1. Privacy at a glance

General Information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to personally identify you. Detailed information can be found in the sections below of this Privacy Policy.

Data collection on this website

Data processing on this website is carried out by the website operator. You can find their contact details in the section "Controller".

Your data is collected, on the one hand, when you provide it to us, for example via a contact form, by email, by phone, or as part of an application. Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data such as browser, operating system, time of page access, or IP address.

Analytics tools and third-party providers

When you visit this website, your user behavior may be statistically evaluated. This is done in particular via analytics and marketing services, provided you have consented to this. Detailed information about the services used can be found in the following sections of this Privacy Policy.

What do we use your data for?

Some of the data is collected to provide the website without technical errors. Other data may be used for usage analysis, processing inquiries, communication, processing applications, or integrating external services.

Your rights

You have the right at any time to access, rectification, erasure, restriction of processing, data portability, and to object to certain processing activities. You may revoke any consent you have given at any time with effect for the future. You also have the right to lodge a complaint with a competent data protection supervisory authority.

2. Controller

The controller responsible for data processing on this website is:

Scharifi Holding GmbH
An der Autobahn 1
27299 Langwedel
Germany

Phone: +49 (4232) 3060-17
Email: [email protected]

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

3. Hosting

External hosting

This website is hosted externally. The personal data collected on this website is stored on the host's servers. This may include, in particular, IP addresses, contact inquiries, communication data, metadata, website access data, and other data generated via a website.

External hosting is carried out for the purpose of providing our online offering securely, quickly, and efficiently on the basis of Art. 6(1)(f) GDPR. If corresponding consent was requested, processing is carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

We use the following host:

HOSTINGER operations, UAB
Švitrigailos str. 34
LT-03230 Vilnius
Republic of Lithuania

Data processing agreement

We have concluded a data processing agreement for the use of the service mentioned above. This agreement ensures that the provider processes personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

4. Cloudflare

Our website may be delivered via Cloudflare services for secure and high-performance delivery. The provider is Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich, Germany, and Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.

Cloudflare provides security and performance features, such as a content delivery network, protection against abusive access, and optimization of loading times. In doing so, technical data such as IP addresses, browser information, system configurations, log data, and information about website access may be processed.

Use is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing our website securely, quickly, and reliably, as well as protecting against attacks and abusive access. If consent is required or requested, processing is carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

5. General information and mandatory disclosures

Privacy Policy

We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

We would like to point out that data transmission over the Internet, for example when communicating by email, may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Storage period

Unless a more specific storage period is stated within this Privacy Policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for erasure or revoke consent, your data will be deleted unless statutory retention obligations or other legally permissible reasons for storage prevent this.

Legal bases for data processing

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR. If the storage of information on your end device or access to information on your end device is concerned, processing is additionally carried out on the basis of Section 25(1) TDDDG. Consent can be revoked at any time.

If your data is required for contract performance or to carry out pre-contractual measures, processing is carried out on the basis of Art. 6(1)(b) GDPR. If we are legally obliged to process data, processing is carried out on the basis of Art. 6(1)(c) GDPR. In addition, processing may be carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

Recipients of personal data

In the course of our business activities, we work with external service providers. Personal data is only transferred if this is necessary for contract performance, if there is a legal obligation, if consent has been given, or if there is a legitimate interest. When using processors, the disclosure is based on a data processing agreement.

Revocation of your consent

You may revoke consent you have already given at any time. The lawfulness of the data processing carried out up to the time of revocation remains unaffected by the revocation.

Right to object under Art. 21 GDPR

If data processing is carried out on the basis of Art. 6(1)(e) or (f) GDPR, you have the right at any time to object to the processing of your personal data for reasons arising from your particular situation.

If your personal data is processed for direct marketing purposes, you have the right at any time to object to the processing of personal data concerning you for the purposes of such advertising.

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, you have the right to lodge a complaint with a competent supervisory authority.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done insofar as it is technically feasible.

Access, rectification, and erasure

Within the scope of the applicable legal provisions, you have the right at any time to free information about your stored personal data, as well as a right to rectification or erasure of this data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time for this purpose. The right to restriction of processing exists in particular if you dispute the accuracy of your personal data stored by us, if processing is unlawful, if we no longer need the data but you need it for the assertion, exercise, or defense of legal claims, or if you have objected to processing.

SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL and/or TLS encryption.

Objection to advertising emails

The use of contact data published as part of the legal notice obligation for sending advertising and informational materials that have not been expressly requested is hereby objected to.

6. Cookies and consent management

Cookies

Our website uses cookies. Cookies are small text files that are stored on your end device. Some cookies are technically necessary; others are used for analysis, integrating external content, or for marketing purposes.

Technically necessary cookies are used on the basis of Art. 6(1)(f) GDPR and Section 25(2) TDDDG. All non-essential cookies and comparable technologies are used only with your consent on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may revoke your consent at any time.

Consent management (cookie banner)

We use our own cookie banner, operated on our server. No external provider is involved in consent management. Statistics services (Google Tag Manager and Google Analytics) are only loaded after you have given your consent. Until then, no connection to Google is established.

We store your choice in the cookie “scharifi_consent” (storage period 182 days). It contains your choice, a randomly generated consent ID and the time. To be able to prove consent, we log on our server the consent ID, your choice, the time, the browser identifier (user agent) and your IP address exclusively in shortened, irreversible form (hash value). We delete these logs after 365 days.

The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR (obligation to provide proof) and Section 25(2) No. 2 TDDDG, as the cookie is technically necessary.

Changing or withdrawing consent: You can change your choice at any time via the link “Cookies” in the footer of every page or directly here: Open cookie settings. If you withdraw your consent to statistics, the Google Analytics cookies are deleted and the services are no longer loaded.

7. Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes in particular:

• Browser type and browser version
• Operating system used
• Referrer URL
• Hostname of the accessing computer
• Time of the server request
• IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6(1)(f) GDPR. Our legitimate interest lies in the technically error-free presentation and optimization of the website.

8. Contact

Contact form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and in case of follow-up questions.

Processing is carried out on the basis of Art. 6(1)(b) GDPR, provided your inquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases , processing is carried out on the basis of our legitimate interest in effectively handling inquiries addressed to us pursuant to Art. 6(1)(f) GDPR, or on the basis of your consent pursuant to Art. 6(1)(a) GDPR, if this was requested.

The data you enter in the contact form will remain with us until you request deletion, revoke consent that has been given, or the purpose for data storage no longer applies. Statutory retention obligations remain unaffected.

Inquiry by email, phone, or fax

If you contact us by email, phone, or fax, your inquiry, including all personal data resulting from it, will be stored and processed by us for the purpose of handling your request.

Processing is carried out on the basis of Art. 6(1)(b) GDPR or Art. 6(1)(f) GDPR. Mandatory statutory retention periods remain unaffected.

9. Applications

If you apply to us, we process the personal data you submit for the purpose of carrying out the application process. This may include, in particular, contact details, CV, references, qualifications, interview notes, and other information you provide.

The legal basis is Section 26 BDSG and Art. 6(1)(b) GDPR. If you give us consent to store your application for a longer period, processing is carried out on the basis of Art. 6(1)(a) GDPR.

Application documents may be stored and processed internally in Microsoft 365 / OneDrive. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

If no employment relationship is established, we will delete your application data after completion of the application process, unless statutory retention periods or legitimate interests, such as defense against legal claims, prevent this.

10. Plugins and tools

Google Fonts (local)

This website uses Google Fonts for the consistent display of fonts, which are installed locally. A connection to Google servers does not take place.

Google Maps

This website uses Google Maps. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps allows us to embed map material on our website.

To use Google Maps, it is necessary to process your IP address. This information may be transmitted to servers of Google, including in the USA. Use takes place only with your consent on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, provided Google Maps is not technically blocked or is only loaded after active consent.

Mapbox (interactive location map)

For the interactive map on our locations overview we use the map service Mapbox. The provider is Mapbox, Inc., 740 15th Street NW, 5th Floor, Washington, DC 20005, USA. The map is only loaded when you click the button to show the map or if you have consented to the category “External media” in the cookie banner; in that case it loads automatically when you visit the page. When loading, your IP address as well as technical browser and device information are transmitted to Mapbox servers; a transfer to the USA is possible. Further information: https://www.mapbox.com/legal/privacy.

The legal basis is your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You can withdraw it at any time via the cookie settings. The map images on the individual location pages, by contrast, are stored on our own server; no connection to Mapbox is established when these pages are accessed.

Cloudflare Turnstile

To protect our forms against spam and automated access we use Cloudflare Turnstile. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Turnstile checks whether an input is made by a human or by an automated program. For this purpose, on pages with forms your IP address as well as technical browser and device information are transmitted to Cloudflare; a transfer to the USA is possible. According to Cloudflare, Turnstile does not use cookies for tracking.

The use is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in protecting our website against spam and misuse. Further information: https://www.cloudflare.com/privacypolicy/.

11. Analytics and marketing services

We use analytics and marketing services to evaluate the use of our website, improve our online offering to improve and measure the effectiveness of advertising measures. To the extent these services are not technically required, they are used only with your consent. The legal basis is Art. 6(1)(a) GDPR as well as Section 25(1) TDDDG. You may revoke your consent at any time with effect for the future.

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager enables us to manage website tags via an interface. Google Tag Manager itself does not create user profiles and does not store cookies for analytics purposes. However, it can trigger other services that in turn process data.

Google Tag Manager is used only if you have consented to the services integrated via it, insofar as they require consent.

Google Analytics

We use Google Analytics, provided you have consented to this. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables us to analyze the use of our website. In particular, page views, time spent, interactions, technical information, device information, and IP addresses may be processed.

Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent can be revoked at any time.

We use Google Analytics 4. According to Google, IP anonymization is used by default in Google Analytics 4. IP addresses are truncated within the EU before usage data can be processed on servers.

Google Ads and conversion tracking

We use Google Ads and Google Conversion Tracking, provided you have consented to this. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With Google Ads, we can display advertisements and measure the effectiveness of our advertising measures.

Cookies or comparable technologies may be used and information about your user behavior may be processed. Processing is carried out exclusively on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG.

12. Use of Artificial Intelligence

We may use Artificial Intelligence to support internal work processes, for example in the creation, structuring, or editorial preparation of website content, as well as in the creation or editing of visual content. In doing so, we do not automatically process personal data of website visitors via an AI system, unless expressly stated elsewhere.

AI-generated or AI-assisted edited image content may be used on this website. This serves visual design and illustration purposes. If we use AI systems in the future with which visitors interact directly, or publish content that must be labeled as AI-generated or AI-edited under the applicable legal requirements, we will make this transparent accordingly.