Privacy Policy
1. Protection of Your Data
General Information
The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information on the subject of data protection can be found in our privacy policy set out below this text.
Data Collection on This Website
Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. You can find their contact details in the section "Information about the controller" in this privacy policy.
How do we collect your data?
Firstly, your data is collected when you provide it to us. This may, for example, be data you enter in a contact form.
Other data is collected automatically, or with your consent, by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system, or time of the page request). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure the website is provided without errors. Other data may be used to analyze your user behavior.
What rights do you have regarding your data?
You have the right, at any time, to receive information free of charge about the origin, recipients, and purpose of your stored personal data. You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time with effect for the future. You also have the right, under certain circumstances, to request the restriction of the processing of your personal data. Furthermore, you have the right to lodge a complaint with the competent supervisory authority. You may contact us at any time regarding this and other questions on the subject of data protection.
Analysis Tools and Third-Party Tools
When you visit this website, your browsing behavior may be statistically analyzed. This is mainly done using what are known as analysis programs. Detailed information on these analysis programs can be found in the following privacy policy.
Hosting
We host the content of our website with the following provider:
HubSpot, Inc.
25 First Street
Cambridge, MA 02141 USA
(hereinafter referred to as HubSpot).
Further information can be found in HubSpot's privacy policy: HubSpot privacy policy
The use of HubSpot is based on Art. 6 (1) (f) GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. Insofar as consent has been obtained, processing is carried out exclusively on the basis of Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.
Data Processing Agreement
For the use of the above-mentioned service, we have concluded a data processing agreement (DPA). This is a contract required under data protection law, which guarantees that the personal data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.
General Information and Mandatory Information
Data Protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy. When you use this website, various pieces of personal data are collected.
Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and how we use it. It also explains how and for what purpose this is done. We would like to point out that data transmission over the internet (e.g. when communicating by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.
Notice Regarding the Responsible Party
The party responsible for data processing on this website is:
PixelMechanics | grenzenlos digital Michael Rohrmüller
Bucher Str. 79a (Rilke Park)
D-90419 Nürnberg
Phone: +49 911 – 1313 3780
Email: contact@pixelmechanics.tech
The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).
Contact Details of the Data Protection Officer
Below you will find the contact details of the data protection officer:
Alfred Billmann
PixelMechanics | grenzenlos digital Michael Rohrmüller
Bucher Str. 79a (Rilke Park)
D-90419 Nürnberg
Phone: +49 911 – 1313 3780 Email: datenschutz@pixelmechanics.de
Duration of Storage
Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for the data processing no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, the data will be deleted once these reasons no longer apply.
General Information on the Legal Basis for Data Processing on This Website
If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) (a) GDPR or Art. 9 (2) (a) GDPR, if special categories of data are processed pursuant to Art. 9 (1) GDPR. In the case of explicit consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 (1) (a) GDPR. If you have consented to the storage of cookies or access to information on your device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of Section 25 (1) TTDSG. Consent can be revoked at any time. If your data is required for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) (b) GDPR. If your data is also required to fulfill a legal obligation, we process it on the basis of Art. 6 (1) (c) GDPR. Furthermore, data processing may be carried out on the basis of our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Information on the relevant legal basis in each individual case can be found in the following paragraphs of this privacy policy.
Note on Data Transfer to the USA and Other Third Countries
Among other things, we use tools from companies based in the USA or other third countries that are not deemed safe under data protection law. If these tools are active, your personal data may be transferred to and processed in these third countries. We would like to point out that no level of data protection comparable to that in the EU can be guaranteed in these countries. For example, US companies are required to hand over personal data to security authorities without you, as the data subject, being able to take legal action against this. It therefore cannot be ruled out that US authorities (e.g. intelligence agencies) may process, analyze, and permanently store your data held on US servers for surveillance purposes. We have no influence over these processing operations.
Revocation of Your Consent to Data Processing
Many data processing operations are only possible with your explicit consent. You can revoke consent you have already given at any time. The lawfulness of the data processing carried out up until the revocation remains unaffected by the revocation.
Right to Object to the Collection of Data in Certain Cases and to Direct Marketing (Art. 21 GDPR)
IF THE DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to Lodge a Complaint with the Competent Supervisory Authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the member state of their habitual residence, place of work, or place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.
Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or in fulfillment of a contract, either yourself or transferred to a third party, in a common, machine-readable format.
If you request the direct transfer of the data to another controller, this will only be done to the extent that it is technically feasible.
Information, Deletion, and Correction
Within the framework of the applicable statutory provisions, you have the right, at any time, to free information about your stored personal data, its origin and recipients, and the purpose of data processing, as well as, where applicable, a right to correction or deletion of this data. You may contact us at any time regarding this and any further questions on the subject of personal data.
Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data. To do this, you may contact us at any time. The right to restriction of processing exists in the following cases:
If you dispute the accuracy of personal data stored with us, we generally need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data. If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion. If we no longer need your personal data, but you need it to assert, exercise, or defend legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion. If you have objected pursuant to Art. 21(1) GDPR, a balancing of interests must be carried out between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data. If you have restricted the processing of your personal data, this data may - apart from being stored - only be processed with your consent or for the assertion, exercise, or defense of legal claims, or for the protection of the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.
SSL or TLS Encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock icon in your browser line. If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to Promotional Emails
We hereby object to the use of contact details published in the context of the legal notice (Impressum) requirement for sending unsolicited advertising and informational materials. The operators of these pages expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as spam emails.
Data Collection on This Website
Cookies
Our website uses cookies – small text files stored by your browser that cause no damage to your device. They help make our offering more user-friendly, effective and secure. We distinguish between session cookies, which are deleted automatically at the end of your visit, and permanent cookies, which remain stored until they expire or until you delete them.
Technically necessary cookies are set without your consent. They are essential for the operation of the website – for example for session handling, storing your language selection and for security functions. The legal basis is Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR; our legitimate interest lies in providing our services in a technically error-free and optimised manner. This also includes the pm_consent cookie, in which your cookie decision is stored.
All other cookies – in particular those used for audience measurement and marketing purposes – are only set after your express consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). The services concerned are listed in the section “Analytics, Audience Measurement and Marketing”.
You can configure your browser to inform you when cookies are set, to allow cookies only in individual cases, to exclude them generally, or to delete them automatically when the browser is closed. Disabling cookies may limit the functionality of this website. You can change or withdraw your consent to non-essential cookies at any time via the “Cookie settings” link in the footer of every page.
Server Log Files
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:
- Browser type and browser version
- Operating system used
- Referrer URL
- Host name of the accessing computer
- Time of the server request
- IP address
This data is not combined with other data sources. This data is collected on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - the server log files must be collected for this purpose.
Contact Form
If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions. We do not share this data without your consent. The processing of this data is based on Art. 6 (1) (b) GDPR, if your request is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), if this was obtained; consent can be revoked at any time. The data you enter in the contact form remains with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after your inquiry has been processed). Mandatory statutory provisions - in particular retention periods - remain unaffected.
Inquiry by Email or Telephone
If you contact us by email, telephone, or fax, your inquiry and the resulting personal data (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent. The processing of this data is based on Art. 6 (1) (b) GDPR, if your request is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), if this was obtained; consent can be revoked at any time. The data you send us via contact inquiries remains with us until you request its deletion, revoke your consent to storage, or the purpose for storing the data no longer applies (e.g. after your inquiry has been resolved). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.
HubSpot CRM
To manage enquiries and business contacts we use the CRM system provided by HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland. It processes the data you actively provide to us – for example via our contact form, by email or by telephone: name, company, contact details as well as the content of your enquiry and any subsequent correspondence.
The legal basis is Art. 6(1)(b) GDPR where processing serves to initiate or perform a contract, and otherwise our legitimate interest in handling enquiries in an orderly manner (Art. 6(1)(f) GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with HubSpot.
Please note: since the relaunch, no HubSpot tracking code and no HubSpot form are embedded on this website. HubSpot does not analyse your browsing behaviour on this website. Further information: HubSpot privacy policy.
Consent Banner and Cookie Settings
The first time you visit our website you are shown a consent banner that lets you decide which non-essential services may be loaded. We operate this banner ourselves; no external consent provider is involved and no data is transmitted to third parties in the process.
You can choose between three categories:
- Necessary – technically required to operate the website (session handling, language selection, security). These cookies cannot be deselected; the legal basis is Section 25(2) no. 2 TDDDG and Art. 6(1)(f) GDPR.
- Statistics – audience measurement with Google Analytics 4.
- Marketing – Google Tag Manager and the services triggered through it (LinkedIn Insight Tag, Meta Pixel, Hotjar, Apollo.io, ClickCease) as well as Leadinfo.
Your decision is stored in a cookie named pm_consent. It contains only the banner version number and your choice per category – no personal data and no identifier that makes you recognisable. It has a lifetime of 182 days, after which you are asked again.
Your consent is voluntary and can be withdrawn at any time with effect for the future. To withdraw it, use the “Cookie settings” link in the footer of every page. The lawfulness of processing carried out up to the point of withdrawal remains unaffected. You can also delete cookies already set at any time in your browser settings.
Technically we use Google Consent Mode v2: before you make a choice, all consent signals sent to Google are set to “denied”.
Analytics, Audience Measurement and Marketing
We use all services described in this section exclusively on the basis of your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG). Until you have given consent, these services are not loaded: no associated cookies are set and no data is transmitted to the providers. You can withdraw your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page.
We distinguish two consent-based categories: Statistics (audience measurement) and Marketing (advertising performance measurement and interest-based communication). Each service is assigned below to the category in which it is triggered.
Google Analytics 4 (category: Statistics)
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Two data streams are in use: property G-DQS1XEG9V8, which is loaded immediately after your consent, and property G-FGG412DGX2, which is triggered via Google Tag Manager (see below).
Google Analytics uses cookies and similar recognition technologies that allow your use of this website to be analysed. In particular, we record pages viewed, time spent, the source of the visit (referrer), approximate location based on the truncated IP address, device type, browser and operating system, as well as interactions such as clicks and form submissions. Google truncates the IP address within the EU before processing it further.
We use Google Consent Mode v2. Before you give consent, all storage and advertising consent signals are set to “denied”; measurement is only activated once you agree.
Third-country transfer: Transfer to Google LLC in the USA cannot be ruled out. Google LLC is certified under the EU-US Data Privacy Framework; standard contractual clauses apply in addition.
Retention: Event and user-level data is stored in line with the retention period configured in Google Analytics (14 months by default) and then deleted automatically. Cookies set by Google Analytics have a lifetime of up to two years.
Further information: Google privacy policy. A browser add-on to deactivate Google Analytics is available at Google Analytics opt-out browser add-on.
Google Tag Manager (category: Marketing)
We use Google Tag Manager, provided by Google Ireland Limited, to manage our marketing services (container GTM-5V74G8VZ). Tag Manager itself sets no cookies and stores no personal data; it is purely a tool for delivering the services listed below. When the container loads, your IP address is transmitted to Google.
The container is only loaded once you have consented to the Marketing category. It triggers the LinkedIn Insight Tag, Meta Pixel, Hotjar, Apollo.io and ClickCease services as well as Google Analytics property G-FGG412DGX2.
LinkedIn Insight Tag (category: Marketing)
The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. The Insight Tag measures the success of our LinkedIn campaigns and allows us to show you interest-based ads on LinkedIn. It processes the URL of the page visited, the referrer URL, your IP address, device and browser characteristics and a timestamp; LinkedIn truncates or pseudonymises IP addresses.
Third-country transfer: Transfer to LinkedIn Corporation in the USA is possible; the company is certified under the EU-US Data Privacy Framework. Further information: LinkedIn privacy policy.
Meta Pixel (category: Marketing)
The provider is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. The Meta Pixel lets us understand how effective our ads on Facebook and Instagram are and build audiences for advertising purposes. Among other things, it records the page visited, your IP address and cookie-based identifiers.
We are joint controllers with Meta for the collection and transmission of this data (Art. 26 GDPR). Any further processing by Meta takes place under Meta’s sole responsibility. Third-country transfer: Transfer to Meta Platforms, Inc. in the USA is possible; the company is certified under the EU-US Data Privacy Framework. Further information: Meta privacy policy.
Hotjar (category: Marketing)
The provider is Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian’s STJ 3141, Malta. Hotjar helps us understand how visitors actually use our pages – for example through anonymised recordings of mouse movements, clicks and scrolling behaviour, and through heatmaps. It also records device and browser information, approximate location and the truncated IP address. Hotjar automatically suppresses input in form fields.
Further information: Hotjar privacy policy.
Leadinfo (category: Marketing)
The provider is Leadinfo B.V., Rivium Quadrant 141, 2909 LC Capelle aan den IJssel, Netherlands. Based on your IP address, Leadinfo identifies the company from whose network the visit originates and enriches this with publicly available company data. The aim is to identify companies, not to build profiles of individual natural persons. It records IP address, pages viewed, time spent and referrer.
Further information: Leadinfo privacy policy.
Apollo.io (category: Marketing)
The provider is Apollo.io (ZenLeads Inc.), 535 Mission Street, San Francisco, CA 94105, USA. The service helps us attribute website visits to companies as part of our B2B sales outreach. It processes IP address, pages viewed and technical browser data.
Third-country transfer: Processing takes place in the USA on the basis of the European Commission’s standard contractual clauses. Further information: Apollo.io privacy policy.
ClickCease (category: Marketing)
The provider is CHEQ AI Technologies Ltd. (ClickCease), Israel. The service detects automated and fraudulent click traffic on our search engine ads and protects us against click fraud. It processes IP address, device and browser characteristics, click timestamps and referrer.
Third-country transfer: An adequacy decision of the European Commission is in place for Israel. Further information: CHEQ privacy policy.
Newsletter
Newsletter Data
If you would like to receive the newsletter offered on the website, we require an email address from you, as well as information that allows us to verify that you are the owner of the specified email address and that you agree to receive the newsletter. No further data is collected, or only on a voluntary basis. We use this data exclusively for sending the requested information and do not share it with third parties. The processing of the data entered in the newsletter sign-up form is based exclusively on your consent (Art. 6 (1) (a) GDPR). You can revoke your consent to the storage of the data, the email address, and their use for sending the newsletter at any time, for example via the "unsubscribe" link in the newsletter. The lawfulness of any data processing operations already carried out remains unaffected by the revocation. The data you provide to us for receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter, and will be deleted from the newsletter distribution list after you unsubscribe or once the purpose no longer applies. We reserve the right to delete email addresses from our newsletter distribution list at our own discretion within the scope of our legitimate interest pursuant to Art. 6 (1) (f) GDPR. Data stored by us for other purposes remains unaffected by this.
After you unsubscribe from the newsletter distribution list, your email address will be stored by us or the newsletter service provider on a blacklist, if this is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and is not combined with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 (1) (f) GDPR). Storage on the blacklist is not time-limited. You can object to this storage if your interests outweigh our legitimate interest.
Third-Party Services Embedded
Google Fonts
To display fonts consistently we embed fonts provided by Google Ireland Limited. When you open a page, your browser loads the required fonts from a Google server, and your IP address is transmitted to Google in the process. The legal basis is our legitimate interest in a consistent and accessible presentation of our website (Art. 6(1)(f) GDPR). Further information: Google privacy policy and Google Fonts FAQ.
Recruitee (careers page)
On our careers page we load the currently open positions directly from the applicant tracking system of Recruitee B.V., Johan Huizingalaan 763a, 1066 VH Amsterdam, Netherlands. Your IP address is transmitted to Recruitee in the process. If you click on a job advertisement you leave our website and are taken to Recruitee’s careers portal; from that point onwards Recruitee’s privacy policy applies. The legal basis for embedding it is our legitimate interest in an always up-to-date list of vacancies (Art. 6(1)(f) GDPR). Further information: Recruitee privacy policy.
Application Data
What is application data?
Summary of application data of data subjects: Users who apply to us for a position.
Purpose: Processing of an application procedure.
Data processed: Name, address, contact details, email address, telephone number, proof of qualifications (certificates), where applicable data of special categories. Storage period: In case of a successful application, until the end of the employment relationship. Otherwise, the data is deleted after the application procedure is completed or stored for a specific period with your consent. Legal basis: Art. 6 (1) (a) GDPR (consent), legitimate interest (Art. 6 (1) (f) GDPR), Art. 6 (1) (b) GDPR (contract), Art. 9 (2) (a) GDPR (processing of special categories).
You can apply for a position in our company using a recruiting tool. All data that we receive and process from you as part of an application is considered application data. In doing so, you always provide personal data such as your name, date of birth, address, and telephone number.
Why do we process application data?
We process your data in order to conduct a proper selection procedure for the advertised position. In addition, we like to keep your application documents in our application archive. This is because it often happens that a collaboration for the advertised position does not work out for various reasons, but we are impressed by you and your application and can very well imagine a future collaboration. If you give us your consent, we will archive your documents so that we can easily contact you for future opportunities within our company. We guarantee that we handle your data with particular care and always process your data only within the scope of statutory provisions. Even within our company, your data is only passed on to persons who are directly involved with your application. In short: your data is in safe hands with us!
What data is processed?
If, for example, you apply to us by email, we naturally also receive personal data as mentioned above. The email address is also considered personal data. However, in the course of an application process, only data that is relevant to our decision as to whether we want to bring you onto our team or not is processed. Exactly which data is processed depends primarily on the respective job posting. In most cases, however, this is name, date of birth, contact details, and proof of qualifications. If you submit your application via an online form, the data is transmitted to us in encrypted form. If you send us the application by email, this encryption does not take place. We can therefore not assume any responsibility for the manner in which the data is transmitted. However, as soon as the data is on our servers, we are responsible for the lawful handling of your data.
During an application procedure, in addition to the data mentioned above, information about your health or ethnic origin may also be requested so that we and you can exercise rights in connection with labor law, social security, and social protection while at the same time fulfilling the corresponding obligations. This data constitutes data of a special category.
Here you will find a list of possible data that we receive and process from you: name, contact address, email address, telephone number, date of birth, information contained in the cover letter and CV, proof of qualifications (e.g. certificates), data of special categories (e.g. ethnic origin, health data, religious beliefs), usage data (websites visited, access data, etc.), metadata (IP address, device information).
How long is the data stored?
If we take you on as a team member in our company, your data will continue to be processed for the purpose of the employment relationship and will be kept with us at least until the end of the employment relationship. All application documents will then be included in your personnel file.
If we do not offer you the position, you decline our offer, or you withdraw your application, we may retain your data on the basis of a legitimate interest (Art. 6 (1) (f) GDPR) for up to 6 months after the end of the application procedure. After that, both your electronic data and all data from physical application documents will be completely deleted or destroyed. We retain your data in order to, for example, still be able to answer any follow-up questions or to provide proof of the application in the event of a legal dispute. Should a legal dispute arise and we still need the data after the 6-month period has expired, we will only delete the data once there is no longer any reason to keep it. If statutory retention obligations must be fulfilled, we generally must store the data for longer than 6 months.
In addition, we may also store your data for longer if you have given us special consent to do so. We do this, for example, if we can well imagine working with you in the future. In that case, it makes sense to archive your data so that we can contact you without any problems. In this case, the data is included in our applicant pool. Of course, you can revoke your consent to the longer storage of your data at any time. If you do not revoke your consent and do not give new consent, your data will be deleted after 2 years at the latest.
Information, Correction, Blocking, and Deletion
The user has the right, upon request, to receive free information about the personal data stored about them.
In addition, the user has the right to correction of inaccurate data, and to blocking and deletion of their personal data, provided that no statutory retention obligation stands in the way.
Please contact us at contact@pixelmechanics.tech or send your request by post to:
PixelMechanics
Bucher Str. 79a (Rilke Park)
90419 Nürnberg