Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

NGScopes GmbH
Polenzstraße 3
01277 Dresden
Germany

Represented by the managing directors Dr. Jonas Steinhäuser-Meerz and René Körbitz
Email: contactform@ngscopes.com

We have not appointed a data protection officer, as we are not required to do so under § 38 of the German Federal Data Protection Act (BDSG). For any data protection matter, please use the contact details above.

2. Hosting and server log files

This website is hosted on GitHub Pages, a service of GitHub, Inc., 88 Colin P. Kelly Jr. Street, San Francisco, CA 94107, USA. When you visit the site, GitHub’s servers automatically record technical information transmitted by your browser, in particular:

• your IP address
• date and time of the request
• the page or file requested
• browser type and version, and operating system
• the referring URL, if transmitted by your browser

This processing is necessary to deliver the website and to ensure its stability and security. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest lies in the reliable and secure provision of our website. We do not merge these data with other data sources and do not use them to identify individual visitors.

GitHub processes these data on our behalf as a processor within the meaning of Art. 28 GDPR. Processing may take place on servers in the United States. Data transfers to the USA are safeguarded by the standard contractual clauses of the European Commission, which form part of GitHub’s Data Protection Agreement. Information on data processing by GitHub is available at docs.github.com.

3. Cookies, analytics and tracking

This website does not set cookies, does not use local or session storage for tracking purposes, and does not use any web analytics or advertising service. There is therefore no consent banner: there is nothing to consent to. Should we introduce analytics in future, we will update this policy beforehand and obtain consent where the law requires it.

4. Fonts and external content

Typefaces used on this site (Inter, SIL Open Font License) are stored on our own web space and delivered from this domain. No connection to Google Fonts or any other external font provider is established. The site embeds no third-party videos, maps, social media plugins or similar content. Links to external services such as LinkedIn are plain hyperlinks — no data is transmitted to those services until you click the link and open their site, where their own privacy policies apply.

5. Contacting us by email

If you contact us by email, the data you provide (in particular your name, email address and the content of your message) will be processed for the purpose of handling your enquiry and any follow-up questions. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or pre-contractual measures, and otherwise Art. 6(1)(f) GDPR based on our legitimate interest in responding to enquiries addressed to us.

We retain this correspondence until the purpose of the processing no longer applies — typically once your enquiry has been dealt with conclusively — unless statutory retention obligations require longer storage.

Please note that email transmitted without additional encryption may be read by third parties in transit. Please do not send sensitive information by unencrypted email.

6. Contact form

The contact form on our website does not transmit anything to us on its own. When you press “Send message”, the entries are handed to the email program on your own device as a prepared message, which you then send yourself. No data is stored on this website and no third-party service is involved. Once your message reaches us, it is processed as described in the previous section.

7. Email service

Our email correspondence is processed by our email service provider on our behalf, on the basis of a data processing agreement pursuant to Art. 28 GDPR. Details of the provider are available from us on request.

8. Job applications

If you apply for a position with us, we process the personal data you send us (for example your CV, cover letter, certificates and contact details) for the purpose of the application procedure. The legal basis is Art. 6(1)(b) GDPR in conjunction with § 26(1) of the German Federal Data Protection Act (BDSG), which permits the processing of applicant data for the purpose of deciding on the establishment of an employment relationship.

If we conclude an employment contract with you, your data will be stored in your personnel file for the purposes of the employment relationship. If your application is unsuccessful, we will erase your data six months after we notify you of our decision, unless a longer retention period is required by law or you have consented to longer storage.

We are happy to keep your application on file for future openings, but only if you expressly ask us to. The legal basis in that case is your consent under Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.

9. Recipients of your data

We do not sell personal data, and we do not pass it on to third parties for advertising purposes. Data is only disclosed where this is necessary for the purposes described above — for example to our hosting and email providers acting as processors under Art. 28 GDPR — or where we are required to disclose it by law.

10. Your rights

Under the GDPR, you have the following rights in respect of your personal data:

• Access (Art. 15 GDPR) — to know whether and how we process data about you
• Rectification (Art. 16 GDPR) — to have inaccurate data corrected
• Erasure (Art. 17 GDPR) — to have your data deleted
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR) — to processing based on Art. 6(1)(f) GDPR, on grounds relating to your particular situation
• Withdrawal of consent (Art. 7(3) GDPR) — at any time, with effect for the future

To exercise any of these rights, please contact us using the details in section 1.

11. Right to lodge a complaint

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The authority competent for us is:

Die Sächsische Datenschutzbeauftragte
Devrientstraße 5
01067 Dresden
Germany
www.saechsdsb.de

12. Data security

This website is delivered exclusively over an encrypted TLS connection (HTTPS), recognisable by the lock symbol in your browser’s address bar. We take appropriate technical and organisational measures to protect personal data against loss, manipulation and unauthorised access.

13. Changes to this privacy policy

We update this privacy policy when changes to our website or to legal requirements make it necessary. The version published here always applies to your current visit.