Responsible Body
The responsible body within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:
Tuix GmbH
Gerhard-Kindler-Str. 6
72770 Reutlingen
Technologiepark Tübingen-Reutlingen
Germany
Email: [email protected]
Telephone: +49 163 8119175
Data Protection Officer
Juan Vizcaino
Neckar-Alb-Str. 81
72127 Kusterdingen
Email: [email protected]
Your Data Subject Rights
You can exercise the following rights at any time using the contact details provided above:
Information about your data stored by us and its processing (Art. 15 GDPR) Correction of incorrect personal data (Art. 16 GDPR) Deletion of your data stored by us (Art. 17 GDPR) Restriction of data processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR) Objection to the processing of your data by us (Art. 21 GDPR) Data portability, provided you have consented to data processing or have concluded a contract with us (Art. 20 GDPR)
If you have given us your consent, you can revoke it at any time with future effect.
You can contact the supervisory authority responsible for you with a complaint at any time. Your responsible supervisory authority depends on the state in which you live, where you work, or where the alleged violation occurs. A list of the supervisory authorities (for the non-public sector) with addresses can be found at: https://www.bfdi.bund.de/EN/Service/Anschriften/Laender/Laender-node.html
Purposes of Data Processing and Legal Basis
We only process your personal data for the purposes stated in this data protection declaration. Your personal data will not be transferred to third parties for purposes other than those mentioned. We will only share your personal data with third parties if:
you have given your express consent to this (Art. 6(1)(a) GDPR), the processing is necessary to carry out a contract with you (Art. 6(1)(b) GDPR), the processing is necessary to fulfill a legal obligation (Art. 6(1)(c) GDPR), or the processing is necessary to protect legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data (Art. 6(1)(f) GDPR).
Deletion or Blocking of Data
We adhere to the principles of data avoidance and data economy. We therefore only store your personal data for as long as is necessary to achieve the purposes stated here or as required by the various storage periods provided by law. The following retention periods apply:
Contact form inquiries: deleted after the request has been fully processed and no further follow-up is required, typically within 90 days Job application data: deleted within 6 months after conclusion of the application process (or upon separate consent for talent pool retention) Server log files: deleted automatically after 7 days Data subject to statutory retention obligations (e.g. invoices, contracts): retained for the legally required period (typically 6–10 years under German commercial and tax law)
Once the respective purpose no longer applies or these deadlines have expired, the relevant data will be blocked or deleted routinely and in accordance with legal regulations.
SSL Encryption
To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL) via HTTPS.
Server Log Files
When you visit our website, our hosting provider automatically collects and stores information in server log files that your browser transmits to us. This includes: browser type and version, operating system used, referrer URL, hostname of the accessing device, and time of the server request.
This data is processed on the basis of Art. 6(1)(f) GDPR, based on our legitimate interest in the secure and efficient operation of the website. It cannot be assigned to specific persons and will not be merged with other data sources. Log files are deleted automatically after 7 days.
Contact Form and Email Contact
If you contact us via email or contact form, you are giving us your voluntary consent for the purpose of contacting you (Art. 6(1)(a) GDPR). This requires a valid email address, which is used to assign and answer your request. Providing further data is optional. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions. Once your request has been completed, personal data will be deleted, typically within 90 days.
Job Applications
If you apply for a position with us via our career form or by email, we process the personal data you provide (e.g. name, contact details, CV, cover letter, and any other documents you submit) for the purpose of carrying out the application process.
The legal basis for this processing is Art. 6(1)(b) GDPR in conjunction with § 26 BDSG, as the processing is necessary to decide on the establishment of an employment relationship. Where you voluntarily provide additional data not required for this purpose (e.g. optional personal information), the legal basis is your consent (Art. 6(1)(a) GDPR).
Retention period: Your application data will be deleted no later than 6 months after the application process has been concluded (e.g. after a rejection or withdrawal of your application), unless a longer retention period is required to assert, exercise, or defend legal claims (in particular under the General Equal Treatment Act, AGG).
Talent pool (optional): If you would like us to keep your application on file beyond this period for consideration for future vacancies, we will ask for your separate, explicit consent (Art. 6(1)(a) GDPR). You may withdraw this consent at any time with effect for the future by emailing [email protected], without affecting the lawfulness of processing carried out before the withdrawal.
If your application is successful, your data will continue to be processed as part of the employment relationship, subject to a separate notice.
Cookies
Our website uses cookies. Cookies are small text files stored on your device by your browser. They cause no harm and contain no viruses.
We use the following types of cookies:
Technically necessary cookies (Art. 6(1)(f) GDPR): These are required for the website to function correctly. They are automatically deleted at the end of your browser session (session cookies). Cookies requiring consent (Art. 6(1)(a) GDPR): These are only set with your prior consent and may remain on your device beyond the session.
You can configure your browser to inform you about cookies, allow them only in individual cases, exclude them for certain cases or entirely, and enable automatic deletion when closing the browser. Disabling cookies may limit the functionality of this website.
Fonts (Self-Hosted)
This website uses web fonts for consistent visual presentation. All fonts used are self-hosted on our own server. No connection to external font servers is established when you visit our website, and no data is transmitted to third parties for this purpose.
Changes to Our Privacy Policy
We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services, for example when introducing new services. The updated data protection declaration will apply from your next visit.
Questions About Data Protection
If you have any questions about data protection, please contact our data protection officer directly:
Juan Vizcaino
Email: [email protected]