Privacy Policy

§ 1 Controller

The controller within the meaning of the General Data Protection Regulation (GDPR) is:

ABOCO Personalservice GmbH
Hauptstraße 4 B
53797 Lohmar
Managing Director: Siegfried Boos
E-Mail: info@aboco.de

§ 2 General Information on Data Processing

We process personal data only to the extent necessary to provide a functional website and our content and services. Data you actively submit to us (e.g. via contact or application forms) is used exclusively for the respective purpose.

Technical access logs (IP address, timestamp, page accessed) are automatically recorded by our hosting provider and deleted after a maximum of 7 days. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in protection against misuse and fault diagnosis).

§ 3 Hosting – Firebase App Hosting

This website is hosted via Firebase App Hosting, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you access our website, connection data (including IP address, browser, and timestamp) is automatically processed by Google as required for technical operation.

Data transfer to the USA is based on Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. A data processing agreement is in place with Google. The legal basis is Art. 6(1)(f) GDPR.

§ 4 Contact Form and Enquiries by E-Mail or Phone

When you contact us via our forms or submit an enquiry by e-mail or phone, we process the data you provide (name, e-mail address, phone number, message) solely to handle your enquiry and any follow-up questions.

The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to the performance of a contract or is necessary to take pre-contractual steps. In all other cases, processing is based on Art. 6(1)(f) GDPR (legitimate interest in effectively handling incoming enquiries) or on your consent (Art. 6(1)(a) GDPR).

Data is retained until you request deletion, withdraw your consent, or the purpose no longer applies. Mandatory statutory retention periods remain unaffected. Data is not disclosed to third parties other than the processors listed below (Firebase).

§ 4a Handling of Applicant Data

We offer you the opportunity to apply to us (e.g. by e-mail, post, or via our online application form). We process your personal data (e.g. contact and communication data, application documents, notes from interviews) to the extent necessary to decide on the establishment of an employment relationship.

The legal basis is § 26 BDSG (initiation of an employment relationship), Art. 6(1)(b) GDPR, and – where you have given consent – Art. 6(1)(a) GDPR. Within our organisation, only persons involved in processing your application have access to your data.

If the application is successful, the submitted data is stored on the basis of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of performing the employment relationship. Otherwise, data is automatically deleted after a maximum of 6 months following the conclusion of the application process, unless a longer retention period is required by law or you have expressly consented.

Applicant Pool

If we are unable to make you a job offer, we may add you to our applicant pool in order to contact you about suitable vacancies in the future. Inclusion is based solely on your express consent (Art. 6(1)(a) GDPR). Consent is voluntary and unrelated to the current application process. You may withdraw your consent at any time; in that case your data will be removed from the applicant pool unless statutory retention obligations apply. Data in the applicant pool is deleted no later than two years after consent is given.

§ 5 Database Service – Google Firebase

To store job listings, applications, and contact enquiries, we use Google Firebase, a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data is stored in the Firestore database; uploaded files are stored in Firebase Storage. The database location is within the European Union (region: europe-west).

The legal basis is Art. 6(1)(b) GDPR in conjunction with Art. 28 GDPR (data processing agreement). A data processing agreement is in place with Google. Applicant data is automatically deleted after 6 months.

§ 6 Web Analytics – Google Analytics 4

This website uses Google Analytics 4 (GA4), a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 uses cookies stored on your device to enable analysis of website usage. In addition, we track certain user interactions as events, including job detail page views, application form submissions, and company staffing enquiries. This allows us to understand how our services are used and to improve them. GA4 is only activated after you have given your consent via our cookie banner; the cookies set are automatically deleted after a maximum of 6 months.

The information generated by cookies and event tracking about your use of this website is transmitted to and stored on Google servers. Google Analytics 4 does not store full IP addresses; IP addresses are truncated before storage. Data may be transferred to Google servers in the USA on the basis of Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

The legal basis is your consent (Art. 6(1)(a) GDPR), given via our cookie banner before GA4 is loaded. You may withdraw your consent at any time via the "Cookie Settings" link in the website footer, prevent data collection by installing the Google Analytics opt-out browser add-on →, or by disabling cookies in your browser settings.

§ 6a WhatsApp Notifications – CallMeBot

When an application or staffing enquiry is submitted via our website, we send an internal WhatsApp notification to our staff using CallMeBot, a service available at www.callmebot.com →. The notification is sent solely to internal recipients (employees of ABOCO Personalservice GmbH) for the purpose of prompt processing of enquiries.

The following data is transmitted to CallMeBot:

• First and last name of the applicant or enquirer
• Job title (for job applications)
• Company name (for staffing enquiries)

The following data is not transmitted to CallMeBot: e-mail address, phone number, message content, or application documents (CV). CallMeBot does not store this data beyond the delivery of the notification message. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in the timely internal processing of incoming enquiries).

§ 7 Cookies

When you first visit our website, a cookie banner allows you to decide whether to accept analytics cookies (Google Analytics 4) in addition to technically necessary cookies. Technically necessary cookies cannot be disabled, as core website functions would not be available without them. Analytics cookies are only set after you have given your consent (Art. 6(1)(a) GDPR) and are not loaded beforehand.

All cookies and the consent stored in your browser are automatically deleted after a maximum of 6 months; the cookie banner will then be shown again. You may withdraw your consent at any time via the "Cookie Settings" link in the website footer, by adjusting your browser settings, or by using the Google Analytics opt-out add-on →.

§ 8 SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, this website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the browser address bar changes from "http://" to "https://" and by the padlock symbol in the browser bar. When SSL or TLS encryption is active, data you transmit to us cannot be read by third parties.

§ 8a Objection to Advertising E-Mails

The use of contact details published as part of our imprint obligation for the purpose of sending unsolicited advertising and informational material is hereby expressly prohibited. The operators of this website reserve the right to take legal action in the event of the unsolicited sending of advertising information, for example via spam e-mails.

§ 9 Your Rights as a Data Subject

You have the following rights against us, provided the respective legal requirements are met:

• Access (Art. 15 GDPR): You may request information about your personal data stored by us.
• Rectification (Art. 16 GDPR): You may request the immediate correction of inaccurate or incomplete data.
• Erasure (Art. 17 GDPR): You may request the deletion of your data, provided no statutory retention obligations apply.
• Restriction of processing (Art. 18 GDPR): You may request that processing of your data be restricted.
• Data portability (Art. 20 GDPR): You may request to receive the data concerning you in a structured, commonly used and machine-readable format.
• Objection (Art. 21 GDPR): You may object at any time to the processing of your data based on Art. 6(1)(f) GDPR.
• Withdrawal of consent (Art. 7(3) GDPR): Where processing is based on consent, you may withdraw it at any time with effect for the future.

To exercise your rights, please contact: info@aboco.de

§ 10 Right to Lodge a Complaint with a Supervisory Authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Art. 77 GDPR).

The competent supervisory authority for ABOCO Personalservice GmbH is:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia (LDI NRW)
Kavalleriestraße 2–4
40213 Düsseldorf, Germany
www.ldi.nrw.de →

§ 11 No Automated Decision-Making

We do not use automated processing operations, including profiling within the meaning of Art. 22 GDPR, which produce legal effects concerning you or similarly significantly affect you.

§ 12 Currency and Amendment of this Privacy Policy

This privacy policy is current as of June 2026. The ongoing development of our website or changes in legal or regulatory requirements may make it necessary to amend this privacy policy. The current version is available on this page at all times.