Thank you for your interest in our website.

The protection of your privacy and your data is very important to us. We would therefore like to inform you below about the type, scope and purpose of the processing of personal data within our website and the functions and content associated with it.

Definitions of the terms used (e.g. "personal data", "processing", "consent" or "controller") can be found in Art. 4 of the General Data Protection Regulation (GDPR).

Controller within the meaning of the General Data Protection Regulation

Data processing on this website is carried out by the website operator. The responsible body for this is

Teamwerk TWG

Elbinger Straße 4
60487 Frankfurt am Main
Tel. 069 / 98 97 287 50

E-mail: info(at)teamwerk-group.com

Domain: www.teamwerk-group.com

Registered office of the company:

Wisbyer Strasse 16-17

10439 Berlin

Tel. 030 / 39 60 05 10

Fax 030 / 39 60 05 25

E-mail: info(at)teamwerk-group.de

Management: Dr. Georgios Giannakopoulos

Data Protection Officer

Teamwerk TWG

E-mail: datenschutz(at)teamwerk-group.com

1. Use of our website

We only process your personal data insofar as this is necessary to provide a functional website and our content and services and the processing of the data is permitted by law. Any further processing of your personal data will only take place with your consent.

Personal data is all information that relates to a specific identified or at least identifiable person - for example your name, email address and telephone number (Art. 4 para. 1 no. 1 GDPR).

You can also visit this website without providing any personal data. However, in order to improve our online services, we store your access data (see point I.1.) on our website in anonymized form, i.e. without any reference to your person. This access data includes, for example, files requested by you or the name of your Internet provider. By anonymizing the data, it is not possible to draw conclusions about your person.

1. Access data and log files

We collect data about access to our website and store it on the server.

This includes the following data:

• visited website
• Time of access
• Amount of data sent
• Source/reference from which you reached our site
• Browser used
• Operating system used
• IP address used

The collection and temporary storage of the IP address is necessary to enable the delivery of our website to your end device. For this purpose, your IP address must be stored for the duration of your visit to our website.

The aforementioned data is also stored in log files on our servers. This data is not stored together with your other personal data.

The storage of the aforementioned data in log files serves to ensure the functionality and optimization of our website and to guarantee the security of our information technology systems.

Our legitimate interest in data processing lies in the aforementioned purposes. The legal basis for the collection and temporary storage of the aforementioned data and log files is Art. 6 para. 1 sentence 1 lit. f GDPR. The collection of the aforementioned data for the provision of our website and the storage of this data in log files is absolutely necessary for the operation of our website. There is no possibility of objection.

2. Cookies

In addition to the aforementioned data, various types of cookies are used when you use our website and are stored on your end devices depending on your selection. You can find more information in our cookie guidelines.

3. Use of the contact form

There is a contact form on our website that can be used to contact us electronically. If you use this option, the data entered in the input mask will be transmitted to us and stored (surname, first name, e-mail address). The information collected via mandatory fields is required in order to process the request. You can also provide additional information voluntarily. This data will not be passed on without your consent.

The data will be used exclusively for the purpose of processing your request.

The legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR (implementation of pre-contractual measures) and Art. 6 para. 1 lit. a GDPR (consent).

Data transmitted via the form will remain with us until you ask us to delete it, revoke your consent to storage or there is no longer any need to store the data. Mandatory statutory provisions - in particular retention periods - remain unaffected.

1. Contact us

It is possible to contact us via the e-mail address provided on our website. In this case, the user's personal data transmitted with the e-mail will be stored (e-mail address, surname, first name).

If you contact us by telephone, the following data will be collected: Name, telephone number, time of your call and the content of your request.

If you contact us by post, we may in particular process your address data (e.g. surname, first name, street, place of residence, zip code), the date and time of receipt of the mail and the data resulting from your letter itself.

If you contact us by fax, in particular the fax number or the sender identification and the data resulting from the fax will be processed.

The legal basis for the processing of the data is Art. 6 para. 1 lit. f GDPR. If the contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

The processing of the personal data from the request serves us solely to process the request, which is also the necessary legitimate interest in the processing of the data.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case when the respective conversation has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. You can object to the collection of your personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

• Application procedure

In particular, we process the following personal data concerning you in order to carry out the application process:

• Your so-called master data (surname, first name, any name affixes and date of birth) and your contact details (private address, telephone number and mobile phone number, e-mail address)

• Skill data (data about your skills and knowledge in relation to the requirements profile of the advertised position)

• Work permit/residence permit, if applicable

• Further data from your application documents (such as assessments, professional experience, salary expectations)

As a rule, your personal data is collected directly from you as part of the recruitment process, in particular from your application documents and during the job interview. In the case of job placement, we also receive corresponding data from third parties.

Data processing is carried out for the purpose of deciding on the establishment of an employment relationship on the legal basis of Art. 6 para. 1 letter b GDPR in conjunction with. § Section 26 (1) BDSG.

Within our company, only those persons and departments (such as personnel administration staff, management, specialist managers) who are involved in the decision to hire you will receive your personal data. Data will not be passed on to third parties.

In the event of rejection, your application documents will be deleted no later than six months after completion of the application process. This does not apply if statutory provisions prevent deletion or if further storage is necessary for the purpose of providing evidence. Your data will also be stored for longer if you have given us your consent to do so (e.g. for inclusion in an applicant pool).

In order to be able to consider an application, we require the personal data that is necessary for the decision on the establishment of the employment relationship. It is not possible to carry out the application process without this data.

1. Data transfers to third parties

Your data will not be transferred to third parties unless you have given us your consent or we are legally obliged to do so. If external service providers come into contact with your personal data, we have taken legal, technical and organizational measures and carried out regular checks to ensure that they comply with the provisions of the data protection laws. In addition, these service providers may only use your data in accordance with our instructions.

1. What rights do you have as a data subject affected by data processing?

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller

You have the right to request free information about which personal data has been stored about you. You also have the right to rectification of incorrect data and to restriction of processing or erasure of your personal data. If applicable, you can also assert your right to data portability. If you believe that your data has been processed unlawfully, you can lodge a complaint with the competent supervisory authority.

Deletion of data

Unless your request conflicts with a legal obligation to retain data (e.g. data retention), you have the right to have your data deleted. Data stored by us will be deleted if it is no longer required for its intended purpose and there are no statutory retention periods. If deletion cannot be carried out because the data is required for permissible legal purposes, data processing will be restricted. In this case, the data will be blocked and not processed for other purposes.

Right of objection

You can exercise your right to object and object to the processing of your personal data at any time. If you would like a correction, blocking, deletion or information about the personal data stored about you, or if you have questions regarding the collection, processing or use of your personal data, or if you would like to revoke your consent, please contact the following e-mail address: datenschutz(at)teamwerk-group.com

1. Privacy policy social media

We are delighted that you have visited one of our social media pages and are interested in our company. Teamwerk TWG maintains social media pages on Facebook, Instagram, LinkedIn, and TikTok.

1. Responsible person / data protection officer

If you transmit personal data to us via our website and we alone decide on the purposes and means of processing, Teamwerk TWG is solely responsible. The contact details of our company and our data protection officer are listed above.

Insofar as personal data is processed in connection with our social media pages and the respective network operators alone decide on the purposes and means of processing, they are the sole controllers in each case.

Insofar as personal data is processed by the network operators and us in connection with our social media pages or with their content and we contribute to the decision on the purposes and means of this processing, the respective network operators and we are jointly responsible for the processing within the meaning of Art. 26 para. 1 sentence 1 GDPR.

We assume that the scope of joint responsibility extends exclusively to the processing of so-called "insights data."

"Insights data" refers to personal data that is collected and processed in connection with a visit to or interaction with a page and its content, insofar as this is

• under the influence and control of the person responsible for the site
• for the purpose of creating and evaluating "page insights"

takes place.

The contact details of the network operators are listed below.

• Facebook: Meta Platforms Ireland Ltd, Merrion Road, Dublin 4, D04 X2K5, Ireland, hereinafter: Facebook
• Instagram: Meta Platforms Ireland Ltd, Merrion Road, Dublin 4, D04 X2K5, Ireland, hereinafter referred to as: Instagram
• LinkedIn: LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland, hereinafter referred to as: LinkedIn
• TikTok: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, hereinafter referred to as: TikTok

You can contact the data protection officer of Facebook and Instagram here:

https://www.facebook.com/help/contact/540977946302970

The contact details of LinkedIn's data protection officer can be found here:

https://www.linkedin.com/help/linkedin/ask/TSO-DPO

You can contact TikTok's data protection officer via the online contact form provided by TikTok at https://www.tiktok.com/legal/report/DPO .

As joint controllers of these pages, we have entered into agreements with the network operators which, among other things, regulate the conditions for the use of pages and similar appearances. The following agreements apply in each case:

Facebook: The company has been called Meta since 2021. Meta's Terms of Use, the other terms and conditions and policies listed at the end and the Joint Responsibility Agreement apply:

https://www.facebook.com/legal/terms

https://www.facebook.com/legal/terms/page_controller_addendum

Instagram: As Instagram is a Meta offering, the Meta policies and agreements described above also apply.

LinkedIn: The terms of use and the agreement on joint responsibility can be found under the following links:

https://de.linkedin.com/legal/l/linkedin-pages-terms

https://legal.linkedin.com/pages-joint-controller-addendum

TikTok: You can view the terms of use and the joint responsibility agreement here:

https://www.tiktok.com/legal/page/eea/terms-of-service/de

https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms

1. Use of insights, analyses and cookies

In connection with the operation of our social media pages, we use the analysis functions provided there to obtain statistical evaluations of the users of our social media channels.

For this purpose, cookies and similar technologies such as pixels are used by the network operators when you visit our pages, and a unique user code is created in each case. This user code can be linked to the data of users who are registered with the platform operators.

The information stored about the user code is processed by the platform operators, in particular when the user visits these services. Other entities, such as partners or even third parties, may also use cookies within these services in order to provide services to the companies advertising on the platforms.

Facebook: In connection with the operation of our Facebook page, we use Meta's Page Insights function to obtain statistical evaluations of the users of our Facebook page. Meta provides information on Page Insights and the Facebook pages here:

https://www.facebook.com/privacy/policy/

https://www.facebook.com/legal/terms/information_about_page_insights_data

You can also find more information on the use of cookies by Meta (also in the context of the use of Instagram) in their cookie policy:

https://www.facebook.com/privacy/policies/cookies/

Instagram: In connection with the operation of our Instagram profile, we use the Instagram Insights function to obtain statistical evaluations of the users of our posts. Information on Instagram Insights can be found in Instagram's privacy policy.

https://privacycenter.latest.instagram.com/policy/

LinkedIn: In connection with the operation of our LinkedIn profile, we use LinkedIn Page Analytics. This provides us with information about the use of our content. You can find more information on data protection on the LinkedIn platform in LinkedIn's privacy policy.

https://de.linkedin.com/legal/privacy-policy

TikTok: Information on data protection and the use of cookies by TikTok can be found in TikTok's privacy policy and cookie policy.

https://www.tiktok.com/legal/page/eea/privacy-policy/de

https://www.tiktok.com/legal/page/global/tiktok-website-cookies-policy/de

1. Purposes of the processing

The purpose of processing the aforementioned "insights data" is to compile page statistics ("page insights"). We may evaluate these page statistics in order to understand how visitors interact with our pages, thereby improving the information we provide to visitors to our social media pages. We do not use page statistics to draw conclusions about individual persons.

We do not obtain any direct knowledge of the visitor's identity. If visitors use social media services on multiple devices, the data can also be recorded and analyzed across devices and platforms if the visitors are registered and logged into their own profile.

The visitor statistics compiled are transmitted to us exclusively in anonymized form. We have no access to the underlying data.

We also use our social media pages to communicate with our interested parties and users and to inform them about our services. In this context, we may receive further information, e.g. due to user comments, private messages or because you follow us or share our content. The processing takes place exclusively for the purpose of communication and interaction with you.

You may respond to a specific job advertisement via social media or send us your unsolicited application via social media. We will then process your personal data as part of our application procedure and refer you to our data protection information for application procedures.

1. Legal basis and legitimate interests

We operate our social media pages in order to present ourselves to and communicate with the users of these platforms and other interested persons who visit our social media pages. The processing of users' personal data is based on our legitimate interests in an optimized company presentation (Art. 6 para. 1 sentence 1 lit. f GDPR). In the case of an (unsolicited) application, please refer to our data protection information for application procedures.

1. Forwarding of data

Facebook, Instagram, LinkedIn and TikTok may also process some of the information collected outside the European Union in the USA.

Insofar as a decision of the European Commission on the existence of an adequate level of protection (see Art. 45 para. 3 GDPR) exists with regard to the third country, no additional measures are required for the data transfer. If data is transferred to recipients based in the USA, this is done on the basis of the Transatlantic Data Privacy Framework (DPF) of 10.07.2023, provided the recipient has appropriate certification. A list of currently certified companies is available here:

https://www.dataprivacyframework.gov/s/participant-search

In other cases and when data is transferred to other, so-called non-secure third countries, data is only transferred if the requirements of Art. 46 et seq. GDPR are met.

The social media platforms used here have their headquarters in the USA and are certified accordingly. An adequate level of protection comparable to the GDPR can therefore be assumed.

1. Nature of joint responsibility / assertion of data subject rights

With the agreement that we have with Meta for our Facebook and Instagram presences, the operators recognize the joint responsibility under data protection law with regard to so-called Insights data and assume essential data protection obligations to inform data subjects, to ensure data security and to report data protection violations. The agreement with Facebook also stipulates that Facebook is the primary point of contact for the exercise of data subject rights (Art. 15 - 22 GDPR). As the provider of the social network, Facebook alone has direct access to the necessary information and can also immediately take any necessary measures and provide information. Should our support nevertheless be required, we can be contacted at any time.

The agreement that we have concluded with LinkedIn stipulates that LinkedIn will inform us as soon as a data subject exercises their data subject rights (Art. 15 - 22 GDPR). LinkedIn will provide support in responding to requests for information. You can assert your data subject rights against us and LinkedIn.

In the case of joint processing with TikTok, TikTok is responsible for processing your data subject rights.

If you contact us in a case of joint responsibility, we will forward your request to TikTok.

1. Possibilities of objection

In particular, you have the following options to object:

Facebook and Instagram: Users of Facebook and Instagram can influence the extent to which their user behavior may be recorded when they visit our Facebook or Instagram page under the settings for advertising preferences. The Facebook settings or the form provided via Facebook for the right to object offer further options for objecting. The form can also be used to make settings for Instagram.

LinkedIn: You can object to the processing of data by LinkedIn here:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Further settings can be made using the objection form.

https://www.linkedin.com/help/linkedin/ask/TS-DPRO

If the processing is carried out by TikTok, you can contact TikTok directly. You can contact TikTok using the following form:

https://www.tiktok.com/legal/report/privacy

• Changes to the privacy policy

We reserve the right to amend this privacy policy at any time in compliance with the applicable data protection regulations. The current status is November 2025.