Privacy policy of appleute GmbH

Version 05 / 2025 - replaces all previous versions

1 Controller (§ 4 No. 7 GDPR)

appleute GmbH
Königsberger Str. 11
97762 Hammelburg
Germany
Phone: +49 (0)9732 30 24 984
E-mail: info@appleute.de

We are responsible for the processing of personal data on this website.

website and in the services offered there.

2 General principles

We process personal data in accordance with the General Data Protection Regulation (GDPR), Federal Data Protection Act (BDSG) and all other relevant legal provisions.
We only process data,
- if this is necessary to provide a functioning website, to perform a contract or to protect overriding legitimate interests (Art. 6 (1) (b) and (f) GDPR) or
- if you have expressly consented (Art. 6 para. 1 lit. a GDPR).
Automated decision-making / profiling within the meaning of Art. 22 GDPR does not take place.

3 Server log data

Each time you visit our website, your browser automatically transmits the following data, which we store in log files:

Data category	Purpose:	Legal basis	Deletion period
IP address, date / time, requested URL, referrer URL, browser & OS type, provider	Ensuring technical functionality, defense against attacks, error analysis	Art. 6 para. 1 lit. f GDPR (legitimate interest in a stable & secure website)	max. 14 days

This data is not merged with other data sources.

4 Cookies & Consent Management

We use cookies and similar technologies.

Kind	Purpose:	Storage duration	Legal basis
Technically necessary cookies (e.g. session ID)	Basic functions, security features, shopping cart	Session or up to 1 year	Art. 6 para. 1 lit. f GDPR
Convenience & statistics (Google Analytics 4, Tag Manager)	Reach measurement, UX optimization	14 months	Your consent (Art. 6 para. 1 lit. a)
Marketing (Google Ads / Conversion, LinkedIn Insight, Facebook Pixel)	Campaign measurement, retargeting	90 days to 2 years	Consent (Art. 6 para. 1 lit. a)

During your first visit, our Cookie banner (Consent Management Tool) provides detailed information and allows you to give or withdraw your consent on a granular basis. You can change or revoke your selection at any time via the "Cookie settings" link in the footer.

5 Contact forms, e-mail contact

Data	Purpose:	Legal basis	Deletion period
Name, e-mail, telephone number, message	Processing of your inquiry, preparation of quotation if necessary	Art. 6 para. 1 lit. b (pre-contractual measure) or lit. a (consent)	12 months after completion of the process / revocation

We cannot answer your request without this data.

6 applications

We process application data exclusively for the purpose of filling vacancies.

Legal basis	Deletion period
§ Section 26 BDSG (initiation of employment relationship)	6 months after completion of the procedure; if included in the talent pool with consent: 24 months or until revocation

7 Third-party services

Service	Provider (registered office)	Transfer to a third country	Guarantees	Further information
Hosting	Siteground GmbH (DE)	—	Order processing ↔ EU	https://www.hetzner.com/de/legal/privacy-policy
Cloudflare CDN & Security	Cloudflare Inc (USA)	USA	EU-US Data Privacy Framework, SCC	https://www.cloudflare.com/privacypolicy/
Google Analytics 4 / Tag Manager / Ads Conversion / Maps / Fonts	Google Ireland Ltd (IE)	USA	EU-US Data Privacy Framework, SCC, IP anonymization	https://policies.google.com/privacy
LinkedIn Insight Tag	LinkedIn Insight Tag	USA	Data Privacy Framework, SCC	https://www.linkedin.com/legal/privacy-policy
Meta Pixel	Meta Platforms Ireland Ltd (IE)	USA	Data Privacy Framework, SCC	https://www.facebook.com/policy.php

Detailed information on how it works, opt-out options and rights of objection can be found in the consent banner and on the linked provider pages.

8 Social media presences ("fan pages")

We operate company profiles on LinkedIn and Facebook. When accessing these pages, the data protection notices of the respective platform operators apply. With Meta / LinkedIn there is a Joint controller agreement (Art. 26 GDPR) - the main contents can be found in the platform privacy centers.

9 Storage period and deletion

We only process personal data for as long as this is necessary for the respective purposes or for as long as statutory retention periods (e.g. retention periods of 6 / 10 years under commercial and tax law) exist. After that, the data is routinely deleted or blocked.

10 Your rights

You have the right at any time to

Law	Article GDPR
Information	15
Correction	16
Deletion ("right to be forgotten")	17
Restriction of processing	18
Data portability	20
Objection to processing on the basis of legitimate interests or direct advertising Objection to processing on the basis of legitimate interests or direct advertising	21
Revocation of granted consent with effect for the future	7 para. 3
Complaint to a supervisory authority, e.g. Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 27, 91522 Ansbach, Germany	77

An informal message to info@appleute.de is sufficient to make a claim.

11 Data security

TLS encryption (at least TLS 1.2 with 256-bit) for data transmissions
Multi-level firewall & access concept
Regular backups, pen tests and employee training
Confidentiality and order processing agreements pursuant to Art. 28 GDPR

12 Changes to this privacy policy

Legal amendments, official requirements or technical changes may make adjustments necessary. The current version is always available at https://appleute.de/datenschutz.

Last updated: May 5, 2025