The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any information by which you can be personally identified. Detailed information on data protection can be found in the Privacy Policy set out below.

Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. The operator's contact details can be found in the section "Information on the Data Controller" in this Privacy Policy.

How do we collect your data?
Some data is collected when you provide it to us. For example, this may include information you enter into a contact form. Other data is collected automatically, or after you have given your consent, when you visit the website. This mainly includes technical data (such as your internet browser, operating system, or the time the page was accessed). This data is collected automatically as soon as you enter this website.

What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right, at any time and free of charge, to obtain information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data.

If you have given your consent to data processing, you may withdraw this consent at any time with effect for the future. Under certain circumstances, you also have the right to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. If you have any questions regarding data protection or your personal data, you may contact us at any time.

Analytics Tools and Third-Party Tools
When you visit this website, your browsing behavior may be statistically analyzed. This is primarily done using analytics programs. Detailed information about these analytics programs can be found in the Privacy Policy below.

2. Hosting

IONOS

We host our website with IONOS SE.

Provider:
IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

When you visit our website, IONOS collects various log files, including your IP address. For further details, please refer to IONOS' Privacy Policy.

The use of IONOS is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible.

Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (for example, device fingerprinting). Consent may be withdrawn at any time.

Data Processing Agreement
We have concluded a Data Processing Agreement (DPA) with the above-mentioned provider. This is a legally required contract under data protection law that ensures the provider processes the personal data of our website visitors only according to our instructions and in compliance with the GDPR.

3. General Information and Mandatory Information

Data Protection
The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the applicable data protection laws and this Privacy Policy. Whenever you use this website, various personal data is collected. Personal data is any information that can be used to identify you personally.

This Privacy Policy explains what data we collect, how we use it, and for what purpose. Please note that data transmission over the Internet (for example, communication by email) may have security vulnerabilities. Complete protection of data against access by third parties cannot be guaranteed.

Information on the Data Controller
The controller responsible for data processing on this website is:

AWIMA Mittelstandspartner GmbH
Schwanthalerstraße 13
80336 Munich
Germany

Phone:
+49 (0) 89 384 624 50

Email:
info@awima-mittelstandspartner.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data (e.g., names, email addresses, or similar information).

Data Retention
Unless a more specific retention period is stated within this Privacy Policy, your personal data will remain with us until the purpose for processing no longer applies.

If you submit a legitimate request for deletion or withdraw your consent to data processing, your data will be deleted unless we are legally entitled or required to retain it (for example, due to tax or commercial law retention periods). In such cases, deletion will occur once those legal obligations no longer apply.

Legal Basis for Data Processing
If you have given your consent, we process your personal data on the basis of:

• Article 6(1)(a) GDPR

• Article 9(2)(a) GDPR (where special categories of personal data are processed)

If you have explicitly consented to the transfer of personal data to third countries, processing is also based on Article 49(1)(a) GDPR.

Where you have consented to the storage of cookies or access to information on your device (such as device fingerprinting), processing is additionally based on Section 25(1) TTDSG. Consent may be withdrawn at any time.

Where your data is necessary to perform a contract or to carry out pre-contractual measures, we process your data under Article 6(1)(b) GDPR.

Where processing is required to comply with a legal obligation, we process your data under Article 6(1)(c) GDPR. Processing may also be carried out based on our legitimate interests under Article 6(1)(f) GDPR. The specific legal basis applicable in each individual case is explained in the relevant sections of this Privacy Policy.

Information on Data Transfers to the United States and Other Third Countries
Among other services, we use tools provided by companies based in the United States and other countries that may not provide an adequate level of data protection under EU law. When these tools are active, your personal data may be transferred to and processed in these countries.

Please note that these countries may not guarantee a level of data protection comparable to that of the European Union. For example, U.S. companies may be legally required to disclose personal data to security authorities without providing affected individuals with effective legal remedies.

As a result, it cannot be ruled out that U.S. government agencies (such as intelligence services) may process, analyze, and permanently store personal data located on U.S. servers for surveillance purposes. We have no influence over these processing activities.

Withdrawal of Your Consent
Many data processing operations are only possible with your explicit consent. You may withdraw your consent at any time. The legality of data processing carried out before the withdrawal remains unaffected.

Right to Object to Data Processing (Article 21 GDPR)
Where your personal data is processed on the basis of Article 6(1)(e) or Article 6(1)(f) GDPR, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data. This also applies to profiling based on those provisions. The relevant legal basis for processing is explained in this Privacy Policy.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or unless the processing serves the establishment, exercise, or defense of legal claims (Article 21(1) GDPR).

Where your personal data is processed for direct marketing purposes, you have the right to object at any time to such processing. This also applies to profiling related to direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (Article 21(2) GDPR).

Right to Lodge a Complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. This applies in particular in the Member State of your habitual residence, place of work, or the place of the alleged infringement. This right exists without prejudice to any other administrative or judicial remedies.

Right to Data Portability
You have the right to receive the personal data that we process automatically based on your consent or in fulfillment of a contract in a commonly used, machine-readable format. You also have the right to request that this data be transferred directly to another controller, where technically feasible.

SSL/TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the browser's address changing from http:// to https://, as well as by the padlock symbol displayed in your browser. When SSL/TLS encryption is enabled, data transmitted to us cannot be read by third parties.

Right of Access, Rectification, and Erasure
Within the framework of the applicable legal provisions, you have the right at any time to obtain information free of charge about your stored personal data, its origin, recipients, and the purpose of processing. You also have the right to request the correction or deletion of your personal data. If you have any questions regarding your personal data, you may contact us at any time.

Right to Restrict Processing
You have the right to request the restriction of the processing of your personal data.

This right applies in the following cases:

• You contest the accuracy of your personal data while we verify its accuracy.

• The processing of your personal data is unlawful, and you request restriction instead of deletion.

• We no longer need your personal data, but you require it for the establishment, exercise, or defense of legal claims.

• You have objected to processing under Article 21(1) GDPR, and it has not yet been determined whether our legitimate interests override yours.

Where processing has been restricted, your personal data may only be processed—with the exception of storage—with your consent, for legal claims, to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

Objection to Promotional Emails
The use of contact information published in accordance with legal notice requirements for the purpose of sending unsolicited advertising or informational materials is hereby expressly prohibited. The operators of this website expressly reserve the right to take legal action in the event of unsolicited advertising, such as spam emails.

4. Data Collection on This Website

Cookies
Our website uses so-called cookies. Cookies are small text files that do not cause any damage to your device. They are stored either temporarily for the duration of a session (session cookies) or permanently (persistent cookies) on your device.

Session cookies are automatically deleted after your visit ends. Persistent cookies remain stored on your device until you delete them yourself or they are automatically removed by your web browser. In some cases, cookies from third-party providers may also be stored on your device when you visit our website (third-party cookies). These enable us or you to use certain services provided by third parties (for example, cookies for processing payment services).

Cookies serve various functions. Many cookies are technically necessary because certain website functions would not work without them (for example, the shopping cart function or the display of videos). Other cookies are used to analyze user behavior or display advertising.

Cookies that are necessary to carry out the electronic communication process, provide specific functions requested by the user (such as the shopping cart), or optimize the website (for example, cookies used to measure website traffic) are stored on the basis of Article 6(1)(f) GDPR unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services.

Where consent has been requested for the storage of cookies or similar recognition technologies, processing is carried out exclusively on the basis of your consent (Article 6(1)(a) GDPR and Section 25(1) TTDSG). You may withdraw your consent at any time.

You can configure your browser to notify you whenever cookies are set, allow cookies only in individual cases, exclude the acceptance of cookies in specific situations or generally, and enable the automatic deletion of cookies when the browser is closed.

Please note that disabling cookies may limit the functionality of this website.

Where cookies from third parties or cookies used for analytical purposes are employed, we will inform you separately within this Privacy Policy and, where required, request your consent.

Server Log Files
The website provider automatically collects and stores information in so-called server log files, which your browser transmits to us automatically.

These include:

• Browser type and browser version

• Operating system used

• Referrer URL

• Host name of the accessing device

• Time of the server request

• IP address

This data is not merged with other data sources.

The collection of this data is based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically error-free presentation and optimization of the website. For this purpose, server log files must be collected.

Contact Form
If you submit inquiries using our contact form, the information you provide in the form, including the contact details you enter, will be stored for the purpose of processing your inquiry and any follow-up questions. We will not disclose this information without your consent. Processing of this data is based on Article 6(1)(b) GDPR where your inquiry is related to the performance of a contract or pre-contractual measures.

In all other cases, processing is based on our legitimate interest in efficiently handling inquiries addressed to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.

The data you enter into the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (for example, once your request has been fully processed).

Mandatory statutory provisions—particularly statutory retention periods—remain unaffected.

Contact by Email, Telephone, or Fax
If you contact us by email, telephone, or fax, your inquiry, including all personal data resulting from it (such as your name and the content of your inquiry), will be stored and processed for the purpose of handling your request. We will not disclose this data without your consent.

Processing is based on Article 6(1)(b) GDPR where your request is related to the performance of a contract or pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries submitted to us (Article 6(1)(f) GDPR) or on your consent (Article 6(1)(a) GDPR), where such consent has been requested. Consent may be withdrawn at any time.

The data you send to us through contact inquiries will remain stored until you request its deletion, withdraw your consent, or the purpose for storing the data no longer applies (for example, after your inquiry has been fully resolved).

Mandatory legal provisions—particularly statutory retention periods—remain unaffected.

5. Social Media

LinkedIn
This website uses elements of the LinkedIn network.

The provider is:

LinkedIn Ireland Unlimited Company
Wilton Plaza
Wilton Place
Dublin 2
Ireland

Whenever you access a page on this website that contains LinkedIn elements, a connection is established with LinkedIn's servers. LinkedIn is informed that you have visited this website using your IP address.

If you click the LinkedIn "Recommend" button while logged into your LinkedIn account, LinkedIn can associate your visit to this website with your user account. Please note that, as the provider of this website, we have no knowledge of the content of the transmitted data or how LinkedIn uses it.

Where consent has been obtained, this service is used on the basis of Article 6(1)(a) GDPR and Section 25 TTDSG. Consent may be withdrawn at any time. Where no consent has been obtained, the service is used on the basis of our legitimate interest in achieving the broadest possible visibility on social media.

Data transfers to the United States are based on the European Commission's Standard Contractual Clauses (SCCs). Further information is available in LinkedIn's Privacy Policy.

XING
This website uses elements of the XING network.

The provider is:

New Work SE
Dammtorstraße 30
20354 Hamburg
Germany

Whenever you access one of our pages containing XING features, a connection to XING's servers is established. To the best of our knowledge, no personal data is stored during this process. In particular, no IP addresses are stored and user behavior is not analyzed.

Where consent has been obtained, this service is used on the basis of Article 6(1)(a) GDPR and Section 25 TTDSG. Consent may be withdrawn at any time. Where no consent has been obtained, the service is used on the basis of our legitimate interest in achieving the broadest possible visibility on social media.

Further information regarding data protection and the XING Share Button can be found in XING's Privacy Policy.

6. Plugins and Tools

Google Maps
This website uses the Google Maps mapping service.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

To use the features of Google Maps, your IP address must be stored. This information is generally transmitted to and stored on a Google server in the United States. The operator of this website has no influence over this data transfer.

When Google Maps is activated, Google may use Google Web Fonts to ensure consistent font display. When Google Maps is loaded, your browser downloads the required web fonts into its browser cache to display text and fonts correctly.

The use of Google Maps is in the interest of providing an attractive presentation of our online services and making the locations specified on our website easy to find. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (for example, device fingerprinting). Consent may be withdrawn at any time.

Data transfers to the United States are based on the European Commission's Standard Contractual Clauses. Further information about Google's handling of user data can be found in Google's Privacy Policy.

Google reCAPTCHA
We use Google reCAPTCHA ("reCAPTCHA") on this website.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

The purpose of reCAPTCHA is to determine whether data entered on this website (for example, in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of website visitors based on various characteristics. This analysis begins automatically as soon as the visitor enters the website.

For the analysis, reCAPTCHA evaluates various types of information, including:

• IP address

• Time spent on the website

• Mouse movements made by the user

• Other behavioral characteristics

The data collected during the analysis is transmitted to Google. The reCAPTCHA analysis runs entirely in the background. Website visitors are not informed that such an analysis is taking place. The storage and analysis of this data are based on Article 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its online services against abusive automated surveillance and spam.

Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (for example, device fingerprinting). Consent may be withdrawn at any time.

Further information about Google reCAPTCHA can be found in Google's Privacy Policy and Terms of Service.

7. Own Services

Handling of Applicant Data

We offer you the opportunity to apply for employment with us (for example, by email, post, or via our online application form). Below, we inform you about the scope, purpose, and use of the personal data collected during the application process.

We assure you that the collection, processing, and use of your data are carried out in accordance with applicable data protection laws and all other legal requirements, and that your data will be treated with strict confidentiality.

Scope and Purpose of Data Collection
When you submit an application to us, we process the personal data associated with your application, including:

• Contact details

• Communication data

• Application documents

• Notes taken during interviews

• Any other information relevant to your application

This processing is carried out only to the extent necessary for deciding whether to establish an employment relationship.

The legal basis for this processing is:

• Section 26 of the German Federal Data Protection Act (BDSG) (initiation of an employment relationship)

• Article 6(1)(b) GDPR (pre-contractual measures)

• Article 6(1)(a) GDPR, where you have provided your consent

You may withdraw your consent at any time. Within our company, your personal data will only be shared with employees involved in processing your application.

If your application is successful, the data you submitted will be stored in our data processing systems for the purpose of carrying out the employment relationship, on the basis of Section 26 BDSG and Article 6(1)(b) GDPR.

Data Retention Period
If we are unable to offer you a position, if you decline a job offer, or if you withdraw your application, we reserve the right to retain the data you submitted for up to six months after the end of the application process (rejection or withdrawal). This retention is based on our legitimate interests under Article 6(1)(f) GDPR. The purpose of this retention is primarily to provide evidence in the event of legal disputes. After this period, the data will be deleted and any physical application documents will be destroyed.

If it becomes apparent that the data will still be required after the six-month period—for example, due to pending or anticipated legal proceedings—the data will only be deleted once the purpose for continued retention no longer exists.

Longer retention may also occur if:

• you have given your explicit consent (Article 6(1)(a) GDPR), or

• statutory retention obligations prevent deletion.

Inclusion in the Applicant Pool
If we are unable to offer you a position, we may offer to include your application in our applicant pool. If you agree, all documents and information submitted as part of your application will be transferred to the applicant pool so that we may contact you if a suitable vacancy becomes available.

Your inclusion in the applicant pool is based exclusively on your explicit consent under Article 6(1)(a) GDPR.

Providing this consent is entirely voluntary and is not related to the current application process. You may withdraw your consent at any time. If you withdraw your consent, your data will be permanently deleted from the applicant pool, provided there are no statutory retention obligations requiring us to keep it.

In any event, data stored in the applicant pool will be permanently deleted no later than two years after your consent has been given.