Data protection is of a particularly high priority for the management of InteRES GmbH. The use of the InteRES website is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. We have implemented numerous technical and organisational measures to ensure protection of personal data processed through this website in line with the EU General Data Protection Regulation (GDPR).
1. Definitions
This privacy policy uses the terminology of the GDPR, including personal data, data subject, processing, profiling, pseudonymisation, controller, processor, recipient, third party, and consent.
2. Name and address of the controller
InteRES GmbH
Rheinstr. 44–46
64283 Darmstadt, Germany
Phone: +49 6151 307 400
Email: info@interes.com
3. Data protection officer
Dr. Stephanie Troßbach
Catus Law + Compliance
Thurn-und-Taxis-Platz 6
60313 Frankfurt am Main, Germany
Phone: +49 69 257375 264
Email: trossbach@catuslaw.com
4. Cookies
Our website uses cookies — text files stored on your device via your browser. Cookies contain a unique identifier that allows us to recognise your browser between visits and to optimise your experience. You can prevent or delete cookies via your browser settings; disabling cookies may limit some functionality of this site.
5. Collection of general data and information
With each visit, our website collects general data such as browser type and version, operating system, referrer URL, sub-pages visited, date and time of access, IP address and the visitor’s internet service provider. This data is used to deliver content correctly, optimise the website, ensure long-term system viability, and provide law enforcement with information required for prosecution in the event of a cyber-attack. Analysis is statistical and not linked to personal data.
6. Data retention and deletion
Personal data is stored only for as long as required by statute or by the purpose of processing. Upon expiry or fulfilment of the purpose, the corresponding data is blocked or erased in accordance with legal requirements.
7. Rights of the data subject
You have the following rights under the GDPR:
- Right of confirmation — whether personal data is being processed.
- Right of access — to your data and information about its processing.
- Right to rectification — of inaccurate or incomplete data.
- Right to erasure — the right to be forgotten where conditions apply.
- Right to restrict processing — under specified conditions.
- Right to data portability — in a structured, machine-readable format.
- Right to object — including to direct marketing.
- Rights related to automated decision-making and profiling.
- Right to withdraw consent — at any time, with effect for the future.
To exercise any of these rights, please contact our data protection officer.
8. Application data
If you apply for a position, we process the data you provide for the purpose of the application procedure. Documents may be transmitted by email or via a web form. On conclusion of an employment contract, the data is stored for the employment relationship in accordance with statutory provisions. If no employment contract is concluded, applicant data is automatically erased two months after notification of rejection, unless legitimate interests of the controller (such as the burden of proof under the German General Act on Equal Treatment, AGG) oppose erasure.
9. Google Analytics (with anonymisation)
We have integrated Google Analytics with the IP-anonymisation function. The
_gat._anonymizeIp extension shortens the IP address of visitors from EU
and EEA member states. Operator: Google Ireland Limited, Gordon House, Barrow Street,
Dublin, D04 E5W5, Ireland. You may object to data collection by installing the
browser add-on at
tools.google.com/dlpage/gaoptout.
10. LinkedIn
Our website integrates components of LinkedIn (operator: LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA; for EU privacy matters: LinkedIn Ireland). LinkedIn may receive information that you visited our pages. You can review and adjust LinkedIn’s privacy settings at linkedin.com/psettings/guest-controls and linkedin.com/legal/cookie-policy.
11. Legal basis for processing
We process personal data based on Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligation), Art. 6(1)(d) GDPR (vital interests) and Art. 6(1)(f) GDPR (legitimate interests).
12. Legitimate interests
Where processing relies on Art. 6(1)(f) GDPR, our legitimate interest is to carry out our business activities in favour of the well-being of our employees and shareholders.
13. Storage periods
We store personal data for the duration of the relevant statutory retention period. After expiry, the data is routinely deleted unless required for the conclusion or performance of a contract.
14. Provision of personal data
The provision of personal data may be required by law (e.g. tax regulations) or arise from contractual provisions. Without the necessary data, the conclusion of a contract cannot be performed. Our employees can clarify on a case-by-case basis whether provision is required and what the consequences of non-provision would be.
15. Automated decision-making
As a responsible company, we do not use automated decision-making or profiling.