PRIVACY POLICY

Thank you for visiting our website. This privacy policy explains the nature, scope, and purpose of the processing of personal data (hereinafter referred to as “data”) within our online offering and the associated websites, functions, and content, as well as external online presences, such as our social media profiles (hereinafter collectively referred to as “online offering”). Please note that this privacy policy applies to the processing of personal data on our website and for our Internet presence. Applicants should note the privacy policy below. You will receive further privacy policy information on supplementary processing activities (e.g., for business partners, etc.) separately or directly during the respective process.With regard to the terms used, such as “processing” or “controller,” we refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).

 

Responsible Body

Preh GmbH
Schweinfurter Str. 5-9
D-97616 Bad Neustadt a. d. Saale
Tel: +49 (9771) 92-0
Fax: +49 (9771) 92-105
Email: automotive@preh.de

 

Contact information data protection officer

c/o Data Protection Officer
Schweinfurter Str. 5-9
D-97616 Bad Neustadt a. d. Saale
E-Mail: datenschutz@preh.de

 

Purposes and legal basis of data processing
Data processing is generally used to provide the online offering, its functions, and content; to respond to contact requests and communicate with users; and to implement security measures. By giving your consent, you can allow us to use data for reach measurement and marketing.
In addition, we process contract data (e.g., subject matter of the contract, term, customer category) and payment data (e.g., bank details, payment history) from our customers, interested parties, and business partners for the purpose of providing contractual services, customer service, marketing, advertising, and market research.
We process data in the context of administrative tasks and the organization of our operations, financial accounting, and compliance with legal obligations, such as archiving. In doing so, we process the same data that we process in the context of providing our contractual services.
Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis for processing operations in which we obtain consent for a specific processing purpose, for example when using cookies (see below). If the processing of personal data is necessary for the performance of a contract to which the data subject is party, as is the case, for example, with processing operations necessary for the delivery of goods or the provision of other services or consideration, the processing is based on Art. 6 para. 1 sentence 1 lit. b GDPR. The same applies to such processing operations that are necessary for the implementation of pre-contractual measures, for example in cases of inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for the fulfillment of tax obligations, the processing is based on Art. 6 para. 1 sentence 1 lit. c GDPR. Finally, processing operations could also be based on Art. 6 para. 1 sentence 1 lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary to safeguard a legitimate interest of our company or a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not prevail. This is, for example, the legal basis for the use of technical security functions. The purpose and our interest in processing lies in administration, financial accounting, office organization, and archiving of data, i.e., tasks that serve to maintain our business activities, perform our tasks, and provide our services.
With regard to data processing via cookies, reference is made to the explanations on the purpose/interest in the explanations below for the respective cookie.
 

Disclosure of data, transfer to third countries

Your personal data will not be transferred to third parties for purposes other than those listed below. We will only pass on your personal data to third parties if:

  • You have given your express consent in accordance with Art. 6 (1) (a) or Art. 49 (1) (a) GDPR,
  • this is legally permissible and necessary for the performance of contractual relationships with you in accordance with Art. 6 (1) (b) GDPR.
  • in the event that there is a legal obligation to disclose the data in accordance with Art. 6 para. 1 sentence 1 lit. c) GDPR, and this is legally permissible.
  • the transfer is necessary for the assertion, exercise, or defense of legal claims and there is no reason to assume that you have an overriding interest in the non-transfer of your data,
  • We do not transfer your data to third countries (outside the EU). Should this become necessary, we will inform you here in the relevant section or in separate data protection notices and ensure that all necessary measures are taken to maintain an adequate level of data protection.

Your data may also be passed on to external parties under the following circumstances:

  • Forwarding your data to coordinate between several contractors, in the event that we commission another service provider/supplier to fulfill the contractual obligations we have agreed with you within the scope of our cooperation.
  • Commissioning support services that require access to your personal data or where such access cannot be ruled out. This includes, for example, IT services, services related to invoicing, or the use of tax consulting services.

We do not transfer your data to third countries (outside the EU). Should this become necessary, we will inform you here in the relevant section or in separate data protection notices and ensure that all necessary measures are taken to maintain an adequate level of data protection.


Deletion of data

The data we process will be deleted or restricted in its processing in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated in this privacy policy, the data stored by us will be deleted as soon as it is no longer required for its intended purpose and there are no legal obligations to retain it. If the data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted. This means that the data will be blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons.
 


Rights of data subjects

You have the right:

  • pursuant to Art. 15 GDPR to request information about your personal data processed by us. In particular, you may request information about the purposes of processing, the categories of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it was not collected by us, and the existence of automated decision-making including profiling and, if applicable, meaningful information about its details;
  • to request the immediate correction of inaccurate or incomplete personal data stored by us in accordance with Art. 16 GDPR;
  • pursuant to Art. 17 GDPR, to request the erasure of your personal data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for fulfilling a legal obligation, for reasons of public interest, or for asserting, exercising, or defending legal claims;
  • pursuant to Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, if the processing is unlawful but you oppose its erasure and we no longer need the data, but you require it for the assertion, exercise or defense of legal claims, or if you have objected to the processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;
  • in accordance with Art. 22 GDPR, not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you;
  • in accordance with Art. 7(3) GDPR, to withdraw your consent to us at any time. This means that we will no longer be allowed to continue processing the data based on this consent in the future, and
  • pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or the place of the alleged infringement if you believe that the processing of personal data concerning you violates the General Data Protection Regulation.
     

     

Cookies
Our website uses cookies.

A cookie is a data record that is created when you visit a website and is temporarily stored on the system of the website user. When the user of the website calls up our website again, the browser of the website user sends the previously received cookie back to the server. The server can evaluate the information obtained through this process. Cookies can be used, for example, to control the display of advertisements or to facilitate navigation on a website. Cookies are necessary in some cases to enable the functionality of our website (the legal basis for this is Art. 6 para. 1 lit. f GDPR, the protection of the legitimate interests of the operator of this website - we only use cookies in accordance with Art. 6 para. 1 lit a GDPR, i.e. in accordance with the principles of “lawfulness, fairness, and transparency”).

A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or even after their visit to an online offering. Temporary cookies, or “session cookies” or “transient cookies,” are cookies that are deleted after a user leaves an online offering and closes their browser. Such a cookie can, for example, store the contents of a shopping cart in an online shop or a login status. Cookies that remain stored even after the browser is closed are referred to as “permanent” or “persistent.” This allows, for example, the login status to be stored when users visit the site after several days. Such cookies can also store the interests of users, which are used for reach measurement or marketing purposes. Cookies that are offered by providers other than the controller operating the online offering are referred to as “third-party cookies” (otherwise, if they are only the controller's cookies, they are referred to as “first-party cookies”).
If you wish to prevent the use of cookies in general, you can do so through local settings in your Internet browser (e.g., Mozilla Firefox, Google Chrome, or Safari).
If the cookies are not technically necessary, you will find further information on cookies used by tools and plugins in this privacy policy.

 

 

 

 

 

Consent to the use of cookies.

For our website to function properly we use cookies. To obtain your valid consent for the use and storage of cookies in the browser you use to access our website and to properly document this we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, The Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.

When you access our website, a connection is established with CookieFirst’s server to give us the possibility to obtain valid consent from you to the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The data processed is stored until the predefined storage period expires or you request to delete the data. Certain mandatory legal storage periods may apply notwithstanding the aforementioned.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is article 6(1)(c) of the General Data Protection Regulation (GDPR).

Data processing agreement

We have concluded a data processing agreement with CookieFirst. This is a contract required by data protection law, which ensures that data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.

Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:

  • Your consent status or the withdrawal of consent
  • Your anonymised IP address
  • Information about your Browser
  • Information about your Device
  • The date and time you have visited our website
  • The webpage url where you saved or updated your consent preferences
  • The approximate location of the user that saved their consent preference
  • A universally unique identifier (UUID) of the website visitor that clicked the cookie banner
This cookie policy has been created and updated by Consent Management - CookieFirst.

Matomo

This website uses functions of the software “Matomo” (www.matomo.org), a service provided by InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand. The software places a cookie on your computer that enables your browser to be recognized. The information collected in this way is stored exclusively on our server. It is not passed on to third parties.

(1) IP anonymization

We have configured Matomo so that your IP address is not stored in full, but rather 2 bytes of the IP address are masked (e.g., 192.168.xxx.xxx). This prevents the shortened IP address from being assigned to the requesting computer and makes it impossible to identify individuals directly.

(2) Purpose

The legal basis on which we process personal data using Matomo is Art. 6 (1) lit. f of the GDPR. We need the data to analyze the use of our website and individual functions, and to optimize the offer of individual components of the website and their user-friendliness. The data will be deleted as soon as it is no longer required for our purposes.

(3) Objection & data protection

You can object to the recording of data in the manner described above:
a) You can completely prevent cookies from being stored in your browser. However, this may mean that you will no longer be able to use some functions of our website.
b) You can activate the “Do Not Track” setting in your browser. Our Matomo system is configured to respect this setting.
c) You can create a so-called opt-out cookie that is valid for two years. As a result, Matomo will not register your further visits. Please note, however, that the opt-out cookie will be deleted when you delete all cookies.

Further information on Matomo's privacy policy can be found at matomo.org/privacy-policy/.

 

General collection of data

When you access our website or retrieve a file, data about this process is stored in a log file on our web server. The following data may be stored in particular:

  • IP address
  • Domain name of the website from which you came
  • Names of the files retrieved
  • Date and time of retrieval
  • Name of your internet service provider
  • and, if applicable, the operating system and browser version of your device
     

We store IP addresses solely for data security reasons in order to ensure the stability and security of our system (legal basis: Art. 6 para. 1 lit. f GDPR). We reserve the right to statistically evaluate anonymized data records.

 

Contact

If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provided there, will be stored and processed by us for the purpose of processing the inquiry and in the event of follow-up questions. Your data will be used exclusively for the purpose of answering and processing your question.

Data processing is carried out here in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR on the basis of your voluntary consent. You can object to this at any time (right of revocation).

References to third-party websites

This website contains references to third-party websites in the form of links. Only when you click on such a link will data be transferred to the link destination. This is technically necessary. The data transferred includes, in particular: your IP address, the time at which you clicked on the link, the page on which you clicked on the link, and information about your Internet browser. If you do not want this data to be transferred to the link destination, do not click on the link.

Security notice

We secure our website and other IT systems against loss, destruction, unauthorized access, unauthorized modification, or unauthorized distribution of your data using appropriate technical and organizational measures. These are adapted to the current state of the art. However, despite all due care, complete protection against all risks is not possible in every case. Because we cannot guarantee complete data security when communicating by email, we recommend that you send confidential information by post.
 

SSL encryption

This website uses SSL (Secure Socket Layer) encryption to transfer data from your browser to our server and to servers that provide files that we integrate into our website.

SSL encrypts the data during transmission. The data cannot be changed and the sender can be identified.

You can recognize the presence of SSL encryption by the text “https” in front of the address of the website you are visiting in your browser.

Comment function

On individual pages or posts, there is an optional comment function for users who wish to express their opinion on the respective page or post. The comment will be approved after positive review and will appear publicly on the page where the comment was submitted. There is no entitlement to the approval of a comment. The commenter must provide a name, which may be a pseudonym. The commenter must also provide an email address. This is used to inform them about the status of their comment, especially if they have asked a question in the comment and are waiting for a reply. The email address is not displayed publicly, is not passed on to third parties, and is not evaluated manually. The IP address of the commenter is only stored in anonymized form. The comment will be stored permanently until it is deleted by you (or an administrator). The email address you provide with your comment will only be stored for the purpose of notifying you if there is a response to your comment. Any other information you provide with your comment will be published with the comment, if you choose to provide it. If a name is requested, you can also use a pseudonym.

Links to other websites

Our website may from time to time contain links to third-party websites or to other websites of our own. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these privacy policies before you share any personal data with these websites.

YouTube videos

We have integrated YouTube videos on our website, which are stored on the servers of the provider YouTube and can be played from our website via an embed. The videos are embedded with the option for extended privacy settings activated. When you play these videos, YouTube cookies and DoubleClick cookies are stored on your computer and data may be transferred to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), as the YouTube operator. The legal basis for processing is Art. 6 (1) lit. a GDPR or Art. 49 (1) lit. a GDPR.

When playing videos stored on YouTube, at least the following data is currently transferred to Google as the YouTube operator and operator of the DoubleClick network: IP address and cookie, the specific address of the page you visited on our site, system date and time of the visit, and your browser ID.

This data is transferred regardless of whether you have a Google user account that you are logged into or whether you do not have a user account. If you are logged in, this data may be assigned directly to your account by Google. If you do not want this data to be assigned to your profile, you must log out before activating the play button for the video.

YouTube or Google stores this data as usage profiles and may use it for advertising, market research, and/or the needs-based design of its websites. Such evaluation is carried out in particular (even for non-registered users) to provide needs-based advertising and to inform other users about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google as the operator of YouTube to exercise this right.

Further information on the purpose and scope of data collection and its processing by Google can be found on this information page.

Please note that US intelligence agencies may be able to access personal data that is inevitably exchanged with Google when this tool is integrated due to the Cloud Act.

Privacy policy for our social media pages

We present ourselves and our offers on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in timely customer communication and for the purposes of advertising and public relations via social media company pages.

You can access our social media company pages regularly on the Internet, regardless of whether you have created a user account on the respective platform or not.

In both cases, however, your data will be processed by the social media platform.

Each time you access the social media platform, your IP address is recorded and stored. In addition, a cookie is usually placed on your device to store your visit and other data about your visit to the social media platform.

If you are also logged in to the social media platform itself, your visit will also be recorded by cookies or other technical means and assigned to your user account. This enables the social media platform to analyze your user behavior on a regular basis. A user profile with your interests is created, which the social media platform uses to provide you with a user experience tailored to your interests and, above all, to display interest-based advertising within and outside the social media platform—if necessary, even across devices. Furthermore, your data may be used for market research. For details, please refer to the following privacy policies of the social media platform(s) we use.

We may also regularly use the data from the social media platform(s) to enable you to use our social media company pages in a manner tailored to your interests or to target you with advertising.

If you interact with our social media company page and are registered on the corresponding social media platform, we may also recognize your user profile and see your content in accordance with the terms of use of the social media site.

Further information can be found below on the corresponding social media company page.
 

Facebook and Instagram (Threads)

Our social media partners provide us with statistics and analyses on the use of our social media offerings. These statistics do not contain any names or other information about individual users. These services enable us to analyze and improve our social media activities. The legal basis is Art. 6 para. 1 lit. f GDPR. When collecting data on our Facebook and Instagram pages, we act as a so-called “joint controller” with Meta Platforms Ireland in accordance with Art. 26 GDPR. We have concluded a separate agreement for this purpose (see www.facebook.com/legal/terms/information_about_page_insights_data). Meta Platforms Ireland is solely responsible for further processing on Facebook and Instagram. If you exercise your rights to information, deletion, etc. (see section “Your rights”), Meta Platforms Ireland is responsible for implementing your rights within the scope of joint responsibility.

LinkedIn

If you visit our company page on LinkedIn, your data may be transferred to the USA.

We have no knowledge of and no influence on the possible collection and use of your data by LinkedIn. For more information, please refer to LinkedIn's privacy policy at www.linkedin.com/legal/privacy-policy. Our social media partner (LinkedIn) provides us with statistics and analyses on the use of our social media offerings. These statistics do not contain any names or other information about individual users. These services enable us to analyze and improve our social media activities. The legal basis is Art. 6 (1) lit. f GDPR.

When collecting data on our LinkedIn pages, we act as a so-called “joint controller” with LinkedIn in accordance with Art. 26 GDPR. We have concluded a separate agreement for this purpose (see legal.linkedin.com/pages-joint-controller-addendum). LinkedIn is solely responsible for further processing. If you exercise your rights to information, deletion, etc. (see section “Your rights”), LinkedIn is responsible for implementing your rights within the scope of joint responsibility.

You can greatly influence the processing of your data on LinkedIn in various ways when you are logged in.

For your privacy settings on LinkedIn, LinkedIn refers to its privacy policy,

where you can read about various options.

You can disable the LinkedIn advertising cookie here (opt out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Google Remarketing via DoubleClick

We use the remarketing function of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). This function is used to show visitors to the website interest-based advertisements within the Google advertising network DoubleClick. The website visitor's browser stores cookies for this purpose, which enable the visitor to be recognized when they visit websites that belong to the Google advertising network. On these pages, visitors may then be presented with advertisements relating to content that the visitor has previously accessed on websites that use the Google remarketing function. If you do not wish to use the remarketing function, you can deactivate it by making the appropriate settings. You can also deactivate cookies via the advertising network initiative by following the instructions.

Please note that US intelligence agencies may be able to access personal data that is inevitably exchanged with Google when this tool is integrated due to the Cloud Act.

Google fonts

This site uses certain fonts from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). When you visit a page, your browser loads these fonts. Google Fonts are generally not integrated into our website or are only integrated locally. To the best of our knowledge, the fonts are not retrieved from Google Ireland Ltd. and no personal data is transferred to Google. If you activate YouTube videos, your IP address and the page (internet address) you visited will be transmitted to a Google server. Text embedded in YouTube videos may be displayed using or retrieving Google fonts, which is equivalent to data transfer to Google. The legal basis for processing is your explicit consent within the meaning of Art. 6 para. 1 lit. a GDPR or Art. 49 para. 1 lit a GDPR. Further information on Google fonts can be found at developers.google.com/fonts/faq and in Google's privacy policy at www.google.com/policies/privacy/. Please note that US intelligence agencies may be able to access personal data that is inevitably exchanged with Google when this tool is integrated due to the Cloud Act.

DoubleClick

DoubleClick by Google (“DoubleClick”) is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). DoubleClick uses cookies to display advertisements that are as relevant as possible. Google records which advertisements are displayed to you and which of these you have accessed. The use of DoubleClick cookies enables Google and its advertising network to display ads based on your previous visits to websites (or apps). The information generated by the cookies is transmitted to a Google server for evaluation and stored there. You can prevent the storage of cookies by adjusting your browser software accordingly. Furthermore, you can prevent Google from collecting the data generated by the cookies and relating to your use of the websites and from processing this data. To do so, please visit the following link: Privacy policy for DoubleClick and Google.

Please note that US intelligence agencies may be able to access personal data that is inevitably exchanged with Google when this tool is integrated due to the Cloud Act.

Google Tag Manager

We use Google Tag Manager from Google. “Google” is a group of companies consisting of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other companies affiliated with Google LLC.

We have entered into a data processing agreement with Google. Google Tag Manager is an auxiliary service and only processes personal data for technically necessary purposes. The tool ensures that other components are loaded, which in turn may collect data. Google Tag Manager does not access this data.

For more information about Google Tag Manager, please refer to Google's privacy policy.

Please note that US intelligence agencies may be able to access personal data that is inevitably exchanged with Google when this tool is integrated due to US law.

Changes to this privacy policy

We reserve the right to amend this privacy policy if the legal situation, this online offering, or the type of data processing changes.

Therefore, please check our current privacy policy regularly.

Updated: July 14, 2025

WHAT ARE COOKIES?

Cookies and similar technologies are very small text files or pieces of code that often contain a unique identification code. When you visit a website or use a mobile application, a computer asks your computer or mobile device for permission to store this file on your computer or mobile device and to access information. Information collected through cookies and similar technologies may include the date and time of your visit and how you use a particular website or mobile application.

WHY DO WE USE COOKIES?

Cookies ensure that you remain logged in during your visit to our online store, that all items remain in your shopping cart, that you can shop securely, and that the website continues to function smoothly.

Cookies also ensure that we can see how our website is used and how we can improve it. In addition, depending on your preferences, our own cookies may be used to present you with targeted advertising that matches your personal interests.

WHAT TYPE OF COOKIES DO WE USE?

Necessary cookies

These cookies are necessary for the website to function properly. Some of the following actions can be performed with these cookies.

- Store items in a shopping cart for online purchases

- Save your cookie settings for this website

- Save language settings

- Log in to our portal. We need to check whether you are logged in.

Performance cookies

These cookies are used to collect statistical information about the use of our website, also known as analytics cookies. We use this data to improve performance and optimize our website.

Functional cookies

These cookies enable more functionality for our website visitors. These cookies may be set by our external service providers or our own website. The following functionalities may or may not be enabled if you accept this category.

- Live chat services

- Watch online videos

- Social media sharing buttons

- Log in to our website with social media.

Advertising/tracking cookies

These cookies are set by external advertising partners and are used for profiling and data tracking across multiple websites. If you accept these cookies, we can display our advertising on other websites based on your user profile and preferences.

These cookies also store data about how many visitors have seen or clicked on our advertising in order to optimize advertising campaigns.

HOW CAN I DISABLE OR REMOVE COOKIES?

You can opt out of all cookies except for the necessary ones. You can change your settings in your browser to block cookies. Most browsers have an “Help” function that explains how to do this. However, if you block cookies, you may not be able to use all the technical features of our website, and this may have a negative impact on your user experience.

We have made it easy for you to manage your consent.

© PREH GMBH

 

Data protection information for applicants

The applicant portal (Rexx) is used jointly by Preh GmbH and its subsidiaries. The following companies are included in the Preh Group:

- Preh GmbH (operator of the applicant portal)

- Preh Thüringen GmbH

- Preh Romania S.R.L.

- Preh Portugal, LDA

- Preh Sweden AB

- Preh, Inc.

- Preh de México S.A. DE C.V.

- Ningbo Preh Joyson, Automotive Electronics Co., Ltd.

We process applicant data only for the purpose and within the scope of the application process in accordance with legal requirements. The processing of applicant data is carried out to fulfill our (pre)contractual obligations within the scope of the application process in accordance with Art. 6 (1) lit. b. GDPR Art. 6 (1) lit. f. GDPR if data processing becomes necessary for us, e.g., in the context of legal proceedings (in Germany, § 26 BDSG also applies).

The application process requires applicants to provide us with their application data. The necessary application data is marked if we offer an online form; otherwise, it can be found in the job descriptions and generally includes personal details, postal and contact addresses, and the documents required for the application, such as a cover letter, resume, and references. Applicants may also provide us with additional information on a voluntary basis.

By submitting their application to us, applicants consent to the processing of their data for the purposes of the application process in accordance with the type and scope set out in this privacy policy.

If special categories of personal data within the meaning of Art. 9 (1) GDPR are voluntarily provided during the application process, they will also be processed in accordance with Art. 9 (2) lit. a GDPR (e.g., health data, such as severe disability or ethnic origin). If special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants during the application process, they will also be processed in accordance with Art. 9 (2) lit. b GDPR (e.g., health data if this is necessary for the performance of the job).

 

Applicants can submit their applications to us using an online form on our website. The data is transmitted to us in encrypted form in accordance with the state of the art. In a further step, the data is stored by a service provider in the course of order processing in accordance with Art. 28 GDPR. Both the Preh Group and the processor use technical and organizational security measures to protect the collected data against manipulation, loss, destruction, or access by unauthorized persons.

Applicants can also send us their applications via email. However, please note that emails are generally not sent in encrypted form and that applicants are responsible for ensuring encryption themselves. We therefore cannot accept any responsibility for the transmission of the application between the sender and our server and therefore recommend using an online form or sending it by post. Instead of applying via the online form and email, applicants still have the option of sending us their application by post.

The data provided by applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job vacancy is unsuccessful, the applicant's data will be deleted. The applicant's data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time.

Subject to a justified revocation by the applicant, the data will be deleted after a period of six months so that we can answer any follow-up questions regarding the application and fulfill our obligations under the Equal Treatment Act. Invoices for any travel expense reimbursements will be archived in accordance with tax regulations.

Talent pool

As part of the application process, we offer applicants the opportunity to be included in our “talent pool” for a period of two years on the basis of consent within the meaning of Art. 6 (1) lit. a. and Art. 7 GDPR.

The application documents in the talent pool will be processed solely for the purpose of future job vacancies and employee searches and will be destroyed at the latest after the expiry of the period. Applicants are informed that their consent to be included in the talent pool is voluntary, has no influence on the current application process, and that they may withdraw this consent at any time in the future and object to the processing of their data in accordance with Art. 21 GDPR.

Updated: 11/08/2025