Privacy statement
As of October 2025
Table of contents
I. Name and address of the person responsible
The person responsible within the meaning of the General Data Protection Regulation (GDPR) and others
Data protection regulations are:
UTILIGENCE GmbH
Turley-Strasse 8
68167 Mannheim
germany
0621 9 76 09 14—0
datenschutz@utiligence.de
HOME
II. Contact details of the data protection officer
The data protection officer of the person responsible is:
DataCo GmbH
Sandstraße 33
80335 Munich
germany
+49 89 7400 45840
www.dataguard.de
III. General information about data processing
1. Scope of processing of personal data
In principle, we only process our users' personal data insofar as this
to provide a functional website as well as our content and services
is required. The processing of personal data of our users takes place
regularly only with the user's consent. An exception applies in such cases where
Who do not seek prior consent for factual reasons
is possible and the processing of data is required by legal regulations
is.
2. Legal basis for processing personal data
Insofar as we obtain the consent of
Article 6 (1) (a) GDPR serves as the legal basis for collecting data subjects.
When processing personal data to fulfill a contract,
To which the data subject is a party is necessary, Article 6 (1) (1) serves
lit. b DSGVO as a legal basis. This also applies to processing operations carried out for
implementation of pre-contractual measures is required.
Insofar as personal data is processed to fulfill a legal
The obligation to which our company is subject is required is served by Art. 6 (1) (1)
lit. c DSGVO as a legal basis.
In the event that vital interests of the data subject or of another
make it necessary for natural persons to process personal data,
Article 6 (1) (d) GDPR serves as the legal basis.
Is processing to protect a legitimate interest of our company
or of a third party and outweigh the interests, fundamental rights and
The fundamental freedoms of the person concerned do not have the first-mentioned interest, so Article 6 (1) serves
S. 1 lit. f DSGVO as the legal basis for processing.
3. Data deletion and storage period
The personal data of the person concerned will be deleted or blocked
as soon as the purpose of storage no longer applies. Storage can also
If this is done by the European or national legislator in
Union regulations, laws or other regulations to which the
Responsible person is subject to, was provided for. Blocking or deleting the data
takes place even if a prescribed by the above standards
Storage period expires, unless there is a need for further storage
which consists of data for the conclusion or fulfilment of a contract.
IV. Rights of the person concerned
If your personal data is processed, you are a data subject within the meaning of
GDPR and you have the following rights vis-à-vis the person responsible:
1. Right to information
You can request confirmation from the person responsible as to whether
personal data concerning you is processed by him.
If there is such processing, you can contact the person responsible via the following
Request information:
1. the purposes for which the personal data are processed;
2. the categories of personal data that are processed;
3. the recipients or categories of recipients to whom you
relevant personal data has been disclosed, or
be disclosed;
4. the planned period of storage of personal data relating to you
data or, if specific information is not possible, criteria for
definition of the storage period;
5. the existence of a right to correct or delete you
relevant personal data, a right to restrict
Processing by the person responsible or a right of objection
against this processing;
6. the existence of a right of appeal to a supervisory authority;
7. all available information about the origin of the data when the
personal data is not collected from the data subject;
8. the existence of automated decision-making, including
Profiling in accordance with Article 22 (1) and (4) GDPR and at least in these cases —
meaningful information about the logic involved and the scope
and the intended effects of such processing for
person concerned.
You have the right to request information as to whether
personal data to a third country or to an international organization
be transmitted. In this context, you can request that
appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer
to be taught.
2. Right to rectification
You have the right to correct and/or complete the
responsible person, insofar as the processed personal data concerning you,
are incorrect or incomplete. The person responsible has the correction immediately
to carry out.
3. Right to restrict processing
Under the following conditions, you can restrict processing
request personal data relating to you:
▪ if you check the accuracy of the personal data concerning you for
dispute a period that enables the person responsible to
to verify the accuracy of personal data;
▪ the processing is unlawful and you have requested the deletion of
Reject personal data and instead restrict
request the use of personal data;
▪ the person responsible the personal data for the purposes of
processing is no longer required, but you need it to enforce it,
need to exercise or defend legal claims, or
▪ if you object to processing in accordance with Article 21 (1) GDPR
and it is not yet clear whether the legitimate reasons of
Responsible people outweigh your reasons.
Has the processing of personal data concerning you been restricted
Apart from being stored, may this data only be stored with your consent
or to assert, exercise or defend legal claims, or
to protect the rights of another natural or legal person, or from
reasons of important public interest of the Union or a Member State
be processed.
Has the processing been restricted in accordance with the above requirements
limited, you will be informed by the person responsible before the
restriction is lifted.
4. Right to deletion
a) Obligation to delete
You can demand from the person responsible that the person concerned
personal data is deleted immediately, and the person responsible is
obliged to delete this data immediately if one of the following reasons
Applies to:
1. The personal data concerning you is for the purposes for which
they were collected or otherwise processed, no longer
necessary.
2. You withdraw your consent to the processing in accordance with Art. 6 para.
1 p. 1 lit. a or Art. 9 para. 2 lit. a DSGVO, and there is no one
another legal basis for processing.
3. You object to processing in accordance with Article 21 (1) GDPR
and there are no overriding legitimate reasons for processing,
or, in accordance with Article 21 (2) GDPR, you file an objection against
Processing one.
4. The personal data concerning you was unlawful
processed.
5. The deletion of personal data relating to you is subject to
Fulfilment of a legal obligation under Union law or
Member State law to which the person responsible is subject is required.
6. The personal data concerning you was collected in relation to
Information society services offered in accordance with Article 8 (1) GDPR
raised.
b) Information to third parties
Does the person responsible have the personal data concerning you publicly
made and if he is obliged to delete it in accordance with Article 17 (1) GDPR, he shall
taking into account available technology and implementation costs
appropriate measures, including technical measures, for data processing
to inform responsible persons who process the personal data
that you, as the person concerned, have deleted all links to them
personal information, or copies or replications of it
have requested personal data.
c) Exemptions
The right to deletion does not exist insofar as processing is necessary
1. to exercise the right to freedom of expression and information.
2. to fulfill a legal obligation that requires processing under
Union or Member State law to which the person responsible is subject,
requires, or to perform a task that is in the public interest
is or is exercised in the exercise of official authority of the person responsible
was transferred;
3. for reasons of public interest in the public sector
health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR;
4. for archiving purposes in the public interest, scientific or
historical research purposes or for statistical purposes in accordance with Art. 89 para.
1 GDPR, insofar as the law referred to in section a) is likely to
makes the achievement of the objectives of this processing impossible or serious
impaired, or
5. to assert, exercise or defend legal claims.
5. Right to be informed
Do you have the right to correct, delete or restrict processing
asserted against the person responsible, the person responsible is obliged to
Recipients to whom personal data concerning you is disclosed
has been, this correction or deletion of the data or restriction of
To report processing, unless this proves impossible or is possible with a
disproportionate effort.
You have the right vis-à-vis the person responsible to
to be taught.
6. Right to data portability
You have the right to collect personal data relating to you that you submit to
responsible persons have provided, in a structured, common and
obtain machine-readable format. You also have the right to this data
another person responsible without hindrance from the person responsible, the
to transfer the personal data provided, provided
1. processing based on consent in accordance with Article 6 (1) (a) GDPR
or Art. 9 para. 2 lit. a GDPR or on a contract in accordance with Art. 6 para. 1
lit. b DSGVO is based and
2. processing is carried out using automated procedures.
In exercising this right, you also have the right to obtain that you
relating personal data directly from a person responsible to
be transmitted to other responsible parties, insofar as this is technically feasible.
The freedoms and rights of other persons must not be affected as a result.
The right to data portability does not apply to processing of personal data
Data that is necessary to perform a task in the public sector
is of interest or is exercised in the exercise of official authority of the person responsible
was transferred.
7. Right of objection
They have the right, for reasons arising from their particular situation,
at any time against the processing of personal data concerning you, which
based on Article 6 (1) (e) or (f) GDPR, to file an objection; this
This also applies to profiling based on these provisions.
The person responsible does not process personal data relating to you
more, unless he has compelling legitimate reasons for processing
prove that outweigh your interests, rights and freedoms, or that
Processing serves to assert, exercise or defend
legal claims.
Is the personal data concerning you processed for direct marketing
, you have the right to object to the processing of you at any time
to use relevant personal data for the purpose of such advertising;
This also applies to profiling, insofar as it is associated with such direct advertising.
If you object to processing for direct marketing purposes, you will
relevant personal data is no longer processed for these purposes.
In connection with the use of services provided by
Information society — notwithstanding Directive 2002/58/EC — your
To exercise the right of objection by means of automated procedures, in which technical
specifications are used.
8. Right to withdraw the declaration of consent under data protection law
You have the right to your declaration of consent under data protection law at any time
revoked. Withdrawal of consent increases the legality resulting from
The consent does not affect processing carried out up to the time of withdrawal.
9. Automated decision in individual cases, including profiling
You have the right, not one, exclusively to automated processing
— including profiling — to be subject to a based decision that
has legal effect against you or you are similarly significant
impaired. This does not apply if the decision
1. for the conclusion or performance of a contract between you and
responsible person is required
2. on the basis of Union or Member State legislation which
the person responsible is subject to, is permitted and is subject to this legislation
appropriate measures to protect your rights and freedoms, and
contain your legitimate interests, or
3. is made with your express consent.
However, these decisions may not fall into specific categories
personal data is based on Article 9 (1) GDPR, unless Article 9 (2)
lit. a or b GDPR applies and appropriate measures to protect rights and
freedoms and your legitimate interests have been met.
With regard to the cases mentioned in 1. and 3. the person responsible shall make appropriate
Measures to protect your rights and freedoms as well as your legitimate interests
Maintain at least the right to obtain the intervention of a person on the part of
of the person responsible, on presentation of his own position and on contestation of
Decision belongs.
10. Right to lodge a complaint with a supervisory authority
Without prejudice to any other administrative or judicial law
You have the right to lodge a complaint with a supervisory authority,
in particular in the Member State of your residence, place of work or
Location of the alleged infringement, to if you believe that the processing
the personal data concerning you violates the GDPR.
The supervisory authority with which the complaint has been lodged shall inform the
Complainant on the status and results of the complaint, including
the possibility of a judicial remedy under Article 78 GDPR.
V. Provision of the website and creation of log files
1. Description and scope of data processing
Each time you visit our website, our system automatically collects data and
Information from the computer system of the calling computer.
The following data is collected here:
▪ Information about the browser type and version used
▪ The user's operating system
▪ The user's IP address
▪ Date and time of access
▪ Websites from which the user's system accesses our website
ArriVES
▪ Web pages accessed by the user's system via our website
will
▪ Amount of data sent in bytes
This data is stored in our system's log files. A storage
this data together with other personal data of the user
not instead of.
2. Purpose of data processing
The temporary storage of the IP address by the system is necessary in order to
to enable the website to be delivered to the user's computer. For this
The user's IP address must be stored for the duration of the session.
They are stored in log files to ensure the functionality of the website
to ensure. In addition, we use the data to optimize the website and to
Ensuring the security of our information technology systems. One
Evaluation of data for marketing purposes does not take place in this context
instead of.
Our legitimate interest in data processing also lies in these purposes
in accordance with Art. 6 (1) (f) GDPR.
3. Legal basis for data processing
The legal basis for the temporary storage of data and log files is Art.
6 Para. 1 p. 1 lit. f GDPR.
4. Storage period
The data is deleted as soon as it is necessary to achieve the purpose for which it was collected
are no longer required. If the data is collected to provide the
Website, this is the case when the respective session is over.
If the data is stored in log files, this is no later than seven days of
case. Further storage is possible. In this case, the IP
Deletes or distorts users' addresses so that an assignment of the caller
Clients are no longer possible.
5. Objection and removal option
The collection of data to provide the website and the storage of the data
In log files, it is absolutely necessary to operate the website. It therefore consists of
There is no right of objection on the part of the user.
VI. Use of cookies
1. Description and scope of data processing
Our website uses cookies. Cookies are text files that
in the Internet browser or from the Internet browser on the user's computer system
be saved. When a user calls up a website, a cookie can be on the
The user's operating system can be saved. This cookie contains a
characteristic string that uniquely identifies the browser when
allows you to access the website again.
We use cookies to make our website more user-friendly. Some
Elements of our website require that the calling browser even after
a page change can be identified.
The following data is stored and transmitted in the cookies:
We also use cookies on our website, which allow an analysis of
Enable users' surfing behavior.
The following data can be transmitted in this way:
▪ Use of website functions
User data collected in this way is processed by technical
Precautions pseudonymized. Therefore, an assignment of the data to the caller
Users are no longer possible. The data is not shared with other
Users' personal data is stored.
2. Purpose of data processing
The purpose of using technically necessary cookies is to use
to simplify websites for users. Some features of our website
cannot be offered without the use of cookies. For this, it is
It is necessary that the browser is recognized even after a page change.
We need cookies for the following applications:
The user data collected through technically necessary cookies is not used for
used to create user profiles.
Analysis cookies are used for the purpose of improving the quality of our
to improve the website and its content. Analytical cookies tell us how
The website is used and can therefore constantly optimize our offer.
Consent to optional use for marketing and statistics
3. Legal basis for data processing
The legal basis for processing personal data using
Article 6 (1) (a) of technically unnecessary cookies is Art. 6 (1) (a) GDPR.
The legal basis for processing personal data using
The technically necessary cookie is Art. 6 (1) (f) GDPR.
4. Duration of storage, right of objection and removal
Cookies are stored on the user's computer and sent by the user to our
Page submitted. As a user, you therefore also have full control over the
use of cookies. By changing the settings in your
Internet browsers can deactivate the transmission of cookies or
restrict. Cookies that have already been saved can be deleted at any time. Dies
can also be automated. If cookies are disabled for our website,
may no longer be able to fully use all functions of the website
become.
If you use a Safari browser version 12.1 or higher, cookies are saved after seven
Days automatically deleted. This also applies to opt-out cookies, which are used to prevent
be set by tracking measures.
VII. Email contact
1. Description and scope of data processing
On our website, you can contact us via the
Email address possible. In this case, the messages sent with the email will
The user's personal data is stored.
The data is used exclusively to process the conversation.
2. Purpose of data processing
If you contact us by email, this also includes the necessary
legitimate interest in processing the data.
3. Legal basis for data processing
The legal basis for processing the data is, if there is the consent of
Users Art. 6 para. 1 lit. a DSGVO.
Legal basis for processing the data that is collected in the course of sending a
Email transmission is Art. 6 para. 1 lit. f DSGVO. Is the email contact aimed at
Conclusion of a contract, this is an additional legal basis for processing
Art. 6 para. 1 lit. b GDPR.
4. Storage period
The data is deleted as soon as it is necessary to achieve the purpose for which it was collected
are no longer required. For personal data sent by email
has been sent, is this the case when the respective conversation with the
User is finished. The conversation is ended when, due to the circumstances,
shows that the facts in question have been finally clarified.
The additional personal data collected during the sending process
are deleted after a period of seven days at the latest.
5. Objection and removal option
The user has the option at any time to give their consent to the processing of
to withdraw personal data. Does the user contact us via email
so he can save his personal data at any time
Disagree. In such a case, the conversation cannot be continued.
You can withdraw your consent at any time with effect for the future. In
In case of withdrawal, your data will be deleted immediately. Your data will
otherwise deleted when we have processed your request or the purpose of
Storage has been omitted. You can contact yourself at any time via
inform stored data.
All personal data that was stored in the course of contacting you,
are deleted in this case.
VIII. Contact form
1. Description and scope of data processing
There is a contact form on our website, which is for
electronic contact can be used. Does a user take this
Possibility true, the data entered in the input mask will be sent to us
transmitted and saved.
At the time the message is sent, the following data is stored:
▪ Email address
▪ Name
▪ First name
▪ IP address of the calling computer
▪ Date and time of contact
▪ Companies
Your consent is given for the processing of the data as part of the sending process
obtained and referred to this privacy policy.
Alternatively, you can contact us via the email address provided. In
In this case, the personal data transmitted by email will be
User saved.
The data is used exclusively to process the conversation.
2. Purpose of data processing
The processing of personal data from the input form is for us alone
to process the contact If you contact us by email,
This also includes the necessary legitimate interest in processing the data.
The other personal data processed during the sending process
are used to prevent misuse of the contact form and ensure security
ensure our information technology systems.
3. Legal basis for data processing
The legal basis for processing the data is, if there is the consent of
Users Art. 6 para. 1 p. 1 lit. a DSGVO.
Legal basis for processing the data that is collected in the course of sending a
Email transmission is Art. 6 (1) (f) GDPR. Is the email contact aimed at
From the conclusion of a contract, there is an additional legal basis for
Processing Art. 6 para. 1 p. 1 lit. b GDPR.
4. Storage period
The data is deleted as soon as it is necessary to achieve the purpose for which it was collected
are no longer required. For personal data from the input form
of the contact form and those sent by email, is this then the
If the respective conversation with the user has ended. It is finished
Conversation when it can be inferred from the circumstances that the
The relevant facts have been finally clarified.
The additional personal data collected during the sending process
are deleted after a period of seven days at the latest.
5. Objection and removal option
The user has the option at any time to give their consent to the processing of
to withdraw personal data. Does the user contact us via email
so he can save his personal data at any time
Disagree. In such a case, the conversation cannot be continued.
You can withdraw your consent at any time with effect for the future. In
In case of withdrawal, your data will be deleted immediately. Your data will
otherwise deleted when we have processed your request or the purpose of
Storage has been omitted. You can contact yourself at any time via
inform stored data.
All personal data that was stored in the course of contacting you,
are deleted in this case.
IX. Application by email
1. Scope of processing of personal data
You can send us your application via email. In doing so, we record your
Email address and the data you provided in the email.
▪ Title
▪ First name
▪ Name
▪ Address
▪ Telephone/mobile number
▪ Email address
▪ Salary expectation
▪ Information on education and schooling
▪ Language skills
▪ CV
▪ Testimonials
▪ Photo
2. Purpose of data processing
The processing of personal data from your application email helps us
just to process your application.
3. Legal basis for data processing
The legal basis for processing your data is the initiation of a contract based on
The data subject's request is made, Art. 6 para. 1 s.1 lit. b alt. 1 GDPR and § 26 para.
1 P. 1 BDSG.
4. Storage period
After completion of the application process, the data will be up to six
Saved for months. At the latest after six months, your data will
deleted. In the event of a legal obligation, the data will be processed as part of
saved in accordance with applicable regulations.
5. Objection and removal option
The applicant has the option of processing personal data at any time
to object to data. In such a case, the application can no longer
be taken into account.
If you would like to make changes, please contact bewerbung@utiligence.de.
All personal data collected in the course of electronic applications
have been saved will be deleted in this case.
6. Recipient/ Transfer of data
As part of processing your application, we only provide personal data
continue the following recipients:
a) Companies within the group of companies (valantic GmbH)
Disclosure may take place if this is necessary to decide on the reasons for a
employment relationship or to carry out groupwide organized
application process is required (e.g. integration of central HR functions that
respective department or management of an affiliated company).
Legal bases: Section 26 (1) (1) BDSG and Art. 6 (1) (b) GDPR
(contract initiation); also Art. 6 (1) (f) GDPR (legitimate interest in
efficient group-wide personnel administration). Provided that consideration for
Jobs at other affiliated companies beyond the original purpose
If necessary, we will obtain your consent in accordance with Art. 6 (1) (a) GDPR
(Withdrawal is possible at any time with effect for the future).
b) Contract processor — Personio
For application management, we use the Personio service as a contract processor
in accordance with Art. 28 GDPR. Personio processes your data exclusively in accordance with our
Instruction based on an order processing contract and appropriate technical
and organizational measures. Storage is carried out in data centers within
the EU/EEA. If Personio uses sub-processors or in exceptional cases
If data is transferred to third countries, this is only done using appropriate guarantees
(in particular EU standard contractual clauses).
Any further transmission to other recipients will only take place if
There is a legal obligation to do so (Art. 6 (1) (c) GDPR).
X. Use of corporate presences in career-oriented
networks
1. Scope of data processing
We use the opportunity to create a company presence on a job-oriented basis
networks. On the following career-oriented networks, we maintain a
Corporate identity:
LinkedIn:
LinkedIn, Unlimited Company Wilton Place, Dublin 2, Ireland
XING:
XING SE, Dammtorstraße 30, 20354 Hamburg, Germany
On our site, we provide information and offer users the
Possibility of communication.
The company's presence is used for applications, information/PR and active sourcing
used.
To process your personal data by the
We do not have any information about the corporate identity of the companies responsible for them.
For more information, please see the privacy policy of:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
XING:
https://privacy.xing.com/de/datenschutzerklaerung
When they carry out an action on our company website (e.g.
comments, posts, likes, etc.), it may result in you being personally
Make data (such as your real name or photo of your user profile) public.
2. Legal basis for data processing
The legal basis for processing your data in connection with
The use of our company website is Art. 6 (1) (f) GDPR.
3. Purpose of data processing
Our corporate presence helps us to connect users through our services
inform. Every user is free to transfer personal data through
to publish activities.
4. Storage period
We save your activities published on our corporate website and
personal data until consent is withdrawn. In addition, preserve
We the legal storage periods.
5. Objection and removal option
You can stop processing your personal data that we provide as part of your
Record the use of our company website, object at any time and your
assert the rights of data subjects referred to in IV. of this privacy policy.
To do so, send us an informal email to the one in this privacy policy
mentioned email address.
Further information on objection and removal options can be found here:
LinkedIn:
https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv
XING:
https://privacy.xing.com/de/datenschutzerklaerung
XI. Hosting
The website is hosted on servers by a service provider commissioned by us.
Our service provider is:
STRATO AG, Pascalstraße 10, 10587 Berlin, Germany
The servers automatically collect and store information in so-called servers
Log files that your browser automatically transmits when you visit the website. Die
The information stored is:
▪ Browser type and browser version
▪ Operating system used
▪ Referrer URL
▪ Host name of the accessing computer
▪ Date and time of the server request
▪ IP address
A combination of this data with other data sources will not
done. This data is collected on the basis of Art. 6 para. 1 lit. f
GDPR. The website operator has a legitimate interest in the technical
error-free presentation and optimization of its website — this requires the
Server log files are collected.
The website's server is geographically located in Germany.
XII. Plug-ins used
We use plugins for various purposes. The plugins used are in
Listed below:
Using Contact Form 7
1. Scope of processing of personal data
We use the WordPress plugin Contact Form 7 from RockLobster LLC., Sakai 810-0001
Fukuoka Prefecture Chuo-ku Tenjin 1-chome 8—1, Fukuoka City Hall, Japan
(hereinafter: RockLobster) to manage contact forms on our
online presence. Entered form data will be transmitted via email. It can
As a result, personal data is stored and evaluated, in particular the
User activity (in particular which pages have been visited and on which
elements have been clicked) and device and browser information (in particular the
IP address and operating system). Data can be stored on RockLobster servers in
be transmitted to Japan. With regard to Japan, there is an adequacy decision by
European Union. You can find it here:
https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=OJ:L:2019:076:TOC
For more information on the processing of data by Contact Form 7, please
here:
https://contactform7.com/privacy-policy/
2. Purpose of data processing
The use of the Contact Form 7 plugin serves to improve
The usability of our online presence. We use this plug-in to
To be able to easily create, integrate and present contact forms in an appealing way.
3. Legal basis for processing personal data
The legal basis for processing users' personal data is
In principle, the user's consent in accordance with Article 6 (1) (a) GDPR.
4. Storage period
Your personal information is stored for as long as is necessary
to fulfill the purposes described in this privacy statement or as
is required by law, e.g. for tax and accounting purposes.
5. Withdrawal and removal option
You have the right to your declaration of consent under data protection law at any time
revoked. Withdrawal of consent increases the legality resulting from
The consent does not affect processing carried out up to the time of withdrawal.
You can collect and process your personal data by
Prevent Contact Form 7 by saving third-party cookies
On your computer, prevent the “Do Not Track” function of a supporting
use browsers, disable the execution of script code in your browser, or
a script blocker such as NoScript (https://noscript.net/) or Ghostery
Install (https://www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis
Contact Form 7 can be found at:
https://contactform7.com/privacy-policy/
This privacy statement was created with assistance from DataGuard.
