Privacy Notice

In accordance with Article 13 of the EU General Data Protection Regulation (GDPR), we are providing you with information regarding which of your personal data is being processed.

Data Controller

The entity responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:

Pecan Development GmbH
Managing Directors: Markus Brod, Rüdiger Lehmann, Jan Kunze
Bockenheimer Landstr. 72
60323 Frankfurt am Main
Germany

Phone: +49 (0) 69 71 44 988 0
Email: info@pecan.de

General Information

Legal Basis

In general, we collect and process personal data based on the following legal grounds:

  1. Consent pursuant to Article 6(1)(a) of the General Data Protection Regulation (GDPR). Consent is any freely given, specific, informed, and unambiguous indication of the data subject’s wishes, expressed by a statement or by a clear affirmative action, by which the data subject indicates that they consent to the processing of their personal data.
  2. Necessity for the performance of a contract or the implementation of pre-contractual measures pursuant to Article 6(1)(b) of the GDPR, i.e., the data is necessary for us to fulfill our contractual obligations toward you, or we need the data to prepare for the conclusion of a contract with you.
  3. Processing to comply with a legal obligation pursuant to Article 6(1)(c) of the GDPR, i.e., processing of the data is required, for example, by law or other regulations.
  4. Processing to protect legitimate interests pursuant to Article 6 (1)(f) of the GDPR, i.e., processing is necessary to protect our legitimate interests or those of third parties, unless your interests or fundamental rights and freedoms that require the protection of personal data take precedence.

The specific legal bases for the individual processing activities are listed in the following sections.

Data Subject Rights

You have the following rights regarding our processing of your data:

  1. The right to lodge a complaint with a supervisory authority pursuant to Article 13(2)(d) of the GDPR and Article 14(2)(e) of the GDPR
  2. Right of access pursuant to Article 15 of the GDPR
  3. Right to rectification pursuant to Article 16 of the GDPR
  4. Right to erasure (“right to be forgotten”) pursuant to Article 17 of the GDPR
  5. Right to restriction of processing pursuant to Article 18 of the GDPR
  6. Right to data portability pursuant to Article 20 of the GDPR
  7. Right to object pursuant to Article 21 of the GDPR

Note: Users may object to the processing of their personal data at any time, with future effect, in accordance with legal requirements. In particular, the objection may be directed against processing for direct marketing purposes.

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your workplace, or the location of the alleged infringement, if you believe that the processing of your personal data violates the GDPR.

Data Erasure and Retention Period

The data subject’s personal data will be erased or blocked as soon as the purpose for which it was stored no longer applies. Data may also be retained if this is provided for by European or national legislation in Union regulations, laws, or other provisions to which the controller is subject. Data will also be blocked or erased when a retention period prescribed by the aforementioned standards expires, unless further storage of the data is necessary for the conclusion or performance of a contract.

Security of Processing

We have implemented appropriate technical and organizational security measures (TOMs) that are state-of-the-art. This protects the data we process from accidental or intentional manipulation, loss, destruction, and unauthorized access.
These security measures include, in particular, the encrypted transmission of data between your browser and our server.

Data Transfer to Third Parties, Subcontractors, and Third-Party Providers

Personal data is transferred to third parties only in accordance with legal requirements. We disclose user data to third parties only when necessary, for example, for billing purposes, or for other purposes where the transfer is necessary to fulfill contractual obligations toward users.

If we use subcontractors for our online services, we have put in place appropriate contractual arrangements as well as corresponding technical and organizational measures with these companies.

If we use content, tools, or other resources from other companies (hereinafter collectively referred to as “third-party providers”) and their registered office is located in a third country, it can be assumed that a data transfer to the third-party providers’ countries of residence will take place. We transfer personal data to third countries only if an adequate level of data protection is ensured, the user has given consent, or another legal basis exists.

Data Processing in Connection with Our Online Services

Hosting and Server Log Files

Our website’s servers are operated by the provider Host Europe GmbH, Friesenplatz 4, 50672 Cologne. We have entered into a data processing agreement with the provider in accordance with Art. 28 of the GDPR. The legal basis for using an external hosting provider is the fulfillment of a contract with our potential and existing customers pursuant to Article 6(1)(b) of the GDPR, as well as our legitimate interest in providing our website securely and efficiently pursuant to Article 6(1)(f) of the GDPR.

Each time our website is accessed, our system’s web server collects information about the device used. We collect the following data:

  • Information about the browser type
  • Operating system of the user’s device
  • Date and time of access
  • The previous website from which the user accessed our website (referrer)

We collect IP addresses only in anonymized form; therefore, we do not store any personal data as defined by the GDPR in our log files.

The server is located in Germany.

WPML

This website uses the WordPress language plugin WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong, to offer German and
English language versions of the website.

WPML uses cookies to determine the visitor’s current language, the language last visited, and the language of logged-in users.

Information about the cookies used can be found at https://wpml.org/documentation/support/browser-cookies-stored-wpml.

Collection of Information Regarding Website Usage

When using the website, information is automatically transmitted to us from the user’s browser; including the name of the webpage accessed, the file, the date and time of access, the amount of data transferred, a notification of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), the IP address, and the requesting provider.

This information is processed on the basis of legitimate interests pursuant to Article 6(1)(f) of the GDPR (e.g., optimizing our website) as well as to ensure the security of processing in accordance with Article 5(1)(f) of the GDPR (e.g., to defend against and investigate cyberattacks).

The information is automatically deleted no later than 14 days after the end of the connection—i.e., use of the website—unless other retention periods apply.

The collection and storage of data in log files is strictly necessary for the provision of the website. Therefore, the user has no right to erasure, objection, or rectification.

Contact Form

If you submit inquiries to us via the contact form, the information you provide in the inquiry form—including the contact details you enter there—will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose this data without your consent.

The processing of the data entered into the contact form is therefore based exclusively on your consent (Art. 6(1)(a) GDPR). You may revoke this consent at any time with future effect. To do so, simply send us an informal email. The lawfulness of the data processing operations carried out up until the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you request its deletion, revoke your consent to its storage, or the purpose for storing the data no longer applies (e.g., after your inquiry has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected.

Links to Other Websites

While using some of our services, you may be automatically redirected to other websites.

Please note that this Privacy Policy does not apply to those sites. The privacy policy of the linked website may differ significantly from this one.

Processing for the Purpose of Carrying Out Our Business Processes

Job Applications

For the sake of readability, the following explanations will use gender-neutral language rather than specific masculine, feminine, or diverse forms. All references to persons apply to all genders: m/f/d.

Direct Applications

We offer you the opportunity to apply for a position with us (e.g., via email or mail). Below, we provide information about the scope, purpose, and use of your personal data collected as part of the application process. We assure you that the collection, processing, and use of your data are carried out in accordance with applicable data protection laws and all other legal provisions, and that your data will be treated as strictly confidential.

When you submit an application to us, we process your associated personal data (e.g., contact and communication information, application documents, notes taken during job interviews, etc.) to the extent necessary to decide whether to establish an employment relationship. The legal basis for this is Article 6(1)(b) of the GDPR (pre-contractual measures) and—if you have provided consent—Article 6(1)(a) of the GDPR. You may withdraw your consent at any time. Your personal data will be shared within our company exclusively with individuals involved in processing your application.

If your application is successful, the data you submitted will be stored in our data processing systems pursuant to Article 6(1)(b) of the GDPR for the purpose of carrying out the employment relationship.

If we are unable to offer you a position, if you decline a job offer, or if you withdraw your application, we reserve the right to retain the data you submitted on the basis of our legitimate interests (Article 6(1)(f) of the GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application). Afterward, the data will be deleted and the physical application documents will be destroyed. Retention serves, in particular, as evidence in the event of a legal dispute. If it becomes apparent that the data will be required after the 6-month period has expired (e.g., due to an impending or pending legal dispute), the data will not be deleted until the purpose for continued retention no longer applies.

Data may also be retained for a longer period if you have provided your consent (Art. 6(1)(a) GDPR) or if statutory retention requirements prevent deletion.

Inclusion in the Candidate Pool

If we do not offer you a position, there may be the option to add you to our applicant pool. If you are added to the applicant pool, all documents and information from your application will be transferred to the applicant pool so that we can contact you should suitable vacancies arise.

Inclusion in the applicant pool is based exclusively on your explicit consent (Art. 6(1)(a) GDPR). Providing consent is voluntary and is unrelated to the ongoing application process. The data subject may withdraw their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no legal grounds for retention.

Data from the applicant pool will be irrevocably deleted no later than two years after consent is granted.

Contacting Us via Email

When you contact us via email, the data provided by the user will be processed exclusively for the purpose of handling and resolving the inquiry.

Any other use of the data is permitted only with the user’s separate consent.

The statutory retention periods for business correspondence apply.

Cookies and Similar Technologies

General Information

Cookies are pieces of information that are transmitted from our web server or third-party web servers to users’ web browsers and stored there for later retrieval. Cookies may be small files or other forms of information storage.

If users do not wish to have cookies stored on their computers, they are asked to disable the corresponding option in their browser’s settings. Stored cookies can be deleted in the browser’s settings. Disabling cookies may result in limited functionality of this website.

Cookie Overview, Options for Objection

We use only necessary cookies and similar technologies; therefore, there are no options to object.

Changes to the Privacy Policy

We reserve the right to amend this Privacy Policy with regard to data processing in order to adapt it to changes in the legal landscape, changes to the online service, or changes in data processing.

If user consent is required or if parts of the Privacy Policy contain provisions governing the contractual relationship with users, changes will only be made with the users’ consent.

Users are asked to review the content of this Privacy Policy regularly.

Effective: November 3, 2026