Privacy notice
1. Controller
The controller responsible for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is:
endiso GmbH
Europa-Allee 12
54343 Föhren
Germany
Phone: +49 6502 605 990
Email: info@endiso.de
Managing Director: Oliver Sauer
2. General Information on Data Processing
We process personal data only to the extent necessary to provide our website, communicate with prospective customers, customers, business partners and applicants, or comply with statutory and contractual obligations.
Depending on the purpose, processing is carried out in particular on the basis of Art. 6(1)(a) GDPR where you have given your consent, Art. 6(1)(b) GDPR where processing is necessary for the performance of a contract or in order to take steps prior to entering into a contract, Art. 6(1)(c) GDPR where processing is necessary for compliance with a legal obligation, or Art. 6(1)(f) GDPR where processing is necessary for the purposes of our legitimate interests or those of a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the data subject.
As a general rule, personal data is stored only for as long as necessary for the respective processing purpose. Where statutory retention obligations apply or another legal basis permits longer storage, the data will be retained accordingly.
3. Provision and Hosting of the Website by Wix
Our website is operated using the Wix platform. The provider is Wix.com Ltd., Israel.
When you access our website, technically necessary data is processed in order to provide the website securely and reliably. This may include, in particular, your IP address, the date and time of access, pages and files accessed, browser type and version, operating system, referrer URL, and device and connection information.
The processing is carried out for the technical provision of the website, to ensure its stability and security, and to detect and prevent misuse and attacks. The legal basis for the associated processing of personal data is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure and reliable operation of our website.
Wix.com Ltd. is based in Israel. The European Commission has adopted an adequacy decision for Israel. Wix may also process data through affiliated companies and service providers in other countries. Wix states that it uses appropriate safeguards for transfers to third countries without an adequacy decision, in particular Standard Contractual Clauses and supplementary safeguards. Wix also provides its users with a Data Processing Agreement.
Further information about the processing of personal data by Wix can be found in the Wix Privacy Policy.
4. Cookies and Consent Management
Our website uses cookies and similar technologies.
Some of these technologies are technically necessary in order to provide essential website functions, ensure website security and provide services requested by you. Where information is stored on or accessed from your terminal device for these purposes, this is carried out on the basis of Section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act). Any associated processing of personal data is carried out, where applicable, on the basis of Art. 6(1)(f) GDPR.
Cookies and similar technologies that are not strictly necessary are used only after you have given your prior consent. In this case, the storage of information on or access to information from your terminal device is based on Section 25(1) TDDDG. The associated processing of personal data is based on Art. 6(1)(a) GDPR.
We use Wix's cookie and consent functions to manage your choices. When you first visit our website, you can consent to non-essential cookies, reject them, or make an individual selection via the settings.
Your consent is voluntary and can be changed or withdrawn at any time with effect for the future via the “Cookie Settings” available on our website. The lawfulness of processing carried out prior to the withdrawal of consent remains unaffected.
5. Contact Form
We provide a contact form on our website. If you use this form, we process the information you enter. This includes your first name, last name, email address and the content of your message.
The contact form is provided using Wix Forms. The information you enter is processed via Wix's infrastructure and made available or transmitted to us so that we can handle your enquiry.
If your contact relates to the initiation or performance of a contract, processing is based on Art. 6(1)(b) GDPR. For other business enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in processing and responding to communications addressed to us.
The data will be deleted when it is no longer required to process your enquiry, unless statutory retention obligations or other legal grounds require or permit further storage.
6. Chat Function
Our website provides a chat function operated by Wix. If you use this function, the information you enter as well as technically necessary data will be processed via Wix.
The processing serves to communicate with you and to handle your enquiry. Where the communication relates to the initiation or performance of a contract, processing is based on Art. 6(1)(b) GDPR. For other enquiries, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in providing website visitors with a convenient means of contacting us.
The information concerning processing by Wix set out in Section 3 of this Privacy Policy also applies.
7. Contact by Email and Telephone
If you contact us by email or telephone, we process the personal data you provide, in particular your contact details and the content of your enquiry.
Where the communication relates to the initiation or performance of a contract, processing is based on Art. 6(1)(b) GDPR. For other business communications, processing is based on Art. 6(1)(f) GDPR. Our legitimate interest lies in processing and responding to communications addressed to us.
We use Microsoft 365 for our email communications. In this context, personal data may be processed by Microsoft as a technical service provider.
Further information about data processing by Microsoft can be found in the Microsoft Privacy Statement.
8. Job Applications
Applications may be submitted to us in particular by email to jobs@endiso.de.
As part of the application process, we process the personal data you provide. This may include, in particular, your name and contact details, CV, information about your professional background, qualifications, education and training, certificates and references, as well as other information contained in your application documents.
The processing is carried out for the purpose of conducting the application procedure and deciding whether to establish an employment relationship. The legal basis is, in particular, Section 26(1) BDSG (German Federal Data Protection Act). Pursuant to Section 26(8) BDSG, applicants are considered employees for the purposes of this provision.
Applications are received and processed through our Microsoft 365/Outlook system.
If no employment relationship is established, we generally delete the application documents no later than six months after completion of the application procedure, unless legal grounds require or permit a longer retention period.
If an employment relationship is established, the data required for the employment relationship will be transferred to our personnel administration and processed in accordance with the applicable statutory provisions.
Any further storage for consideration in future recruitment processes will only take place where an appropriate legal basis exists, in particular where the applicant has given consent.
9. Google Maps
We use Google Maps on our contact page to display the location of our company.
For users in the European Economic Area, Google services are generally provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. In connection with the provision of the service, data may also be processed by Google LLC and other companies within the Google group.
When Google Maps is accessed, your IP address as well as device, browser and usage information may in particular be transmitted to Google.
Google Maps is blocked on our website through Wix's consent management system until the relevant consent has been given. The map is not loaded if analytics cookies have been rejected.
Google Maps is therefore activated only after the corresponding selection has been made in the Cookie Settings. Where information is stored on or accessed from your terminal device in this context, this is based on your consent pursuant to Section 25(1) TDDDG. The processing of personal data is based on Art. 6(1)(a) GDPR.
You may change or withdraw your consent at any time with effect for the future via the Cookie Settings on our website.
Processing of personal data in the United States cannot be ruled out. Google LLC is certified under the EU-U.S. Data Privacy Framework.
Further information about data processing can be found in the Google Privacy Policy.
10. SSL/TLS Encryption
For security reasons, our website uses SSL/TLS encryption. This protects data that you transmit to us via our website against unauthorised access during transmission.
An encrypted connection can be identified, in particular, by the website address beginning with “https://”.
11. Recipients and Processors
We use external service providers in some cases for the technical and organisational implementation of our data processing. These service providers receive personal data only to the extent necessary to provide the respective service.
These include, in particular, providers of website hosting and website functions, IT infrastructure, email communications and external web services.
Where service providers process personal data on our behalf, they are engaged in accordance with the statutory requirements applicable to processing on behalf of a controller.
12. Transfers to Third Countries
The use of certain service providers may involve the processing of personal data outside the European Union or the European Economic Area.
Such transfers take place only where the requirements of Art. 44 et seq. GDPR are met. This may be based, in particular, on an adequacy decision of the European Commission or on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Specific information regarding the providers used on our website can be found in the relevant sections of this Privacy Policy.
13. Your Rights
Subject to the applicable statutory requirements, you have the right to obtain information about the personal data we process concerning you, as well as the right to rectification of inaccurate data, erasure, restriction of processing and, where the statutory requirements are met, data portability.
Where processing is based on your consent, you may withdraw that consent at any time with effect for the future. The lawfulness of processing carried out prior to the withdrawal of consent remains unaffected.
Where we process personal data on the basis of Art. 6(1)(f) GDPR, you have the right, under the conditions set out in Art. 21 GDPR, to object at any time to the processing on grounds relating to your particular situation.
To exercise your rights, you may contact us using the contact details provided in Section 1.
14. Right to Lodge a Complaint with a Data Protection Supervisory Authority
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data infringes applicable data protection law.
The supervisory authority responsible for us is:
The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
(Der Landesbeauftragte für den Datenschutz und die Informationsfreiheit Rheinland-Pfalz)
Hintere Bleiche 34
55116 Mainz
Germany
Phone: +49 6131 8920-0
Email: poststelle@datenschutz.rlp.de
15. Updates and Amendments to this Privacy Policy
We update this Privacy Policy if the services we use, our website or the applicable legal requirements change.
Last updated: September 2026