Data protection

Thank you for visiting our website and for your interest in our company and our products and services. We take the protection of your personal data and its confidential treatment seriously.

Your personal data will be processed exclusively within the framework of the legal provisions of the data protection law of the European Union, in particular the General Data Protection Regulation (hereinafter “GDPR”) and, in addition, the German Federal Data Protection Act.

With this data protection policy, we inform you about the processing of your personal data and about your rights as a data subject in the context of the processing of your personal data by us. The terms used, such as “personal data” or their “processing” correspond to the definitions in Art. 4 GDPR.



1. Person responsible

The person responsible for data processing within the meaning of the data protection laws is:

Vogel & Partner Rechtsanwälte mbB
Erbprinzenstraße 27
76133 Karlsruhe
Phone: +49 (0)721. 782027-0
Fax: +49 (0)721. 782027-27

You can view our imprint here.

If you have any questions or suggestions regarding data protection, please feel free to contact us.


2. The subject of data protection

The subject of data protection is personal data. This is all information that relates to an identified or identifiable natural person (so-called “data subject”). This includes, for example, details such as name, postal address, e-mail address or telephone number, but also information that necessarily arises during the use of our website, such as information about the beginning, end and extent of use of the website and the transmission of your IP address.


3. Data processing when accessing our website

The use of our website is generally possible without registration and without providing personal data. However, even if you use our website in this way for purely informational purposes, personal data may be automatically collected and processed. Below you will find an overview of the type, scope, purpose, and legal basis of data processing via our website.


a. Provision of our website

When you access our website through your end device, we automatically record and process the following data by means of server log files:

  • Date and time of access
  • Duration of the visit
  • Content of the request (specific page)
  • Type of end device
  • Operating system used and its interface
  • Language and version of the browser software
  • Access status/HTTP status code
  • The functions that you use
  • The volume of data sent
  • Type of event,
  • Referrer URL
  • Domain name
  • IP address

We process this data on the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR; namely, to provide and display the website, to ensure and maintain technical operation, for the purpose of identifying and eliminating faults, and for security reasons (e.g. to investigate cases of abuse or fraud). When you access our website, these data are automatically processed. Without this provision, you cannot use our website. We do not use this data for the purpose of drawing conclusions about your identity.

The collected data are usually deleted after 30 days, unless we exceptionally need them longer for the above purposes. In such a case, we delete the data immediately after the purpose ceases to apply.


b. Cookies

So-called cookies, i.e., small text files, may be stored on your end device when you visit our website in order to offer you a comprehensive range of functions, to make use more convenient and to be able to optimize our offers. If you do not wish cookies to be used, you can prevent cookies from being stored on your device by configuring the appropriate settings in your Internet browser or by using separate opt-out options. Please note that the functionality and scope of functions of our website may be limited as a result. For detailed information on the type, scope, purposes, legal basis, and objection options for data processing with cookies, please refer to the descriptions of the individual functions that are based on the use of cookies.


c. Matomo (formerly Piwik)

We use Matomo, an open source software for statistical analysis of user access to our website. The data processing is based on our legitimate interests within the meaning of Art. 6 para. 1 (f) GDPR; namely, our interest in the analysis, optimization, and economic operation of our website.

The IP address of users is shortened by Matomo before it is stored. Matomo uses cookies that are stored on your end device and that enable an analysis of your use of our website. In doing so, pseudonymous user profiles can be created from the processed data. The information generated by the cookie about your use of our website is stored on a server of our service provider and is not passed on to third parties.

Preventing the use of Matomo/Piwik is possible by unchecking the box in the “Website analytics with Piwik” section, thus enabling the opt-out plugin.

For more information on Matomo data protection, please see the following link:


4. Data processing in the context of an application with us

We take the protection of your personal data very seriously and treat the data entrusted to us confidentially in accordance with the applicable data protection regulations and handle them responsibly. Therefore, we would like to inform you here how we implement the provisions of the data protection regulations in our firm and what information we collect during your application and, of course, how it is used.

The following information applies both to applications sent by e-mail and applications that reach us by mail or via other channels (e.g., applicant portals). The following paragraphs inform you about which personal data we process as part of the application process.

“Personal data” means any data that can be related to you personally, e.g., name, address, email addresses, credentials, etc. “Processing” means any operation performed with or without the aid of automated procedures in relation to personal data, such as collection, recording, organization, classification, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, reconciliation or linking, restriction, erasure, and destruction.


a. Collection and processing in the application procedure

Via or via advertisements elsewhere, you will receive information on our currently advertised positions, for which you can apply via e-mail or application form.

We will process your application documents in accordance with the following provisions as part of the application process at our firm and pass on your data to the employees involved in the selection process if this is necessary for the specific application process. Ultimately, it is always people who decide on your employment with us; fully automated decision-making does not take place.

To conclude an employment contract with our firm, you are required to provide us with meaningful application documents.


b. Categories of data

We process the following categories of data about our applicants:

  • Correspondence (e-mails, etc.)
  • Submitted application documents
  • Evaluation on the applicants


c. Intended use

The personal data and documents provided by you as part of the application process, as well as notes prepared by us, will be processed by us exclusively for the purposes of processing your application, i.e., primarily for deciding whether to hire you and, if so, for which position and on what terms you should be hired. Your data will be processed by our firm in accordance with the applicable data protection regulations. Your data will only be passed on to third parties outside the firm in exceptional cases if you give your separate consent for this or if there is a legal obligation to do so.


d. Legal basis of the data processing

The legal basis for the processing of personal data in an application procedure is Art. 6(1)(b) GDPR as well as Section 26 (1) of the German Federal Data Protection Act, as the processing of your data is necessary for the implementation of pre-contractual measures; namely, the decision on the establishment of an employment relationship.

If you agree to the further storage of your personal data in our applicant pool after the – temporarily unsuccessful – conclusion of the application process, the legal basis for the associated further processing of your data is your consent pursuant to Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future without giving any reasons.


e. Vacancies and internal data recipients

In our firm, vacancies are usually filled in cooperation with the relevant employees in the teams.

If, at the time of your application, we have other vacancies that match your applicant profile, we may also forward your application to these employees. If you do not agree to your application being forwarded, please let us know when you apply or by e-mail.

All employees involved in our hiring process are obligated to maintain data secrecy in accordance with currently applicable data protection regulations.


f. Unsolicited application

With an application, you are not applying for a specific advertised position, but are showing your general interest in working at our firm. In this case, we will respond to your application with information about the positions for which we consider your applicant profile suitable and the areas or teams to which we will forward your application, so that you are informed about who has access to your personal data.


g. Retention periods

If your application with us has led to employment with the firm, your data will be accepted and processed for the new employment relationship insofar as they are required for the establishment and implementation of the employment relationship.

In the event of a rejection, we will store your personal data and documents for 6 months to be able to process any queries relating to your application and our rejection. In this case, your data will be deleted six months after the end of the application process. In the event that you have consented to further processing of your personal data in our applicant pool, the data will be deleted when they are no longer necessary for the purposes for which they were collected and processed to that extent, as a rule after a period of 2 years after inclusion in the applicant pool.


h. Withdrawal of the application

You can withdraw your application with us at any time. To do so, please send an e-mail to your contact person at our firm.

Please note that for legal reasons, it is not possible for us to delete all data relating to your application immediately, as we must retain certain data for a period of six months to comply with legal requirements.


i. Data security

Our firm uses technical and organizational security measures to protect the data you have made available from manipulation, loss, destruction, or unauthorized access. Our security measures are continuously revised in accordance with technological developments.


j. Other

If you have any questions or suggestions regarding our application process, please contact your contact person at our firm or


5. Contact

If you provide us with personal data by e-mail or via a contact form, this is always done on a voluntary basis. Your information will be processed by us for the purpose of processing your contact request and its handling in accordance with Art. 6(1)(b) GDPR and may also be passed on to one of our affiliated companies or third parties in this context. We delete the data you have provided as soon as the purpose of collection ceases to exist completely, unless a new legal basis intervenes (e.g., the further processing of the data is required for the fulfillment of a concluded contract) and no legal obligations for retention exist.


6. Recipients of personal data

We only pass on your personal data to external third parties if this is necessary for the processing or handling of your request, if there is another legal permission or if we have your consent for this. External recipients may, in particular, be service providers that we use for the provision of services, for example in the areas of technical infrastructure and maintenance of our website. Such processors are carefully selected and regularly reviewed by us. They may only use the data for the purposes specified by us and in accordance with our instructions.

If data are transferred to entities whose registered office or place of data processing is not located in a member state of the European Union or in another state party to the Agreement on the European Economic Area, we will ensure prior to the transfer that, outside of exceptional cases permitted by law, either an adequate level of data protection exists at the recipient or your consent to the data transfer has been obtained.


7. Storage period

We store your personal data only as long as this is necessary for the fulfillment of its purposes or – in the case of consent – as long as you do not withdraw your consent. In the event of an objection, we will delete your personal data unless its further processing is permitted or even mandatory under the relevant legal provisions (e.g., within the scope of commercial and tax retention obligations). We will also delete your personal data if we are obliged to do so for legal reasons.


8. Data subject rights

As a person affected by data processing, you have numerous rights at your disposal. Specifically, these are:

  • Right of access: You have the right to receive information about the data we have stored about you.
  • Right to rectification and erasure: You may request us to correct incorrect data and delete your data.
  • Restriction of processing: You can request that we restrict the processing of your data.
  • Data portability: If you have provided us with data on the basis of a contract or consent, you can request that you receive the data you have provided in a structured, common and machine-readable format or that we transfer it to another responsible party.
  • Objection to data processing on the legal basis of “legitimate interest”: You have the right to object to data processing by us at any time for reasons arising from your particular situation, insofar as this is based on the legal basis of “legitimate interest”. If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for further processing that override your rights.
  • Objection to cookies: You can also object to the use of cookies at any time.
  • Withdrawal of consent: If you have given us consent to process your data, you can withdraw this consent at any time with effect for the future. The lawfulness of the processing of your data until the withdrawal remains unaffected.
  • Right to lodge a complaint with a supervisory authority: You can also lodge a complaint with the responsible supervisory authority if you believe that the processing of your data violates applicable law. To do so, you can contact the data protection authority responsible for your place of residence or country or the data protection authority responsible for us.

You are only entitled to the rights described above on condition that the legal requirements applicable in this respect are fulfilled, even if this is not expressly mentioned in the context of the above description.

If you have any questions regarding the processing of your personal data, your data subject rights and any consent you may have given, you can contact us free of charge. To exercise all your aforementioned rights, please contact us at or by post at the address given above under section 1. Please ensure that we are able to clearly identify you.


9. Links to third-party offers

Websites and services of other providers linked to our website are and have been designed and provided by third parties. We have no influence on the design, content, and function of these third-party services. We expressly distance ourselves from all content of all linked third-party services. Please note that the third-party services linked from our website may install their own cookies on your end device or collect personal data. We have no influence over this. If necessary, please inform yourself directly with the providers of these linked third-party offers.


10. Status

From time to time, it may become necessary to adapt the content of this data protection notice. We therefore reserve the right to change it at any time. We will also publish the amended version of the data protection notice here. The current version of our data protection notice applies at the time of your visit.


Status: 06.09.2021



Web analysis with Piwik

[matomo_opt_out language=en]