Privacy Policy

General information

The following information provides an easy-to-understand overview of how your personal data is processed when you visit this website. Personal data means any information that can be used to identify you directly or indirectly. For more detailed information about data protection and the processing of your personal data, please refer to the full Privacy Policy provided below.

Data Processing on This Website

1. Controller and Data Protection Contact

The controller responsible for the processing of personal data on this website is:

Togontech GmbH
Aachener Str. 338
50933 Cologne
Germany

Telephone: +49 221 999 83 76
Email: info@togontech.de

For questions concerning data protection, the processing of your personal data, or the exercise of your data protection rights, you may contact us by email, telephone, or using the postal address provided above.

2. How We Process Personal Data

We process personal data in accordance with the General Data Protection Regulation (“GDPR”), the German Federal Data Protection Act (“BDSG”) and any other applicable data protection laws.

Personal data is processed only where a lawful basis applies. Depending on the individual processing activity, this may include:

- your consent pursuant to Article 6(1)(a) GDPR;
- processing required for a contract or pre-contractual measures pursuant to Article 6(1)(b) GDPR;
- compliance with a legal obligation pursuant to Article 6(1)(c) GDPR; or
- our legitimate interests pursuant to Article 6(1)(f) GDPR.

Within our company, personal data is accessible only to employees and other persons who require access in order to perform their duties.

3. Contact Form and Email Enquiries

When you contact us through the contact form available on our website or by email, we process the information you provide in order to manage and respond to your enquiry.

This may include the selected subject, your first name and surname, your email address, your telephone number where provided, and the content of your message.

Information submitted through the contact form is transmitted to our email inbox at info@togontech.de.

Where your enquiry relates to a contract or to steps taken before entering into a contract, the legal basis for the processing is Article 6(1)(b) GDPR. For other enquiries, the legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in receiving and responding to enquiries addressed to our company.

Your information may be accessed by the persons responsible for handling your enquiry and by the technical service providers involved in operating the form and delivering the message, as described in this Privacy Policy.

We retain the information only for as long as necessary to process your enquiry. Further information can be found under “General Storage Period.”

Where your enquiry concerns a job opportunity or application, the additional provisions under “Applicant Data” apply.

4. Cookies and Similar Technologies

Based on our current website configuration, our website does not use cookies or similar technologies for analytics, advertising, profiling or cross-site tracking.

We do not currently store information on, or access information from, your device for purposes that require consent under Section 25 of the German Telecommunications Digital Services Data Protection Act (“TDDDG”).

This does not exclude temporary browser caching or the processing of technical connection and access data that is necessary to provide, secure and operate the website.

Further information about the processing of technical data by our hosting and content-delivery providers can be found in the “Hosting” section of this Privacy Policy.

Section 25 TDDDG generally requires consent for storing information on or accessing information from a user’s device, unless the operation is strictly necessary to transmit a communication or provide a digital service expressly requested by the user.

3. Applicant Data

We offer prospective applicants the opportunity to contact us regarding job opportunities by email, by post or through the contact form available on our website. Information submitted through the contact form is transmitted to us by email at info@togontech.de.

We process the personal data submitted in connection with an application only to the extent necessary to conduct the application process and decide whether to establish an employment relationship. This may include: contact and communication details, curriculum vitae, cover letters, certificates, references, information provided during interviews and internal notes or assessments relating to the application.

The processing is based on Section 26 of the German Federal Data Protection Act for the purpose of deciding whether to establish an employment relationship. Where applicable, processing may also be based on Article 6(1)(b) GDPR.

Where you have given your consent to a specific processing activity, the legal basis is Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.

Your personal data will be treated confidentially and will be shared within our company only with persons involved in the application process.

If your application is successful, the personal data submitted during the application process may be transferred to our personnel systems and processed for the purpose of establishing and managing the employment relationship.

4. Retention Period for Applicant Data

If we are unable to offer you a position, you reject an offer or you withdraw your application, we generally retain your application data for up to six months after the completion of the application process.

The legal basis for this temporary retention is Article 6(1)(f) GDPR. Our legitimate interest lies in the establishment, exercise or defence of legal claims and in retaining evidence in the event of a legal dispute.

After this period, electronic application data will be deleted and physical application documents will be securely destroyed. Data may be retained for longer where:

- it is required in connection with an anticipated or ongoing legal dispute statutory retention obligations apply;
- or you have consented to longer storage, for example for inclusion in an applicant or talent pool.

Where longer storage is based on consent, you may withdraw that consent at any time with effect for the future.

5. General Storage Period

We store personal data only for as long as it is required for the purpose for which it was collected.

Personal data will generally be deleted when it is no longer required for the relevant processing purpose, consent has been withdrawn and no other legal basis applies, or the applicable statutory retention period has expired.

Data may be retained for a longer period where this is required under commercial, corporate or tax law or where it is necessary for the establishment, exercise or defence of legal claims.

6. External Links

Our website contains links to external websites operated by third parties, including news articles, press releases and websites of our partners.

When you follow an external link, you leave our website. Any processing of personal data on the external website is carried out under the responsibility of the respective third-party provider and is subject to that provider’s privacy policy.

We have no control over the content or data protection practices of external websites. We therefore recommend reviewing the privacy policy of the relevant provider before submitting personal data or using its services.

7. Your Rights

Where we process your personal data, you may have the following rights under the GDPR:

Right of Access
You have the right to request information about whether and how we process your personal data and to receive a copy of the personal data concerned.

Right to Rectification
You have the right to request the correction of inaccurate personal data and the completion of incomplete personal data.

Right to Erasure
You have the right to request the deletion of your personal data, provided that no statutory retention obligation or other lawful reason requires us to continue storing it.

Right to Restriction of Processing
You have the right to request the restriction of the processing of your personal data under the conditions set out in the GDPR.

Right to Withdraw Consent
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

Right to Object
You have the right to object to the processing of your personal data where the processing is based on Article 6(1)(e) or Article 6(1)(f) GDPR. Where personal data is processed for direct marketing purposes, you may object to such processing at any time.

Right to Data Portability
Where the statutory requirements are met, you have the right to receive personal data that you have provided to us in a structured, commonly used and machine-readable format. You may also have the right to request that this data be transferred directly to another controller.

Right to Lodge a Complaint
You have the right to lodge a complaint with a competent data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.

The supervisory authority responsible for our company is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
Postfach 20 04 44
40102 Düsseldorf
Germany

You may also contact the supervisory authority responsible for your habitual residence, your place of work or the location of the alleged infringement.

Hosting by Vercel

We are hosting the content of our website at the following provider:

Vercel Inc.
440 N Barranca Avenue #4133
Covina, CA 91723
USA

When you access our website, Vercel processes technical connection and access data required to deliver the website and maintain its security, stability and functionality. This data may include:

- your IP address;
- the date and time of access;
- the page or file requested;
- information about the browser and operating system used;
- referrer information;
- the HTTP status code; and
- other technical information relating to the request.

The processing is carried out to provide our website securely, reliably and efficiently, to identify technical errors and to detect or prevent attacks and abusive access. The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable and technically correct provision of our website.

Runtime and server log data made available to us by Vercel is generally retained for one day.

Data may be stored for a longer period where this is necessary to investigate a specific security incident or for the establishment, exercise or defence of legal claims. We have entered into a data processing agreement with Vercel in accordance with applicable data protection requirements.

International Data Transfers

Vercel is based in the United States. Therefore, personal data may be processed in the United States or in other countries outside the European Economic Area.

According to Vercel, international data transfers are based, where applicable, on recognised safeguards, including the EU-U.S. Data Privacy Framework and the European Commission’s Standard Contractual Clauses.

Provision of Images and Media Through Sanity

Images and other media files displayed on our website are provided through the content delivery network operated by:

Sanity AS
Chr. Krohgs gate 1
0186 Oslo
Norway

When a file hosted through cdn.sanity.io is accessed, the user’s browser establishes a direct connection to Sanity’s servers or content delivery network infrastructure. During this process, Sanity may process technical data such as:

- the user’s IP address;
- the date and time of access;
- the requested file;
- referrer information; and
- information about the browser and operating system used.

The processing is carried out to provide images and other media files quickly, securely and reliably. The legal basis for this processing is Article 6(1)(f) GDPR. Our legitimate interest lies in the technically reliable and efficient provision of our website.

According to Sanity, relevant log data is deleted within 7 days.