Privacy policy

We would like to inform you below about the processing of personal data as part of the use of our website. Under Article 4 of the General Data Protection Regulation (GDPR), “personal data” is any information relating to an identified or identifiable natural person (‘ affected person ‘). Identifiable is a natural person who identifies directly or indirectly, in particular by assigning it to an identifier such as a name, to a identification number, to location data, to an online identifier or to one or more special features The expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of this natural person. The legal basis for data protection can be found in the new Federal Data Protection Act (FDPA-new) and the General Data Protection Regulation (GDPR).


The responsible for these websites is Changepoint Systems GmbH (Große Elbstraße 42, 22767 Hamburg). Further information about our company and the persons authorised to represent us can be found in our imprint of our website:

Legal bases for data processing

In order to be able to offer you our website and related services, we process personal data on the basis of the following legal bases:

  • Consent (Art. lit. (a) GDPR)
  • for the performance of contracts (Art. lit. b) GDPR)
  • on the basis of a balance of interests (Art. lit. (f) GDPR)
  • to fulfil a legal obligation (Art. lit. (c) GDPR)

We will refer to the relevant terms in connection with the respective processing, so that you can classify the basis on which we process personal data.

If personal data is processed by you on the basis of your consent, you have the right to revoke your consent at any time with effect for the future towards us.

If we process data on the basis of a balance of interests, you as a concerned event have the right to object to the processing of the personal data, taking into account the requirements of Article 21 of the GDPR.

Purpose of processing personal data

We process the data mentioned herefor the operation of our website and for the fulfilment of contractual obligations towards our customers or the safeguarding of our legitimate obligations. Interests. In the event of enquiries from you outside an active customer relationship, we process the data for purposes of distribution and advertising. You may not use your personal data for object to advertising purposes at any time.

What data is being processed?

Access data

When you visit our website, personal data is processed in order to be able to show you the contents of the website on your device.

In order for the pages to be displayed in your browser, the IP address of the used terminal device. In addition, you will find further information about the browser of your Terminal. The data will also be used to identify errors on the websites and to to be able to fix it.

We are obliged to ensure the confidentiality and integrity of personal data processed with our IT systems. For this purpose and for this purpose, the following data are logged on the basis of a balance of interests:

  • anonymized IP address of the calling computer (for a maximum of 5 days)
  • Operating system of the calling computer
  • Browser version of the calling computer
  • Name of the retrieved file
  • Date and Time Of Retrieval
  • Amount of data transferred
  • referring URL

The anonymised IP address will be deleted from all systems used in connection with the operation of these websites at the latest by five days at the latest.

The data is also used to identify and correct errors on the website.

The processing of the data is carried out in accordance with Art. 1 lit. f) GDPR based on our legitimate interest in improving the stability and functionality of our website.


We offer a contact form on our website, which will provide you with information on our products or services or to make contact in general. The ones you we have required data to answer a request as a mandatory Marked. Information on other data fields is voluntary.

We need this information in order to process your request, to contact you correctly and to provide you with a answer. The data processing is carried out in the case of specific requests for the fulfilment of a contract or the initiation of the contract. In the case of general enquiries, processing is carried out on the basis of a balance of interests.

Enquiries received via the contact form of our website will be sent to us electronically to answer your request. In this context, other persons may also receive departments and, where applicable, third parties are aware of the form content you have sent.

The transmission of the form data over the Internet takes place via encrypted connections.

The processing of the data is carried out in accordance with Art. 1 Lit. Q) GDPR based on our legitimate interest in answering your enquiries. We delete the data as soon as the request is completed.

Voluntary information

Soweit Sie Daten uns gegenüber z.B. in Formularen freiwillig angeben und diese für die ErfüllungInsofar as you voluntarily provide data to us, e.g. in forms, and these are not necessary for the fulfilment of our contractual obligations, we process this data on the legitimate assumption that the processing and use of these data in your interest.

Recipients / Disclosure of data

However, data that you provide to us will not be passed on to external third parties only after consent. In particular, your data will not be to third parties for their advertising purposes.

However, we may provide service providers for the operation of these websites or for other products services from us. In this regard, a service provider may become aware of personal data. We carefully select our service providers, especially in the data protection and data security – and all data protection necessary measures for permitted data processing.

Where is the data processed?

Your applicant data will only be processed in data centers of the Federal Republic of Germany.

Insofar as personal data is processed outside the European Union, you can find out from the previous statements.

Supplementary data protection information for applicants

The following data will be collected in connection with your application in our company:

Data collection of applicants

We process personal data that you have sent us in connection with your application in order to check your suitability for the position (or any other open positions) and to carry out the application process. The processing of the applicant data is carried out on the basis of Section 26 of the German Data Code (BDSG).

Period of data storage

Data of applicants applying for internal posts will be deleted after six months in the event of cancellation, provided that no other legitimate interests of the controller are superstitled.

If you have received a commitment for a job during the application process, the data will be transferred to our hr information system.

Data of applicants applying for project-related positions will remain in our pool of applicants for the entire duration of placement, as is the case with the statutory retention periods for the respective performance of the tasks. is required.

Furthermore, their data will be deleted after two years, unless they have given us consent for further storage.


Forthe application process, a specially developed software solution is used.. The applicant data will be processed after receipt of the Application spotted by the HUMAN Resources department. Appropriate applications are forwarded internally to the department managers for the respective open position. Then it will be the further course of events. In the company, only the persons who need it for the proper conduct of our application process have access to your data.

We collect, store and process your transmitted personal data only if this is necessary for the processing of enquiries or the processing of orders and if you have previously consented. You have the right to revoke consent with effect for the future at any time.

In order to best support you in your application efforts, we pass on your personal data to our eaffiliatedn company in order to make a matching e to be able to check for other projects. In addition, your data will not be passed on to third parties without agreement. The data will only be passed on to third parties in excess of consent if we are obliged to do so due to mandatory legal regulations or if you determine this yourself.


All necessary technical and organisational security measures to protect your personal Protecting data from loss and misuse is taken by us. In this way, your data will be a secure operating environment that is not accessible to the public. Your data when transmitted by so-called transport layers, Security (TLS). The means that the communication between your computer and our servers is made using a recognised encryption method.

Existence of an automated decision making process

As a responsible company, we refrain from automatic decision-making. profiling.

Data protection supervisor

We are not obligated to data protection officer. Questions about the data shedz can be sent to send For other purposes, the use of this e-mail address is expressly prohibited.

Your rights as a person affected

You have the right to information about the personal data concerning you. You can contact us at any time for information. In the event of a request for information that is not made in writing, we ask for your understanding that we require you to provide evidence that proves that you are the person for whom you are Spend. You also have the right to rectification or deletion or to restrict processing, to the extent that you are legally entitled to do so.

Finally, you have a right of objection to the processing within the framework of the statutory Specifications. The same applies to a right to data portability. In particular, if you wish to exercise a right of objection to the processing of your data on the basis of a balance of interests, you must expect that we will subject this to a thorough examination. We have carefully weighed up our interests here. So please read Article 21 GDPR carefully and expect that we will also ask questions about the “special situation” here. i.S.d. Art. 21 Abs.1 GDPR.

Finally, you also have a right to data portability. Here, too, this is only granted within the scope of the legal requirements.

Deletion of data

We will generally delete personal data if there is no requirement for further storage exists. A requirement may exist in particular if the data is still needed in order to fulfil contractual services, to check warranty and, if applicable, warranty claims and be able to grant or fend off. In the case of statutory retention obligations, a deletion only after the expiry of the respective retention obligation.

Right of appeal to a supervisory authority

You have the right to complain about the processing of your personal data by us in a supervisory authority. The competent supervisory authority is governed by the their place of residence, work or alleged violation.


We use cookies on our websites. By using cookies, it is possible to optimize the website in the interests of the user and to provide user-friendly services. Cookies are small text files that are stored on your computer system. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser the next time you visit. When cookies are set, they collect and process specific user information such as browser and location data as well as IP address values. Cookies are automatically deleted after a predetermined duration, which may vary depending on the cookie.

In some cases, the cookies are used to simplify the visit to the website by storing settings. Insofar as individual cookies implemented by us also process personal data, the processing takes place in accordance with Art. lit. b GDPR either for the implementation of the contract or in accordance with Article 6(3) 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit. In the case of cookies that are not necessary, but for the purpose of marketing measures and their tracking, cookies are used on the basis of consent in accordance with Art. lit a GDPR. I.e., You must give your consent to the processing and use of these cookies in advance. We are using a so-called “so-called” for this. Consentmanagement tool (often also “cookie banner” which you have the opportunity to change your decision.

The following cookies are used by us:


Google Webfont

We use so-called Google Webfonts on our websites A. In doing so, fonts from servers of Google, which serve to better design the website. The Data processing is carried out on the basis of a balance of interests, whereby our interest in a attractive design of the website.

The fonts in question are loaded from Google servers, which are usually located in the U.S. The appropriate level of data protection is guaranteed by Google (list entry “Privacy Shield”).

Google reCAPTCHA

In order to ensure sufficient data security in the transmission of forms, we use in certain cases the service reCAPTCHA Google Inc. This serves to in particular to distinguish whether the input is caused by a natural person is or abusively by machine and automated Processing. The service includes the sending of the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google A. The different data protection regulations of Google apply to this Inc. Learn more about Google’s privacy policies Inc. can be found at or


Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer) art. lit. f) GDPR, we use the Marketing and remarketingservices (Google Marketing Services) of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, (“Google”). Google is under the Privacy Shield Agreement is certified and offers this provides a guarantee that european data protection law. Further information for this purpose, please visit the Google LLC website in the Privacy (

Google’s marketing services enable us to target advertisements for and on our website Display. This presents users with ads that potentially suit their interests. Of Remarketing” is when a user is shown, for example, advertisements for products for which he was interested on other websites. For these purposes, when we and other websites on which Google Marketing Services are accessed, directly executed by Google a code of Google and so-called (Re)marketing tags (invisible graphics or code, also known as “Web Beacons”) into the website. This creates an individual cookie on the user’s device, i.e. a small file. The cookies can be set by different domains, under,,,, or This file indicates the content for which the user is and which website he visited. It also records which offers he clicked which referton websites, technical information about the browser and operating system, Visit time and other information on the use of the online offer.

Google Adwords

We use the Google advertising tool “Google-Adwords” to promote our website” one. Under we use the analysis service“Conversion-Tracking”of thecompany Google on our website Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, “Google.” If you have a Google ad has reached our website, a cookie is stored on your computer. These so-called “conversionConversioncookies” expire after 30 days and do not serve your personal identification. Visit certain pages of our website and the cookie is still not expired, we and Google can recognize that you, as a user, are referred to one of our Google placed ads and have been redirected to our site. The information obtained by means of the “conversionConversioncookies” is used by Google to: To create visit statistics for our website. Through these statistics, we learn the Total number of users who have clicked on our ad and also which pages of our website were subsequently accessed by the respective user. We or others via “GoogleAdwords However, advertisers do not receive any information that users personally identify with let.

You can prevent the installation of the “conversionConversioncookies” by setting your browseraccordingly, for example by means of a browser setting, which generally disables the automatic setting of cookies or specifically only blocks the cookies from the domain “”. Google’s privacy policy can be found at the following link:

Doubleclick Ad Exchange

This Website Uses the online marketing tool Doubleclick. Once Doubleclick Ad Exchange, a web ad service of Google Inc., USA (“Google”), which advertises advertising (text ads, banners, etc.) on this website, may store a cookie sent by Google Inc. or third parties. The stored information may be recorded, collected and evaluated by Google Inc. or third parties. In addition, the Doubleclick Ad Exchange for the collection of information also so-called “WebBeacons” (small invisible graphics), by their use of them simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated (by cookie and/or WebBeacon) via your use of this website will be transmitted to a Google server in the USA and stored there as well. In order to ensure that an evaluation of their usage behaviour with regard to Doubleclick Ad Exchange ads, Google uses the information obtained in this way. This information may also be transferred to third parties by Google if this is required by law or if third parties process this data on Google’s behalf.

If IP addresses are transmitted and stored in this context, this will only take place for the fight and filtering of spam/ic scams (ad impressions-spam and click spam).

This data is only accessible to anti-abuse teams. Google does not associate the IP address with other data stored by Google.

On this website Can Web Analysis ToolE Of Indeed (Indeed Ireland Operations, Ltd., 124 pcs. Stephen’s Green, Dublin 2 Ireland) Conversion Tracker used. For the analysis of the use of the website and (if applicable) certain usage data that your browser transmits is collected and collected by Indeed Evaluated. In order to collect this usage data, you can Indeed use one or more cookies. It also transmits the IP address assigned to your device at the time, as well as a browser-specific identifier. The IP address is required solely for session identification and geolocation (up to city level).


This website uses Matomo, an open source, self-hosted software to collect anonymous usage data for this website. Data on visitors’ behaviour is collected, to find out any problems such as undiscovered pages, search engine problems, or unpopular pages. As soon as the data (number of visitors see the error pages or only one page, etc.) are processed, the Matomo reports for website operators so they can respond to them.

Matomo processes the following data:

  • Cookies
  • Anonymized IP addresses by removing the last 2 bytes (i.e. instead of
  • Pseudoanonymized location (based on anonymized IP address
  • Date and time
  • Title of the page accessed
  • URL of the page accessed
  • URL of the previous page (if it allows)
  • Resolution
  • Local time
  • Files that have been clicked and downloaded
  • External links
  • Duration of page construction
  • Country, region, city (low accuracy due to IP address)
  • Main language of the browser
  • User Agent of the browser
  • Interactions with forms (but not their contents)

At Matomo, all your data can be sent torequired. You can also request at any time that Matomo completely deletes all your dataand contradicts the data collection by using DoNotTrack in your browser Select.

Online presence on social media

We maintain online presences within social networks and platforms in order to active customers, prospects and users. We inform our customers about benefits. The terms and conditions and the data processing guidelines are based on the when calling for the respective operators of the respective networks.

We only process the data of the users if they are connected to us within the social networks Communicate. This would be the case if users write posts on our online presences or send us messages.

Consent Newsletter

It is possible to visit our website also subscribe to an e-mail newsletter to inform you about new offers. Inform. In addition to the voluntary information in the form only your e-mail address. However, this is also mandatory. The processing of the data for the newsletter is based on a consent in accordance with Art. 1 Lit. a GDPR, where the e-mail address must be confirmed by aopt so-called “doubleopt-in” procedure.
In order to increase the popularity of our analyze newsletter broadcasts and optimize them, We log when emails have been opened and links have been clicked. This usage analysis is carried out on the basis of a Weighing up interests in accordance with Art. 1 lit f GDPR. You can The the processing at any time by unsubscribe from the newsletter.

Newsletter via CleverReach

We use the CleverReach component to send our newsletters. CleverReach is a service provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede, Germany. Your data stored at the newsletter registration (e-mail address, name, IP address, date and time of your registration) will be transferred to a server of The company CleverReach GmbH & Co. KG in Germany and stored there. The data protection regulations of the shipping service provider can be viewed at the following The legal basis for the establishment of the shipping service provider is based on Article 6 Abs. 1 lit.f) GDPR for the protection of our legitimate interests and an order processing contract in accordance with Art. 28 P.1 GDPR. 3 S.1 GPRD. The shipping service provider does not use the data of our newsletter recipients to write it down or to pass on data to third parties. You can unsubscribe from the newsletter at any time. Alternatively, you will find a link to unsubscribe in each newsletter email.

YouTube Videos

Our website includes YouTube videos stored on by YouTube LLC, headquartered at 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter YouTube) and can be playable directly from our website. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheatre Pkwy,Mountain View, CA 94043-1351, USA..

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This is done regardless of whether this third party provides a user account through which you are logged in or whether there is no user account.

If you are logged in to YouTube, this data will be assigned directly to your account. If you do not want to be assigned to your profile on YouTube, you must log out before activating the button. YouTube stores this data as user profiles and uses it for the purposes of advertising, market research and/or the design of its website according to needs. Such an evaluation is carried out in particular (even for non-logged-in users) for the provision of demand-oriented advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact YouTube in order to exercise this.

For more information on the purpose and scope of data collection and its processing by YouTube and Google, please visit their websites in the area of data protection. There you will also find more information about your rights in this regard and settings options to protect your privacy.

You can object to the use of YoutTubevideos if you do so in our CookieConsetmanager.

The legal basis for this processing of the data is your consent in accordance with Article 6 sec. 1 Lit. a GDPR.

Facebook Pixel / Facebook Conversion Tracking

For the purpose of analysing and optimising our website, Facebook is used on our website to Conversion Tracking, the so-called “Facebook pixel” of the social network Facebook. These services are provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. If you are resident in the EU, the provider of the services is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter “Facebook”).

By using the Facebook pixel, Facebook is able to identify and identify visitors to our website as a potential target group for the display of ads (so-called “Facebook ads”). So we use the Facebook pixel to display the Facebook ads we run only to those Facebook users who have also shown an interest in our website or who have certain characteristics (interests that are determined by websites visited, etc.). We transmit this information to Facebook and thus form so-called “Custom Audiences“. By using the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of visitors and are not perceived as harassment. By using the Facebook pixel, we can understand the effectiveness of Facebook ads statistically and for the purpose of market research. We analyze whether visitors are redirected to our website after clicking on a Facebook ad, i.e. whether a so-called “Conversion” takes place.

There are general instructions on the processing of data by Facebook. Further information and details about the Facebook pixel can be found here: Facebook is certified under the Privacy Shield and thus offers a guarantee to comply with the European data protection level (

You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set the types of ads you see within Facebook, you can go to the page set up by Facebook and follow the usage-based advertising settings: The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

You can object to the use of the Facebook pixel if youset this in our CookieConsetmanager.

The legal basis for this processing of the data is your consent in accordance with Article 6 sec. 1 Lit. a GDPR.

Using LinkedIn

We use the conversiontracking technology and the retargetingfunction of LinkedIn Corporation on our website. -Funktion der LinkedIn Corporation.

This technology allows visitors to this website to run personalized ads on LinkedIn. It also provides the ability to generate anonymous reports on the performance of the ads, as well as information about website interaction. For this purpose, the LinkedIn Insight tag is integrated on this website, which establishes a connection to the LinkedIn server, provided that you visit this website and are logged into your LinkedIn account in parallel.

The LinkedIn Privacy Policy at provides more information about data collection and use, as well as ways and rights to protect your privacy. If you are logged in to LinkedIn, you can deactivate the data collection at any time at the following link:

You can object to the use of the LinkedIn pixel if youset this in our CookieConsetmanager.

The legal basis for this processing of the data is your consent in accordance with Article 6 sec. 1 Lit. a GDPR.


If you participate in one of our trainings, we will process your name and email address for the purpose of planning and running the event.

If you have booked the event via a corresponding partner portal, the information will be provided by the latter. We then process your data on the basis of the legal basis Of Art. lit. (b) GPRD.

Modification of the data protection notices

We revise these data protection notices in the event of changes to this website or other occasions that require this. The current version can always be found on this Website.