Privacy policy

This is a courtesy translation. Only the German Datenschutzerklärung is legally binding.

1. Controller

The controller responsible for data processing on this website is:

Company

AKS Anlagen, Konstruktion und Service GmbH

Address

Am Rennebaum 11, 45549 Sprockhövel, Germany

Represented by

Managing Director Dipl.-Ing. Thomas Wegemann

Telephone

+49 2339 121 99 90

Email

kontakt@aksgmbh.com

We have not appointed a data protection officer, as the statutory requirements for doing so are not met. If you have any questions about data protection, please use the contact details given above.

2. Legal bases

We process personal data on the following legal bases:

• Consent under Art. 6(1)(a) GDPR, for example for statistics and ad measurement or when loading external maps
• Contract or pre-contractual measures under Art. 6(1)(b) GDPR, for example for inquiries and applications
• Legal obligation under Art. 6(1)(c) GDPR, for example for retention periods under tax law
• Legitimate interest under Art. 6(1)(f) GDPR, for example in the secure operation of the website
• For applications, additionally Section 26 BDSG (Bundesdatenschutzgesetz, German Federal Data Protection Act) in conjunction with Art. 88 GDPR

3. Hosting and server log files

This website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin. A data processing agreement pursuant to Art. 28 GDPR is in place with this provider.

When you access the website, the server automatically records data transmitted by your browser:

• IP address of the requesting device, anonymized by our hosting provider
• date and time of access
• page or file accessed
• amount of data transferred and access status message
• browser type, browser version and operating system
• previously visited page (referrer)

Our hosting provider anonymizes the host name or IP address before the data is stored in the log files. This means that we are unable to identify individual persons. The log files are available for six weeks and are then deleted.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and trouble-free operation of the website.

4. Cookies and consent

We set technically necessary cookies on the basis of Section 25(2) TDDDG (Telekommunikation-Digitale-Dienste-Datenschutz-Gesetz, German Telecommunications and Digital Services Data Protection Act) and Art. 6(1)(f) GDPR. We set all other cookies and similar technologies only with your consent under Section 25(1) TDDDG and Art. 6(1)(a) GDPR.

On your first visit, we use a banner to ask whether you consent to statistics measurement and marketing measurement. Until you have given your consent, no analytics or advertising services are loaded and no corresponding cookies are set. You can allow or reject each purpose individually; rejecting is just as easy to reach as consenting.

We store your choice in your browser’s local storage under the key “aks-einwilligung”. The only information stored is which purposes you have consented to and when you did so. This entry is not transmitted to us and expires after twelve months; we will then ask you again.

You can change or withdraw your consent at any time with effect for the future. To do so, click “Cookie settings” in the footer. The Google Maps map has its own prompt and, independently of this, is only loaded after you click “Load map” (section 8).

5. Contacting us and inquiry form

If you contact us via the form, by email or by telephone, we process the information you provide in order to handle your inquiry. Mandatory fields are name, company, email address, telephone number and the subject area of your inquiry. Your message and an attached file, for example a drawing, are optional.

The legal basis is Art. 6(1)(b) GDPR if the inquiry is aimed at a contract, otherwise Art. 6(1)(f) GDPR. We delete the data as soon as the inquiry has been dealt with conclusively, provided that no statutory retention periods prevent this. Retention periods of six to ten years under commercial and tax law remain unaffected.

6. Applications

We process applications received via the form on the careers page, by email, via WhatsApp or via a job advertisement on LinkedIn exclusively for the purposes of the application process. This includes your name, contact details, information on the position you are interested in and the documents you submit.

The legal basis is Art. 6(1)(b) GDPR, as the processing serves to initiate an employment relationship, and additionally Section 26(1) BDSG in conjunction with Art. 88 GDPR. If you are not hired, we delete your documents no later than six months after the end of the application process. The legal basis for retention after a rejection is Art. 6(1)(f) GDPR; our legitimate interest lies in being able to defend ourselves against possible claims under the German General Equal Treatment Act (Allgemeines Gleichbehandlungsgesetz). If you would like us to keep your documents for longer, we will ask for your consent.

If you voluntarily provide information that falls within the special categories of personal data under Art. 9 GDPR, for example about a severe disability, we process it on the basis of Art. 9(2)(b) GDPR in conjunction with Section 26(3) BDSG.

7. WhatsApp Business

On the careers page, we offer the option of contacting us via WhatsApp Business. We use the service on a company device. If you write to us via WhatsApp, we process your message, your cell phone number and your profile in order to respond to your inquiry. The legal basis is Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR, as applicable.

The service is provided by WhatsApp Ireland Limited, Merrion Road, Dublin 4, Ireland. In this context, data may be transferred to Meta Platforms, Inc. in the USA. Meta is certified under the EU-US Data Privacy Framework. We have no influence over the processing carried out by WhatsApp.

7a. LinkedIn company page

We operate a company page on the professional network LinkedIn: https://www.linkedin.com/company/aks-anlagen-konstruktion-und-service-gmbh/. For users in the European Economic Area and Switzerland, the provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). You can reach the page from our website via a link; when you click on it, you leave our website. As long as you do not click on the link, no data is transferred to LinkedIn.

What we use the page for. We use it to present our company, our services and job vacancies, and to communicate with customers, prospective customers and applicants. The legal basis is our legitimate interest in presenting our company and in communicating via a widely used professional network (Art. 6(1)(f) GDPR). If an inquiry is aimed at a contract, the legal basis is Art. 6(1)(b) GDPR.

What LinkedIn processes. When you visit our page, follow it or interact with posts, LinkedIn processes personal data under its own responsibility, for example your profile data, your interactions and usage and device data, among other things by means of cookies. LinkedIn also uses this data for its own purposes, for example for personalized advertising. Details can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy. We have no influence over this processing.

In this context, data may be transferred to LinkedIn Corporation in the USA. LinkedIn is certified under the EU-US Data Privacy Framework; in addition, standard contractual clauses pursuant to Art. 46(2)(c) GDPR are in place.

Page statistics (“Page Insights”), joint controllership. LinkedIn provides us with statistics on our page, for example the number of views, reactions and followers and their breakdown by industry, job function, company size or region. We and LinkedIn are joint controllers for the processing of personal data to create these statistics (Art. 26 GDPR). We only receive the statistics in aggregated form; we are unable to draw conclusions about individual persons. We use them to tailor our posts more closely to our target groups. The legal basis is our legitimate interest in doing so (Art. 6(1)(f) GDPR).

The allocation of responsibilities is set out in an agreement with LinkedIn: https://legal.linkedin.com/pages-joint-controller-addendum. Under this agreement, LinkedIn has undertaken to fulfill the obligations under the GDPR for the processing of the page statistics, in particular informing data subjects and responding to requests. The competent lead supervisory authority for this processing is the Irish data protection authority (Data Protection Commission).

Applications via LinkedIn. If you apply via a job advertisement on LinkedIn, LinkedIn transmits the information from your application to us. Section 6 applies to any further processing.

Your rights. You can assert your rights under sections 14 to 16 against us and against LinkedIn. We forward requests concerning the page statistics to LinkedIn. You manage your data and advertising settings directly in your LinkedIn account.

8. Google Maps

On the contact page, we embed a map from Google Maps. The map is only loaded when you actively click “Load map”. Only then are your IP address and other connection data transmitted to Google.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework. The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw your consent at any time.

9. Fonts and icons

We integrate fonts and icons locally from our own server. No connection to third-party servers is established in the process.

10. Google Tag Manager

We use Google Tag Manager from Google Ireland Limited to integrate the services listed below. Tag Manager itself does not set any cookies and does not analyze any data; it serves exclusively to manage the tools we use. However, your IP address is transmitted to Google when it is loaded. It is therefore only executed once you have consented to at least one of the purposes “statistics” or “marketing”.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

11. Google Analytics

With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited. We use it to analyze how our website is used, which pages are visited and how visitors find their way to us. The data processed includes, in particular, a truncated IP address, information about the device and browser, the pages visited, the length of the visit and the source of the visit.

Google uses your IP address only to determine your approximate location and does not store it. Google processes the data on our behalf on the basis of a contract pursuant to Art. 28 GDPR. A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework.

Storage period. Two retention periods are set in our property: event data, i.e. the individual interactions on the website, is deleted after two months. User-level data linked to an identifier is deleted after 14 months. This period starts again whenever you visit again. The standard reports in Google Analytics are based on aggregated data and are not affected by this.

Cookies. With your consent, Google Analytics sets the cookies “_ga” and “_ga_G5J311KJTS”. Both serve to recognize your browser on a subsequent visit and expire 13 months after your first visit. This period is not extended by further visits. You can withdraw your consent using the “Cookie settings” button in the footer. We will then immediately delete these cookies from your browser, and they will not be set again.

What we deliberately do not use. The “Google signals” function, with which Google Analytics can link visits across devices to signed-in Google accounts, is switched off in our property. Likewise, the use of the analytics data for personalized advertising is prohibited and the sharing of the data with other Google products is deactivated. We do not use it to create audiences for advertising.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time via “Cookie settings” in the footer.

12. Google Ads and conversion measurement

We advertise with Google Ads. If you reach this website via one of our ads and have given your consent, Google sets a cookie that makes it possible to track whether the visit led to an inquiry. From this, we only learn how many inquiries in total can be attributed to an ad, not which individual person clicked on it.

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Unlike in the case of audience measurement, Google does not act on our behalf here but as an independent controller for the data generated within its advertising network. A transfer to the USA is possible; Google LLC is certified under the EU-US Data Privacy Framework. The conversion measurement cookie is called “_gcl_au” and expires after 90 days. If you withdraw your consent, we will delete it immediately.

No enhanced conversions. We do not use the “enhanced conversions” function, in which Google receives encrypted contact data from a form for attribution purposes. Nothing from the information you enter in the contact form is transmitted to Google.

The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time via “Cookie settings” in the footer.

13. Recipients and transfers to third countries

We only pass on personal data if this is necessary to deal with your request, if you have given your consent or if we are legally obliged to do so. Service providers that process data on our behalf are contractually bound pursuant to Art. 28 GDPR. This applies to STRATO GmbH for hosting (section 3) and to Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland for our email mailboxes. In the case of Microsoft, a transfer to the USA is possible; Microsoft Corporation is certified under the EU-US Data Privacy Framework.

Where data is transferred to countries outside the EU and the EEA, for example in the case of WhatsApp, Google, Microsoft and LinkedIn, we rely on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework. In addition, the providers mentioned have concluded standard contractual clauses pursuant to Art. 46(2)(c) GDPR.

14. Your rights

Under the GDPR, you have the following rights:

• Access to the data processed concerning you (Art. 15)
• Rectification of inaccurate data (Art. 16)
• Erasure (Art. 17)
• Restriction of processing (Art. 18)
• Data portability (Art. 20)
• Objection to processing based on legitimate interests (Art. 21)
• Withdrawal of consent given, with effect for the future (Art. 7(3))

To exercise these rights, a message to kontakt@aksgmbh.com is sufficient.

15. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out on the basis of a legitimate interest under Art. 6(1)(f) GDPR. We will then no longer process the data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defense of legal claims.

An informal message to kontakt@aksgmbh.com is sufficient to lodge your objection.

16. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia), Kavalleriestraße 2–4, 40213 Düsseldorf.

17. No automated decision-making

No automated decision-making, including profiling, within the meaning of Art. 22 GDPR takes place.

18. Changes to this privacy policy

We will amend this privacy policy if the legal situation or our processing operations change. The version published here at any given time applies.

Last updated: November 2026