Last updated: July 2026
We are delighted that you have taken an interest in our company and our website. The protection of your personal data is important to us. Below, we explain what personal data we process when you visit our website, contact us or apply for a job, the purposes for which this is done, and what rights you have.
This privacy policy applies to the website: www.am-labor.de
The data controller within the meaning of the General Data Protection Regulation, the Federal Data Protection Act and other data protection legislation is:
A&M STABTEST Labor für Analytik und Stabilitätsprüfung GmbH
Kopernikusstraße 6
50126 Bergheim
Germany
Telephone: +49 (0) 2271 7559-100
Fax: +49 (0) 2271 7559-200
Email: bergheim@am-labor.de
Our Data Protection Officer is:
Ms Stefanie Steeg
A&M STABTEST Laboratory for Analysis and Stability Testing GmbH
Kopernikusstraße 6
50126 Bergheim
Germany
Email: datenschutz@am-labor.de
You may contact our Data Protection Officer at any time with any questions regarding data protection or the exercise of your rights as a data subject.
We process personal data only to the extent necessary to provide our website, to communicate with you, to process job applications, to fulfil legal obligations or to safeguard legitimate interests. Where consent is required for specific processing operations, we will obtain it in advance.
Depending on the processing operation, we base the processing of personal data in particular on the following legal grounds:
Personal data will only be disclosed to the extent that this is necessary or permitted by law. Recipients may include, in particular:
Where service providers process personal data on our behalf, we enter into data processing agreements with them in accordance with Article 28 of the GDPR.
We only store personal data for as long as is necessary for the respective purposes. After that, the data will be deleted, provided there are no statutory retention obligations, obligations to provide evidence or legitimate interests in further storage.
Where no specific retention period is stated in this privacy policy, the statutory retention periods or the period required to process the relevant matter shall apply.
Personal data will only be transferred to countries outside the European Union or the European Economic Area to the extent permitted under the GDPR.
When using Google services, in particular Google Analytics and Google Maps, the transfer of personal data to Google LLC in the USA cannot be ruled out. For the USA, the European Commission has issued an adequacy decision for companies certified under the EU-US Data Privacy Framework. Google LLC is certified under the EU-US Data Privacy Framework.
Where data is transferred to a third country beyond this, we ensure that appropriate safeguards are in place in accordance with Article 44 et seq. of the GDPR, in particular through EU Standard Contractual Clauses or other legally prescribed safeguards.
We do not carry out any automated decision-making, including profiling within the meaning of Article 22 of the GDPR.
When you visit our website, information that your browser transmits to our server or to our hosting provider is processed automatically.
In particular, the following data may be processed:
The processing of this data is necessary to provide the website from a technical perspective, to ensure the stability and security of the website, and to be able to detect attacks or misuse.
Legal basis: Article 6(1)(f) of the GDPR.
Our legitimate interest lies in the secure, stable and error-free provision of our website.
Server log files are generally deleted or anonymised after seven days at the latest, unless longer storage is required to investigate security incidents.
Our website is hosted by the following provider:
STRATO GmbH
Otto-Ostrowski-Straße 7
10249 Berlin
Germany
When you visit our website, STRATO processes, in particular, technical access data – including IP addresses – in server log files. According to STRATO, IP addresses are stored for a maximum of seven days for the purpose of detecting and defending against attacks. STRATO also provides a data processing agreement in accordance with Article 28 of the GDPR.
Data processing by STRATO is carried out for the purpose of ensuring the secure and reliable provision of our website.
Legal basis: Article 6(1)(f) of the GDPR.
Our legitimate interest lies in the secure and efficient provision of our online services.
For security reasons, our website uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address bar of your browser begins with ‘https://’ and a padlock icon is displayed.
When SSL or TLS encryption is enabled, data that you send to us cannot, in principle, be read by third parties.
Our website uses cookies and similar technologies. Cookies are small text files that are stored on your device. Similar technologies may include, in particular, local storage, session storage, pixels or similar methods.
We distinguish between technically necessary cookies and cookies or services that require your consent.
Technically necessary cookies are essential for the website to function properly. These include, in particular, cookies required for the display of the website, the storage of your cookie settings, or the security of the website.
Legal basis for accessing your device: Section 25(2) of the TDDDG.
Legal basis for the processing of personal data: Article 6(1)(f) of the GDPR or Article 6(1)(c) of the GDPR, insofar as the processing is necessary to fulfil legal documentation obligations.
Our legitimate interest lies in the technically fault-free and secure provision of our website.
Where we use cookies or similar technologies that are not technically necessary, we do so only on the basis of your prior consent.
This applies in particular to:
Legal basis for accessing your device: Section 25(1) of the TDDDG.
Legal basis for the processing of personal data: Article 6(1)(a) of the GDPR.
You may withdraw or amend your consent at any time with future effect. You can access the relevant settings via the cookie or privacy settings on our website.
We use the consent management tool Real Cookie Banner on our website. Real Cookie Banner is used to obtain, manage and document consent for cookies and similar technologies.
In particular, the following information may be processed:
This processing is carried out in order to obtain and verify your consents in accordance with the law. Real Cookie Banner is operated on the website as a WordPress plugin. According to the provider, documented consents are generally stored on the web space of the respective website and are not transferred to the plugin provider’s servers.
Legal basis for the use of technically necessary cookies: Section 25(2) of the TDDDG.
Legal basis for the documentation of consents: Article 6(1)(c) of the GDPR.
Supplementary legal basis: Article 6(1)(f) of the GDPR.
Our legitimate interest lies in the legally compliant management and documentation of consents.
We use Google Analytics 4, a web analytics service provided by Google, on our website.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
Google Analytics helps us to understand how visitors use our website. This enables us to improve our online offering, optimise content and analyse website usage statistically.
Google Analytics may, in particular, process the following data:
We only use Google Analytics 4 if you have previously given your consent via our consent management tool.
Legal basis for accessing your device: Section 25(1) of the TDDDG.
Legal basis for the processing of personal data: Article 6(1)(a) of the GDPR.
IP anonymisation is enabled. According to Google, data from devices within the EU is initially collected via EU-based servers in Google Analytics; IP-based location queries are carried out on EU-based servers before data is forwarded to Analytics servers for further processing.
The data processed as part of Google Analytics may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework.
You may withdraw your consent at any time via the cookie or privacy settings on our website.
The retention period for event data in Google Analytics is 6 months.
We embed Google Maps on our website, in particular to display our location and to make it easier for visitors to plan their journey.
The provider is:
Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland
If you consent to the embedding of Google Maps or access a page with an actively embedded Google Maps map, personal data may be transmitted to Google. This may include, in particular:
We only integrate Google Maps with your prior consent. The map will not load without your consent.
Legal basis for accessing your device: Section 25(1) of the TDDDG.
Legal basis for the processing of personal data: Article 6(1)(a) of the GDPR.
When using Google Maps, personal data may be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework.
You can withdraw your consent at any time via the cookie or privacy settings on our website.
Our website may contain links to articles or profiles on LinkedIn. These are simply external links. Unless you specify otherwise, we do not use the LinkedIn Insight Tag on our website.
When you click on a LinkedIn link, you leave our website. LinkedIn is generally responsible for the data processing that takes place thereafter.
The provider for users in the EU is usually:
LinkedIn Ireland Unlimited Company
Wilton Place
Dublin 2
Ireland
When you visit LinkedIn, LinkedIn may process personal data, particularly if you are logged into your LinkedIn account. We have no influence over the nature or scope of the data processing carried out by LinkedIn.
Data is only transferred to LinkedIn via our website once you actively click on the relevant external link.
If you contact us by email, we will process the personal data you provide. This may include, in particular:
This data is processed in order to handle your enquiry and to communicate with you.
Legal basis: Article 6(1)(f) of the GDPR.
Our legitimate interest lies in processing and responding to your enquiry.
If your contact is aimed at concluding or performing a contract, the additional legal basis is Article 6(1)(b) of the GDPR.
We generally store general contact enquiries for six months after processing has been completed. Data may be retained for a longer period where statutory retention obligations apply or where further retention is necessary for the establishment, exercise or defence of legal claims.
You may object to the processing of your personal data at any time, provided that the processing is based on Article 6(1)(f) of the GDPR. In such cases, it may not be possible to continue the communication.
You can apply for advertised vacancies via our website. An online application form is available alongside each job advertisement. Alternatively, applications may also be submitted by email.
As part of the application process, we process the following personal data in particular:
The current application form specifically provides for the upload of your CV, certificates/qualifications and other documents. It also includes an optional choice to have your details stored in an internal applicant database for up to six months.
The processing is carried out for the purposes of conducting the application process, deciding on the establishment of an employment relationship and communicating with you.
Legal basis: Section 26(1) of the German Federal Data Protection Act (BDSG) in conjunction with Article 6(1)(b) of the General Data Protection Regulation (GDPR).
Where you provide us with special categories of personal data, such as health data, details of a severe disability or comparable sensitive information, we will only process this data to the extent that it is necessary for the application process or where you provide this data to us voluntarily.
Legal basis: Article 9(2)(b) of the GDPR in conjunction with Section 26(3) of the BDSG, insofar as the processing is necessary for the exercise of rights or the fulfilment of legal obligations under employment law. Where the processing is based on your voluntary provision of data, Article 9(2)(a) of the GDPR may serve as the legal basis.
Access to application data is restricted to those persons and departments responsible for processing the application, in particular HR managers and the relevant specialist departments.
If no employment relationship is established, we will generally delete your application data no later than six months after the conclusion of the application process, provided that there are no statutory retention obligations or that longer storage is necessary for the assertion, exercise or defence of legal claims.
If an employment relationship is established, the necessary application data will be transferred to the personnel file and processed in accordance with the regulations applicable to employee data.
Provided you give your express consent, we will store your application details in our internal applicant database for up to six months so that we can contact you again should suitable vacancies arise.
Legal basis: Article 6(1)(a) of the GDPR.
You may withdraw your consent at any time with future effect. You may withdraw your consent by emailing datenschutz@am-labor.de. Following withdrawal, we will delete your data from the applicant database, provided there are no statutory retention obligations or legitimate grounds for further storage.
We do not send out a newsletter via our website. Personal data is therefore not processed for newsletter purposes.
You have the following rights in accordance with the relevant legal provisions:
You have the right to request information as to whether we process personal data about you. If this is the case, you are entitled to information about this data and the circumstances of its processing.
You have the right to request the rectification of inaccurate personal data. Taking into account the purposes of the processing, you also have the right to request that incomplete personal data be completed.
You have the right to request the erasure of your personal data, provided that the legal requirements are met. This applies in particular where the data is no longer necessary for the purposes for which it was collected, or where you have withdrawn your consent and there is no other legal basis.
The right to erasure does not apply where processing is necessary for compliance with a legal obligation, for the establishment, exercise or defence of legal claims, or for other reasons provided for by law.
You have the right to request that the processing of your personal data be restricted, provided that the legal conditions are met.
You have the right to receive personal data that you have provided to us and which we process automatically on the basis of your consent or for the performance of a contract, in a structured, commonly used and machine-readable format. You also have the right to have this data transmitted to another data controller, insofar as this is technically feasible.
You have the right to object at any time to the processing of personal data on grounds relating to your particular situation, provided that the processing is based on Article 6(1)(e) or Article 6(1)(f) of the GDPR.
We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
Where personal data is processed for the purposes of direct marketing, you have the right to object to such processing at any time. In this case, the data will no longer be processed for the purposes of direct marketing.
If you have given us your consent, you may withdraw it at any time with effect for the future. The lawfulness of the processing up to the point of withdrawal remains unaffected.
You have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data breaches data protection law.
The supervisory authority responsible for us is:
State Commissioner for Data Protection and Freedom of Information, North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Telephone: 0211 38424-0
Email: poststelle@ldi.nrw.de
Website: www.ldi.nrw.de
The contact details of the relevant data protection supervisory authority are also listed on the website of the Federal Commissioner for Data Protection and Freedom of Information.
To exercise your data protection rights or if you have any questions regarding data protection, you can contact us at any time:
A&M STABTEST Laboratory for Analysis and Stability Testing GmbH
Kopernikusstraße 6
50126 Bergheim
Germany
Email: datenschutz@am-labor.de
Please note that, in the case of enquiries regarding personal data, we may need to verify your identity to ensure that personal data is not disclosed to third parties without authorisation.
We reserve the right to amend this privacy policy should our website, the services we use, legal requirements or internal processes change.
The latest version is available on our website.