1. What do we do?
Kampmann Group GmbH and Kampmann GmbH & Co. KG, Friedrich-Ebert-Straße 128–130, 49811 Lingen (Ems), Germany, as well as NOVA Apparate GmbH, which belongs to the group of companies (hereinafter jointly referred to as “we”), operate this website.
The protection of your personal data is a matter of particular importance to us. We process personal data exclusively in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the Telecommunications-Digital-Services-Data-Protection Act (TDDDG).
With this Privacy Policy, we transparently inform you which personal data we collect, for what purposes we process it and what rights you are entitled to.
2. What do we inform you about?
This Privacy Policy informs you about:
· who is responsible for data processing,
· which personal data we process,
· for what purposes and on what legal basis this takes place,
· to whom we disclose personal data,
· whether a transfer to third countries takes place,
· how long personal data is stored,
· which rights you are entitled to as a data subject and
· how you can exercise these rights.
3. Definitions
Personal data
Personal data is any information relating to an identified or identifiable natural person. This includes, for example. name, postal address, email address, telephone number and IP address.
Special categories of personal data
Special categories of personal data within the meaning of Art. 9 GDPR (e.g. health data, religious beliefs) via this website.
Processing
Processing means any operation relating to personal data, such as e.g. collection, storage, use, transmission or deletion.
4. Controller and contact
Controller within the meaning of Art. 4 No. 7 GDPR:
Kampmann Group GmbH / Kampmann GmbH & Co. KG
Friedrich-Ebert-Straße 128–130
49811 Lingen
Data protection contact: Stephan Meiners
Email: datenschutz@kampmann.de
Tel: +49 591 / 7108 - 0
5. Data security and internal data protection policy
We take appropriate technical and organizational security measures in accordance with Art. 32 GDPR to protect your personal data against accidental or intentional manipulation, loss, destruction or unauthorized access.
Our website uses TLS/SSL encryption so that data is transmitted in encrypted form.
In addition to the legal requirements, we have introduced a binding internal data protection policy within the Kampmann Group, which all companies, employees and relevant business processes follow.
6. Rights of data subjects
You have the following rights:
· Access (Art. 15 GDPR)
· Rectification (Art. 16 GDPR)
· Erasure (Art. 17 GDPR)
· Restriction of processing (Art. 18 GDPR)
· Data portability (Art. 20 GDPR)
· Objection to processing (Art. 21 GDPR)
· Withdrawal of consents granted (Art. 7 para. 3 GDPR)
· Complaint to a supervisory authority
To exercise your rights, simply send a message to datenschutz@kampmann.de.
7. General principles of data processing
We process personal data only if at least one of the following conditions is met:
· Your consent (Art. 6 Abs. 1 lit. a GDPR),
· performance of a contract or pre-contractual measures (lit. b),
· legal obligation (lit. c),
· legitimate interest (lit. f).
Automated decision-making, including profiling with legal effect, does not take place.
8. Individual data processing operations
8.1 Hosting
Our website is operated on the Microsoft Azure cloud platform.
Hosting provider:
Microsoft Ireland Operations Ltd.
One Microsoft Place, South County Business Park
Leopardstown, Dublin 18, Ireland
Microsoft Azure is a cloud-based hosting infrastructure that enables the operation, scalability and security of modern web applications.
As part of hosting, personal data that is inevitably generated when using our website is processed, in particular technical access data (e.g. IP address, log files, timestamps, device and browser information). This data is necessary to reliably provide the content on our website, to ensure system security, and to detect and prevent attacks, misuse, or malfunctions.
The processing of these data is based on our legitimate interest in the stable, high-performance and secure provision of our website in accordance with Art. 6 Abs. 1 lit. f GDPR.
Microsoft processes personal data exclusively on our behalf and in accordance with our instructions. For this purpose, we have concluded a data processing agreement with Microsoft in accordance with Art. 28 GDPR. This ensures that personal data is processed only to the legally permissible extent, for specified purposes and in compliance with appropriate technical and organizational security measures.
Microsoft Azure meets internationally recognized security standards and certifications (including. ISO/IEC 27001). In addition, Microsoft implements extensive technical and organizational measures to protect personal data, in particular measures for access control, encryption, availability and resilience of the systems.
Processing of data outside the European Union cannot be ruled out in individual cases. For any transfers to third countries, Microsoft ensures appropriate safeguards in accordance with Art. 44 et seq. GDPR, in particular by concluding the Standard Contractual Clauses approved by the European Commission and, where applicable, by further protective mechanisms provided for by law.
Further information on data processing by Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement
8.2 Provision of the website and log files
Each time our website is accessed, the following data is automatically processed:
· IP address
· Date and time of access
· Browser and operating system information
· Referrer URL
The processing serves to ensure technical operation, IT security and error analysis.
Legal basis: Art. 6 Abs. 1 lit. f GDPR
8.3 Cookie & Consent management
We use the consent management service Cookiebot from the provider Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, on our website.
Cookiebot enables us to obtain, document and manage the consents of our website visitors for the use of cookies and comparable technologies in a legally compliant manner. When our website is accessed, a cookie banner is displayed, via which you can grant or refuse your consent for individual cookie categories.
Technically non-essential cookies and comparable technologies are only set if you have previously given your express consent. Consent is given voluntarily and can be withdrawn or adjusted at any time with effect for the future via the cookie settings.
Processing is carried out on the basis of:
· your consent pursuant to Art. 6 Abs. 1 lit. a GDPR, and
· § 25 Abs. 1 TDDDG, insofar as it concerns the storage of or access to information on your end device.
Technically necessary cookies that are strictly required for the operation and basic functions of our website are used on the basis of our legitimate interest pursuant to Art. 6 Abs. 1 lit. f GDPR and do not require consent.
Cookiebot stores the consents you have granted or withdrawn in pseudonymized form in order to comply with our legal obligation to provide proof pursuant to Art. 7 Abs. 1 GDPR.
Further information on data processing by Cookiebot can be found in the provider’s Privacy Policy at: https://www.cookiebot.com/de/privacy-policy/
8.4 External social media profiles (no plugins, no share buttons)
Our website contains only simple links to our company profiles on:
· LinkedIn
· Instagram
· Facebook
· XING
No social-media-plugins or share-buttons are used.
When you visit our website, no data is transmitted to these providers.
You only leave our website by actively clicking on a link. From that point on, data processing is carried out exclusively by the respective platform operator.
Legal basis: Art. 6 Abs. 1 lit. f GDPR
Privacy Policies of the respective providers:
· LinkedIn: https://www.linkedin.com/legal/privacy-policy
· Meta (Facebook / Instagram): https://www.facebook.com/privacy/policy
· XING: https://privacy.xing.com/de/datenschutzerklaerung
8.5 YouTube
We embed videos from the YouTube platform on our website (provider: Google Ireland Limited, Ireland). The videos are integrated directly into our website and can be played by you.
However, the integration of YouTube videos only takes place after your express consent via our consent management tool (Cookiebot). Before you give your consent, no data is transmitted to YouTube.
After you give your consent, information is transmitted to YouTube when you play an embedded video (e.g. your IP address and information about your usage behavior). This may also involve a transfer of personal data to servers of Google LLC in the USA. Google is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.
The legal basis for processing is your consent pursuant to Art. 6 Abs. 1 lit. a GDPR.
Further information on data protection at YouTube or Google can be found at: https://policies.google.com/privacy
8.6 Google Analytics (GA4)
We use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data processing may also be carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Google Analytics 4 enables us to analyze and evaluate the usage behavior of visitors to our website. This gives us insights into how our website is used, which content is particularly in demand and how we can optimize our offering technically, in terms of content and structurally.
Processed data
In connection with the use of Google Analytics 4, the following personal data in particular may be processed:
· IP address (anonymized before storage),
· usage data (e.g. page views, dwell time, interactions),
· device and browser information,
· technical access information,
· Referrer URL.
Google truncates the IP address within the European Union or the European Economic Area before it is stored or further processed, so that a direct personal reference is generally excluded.
Purpose of processing
The data is processed for the following purposes:
· reach measurement,
· analysis of user behavior,
· optimization of the website,
· improvement of user-friendliness and performance.
Legal basis
The data are processed exclusively on the basis of your prior consent pursuant to Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG.
Google Analytics 4 is only activated after you have given your consent via our Consent‑Banner. Any consent given can be withdrawn by you at any time with effect for the future.
Transfer to third countries
In connection with the use of Google Analytics, it cannot be ruled out that personal data will be transferred to servers of Google LLC in the USA. For this transfer, Google relies on appropriate safeguards in accordance with Art. 44 et seq. GDPR, in particular on the Standard Contractual Clauses approved by the European Commission and, where applicable, on certification under the EU‑US Data Privacy Framework.
Further information
Further information on data processing by Google can be found in Google’s Privacy Policy at: https://policies.google.com/privacy
And specifically on Google Analytics at:
https://support.google.com/analytics/answer/12017362
8.7 Google Tag Manager
We use Google Tag Manager on our website, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used exclusively for the administration, management and integration of website‑tags (e.g. Google Analytics, marketing or tracking tags).
Google Tag Manager itself does not process any personal data, does not set any cookies and does not perform any independent analyses. It merely acts as a technical management interface through which other services can be controlled. Personal data is not independently stored or evaluated by Google Tag Manager.
Personal data is processed exclusively by the services integrated via Google Tag Manager. These services are each described separately in this Privacy Policy, including information on the type, scope, purpose and legal basis of the respective data processing.
The use of Google Tag Manager is based on our legitimate interest in the efficient, secure and clear management of the services used on our website pursuant to Art. 6 Abs. 1 lit. f GDPR.
Further information on data protection at Google can be found at:
https://policies.google.com/privacy
8.8 Google Ads, conversion tracking & remarketing
We use Google Ads on our website, including Conversion‑Tracking and remarketing functions. Google Ads is an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data processing may also be carried out by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
As part of Google Ads, a so-called Conversion‑Cookie is stored on your end device when you click on an advertisement placed by Google. With the help of this cookie, we can track whether users perform certain actions on our website (e.g. page views or completed interactions) after they have reached our website via a Google ad. The analyses made available to us by Google are provided in aggregated form; we do not receive any information that would allow individual users to be personally identified.
In addition, we use remarketing‑functions to display interest-based advertisements to visitors to our website on other websites within the Google advertising network. To this end, we use cookies or similar technologies that enable us to recognize your browser.
Purpose of processing
The data is processed for the following purposes:
· measurement of success and analysis of advertising campaigns (conversion tracking),
· targeted and interest-based addressing of users (remarketing),
· optimization of our marketing and advertising measures.
Legal basis
The use of Google Ads, Conversion‑Tracking and remarketing is carried out exclusively on the basis of your prior consent pursuant to Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG.
Without your consent, these services are not activated. You can withdraw any consent you have given at any time with effect for the future via the settings of our consent banner.
Transfer to third countries
In connection with the use of Google Ads, it cannot be ruled out that personal data will be transferred to servers of Google LLC in the USA. For such data transfers, Google relies on appropriate safeguards in accordance with Art. 44 et seq. GDPR, in particular on the Standard Contractual Clauses of the European Commission and, where applicable, on certification under the EU‑US Data Privacy Framework.
Opt‑out‑options
You can object to interest-based advertising by Google at any time by adjusting the relevant settings in your Google user account:
https://adssettings.google.com
Further information on data processing by Google can be found at: https://policies.google.com/privacy
8.9 Microsoft Advertising
We use Microsoft Advertising (formerly Bing Ads) on our website, a service of Microsoft Corporation (provider: Microsoft Corporation, USA), to draw attention to our offerings and measure the effectiveness of our advertising measures.
If you reach our website via an advertisement from Microsoft Advertising, a cookie is set on your end device. With the help of this cookie, information about the use of our website (e.g. visited pages, dwell time, completed actions) can be collected and evaluated. This enables us to analyze the success of our advertising measures and optimize our online offering.
Microsoft Advertising is used exclusively on the basis of your consent via our consent management tool (Cookiebot). The legal basis is Art. 6 Abs. 1 lit. a GDPR.
In connection with the use of Microsoft Advertising, personal data may be transferred to servers of Microsoft Corporation in the USA. Microsoft is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.
Further information on data protection and Microsoft’s privacy settings can be found at: https://privacy.microsoft.com/de-de/privacystatement
8.10 Meta Pixel
To measure success and optimize our online marketing measures, we use the Meta Pixel (formerly Facebook Pixel) on our website.
Provider:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour
Dublin 2, Ireland
Meta Pixel is an analytics and tracking tool that allows us to trackwhether users perform specific actions on our website after clicking on an ad on Facebook or Instagram. In this way, we can analyze the effectiveness of our advertising campaigns, create Conversion statistics and align our marketing measures more precisely
The following data in particular may be processed:
· pages accessed and interactions on our website,
· technical information (e.g. browser, operating system, device type),
· timestamp of the page request,
· pseudonymous online identifiers.
Direct identification of individual users by us is not possible. However, if you are logged into Facebook or Instagram, Meta may assign the collected data to your respective user account and process it for its own purposes. We have no influence over the scope and further processing of this data by Meta.
Purpose of processing
The data is processed for the following purposes:
· measurement of success and analysis of advertising campaigns,
· optimization of our advertisements,
· creation of pseudonymous target groups (Custom Audiences).
Legal basis
The Meta Pixel is used exclusively on the basis of your prior consent pursuant to Art. 6 Abs. 1 lit. a GDPR.
The Meta Pixel is only activated after you have given your consent via our Consent‑Banner. You can withdraw your consent at any time with effect for the future.
Transfer to third countries
A transfer of personal data to servers of Meta Platforms Inc. in the USA cannot be ruled out. Meta relies on appropriate safeguards for such data transfers in accordance with Art. 44 et seq. GDPR, in particular on the Standard Contractual Clauses approved by the European Commission and, where applicable, on certification under the EU‑US Data Privacy Framework.
Further information
Further information on data processing by Meta can be found in Meta’s Privacy Policy at:
https://www.facebook.com/privacy/policy
8.11 LinkedIn Insight Tag
We use the LinkedIn Insight Tag as an analytics and marketing tool for anonymized measurement of the success of our advertising measures on LinkedIn.
Legal basis:
Art. 6 Abs. 1 lit. a GDPR (consent)
Processing takes place exclusively after your prior consent. This can be withdrawn at any time with effect for the future.
Opt-out:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
8.12 Microsoft Clarity
We use Microsoft Clarity on our website, a web analytics service of Microsoft Corporation, USA, for the pseudonymized analysis of user behavior (e.g. click and scroll behavior) and to improve the user-friendliness of our website.
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Processing takes place exclusively after your prior consent pursuant to Art. 6 Abs. 1 lit. a GDPR and § 25 Abs. 1 TDDDG. Microsoft Clarity is only activated after you have given your consent via the Consent‑Banner. Any consent given can be withdrawn by you at any time with effect for the future.
A transfer of data to the USA cannot be ruled out. Microsoft uses appropriate safeguards for this in accordance with Art. 44 et seq. GDPR (in particular Standard Contractual Clauses).
Further information:
https://privacy.microsoft.com/de-de/privacystatement
8.13 OptiMonk
We use the OptiMonk service on our website to display and analyze context-related content (e.g. banners or notices) in order to optimize how we address users and the user-friendliness of our website.
Processing takes place exclusively after your prior consent pursuant to Art. 6 Abs. 1 lit. a GDPR. OptiMonk is only activated after you have given your consent via the Consent‑Banner. Any consent given can be withdrawn by you at any time with effect for the future.
Provider: OptiMonk Kft. Lövőház u. 39 1024 Budapest, Hungary
Further information on data protection at OptiMonk can be found at: https://www.optimonk.com/privacy-policy/
8.14 LiveChat
We use a live chat service on our website for direct communication with website visitors.
Provider:
LiveChat Inc., 101 Arch Street, 8th Floor, Boston, MA 02110, USA
In connection with the use of live chat, the following personal data in particular may be processed:
· contents of the chat history,
· IP address,
· information voluntarily provided by you (e.g. name or email address).
Processing takes place exclusively after your prior consent pursuant to Art. 6 Abs. 1 lit. a GDPR. The Live‑Chat is only activated after you have given your consent via our Consent‑Banner. Any consent given can be withdrawn by you at any time with effect for the future.
Further information on data processing by LiveChat can be found at: https://www.livechat.com/legal/privacy-policy/
8.15 Contact form
If you contact us via one of our contact forms, we process the data you provide, in particular your email address, in order to process and respond to your inquiry.
The legal basis for processing is Art. 6 Abs. 1 lit. b GDPR, insofar as your inquiry is aimed at the completion or performance of a contract, as well as Art. 6 Abs. 1 lit. f GDPR on the basis of our legitimate interest in the efficient handling of inquiries.
To process inquiries, we use, among other things, the Salesforce CRM system (provider: Salesforce Inc., USA). In this context, personal data may be transferred to a third country. Salesforce is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection. Further information on data protection and Salesforce’s privacy settings can be found at: https://www.salesforce.com/de/company/privacy/
Some of our contact forms are integrated via the HubSpot service (provider: HubSpot, Inc., USA). In this context, the data you enter may be transmitted to HubSpot and processed there. Here too, a transfer to a third country may take place. HubSpot is also certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection. Further information on data protection and HubSpot’s privacy settings can be found at: https://legal.hubspot.com/de/privacy-policy
We store your data only for as long as is necessary to process your inquiry or as long as statutory retention obligations exist.
8.16 Salesforce
If you subscribe to our newsletter, we use the data you provide (e.g. email address) to send you regular information about our offers, services or news.
We use Salesforce Account Engagement (formerly Pardot), a service of salesforce.com Germany GmbH, Erika-Mann-Straße 31, 80636 Munich, Germany, to send our newsletter. Data processing may also be carried out by Salesforce Inc., 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA.
Salesforce Account Engagement is a marketing automation platform that enables us to organize and analyze newsletter distribution. Here, for example. open and click rates are recorded in order to optimize our content.
Subscription to our newsletter takes place using the so-called double opt-in procedure. This means that after registering, you will receive an email in which you must confirm your registration. This confirmation is necessary to ensure that no one can register using someone else’s email address.
The data collected in the context of newsletter registration are processed exclusively on the basis of your consent pursuant to Art. 6 Abs. 1 lit. a GDPR.
You can withdraw your consent at any time, e.g. via the “Unsubscribe” link in the newsletter or by sending us a corresponding message.
The data transfer to the USA is based on the Standard Contractual Clauses of the European Commission and, where applicable, other appropriate safeguards pursuant to Art. 46 GDPR.
Your data is used exclusively for sending the newsletter and analyzing usage and is not disclosed to unauthorized third parties.
Further information on data protection at Salesforce can be found at: https://www.salesforce.com/de/company/privacy/
8.17 Integrated functions and digital applications (“Digital Products”)
We use additional digital applications and functions on our website (e.g. interactive calculators, product tools or external widgets) that are provided by internal or external providers.
When using these applications, personal data may be processed, in particular technical connection data (e.g. IP address), usage data and, where applicable, content entered by you. Depending on the specific design of the application, this data may also be transmitted to the respective providers of the applications.
Insofar as these applications are not technically necessary or contain tracking, analytics or marketing functions, they are used exclusively on the basis of your consent via our consent management tool (Cookiebot) pursuant to Art. 6 Abs. 1 lit. a GDPR.
Insofar as personal data are transferred to third countries (in particular to the USA) when these applications are used, we ensure that an adequate level of data protection is ensured, e.g. through certification of the respective providers under the EU-US Data Privacy Framework.
Further information on the respective providers and their data protection provisions can be found – where relevant – in the corresponding sections of this Privacy Policy.
It is possible that some of these applications may technically load additional third-party content or services. We have integrated these into our consent management – where technically possible –.
8.18 Application via our “Karriere mit Kampmann” careers portal
On our website and via our career pages (e.g. https://karriere.kampmann.de/de/jobs) you have the option to apply for open positions.
Conducting the application process
As part of the application process, we process the personal data you provide. This includes, in particular:
· Title, first name, last name
· Contact details (e.g. street, postal code, city, email address)
· Application documents (e.g. CV, certificates, cover letter and other documents provided by you)
This data is processed exclusively for the purpose of carrying out and handling the application process.
The legal basis for processing is Art. 6 Abs. 1 lit. b GDPR and Section 26 BDSG.
Providing your data is necessary for carrying out the application process. Without this data, we cannot consider your application.
Use of an applicant management system (HR4YOU)
For the technical implementation and administration of the application process, we use the applicant management system of HR4YOU AG (https://www.hr4you.de/).
In this context, your personal data is transmitted to HR4YOU AG and processed there on our behalf. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR.
Processing generally takes place within the European Union.
Contact and forwarding via WhatsApp
On our career pages, we also offer the option of contacting us via the messaging service WhatsApp or sharing job advertisements.
This service is provided by WhatsApp Ireland Limited, Ireland.
Use for contacting us
If you contact us via WhatsApp, the data transmitted by you (e.g. telephone number, communication content) will be processed by us to handle your inquiry.
Please note that when using WhatsApp, a transfer of personal data to Meta Platforms, Inc. in the USA cannot be ruled out. Meta is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection.
The use of WhatsApp is voluntary. Alternatively, you can use other communication channels at any time (e.g. email or application form). We recommend that you do not transmit any sensitive application documents via WhatsApp.
Forwarding job advertisements
If you use the function to forward job advertisements via WhatsApp, the data transfer is carried out independently by you to third parties. In this case, you yourself are responsible for the lawfulness of the disclosure, in particular with regard to the disclosure of contact details.
Storage period
As a matter of principle, we store your personal data only for as long as is necessary for the decision on your application.
If no hiring takes place, your data are generally deleted no later than six months after completion of the application process, unless statutory retention obligations exist or you have consented to longer storage (e.g. for a talent pool).
Recipients of the data
Within our company, only those departments involved in the application process have access to your data. In addition, we use selected service providers (e.g. HR4YOU) in the context of data processing on our behalf.
Transfer to third countries
Insofar as data are transferred to recipients in third countries (in particular to the USA) when using WhatsApp or other integrated functions, we ensure that an adequate level of data protection is guaranteed, e.g. through certification under the EU-US Data Privacy Framework.
8.19 Participation in “Advantage Kampmann” and registration via forms
We use Tripetto to provide our online forms, a tool for creating and processing forms. When you complete a form on our website, the information you provide (such as your name, email address, phone number, message, and any other voluntary information) is processed for the purpose of handling your inquiry.
This processing is carried out in accordance with applicable Canadian privacy laws and, where applicable, based on your consent or as necessary to take steps prior to entering into a contract or to perform a contract.
Depending on the technical implementation of the form, additional technical information may also be processed, including:
• IP address
• Date and time of the request
• Browser type
• Operating system
to the extent necessary to ensure the secure operation of the form.
Where form data is processed or stored through Tripetto’s infrastructure, the information may be transferred to and processed on Tripetto servers. The information will be retained only for as long as necessary to fulfill the purpose for which it was collected, unless a longer retention period is required or permitted by law.
9. Currentness of this Privacy Policy
We reserve the right to amend this Privacy Policy in the event of legal, technical or organizational changes.
Version: 18.05.2026