Data protection information

§ 1 Information about the collection of personal data

(1) In the following, we provide information about the processing of personal data when using our website. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior.

(2) The responsible party according to Art. 4 Para. 7 DSGVO is
nutwork trading company ltd.
Burchardtstraße 8
20095 Hamburg
Telephone: (+49) 040 - 656 88 555

Contact details of the data protection officer
Kerstin Lange
c/o Vater Solution GmbH
Boschstraße 5
24118 Kiel

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, name and telephone number, if applicable) will be stored by us in order to answer your questions and/or complaint requests.

The processing of this data is based on Art. 6 (1) lit. b DSGVO, if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries directed to us according to Art. 6 para. 1 lit. f DSGVO or on your consent according to Art. 6 para. 1 lit. a DSGVO, if this has been requested.

The contact data remains with us until you request us to delete it, revoke your consent to store it, or the purpose for storing the data no longer applies (e.g. after processing your inquiry has been completed or a sales contract has been concluded). Mandatory legal provisions - in particular retention periods - remain unaffected.

(4) We use service providers who work exclusively on our behalf and are bound by instructions in the provision of the service offered, e.g. the hosting of our systems or the operation of our IT. These have been carefully selected by us and are regularly monitored.

As a matter of principle, we only store your data for as long as it is required for the respective purposes underlying the processing. Beyond that, we only store data insofar as we are legally obligated to do so, e.g. due to statutory retention obligations.

§ 2 Your rights

(1) You have the following rights with respect to a data controller regarding personal data concerning you:
- Right of access,
- Right to rectification or erasure,
- Right to restriction of processing,
- Right to object to processing,
- Right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

§ 3 Processing of personal data when visiting our website

When using the website for information purposes, i.e. merely viewing it without registering and without you providing us with any other information, we process the personal data that your browser transmits to our server. The data described below is technically necessary for us to display our website to you and to ensure stability and security and must therefore be processed by us. The storage period is 14 days. The legal basis is Art. 6 para. 1 lit. f DSGVO:
- IP address
- Date and time of the request
- Time zone difference to Greenwich Mean Time (GMT)
- Content of the request (page visited)
- Access status/HTTP status code
- Amount of data transferred in each case
- browser
- operating system
- Language and version of the browser software.

§ 4 Objection to or Revocation of the Processing of Your Data

(1) If you have given your consent to the processing of your data, you may revoke this consent vis-à-vis the controller at any time. Such revocation will affect the permissibility of the processing of your personal data after you have expressed it to us. The permissibility of the processing of your data until the time of your revocation remains unaffected.

(2) Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the fulfillment of a contract with you, which is presented by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data in the way we have carried out. In the event of your objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.

§ 5 Our appearances in social networks (so-called social media platforms

(1) We have various presences in so-called social media platforms. We operate the presences with the following providers:
Xing: social network; service provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany;
Privacy policy:

LinkedIn: Social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
Data protection information:
Opt-out option:
Order processing agreement:
Standard contractual clauses:
For the internal processing of Page Insights at LinkedIn, the regulations can be found at

Members can exercise their data protection rights via their account settings or by contacting LinkedIn directly.
Data subject rights can be exercised with LinkedIn as well as with us, but the primary responsibility under the GDPR for the processing of Page Insights data lies with LinkedIn. We do not make any decisions regarding the processing of Page Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the controller and storage duration of cookies on user devices. LinkedIn complies with all obligations under the GDPR with regard to the processing of Page Insights data.
LinkedIn agrees to assume responsibility under the GDPR for the provision of Page Insights and will comply with all applicable obligations under the GDPR with respect to the processing of Page Insights (including, but not limited to, Articles 12-22 and Articles 32-34 of the GDPR). This means that LinkedIn will, among other things, ensure that members are informed about the data being processed and support members' rights of access and erasure. LinkedIn will decide, at its sole discretion, how to comply with its obligations under this Addendum.
LinkedIn Ireland Unlimited Company processes personal data when using LinkedIn. What (personal) data this is in detail, how, for what purposes and on what legal basis it is processed, is described by LinkedIn in its data policy
We process personal data ourselves via our LinkedIn account (see below under 2.), at the same time data processing takes place by LinkedIn (see under 1.). Within the meaning of Art. 26 DSGVO, LinkedIn and our company are "joint controllers" with regard to the processing of Page Insights.

1. data processed by LinkedIn.

When a member visits, follows or engages with the Page, LinkedIn processes personal data to provide Page Insights to Page operators.
In particular, LinkedIn will process data provided by the LinkedIn member, such as job function, country, industry, position, company size, and employment status data from the member's profile.
LinkedIn uses advertising cookies.

2. data processed by us

The Page Insights data provided to us by LinkedIn is aggregated data. LinkedIn does not provide us with any personal data of members in relation to Page Insights or allow us to link Page Insights to individual members.

(2) We would like to point out that you use our appearances on social media platforms and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our websites, the providers of the social media platforms collect, among other things, your IP address and other information that is stored in the form of cookies on your terminal device. This information is used to provide us, as the operator of the accounts, with statistical information about interaction with us.

(3) The data collected about you in this context will be processed by LinkedIn and may be transferred to countries outside the European Union, in particular the USA. For the transfer of personal data to servers of LinkedIn in the USA as well as the storage and processing there, the EU standard data protection clauses were concluded, which allow the transfer of personal data to the USA in individual cases.

We are not aware of how the social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored and whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the site as a non-registered and/or non-logged-in user. When you access a post or the account, the IP address assigned to your terminal device is transmitted to the provider of the social media platform. If you are currently logged in as a user, a cookie on your end device can be used to track how you have moved around the network. Buttons embedded in websites enable the platforms to record your visits to these website pages and assign them to your respective profile. Based on this data, content or advertising can be offered tailored to you. If you want to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies present on your device and restart your browser.

(4) As the provider of the information service, we also only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by e-mail, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy notice.

(5) To exercise your data subject rights, you can contact both us or the provider of the social media platform. Insofar as one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the operator of the social media platform directly for questions about profiling, processing of your data when using the website. For questions about the processing of your interaction with us on our site, write to the contact details provided by us above [see under § 1 (2)].

(6) What information the social media platform receives and how it is used is described by the providers in their data protection notices. There you will also find information on contact options and on the settings options for advertisements.

§ 6 Links to other websites

If we provide links to websites of other organizations, this privacy statement does not apply to the processing of personal data by that organization. We therefore recommend that you read the privacy notices on the other websites you visit.

§ 7 Data protection information for applicants

You have the possibility to inform yourself about the job offers on our website under the tab "Career". You can apply online via the job exchange. In the following, we would like to provide you with information on the processing of your personal data in connection with your application.

We process the data that you have sent or will send us in connection with your application in order to assess your suitability for the position (or other open positions in our companies, if applicable) and to carry out the application process.

The legal basis for the processing of your personal data in this application procedure is primarily Art. 6 (1) lit. b DSGVO. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible.
Should the data be required for legal prosecution after the conclusion of the application procedure, if applicable, data processing may take place on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f DSGVO. Our interest then consists of asserting or defending claims.
Data of applicants will be deleted after 6 months in case of rejection.
In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years.
If you have been awarded a position during the application process, the data from the applicant data system will be transferred to our HR information system.

We use an online application tool from a specialized service provider for the application process. We have concluded a so-called order processing agreement with this service provider, which ensures that the data processing is carried out in a permissible manner.

Your applicant data will be sifted by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers for the respective open position. The further procedure is then coordinated. As a matter of principle, only those persons in the company who need to access your data for the proper conduct of our application process will have access to it.

Please do not send us any photos, details of marital status or other sensitive data.

If your application is sent to us by e-mail without encryption, it cannot be ruled out that a third party could gain access to the contents of your e-mail.

§ 8 Actuality

This Privacy Notice is current as of 07/25/2023. However, please note that from time to time, due to actual or legal changes, it may be necessary to revise this Privacy Notice.