Privacy

I. Privacy notice We are pleased that you are visiting our website. We respect your privacy. Data protection and data security when using our website are very important to us. We would like to inform you with this privacy notice about the extent to which data is collected when you use our website and for what purposes we use this data. We would also like to inform you about your rights in this regard.

II. Scope This privacy policy applies to the area of responsibility of 42NXT GmbH and for the data collected via this website.

III. Controller 42NXT GmbH Vancouverstraße 2a 20457 Hamburg Germany www.42nxt.com E-Mail: info@42nxt.com

IV. Data Protection Officer OSYSCON GmbH External Data Protection Officer Am Brunnen 17 04159 Leipzig Germany E-Mail: datenschutz@osyscon.de https://www.osyscon.de/

V. Visiting Our Website When you access our website, i.e., when you do not register or otherwise transmit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of browser, the operating system used, the domain name of your internet service provider, your IP address, and similar data. This information is exclusively data that does not allow any conclusions to be drawn about you as a person. It is processed for the following purposes in particular:

To ensure a smooth connection to the website

To ensure a smooth use of our website

To evaluate system security and stability

For other administrative purposes

We do not use your data to draw conclusions about you as a person. This type of information may be statistically evaluated by us to optimize our website and the technology behind it. The recipients of the data are internal employees who are involved in the operation and maintenance of our website. The processing is carried out in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

VI. Hosting This website is hosted by an external service provider (hoster). The personal data collected on this website is stored on the servers of the hoster. This can include, among other things:

IP address of the website visitor's device

Device used

Hostname of the accessing computer

Operating system of the visitor

Browser type and version

Name of the retrieved file

Time of the server request

Amount of data

Information on whether the data retrieval was successful

Contact inquiries

Meta and communication data

Contract data

Contact details and other data generated via a website

The use of the hoster is for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 para. 1 lit. b) GDPR) and in the interest of a secure, fast, and efficient provision of our online offer by a professional provider (Art. 6 para. 1 lit. f) GDPR). If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a) GDPR and § 25 para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time. Our hoster will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions regarding this data.

VII. Use of Data Protection Software To better meet data protection requirements, we use appropriate software. This software supports us in complying with data protection regulations. The processing of the data is based on the legal basis of consent (Art. 6 para. 1 lit. a GDPR). As a website visitor, you have consented to the processing of your personal data with your voluntary, explicit, and prior consent. Without separate consent, personal data will not be processed by us in the manner described above, provided there is no other legal basis within the meaning of Art. 6 para. 1 GDPR on which we base the processing. We proceed in the same way if you revoke your consent. The lawfulness of the processing carried out until the revocation remains unaffected.

VIII. External Links This website may contain links to third-party websites or to other websites under our responsibility. If you follow a link to a website outside our responsibility, please note that these websites have their own privacy policies. We assume no responsibility or liability for these external websites and their privacy policies. Therefore, before using these websites, please check whether you agree with the privacy policies there. You can recognize external links either by a slight color deviation from the rest of the text or by underlining. Your cursor will show you external links when you move it over such a link. Only when you click on an external link will your personal data be transmitted to the destination of the link. The operator of the other website will then receive, in particular, your IP address, the time you clicked the link, the page on which you clicked the link, and other information that you can find in the privacy policies of the respective provider. Please also note that individual links may lead to data transmission outside the European Economic Area. As a result, foreign authorities could gain access to your data. You may not have any legal remedies against this data access. If you do not want your personal data to be transmitted to the link destination or even be undesirably exposed to access by foreign authorities, please do not click on any links.

IX. Data Processing

IX.1. SSL Encryption For security reasons, this site uses SSL encryption. You can recognize an encrypted connection by the address line of the browser changing from "http://" to "https://" and by the lock symbol in your browser line.

X. Application Process

We process applicant data only for the purpose and within the scope of the application process in accordance with legal requirements. The processing of applicant data is carried out for the fulfillment of our (pre)contractual obligations within the scope of the application process, for example, if data processing becomes necessary for us in the context of legal proceedings. The application process requires applicants to provide us with their data. The necessary applicant data are marked if we offer an online form, otherwise they result from the job descriptions and generally include personal details, postal and contact addresses, and the documents belonging to the application, such as cover letters, résumés, and certificates. In addition, applicants can voluntarily provide us with additional information. By submitting the application to us, applicants agree to the processing of their data for the purposes of the application process in the manner and to the extent set out in this privacy policy. If available, applicants can submit their applications to us using an online form on our website. The data is transmitted to us encrypted according to the state of the art. Furthermore, applicants can submit their applications to us via email. However, we ask you to note that emails are generally not sent encrypted and applicants themselves must ensure encryption. We therefore cannot assume responsibility for the transmission path of the application between the sender and the reception on our server and therefore recommend using an online form or sending it by post. The data provided by the applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. The processing of the data required for the conclusion of the contract is based on Art. 6 para. 1 lit. b) GDPR. The processing is carried out in accordance with Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest in the personnel development of our company.

Data categories:

Your master data (such as first name, last name, date of birth)

Contact data (e.g., address, telephone number, email address)

Competence data (e.g., special knowledge and skills)

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR are voluntarily provided during the application process, their processing is additionally carried out according to Art. 9 para. 2 lit. b) GDPR (e.g., health data, such as a severe disability or ethnic origin). The recipients of the data are internal employees of the human resources department. Subject to a legitimate revocation by the applicants, the data will be deleted after a period of 6 months, so that we can answer any follow-up questions about the application and fulfill our proof obligations under the Equal Treatment Act. Invoices for any travel expense reimbursement will be archived in accordance with tax law requirements.

XI. Rights of the Data Subject

If your personal data is processed as a user, you are considered a data subject according to the GDPR. Data subjects have the following rights vis-à-vis the controller:

Right to information (Art. 15 GDPR)

You have the right to receive information from us at any time upon request about the personal data concerning you that we process, to the extent of Art. 15 GDPR.

Right to rectification or erasure of personal data (Art. 16, 17 GDPR)

You have the right to demand the immediate rectification of inaccurate personal data concerning you. You have the right to demand the erasure of personal data concerning you under the conditions described in Art. 17 GDPR. These conditions, in particular, provide for a right to erasure if the personal data is no longer necessary for the purposes for which it was collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection, or the existence of an obligation to erase under Union law or the law of the Member State to which we are subject.

Right to restriction of processing (Art. 18 GDPR)

You have the right to demand the restriction of processing from us in accordance with Art. 18 GDPR. This right exists in particular if the accuracy of the personal data is disputed between you and us, for the duration required to verify the accuracy, as well as in the event that you demand restricted processing instead of erasure if there is an existing right to erasure. Furthermore, it applies if the data is no longer required for the purposes pursued by us, but you need it for the assertion, exercise, or defense of legal claims, and if the successful exercise of an objection is still disputed between you and us.

Right to notification in connection with the rectification or erasure of your personal data or the restriction of processing (Art. 19 GDPR)

Right to data portability (Art. 20 GDPR)

You have the right to receive the personal data concerning you that you have provided to us in a structured, common, and machine-readable format in accordance with Art. 20 GDPR.

Right to object (Art. 21 GDPR)

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you that is carried out, among other things, on the basis of Art. 6 para. 1 lit. e) or f) GDPR, in accordance with Art. 21 GDPR. We will stop processing your personal data unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.

Right to withdraw declarations of consent given. The lawfulness of the data processing carried out until the revocation remains unaffected due to the consent valid until that point.

Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)

Furthermore, you have the right to contact the competent supervisory authority if you have complaints.

XII. Right to lodge a complaint with an authority pursuant to Art. 13 para. 2 lit. d)

Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged infringement, if the data subject considers that the processing of personal data relating to them infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant about the status and results of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

XIII. Withdrawal of Your Consent to Data Processing

Many data processing operations are only possible with your express consent. You can revoke consent that has already been given at any time. An informal notification by email to us is sufficient for this. The lawfulness of the data processing carried out until the revocation remains unaffected by the revocation.

XIV. Up-to-dateness and Amendment of this Privacy Policy

This privacy policy is currently valid and has the status 03 / 2024. Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to amend this privacy policy.