Privacy Policy

the

RSE+ Architekten Ingenieure GmbH
RSE+ Fabrik Logistik GmbH
Frauenkron Stiegel Holzinger Brune GbR

RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel
Holzinger Brune GbR takes its legitimate data protection concerns very seriously and complies
with the provisions of the German Data Protection Regulation (DSGVO), the Federal Data
Protection Act (Bundesdatenschutzgesetz-Neu), the Telecommunications Telemedia Data
Protection Act (Telekommunikations-Telemediendatenschutz-Gesetz (TTDSG)) and also, where
applicable, the provisions of other applicable data protection regulations.

RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel
Holzinger Brune GbR handles the data you provide carefully and conscientiously. Insofar as data
of any kind is collected, processed or used, this is always done within the framework of the
statutory provisions or with your express consent.

The protection of privacy is of crucial importance for the future of internet-based business
models and for the development of an internet-based economy. RSE+ Architekten Ingenieure
GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR underscores its
commitment to privacy protection with this privacy statement.

In the following, you will learn how RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik
GmbH or Frauenkron Stiegel Holzinger Brune GbR handles personal data on this website.

The persons responsible in accordance with Art. 4 Para. 7 of the Basic Data

Protection Regulation (DSGVO) are: RSE+ Architekten Ingenieure GmbH
RSE+ Factory Logistics GmbH
Frauenkron Stiegel Holzinger Brune GbR
Heinrich-Hertz-Straße 1
34123 Kassel, Deutschland
T +49 (0) 561 589 08-0
E architekten@rse.plus
E fabrik.logistik@rse.plus
E info@fshb-kassel.de

The external data protection officer of RSE+ Architekten Ingenieure GmbH and RSE+ Fabrik
Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR can be reached at:

Thomas Fletschinger
E datenschutz.ai@rse.plus
E datenschutz.fl@rse.plus
E datenschutz@fshb-kassel.de

Any data subject may contact our external data protection officer directly at any time with any
questions or suggestions regarding data protection.

Global data protection standards

Our handling of personal data has been aligned with global principles and standards in terms of
transparency in the use of personal data, observance and granting of rights of choice, access
regulations, rules on data integrity, data security, data sharing and monitoring the lawfulness of
processing. RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron
Stiegel Holzinger Brune GbR complies in particular with the General Data Protection Regulation
(DSGVO).

Consent

By using this website, you consent to the electronic storage and use of your data as described
below. Changes to this data protection declaration will always be posted on this page so that
you are always informed about what data RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik
Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR stores and how it is used.

Where required by applicable data protection law, we will also expressly request your consent
for the further processing of personal data collected on this website or provided by you.

Hosting of the website

We host the content of our website with the following provider:

The provider is Strato AG, Otto-Ostrowski-Straße 7, 10249 Berlin (hereinafter "Strato"). If when
you visit our website, Strato collects various log files including your IP addresses.

For further information, please refer to the privacy policy of

Strato: https://www.strato.de/datenschutz/.

The use of Strato is based on Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in the most
reliable presentation of our website. If a corresponding consent has been requested, the
processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a DSGVO and § 25 para. 1
TTDSG, insofar as the consent includes the storage of cookies or access to information in the
user's terminal device (e.g. device fingerprinting) as defined by the TTDSG. The consent can
berevoked at any time.

Collection and processing of personal data

RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel
Holzinger Brune GbR would like to better understand your wishes and interests and provide you
with an optimal service. Therefore, RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik
GmbH or Frauenkron Stiegel Holzinger Brune GbR collects and uses personal information in the
manner described below and in accordance with applicable data protection law.

When you visit our website, we collect your IP address and use cookies and other internet
technologies (hereinafter referred to as "automated tools" and "integrated web links") that can
be used to obtain general information about visitors to our website and their interests. Below we
explain which technologies are used and what kind of information is collected with them.

In addition, we collect and process data that you voluntarily provide to us, for example, when you
register for events, subscribe to newsletters, participate in online surveys, join discussion groups
or forums, or make purchases.

What data do we collect and why?

With the help of the data collected, RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik
GmbH or Frauenkron Stiegel Holzinger Brune GbR would like to offer you consistent personal
support. RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel
Holzinger Brune GbR uses your data exclusively as described in this declaration. Any subsequent
change in the purpose of use is subject to your express consent, unless the change is otherwise
legitimised by applicable legal provisions.

We process your personal data for the following purposes:

− to manage our relationship with you, e.g. through our databases where we aggregate
data about you from our different sources to get an overview of the cooperation. In
addition, we want to improve and individualise our understanding of your preferences
and our communication with you;

for order processing and delivery of ordered services;
to carry out tasks in preparation for or performance of contracts;
to keep a record of business transactions;
to provide you with appropriate and up-to-date information about our services;
to improve the quality of our services by adapting our offer to your specific needs;
to answer your queries and provide you with efficient support;
to manage communication and collaboration with you;
to track our activities (e.g. number of appointments / meetings, topics discussed,
documents presented);
to invite you to events sponsored by us or used by us (e.g. lectures, conferences);
to grant you access to our specified IT systems so that you can use certain services
provided by RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or
Frauenkron Stiegel Holzinger Brune GbR;
to safeguard the company's economic interests and to ensure compliance and reporting
(e.g. adherence to our policies and local legal requirements, taxes and deductions,
compliance with internally set grant limits, management of alleged cases of misconduct
or fraud, conducting audits and defending litigation);
for archiving and logging;
for processing job enquiries;
for invoicing and accounting, and
for other purposes prescribed by law and by the authorities.
In certain cases, we are legally obliged to transmit data to a requesting government
agency (institution or authority). The legal basis for the processing is Art. 6 para. 1 c
DSGVO or § 24 para. 2 no. 1 BDSG.
In some cases, business partners require personal data from our customers. This usually
takes place in the context of order fulfilment (e.g. in the case of complaints) and is
expressly provided for by law. RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik
GmbH or Frauenkron Stiegel Holzinger Brune GbR remains responsible for the protection
of your data in this case as well - possibly in addition to the order processor. The
respective business partner works according to our instructions, which RSE+ Architekten
Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel Holzinger Brune
GbR ensures through strict contractual regulations.
to fulfil the legal obligations to record, document and report to competent authorities.

IP addresses

IP addresses are used for malfunction analysis, website administration and to gather
demographic information. We also use IP addresses and, where applicable, other information
that you have provided to us on this website to find out which pages from our offer are accessed
and which topics interest our visitors. We use the knowledge gained to be able to offer you an
optimised range of information on our products and services. RSE+ Architekten Ingenieure GmbH
or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR only collects such data
in anonymised form and will not link it to a registered user's profile without the user's consent.

RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel
Holzinger Brune GbR only collects data in connection with your visit to the RSE+ Architekten
Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR
website. We do not collect any personal data in connection with your visits to the websites of
other companies or organisations which do not belong to RSE+ Architekten Ingenieure GmbH or
RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR.

Privacy Policy and Cookie Consent with Klaro, Consent Manager

a) Klaro is a free open source tool that allows you to manage consent for your website in an
intuitive, user-friendly and data protection-compliant way. The project initiator of this
technology is KIProtect GmbH, Bismarckstr. 10-12, 10625 Berlin. Only if you agree to its use in the
"opt-in" procedure, a Klaro! cookie ("klaro") will be stored in your browser, in which the consent
you have given or the revocation of this consent will be saved. This data is not passed on to Klaro!
developers. The collected data will be stored until you delete the Klaro! Cookie or the purpose for
storing the data no longer applies. Mandatory legal retention periods remain unaffected.

You can access the Klaro Consent Manager at any time and check and update your settings here.

b) Details on the data processing of Klaro! cookie can be found at klaro.kiprotect.com. Klaro!
cookie consent technology is used to obtain the legally required consent for the use of cookies.
The legal basis for this is Art. 6 para. 1 S. 1 lit. c DSGVO.

Use of cookies

We use cookies on our website or websites. These are small files that your browser automatically
creates and that are stored on your end device (laptop, tablet, smartphone, etc.) when you visit
our websites. Cookies do not cause any damage to your end device and do not contain any
viruses, Trojans or other malware. Information is stored in the cookie that results in each case in
connection with the specific end device used. However, this does not mean that we obtain direct
knowledge of your identity. The use of cookies serves to make the use of our website more
pleasant for you.

In addition, we also use temporary cookies to optimise user-friendliness, which are stored on your
end device for a certain fixed period of time. If you visit our website again to use our services, it is
automatically recognised that you have already been with us and which entries and settings you
have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate
it for the purpose of optimising our offer for you. These cookies enable us to automatically
recognise that you have already been to our website when you visit it again. These cookies are
automatically deleted after a defined period of time.

Most browsers accept cookies automatically. However, you can configure your browser so that
no cookies are stored on your computer or a notice always appears before a new cookie is
created. However, the complete deactivation of cookies may mean that you cannot use all the
functions of our website.

The cookies process data and are necessary for the aforementioned purposes to protect
ourlegitimate interests as well as the interests of third parties in accordance with Art. 6 (1) p. 1 lit.
f) DSGVO.

E-mail adresses

When you contact us by e-mail, the data you provide (your e-mail address, possibly your
name and telephone number) will be stored by us in order to answer your enquiry.
We will not pass on your e-mail address to third parties. You can decide at any time to
no longer receive e-mails from RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik
Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR.

Use of external service providers

We work together with service providers who process certain data on our behalf. This is
done exclusively in accordance with the applicable data protection law. In particular,
we have concluded agreements with our service providers on data processing on our
behalf that meet the requirements of Article 28 of the GDPR (DPA / AV).

Disclosure of data, transmission to third parties

The transfer of your personal data to third parties for purposes other than those listed below
does not take place. We will only disclose your personal data to third parties if:

a) you have given your express consent to this in accordance with Art. 6 para. 1 p. 1 lit. a) DSGVO,
§ 26 para. 2 Federal Data Protection Act (BDSG),

b) the disclosure is necessary in accordance with Art. 6 (1) p. 1 lit. f) DSGVO for the assertion,
exercise or defence of legal claims and there is no reason to assume that you have an overriding
interest worthy of protection in the non-disclosure of your data,

c) in the event that a legal obligation exists for the disclosure pursuant to Art. 6 para. 1 sentence
1 lit. c) DSGVO, as well as

d) this is legally permissible and necessary according to Art. 6 para. 1 p. 1 lit. b) DSGVO, § 26 para.
1 BDSG for the processing of a contractual relationship with you or for pre-contractual measures
at your instigation.

A transfer to a third country or an international organisation is not intended and there is no
automated decision-making, unless otherwise provided for in this privacy policy.

If necessary, information is also passed on by RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik
Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR to business partners, service
providers, third parties or subcontractors. This may be necessary to provide a service or
transaction requested by you, such as order processing, for customer service purposes or to
inform you about services.

Your personal data will not be disclosed, sold or otherwise made available to third parties for
marketing purposes without your prior consent.

RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel
Holzinger Brune GbR may be required to disclose your data and related information in response
to a court or regulatory order. We also reserve the right to use your data to assert or defend
against legal claims.

In the event of a takeover or merger with another company, disclosure or transfer of personal
data to potential or actual buyers may be necessary. In such a case, RSE+ Architekten Ingenieure
GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR will strive to
protect the data as much as possible.

In accordance with applicable law, we reserve the right to store and disclose personal and other
data for the purpose of detecting and combating illegal activities and attempted fraud or a
breach of the terms of use of RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH
or Frauenkron Stiegel Holzinger Brune GbR.

Social media

We use links to the social networks LinkedIn, Instagram and XING on our website. The
social networks are only integrated on our website as links to the corresponding
services. No data is transferred to the services if you do not click on the respective
graphics. After clicking on the integrated graphics, you will be redirected to the page of
the respective provider. Only then will user information be transmitted to the respective
provider.

Addresses of the respective providers and URL with data protection information:

Privacy policy for the use of LinkedIn

Plugins of the social network LinkedIn of LinkedIn Corporation, 2029 Stierlin Court, Mountain View,
CA 94043, USA (hereinafter "LinkedIn") are integrated on our website. You can recognise the
LinkedIn plugins by the LinkedIn logo or the "Share Button" ("Recommend") on this website
(hereinafter collectively referred to as "LinkedIn plugins"). When you visit our website, a direct
connection is established between your browser and the LinkedIn server via the LinkedIn plugins.
LinkedIn thereby receives the information that you have visited this website with your IP address.
If you click the LinkedIn "Share" button while logged into your LinkedIn account, you can link the
content of this website to your LinkedIn profile. This allows LinkedIn to associate your visit to this
website with your user account.

We would like to point out that we, as the provider of the pages, have no knowledge of the content
of the transmitted data or its use by LinkedIn. Details on data collection (purpose, scope, further
processing, use) as well as your rights and setting options can be found in LinkedIn's privacy
policy. LinkedIn keeps this information under

available at http://www.linkedin.com/static... bereit.

For the transfer of data from the EU to the USA, the provider has signed up to the EU-US Data
Privacy Framework (EU-US Data Privacy Framework), which guarantees compliance with the
adequacy decision of the European Commission, which ensures compliance with the European
level of data protection.

Privacy policy for the use of Xing

The "XING Share Button" is used on this website. When you visit this website, your web browser
connects for a short time to the servers of XING AG ("XING") which provides the functions of the
"XING Share Button" (including a visitor counter). XING does not store any personal data about
you and your visit when you access the website. XING does not store IP addresses, nor does XING
use cookies to monitor your visit behaviour in relation to the "XING Share Button". Please visit the
following website for the current version of the privacy policy for the "XING Share Button" and
further information:

https://dev.xing.com/plugins/s...

Instagram privacy policy

Within our online offer, functions and contents of the service Instagram, offered by Instagram
Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, may be integrated. This may include, for
example, content such as images, videos or texts and buttons with which users can make known
their liking of the content, the authors of the content or subscribe to our posts. If the users are
members of the Instagram platform, Instagram can assign the call of the abovementioned
content and functions to the profiles of the users there. Privacy policy of

Instagram: http://instagram.com/about/leg....

Microsoft Teams Privacy Policy

We use the "Microsoft Teams" service of Microsoft Corporation, One Microsoft Way, Redmond,
WA 98052-6399 USA (hereinafter "Microsoft Teams") to conduct online meetings, video
conferences and/or webinars. In the case of the use of Microsoft Teams, different data are
processed.

The amount of data processed depends on the data you provide before or during participation
in an online meeting, video conference or webinar. In the context of using Microsoft Teams, data
of the communication participants is processed and stored on Microsoft Teams servers. This
data may include, in particular, your login data (name, email address, phone (optional) and
password) and meeting data (topic, participant IP address, device information, description
(optional).

In addition, visual and auditory contributions of the participants as well as voice inputs in chats
can be processed. When processing personal data that is necessary for the performance of a
contract with you (this also applies to processing operations that are necessary for the
implementation of pre-contractual measures), Art. 6 (1) lit. b DSGVO serves as the legal basis.

If you have given us your consent for the processing of your data, the processing is based on Art.
6 (1) lit. a DSGVO. Consent given can be revoked at any time with effect for the future. In addition,
the legal basis for data processing when conducting online meetings, video conferences or
webinars is our legitimate interest pursuant to Art. 6 (1) lit. f DSGVO in the effective conduct of the
online meeting, webinar or video conference.

For more information about Microsoft Teams' use of data, please see the Microsoft Teams
Privacy Policy at:

https://privacy.microsoft.com/...

Data management

RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel
Holzinger Brune GbR retains personal data only as long as required by the purpose or legal
provisions for which it was collected.

Data protection information in the application procedure

We only process the applicant data for the purpose of and within the scope of the application
procedure in accordance with the legal requirements. Applicant data is processed to fulfil our
(pre-)contractual obligations within the scope of the application procedure within the meaning
of Art. 6 para. 1 lit. b. DSGVO, insofar as the data processing becomes necessary for us, e.g. within
the scope of legal procedures (in Germany, § 26 BDSG also applies).

The application procedure requires that applicants provide us with the applicant data. Required
applicant data are personal details, postal and contact addresses and the documents belonging
to the application, such as cover letter, CV and certificates. In addition, applicants can voluntarily
provide us with additional information.

By submitting their application to RSE+ Architekten Ingenieure GmbH or RSE+ Fabrik Logistik
GmbH or Frauenkron Stiegel Holzinger Brune GbR, applicants consent to the processing of their
data for the purposes of the application procedure in the manner and to the extent set out in this
data protection declaration.

Insofar as special categories of personal data within the meaning of Art. 9 (1) of the Data
Protection Regulation are voluntarily provided during the application process, they will also be
processed in accordance with Art. 9 (2) (b) of the Data Protection Regulation (e.g. health data,
such as severely disabled status or ethnic origin). If special categories of personal data within
the meaning of Article 9(1) of the GDPR are requested from applicants as part of the application
process, they are also processed in accordance with Article 9(2)(a) of the GDPR (e.g. health data)
if they are required for the exercise of the profession.

Applicants can send us their applications by post or by e-mail. However, please note that emails
are generally not encrypted and applicants must ensure that they are encrypted themselves. We
can therefore accept no responsibility for the transmission route of the application between the
sender and receipt on our server. If the applicant has any concerns regarding the security of the
application documents sent by e-mail, we recommend sending the application documents by
post.

The data provided by applicants may, in the event of a successful application, be further
processed by us for the purposes of the employment relationship and will be included in an
applicant data pool unless the applicant has explicitly requested deletion.

If you have been awarded a position during the application process, the data from the applicant
data system will be transferred to our personnel information system.

We will only use this data to contact you if we have a vacancy that meets your requirements or if
we would like to offer you a suitable position. This data will not be used for any other purpose.

Data subjects' rights

You have the right,

to request information about your personal data processed by us in accordance with Art.
15 DSGVO. In particular, you can request information about the purposes of processing,
the category of personal data, the categories of recipients to whom your data has been or
will be disclosed, the planned storage period, the existence of a right to rectification,
erasure, restriction, processing or objection, the existence of a right of complaint, the origin
of your data if it has not been collected by us, such as the existence of automatic decisionmaking
and, if applicable, meaningful information about its details;
to demand the correction of incorrect or the completion of your personal data stored by us
without delay in accordance with Art. 16 DSGVO;
to request the erasure of personal data stored by us in accordance with Art. 17 DSGVO,
unless the processing is necessary for the exercise of the right to freedom of expression
and information, for compliance with a legal obligation on grounds of public interest, or for
the assertion, exercise or defence of legal claims;
to request the restriction of the processing of your personal data in accordance with Art.
18 DSGVO, insofar as the accuracy of the data is disputed by you, the processing is
unlawful, but you object to its erasure and we no longer require the data, but you need it for
the assertion, exercise or defence of legal claims or you have objected to the processing in
accordance with Art. 21 DSGVO;
in accordance with Art. 20 DSGVO to receive your personal data that you have provided to
us in a structured, common and machine-readable format or to request that it be
transferred to another controller;
revoke your consent at any time in accordance with Art. 7 (3) DSGVO. This has the
consequence that we may no longer continue the data processing based on this consent
for the future and
complain to a supervisory authority in accordance with Art. 77 DSGVO. As a rule, you can
contact the supervisory authority of your usual place of residence or workplace or the
registered office of our company.

The competent supervisory authority for data protection of RSE+ Architekten Ingenieure GmbH
or RSE+ Fabrik Logistik GmbH or Frauenkron Stiegel Holzinger Brune GbR is:

The Hessian Commissioner for Data Protection and Freedom of
Information Gustav - Stresemann-Ring 1
65189 Wiesbaden
Phone: 0611 1408-0
Fax: 0611 1408-900
E-mail: poststelle@datenschutz.hessen.de
Internet: http://www.datenschutz.hessen....

For the assertion of the aforementioned rights as well as for questions regarding data protection,
you can contact the person responsible or send an appropriate e-mail to

E datenschutz.ai@rse.plus
E datenschutz.fl@rse.plus
E datenschutz@fshb-kassel.de

send.

Right of objection

If your personal data is collected on the basis of legitimate interests pursuant to Art. If your
personal data is processed in accordance with Article 6 (1) sentence 1 f) DSGVO, you have the
right to object to the processing of your personal data in accordance with Article 21 DSGVO,
insofar as there are grounds for doing so that arise from your particular situation or the objection
is directed against direct advertising. In the latter case, you have a general right of objection,
which is implemented by us without specifying a particular situation. If you would like to make use
of your right of revocation or objection, it is sufficient to send an e-mail to

E datenschutz.ai@rse.plus
E datenschutz.fl@rse.plus
E datenschutz@fshb-kassel.de

Data security

We use the common SSL procedure (Secure Sockets Layer) in conjunction with the highest
encryption level supported by your browser when visiting the website. As a rule, this is 256-bit
encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology
instead. You can tell whether an individual page of our website is transmitted in encrypted form
by the closed display of the key or lock symbol in the lower status bar of your browser.

We also use appropriate technical and organisational security measures to protect your data
against accidental or intentional manipulation, partial or complete loss, destruction or against
unauthorised access by third parties. Our security measures are continuously improved in line
with technological developments.

Changes to this privacy policy

Due to current circumstances, such as a change in the relevant data protection regulations, we
will update this data protection declaration if necessary.