Privacy policy

1.2 When you make contact with us, e.g. via the contact forms on our websites

If you have any questions, please contact us by telephone or by e-mail. You can also get in touch using the form provided on the website. In order to do so, it is necessary to enter a valid e-mail address so that we know who the enquiry comes from and are able to respond to it.
You can also provide us with additional information to make it easier for us to direct and process your enquiry: Your membership number helps us to locate our records on you, as does stating your name and/or the company you represent. If you would like us to send your documents by post, you can also indicate your postal address on the form. If you would like us to contact you by telephone, simply give us your telephone number and tick the box next to direct callback request on the form.
Data processing for the purpose of contacting us is carried out in accordance with Art. 6 (1) lit. a GDPR on the basis of your voluntarily issued consent or, in the case of (pre-) contractual enquiries (e.g. with regard to a future business relationship), on the basis of Art. 6 (1) lit. b GDPR. The data collected and processed within the context of you making contact with us will be deleted by us after the enquiry has been dealt with and after the expiry of any applicable statutory retention periods.

1.3 As a business partner, e.g. customer or supplier

We process your contact data, bank data, master data and contract data. The processing is essentially carried out within the framework of the execution of contracts to which you are a party or upon request by you for the execution of pre-contractual measures.

If you have given us your consent to process personal data for specific purposes, the lawfulness of this processing is based on your consent.
The purposes of the data processing depend on the respective contract documents and contract contents.

We process your data for the protection of our own legitimate interests or those of third parties only where required. Our legitimate interest is in particular in management and control measures, marketing purposes, improving our business relationship, asserting legal claims and defence in legal disputes.

1.4 As a visitor to our sites

We process your contact data and, in exceptional cases, health data if ordered to do so by the authorities. However, the processing takes place in the context of the execution of contracts, of which you are a contracting party, or on your request to carry out pre-contractual measures.

Insofar as you have given us consent to the processing of personal data for specific purposes, the lawfulness of this processing is granted based on your consent, see Art. 6 (1) lit. a GDPR.

The purposes of the data processing depend on the respective contract documents and contract contents, or the circumstances of your visit to our site.
We process your data for the protection of our own legitimate interests or those of third parties only where required. Our legitimate interest is in particular in management and control measures, marketing purposes, improving our business relationship, asserting legal claims and defence in legal disputes.

As a rule, the type and purposes of data processing are:
• To record your visit in our visitor books and calendars
• To provide WiFi access
• To monitor specific areas with video technology

1.5 As an applicant

In the course of your application, we collect and process your personal application data listed below:

• Salutation
• Surname, first name
• Address
• Telephone number/mobile number
• Email
• Application documents (letter of application, CV, references, certificates, etc.)

If your application contains special types of personal data (e.g. information on marital status that may provide information about your sex life or sexual orientation; information on health; a photo that allows conclusions to be drawn about ethnic origin and/or religion and possibly eye sight; similarly sensitive data within the meaning of Art. 9 GDPR), we will assume that you have issued your consent to the processing. This consent is solely for the purpose of being able to consider the application in its current form. The information will not be taken into account in the application process unless – especially in the case of severely disabled persons – there is a legal obligation to do so. Your data will not be passed on to third parties.

You can also submit an application in which the special categories of personal data have been removed without this impacting your chances in the application process.
The collection and processing of your personal application data is exclusively for the purpose of filling vacancies within our company. As a matter of principle, your data will only be forwarded to the internal offices and specialist departments responsible for the specific application procedure, unless you give us your explicit consent for any further use.

Please note that the data you provide may be used to compile statistics on the application process. These statistics are compiled exclusively for our own purposes and are anonymised, never personalised.
The collection/processing of your data is carried out in accordance with § 26 BDSG [Federal Data Protection Act], or with your consent in accordance with Art. 6 (1) lit. a GDPR.

Your personal application data will generally be deleted no more than six months after the application process has been concluded. This does not apply if legal provisions prevent deletion, if retention is necessary for the purpose of providing evidence or if you have explicitly consented to continued retention.
If we are unable to offer you a position that is currently vacant, but are of the opinion based on your profile that your application might be of interest for future job offers, we will store your personal application data for a maximum of 2 years, provided that you expressly consent to such storage and use. With your consent, we will compare your documents with our job offers and contact you if a suitable offer is available.
Recruiting products of the social and professional network XING may be used to recruit personnel for our company. If you would like information about the data retained by XING, you can access this in the settings area of your Xing profile. The Xing Talent Manager’s privacy policy can be found here: https://www.xing.com/legal/privacy_policy_talentmanager.

1.6 As a user of our social media channels

We use what are known as social plugins from various social networks on our website; these are described individually in this section.

When using the plugins on our websites, your web browser establishes a direct connection to the servers of the respective social network. This gives the respective provider the information that your web browser has accessed the corresponding page of our website, even if you do not have a user account with the provider or are not currently logged in to it. Log files (including the IP address) are transmitted by your web browser directly to a server of the respective provider and may be stored there. The provider or its server may be located outside the EU or the EEA (e.g. in the USA).

The plugins are independent extensions of the social network providers. We therefore have no influence on the scope of the data collected and stored by the social network providers via the plugins.

For the purpose and scope of the collection, further processing and use of the data by the social network, as well as your rights in this regard and setting options for protecting your privacy, please refer to the respective social network’s privacy policy.

If you do not want the social network providers to receive and potentially store or continue to use data about this website, do not use the respective plugins.
The use of these services is not necessary to contact us or to receive information from us. We therefore point out that you are solely responsible for using the service offered there and its functionalities. This particularly applies to the use of interactive functions such as sharing.

The data collected about you when using the services will be processed by the respective provider and may be transmitted to countries outside the European Union. We have no influence on the type and scope of the data processed by the providers, the type of processing and use or the transfer of this data to third parties, in particular to countries outside the European Union.

Please note that the providers also receive data from you even if you have not created an account with the service itself, but visit third-party websites and apps that use the providers’ services or with which the providers offer services together. This includes, for example, information about the websites and apps you visit, or interactions with advertisers.

Through the use of cookies and similar technologies, it is also possible to record your visits to these websites and link them to your profile. Based on this data, you may receive tailored content or advertising.

For more information about web-based ads or to opt-out of having your web browsing information used for behavioural advertising purposes, you can use the following link: www.aboutads.info/choices

You can also set your browser to block all cookies, including provider cookies, or to display a message when a cookie is set by the provider. Furthermore, you can restrict the service’s access to contact and calendar data, photos, location data, etc. on mobile devices in the settings options there. However, this depends on the operating system used.

Facebook
We are on the social network Facebook, Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304, USA (hereinafter “Facebook”) where we operate a “fan page”. This page gives you the opportunity to contact us directly and to receive information about current events in our company.
Through this page, we as the operator receive data from Facebook, which also includes personal data. We use or process these “Facebook insights” – as described below – on the basis of our legitimate interests pursuant to Art. 6 paragraph 1 f GDPR.

We can retrieve different types of statistical data from Facebook such as:

• Number of page views
• Number of “Likes”
• Page activity
• Video views
• Post reach
• Comments
• Shared content
• Share male/female
• Country and city of origin
• Language
• Views
• Clicks

We use this data to optimise our posts. For example, we find out which types of posts are not successful in the desired target groups and can henceforth omit them. In addition, we use the “Likes” analysis from posts to invite the respective persons to our page (to “Like” the fan page as a whole).
In addition, the above provides us with information about what type of posts generate the most interactions at what time of day and on what day of the week. Based on this information, we optimise the timing of our posts.
Art. 26 GDPR regulates the joint responsibility that exists – in this case between Facebook and us – with regard to the protection of your personal data. Facebook has published a corresponding contract that regulates the aforementioned joint responsibility. The company calls this contract the “Page Controller Addendum”. You can read the exact content here: https://www.facebook.com/legal/terms/page_controller_addendum

LinkedIn
Our websites contain programs (plugins) of the social network LinkedIn.com. LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). An overview of LinkedIn’s plugins and their appearance can be found here: https://developer.linkedin.com/plugins; information on data protection at LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy.

Twitter
Our websites contain programs (plugins) from the social network twitter.com. These are operated by Twitter, Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. The plugins can be identified on our website by the Twitter logo (blue bird). When you visit a page of our website containing such a plugin, your browser establishes a direct connection with the Twitter servers, which in turn transmits the content of the plugin to your browser, which then integrates it into the website displayed. As a result, the information that you have visited our websites is forwarded to Twitter. If you are logged in to Twitter via your personal user account while visiting our web pages, Twitter can link the website visit to this account. By interacting with plugins, e.g. by clicking the Tweet button, the corresponding information is transmitted directly from your browser to Twitter and stored there.

For the purpose and scope of the data collection and the further processing and use of the data by Twitter, as well as your rights in this regard and setting options for protecting your privacy, please refer to Twitter’s privacy policy, which can be found here: https://twitter.com/de/privacy.

WhatsApp
We use the WhatsApp share button on our websites. The purpose of the share button is to give you, as a WhatsApp and mobile device user (Smartphone, etc.), the opportunity to share articles and news from our websites that are worth reading directly with your personal WhatsApp contacts. When you use the WhatsApp share button, you are merely sending a hyperlink to the relevant location on our website. WhatsApp does not receive any further personal data besides what is known as a referrer notification, which is generated each time a link is accessed.

Xing
Our websites contain programs (plugins) from the social network xing.com. These are operated by Xing AG, Gänsemarkt 43, D-20354 Hamburg. The plugins can be identified on our website by the Xing logo. When you visit our websites that contain such a plugin, your browser establishes a direct connection with the Xing servers, which in turn transmits the content of the plugin to your browser, which then integrates it into the displayed web page. As a result, the information that you have visited our website is forwarded to Xing. If you are logged in to Xing via your personal user account while visiting our website, Xing can assign the website visit to this account. By interacting with plugins, e.g. by clicking the Xing button, the corresponding information is transmitted from your browser directly to Xing and stored there.

For the purpose and scope of the data collection and the further processing and use of the data by Xing, as well as your rights in this regard and setting options for protecting your privacy, please refer to Xing’s privacy policy: https://www.xing.com/app/user?op=tandc&what=dp#

YouTube
We use the YouTube video platform on our websites, which is operated by YouTube LLC, 901 Cherry Ave. San Bruno, CA 94066 in USA, (“YouTube “). YouTube, LLC is a subsidiary of Google Inc, 1600 Amphitheater Parkway, Mountainview, California, CA 94043, USA. YouTube is a platform that enables the playback of audio and video files. YouTube is part of the Google group and refers to their privacy policies. When you access one of our web pages, the YouTube player integrated there can establish a connection to YouTube in order to ensure the technical transmission of the video or audio file. When the connection to YouTube is established, data is transmitted to YouTube. We would like to point out that we have no knowledge of the content of the transmitted data or its use by YouTube.
We use the so-called extended data protection mode when integrating YouTube. This setting ensures that YouTube only uses cookies as soon as you actually click the video itself – and not when you simply access the website. Unfortunately, this does not apply to the setting of cookies by DoubleClick. Please visit the YouTube/Google website for information on how YouTube handles your data and your rights in this regard and the settings you can make to protect your privacy. https://www.google.com/policies/privacy/partners/?hl=de.

1.7 As a recipient of our newsletter

If you are interested, for information purposes in a newsletter about our group and our products and services, we require your title, first name, surname and your e-mail address. We ensure that you give or have given us the necessary consent to receive the newsletter.

You can easily revoke your consent to the storage of your e-mail address and the data you have provided at any time.

1.8 As a participant of video calls or online conferences

When using so-called video-conferencing or collaboration tools, personal data is processed. We use different applications as part of our internal and external communications, which in turn are used to maintain our business operations and keep in touch with you.
Personal data usually refers to your contact details, such as first name, last name, email address, company affiliation, etc. It is conceivable that we may also download lists of participants during events in order to process them later.

If you log in via a web client, you can also anonymise some of the information.

If you log in by telephone, your telephone number and the IP address of your device will be recorded.

During the meeting, you have the opportunity to make comments and ask questions, e.g. in the chat. Audio and video signals are also processed for transmission. You have the option of switching off the camera and microphone yourself at any time. You can also blur the background depending on the application and mode of access, so that only you and not the room you are in is visible.

2. Passing on of data

Within our group, access to your data is granted to those entities that require it within the scope of the so-called “Least Privilege” (allocation of user rights to the lowest possible extent) and the Need- To-Know principle (knowledge of data only when necessary).

Your personal data will not be transferred to third parties for purposes other than those listed under 1. We will only pass on your personal data that we have collected to third parties if:

• You have given your express consent in accordance with Art. 6 (1) lit. a GDPR,
• The disclosure pursuant to Art. 6 (1) lit. f GDPR is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data
• In the event that there is a legal obligation to pass on the data in accordance with Art. 6 (1) lit. c GDPR
• It is legally permissible and required for the processing of contractual relationships with you in accordance with Art. 6 (1) lit. b GDPR

In some cases, data is passed on to the statistical offices of the federal government and the state of Baden-Württemberg for the purposes of compiling statistics. The data is passed on in anonymised form, meaning you can no longer be identified as an individual.

If we have to pass on data to service providers or they participate in our processing, this is done without exception in accordance with agreements on commissioned processing pursuant to Art. 28 GDPR. Our service providers ensure through appropriate technical and organisational measures that the processing of your data is carried out in accordance with the GDPR and that an appropriate level of protection can be guaranteed.

3. Data transmission to third countries

A transmission of your data to countries outside of the EU/EEA (so-called third countries) only takes place, if this is required or stipulated by law, if you have given us consent or as part of the processing of an order. If service providers are deployed in third countries, they will be required to comply with data protection standards in Europe in addition to written instructions by agreeing to EU standard contractual clauses.

4. Rights of data subjects

You have the right:

• Pursuant to Art. 15 GDPR, to request information about your personal data processed by us. In particular, you may request information on the purposes of the processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned duration of storage, the existence of a right of rectification, cancellation, restriction of processing or opposition, the existence of a right of appeal, the origin of your data, if not collected by us, as well as the existence of automated decision making including profiling and, if applicable, meaningful information on the details thereof;
• Pursuant to Art. 16 GDPR, to demand without delay the correction of incorrect or incomplete personal data stored by us;
• Pursuant to Art. 17 GDPR, to demand the deletion of your personal data stored with us, unless processing is necessary to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• Pursuant to Art. 18 GDPR, to demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you refuse to delete it and we no longer require the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR;
• Pursuant to Art. 20 GDPR, to receive your personal data that you have provided us with in a structured, common and machine-readable format or to request that it be transferred to another responsible party;
• Pursuant to Art. 7 (3) GDPR, to revoke your once given consent to us at any time. As a consequence, we may not continue the data processing based on this consent in the future;
• If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 (1) lit. f GDPR, to object to the processing of your personal data pursuant to Art. 21 GDPR, if there are reasons for doing so that arise from your particular situation or if the objection is directed against direct advertising. In the latter case, you have a general right of objection, which will be implemented by us without indicating a special situation.

If you wish to exercise your right of revocation or objection, simply send an e-mail to datenschutz@burger-group.com.

In addition, you have a general right of appeal to the data protection supervisory authority responsible for you. The authority responsible for our group of companies is the “Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden- Württemberg”, Lautenschlagerstraße 20, D-70173 Stuttgart, tel. +49 0711/61 55 41 0, e-mail poststelle@lfdi.bwl.de.

5. Storage period

If this is not stipulated otherwise in the detailed descriptions of the offers/procedures, we process and store your personal data as long as it is necessary for the fulfilment of our contractual and legal obligations. Your personal data is regularly erased or blocked if it is no longer necessary for the fulfilment of contractual or legal obligations, if you have exercised your right to erasure, if all reciprocal claims have been fulfilled and there are no other statutory retention requirements or legal justifications for storage.

6. Automated decision-making

We do not use automated processing that results in automated decision making / profiling of your person.

7. Up-to-dateness and amendment of this data protection declaration

This data protection declaration is currently valid and was updated in July 2021. Due to the further development of our websites and offers above or due to changed legal or official requirements, it may become necessary to change this data protection declaration.