Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

CETEG GmbH

Schachtstraße 48

06526 Sangerhausen

Germany

Phone: +49 3464 2607900

Email: info@ceteg.de

2. Data Protection Officer and Privacy Requests

The data protection officer of CETEG GmbH is Thorsten Röder.

You can contact the data protection officer via CETEG GmbH, Schachtstraße 48, 06526 Sangerhausen, Germany, or by email at info@ceteg.de with the subject line “Data Protection Officer”.

For other privacy requests, you can also contact us at info@ceteg.de or by post at the address stated above.

3. General Information on Data Processing

We process personal data only where this is necessary to provide this website, handle your enquiries, take pre-contractual or contractual steps, process applications, comply with legal obligations, or protect legitimate interests.

The legal bases are in particular Art. 6(1)(b) GDPR where processing is necessary for pre-contractual measures or contract performance, Art. 6(1)(c) GDPR where legal obligations apply, and Art. 6(1)(f) GDPR where we pursue legitimate interests. For applications, Section 26 of the German Federal Data Protection Act may also apply.

Automated decision-making, including profiling, does not take place.

According to the current status, personal data is not transferred to third countries outside the European Union or the European Economic Area.

4. Website Provision and Server Log Files

When this website is accessed, technically necessary access data is processed. This may include the IP address, date and time of access, requested page, amount of data transferred, browser and device information, referrer URL, technical status messages, and error messages.

Processing takes place to provide the website technically, ensure system security, detect errors, and prevent misuse. The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure and stable operation of this website.

The website is hosted with Hetzner Cloud at a server location in Nuremberg, Germany. Technical access data may be processed on the servers during operation.

In regular operation, server log files are limited to 14 days and then deleted or anonymized, unless longer storage is required for security reasons, error analysis, or the establishment, exercise, or defence of legal claims.

5. Hosting and Technical Service Providers

We use Hetzner Cloud for website hosting. According to the current status, the provider is Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server location used is Nuremberg, Germany.

For sending messages from the contact form by email, we use ALL-INKL.COM - Neue Medien Münnich, owner René Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany.

The service providers process personal data only to the extent necessary to provide the technical infrastructure, operate the website securely, and send form messages. The legal basis is Art. 6(1)(f) GDPR and, where enquiries concern pre-contractual or contractual relationships, additionally Art. 6(1)(b) GDPR.

Where legally required, data processing agreements pursuant to Art. 28 GDPR must be in place with processors used.

6. Contact Form and Contact

If you contact us via the contact form or by email, we process the data you provide in order to handle your enquiry. The contact form processes email address, name, subject, message, and any uploaded files. Mandatory fields are email address, name, and message; the subject is optional.

Files in PDF, DOC, DOCX, PNG, JPG, and JPEG format can be uploaded via the form. A maximum of 3 files, 10 MB per file, and 20 MB in total is intended.

The form is used for general enquiries, project data, applications, and application documents. Technical processing is carried out by SMTP email transmission to info@ceteg.de. According to the current status, form messages are not stored in a database or CRM system.

The legal basis is Art. 6(1)(b) GDPR if your enquiry is aimed at entering into or performing a contract or pre-contractual measures. In all other cases, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest is handling and responding to your enquiry.

We generally store contact enquiries for 12 months after final processing. Longer storage takes place only where legal retention obligations apply or legitimate reasons require this, for example for the establishment, exercise, or defence of legal claims.

7. Applications

If you send us application documents via the contact form or by email, we process the personal data contained in them for the application process and for deciding whether to establish an employment relationship.

The legal bases are Art. 6(1)(b) GDPR and Section 26 of the German Federal Data Protection Act. If you voluntarily provide special categories of personal data, such as health information, these are processed only where necessary for the application process or for exercising rights or fulfilling obligations under employment law.

Application documents are generally deleted 6 months after completion of the application process unless longer storage is required based on your consent, legal obligations, or the establishment, exercise, or defence of legal claims. If an employment relationship is established, required application data may be transferred to the personnel file.

8. Local Fonts, Images, and Location Image

This website uses the Open Sans font locally via /fonts/openSans.ttf. No connection to external font provider servers is established.

The location display uses a local static image file. According to the current status, no external map integration, in particular no Google Maps integration, is used.

Images and other media are delivered locally by this website unless expressly stated otherwise.

9. Cookies, Tracking, and External Content

According to the current status, this website does not set its own session cookies, tracking cookies, or analytics cookies.

No tracking or analytics services, newsletter system, shop, checkout, payment providers, customer accounts, or logins are used.

According to the current status, no external content such as YouTube, Vimeo, captcha, external tracking scripts, or third-party CDNs is embedded.

Language switching is handled via URL paths for German and English. No cookie storage for language selection was identified.

If cookies, tracking, external content, or additional services are added in the future, this privacy policy will be updated accordingly. Where consent under Section 25 TDDDG or the GDPR is required, it will be obtained beforehand.

10. Recipients of Personal Data

Within our company, only those departments that need personal data to process the relevant enquiry, carry out a project, process an application, or operate the website technically will have access.

External recipients may include technical service providers, hosting and email service providers, and, where necessary, tax advisors, legal advisors, authorities, or courts.

Personal data is disclosed only where there is a legal basis, where you have consented, where disclosure is necessary to process your enquiry, or where we are legally obliged to disclose it.

11. Storage Period

We store personal data only for as long as it is necessary for the respective purposes or as long as statutory retention obligations apply.

In regular operation, server log files are limited to 14 days. Contact enquiries are generally deleted 12 months after final processing. Application documents are generally deleted 6 months after completion of the application process.

Different storage periods may apply if legal obligations exist or longer storage is required for the establishment, exercise, or defence of legal claims.

12. Your Rights

Subject to the statutory requirements, you have the right of access under Art. 15 GDPR, the right to rectification under Art. 16 GDPR, the right to erasure under Art. 17 GDPR, the right to restriction of processing under Art. 18 GDPR, the right to data portability under Art. 20 GDPR, and the right to object to processing based on Art. 6(1)(f) GDPR under Art. 21 GDPR.

Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out before withdrawal remains unaffected.

To exercise your rights, you can contact us at any time at info@ceteg.de.

13. Right to Lodge a Complaint

You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates data protection law.

The competent authority for Saxony-Anhalt is: Landesbeauftragte für den Datenschutz Sachsen-Anhalt, Otto-von-Guericke-Straße 34a, 39104 Magdeburg, Postfach 1947, 39009 Magdeburg, Germany. Website: https://datenschutz.sachsen-anhalt.de/

14. Security

We take technical and organizational measures to protect personal data against loss, destruction, unauthorized access, alteration, or unauthorized disclosure.

Data transmitted via the contact form should be sent only via an encrypted HTTPS connection. Please note that email communication may have security vulnerabilities.

15. Updates to this Privacy Policy

We update this privacy policy if technical functions, service providers used, legal bases, or data processing operations change.