Last updated 01.01.2023

1. General

Thank you for visiting our website and for your interest in IfDuS GmbH and our services. As the operator of this site, we take the protection of your data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration. Personal data will only be processed by us as necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

When you use this website, various personal data are collected. Personal data is data with which you can be personally identified. This privacy policy explains which data we collect or process and how, and what we use it for. As the controller, the IfDuS GmbH has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, we must point out that data transmission via the Internet (e.g. when communicating by e-mail) can involve security vulnerabilities. For this reason, every data subject is free to transmit personal data to us by alternative means, for example by telephone.

This data protection declaration applies to the internet offer of IfDuS GmbH (hereinafter referred to as "IfDuS" or "we"). It does not apply to other internet offers to which we merely refer via a link.

Information of the data controller

The data controller within the meaning of the applicable data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

IfDuS GmbH
Landsberger Str. 396
81241 Munich

Phone: +49 (0) 89 85633460
General e-mail: info[at]
Data protection e-mail: lars.beitlich[at]

Your data subject rights

To exercise your rights below, please contact us using the contact details provided. You have the right to:

  • Information regarding your data stored by us and its processing (Art. 15 GDPR),
  • Correction of inaccurate personal data (Art. 16 GDPR),
  • Deletion of your data stored by us (Art. 17 GDPR),
  • Restriction of data processing if we are not yet allowed to delete your data due to legal obligations or if a more detailed examination must be carried out beforehand (Art. 18 GDPR),
  • Object to the processing of your data pursuant to Art. 21 GDPR and
  • Data portability, provided that you have consented to the data processing or have concluded a contract with us (Art. 20 GDPR).

As a responsible company, we do not use automatic decision-making or profiling within the meaning of Art. 13 (2) lit. f) GDPR in conjunction with Art. 22 GDPR.

If you have given us consent, you can revoke this at any time with effect for the future. An informal communication by e-mail to us is sufficient for this purpose. However, the legality of the data processing carried out until the revocation remains unaffected by the revocation.

In the event of a violation of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the suspected breach. The right of appeal is without prejudice to other administrative or judicial remedies.

An overview of the data protection supervisory authorities of the non-public sector in Germany can be found here. The competent supervisory authority for Bavaria is the:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Postal address: Postfach 1349, 91504 Ansbach
Tel.: 0981/180093-0

2. Collection of general information when visiting our website

Nature and purpose of processing

As soon as you access our website, i.e. even if you do not register or otherwise transmit information to us, general information is automatically collected. This information ("server log files") includes, for example, the type and version of your browser, the operating system used, the domain name of your Internet service provider, your IP address, time of access, referrer URLs or similar.

These data are processed in particular for the following purposes:

  • Ensuring a secure and stable connection to the website,
  • Ensuring the smooth use of our website,
  • Evaluation of system stability and security, and
  • other administrative purposes

Please note that we do not use your data to draw conclusions about your person. Information of this kind is, if necessary, only anonymised by us and then statistically evaluated in order to optimize our internet presence and the technology behind it.

Legal basis

This processing is carried out pursuant to Art. 6 para. 1 lit. f) GDPR on the basis of our legitimate interest in improving the functionality and stability of our website.


The only recipients of the data in this regard are technical service providers who act as processors on behalf of us for the operation and maintenance of our website.

Storage period

Your data will be deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data that only serves the purpose of providing the website, when the respective session has ended.


The provision of the aforementioned personal data is neither legally nor contractually required. However, without an IP address, the functionality of our website cannot be guaranteed. In addition, individual services or functions may not be available or may be restricted. For this reason, an objection is excluded.

The data transmitted in the context of contacting us are transmitted voluntarily by you, but we absolutely need them in order to be able to process your request.

3. Contact


Based on statutory provisions, the website of the IfDuS GmbH contains data that enables quick electronic contact to our company, as well as direct communication with us, which also includes a general e-mail address. If a data subject contacts the controller by e-mail or via a contact form, the personal data transmitted by the data subject (e.g. name, contact details, date and time, IP address, if applicable, and content) will be stored automatically.

Legal basis

The processing of the transmitted data is based on a legitimate interest (Art. 6 para. 1 lit. f) GDPR) in being able to process your request appropriately.

If you contact us to request a quote, the data entered in the contact form will be processed to carry out pre-contractual measures (Art. 6 para. 1 lit. b) GDPR).


Recipients of the data are potential processors on behalf.

Storage period

Personal data relating to an inquiry will be deleted no later than 6 months after processing or completion of the inquiry.

If a contractual relationship arises, we are subject to the statutory retention periods of the German Commercial Code (HGB) and tax regulations and delete your data after these periods have expired.


The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, e-mail address and the reason for the request. If you wish to conclude a contract with us, however, you are obliged to provide us with certain personal data, as the conclusion would otherwise be impossible.

4. Application


You have the option of applying to us via our website. In this case, we collect the data you send us for the purpose of applicant management, such as e.g.

  • Name, title and academic degrees
  • Address and contact details
  • Description of work experience, skills and education
  • Application documents and testimonials.

Legal basis

Your data will be processed for contract fulfillment or fulfillment of pre-contractual obligations pursuant to Art. 6 para. 1 lit. b) GDPR in conjunction with. § 26 para. 1 BDSG (German Federal Data Protection Act).

Other legitimate interest (Art. 6 para. 1 lit. f) GDPR) in this context is, for example, the retention due to the obligation to provide evidence in proceedings under the General Equal Treatment Act (AGG).


Recipients of your data are potential processors on behalf of us who comply with the requirements of Art. 28 DS-GVO.

Storage period

After collection, your data will be stored for as long as is necessary for processing the application, taking into account the statutory retention periods. Data of rejected applicants will be deleted 6 months after rejection at the latest.

If the data controller concludes an employment contract with an applicant, the transmitted data may be stored for a longer period of time for the purpose of processing the employment relationship in compliance with the statutory provisions.

5. Links

Our website may contain links to external third-party websites over whose content we have no influence. We cannot accept any liability for this external content and expressly distance ourselves from the linked pages. The respective provider or operator of the pages is always responsible for the content of the linked pages. The linked pages were checked for possible legal violations at the time of linking. Illegal contents were not recognizable at the time of linking. Should we become aware of any legal violations, we will remove the corresponding link immediately.

6. SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods via HTTPS, e.g. SSL.

7. Changes to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with the current data protection requirements or in order to implement changes to our services in the data protection declaration. The current data protection declaration applies to your visit.

8. Questions about data protection

If you have further questions about data protection, please write us an e-mail or contact the person responsible for data protection in our organization directly (see section 1 E-mail Data Protection).