Data protection is of a particularly high priority for the management of InteRES GmbH. The use of the InteRES website is possible without any indication of personal data; however, if a data subject wants to use special enterprise services via our website, processing of personal data could become necessary. We have implemented numerous technical and organisational measures to ensure protection of personal data processed through this website in line with the EU General Data Protection Regulation (GDPR).
1. Definitions
This privacy policy uses the terminology of the GDPR, including personal data, data subject, processing, profiling, pseudonymisation, controller, processor, recipient, third party, and consent.
2. Name and address of the controller
InteRES GmbH
Rheinstr. 44–46
64283 Darmstadt, Germany
Phone: +49 6151 307 400
Email: info@interes.com
3. Data protection officer
Dr. Stephanie Troßbach
Catus Law + Compliance
Thurn-und-Taxis-Platz 6
60313 Frankfurt am Main, Germany
Phone: +49 69 257375 264
Email: trossbach@catuslaw.com
4. Cookies
This website does not set any cookies. We do not use cookie-based tracking, advertising or analytics technologies, and no consent banner is therefore required. Should this change in the future, this policy will be updated accordingly.
5. Hosting and server log files
This website is hosted by Netlify, Inc. (USA). When you visit the website, the hosting provider automatically processes technical data such as browser type and version, operating system, referrer URL, date and time of access and IP address in server log files. This processing is necessary to deliver the website reliably and securely (Art. 6(1)(f) GDPR). Log data is not merged with other data sources or used to identify individual visitors. Further information is available in Netlify’s privacy policy at netlify.com/privacy.
6. Contact forms and CRM
If you contact us via one of the forms on this website, the data you provide (such as name, email address, company and your message) is transmitted to us and stored in our customer relationship management system, operated by Zoho Corporation. We process this data solely to handle your enquiry and any follow-up communication (Art. 6(1)(b) GDPR, or Art. 6(1)(a) GDPR based on the consent you give when submitting the form). You may withdraw your consent at any time with effect for the future. Zoho’s privacy policy is available at zoho.com/privacy.html.
7. Spam protection (Cloudflare Turnstile)
To protect our contact forms against abuse and automated spam, we use Cloudflare Turnstile, a service of Cloudflare, Inc. (USA). Turnstile verifies that a form is submitted by a human without setting cookies and without tracking visitors across websites. For this verification, your IP address and certain technical browser characteristics are transmitted to Cloudflare. The legal basis is our legitimate interest in protecting our website against abuse (Art. 6(1)(f) GDPR). Details can be found in Cloudflare’s privacy policy at cloudflare.com/privacypolicy.
8. Web analytics (Simple Analytics)
We use Simple Analytics (Simple Analytics B.V., Netherlands), a privacy-first analytics service, to understand how our website is used in aggregate. Simple Analytics does not use cookies, does not store IP addresses and does not collect any personal data or persistent identifiers; visitors cannot be recognised or tracked across visits or websites. We additionally honour the “Do Not Track” browser setting. The legal basis is our legitimate interest in analysing and improving our website (Art. 6(1)(f) GDPR). Details: simpleanalytics.com/privacy-policy.
9. Data retention and deletion
Personal data is stored only for as long as required by statute or by the purpose of processing. Upon expiry or fulfilment of the purpose, the corresponding data is blocked or erased in accordance with legal requirements.
10. Rights of the data subject
You have the following rights under the GDPR:
- Right of confirmation — whether personal data is being processed.
- Right of access — to your data and information about its processing.
- Right to rectification — of inaccurate or incomplete data.
- Right to erasure — the right to be forgotten where conditions apply.
- Right to restrict processing — under specified conditions.
- Right to data portability — in a structured, machine-readable format.
- Right to object — including to direct marketing.
- Rights related to automated decision-making and profiling.
- Right to withdraw consent — at any time, with effect for the future.
To exercise any of these rights, please contact our data protection officer.
11. Application data
If you apply for a position, we process the data you provide for the purpose of the application procedure. Documents may be transmitted by email or via a web form. On conclusion of an employment contract, the data is stored for the employment relationship in accordance with statutory provisions. If no employment contract is concluded, applicant data is automatically erased two months after notification of rejection, unless legitimate interests of the controller (such as the burden of proof under the German General Act on Equal Treatment, AGG) oppose erasure.
12. Legal basis for processing
We process personal data based on Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(c) GDPR (legal obligation), Art. 6(1)(d) GDPR (vital interests) and Art. 6(1)(f) GDPR (legitimate interests).
13. Legitimate interests
Where processing relies on Art. 6(1)(f) GDPR, our legitimate interest is to carry out our business activities in favour of the well-being of our employees and shareholders.
14. Storage periods
We store personal data for the duration of the relevant statutory retention period. After expiry, the data is routinely deleted unless required for the conclusion or performance of a contract.
15. Provision of personal data
The provision of personal data may be required by law (e.g. tax regulations) or arise from contractual provisions. Without the necessary data, the conclusion of a contract cannot be performed. Our employees can clarify on a case-by-case basis whether provision is required and what the consequences of non-provision would be.
16. Automated decision-making
As a responsible company, we do not use automated decision-making or profiling.