Privacy notice

1. Controller and privacy contact

ARGE Labor- und Objekteinrichtungen GmbH, Steigerring 1, 29339 Wathlingen, Germany, represented by managing directors Noah Bolz and Silvia Nikolai, is the controller within the meaning of the General Data Protection Regulation (GDPR).

For privacy questions and requests concerning your rights, contact info@arge-labor.de or phone 05144 4905-40.

2. Website delivery and hosting

The website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany. When a page is requested, technically necessary connection data are processed, including the IP address, request time and destination, data volume, access status and browser-supplied information about the browser, operating system and referring page.

This processing enables delivery, troubleshooting and protection against attacks and misuse. The legal basis is Article 6(1)(f) GDPR; our legitimate interest is a secure and reliable website. STRATO states that full visitor IP addresses used for attack detection and prevention are retained for no more than seven days. Anonymised access logs are available for the preceding six weeks.

3. Technical functions, cookies and local content

The website uses WordPress. Public enquiry forms use form tokens and request identifiers to protect against unauthorised or repeated submissions. These forms do not set tracking cookies or use browser local storage for that purpose. Authorised administrators may receive necessary WordPress login and settings cookies.

Where storage or access on your device is strictly necessary for a function you expressly request, Section 25(2)(2) TDDDG applies. Related personal-data processing is based on Article 6(1)(f) GDPR. Any access requiring consent takes place only after the relevant choice.

Fonts, design assets and images are supplied locally. The core website includes no analytics or advertising trackers and no automatically embedded external maps, fonts or video services. Public job information is retrieved on the server and displayed locally.

The German and English versions use separate domains. Language is selected by the domain you visit; the language switch links to the corresponding page. No language-tracking cookie or browser-language profiling is used.

Reference and product pages contain links to project planners and manufacturers. Their pages and images are not embedded automatically. Opening a link takes you to the external provider, whose privacy information then applies.

4. Contact, maintenance and service enquiries

When you contact us by form, email or phone, we process your contact information and the details of your enquiry to deal with it. The contact form requests your name, email address, subject and message. Company and phone details are optional.

Maintenance enquiries include the equipment category, quantity and last maintenance date or an unknown/never-maintained selection, plus optional manufacturer and model details. For service and repairs, you can describe each device, its manufacturer, model, date of last maintenance, serial number, year of manufacture and fault, and optionally attach equipment photos and its last maintenance report as a PDF. The German site postcode, optional town or building description, implementation timeframe and purpose of the request also form part of your enquiry. Form data, equipment photos and attached maintenance reports are sent to the responsible company mailbox. Photos are validated and re-encoded, processed temporarily in a private server directory and deleted there after the sending process. PDF reports are also temporarily processed in a private server directory for sending, without changing their contents, and deleted there afterwards. Images and reports are not published in the WordPress Media Library and are not included in the customer acknowledgement. Please avoid including people or unrelated personal information in equipment photos. The website does not create an additional WordPress message archive containing the submitted content.

After a maintenance or service enquiry has been successfully handed to our internal mail system, a neutral acknowledgement may be sent to your email address. It contains a reference number and confirms receipt, without repeating your free-text message. This transactional message contains no advertising.

Processing necessary to enter into or perform a contract with you is based on Article 6(1)(b) GDPR. Communication with contacts at businesses or institutions and other business enquiries is based on Article 6(1)(f) GDPR. Our legitimate interest is responding appropriately, preparing quotations and managing business relationships.

Providing the information is not required by law. Fields marked as required are needed to assign and answer your form enquiry. Without them, the form cannot be submitted. You may contact us by email or phone instead.

5. Misuse prevention and repeated submissions

Temporary checks, counters and delivery states protect the forms and prevent repeated emails. Cryptographically protected HMAC identifiers are derived from information including the IP address, recipient address and a request fingerprint. The protection records do not contain a stored copy of your message and are not used for advertising profiles or tracking across websites.

Technical rate-limit and verification identifiers are valid for ten minutes. Expired records are removed by WordPress cleanup routines. The legal basis is Article 6(1)(f) GDPR and our legitimate interest in preventing spam, automated misuse and repeated submissions.

6. Recipients and email providers

Within our company, only staff handling the relevant matter receive access to the necessary data. IT and email providers support hosting, technical message delivery and business mailboxes, including STRATO and our Microsoft 365 environment. Microsoft’s European entity is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Data are disclosed to other recipients only where necessary to handle or perform the relevant contract, required by law or covered by consent. International services may process data outside the EU or EEA. The applicable safeguards may include adequacy decisions or EU standard contractual clauses. You can request information about safeguards used in a specific case through our privacy contact.

7. Vacancies and applications through JOIN

Our careers page displays published vacancies automatically. Our webserver retrieves public information from the JOIN company page and supplies processed details such as job title, location and advertisement link on this website. Public job information is cached briefly and refreshed on later requests. Visitors’ IP addresses, browser identifiers and form data are not forwarded to JOIN during these server requests. JOIN receives technical connection data about our webserver.

The provider is JOIN Solutions AG, Eichenstrasse 2, 8808 Pfäffikon SZ, Switzerland. Switzerland is covered by a European Commission adequacy decision. JOIN also describes possible processing by providers in other countries, including the USA, and the safeguards used.

No JOIN scripts, JOIN iframes or JOIN tracking cookies are loaded in the browser to display this local list. Server-side provision supports our legitimate interest in informing people about employment opportunities. Any necessary personal-data processing is based on Article 6(1)(f) GDPR. When you open an advertisement or application link, you visit JOIN, where technical usage data and any application information are processed under its privacy notice.

If you apply for a role with us through JOIN, we process application data to decide whether to establish an employment relationship. The legal basis is Section 26(1) BDSG in conjunction with Article 6(1)(b) GDPR. We remain responsible for your application to us; JOIN provides the platform. JOIN’s own functions, such as a personal account or a storage feature you activate, are additionally subject to its privacy information.

8. Retention periods

Enquiry and correspondence data are retained for as long as needed to handle the matter, establish or perform a business relationship or establish, exercise or defend legal claims. Where statutory retention requirements apply, particularly to business correspondence, accounting documents or tax-relevant records, further retention is based on Article 6(1)(c) GDPR for the applicable period. Data are then deleted unless another lawful reason for retention remains.

Application data are deleted once the recruitment process has ended and the data are no longer needed for recruitment or to protect legal claims. Inclusion in a candidate pool requires a separate legal basis, in particular consent. Technical logs and protection records are subject to the purposes and periods described above.

9. Your rights

Subject to the legal requirements, you have rights of access (Article 15 GDPR), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18) and data portability (Article 20). Consent can be withdrawn at any time for the future; processing before withdrawal remains lawful.

We inform you of action taken on your request without undue delay and no later than one month after receipt. Where the legal conditions apply, the period may be extended by up to two further months because of the complexity or number of requests. We inform you of an extension and its reasons within the first month.

Following rectification, erasure or restriction, we notify recipients to whom the affected data were disclosed unless this is impossible or involves disproportionate effort. At your request, we inform you of those recipients.

Right to object

If processing is based on Article 6(1)(f) GDPR, you may object at any time for reasons arising from your particular situation. We then stop processing unless compelling legitimate grounds override your interests or the processing serves legal claims. You may object to processing for direct marketing at any time without giving a reason.

Complaints to a supervisory authority

Under Article 77 GDPR, you may complain to a data-protection supervisory authority if you believe processing infringes the GDPR. The authority particularly relevant to our company is the State Commissioner for Data Protection of Lower Saxony: Postfach 221, 30002 Hannover, Germany; phone +49 511 120-4500; poststelle@lfd.niedersachsen.de.

10. Automated decisions and date of this notice

This website does not make solely automated decisions with legal or similarly significant effects on you under Article 22 GDPR. The forms do not issue automatic prices, binding quotations or appointment commitments.

Last updated: 10 November 2026.

Further provider and authority information