Privacy policy

1. An Overview of Data Protection

 

General Information
The following information provides an easy to navigate overview of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to personally identify you. For detailed information, please consult our full Data Protection Declaration below.

 

Data Recording on This Website
Who is the responsible party for the recording of data on this website?
The data on this website is processed by the operator of the website, whose contact information is available under section “Information about the responsible party” in this Privacy Policy.

 

How do we record your data?
We collect your data as a result of your sharing of your data with us — for instance, information you enter into our contact form. Other data is recorded automatically by our IT systems when you visit our website, primarily technical information such as browser type, operating system, and time of access.

 

What are the purposes we use your data for?
A portion of the information is generated to ensure the error-free provision of the website. Other data may be used to analyze user patterns.

 

What rights do you have regarding your information?
You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time, free of charge. You also have the right to demand rectification or erasure of your data, to revoke any consent you have given, and to demand restricted processing under certain circumstances.

 

Furthermore, you have the right to lodge a complaint with the competent supervisory authority. Please do not hesitate to contact us at any time with questions about data protection.

 

2. Hosting

 

Hostnet
We host our website with Hostnet B.V. The provider is Hostnet B.V., De Ruijterkade 6, 1013 AA Amsterdam, The Netherlands (hereinafter referred to as: Hostnet). Hostnet is a customer-oriented and reliable hosting provider that has been active in the consumer and business Internet markets since 1999 and is one of the major players in the Dutch market.

 

Whenever you visit our website, Hostnet records various log files including your IP address. For details, please consult Hostnet’s data privacy policy at: https://www.hostnet.nl/privacy-policy.

 

We use Hostnet on the basis of Art. 6(1)(f) GDPR. Smooth Transitions has a legitimate interest in presenting a website that is as reliable and secure as possible. Where appropriate consent has been obtained, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TTDSG. This consent can be revoked at any time.

 

Data Processing
We have concluded a data processing agreement (DPA) with Hostnet B.V. This contract guarantees that Hostnet processes the personal data of our website visitors only in accordance with our instructions and in full compliance with the GDPR.

 

3. General Information and Mandatory Information

 

Data Protection
Smooth Transitions takes the protection of your personal data very seriously. We handle your personal data as confidential information and in compliance with all applicable statutory data protection regulations and this Data Protection Declaration.

 

We herewith advise you that the transmission of data via the Internet (e.g., via e-mail) may be prone to security gaps. It is not possible to completely protect data against third-party access.

 

Information about the Responsible Party (Controller)
The data processing controller for this website is:

 

Smooth Transitions GmbH
Nuhnatalstraße 45a
59955 Winterberg, Germany

 

Phone: +49 (0)172 382 4095
E-mail: info@smoothtransitions.eu

 

Storage Duration
Your personal data will remain with us until the purpose for which it was collected no longer applies. If you request deletion or revoke your consent, your data will be deleted unless we have legally permissible reasons for continued storage (e.g., statutory retention periods).

 

Legal Basis for Data Processing
Where German national law provides more specific rules — for example under the Bundesdatenschutzgesetz (BDSG), which supplements the GDPR in areas where EU law grants member states discretion — those provisions apply in addition, such as § 26 BDSG governing data processing in the employment context (see Section 6, “Applicant Data”).

 

Revocation of Consent
You may revoke any consent you have given us at any time. This shall be without prejudice to the lawfulness of any data processing carried out prior to your revocation.

 

Right to Object (Art. 21 GDPR)
WHERE DATA IS PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

 

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME. IF YOU OBJECT, YOUR DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES.

 

Right to Lodge a Complaint
In the event of GDPR violations, you are entitled to lodge a complaint with a supervisory authority, in particular in the member state of your habitual residence, place of work, or the place of the alleged violation.

 

Right to Data Portability
You have the right to receive data that we process automatically on the basis of your consent or for the performance of a contract, in a commonly used, machine-readable format, or to have it transferred directly to another controller where technically feasible.

 

SSL/TLS Encryption
This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content. You can identify an encrypted connection by the “https://” prefix in your browser’s address bar and the padlock icon. Encrypted data cannot be read by third parties.

 

Right to Information, Rectification and Erasure
You have the right to obtain information about your archived personal data, its source and recipients, and the purpose of processing at any time. You may also have the right to rectification or erasure. Please contact us at any time with any questions.

 

Right to Restriction of Processing
You have the right to request restriction of the processing of your personal data in the following cases:

  • If you dispute the accuracy of your data, for the duration of our verification.
  • If the processing is unlawful and you request restriction rather than erasure.
  • If we no longer need your data but you require it for legal claims.
  • If you have lodged an objection under Art. 21(1) GDPR, pending determination of whose interests prevail.


4. Recording of Data on This Website


Cookies
Our website uses cookies — small data packages stored temporarily (session cookies) or permanently on your device. Session cookies are deleted when you close your browser. Permanent cookies remain until you delete them or your browser removes them automatically.

 

Cookies serve various functions: some are technically essential for the website to work correctly, while others are used to analyze user behavior or display promotional content. Required cookies are stored on the basis of Art. 6(1)(f) GDPR. Where consent has been requested, processing is based on Art. 6(1)(a) GDPR and § 25(1) TTDSG, and can be revoked at any time.

 

You can configure your browser to notify you when cookies are set, accept cookies only in specific cases, or automatically delete cookies when you close your browser.

 

Consent with Borlabs Cookie
Our website uses Borlabs consent technology to obtain and document your consent to cookies and tracking technologies in a legally compliant manner. The provider is Borlabs GmbH, Rübenkamp 32, 22305 Hamburg, Germany.

 

A Borlabs cookie is stored in your browser to record your consent declarations and revocations. This data is not shared with Borlabs. The data remains stored until you request its deletion, delete the Borlabs cookie yourself, or the purpose for storage no longer applies.

 

For details, visit: https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/

The legal basis for using Borlabs is Art. 6(1)(c) GDPR.

 

Server Log Files
Our hosting provider automatically collects and stores information in server log files, including:

  • Browser type and version
  • Operating system
  • Referrer URL
  • Hostname of the accessing device
  • Time of the server request
  • IP address


This data is not merged with other data sources and is processed on the basis of Art. 6(1)(f) GDPR, based on our legitimate interest in the technically error-free operation and optimization of our website.

 

Contact by E-mail or Telephone
If you contact us by e-mail or telephone, your request and all associated personal data will be stored and processed for the purpose of handling your enquiry. We do not share this data without your consent.

 

Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract, or on Art. 6(1)(f) GDPR or Art. 6(1)(a) GDPR in all other cases. Your data will be retained until you request deletion, revoke consent, or the purpose for storage no longer applies, subject to any mandatory statutory retention periods.

 

Typeform
We use Typeform to create and embed online forms on our website. The provider is TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain.

 

Data you enter into our Typeform forms is stored on Typeform’s servers until you request deletion, revoke consent, or the purpose for storage no longer applies. Use is based on Art. 6(1)(f) GDPR or, where consent has been obtained, Art. 6(1)(a) GDPR and § 25(1) TTDSG. This consent can be revoked at any time.

 

We have concluded a data processing agreement (DPA) with Typeform in accordance with GDPR requirements.

 

5. Analysis Tools and Advertising


Google Tag Manager
We use the Google Tag Manager, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Tag Manager itself does not create user profiles, store cookies, or carry out independent analyses — it solely manages and deploys other integrated tools. It does, however, collect your IP address, which may be transferred to Google’s parent company in the United States.

Use is based on Art. 6(1)(f) GDPR or, where consent has been obtained, Art. 6(1)(a) GDPR and § 25(1) TTDSG. Consent can be revoked at any time.

 

Google Analytics
We use Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to analyze website visitor behavior. Google Analytics collects data such as pages visited, time spent on the site, operating system, and user origin, and assigns this to a user ID linked to the visitor’s device.

 

Use is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG, which can be revoked at any time. Data transfers to the US are based on the European Commission’s Standard Contractual Clauses (SCC): https://privacy.google.com/businesses/controllerterms/mccs/.

 

IP addresses are anonymized within the EU before transfer to the US. You can prevent data collection by installing the Google Analytics opt-out browser plugin: https://tools.google.com/dlpage/gaoptout?hl=en.

 

This website also uses the “demographic characteristics” feature of Google Analytics to display relevant ads based on age, gender, and interests. This feature can be deactivated in your Google account’s advertising settings.

We have executed a data processing agreement with Google in accordance with GDPR requirements.

 

Google Ads
We use Google Ads, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to display ads in Google Search and on third-party websites based on keyword and audience targeting.

 

Use is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. Data transfers to the US are governed by Standard Contractual Clauses: https://policies.google.com/privacy/frameworks.

 

IONOS Web Analytics
This website uses IONOS WebAnalytics, provided by 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany, to analyze visitor numbers and behavior. Data collected includes referrer URLs, pages accessed, browser and OS type, device type, access times, and anonymized IP addresses. According to IONOS, all data is fully anonymized and no cookies are stored.

 

Processing is based on Art. 6(1)(f) GDPR. For more information, visit: https://www.ionos.de/terms-gtc/index.php?id=6.

 

We have concluded a data processing agreement (DPA) with IONOS in accordance with GDPR requirements.

 

6. Applicant Data


Handling Applicant Data
Smooth Transitions offers the opportunity to submit job applications via e-mail or our online application form.

 

All personal data submitted as part of the application process (e.g., contact details, application documents, interview notes) will be processed solely for the purpose of evaluating your application, on the basis of § 26 BDSG, Art. 6(1)(b) GDPR, or Art. 6(1)(a) GDPR where consent has been given.

 

Your data will only be shared internally with those directly involved in the recruitment process.

 

If your application results in employment, your data will be retained for the purpose of managing the employment relationship.

 

Data Retention
If your application is unsuccessful or withdrawn, we retain your data for up to 6 months for evidentiary purposes, after which it is permanently deleted. Longer retention applies where legally required or where you have given explicit consent.

 

Applicant Pool
With your express consent (Art. 6(1)(a) GDPR), your application may be retained in our applicant pool for consideration for future vacancies.

 

You may withdraw this consent at any time, after which your data will be irrevocably deleted. All applicant pool data is deleted no later than two years after consent was granted.