Phone Number +49 89 890 635 0
Fax Number +49 89 890 635 5
Registry court: HRB 160585V
AT identification number: DE246454012
erhebt, verarbeitet und nutzt personenbezogene Daten i. S. d. Bundesdatenschutzgesetzes (BDSG) der DSGVO und des Telemediengesetzes (TMG).
2 Purpose of the collection, processing and use
Symbioworld GmbH collects, processes and uses personal data for the following purposes:
- Enabling contact through the websites;
- Ensuring the use of the web pages;
- Ensuring system security and stability;
- For internal statistical purposes;
- Enabling the processing of contracts;
- Offering the services to the customers
Personal data is stored and processed exclusively on servers of the company in Aschheim near Munich.
The personal data are not transmitted into three parts, except the Symbioworld GmbH is obligated for legal reasons to it, the transmission serves the legal enforcement of own requirements or the concerning one gave its consent.
Information on the cookies used:
This website uses visitor analytics to gather information about the behaviour of visitors to this website in order to improve their user experience.
This website uses Matomo 61, an open source, self-hosted software to collect anonymous usage data for this website.
The data on visitor behaviour is collected to find out about any problems such as pages not found, search engine problems or unpopular pages. Once the data (number of visitors seeing error pages or only seeing one page, etc.) is processed, Matomo generates reports for the website owners to respond to. (layout changes, new content, etc.). The legal basis of the processing is Art. 6 para. 1 lit.a DSGVO.
Matomo processes the following data:
- Anonymised IP addresses by removing the last 2 bytes (i.e. 22.214.171.124 instead of 198.51.100.54)
- Pseudo-anonymised location (based on the anonymised IP address)
- Date and time
- Title of the accessed page
- URL of the page accessed
- URL of the previous page (if allowed)
- Screen resolution
- Local time
- Files clicked and downloaded
- External links
- Duration of page load
- Country, region, city (with low accuracy due to IP address)
- Main language of browser
- User agent of the browser
- Interactions with forms (but not their content)
Indirect data collection
When you use this website, the host of the website records your visit. This log contains your IP address, which indirectly identifies you through your internet service provider. The recording of this data is required by law and necessary for security. There is no possibility to opt-out, but the data will never be used for other purposes. The legal basis for the processing is Art. 6 para. 1 lit.f DSGVO.
Basis of legitimate interest
Data processing is based on the principle of legitimate interest.
Processing the data helps us to find out what works on our site and what does not. For example, it helps us find out if the content is well received or how we can improve the structure of the website. Our team benefits from this and can react to it. As a result of the data processing, you benefit from a website that is constantly improving.
Without the data, we would not be able to provide the service. Your data will only be used to improve the use of the website.
Recipient of the data
The personal data will be sent to:
Details on transfer to third countries
The data on this website and Matomo are hosted in Germany. The data never leave the EU.
The Company uses Google Analytics, a web analytics service provided by Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA, hereinafter “Google”. Google Analytics uses so-called “cookies”, text files which are stored on the computers of website visitors and which enable an analysis of the use of the website by the visitors. The legal basis for the processing is Art. 6 para. 1 lit.a DSGVO.
The information generated by the cookie about the use of the websites is usually transmitted to a Google server in the USA and stored there. In the event that IP anonymisation is activated on one of Symbioworld GmbH’s websites, however, Google will truncate visitors’ IP addresses beforehand within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On behalf of the operator of the websites, Google will use this information for the purpose of evaluating the use of the websites by their visitors, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. The IP address transmitted by visitors’ browsers as part of Google Analytics will not be merged with other Google data.
Website visitors can also prevent the collection of data generated by the cookie and related to the use of the website (incl. the IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
On the websites of Symbioworld GmbH, Google Analytics has been extended by the code “gat._anonymizeIp();” to ensure anonymised collection of IP addresses (so-called IP masking) (source: www.datenschutzbeauftragter-info.de).
The company uses the “+1” button of the provider Google+ of Google Inc. on its websites. Each time a web page is called up that is equipped with such a “+1” component, this component causes the browser used to download a corresponding representation of the component from Google. This process informs Google which specific page of the website is currently being visited. According to the information provided by Google, no further evaluation of the website visit takes place in the event that the visitor is not logged into their Google account.
If you call up the page and are logged in to Google during this time, Google can collect information about the visitor’s Google account, the website recommended by the visitor, as well as the IP address and other browser-related information when you confirm the “+1” button.
In this way, the “+1” recommendation can be stored and made publicly available. The Google “+1” recommendation thus made by the visitor can then be displayed as a reference together with the Google account name of the visitor and, if applicable, with his or her photo stored at Google in Google services, such as in search results or in the Google account or in other places, such as on websites and advertisements on the Internet. Furthermore, Google can link the visit to a Symbioworld GmbH website with the visitor’s data stored at Google. Google also records this information in order to further improve Google services.
If one would like to prevent the aforementioned collection by Google as best as possible, one must log out of the Google account before visiting the website.
Our website uses the “Friendly Captcha” service (www.friendlycaptcha.com). This service is offered by Friendly Captcha GmbH, Am Anger 3-5, 82237 Wörthsee, Germany. Friendly Captcha is a plugin to make it more difficult for automated programs and scripts (so-called “bots”) to use our website.
The company collects the following log data:
- The request headers User-Agent, Origin and Referer.
- The puzzle itself, which includes information about the account and website key to which the puzzle relates
- The version of the widget
- A timestamp
The company stores an anonymised counter per IP address to dynamically scale puzzle difficulty on the Edge network to detect malicious users and minimise blocking of legitimate users. This data is stored separately from the rest of the data and cannot be associated with specific websites. The company anonymises IP addresses via one-way hashing so that they cannot be personally identified. If personal data is stored, this data is deleted within 30 days.
The legal basis for the processing is our legitimate interests in protecting our website against abusive access by bots, i.e. spam protection and protection against attacks (e.g. mass requests), Art. 6 para. 1 lit. f DSGVO. Further information on data protection when using Friendly Captcha can be found at https://friendlycaptcha.com/legal/privacy-end-users/.
Integration of third-party services and content
The Website may also provide you with the ability to share or follow information about Symbioworld, the Website or the products and/or services available through it using social networking functionality (e.g. using “share this”, “like” or “follow” buttons).
We provide this functionality to generate interest in the Website among members of your social networks and to enable you to share and follow opinions, news and recommendations regarding the Website with your contacts. However, you should be aware that when you share personal information on a social network, that information may be collected and made publicly available by the social network provider, including through internet search engines.
We use content from the following third-party providers on the legal basis of Art. 6 para. 1 lit.a DSGVO:
The company uses components of the provider facebook.com on its pages. Facebook is a service of Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA. Each time a website that is equipped with such a component is called up, this component causes the browser used by the website visitor to download a corresponding representation of the Facebook component. This process informs Facebook which specific page of the website is currently being visited.
If you call up such a page and are logged in to Facebook during this process, Facebook recognises through the information collected by the component which specific page is being visited and assigns this information to the website visitor’s personal account on Facebook. If, for example, the “Like” button is clicked or corresponding comments are made, this information is transmitted to the website visitor’s personal user account on Facebook and stored there. In addition, the information that the visitor has visited a website equipped with this Facebook component is passed on to Facebook. This happens regardless of whether the component is clicked on or not.
If you wish to prevent this transmission and storage of data about your website visit and behaviour on a Symbioworld GmbH website by Facebook, you must log out of Facebook before visiting the site. Facebook’s data protection information provides more detailed information on this, in particular on the collection and use of data by Facebook, on the rights in this respect and on the setting options for protecting the privacy of the website visitor: https://de-de.facebook.com/about/privacy/.
In addition, external tools are available on the market with which Facebook social plug-ins can be blocked with add-ons for all common browsers:
An overview of Facebook plugins can be found at
The company uses components of the XING.com network on its pages. These components are a service of XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. With each individual call-up of a website that is equipped with such a component, this component causes the browser used by the website visitor to download a corresponding representation of the component from XING.
The company uses components of the LinkedIn network on its pages. LinkedIn is a service of the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA. With each individual call-up of a website that is equipped with such a component, this component causes the browser used by the website visitor to download a corresponding representation of the component from LinkedIn.
This process informs LinkedIn which specific page of the website is currently being visited. Clicking on the LinkedIn “Recommend Button” while logged into a LinkedIn account allows you to link the content of pages on your LinkedIn profile. This enables LinkedIn to associate the visit to Symbioworld GmbH pages with the LinkedIn user account of the website visitor.
Symbioworld GmbH has no influence on the data that LinkedIn collects through this, nor on the scope of this data collected by LinkedIn. Symbioworld GmbH also has no knowledge of the content of the data transmitted to LinkedIn. Details on the collection of data by LinkedIn as well as on the rights and setting options can be found in LinkedIn’s data protection notices. This information can be found at http://www.linkedin.com/legal/privacy-policy
Contact form and e-mail contact
A contact form is available on our website which can be used for your enquiries to us. In order to answer your enquiry, the e-mail address is required as well as the text field for your request as a mandatory field. Further details are voluntary. Alternatively, you can also contact us via the email address provided. The data of your request will be processed by us for the purpose of answering it. The legal basis for the processing is Art. 6 para. 1 lit.a DSGVO. The purpose of the processing is the handling of your request. The stored data will be deleted when the purpose of the processing no longer applies and there are no further legal or contractual retention obligations. As a rule, the data of your enquiries are stored for 12 months, unless another processing purpose (e.g. order, offer) results from the enquiry.
On our website, you have the option of subscribing to a newsletter. For this purpose, the following data is collected and stored for the purpose of sending and verifiability:
- E-mail address
- Date and time of registration
- Date and time of the confirmation email (double opt-in procedure)
The legal basis is Art. 6 para. 1 lit.a DSGVO (consent). In the course of registering for the newsletter, your consent is obtained and reference is made to this data protection declaration. A double opt-in procedure is used: after granting your consent, you will receive an email from us with a confirmation link which you can use to complete the registration process.
You can revoke your consent to receive our newsletter at any time with effect for the future. Your data will then be deleted immediately, unless there are legal or contractual storage obligations to the contrary.
4 Data collection
Symbioworld GmbH collects personal data when initiating, concluding, processing and cancelling contracts with data subjects. Legal basis of the processing is article 6 paragraph 1 lit. b DSGVO.
The Symbioworld GmbH logs the visit of the websites of its enterprise (in particular the pages: https://www.p-und-z.de and https://www.symbioworld.com).
The following data are essentially recorded:
- the IP address of the requesting computer;
- the date and time of the access;
- the name and URL of the file accessed;
- the website from which the access is made;
- the operating system of your computer and the browser you are using;
- the name of your internet access provider;
In order to use certain services (e.g. Symbio), the user is required to register. In the process, the following data is essentially collected:
- First name and last name;
- Telephone number and e-mail address;
- Registration information (date, etc.)
In the case of enquiries regarding a binding offer via the Internet, the following data is essentially recorded:
- First name and surname;
- Contact details (street, house number, postal code, town);
- telephone number and e-mail address;
5 Use of data (processing and use)
Symbioworld GmbH processes and uses personal data when initiating, concluding, executing and reversing contracts with data subjects. Essentially, it concerns the completion of the contractual relationships existing with customers.
The Symbioworld GmbH uses the personal data for the correspondence with the customers and the visitors of the web pages.
6 Data transfer and data transmission to third parties
Except for the use of Google Analytics, personal data will not be transmitted to third parties unless Symbioworld GmbH is obliged to do so for legal reasons or the person concerned has given their consent. In particular, personal data will be passed on to the credit institution commissioned with the payment for the processing of payments.
As far as Symbioworld GmbH uses or must use external service providers for the implementation and proper processing of services, the contractual relationships are regulated according to the provisions of the DSGVO.
It can come to the passing on of the personal data in particular if this is necessary for the enforcement of the contractual rights of the Symbioworld GmbH.
7 No transmission of data for the purpose of advertising to third parties
Symbioworld GmbH does not transmit personal data to third parties for the purpose of advertising.
8 Protection of the private sphere
The Symbioworld GmbH commits itself to protect the privacy of the customers and the persons concerned and assures to collect, process and use the personal data in accordance with the BDSG, DSGVO and the TMG and to process and use it exclusively for the fulfilment of the purposes defined under § 2. Symbioworld GmbH will oblige its employees accordingly.
9 Protection of the privacy of persons under 16 years of age on the Internet.
Personal data of minors (under 16 years of age) is not knowingly collected or used in any form by the Symbioworld GmbH. As a rule, we do not learn the age of the visitor to our Internet pages. However, we have also not taken any specific measures to protect such data to any particular extent. No personal data may be transmitted to persons under the age of 16 without the express consent of their parents or guardians.
10 Your rights regarding the processing of your data
Right of access: the data subject has the right to obtain confirmation from the controller as to whether personal data concerning him or her are being processed; if this is the case, he or she has a right of access to such personal data and to the information specified in Article 15 of the GDPR.
Right to rectification: The data subject has the right to obtain from the controller the rectification without delay of inaccurate personal data concerning him or her and, where applicable, the completion of incomplete personal data (Art. 16 GDPR).
Right to erasure: The data subject has the right to request the controller to erase personal data concerning him or her without undue delay, provided that one of the reasons listed in detail in Article 17 of the GDPR applies, e.g. if the data are no longer needed for the purposes pursued (right to erasure).
Right to restriction of processing: The data subject has the right to request the controller to restrict processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if the data subject has objected to the processing, for the duration of the controller’s review.
Notification obligation: The data subject has the right to be informed about the recipients of personal data. The controller shall notify all recipients of any rectification or erasure of personal data or restriction of processing pursuant to Article 16, Article 17(1) and Article 18, unless this proves impossible or involves a disproportionate effort. (Art. 19 GDPR)
Right to data portability: The data subject has the right to receive the personal data concerning him or her that he or she has provided to a controller in a structured, commonly used and machine-readable format. He or she also has the right, where technically feasible, to obtain the transfer of such data to another controller (Article 20 GDPR).
Right to object: The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her. The controller shall then no longer process the personal data unless it can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims (Article 21 GDPR).
Right of appeal: Without prejudice to any other administrative or judicial remedy, every data subject has the right to lodge a complaint with a supervisory authority if the data subject considers that the processing of personal data relating to him or her infringes the GDPR (Art. 77 GDPR). The data subject may exercise this right before a supervisory authority in the Member State of his or her residence, place of work or the place of the alleged infringement. In Bavaria, the competent supervisory authority is:
Bavarian State Office for Data Protection Supervision (BayLDA).
11 Data protection for applications and in the application process
Symbioworld GmbH processes the transmitted personal data in the application process to decide on the establishment of an employment relationship and thus on the basis of §26 Abs.1 BDSG and Art.6 Abs.1 lit.b DSGVO.
For our application management, we use the online platform of the service provider Recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, which acts for us as a processor pursuant to Art.28 DSGVO and is bound by contract accordingly. You can find more information about the security and data protection of Recruitee B.V. here: https://recruitee.com/de/security-privacy
You can apply to us directly via this online platform.
In addition, we also accept applications by mail or email, preferably encrypted.
If you send us your application unencrypted by e-mail, please note that a standard e-mail does not guarantee confidential transmission and is therefore sent at your own risk.
If your application for the position you have chosen is unsuccessful, we will retain your application documents for a period of 6 months from the end of the selection process. This retention serves to ensure and provide evidence of a proper selection process and also gives us the opportunity to offer you further positions. The legal basis for this is Art.6 para.1 lit.f DSGVO.
You can object to the storage of your application data and any renewed contact by us at any time.
Here you can find more information.
12 The security of your data
The data you provide to Symbioworld GmbH is protected by appropriate technical and organisational means with the aim of securing your data against accidental or intentional manipulation, loss, destruction, access by unauthorised persons or unauthorised disclosure to third parties.
Our security measures are continuously monitored and improved in line with technological developments and organisational possibilities.
13 Contact person
The contact person for all data protection-related questions and requests as well as for the exercise of the rights described under § 8 is:
Oliver Zeller, Steffen Ploetz, Elmar Kubatta
Phone no. +49 89 890 635 0
Fax No. +49 89 890 635 55
Current version 2022
Symbioworld GmbH, Aschheim
Data Protection Officer:
CAPCAD SYSTEMS AG
Einstein Ring 41
Phone: +49 89 890635 – 0
Fax: +49 89 890635 – 55