Our privacy policy

II. Scope and purpose of data Processing

1. Access to our website

When you visit our website, personal data relating to your access to our web server is automatically collected and processed (so-called server log files). The access data includes the name of the website accessed, the date and time of access, the browser type and version, and the anonymized IP address. We store the log file information for security reasons (e.g., to detect attacks on our website or to investigate misuse or fraud) and for error diagnosis.

The legal basis for processing is our legitimate interest within the meaning of Art. 6 (1) lit. f. DSGVO and lies in ensuring IT security and guaranteeing the provision of our website.

The data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected for the provision of the website, this is usually within 7 days. Data that must be retained for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

Recipients of personal data are external service providers for technical support within the scope of order processing, as well as internal departments within the scope of providing our website.

2. Collection and processing of personal data

If you have any questions or inquiries about our group of companies, our services, and our offerings, it is necessary to process your personal data. The legal basis for the processing of data transmitted by email or telephone is Art. 6 (1) lit. f DSGVO (legitimate interest in responding to your inquiry). If the purpose of the contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) lit. b DSGVO. If there is no legal basis for the processing of personal data, we will obtain your consent for this. This will be evident at the relevant points. The legal basis for processing operations for which we obtain your consent for processing purposes is Art. 6 (1) lit. a DSGVO. We store and use the personal data you provide, such as your name, address, email address, and telephone number, for the purpose of performing our services and communicating with you individually in accordance with the General Data Protection Regulation (DSGVO) and the Federal Data Protection Act (BDSG).

The legal basis for processing data transmitted in an email or via one of our contact forms is Art. 6 (1) (f) DSGVO (legitimate interest in responding to your inquiry). If the purpose of the email contact is to conclude a contract, the additional legal basis for processing is Art. 6 (1) (b) DSGVO.

When you contact us, we may transfer personal data internally to other departments within our NEA GROUP of companies for processing or grant them access to this data. If this transfer is for administrative purposes, the transfer of data is based on our legitimate business and economic interests (Art. 6 (1) (f) DSGVO).

3. Cookies

We use cookies on our website to make our website more user-friendly, effective, and secure, e.g., when it comes to speeding up navigation on our website. We also use cookies to analyze traffic to our website.

According to the law, we are allowed to store cookies on your device if they are absolutely necessary for the operation of our website. For all other types of cookies, we require your consent, which you can give us via our cookie banner when you visit our website.

We use different types of cookies. Some cookies are placed by third parties that appear on our pages. You can change or revoke your consent at any time via the cookie banner on our website.

The use of cookies also depends on the settings of the web browser you are using (e.g., Microsoft Edge, Google Chrome, Apple Safari, Mozilla Firefox). Most web browsers are preset to automatically accept certain types of cookies; however, you can usually change this setting. You can delete existing cookies at any time. Consent to, rejection of, or deletion of cookies is linked to the device used and also to the web browser used in each case. If you use multiple devices or web browsers, you can make different decisions or settings for each one.

4. Use of website plugins / third-party providers / analysis and tracking technologies

4.1. Consent management / consent via our “Cookiebot”
We use the cookie consent technology from “Cookiebot” to obtain and document your consent to the storage of cookies that require consent. This technology is provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter “Cookiebot”).
When you visit our website, a “cookie banner” is displayed and a connection to the ‘Cookiebot’ servers is established to obtain your consent and other declarations regarding the use of cookies. “Cookiebot” then stores a cookie in the browser of your device to be able to assign your consent or revocation.
Data processing is carried out to fulfill our legal obligation based on Art. 6 (1) lit. c DSGVO in conjunction with § 25 TDDDG.

4.2. Matomo
We use the web analytics tool “Matomo” for statistical analysis of visitor traffic to our website. This tool creates usage profiles based on pseudonyms.
We also use the Heatmap & Session Recording modules. The Matomo heatmap service shows us the areas of our website where the mouse is moved most frequently or which are clicked on most often. The session recording service records individual user sessions. We can play back recorded sessions and thus analyze the use of our website. Data entered in forms is not recorded and is not visible at any time.
Data processing is based on your consent in accordance with Section 25 (1) TDDDG, Art. 6 (1) lit. a DSGVO, provided you have given your consent via our banner. You can revoke your consent at any time by adjusting the settings via our cookie banner.
Further information on Matomo's terms of use and data protection regulations can be found at: matomo.org/privacy/
“Matomo” is an open source project. Information on data protection from the third-party provider can be found at matomo.org/privacy/.

4.3. Verwendung von Leadinfo
Wir nutzen den Lead-Generation-Service von Leadinfo B.V., Crooswijksesingel 50, Rotterdam, Niederlande. Dieser erkennt Besuche von Unternehmen auf unserer Website anhand von IP-Adressen und zeigt uns hierzu öffentlich verfügbare Informationen, wie z.B. Firmennamen oder Adressen. Damit werden vornehmlich Daten im B2B-Bereich erhoben und an uns übermittelt. Dar-über hinaus setzt Leadinfo zwei First-Party-Cookies zur Auswertung des Nutzerverhaltens auf un-serer Website und verarbeitet Domains aus Formulareingaben (z.B. „leadinfo.com“), um IP-Adressen mit Unternehmen zu korrelieren und die Services zu verbessern. Die Nutzung erfolgt aufgrund unserer berechtigten Interessen gemäß Art. 6 Abs. 1 lit. f DSGVO (Analyse, Optimierung und wirtschaftlichem Betrieb unserer Angebote). Die konkrete Speicherdauer der verarbeiteten Daten ist nicht durch uns beeinflussbar, sondern wird von LeadInfo B.V. bestimmt.
Unter www.leadinfo.com/de/rechtliches/opt-out/ haben Sie eine Opt-out Möglichkeit. Im Falle eines Opt-outs werden Ihre Daten von Leadinfo nicht mehr erfasst. Informationen zum Da-tenschutz bei Leadinfo erhalten Sie in den Datenschutzhinweisen des Anbieters unter www.leadinfo.com/de/rechtliches/datenschutz/

4.4. YouTube
We have implemented videos from our YouTube channel on our website, which are stored by the service provider “YouTube” (a service provided by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”)) and integrated into our website. We use the “extended data protection” option provided by “Google,” which means that your consent to our marketing cookies is required to play the videos, as “YouTube” stores cookies (statistics/tracking cookies) on your device. The legal basis is Art. 6 (1) lit. a DSGVO and § 25 (1) TDDDG.
If you have consented to the relevant marketing cookies and you visit a page that has an embedded YouTube video, a connection to the Google servers in the USA is established and the content is displayed on the website by sending a message to your device's browser.
According to Google, in “extended data protection mode,” your data—in particular, which of our websites you have visited and device-specific information, including your IP address—will only be transmitted to the YouTube server in the USA when you watch the video. By clicking on the video, you consent to this transmission. If you are logged in to Google at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your Google account before visiting our website. In some cases, information is transmitted to the parent company Google Inc. based in the USA, to other Google companies and to external partners of Google, which may be located outside the European Union.
We would like to point out that the EU Commission adopted an adequacy decision (Art. 45 DSGVO) for the USA on July 10, 2023. Google LLC is certified under the new EU-US Privacy Framework. Since Google servers are distributed worldwide and transfer to other third countries (e.g., Singapore) cannot be completely ruled out, Google uses the standard contractual clauses approved by the European Commission and relies on the adequacy decisions issued by the European Commission with regard to certain countries.
Further information on data protection in connection with YouTube and other Google services can be found at policies.google.com/privacy .

4.5. Vimeo
We have embedded videos on our website that are stored on the video portal “Vimeo” of the company Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, New York 10001, USA. The implementation is based on Art. 6 (1) (f) DSGVO, whereby our interest lies in the smooth integration of the videos and the appealing design of our website. If consent has been requested via our cookie banner, processing is carried out exclusively on the basis of Art. 6 (1) (a) DSGVO; consent can be revoked at any time with effect for the future.
In doing so, your personal data (IP address, browser type, device information) may be transferred to the provider's servers in the USA. The provider is certified under the EU-U.S. Data Privacy Framework, ensuring an adequate level of data protection within the meaning of Art. 45 DSGVO. We have embedded our videos in the “Do Not Track” version so that only minimal personal data is transmitted to Vimeo.
Further information on the handling of user data can be found in Vimeo's privacy policy at: vimeo.com/privacy .

4.6. Pageflow
We have integrated multimedia stories into our website using the storytelling software “Pageflow,” which are published under a separate subdomain (https://pageflow.neuman-esser.de/). The provider of the “Pageflow” service is Codevise Solutions GmbH, Deutz-Mülheimer Straße 119, 51063 Cologne, Germany. When the content is loaded, a connection to “Pageflow” servers is established to deliver the story.
Technical access data is processed in server log files at the provider, including browser type and version, operating system used, referrer URL, host name of the accessing computer, time of the server request, and IP address. This information is used to ensure error-free display on different devices and to deliver media adapted to the network situation. It is not merged with other data sources.
Server log data generated when the “Pageflow” pages are accessed is automatically deleted after 30 days. It is stored solely to ensure an error-free and optimized service.
The delivery of “Pageflow” stories can take place without our own cookies. If external services or third-party content are integrated within individual stories, additional data processing may take place there, which is explained in the respective notes on the “Pageflow” page.
This data is collected based on Art. 6 (1) lit. f DSGVO and § 25 (2) TDDDG. Our legitimate interest is the technically error-free presentation and optimization of our website. Further information on data protection for the “Pageflow” service can be found at www.pageflow.io/de/datenschutzerklaerung/.

4.7. Links to social media sites
We have linked the LinkedIn social media logo on our website, which redirects you to our profile stored there with the provider and allows you to follow us there.

LinkedIn is a service provided by LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA. In the EU, this service is operated by LinkedIn, Sendlinger Str. 12, Hofstatt, 80331 Munich, Germany.
Provider's privacy policy: https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

For data protection reasons, we have only implemented a link to the profile on the “LinkedIn” provider. This means that no data about you will be transferred to the provider unless you click on the social media logo. However, as soon as you click on the link to the profile set by us, you will be redirected to the provider's website, which will result in data being transferred to the provider. We have no influence on this transfer of data, which may be personal, and data collection to/from the provider. Likewise, we have no knowledge of the individual purposes of this data processing or its scope and storage duration. We also do not know whether the provider deletes, generates or assigns profiles or sets anonymizations, and this is also beyond our sphere of influence.

If you are logged in to LinkedIn when you click on the link implemented on our website, the data collected by the provider when you visit their website will be immediately assigned to your profile there. The processing of users' personal data is based on our legitimate interests in effectively informing users and communicating with them in accordance with Art. 6 (1) lit. f DSGVO. If users are asked by the provider for consent to data processing (i.e., they declare their consent, e.g., by checking a box or confirming a button), the legal basis for processing is Art. 6 (1) lit. a DSGVO in conjunction with Art. 7 DSGVO.

For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the privacy policy and information provided by the operator of “LinkedIn”. In the case of requests for information and the assertion of data subject rights, we also point out that these can be asserted with the provider, as the provider has access to the user's data and can take appropriate measures and provide information.

4.8. Integration of third-party services and content
Third-party content, such as RSS feeds or graphics from other websites, may be integrated into our pages. This is done based on our legitimate interest (optimization and economic operation of our online offering within the meaning of Art. 6 (1) lit. f. DSGVO). This always requires that the providers of this content (hereinafter referred to as “third-party providers”) perceive the IP address of the users. Without the IP address, they would not be able to send the content to the browser of the respective user. The IP address is therefore necessary for the display of this content. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. However, we have no influence on whether third-party providers store the IP address, e.g., for statistical purposes. As far as we are aware of this, we inform users about it.

5. Publication of job advertisements

You have the option of applying for advertised positions in our company or our group of companies by email or using an application form. By clicking on the “Careers” menu item, you will be taken to the positions advertised in our company (https://www.neuman-esser.com/karriere/). When you apply for a job advertisement, your application data will be collected and processed electronically for the purpose of handling the application process. Only the employees or department heads involved in the respective application process have access to the application data. If your application results in the conclusion of an employment contract, the data you have provided may be stored by us in your personnel file for the purposes of the usual organizational and administrative processes, in compliance with the relevant legal regulations. Data protection law permits the collection of data necessary for the establishment of the employment relationship in accordance with Section 26 (1) sentence 1 BDSG in conjunction with Art. 88 (1) DSGVO. If you voluntarily provide us with information about yourself that goes beyond what is necessary, this is done within the framework of consent in accordance with Art. 6 (1) (a) DSGVO. As part of the processing, your data may be transferred to persons within our company, our group of companies, and service providers who are contractually bound and obliged to maintain confidentiality and who perform partial tasks of data processing.

If an application is rejected, we delete the data provided to us six months after notification of the rejection. However, the data will not be deleted if it must be stored for a longer period of up to six months or until the conclusion of legal proceedings due to legal provisions, e.g., due to the burden of proof under the AGG (German General Equal Treatment Act).

5.1. “Powermail” application form
If you send us your application using the application form provided, the personal data you enter there will be forwarded directly to our email address jobs@neuman-esser.com via the “Powermail” plugin and will only be collected and stored for the purpose of processing your application and contacting you directly. Only the employees or department heads involved in the respective application process have access to this data.
Our “Data protection information for applicants” can be found here.

6. Rights of data subjects

Under the General Data Protection Regulation (DSGVO), you have what are known as “rights of data subjects.” These are essentially the following in relation to us:

Right to information at the latest at the time of collection in accordance with Art. 13 DSGVO, which we comply with through this privacy policy.
Right to information pursuant to Art. 15 DSGVO
Right to correction of your data pursuant to Art. 16 DSGVO
Right to deletion pursuant to Art. 17 DSGVO
Right to restriction of processing pursuant to Art. 18 DSGVO
Under the legal requirements, you have the right to object to the processing of personal data concerning you (Art. 21 GDPR) for reasons arising from your situation.
Furthermore, pursuant to Art. 7 (3) DSGVO, you have the right to revoke your consent at any time. As a result, we will no longer be permitted to continue processing data based on this consent in the future. The lawfulness of the processing carried out based on the consent until revocation is not affected by the revocation.
Where applicable: Right to data portability pursuant to Art. 20 DSGVO

We will support you in exercising your rights in accordance with the DSGVO and other legal provisions.
For inquiries regarding the exercise of your rights, please contact the above-mentioned office of our company. Please understand that, in the interests of the rights of other persons, we can only provide personal information if you can identify yourself appropriately. The data protection supervisory authority responsible for our company is: The State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestr. 2-4, 40213 Düsseldorf, telephone: 0211/38424-0, email: poststelle@ldi.nrw.de

7. Data security

When you use our contact form or application form, your personal data is transmitted via the Internet in encrypted form using TLS. We use technical and organizational measures to secure our website and other systems against loss, destruction, access, modification, or distribution of your data by unauthorized persons.

8. Deletion and restriction (blocking) of personal data

Your personal data will be deleted and restricted (blocked) once the purpose for which it was collected no longer applies, provided that it is no longer required for the fulfillment or initiation of a contract, in compliance with retention periods based on laws and/or tax regulations.

9. Contact options

You can contact us by telephone, email, and/or via a contact form. In this case, the information you provide will be stored for the purpose of processing your contact request. The legal basis for the processing of your personal data is Art. 6 (1) lit. f DSGVO. If the purpose of the contact is to conclude a contract, the additional legal basis is Art. 6 (1) lit. b DSGVO. When you contact us, your personal data may be forwarded internally to the relevant department for processing. Your data will not be passed on to third parties. The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected and there are no legal retention periods that prevent this.

9.1. “Powermail” contact form
If you contact us via our contact form, your personal data provided there will be forwarded directly to our central email address via the “Powermail” plugin and will only be collected and stored for the purpose of your request and direct contact. Internally, your contact will be forwarded to the appropriate department for processing.

10. Links to other providers' websites

If we provide links to other companies'/organizations' websites, their privacy policies and statements apply. We have no influence over whether these providers comply with data protection regulations.

11. Changes and updates to our privacy policy

Updates to our data protection notices may result from changes in the data processing we carry out, or from changes in the law, court rulings, changes in our company's contact information, etc. We therefore ask you to regularly review the content of our data protection notices.

Status of the data privacy notice: 09/09/2025

Privacy Policy

I. The controller responsible for data processing within the meaning of Art. 4 No. 7 DSGVO is:

II. Scope and purpose of data Processing