Legal
Here you can find out which personal data we process when you visit this website and when you send an inquiry, for what purpose, and what rights you have. This English version is provided for convenience; the German version is legally binding.
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Atelier Bubori GmbH (EXFAIR brand)
Industriestraße 3
78052 Villingen-Schwenningen
Germany
Phone: +49 7721 88588-0
Email: hello@exfair.de
Managing director: Manuel Bubori
If you have any questions about data protection, you can reach us using the contact details above.
We only process personal data to the extent necessary to provide this website, to handle your inquiry or to fulfil legal obligations, or if you have given your consent. The legal bases are in particular:
Art. 6 (1) (a) GDPR – your consent
Art. 6 (1) (b) GDPR – contract or pre-contractual measures, e.g. your inquiry
Art. 6 (1) (c) GDPR – legal obligations, e.g. retention obligations
Art. 6 (1) (f) GDPR – legitimate interests, e.g. the secure and functional operation of the website
Storing information on your device or accessing it (e.g. cookies) is based on Section 25 of the German Telecommunications Digital Services Data Protection Act (TDDDG): if it is strictly necessary for the function you requested, on Section 25 (2) TDDDG; in all other cases only with your consent under Section 25 (1) TDDDG.
This website is hosted by Webflow, Inc., 398 11th Street, Floor 2, San Francisco, CA 94103, USA. Webflow delivers the website via a content delivery network and stores data that your browser transmits automatically (server log files): IP address, date and time of access, page requested, referrer URL, browser type and version, and operating system.
The processing is necessary to deliver the website and to ensure its stability and security (Art. 6 (1) (f) GDPR). Webflow processes the data on our behalf on the basis of a data processing agreement. Webflow is certified under the EU-US Data Privacy Framework (see section 14).
We use the consent tool Cookie-Script from Objectis, UAB, Laisves str. 60, LT-05120 Vilnius, Lithuania, to manage your consents. On your first visit you can choose in the banner which categories of cookies and services you agree to. Your choice is stored in the cookie “CookieScriptConsent” on your device so that we can take it into account on further visits.
The legal basis is Art. 6 (1) (c) GDPR in conjunction with Art. 7 (1) GDPR and Section 25 (2) TDDDG. You can withdraw or change your consent at any time with effect for the future by opening the cookie settings again or by deleting the cookies in your browser. An overview of the cookies used and their storage period can be found in the cookie settings.
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use this tool to integrate other services such as Google Analytics and Google Ads. The Tag Manager itself does not set cookies or analyse usage data; however, your IP address is transmitted to Google when it loads.
Via Google Consent Mode, all analytics and advertising functions are deactivated by default. The services concerned are only activated once you give your consent in the cookie banner. The legal basis for using the Tag Manager is Art. 6 (1) (f) GDPR; our legitimate interest lies in the simple and controlled integration of services.
If you have given your consent, we use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland to analyse and improve the use of our website. This involves processing, among other things, pages visited, time spent, clicks, approximate location, device and browser information and your shortened IP address. Google Analytics 4 does not store full IP addresses. Cookies are stored on your device for this purpose.
The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG), which you can withdraw at any time via the cookie settings. Further information: https://policies.google.com/privacy
If you have given your consent, we use Google Ads conversion tracking (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). If you reach our website via a Google ad, a cookie is set. This allows us and Google to recognise that someone clicked on an ad and then, for example, sent an inquiry. We only receive statistical evaluations, no information that can be used to identify users personally.
The legal basis is your consent (Art. 6 (1) (a) GDPR, Section 25 (1) TDDDG), which you can withdraw at any time via the cookie settings.
If you contact us via a form on this website, by email or by phone, we process the data you provide in order to handle your inquiry and to clarify follow-up questions. In our inquiry forms this includes, for example, company, contact person, email address, phone number, trade fair or event, date, space and your message. In addition, some forms technically transmit the page from which the inquiry was sent.
The forms are processed via Webflow; the information is stored by Webflow and forwarded to us by email. The legal basis is Art. 6 (1) (b) GDPR if your inquiry is aimed at a contract, otherwise Art. 6 (1) (f) GDPR (legitimate interest in answering inquiries). We delete the data as soon as it is no longer required for processing, unless statutory retention obligations – for example under commercial and tax law – prevent this.
To protect our inquiry forms against spam and automated access, we use Google reCAPTCHA from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA checks whether an entry was made by a human. For this purpose, your IP address, browser and device information and your usage behaviour on the page are evaluated and transmitted to Google.
The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in protecting the website against misuse. Further information: https://policies.google.com/privacy
We process applications that you send us by email to jobs@exfair.de in order to carry out the application process (Art. 6 (1) (b) GDPR). If no employment relationship results, we delete your documents no later than six months after the end of the process, unless you have consented to longer storage.
For a consistent display we use fonts from Adobe Fonts, a service of Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Park, Dublin 24, Ireland. When a page is opened, the fonts are loaded from Adobe servers; your IP address is transmitted to Adobe in the process. The legal basis is Art. 6 (1) (f) GDPR; our legitimate interest lies in a consistent and appealing presentation of the website. Further information: https://www.adobe.com/privacy/policies/adobe-fonts.html
This website stores your language selection and hidden notices in your browser's so-called sessionStorage for the duration of your browser session. The data contains no information about you personally and is deleted automatically when you close the browser. The legal basis is Section 25 (2) No. 2 TDDDG, as the storage is necessary for the function you requested.
On our website we link to our profiles on LinkedIn and Instagram. These are simple links; no data is transferred to these networks when you visit our website. Only when you click a link are you taken to the respective provider's site, which is subject to its privacy policy.
Some of the providers mentioned (Webflow, Google, Adobe) are based in the USA or process data there. For the USA there is an adequacy decision of the EU Commission (EU-US Data Privacy Framework). The providers mentioned are certified under it. In addition, transfers are based on the EU Commission's standard contractual clauses.
You have the right of access (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR) and data portability (Art. 20 GDPR). You can withdraw consent at any time with effect for the future (Art. 7 (3) GDPR).
Right to object: if we process your data on the basis of legitimate interests (Art. 6 (1) (f) GDPR), you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).
An email to hello@exfair.de is sufficient to exercise your rights. You also have the right to lodge a complaint with a data protection supervisory authority, for example the authority responsible for us: Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg, Heilbronner Straße 35, 70191 Stuttgart, Germany.
You are neither legally nor contractually obliged to provide your data. However, we cannot process your inquiry without the mandatory information in the form. There is no automated decision-making, including profiling, within the meaning of Art. 22 GDPR.
For security reasons this website uses TLS encryption (recognisable by “https://” in the address bar).
We update this privacy policy when our website, the services used or the legal situation change. The version published here applies.
Further legal information