Privacy Policy
Personal data (usually referred to just as „data“ below) will only be processed by us to the extent necessary and for the purpose of providing a functional and user-friendly website, including its contents, and the services offered there. Per Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as the „GDPR“), „processing“ refers to any operation or set of operations such as collection, recording, organization, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment, or combination, restriction, erasure, or destruction performed on personal data, whether by automated means or not. The following privacy policy is intended to inform you in particular about the type, scope, purpose, duration, and legal basis for the processing of such data either under our own control or in conjunction with others. We also inform you below about the third-party components we use to optimize our website and improve the user experience which may result in said third parties also processing data they collect and control.
​
Our privacy policy is structured as follows:
​
I. Information about us as controllers of your data
II. The rights of users and data subjects
III. Information about the data processing
​
I. Information about us as controllers of your data
The party responsible for this website (the „controller“) for purposes of data protection law is:
​
Aero Horizon GmbH
Thomas Klaster
Schachtholm 1
24797 Horsten
​
​
II. The rights of users and data subjects
With regard to the data processing to be described in more detail below, users and data subjects have the right
-
to confirmation of whether data concerning them is being processed, information about the data being processed, further information about the nature of the data processing, and copies of the data (cf. also Art. 15 GDPR);
-
to correct or complete incorrect or incomplete data (cf. also Art. 16 GDPR);
-
to the immediate deletion of data concerning them (cf. also Art. 17 DSGVO), or, alternatively, if further processing is necessary as stipulated in Art. 17 Para. 3 GDPR, to restrict said processing per Art. 18 GDPR;
-
to receive copies of the data concerning them and/or provided by them and to have the same transmitted to other providers/controllers (cf. also Art. 20 GDPR);
-
to file complaints with the supervisory authority if they believe that data concerning them is being processed by the controller in breach of data protection provisions (see also Art. 77 GDPR).
In addition, the controller is obliged to inform all recipients to whom it discloses data of any such corrections, deletions, or restrictions placed on processing the same per Art. 16, 17 Para. 1, 18 GDPR. However, this obligation does not apply if such notification is impossible or involves a disproportionate effort. Nevertheless, users have a right to information about these recipients.
Likewise, under Art. 21 GDPR, users and data subjects have the right to object to the controller’s future processing of their data pursuant to Art. 6 Para. 1 lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
​
III. Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose for its storage ceases to apply, provided the deletion of the same is not in breach of any statutory storage obligations or unless otherwise stipulated below.
​
Contact
If you contact us via email or the contact form, the data you provide will be used for the purpose of processing your request. We must have this data in order to process and answer your inquiry; otherwise we will not be able to answer it in full or at all. The legal basis for this data processing is Art. 6 Para. 1 lit. b) GDPR. Your data will be deleted once we have fully answered your inquiry and there is no further legal obligation to store your data, such as if an order or contract resulted therefrom.
​
Server data
For technical reasons, the following data sent by your internet browser to us or to our server provider will be collected, especially to ensure a secure and stable website: These server log files record the type and version of your browser, operating system, the website from which you came (referrer URL), the webpages on our site visited, the date and time of your visit, as well as the IP address from which you visited our site.
The data thus collected will be temporarily stored, but not in association with any other of your data. The basis for this storage is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the improvement, stability, functionality, and security of our website. The data will be deleted within no more than seven days, unless continued storage is required for evidentiary purposes. In which case, all or part of the data will be excluded from deletion until the investigation of the relevant incident is finally resolved.
​
WIX
a) Use of the Wix Shop Software
The provider uses the “WIX” shop system from Wix.com Ltd., Namal 40, 6350671 Tel Aviv, Israel, to display the offers, to process the contract and for hosting. The legal basis for this is the initiation of a contract and/or the execution of the contract in accordance with Article 6 para. 1 lit. b GDPR. Due to the international branches of WIX, it cannot be ruled out that processing will also take place outside the EU. WIX has to ensure that the processing by Wix and its subcontractors only takes place in third countries in which processing is permitted under the GDPR, for example by means of an EU adequacy decision or so-called standard contractual clauses.
“WIX” processes the following user data on behalf of the provider:
Name, email address, delivery and billing address, payment data, company name, telephone number if applicable, IP address, information about orders, as well as information about the device and browser used.
b) Web analysis WIX
Through the use of WIX, cookies for web analysis are also used on the website. Information such as time, place and frequency of the website visit of the user is transmitted to a WIX server and evaluated via the cookies. In case you have granted your consent to this processing the legal basis is Article 6 para. 1 lit. a GDPR. The legal basis can also be Article 6 para. 1 lit. f GDPR. The legitimate interest consists in the analysis, optimization and the economic operation of the website. If the user does not agree to the storage of the cookie, it is possible to prevent or terminate the installation of the cookie by setting the browser accordingly. Further information about data processing by WIX can be found under the following link: https://de.wix.com/about/privacy
​
IV. Privacy information for applicants
Privacy Information for Applicants in accordance with Article 13 of the General Data Protection Regulation (GDPR). Compliance with data protection regulations is of high importance to us. Therefore, we would like to inform you below about how your personal data is processed:
Aero Horizon GmbH
Thomas Klaster
Schachtholm 1
24784 Hörsten
​
Data we process
When you apply, we process data you provide through your application documents as well as through interviews. This may include contact details and all information related to your application (CV, certificates, qualifications, photo, etc.). We process your data for the purpose of conducting the application process and determining whether we can offer you the position you applied for and employ you with us. The legal basis for this processing is Article 88(1) GDPR in conjunction with Section 26(1) Sentence 1 of the German Federal Data Protection Act (BDSG). If the data includes special categories of personal data (e.g., health information) that you voluntarily disclose to us (such as information regarding a severe disability), the processing is carried out on the basis of Article 9(2)(b) GDPR in conjunction with Section 26(3) BDSG. If you sign an employment contract, we will continue to store your data for the purpose of managing the employment relationship. The legal basis for this is Article 88(1) GDPR in conjunction with Section 26(1) Sentence 1 BDSG. We will not share the information you provide with any third parties. The recipients of the personal data contained in the application documents are the relevant HR personnel and employee representatives of our company.
Data deletion
Unless a legal retention period applies, your data will be deleted as soon as it is no longer required or the legitimate interest in its storage no longer exists. If you are not hired, this is generally no later than six months after the conclusion of the application process. In some cases, certain data may be stored for a longer period (e.g., travel expense reimbursements). The duration of storage then depends on the statutory retention periods under the German Commercial Code or the Fiscal Code (six or ten years) or the length of legal proceedings and any subsequent limitation period. If you are not hired but your application remains of interest to us, we will ask you whether we may retain your application for future job openings. If you sign an employment contract, we will store your data for the duration of the employment relationship. In that case, you will receive further information about the processing of your data once your employment begins.
Your data protection rights
As a data subject, you have the right to request access to your personal data (Article 15 GDPR), to have incorrect data corrected (Article 16 GDPR), and to have data deleted if one of the reasons outlined in Article 17 GDPR applies — for example, if the data is no longer necessary for the purposes for which it was collected. You also have the right to restrict processing if one of the conditions set out in Article 18 GDPR applies, and the right to data portability in the cases outlined in Article 20 GDPR.
​
If you wish to exercise your data protection rights, please contact us using the contact details provided above.
Furthermore, as a data subject, you have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your data violates data protection laws. The supervisory authority responsible for us is: State Center for Data Protection Schleswig-Holstein Holstenstraße 98, 24103 Kiel, Germany.