Privacy policy

The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws and other data protection regulations is:

Julius Berger International GmbH
Abraham-Lincoln-Straße 44 
65189 Wiesbaden 
Phone: +49 (0) 611 1390 3000 
Send email: jbi@julius-berger.com

The data protection officer at Julius Berger International GmbH is:
Volker Müller 
Send email: Datenschutz.JBI@julius-berger.com

For reasons of better readability, we have deliberately refrained from distinguishing between female and male personal pronouns.

1. General information about data processing via our website

1.1 Processing of personal data and its purpose

Julius Berger International GmbH (hereinafter referred to as „Julius Berger“ or „we“) processes users‘ personal data only to the extent necessary to provide a functional website and our content and services. When you visit our websites, the following data is processed:

User’s IP address
Browser used (type, version, language)
Operating system used
User’s internet service provider
Date and time of access to our website
Files accessed on our website
Website from which the user accessed our website
Website that the user accesses via our website

The processing and temporary storage of the IP address is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must be stored for the duration of the session. The log files contain IP addresses or other data that enable the user to be identified. The data is stored in log files to ensure the functionality of the websites. In addition, the data is used to optimize our websites and to ensure the security of our information technology systems. Any processing of personal data is carried out exclusively for the purposes stated and to the extent necessary to achieve these purposes. This data is not used for advertising, customer advice, or market research purposes.

1.2 Legal basis for the processing of personal data

The processing of our users‘ personal data is carried out regularly with the user’s consent. An exception applies in cases where prior consent cannot be obtained for practical reasons and we are permitted to process the data by law. The data and log files are stored on the basis of Art. 6 (1) lit. f GDPR.

1.3 Data deletion and storage period

We delete or block the personal data of the persons concerned as soon as the purpose of storage no longer applies. In the case of data processing for the provision of the websites, deletion takes place when the respective session is ended. In the case of storage of personal data in log files, deletion takes place after seven days at the latest. Further storage is possible if the IP addresses of the users are deleted or anonymized beforehand so that it is no longer possible to assign them to the calling client.

2. Cookies

We use cookies in several places on our websites. When a user accesses one of our websites, a cookie may be stored on the user’s operating system. A cookie contains a characteristic string of characters that enables the browser to be uniquely identified when our websites are accessed again. The following data is stored and transmitted in the cookies:

Language settings
Login information

The purpose of using cookies is to make our websites user-friendly. The processing of personal data using cookies is based on Art. 6 (1) lit. f GDPR. Cookies are stored on the user’s computer and transmitted to our websites from there. Users can deactivate or restrict the transmission of cookies by changing the settings of their Internet browser. Cookies that have already been stored can be deleted at any time. If cookies are deactivated for our websites, it may no longer be possible to use all the functions of our websites to their full extent.

3. Web analysis & plugins

Our websites use Matomo (formerly Piwik), a software for statistical analysis of user access provided by InnoCraft ltd., 150 Willis St, 6011 Wellington, New Zealand. No personal user profiles are created; only anonymous measurements are collected. The purpose of web analysis is to improve the quality of our websites and their content. Cookies are used for this purpose (see above), which enable an analysis of the use of our websites. Web analysis can be technically prevented by the user of the websites by deactivating JavaScript and cookies in their web browser. Details on the settings required for this can be found in the product descriptions or instructions of the various browser providers. Data processing in this context is based on Art. 6 (1) lit. a GDPR. Further information on Matomo’s terms of use and data protection can be found at https://matomo.org/privacy-policy/

3.1 Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics enables the website operator to analyze the behavior of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used, and the origin of the user. Google may combine this data into a profile that is assigned to the respective user or their end device. Google Analytics uses technologies that enable the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA or in a third country and stored there. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/
Further information can be found at https://policies.google.com/privacy/frameworks?gl=de and at https://www.google.de/intl/de/policies/.

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

The legal basis for the processing of the data is your consent, pursuant to Art. 6 (1) (a) GDPR.

Right of withdrawal

You have the right to withdraw your consent at any time without giving reasons with effect for the future. If you do not agree to the future transmission of your data to Google in connection with the use of our websites, you have the option of completely deactivating Google Analytics in your browser settings. Data processing by Google can also be prevented by using a browser add-on to deactivate Google Analytics. Further information and the add-on can be found at https://tools.google.com/dlpage/gaoptout?hl=de. In this case, you may no longer be able to use all the functions of our websites to their full extent. For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Storage period

Data stored by Google at the user and event level that is linked to cookies, user IDs (e.g., user ID) or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) is anonymized or deleted after 14 months. Details can be found at the following link: https://support.google.com/analytics/answer/7667196?hl=de

3.2 Vimeo

This website uses plugins from the video portal Vimeo. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. When you visit one of our pages equipped with a Vimeo video, a connection to the Vimeo servers is established. The Vimeo server is informed which of our pages you have visited. Vimeo also obtains your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account. Vimeo uses cookies or similar recognition technologies (e.g., device fingerprinting) to recognize website visitors.

The use of Vimeo is in the interest of an appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. If consent has been requested, processing is based exclusively on Art. 6 (1) lit. a GDPR; consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission and, according to Vimeo, on „legitimate business interests.“ Details can be found here: https://vimeo.com/privacy.

Further information on the handling of user data can be found in Vimeo’s privacy policy at: https://vimeo.com/privacy

3.3. SalesViewer

This website uses functions of the web analysis service SalesViewer (SalesViewer GmbH, Universitätsstraße 60, 44789 Bochum, Germany). With SalesViewer, we identify companies that visit our website. SalesViewer creates a comprehensive needs and visit profile. SalesViewer only decrypts companies and does not process or store any personal data. The following information is determined:

Name, origin, and industry of the visiting company
Source/referrer of the visiting company
Keyword
Visitor behavior (e.g., visited (sub)pages, time of visit, duration of visit)

No cookies are used when SalesViewer is employed. No data is read from the end device that is not already transmitted when a website is accessed. No data is stored across sessions.

SalesViewer is designed to identify companies visiting the website. Visitor data is only collected and processed in pseudonymized form.

The legal basis for data processing is your consent in accordance with Art. 6 (1) (a). In addition, the marketing, market research, and optimization purposes pursued by us constitute a legitimate interest within the meaning of Art. 6 (1) (f) GDPR. You have the right to revoke your declaration of consent at any time with effect for the future. In addition to this, the provider offers an opt-out cookie that can be accessed at https://www.salesviewer.com/de/opt-out/.

We have concluded a data processing agreement with SalesViewer in accordance with Art. 28 GDPR.

4. Online presence on social media

We operate online presences on social networks and platforms (so-called „fan pages“). We regularly publish and share content, offers, and product recommendations on our social media presences.

Scope of processing

Every time you interact with our fan pages, the operators of the respective social network automatically collect and store your personal data for market research and advertising purposes. It cannot be ruled out that the data collected may also be processed outside the European Union. Among other things, this may make it more difficult for you to exercise your rights as a data subject. When you visit fan pages, the operators of the social networks use cookies and similar technologies to track your usage behavior. With each of your interactions, the operators can view general statistics about your interests and demographic characteristics (e.g., age, gender, region). The operators use pseudonyms to create usage profiles from the collected data. These can be used, for example, to place advertisements within and outside of social networks that are presumed to correspond to your interests.

We operate a fan page on:

Company headquarters: LinkedIn Ireland Unlimited Company, Wilton Plaza Wilton Place, Dublin 2, Ireland
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out option: LinkedIn Privacy Policy, Manage Advertising Preferences | LinkedIn Help
Data processing agreement: LinkedIn Data Processing Agreement [https://legal.linkedin.com/dpa]
Basis for data transfer: (https://legal.linkedin.com/dpa) and certification of LinkedIn Corporation 1000 W Maude Avu, Sunnyvale, CA 94085 under the EU-U.S. Data Privacy Framework

If you communicate with us directly via our fan pages or share personal content with us, we are responsible for processing your data. An exception applies to the data processing described below for usage analysis (Page Insights); for this, we are jointly responsible with LinkedIn.

We generally collect all messages, content, and other information that you share with us when you visit our social media sites, such as when you post something on one of our social media sites or send us private messages. If you have an account with the respective social network, we can also see your public information, such as your username, information in your public profile, and content that you share with a public audience. The nature, scope, and purposes of the processing of your personal data on social networks are primarily determined by the operators of the social networks.

Usage analysis (Page Insights)

Each time you interact with fan pages, the respective operators use cookies and similar technologies to track your usage behavior. Against this background, the operators provide us with so-called „page insights.“ These are anonymized statistics that can give us information about your interactions with our posts or other content. It is not possible to assign this data to you personally. We have no access to the personal data processed by the operator for the creation of Page Insights („Page Insights data“). The selection and preparation of Page Insights data is carried out exclusively by the respective operator.

Page Insights provide us with insights into how you use our fan pages, what interests you have in our fan pages, and which topics and content are particularly popular. This enables us to optimize our fan page activities, for example by better responding to the interests and usage habits of our target groups when planning and selecting our content. We and the operator are jointly responsible for processing your data in connection with Page Insights. For this purpose, we have set out in an agreement which company fulfills which data protection obligations in accordance with the GDPR with regard to the processing of Page Insights data.

You can view the agreement with LinkedIn here: https://www.linkedin.com/legal/l/page-joint-controller-addendum

You also have the option of contacting us within LinkedIn using LinkedIn’s „Lead Gen Form“ contact form. The contact form is linked to the advertisements within LinkedIn and, if you have agreed, automatically transfers personal data from your LinkedIn profile when you fill out a form. This data includes your name, company name, telephone number, email address, and the content of the message. The data entered is stored within LinkedIn and processed by us. The data is used exclusively for processing the conversation.

We also use the LinkedIn Insight Tag from LinkedIn Ireland Unlimited Company. This is a JavaScript tag-based analysis tool that measures the effectiveness of interest-based internet advertising (conversions).

Interest-based ads are defined by predefined parameters that only display an ad when the user has or accesses the relevant parameters, such as interest in certain topics. These predefined user groups are also known as „matched audiences“ and ensure that our ads reach users who have a potential interest in them. LinkedIn distributes the advertisements using an automatic algorithm, taking into account the predefined parameters.

If a user is redirected to our website via a LinkedIn ad, temporary session cookies and permanent cookies are set in the user’s browser to collect information about which advertising campaigns and pages of our website were accessed and whether, for example, an attempt to contact us was made. These cookies are also known as conversion cookies and are not used for personal identification. The LinkedIn Insight Tag typically collects the following data:

URL
Referrer-URL
IP address – truncated for visitors without a LinkedIn account or hashed (converted into a hash code and indexed) for visitors with a personal LinkedIn account
Device and browser characteristics (also known as „user agent“)
Time of access (timestamp)
Information about the visit, such as actions and activities
Information about individual settings/restrictions regarding advertisements and the corresponding tracking

For more information, please visit https://de.linkedin.com/legal/privacy-policy and https://de.linkedin.com/legal/cookie-policy

The data collected via conversion cookies is used by LinkedIn to compile visit statistics for our website. We use these visit statistics to determine the success of our advertisements and to optimize them.

For further information on data processing by the respective operator, as well as your rights and settings options for protecting your privacy, please refer to the privacy policy of the respective operator (https://privacy.linkedin.com/de-de).

Purpose of data processing

The purpose of our online presence is to communicate effectively with our customers and interested parties and to optimize the presentation of our offerings. The data collected via conversion cookies is used by LinkedIn to compile visitor statistics for our website. These visitor statistics in turn help us to determine the success of our advertisements and optimize them.

You are not obliged to provide your personal data. The provision of data is neither required by law or contract nor necessary for the conclusion of a contract. However, failure to provide data may mean that you cannot use our websites or cannot use them to their full extent.

Legal basis

If you are asked by the respective social network operator for consent to data processing or if you use the „Lead Gen Form“ contact form from LinkedIn, the legal basis for data processing is Art. 6 (1) lit. a GDPR. If the processing is aimed at concluding a contract, the legal basis is Article 6 (1) lit. b GDPR. In all other cases, the legal basis is Article 6(1)(f) GDPR. We have an overriding legitimate interest in optimizing the presentation of our offers and communicating effectively with our customers and interested parties.

Right of withdrawal

You have the right to withdraw your consent at any time without giving reasons with effect for the future. If you do not agree to the future transfer of your data in connection with the use of our social media presences, you have the option of objecting to the data processing. Under 4., we have compiled the relevant links for you to exercise your rights.

You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

Without a personal LinkedIn account, you have the option to reject LinkedIn’s cookies and advertising settings at the following link: www.linkedin.com/mypreferences/g/guest-cookies

With a personal LinkedIn account, you have the option of restricting your cookies and individual usage-based advertisements here: www.linkedin.com/psettings/member-cookies and www.linkedin.com/psettings/advertising/actions-that-showed-interest 
Alternatively, you can control your cookie preferences for online advertising across websites via the European platform of the EDAA (European Interactive Digital Advertising Alliance), which helps you to better understand data-driven advertising and offers options to protect your privacy with regard to data protection: www.youronlinechoices.com/

With regard to the data collected from the „Lead Gen Form“ contact form, the user has the option of revoking their consent to the processing of their personal data at any time. To do so, simply send an informal email to jbi.dept.mas@julius-berger.com. In such a case, the conversation cannot be continued. All personal data stored in the course of establishing contact will be deleted in this case.

5. Newsletter

You can subscribe to our free newsletter on our website.

5.1 Scope of data processing

When you subscribe to our newsletter, we process the following personal data:

Name
Email address
IP address of the accessing computer
Date and time of transmission.

Your consent will be obtained during the registration process for the processing of your data. We secure the registration process using a double opt-in procedure. This ensures that the email address provided in connection with the newsletter subscription is actually assigned to you. After you have entered the required data (name, email address) in the respective input masks, you will receive an automated email with an activation link. By confirming the link, you have subscribed to our newsletter.

Our newsletters are sent by rapidmail, a service provided by rapidmail GmbH, Augustinerplatz 2, 79098 Freiburg i.Br., Germany. rapidmail is a service that can be used, among other things, to organize and analyze the sending of newsletters. With the help of rapidmail, we are able to analyze our newsletter campaigns (performance measurement). For example, we can see whether a newsletter message has been opened and which links have been clicked on. This allows us to determine, among other things, which links were clicked on particularly often. We can also see whether certain predefined actions were performed after opening/clicking (conversion rate). Rapidmail also allows us to divide newsletter recipients into different categories („clusters“). Newsletter recipients can be divided according to age, gender, or place of residence, for example. This allows us to better tailor the newsletter to the respective target groups. The data entered by the user for the purpose of receiving the newsletter is managed and stored exclusively within the European Union. Detailed information can be found at https://www.rapidmail.de/datenschutz

5.2 Legal basis

The legal basis for the processing of your personal data is Art. 6 (1) lit. a GDPR.

5.3 Purpose of data processing

The purpose of data processing is to implement the newsletter subscription. The data will be processed exclusively for this purpose. In this context, your data will not be passed on to third parties.

5.4 Duration of storage of your personal data

We store your personal data for the duration of your respective subscription to our newsletter.

Unfortunately, it is not possible to separately revoke the performance measurement, so in this case, the entire newsletter subscription must be canceled or objected to.

Types of data processed:

Inventory data (e.g., names, addresses),
Contact data (e.g., email, phone numbers),
Meta/communication data (e.g., device information, IP addresses),
Usage data (e.g., websites visited, access times).
Data subjects: Communication partners.
Purposes of processing: Direct marketing (e.g., by email or post).
Legal basis: Consent (Art. 6 DSGVO – Rechtmäßigkeit der Verarbeitung – dejure.org), legitimate interests (Art. 6 DSGVO – Rechtmäßigkeit der Verarbeitung – dejure.org)

Right of withdrawal

You have the right to withdraw your consent at any time without giving reasons with effect for the future, for example by clicking on the link to unsubscribe contained in every email.

6.1 Email advertising in connection with our newsletter and document downloads

6.1.1 Scope of data processing

If you subscribe to our newsletter or provide your personal data on our websites in connection with the free download of documents, we will process the personal data you provide in order to send you regular product information by email.

Our advertising emails contain so-called tracking pixels. These are miniature graphics that are embedded in emails sent in HTML format to enable log file recording and statistical log file analysis. The embedded tracking pixel allows us to see whether and when you have opened our promotional email and which links in the email you have clicked on. Our aim here is to optimize our online marketing campaigns.

6.1.2 Legal basis

The legal basis for the processing of your personal data is your consent in accordance with Art. 6 (1) (a) GDPR.

Right of withdrawal

You have the right to withdraw your consent at any time without giving reasons with effect for the future, for example by clicking on the link to unsubscribe contained in every email or by sending a message to jbi.dept.mas@julius-berger.com zusenden.

6.1.3 Purpose of data processing

Zweck der Datenverarbeitung ist die Durchführung von Marketingmaßnahmen. Es erfolgt in diesem Zusammenhang keine Weitergabe Ihrer Daten an Dritte.

6.1.4 Duration of storage of your personal data

We store your personal data until you revoke your consent. Once you have revoked your consent, we will delete your personal data unless you have expressly consented to further use or we reserve the right to further data processing that is permitted by law and about which we inform you in this statement.

You are not obliged to provide your personal data. The provision of such data is neither required by law or contract nor necessary for the conclusion of a contract. However, if you do not provide us with the aforementioned data, it will not be possible to send you product information by email.

7. Email contact

Users can contact us via the email address provided. In this case, we will store the user’s personal data transmitted with the email. The legal basis for data processing is Art. 6 (1) lit. f GDPR. If the purpose of the contact is to conclude a contract, the legal basis for data processing is Art. 6 (1) lit. b GDPR. The data will be used exclusively for processing the contact and subsequent communication. In this context, the data will not be passed on to third parties. The personal data sent to us by email will be deleted once the respective communication with the user has ended, i.e. as soon as it can be inferred from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

8. Career portal – talent pool

On our websites, we offer applicants the opportunity to apply for advertised job vacancies by providing personal data. To simplify the application process, we offer applicants the opportunity to register on our career portal. The data is entered into an input mask, transmitted to us, and stored. The following data is collected:

Title (optional)
First name, last name
User
Email
User’s IP address
Date and time of submission

The applicant will then receive a registration email at the email address provided, containing a link that the applicant can use to confirm their registration and complete the registration process. Once registered, the applicant can open their user account and create their applicant profile by entering their email address and password. The applicant can change their details at any time until they submit their application.

The personal data provided in an application will be processed by us exclusively for the purpose of selecting applicants. When processing applications, we limit ourselves to the information provided directly by the applicants. This may also include information that applicants have stored on professional online networks or job boards. If we ask for the applicant’s gender in the form of the desired salutation as part of the application process, this is solely for the purpose of addressing applicants in the correct manner. The processing of personal data within the framework of the career portal is based on Art. 6 (1) lit. a GDPR, Art. 6 (1) lit. b GDPR, Art. 88 (1) GDPR in conjunction with § 26 BDSG. We delete the data six months after rejecting an application, unless the applicant has consented to the inclusion of their personal data in our talent pool.

We offer applicants who have applied for a specific job advertisement at Julius Berger and whose application documents show that they cannot be considered for this position the option of adding their application to our talent pool and making it available to other departments within Julius Berger for the search for suitable applicants. We contact applicants in advance so that they can decide whether they are interested in this procedure. The processing of personal data within the talent pool is based on Art. 6 (1) (a) GDPR, Art. 6 (1) (b) GDPR, Art. 88 (1) GDPR in conjunction with § 26 BDSG. The data is initially stored in the talent pool for six months. As soon as the applicant logs back into the system with their access data, the six-month period begins again. If the applicant does not update or use their profile for a period of five months, we will request an update of their data from the applicant by email. If the applicant does not update their data, their data will be removed from the talent pool after a further four weeks and blocked for further use. We will delete the personal data after a further six months.

Minors who have not yet reached the age of 16 must send us a declaration of consent from their parents or legal guardians by post, stating that they agree to the minor being included in our talent pool and to the processing of their personal data in accordance with this privacy policy and the consents given.

9. Existing customer advertising

9.1 Scope of data processing

If we have received your personal data (first name, last name, email address) in connection with your participation in an event or within the framework of our contractual customer relationship and you have not objected to this, we reserve the right to send you offers for similar events and other promotional content by email in accordance with Section 7 (3) UWG (German Unfair Competition Act).

Our promotional emails contain so-called tracking pixels. These are miniature graphics that are embedded in emails sent in HTML format to enable log file recording and statistical log file analysis. The embedded tracking pixel allows us to see whether and when you have opened our promotional email and which links in the email you have clicked on. Our aim here is to optimize our online marketing campaigns.

9.2 Legal basis

The legal basis for the processing of your personal data is Art. 6 (1) lit. f GDPR. We have an overriding legitimate interest in advertising to our customers.

Right to object (Article 21 GDPR)

You have the right to object to the processing of your personal data at any time with effect for the future, without incurring any costs other than the transmission costs according to the basic rates, for example by sending an email to jbi.dept.mas@julius-berger.com.

We will then no longer process your personal data unless we can demonstrate compelling legitimate grounds for our processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

9.3 Purpose of data processing

The purpose of data processing is to carry out marketing measures. In this context, your data will not be passed on to third parties.

9.4 Duration of storage of your personal data

You are not obliged to provide your personal data. The provision of data is neither required by law or contract nor necessary for the conclusion of a contract. However, if you do not provide us with the aforementioned data, it will not be possible to send you product information by email.

10. Postal advertising

10.1 Scope of data processingnverarbeitung

We reserve the right to process your personal data (first name, last name, postal address) for the purpose of sending offers and product information by post.

To conduct our surveys, we use Microsoft Forms, a product of Microsoft Ireland Operations Limited („Microsoft“), a subsidiary of Microsoft Inc. in the USA. The data of users from the European Union is processed in data centers within the European Economic Area ( ). However, it may be necessary for the provision of the service and within the scope of support that data is processed at the headquarters of Microsoft Inc. in the USA.

Data transfer to a third country

Data is transferred to locations in countries outside the European Union or the European Economic Area (so-called third countries) through the use of Microsoft Forms, as in individual cases data is transferred outside the country or region in which it was originally collected. This means that data transfers take place between countries in which our service provider Microsoft has facilities. We limit the transfer of data to what is absolutely necessary.

The transfer of your personal data to a third country is carried out in compliance with appropriate safeguards within the meaning of the GDPR in order to ensure compliance with the European level of data protection, in particular through the inclusion of so-called EU standard data protection clauses (SCC) in the contractual relationship with the recipient.

Microsoft has also certified itself under the agreement between the EU and the US (known as the Data Privacy Framework), which permits data transfer. Insofar as the Microsoft website www.Office.com or „Microsoft Forms“ processes personal data or uses cookies, Microsoft is responsible for data processing. To provide the Microsoft Forms service, Microsoft cookies are used on the survey page, over which we have no control. For more information about data protection at Microsoft, see Microsoft’s privacy statement – Microsoft Privacy.

10.2 Legal basis

If you have provided us with your data via our contact form, the legal basis for sending it is Art. 6 (1) (a) GDPR (consent).Otherwise, the legal basis for the processing of your personal data for the purposes of direct mail advertising is Art. 6 (1) lit. f GDPR. We have an overriding legitimate interest in advertising to potential customers.

Right to object (Article 21 GDPR)

You have the right to object to the processing of your personal data at any time with effect for the future, for example by sending an email to jbi.dept.mas@julius-berger.com.

10.3 Purpose of data processing

We pass on your data to our service providers FLYERALARM Mailings (Alfred-Nobel-Str. 18, 97080 Würzburg) and Stober Medien GmbH & Co. KG (Am Eichelgarten 1, 76456 Kuppenheim) within the scope of what is legally permissible. Our service providers are obliged to comply with the applicable data protection regulations. In particular, they may only process your data for the purpose of fulfilling their tasks on our behalf and only in accordance with our instructions. Further information can be found in the data protection notices at https://www.flyeralarm.com/de/i/datenschutzerklaerung and https://stober-medien.de/datenschutz.

10.4 Duration of storage of your personal data

11. Events

11.1 Scope of data processing

You have the option of registering for our events using the forms provided on our websites. The data that is processed can be seen in the respective input forms. Only those fields that are absolutely necessary for the use of the respective offer are marked as mandatory fields in the forms.

11.2 Legal basis

The legal basis for data processing is Art. 6 (1) lit. b GDPR, i.e., the processing of your data is necessary for registration for the event.

11.3 Purpose of data processing

We process the data collected via the forms for the purpose of holding events.

We use Microsoft Forms, a product of Microsoft Ireland Operations Limited („Microsoft“), a subsidiary of Microsoft Inc. in the USA, to conduct our surveys. Data from users in the European Union is processed in data centers within the European Economic Area (EEA). However, it may be necessary for the provision of the service and for support purposes to process data at the headquarters of Microsoft Inc. in the USA.

Data transfer to a third country

11.4 Duration of storage of your personal data

Your data will be deleted after the expiry of the retention periods under commercial law. According to Section 257 (1) of the German Commercial Code (HGB), these are a full 6 years for business documents.

The provision of your personal data is required to register for our events. Failure to provide this data will result in you being unable to participate in our events.

12. Security

Julius Berger uses technical and organizational security measures to protect users‘ personal data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security measures are continuously improved in line with technological developments.

13. Rights of the data subject

If Julius Berger processes your personal data, you are a data subject within the meaning of Art. 4 No. 1 GDPR and have the following rights vis-à-vis Julius Berger.

If you wish to exercise a right, please contact our data protection officer. We would like to point out that in certain cases we may request additional information from you in order to verify your identity. This enables us, for example, to ensure that information is not disclosed to unauthorized persons when exercising the right to information.

Automated decision-making does not take place on our websites.

13.1 Right to information
13.2 Right to rectification
13.3 Right to erasure
13.4 Right to restriction of processing
13.5 Right to be informed
13.6 Right to data portability
13.7 Right to object
13.8 Right to revoke the declaration of consent under data protection law
13.9 Right to lodge a complaint with a supervisory authority

14. Responsibility for content and information

Our website contains links to websites of external providers. We have no influence on this and do not check whether other providers comply with the applicable data protection regulations. If you believe that linked external sites violate applicable law or contain other inappropriate content, please let us know. We will review your report and remove the external link if necessary. We are not responsible for the content and availability of linked external websites.

15. Inclusion and validity of the privacy policy

Due to the further development of our websites or the implementation of new technologies, it may become necessary to amend this privacy policy. We therefore reserve the right to amend the privacy policy at any time with effect for the future. The version available at the time of your visit to the website shall always apply.

As of: September 2025