Privacy policy

Privacy Information

Below you will find comprehensive information on how we process your personal data within our company as well as in the context of visiting our website and our social media presences.

If you have any questions about the handling of your personal data, please feel free to contact our Data Protection Officer.

 

Controller and contact details of the Data Protection Officer

The controller within the meaning of the General Data Protection Regulation (GDPR) is

Verbio SE, Thura Mark 18, 06780 Zörbig, Germany
T: +49 (0) 341 308530-0, F: +49 (0) 341 308530-999
E-mail: info(at)verbio.de / Website: www.verbio.de

You can contact our Data Protection Officer at the above address or via the following e-mail address: datenschutz(at)verbio.de

Data processing on this website

Description and scope of data processing
Each time our website is accessed, access data of the requesting computer is stored in an electronic log file (server log). The data record stored includes, among other things, the following data:

• IP address: The IP address of the device from which the request originated.
• Timestamp: The exact date and time of the request.
• Requested URL: The specific web page or resource (e.g., an HTML page, an image, or a script) that was requested.
• HTTP status code: A three-digit code that indicates the status of the server response (e.g., “200 OK” for a successful request or “404 Not Found” for a page that does not exist).
• Response size: The size of the response sent to the client in bytes.
• Referrer: The URL of the page from which the visitor arrived at the current page.
• User agent: A string that provides information about the browser, operating system, and device of the requesting client.

The data are also stored in the log files of our system. These data are not stored together with other personal data of the user.
 

Legal basis for processing
The legal basis for the temporary storage of the data and the log files is Art. 6(1) sentence 1 lit. f GDPR.
 

Purpose of processing
The collection of these data is carried out solely for statistical purposes with the aim of continuously improving the attractiveness, functionality, and content of our website as well as the security of our IT systems. There is no disclosure to third parties, in particular no evaluation of the data for marketing purposes. These purposes also constitute our legitimate interest in data processing pursuant to Art. 6(1) sentence 1 lit. f GDPR.
 

Storage period
Data in log files are not stored. If data are stored in log files, deletion will take place after no later than seven days.
 

Contact form or contact by e-mail

Description and scope of data processing
Our website provides a contact form that can be used for electronic communication. If you use this option, the data entered in the input fields will be transmitted to us and stored.

We also collect personal data when you provide it to us voluntarily, for example when you contact us by e-mail. 

The following data may be collected when using the contact form and e-mail contact:

• IP address of the requesting computer
• Date and time of registration
• Company
• Name
• E-mail address
• Telephone number
• all details provided in the message field or sent by e-mail.

The data will not be passed on to third parties. The data are used exclusively for processing the conversation and, if necessary, forwarded internally to other organizational units and departments to answer your inquiry.
 

Legal basis for processing
The legal basis for processing the data transmitted in the course of sending a contact request via the form provided or by e-mail is Art. 6(1) sentence 1 lit. f GDPR. If the contact aims at the conclusion or performance of a contract, the additional legal basis for processing is Art. 6(1) sentence 1 lit. b GDPR.
 

Purpose of processing
The purpose of processing your data is to handle and answer your request. The legitimate interest in processing also lies in the purposes described. The other personal data processed during transmission serve to prevent misuse of the contact form and to ensure the security of our IT systems.
 

Storage period
We will delete the data we received as part of the contact once they are no longer required to achieve the purpose of their collection; that is, when your request has been fully processed and no further communication with you is necessary or desired by you, or we will restrict processing to compliance with mandatory statutory retention obligations.

 

Cookies and comparable technologies for usage analysis and online advertising

To improve the presentation of content on our website, we use cookies and comparable technologies (e.g., Local Storage) to statistically capture and analyze general usage behavior based on access data. In addition, we use services from external providers that process the access data incurred when using our website in order to enable interest-based advertising, for example in the context of search queries.

Cookies
A cookie is a file that is downloaded to your device when you access certain websites or electronic communications. Cookies enable a website, among other things, to obtain and store information about the number of visits and the browsing behavior of users or their devices.

Cookies are used to make websites functional or more efficient and to provide the website operator with information.

There are different types of cookies: Required cookies are strictly necessary for the website to function technically as intended. Non-required cookies are those that do not fall into the previous category, including analytical cookies. These cookies are only installed on your device if you give your explicit consent.

Required and non-required cookies can be specified in more detail as follows: Session cookies are temporary cookies stored in the user’s internet browser until the browser window is closed, at which point the session cookies are deleted. Persistent cookies are used for repeated visits and are stored in the user’s browser for a predefined period. First-party cookies are set by the website the user is visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that are not the operator of the website the user is visiting. These cookies are used, for example, by marketing companies.

You can find more information on the cookies used on this website in our cookie consent tool (“Edit cookie settings”) at the bottom of the website (footer).

The legal basis for the use of non-essential cookies is your consent pursuant to Section 25(1) TDDDG and Art. 6(1) sentence 1 lit. a) GDPR. If the use of cookies is strictly necessary, this is based on Section 25(2) TDDDG and any further data processing on Art. 6(1) lit. c) or lit. f) GDPR.

You can withdraw your consent for non-essential cookies at any time with effect for the future or adjust your selection of cookies by using the cookie consent tool (“Edit cookie settings”) at the bottom of the website (footer).
 

Google Tag Manager
We use the Google Tag Manager service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. For users in the EU, EEA and Switzerland, the provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Tag Manager facilitates the integration, central management and time-controlled triggering of our tags. Tags are script codes or code sections that can trigger different functionalities, for example measuring the success of our ads (Google Ads). Google Tag Manager itself does not collect personal data but may transmit the IP address to Google.

The legal basis for this data processing is your consent pursuant to Section 25(1) TDDDG and Art. 6(1) sentence 1 lit. a) GDPR.

You can revoke consent once given with effect for the future by using the cookie consent tool (“Edit cookie settings”) at the bottom of the website (footer) and changing your settings.

For more information on Google Tag Manager, see: https://marketingplatform.google.com/intl/de/about/analytics/tag-manager/use-policy/.

Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website use and internet usage.

We use Google Analytics to analyze the use of our website so that we can regularly improve the user experience. The statistics obtained help us to improve our offering and make it more interesting for you. The legal basis for processing your data is the consent you provide via the cookie consent tool (Art. 6(1) sentence 1 lit. a) GDPR and Section 25(1) TDDDG).

You can revoke consent once given with effect for the future by using the cookie consent tool (“Edit cookie settings”) at the bottom of the website (footer) and changing your settings.

You can also prevent the storage of cookies by selecting the appropriate settings in your browser software. In addition, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google as well as the processing of these data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information can be found here http://google.com/analytics/terms/de.html and in Google’s privacy policy: http://www.google.de/intl/de/policies/privacy.

Google Dynamic Remarketing
We use the Google Dynamic Remarketing service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. This function is used to present interest-based advertisements for “similar audiences” to visitors to the website within the Google advertising network. The website visitor’s browser stores cookies that make it possible to recognize the visitor when they access websites that belong to Google’s advertising network. On these pages, the visitor may then be shown advertisements related to content that the visitor previously accessed on websites that use Google’s remarketing function. 

According to Google, no personal data are collected in this process. 

If you do not wish to use Google’s remarketing function, you can generally deactivate it by making the appropriate settings at http://www.google.com/settings/ads. Further information on Google Remarketing and Google’s privacy policy can be found at: http://www.google.com/privacy/ads/


Google Syndication
We use the Google Syndication service of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. The Google Syndication service is used to record individual clicks within the Google advertising network.

Google Syndication uses cookies as part of web tracking, which are stored on your computer and enable an analysis of the use of our website and your browsing behavior (so-called tracking). We carry out this analysis on the basis of the Google Syndication tracking service in order to continuously optimize and improve the availability of our online offering. In the course of using our website, data such as your IP address and your user activities are transmitted to servers of Google Syndication and processed and stored outside the European Union, e.g., in the USA. 

The legal basis for the transfer of personal data is your consent pursuant to Art. 6(1) sentence 1 lit. a GDPR and Section 25(1) TDDDG. 

You can revoke consent once given with effect for the future by using the cookie consent tool (“Edit cookie settings”) at the bottom of the website (footer) and changing your settings.

Further information on the handling of transmitted data can be found in Google’s privacy policy at https://policies.google.com/privacy.

YouTube
We use plug-ins of the video platform YouTube.de or YouTube.com on the website, a service which—represented by Google—is operated by YouTube LLC (principal place of business at 901 Cherry Avenue, San Bruno, CA 94066, USA). The plug-ins allow us to embed on our website videos that we have published on YouTube.de or YouTube.com.

Your consent is required to play YouTube videos on our website. When you access our website with the embedded YouTube video, your browser establishes a direct connection to the Google Marketing Platform. With your consent, YouTube / Google receives the information that you have accessed the corresponding subpage of our website. Playing the video may trigger further data processing operations over which we have no control. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be associated directly with your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes them for the purposes of advertising, market research and/or the needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. By embedding YouTube videos, cookies can also be set by YouTube. No data will be transmitted to YouTube unless you have previously given your consent.

The legal basis for processing is Art. 6(1) sentence 1 lit. a) GDPR and Section 25(1) TDDDG.

You can withdraw your consent with effect for the future by using the cookie consent tool (“Edit cookie settings”) at the bottom of the website (footer) and changing your settings.

We have no knowledge of YouTube’s storage periods and no influence on them.

Further information on the purpose and scope of processing by YouTube can be found in the privacy policy at https://www.google.de/intl/de/policies/privacy.


LinkedIn

Our website uses the LinkedIn Insight Tag service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). This enables us to collect and evaluate statistical data about your visit and the use of our website. This allows us to show you interest-based and relevant offers, recommendations and advertising on LinkedIn (retargeting). Furthermore, the effectiveness of advertisements is analyzed (conversion tracking). For this purpose, LinkedIn uses cookies, pixels and JavaScript.

Further information on LinkedIn cookies is available at: https://www.linkedin.com/legal/l/cookie-table. 

If you are logged in to LinkedIn while visiting our website, LinkedIn may link the collected information with your member account and use it to display targeted advertising on LinkedIn. You can view your privacy settings at LinkedIn here: https://www.linkedin.com/psettings/enhanced-advertising.

The legal basis for this data processing is your consent pursuant to Art. 6(1) lit. a GDPR and Section 25(1) TDDDG.

You can revoke consent once given with effect for the future by using the cookie consent tool (“Edit cookie settings”) at the bottom of the website (footer) and changing your settings.

For further information, please refer to LinkedIn’s privacy policy: https://de.linkedin.com/legal/privacy-policy.

Social Media

We maintain various online presences on social networks in order, among other things, to communicate with interested parties and to provide information about our products and services.
 

LinkedIn
Our LinkedIn presences are provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. 

When a LinkedIn presence is accessed, so-called LinkedIn Page Analytics data are collected. These are data that enable us to view statistical evaluations of the use of the LinkedIn presence.

When these Page Analytics data are collected, personal data are also processed. This processing is jointly controlled by LinkedIn and us. The agreement concluded between LinkedIn and us can be found here. LinkedIn’s underlying user agreement can be found here: https://de.linkedin.com/legal/user-agreement.

Further information on Page Analytics can be found here: https://www.linkedin.com/help/linkedin/answer/a547077

Please note that the Page Analytics function can also collect personal data of persons who do not have a LinkedIn profile.

We use the Page Analytics data to optimize our LinkedIn presence and to understand how it is used. Insofar as personal data are processed by us for this purpose, the lawfulness of this processing is based on our legitimate interest pursuant to Art. 6(1) sentence 1 lit. f GDPR.

If you are logged in with your personal LinkedIn profile, you can interact with us on our LinkedIn presence (e.g., like or comment on a post). The associated data (e.g., your username and profile picture) will be processed by us. We use these data to optimize the content offered and its presentation and to tailor it to user interests. This data processing is carried out pursuant to Art. 6(1) sentence 1 lit. f GDPR. The legitimate interest follows from the purpose of optimizing our LinkedIn presence and the content published there.

During your visit to the LinkedIn page, LinkedIn collects various personal data. These include, among others, the IP address as well as further information stored in the form of cookies on your device. LinkedIn uses this information to compile statistics on the use of the LinkedIn presence.

The data collected about you in this context are processed by LinkedIn and may be transferred to countries outside the European Union. Further information on LinkedIn’s data processing can be found in LinkedIn’s privacy policy at the following link: https://www.linkedin.com/legal/privacy-policy

We have no influence over the data transfer by LinkedIn. We ourselves do not pass on any data that we receive via our LinkedIn presence. LinkedIn transfers data to LinkedIn Corporation, 1000 W Maude Ave, Sunnyvale, CA, US on the basis of the LinkedIn Data Processing Agreement: https://www.linkedin.com/legal/l/dpa

Applicants

Description and scope of data processing

In the context of your application, personal data are processed by us. We process your personal data insofar as this is necessary for carrying out the application process. This includes, in particular, the following data: 

• Name, address, and contact details
• Data on school and professional education and career history, e.g., certificates, qualifications, previous activities, CV, cover letter
• other information provided voluntarily as part of the application, e.g., application photo, information on severe disability

In some cases, we also receive your personal data from service providers for applicant placement.

Purposes and legal bases for processing

Personal data of applicants may be processed for the purposes of the application procedure if this is necessary for the decision on establishing an employment relationship, i.e., for concluding an employment contract with us. The legal basis for processing your data in this case is Art. 6(1) sentence 1 lit. b GDPR. This includes, in particular, communication with you and conducting job interviews. The necessity and scope of data collection also depend, among other things, on the position to be filled. If your intended position is associated with particularly confidential tasks or increased personal and/or financial responsibility, more extensive data collection may be required. In individual cases, we may therefore ask applicants to provide a criminal record certificate. 

If you have given your consent to be included in the applicant pool, we will store your data beyond the current application process for consideration in future application procedures. The legal basis for processing your data in this case is Art. 6(1) sentence 1 lit. a) GDPR.

In certain cases, we also process your data to safeguard a legitimate interest of ours or of third parties pursuant to Art. 6(1) sentence 1 lit. f) GDPR: In the event of legal disputes, we have a legitimate interest in processing the data for evidence purposes to defend legal claims in proceedings under the German General Equal Treatment Act (AGG). 

The legal basis for processing your data is also compliance with a legal obligation pursuant to Art. 6(1) sentence 1 lit. c) GDPR, as we are legally obliged to carry out sanctions list screenings including EU sanctions lists and sanctions lists of countries with which Verbio has business relations.
 

Disclosure of data

Your data are mainly processed by our HR department and the responsible manager filling your position. However, other internal and external bodies, such as the executive board and IT service providers, may also be involved in processing your data.
 

Storage period

We store your personal data for as long as necessary to decide on your application. 

If an employment relationship is not established between you and us, your data will be deleted within 6 months after the end of the application process. If you have given us your consent for further processing of your data, we will store your data until you withdraw your consent.

If an employment relationship is established between you and us, we will store your data permanently and add your application documents to your personnel file.
 

Obligation to provide data

The provision of your personal data is neither legally nor contractually required, nor are you obliged to provide the personal data. However, providing your data is necessary for conducting the application process. This means that if you do not provide us with personal data in an application, we will not be able to conduct the application process.

Business partners

Description and scope of data processing
When you contact us, request a quotation, or conclude a contract with us, we process your personal data. We also process your personal data, among other things, to fulfill legal obligations, to protect a legitimate interest, or on the basis of your consent. 

Depending on the legal basis and the contractual relationship with us, this concerns in particular the following personal data:

• First name, last name, job title, company (employer)
• Business address and business contact data (telephone, e-mail address)

We process personal data that we receive from you in the course of our business relationship. Where publicly accessible, personal data also originate from public sources, such as debtor registers, land registers, commercial and association registers, the press, and the internet. We also use personal data from our affiliated companies.
 

Legal basis and purposes of processing
The processing of personal data is necessary for contract initiation and execution (establishment, performance, and termination) and the associated communication. The legal basis for data processing in this respect is Art. 6(1) sentence 1 lit. b GDPR. The processing of your personal data also serves to fulfill a variety of legal obligations, such as sanctions list screening or statutory retention obligations. The legal basis for data processing in this respect is Art. 6(1) sentence 1 lit. c GDPR. In addition, we process your personal data to safeguard our legitimate interests pursuant to Art. 6(1) sentence 1 lit. f GDPR, for example when we verify the identity of new and existing customers or process data for evidence purposes in the event of legal disputes.
 

Disclosure of data
Depending on responsibilities, your data may be processed internally by various departments and their employees. These are usually employees from the Legal, Finance, Compliance, IT, Executive Board, Engineering, Trading, Logistics, Quality Management, Team Assistance, etc. departments. In part, external bodies such as IT or disposal service providers or lawyers and tax advisors are also involved in processing your data.
 

Storage period
Personal data are deleted when the business relationship has ended, all mutual claims have been fulfilled and there are no other statutory retention obligations or legal grounds for storage. These may include, among others, retention obligations under the German Commercial Code and the German Fiscal Code. As a rule, the deletion period is up to 11 years, depending on the start of the period.
 

Obligation to provide data
In the context of business relationships, you must provide those personal data that are required for contract initiation, execution, and follow-up, or that are required for processing in the overriding interest, or that we are legally obliged to collect. Provision is therefore mandatory for this relationship.

Data transfers to third parties
As a rule, your data are not transferred to third parties unless we are legally obliged to do so. Where external service providers come into contact with your personal data, we have ensured through legal, technical and organizational measures and through regular checks that they comply with data protection regulations. In addition, these service providers may only use your data in accordance with our instructions.

We strive to process your data within the EU/EEA. However, it may happen that we use service providers who process data outside the EU/EEA. In these cases, we ensure that, before your personal data are transferred, an adequate level of data protection comparable to the standards within the EU is established at the recipient. This can be achieved, for example, via EU standard contractual clauses or binding corporate rules or special agreements whose rules the company can submit to.
 

Your rights

You have the right to assert your rights against us. You can contact our Data Protection Officer at any time at datenschutz(at)verbio.de.
 

Right of access
You have the right to obtain from us at any time information about the personal data concerning you that we process, to the extent and under the conditions of Art. 15 GDPR and Section 34 BDSG.
 

Right to rectification of inaccurate data
You have the right to request the immediate rectification of inaccurate personal data concerning you (Art. 16 GDPR).
 

Right to erasure
You have the right, under the conditions described in Art. 17 GDPR and Section 35 BDSG, to request the erasure of personal data concerning you. These conditions provide, in particular, for a right to erasure where the personal data are no longer necessary for the purposes for which they were collected or otherwise processed, as well as in cases of unlawful processing, the existence of an objection, or a legal obligation to erase under Union law or the law of the Member State to which we are subject.
 

Right to restriction of processing
You have the right to demand the restriction of processing from us in accordance with Art. 18 GDPR.
 

Right to data portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with Art. 20 GDPR.

Right to withdraw consent
Where processing is based on your consent, you have the right to withdraw your consent with effect for the future. 

Right to lodge a complaint
You also have the right to lodge a complaint with a supervisory authority, Art. 77 GDPR.

Data processing when exercising your rights
Finally, we would like to point out that we process the personal data you transmit when exercising your rights for the purpose of implementing these rights and to be able to provide proof thereof, Art. 6(1) lit. c GDPR

Links to websites of other providers
Our websites may contain links to websites of other providers to which this privacy policy does not apply. If the use of the websites of other providers involves the collection, processing or use of personal data, please observe the respective providers’ privacy policies.

Changes to this privacy policy
This privacy policy is the updated version from August 2025.

We reserve the right to amend this privacy policy at any time with effect for the future, in particular with regard to the further development of our website(s) or the introduction of new technologies, in compliance with the applicable data protection regulations.