Privacy Policy

The use of our website is usually possible without providing personal data. Insofar as personal data (for example name, address or email addresses) is collected on our pages, this is always done on a voluntary basis as far as possible. This data will not be passed on to third parties without your express consent.

We point out that data transmission on the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.

The use of contact data published within the framework of the imprint obligation by third parties for sending unsolicited advertising and information materials is hereby expressly prohibited. The operators of the pages expressly reserve the right to take legal action in the case of unsolicited sending of advertising information, for example through spam emails.

"Personal data" is all information that relates to an identified or identifiable natural person (hereinafter "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by assignment to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more special characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person.

"Processing" is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means. The term is broad and covers virtually every handling of data.

"Pseudonymisation" means the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.

"Profiling" means any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person's performance at work, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements.

The "controller" means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

"Processor" means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.

We take appropriate technical and organizational measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the nature, scope, circumstances and purposes of processing as well as the different probability of occurrence and severity of the risk to the rights and freedoms of natural persons, to ensure a level of protection appropriate to the risk.

The measures include in particular securing the confidentiality, integrity and availability of data by controlling physical access to the data, as well as access, input, disclosure, ensuring availability and their separation. Furthermore, we have established procedures that ensure the perception of data subject rights, deletion of data and response to data threats. Furthermore, we consider the protection of personal data already during the development or selection of hardware, software and procedures, according to the principle of data protection through technology design and through privacy-friendly default settings (Art. 25 GDPR).

You have the right to request confirmation as to whether relevant data is being processed and information about this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

You have the right in accordance with Art. 16 GDPR to request the completion of data concerning you or the correction of incorrect data concerning you.

You have the right in accordance with Art. 17 GDPR to request that relevant data be deleted immediately, or alternatively in accordance with Art. 18 GDPR to request a restriction on the processing of the data.

You have the right to request that the data concerning you, which you have provided to us, be received in accordance with Art. 20 GDPR and to request its transmission to other controllers.

You also have the right in accordance with Art. 77 GDPR to file a complaint with the competent supervisory authority. The authority responsible for us is the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW), Kavalleriestraße 2-4, 40213 Düsseldorf, https://www.ldi.nrw.de.

You have the right to withdraw consent given in accordance with Art. 7 para. 3 GDPR with effect for the future

You can object to the future processing of data concerning you in accordance with Art. 21 GDPR at any time. The objection can be made in particular against processing for direct marketing purposes.

Small files that are stored on users' computers are referred to as "cookies". Different information can be stored within cookies. A cookie primarily serves to store information about a user (or the device on which the cookie is stored) during or after his visit within an online offer. Cookies that are deleted after a user leaves an online offer and closes his browser are referred to as temporary cookies, or "session cookies" or "transient cookies". For example, the contents of a shopping cart in an online shop or a login status can be stored in such a cookie. Cookies that remain stored even after the browser is closed are referred to as "permanent" or "persistent". For example, the login status can be stored when users visit them after several days. Likewise, the interests of users can be stored in such a cookie, which are used for reach measurement or marketing purposes. Cookies that are offered by providers other than the controller operating the online offer are referred to as "third-party cookies" (otherwise, if they are only his cookies, one speaks of "first-party cookies").

We may use temporary and permanent cookies and clarify this in the context of our privacy policy.

If users do not want cookies to be stored on their computer, they are asked to deactivate the corresponding option in the system settings of their browser. Stored cookies can be deleted in the system settings of the browser. The exclusion of cookies can lead to functional limitations of this online offer.

A general objection to the use of cookies used for online marketing purposes can be declared for a variety of services, especially in the case of tracking, via the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/. Furthermore, the storage of cookies can be achieved by switching them off in the browser settings. Please note that then possibly not all functions of this online offer can be used.

When you contact us (e.g. via contact form, email, telephone or via social media), the user information is processed to handle the contact request in accordance with Art. 6 (1) lit. b GDPR. User information may be stored in a Customer Relationship Management System ("CRM System") or comparable request organisation.

We delete the requests if they are no longer required. We review the necessity every two years; furthermore, the statutory retention obligations apply.

When you use the contact form on sema.one we process the mandatory and optional fields you submit (first name, last name, email address, optional phone, company, subject and message) exclusively to handle your request. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual request) or Art. 6 (1) lit. f GDPR (legitimate interest in answering inquiries).

The data is deleted as soon as it is no longer required for processing your request. Statutory retention periods apply for tax- or contract-relevant information (typically 6–10 years under German Commercial and Tax Code).

You can apply for advertised positions via our career form at /jobs. We process your application data (name, contact details, position reference, cover letter and CV as a PDF/Word attachment) for the purpose of conducting the application process. The legal basis is § 26 (1) BDSG in conjunction with Art. 88 GDPR and Art. 6 (1) lit. b GDPR (initiation of an employment relationship).

If no employment relationship is established, we delete your application documents no later than six months after completion of the process in order to be able to respond to potential claims under the General Equal Treatment Act (AGG). Longer storage takes place only with your explicit consent, e.g. for inclusion in a talent pool.

Each time you access our website, our hosting provider automatically collects the following information from the calling computer system: truncated IP address, date and time of access, the specific path called up, transmitted data volume, HTTP status code, referrer URL and the browser and operating system used.

Processing is based on our legitimate interest in the secure and stable operation of the website (Art. 6 (1) lit. f GDPR). The log files are automatically deleted after a maximum of 14 days, unless a security incident requires longer retention for evidence purposes.

The hosting services we use serve to provide the following services: infrastructure and platform services, computing capacity, storage space and database services, security services and technical maintenance services that we use for the purpose of operating this online offer.

In this context, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta and communication data of customers, prospects and visitors of this online offer on the basis of our legitimate interests in efficient and secure provision of this online offer in accordance with Art. 6 (1) lit. f GDPR in conjunction with Art. 28 GDPR (data processing agreement). All servers are located within the European Union.

In selected news articles we embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. When you load an article containing a YouTube video, your browser establishes a direct connection to YouTube. In doing so, YouTube and Google may process your IP address, the referrer, technical device information and — if you are logged into Google — your account data.

The legal basis for the embedding is our legitimate interest in an attractive presentation of our content (Art. 6 (1) lit. f GDPR). For the data transfer to the USA we rely on the European Commission's adequacy decision of 2023-07-10 (EU-US Data Privacy Framework, DPF) as well as, additionally, on the Standard Contractual Clauses under Art. 46 (2) GDPR. Further information can be found in Google's privacy policy at https://policies.google.com/privacy.

For sending reply and confirmation emails from the forms on sema.one we use the SMTP infrastructure of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. IONOS processes the content data contained in your message as well as the associated metadata (sender and recipient addresses, timestamps) exclusively on our behalf.

The legal basis is our legitimate interest in efficient and reliable email communication (Art. 6 (1) lit. f GDPR) in conjunction with a data processing agreement under Art. 28 GDPR. Processing takes place exclusively on servers in Germany; no transfer to a third country takes place.