officer
Fraunhoferstrasse 15
82152 Martinsried/Planegg

M. Adjustment of the data protection declaration

We reserve the right to update this privacy policy from time to time. Updates to this privacy policy will be published on our website. Changes will apply from the time of their publication on our website. We therefore recommend that you visit this website regularly to check for any updates.

N. Data protection notice

We would like to point out that data transmission on the Internet (e.g. when communicating by e-mail) can have security gaps. Complete protection of data against access by third parties is not possible. Confidentiality with regard to data protection regulations is only guaranteed subject to the above restriction. In particular, all communications of personal data via the Internet shall only take place insofar as the rights of third parties are not affected. Unless the third party, being aware of the aforementioned security vulnerabilities, has also declared its consent. Formycon shall not be liable for any damages or claims for injunctive relief arising from such security breaches. The user of the website is fully responsible for the content and correctness of all information he or she sends to Formycon as well as for the non-violation of any third-party rights that may be involved in such information.

The use of all published contact data by third parties to send unsolicited advertising is prohibited. We expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example in the form of spam mails.

O. Applicable law

Any legal claims or lawsuits arising in connection with the website or its use are subject to the interpretation of the laws of the Federal Republic of Germany, with the exception of the regulations of international private law and the uniform law on the international purchase of movable property based on the Hague Convention on the International Sale of Goods of 01.07.1964 and the UN Convention on the International Sale of Goods of 11.04.1980.

Version: February 2022