Privacy Policy

The controller responsible for data processing on this website is:

rankk GmbH

Wiesenstraße 32

91126 Schwabach

Telephone: +49 9122 / 98 201 98

Email: info@rankk.de

You can contact our external data protection officer as follows:

Andrea Prinz

Datenschutz Prinz GmbH
Industriestr. 10

91154 Roth

Email: info@datenschutz-prinz.de

General information on data processing

Scope of the processing of personal data

We generally collect and use our users' personal data only to the extent necessary to provide a functional website and our content and services. Personal data is collected and used regularly only with your consent. An exception applies in cases where obtaining prior consent is not possible for factual reasons and the processing of the data is permitted by statutory provisions.

Purposes and legal bases for the processing of personal data

Where we obtain consent for processing operations involving your personal data, Art. 6(1)(a) GDPR serves as the legal basis.

Where your personal data is processed because this is necessary for the performance of a contract, Art. 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations that are necessary in order to take steps prior to entering into a contract.

Where the processing of your personal data is necessary for compliance with a legal obligation to which our company is subject, Art. 6(1)(c) GDPR serves as the legal basis.

If processing is necessary to safeguard a legitimate interest of our company or of a third party, and your interests, fundamental rights and freedoms do not override the aforementioned interest, Art. 6(1)(f) GDPR serves as the legal basis for the processing.

Erasure of data and storage period

Your personal data will be erased or blocked as soon as the purpose of storage no longer applies. Storage may also take place where this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the controller is subject. Your data will also be blocked or erased when a storage period prescribed by the aforementioned rules expires, unless there is a need for further storage of the data for reasons of signing a contract or the fulfillment of a contract.

Recipients and third-country transfers

No data is disclosed to third parties in connection with the website. Processing by the service providers involved is carried out on the basis of data processing agreements pursuant to Art. 28 GDPR. Data processing in third countries outside the EU/EEA by their subcontractors takes place in compliance with the requirements of Art. 46 GDPR.

Data collection on our website

Server log files and content delivery network

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits. This regularly includes: browser type and browser version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address. This data is not merged with other data sources. Temporary storage of your IP address by the system for at least the duration of the session is necessary to enable the website to be delivered to your computer. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1)(f) GDPR. The data is erased as soon as it is no longer required to achieve the purpose for which it was collected. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for operation of the website. Consequently, you have no right to object in this respect. Furthermore, the IP address is processed in connection with the use of the content delivery network for this website. This takes place within the framework of the existing commissioned processing by the provider Framer and by its subprocessors. We would also like to point out that this provider uses AI tools to process data according to their own AI Notice.

Contact by email and telephone

You can contact us using the email address or telephone number provided. In this case, your email address and the data transmitted with the message, or your telephone number, will be processed. Your data will only be disclosed in this context to the service providers involved. Your data will be used exclusively for processing our mutual conversation.
The legal basis for processing your data transmitted in the course of your use of our email address or telephone number is Art. 6(1)(f) GDPR. If you contact us by email or telephone, this also constitutes our necessary legitimate interest in processing your data. If your email inquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis for the processing. Your data will be erased as soon as it is no longer required to achieve the purpose for which it was collected. For your personal data transmitted by email, this is the case when the respective conversation with you has ended. The conversation is deemed to have ended when it can be inferred from the circumstances that the matter concerned has been conclusively clarified. You can object to the storage of your data at any time by notifying us of your objection. In such a case, the conversation cannot be continued.
All personal data stored in the course of contacting us will be erased in this case, provided that no statutory provisions prevent erasure.

Applications by email

By publishing job advertisements on our website, we may receive applications and the related personal data from you by email. In this way, your digital application documents are electronically processed and stored by us for the purpose of handling the application procedure. The legal basis for the processing is Art. 6(1)(b) GDPR and Art. 9(2)(b) GDPR. In addition, Art. 6(1)(f) and Art. 9(2)(f) GDPR provide a legal basis for storing your data, as we have a legitimate interest in legal defense and enforcement. The application documents and data you transmit are processed for the purpose of carrying out the application process and, where an employment relationship is established, may be stored for the purpose of carrying out that employment relationship. We automatically erase your applicant data six months after notification that your application has been rejected, provided that no employment relationship has been established. If an employment relationship has been established, we erase your data in accordance with the statutory periods after termination of the employment relationship. If you wish to object to the processing of your data to the extent described above, please note that your application process cannot be continued by email and we cannot process your application documents. As a result, we will not be able to consider you for the position applied for.

Cookie banner and cookies

We use the CookieScript cookie banner from the provider Objectis, UAB, Laisves str. 60, LT-05120 Vilnius, Lithuania. The processing is carried out on the basis of a data processing agreement with the provider. This processing for the purpose of consent management is based on the legal basis of Art. 6(1)(c) GDPR in conjunction with Section 25 TDDDG. We use the following cookies:

CookieScriptConsent: technically necessary first-party cookie, lifespan: 1 month, origin: cookie-script.com, purposes: storage of the information provided by the user in the cookie banner. Further information can be found directly here: https://cookie-script.com/legal/privacy-policy

Your rights as a data subject

As a data subject, you have the following rights:

–      pursuant to Art. 15 GDPR, the right to request information, within the scope specified therein, about your personal data processed by us;

–      pursuant to Art. 16 GDPR, the right to request the immediate rectification of inaccurate personal data stored by us or the completion of such data;

–      pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary for
- exercising the right of freedom of expression and information;
- compliance with a legal obligation;
- reasons of public interest; or
- the establishment, exercise or defense of legal claims;

–      pursuant to Art. 18 GDPR, the right to request restriction of the processing of your personal data, where
- the accuracy of the data is contested by you;
- the processing is unlawful, but you oppose its erasure;
- we no longer need the data, but you need it for the establishment, exercise or defense of legal claims; or
- you have objected to processing pursuant to Art. 21 GDPR;

–      pursuant to Art. 20 GDPR, the right to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request transmission to another controller;

–      pursuant to Art. 77 GDPR, the right to lodge a complaint with the competent supervisory authority: Bavarian State Office for Data Protection Supervision, Promenade 18, 91522 Ansbach, poststelle@lda.bayern.de, www.lda.bayern.de

Your right to object

Where we process personal data as explained above in order to safeguard our legitimate interests, which prevail in the context of a balancing of interests, you may object to this processing with effect for the future. Where processing is carried out for other purposes, you have a right to object only if there are grounds arising from your particular situation. After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defense of legal claims. This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for that purpose.

Objection to advertising emails

We hereby object to the use of contact details published in connection with the obligation to provide a legal notice for the purpose of sending advertising and informational materials that have not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example by spam emails.

Data processing by LinkedIn

We operate a company profile on LinkedIn, a platform of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Data processing takes place on the profile only if you contact us. No processing of personal data takes place outside LinkedIn. In some cases, this processing is subject to a commissioned processing relationship, and in some cases LinkedIn and we, as the page operator, act as independent controllers. LinkedIn provides profile operators with so-called insights. Detailed information on this data provided by LinkedIn can be found in the Data Processing Agreement between us and LinkedIn: https://de.linkedin.com/legal/l/dpa. LinkedIn also uses data for its own purposes. Information on data processing by LinkedIn can be found here: https://de.linkedin.com/legal/privacy-policy?. According to its own statements, LinkedIn applies the EU Standard Contractual Clauses for processing outside the EU/EEA for such third-country transfers. Processing by LinkedIn in the USA is covered by its participation in the US adequacy decision.