Privacy Policy
1. Privacy at a Glance
Thank you for your interest in our website. Protecting your personal data is important to us. Below, we explain what personal data we process when you visit our website, for what purposes this is done, and what rights you have.
Personal data refers to any information that can be used to personally identify you, such as your name, email address, phone number, or technical access data.
2. Data Controller
The entity responsible for data processing on this website is:
INTERAP GmbH + Co. KG
Kaiser-Joseph-Straße 267
79098 Freiburg
Germany
Phone: +49 (0)761 / 15258 - 0
Email: info@interap.de
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
3. Hosting
Our website is hosted on the Microsoft Azure cloud platform. Processing takes place within the European Union (EU).
With the EU Data Boundary for Azure, Microsoft ensures that customer data and personal data from the services used are stored and processed within the EU or the European Free Trade Association (EFTA), to the extent that this is intended for the services in question.
When you visit our website, the hosting provider automatically processes technical access data. This may include, in particular:
IP address
Date and time of access
Pages accessed
Referrer URL
Browser type and browser version
Operating system used
Hostname of the accessing computer
This data is processed to ensure the availability, stability, and security of the website.
The legal basis is Art. 6(1)(f) of the GDPR. Our legitimate interest lies in the secure and reliable provision of our online services.
4. Cookies and Consent Management
Our website uses its own cookie banner to load services requiring consent only after you have given your consent.
Technically necessary cookies or comparable storage technologies may be used to provide basic website functions or to save your cookie settings. This processing is based on Art. 6(1)(f) of the GDPR.
To the extent that other services requiring consent are used, processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) of the GDPR. You may revoke any consent you have given at any time with future effect.
5. Contact Form
If you contact us via a contact form, we process the data you enter to handle your inquiry and get in touch with you.
Depending on the form, the following data in particular may be processed:
Name
Email address
Phone number
Content of your message
Depending on the content of your inquiry, processing is based on Art. 6(1)(b) of the GDPR if your inquiry relates to a contract or pre-contractual measures. In all other cases, processing is based on Art. 6(1)(f) of the GDPR. Our legitimate interest lies in processing your inquiry.
6. Job Application Form
We provide a job application form on our website. If you apply for a position with us using this form, we will process the personal data you provide to carry out the application process.
In particular, the following data may be processed:
Email address
Phone number
Educational qualifications
Professional experience
Information on how long you have been working as a software developer
Current employment status
Other voluntary information you provide to us
The data entered via the application form is forwarded to us exclusively via email and is not additionally stored in a website database.
The processing is carried out to decide on the establishment of an employment relationship based on Section 26 of the German Federal Data Protection Act (BDSG) and Art. 6(1)(b) of the GDPR.
Application documents will be deleted no later than six months after the conclusion of the application process, provided that no statutory retention obligations prevent this or you have expressly consented to longer-term storage.
Emails are sent and processed internally using Microsoft 365.
7. Microsoft 365
We use Microsoft 365 for email communication and for the internal processing of business transactions. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
In the course of using Microsoft 365, personal data may be processed, in particular communication data, email content, contact information, and attachments.
Depending on the context, processing is based on Art. 6(1)(b) of the GDPR, Art. 6(1)(c) of the GDPR, or Art. 6(1)(f) of the GDPR. Our legitimate interest lies in secure and efficient business communication and organization.
8. Web Analytics with Pirsch Analytics
We use Pirsch Analytics for statistical analysis of our website usage.
Pirsch Analytics is a privacy-friendly web analytics software that operates without cookies. To analyze visitor traffic, Pirsch generates an anonymized visitor ID when a page is accessed. For this purpose, the following information in particular is processed using hashing:
IP address
User-Agent
Date of page view
Website-specific salt
The IP address is not permanently stored but is immediately anonymized through the hashing process. By incorporating the date and a website-specific salt, visitors cannot be permanently identified or recognized across different websites.
In addition, a rough geographic location—such as by country or city—may be determined. However, it is not possible to identify individual persons.
This processing is based on Art. 6(1)(f) of the GDPR. Our legitimate interest lies in the statistical analysis and optimization of our website.
9. Google reCAPTCHA
We use Google reCAPTCHA v3 to protect our forms from spam, automated submissions, and abuse.
The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA checks whether an entry on our website is made by a human or by an automated system. In doing so, personal data may be transmitted to Google, in particular:
IP address
Browser and device information
Duration of visit
Mouse movements and interactions
Any existing Google cookies
reCAPTCHA is used only if you have given your consent via our cookie banner. The legal basis is Art. 6(1)(a) of the GDPR.
You may revoke your consent at any time with future effect.
For more information on data processing by Google, please see Google's Privacy Policy.
10. Locally Embedded Fonts
We use locally embedded fonts on our website. This means that no fonts are loaded from external servers, in particular not from Google servers.
Therefore, when you visit our website, no personal data is transmitted to external providers in connection with the fonts.
11. Instagram Link
Our website contains a link to our Instagram profile. This is a simple external link. Simply visiting our website does not result in any data being transmitted to Instagram.
Only when you click on the link do you leave our website and are redirected to Instagram. The respective provider is responsible for data processing there.
Instagram is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.
12. Retention Period
We store personal data only for as long as is necessary for the respective purposes or as required by statutory retention obligations.
If you have given your consent, we will store the relevant data until you revoke your consent, provided there is no other legal basis for the processing.
13. Your Rights
You have the following rights at any time in accordance with legal provisions:
Right of access pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to object pursuant to Art. 21 GDPR
Right to withdraw consent pursuant to Art. 7(3) GDPR
To exercise your rights, you may contact us at any time.
14. Right to File a Complaint with the Supervisory Authority
If you believe that the processing of your personal data violates data protection law, you have the right to file a complaint with a data protection supervisory authority.
In particular, the data protection supervisory authority of the federal state in which our company is headquartered has jurisdiction.
15. Objection to Marketing Emails
We object to the use of the contact information published in accordance with the legal notice requirement for the purpose of sending unsolicited advertising and informational materials.
We reserve the right to take legal action in the event of unsolicited promotional communications, such as spam emails.
16. Validity of This Privacy Policy
This Privacy Policy is currently in effect.
We reserve the right to amend this Privacy Policy if legal requirements, technical processes, or the services we use change.