Privacy Statement

We are very pleased about your interest in our company. Privacy is of great importance to the management of IBsolution GmbH. The websites of IBsolution GmbH can be used without providing any personal data – with the exception of the assigned IP address. However, if a person concerned would like to make use of special services offered by our company via our website, it may be necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we generally obtain the consent of the person concerned.

The processing of personal data, such as the name, address, e-mail address or phone number of a person concerned, is always carried out in accordance with the General Data Protection Regulation and in compliance with the country-specific data protection regulations applicable to IBsolution GmbH. By means of this privacy statement, our company would like to inform the public about the type, scope and purpose of the personal data we collect, use and process. Furthermore, this privacy statement informs persons concerned about the rights they are entitled to.

IBsolution GmbH as the data controller has implemented numerous technical and organizational measures to ensure that the personal data processed via this website is protected as completely as possible. Nevertheless, internet-based data transmissions can generally have security gaps, so that total protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us by alternative means, such as by telephone.

Name and address of the data controller

The data controller within the meaning of the General Data Protection Regulation, other data protection laws applicable in the member states of the European Union and other provisions of privacy nature is

IBsolution GmbH
Im Zukunftspark 8
74076 Heilbronn

Phone: +49 7131 2711-0

You can also reach our data protection officer using these contact details.

Collection of general data and information

The website of IBsolution GmbH records a series of general data and information every time a person concerned or an automated system accesses the website. This general data and information is stored in the log files of the server. The following can be recorded: (1) the browser types and versions used, (2) the operating system used by the accessing system, (3) the website from which an accessing system accesses our website (so-called referrer), (4) the sub-websites that are accessed via an accessing system on our website, (5) the date and time of an access to the website, (6) an internet protocol address (IP address), (7) the internet service provider of the accessing system, and (8) other similar data and information which serve to prevent danger in the event of attacks on our information technology systems.

IBsolution GmbH does not draw any conclusions about the person concerned when using this general data and information. This information is rather required to (1) deliver the contents of our website correctly, (2) optimize the contents of our website and the advertising for it, (3) ensure the permanent functionality of our information technology systems and the technology of our website and (4) provide law enforcement agencies with the necessary information for prosecution in case of a cyber attack. This anonymously collected data and information is therefore evaluated by IBsolution GmbH on the one hand statistically and on the other hand with the aim of increasing privacy and data security in our company, in order to ultimately ensure an optimal level of protection for the personal data processed by us. The anonymous data of the server log files are stored separately from all personal data provided by a person concerned.

Registration on our website

The person concerned has the possibility to register on the IBsolution website by providing personal data. Which personal data will be transmitted to IBsolution is determined by the respective input mask that is used for the registration. The personal data entered by the person concerned is processed exclusively for internal use and for IBsolution’s own purposes.

By registering on the website of the data controller, the IP address assigned by the internet service provider (ISP) of the person concerned, as well as the date and time of the registration are saved. The storage of this data is carried out against the background that this is the only way to prevent the misuse of our services and, if necessary, to enable the clarification of criminal offences committed. In this respect, the storage of this data is necessary for the protection of IBsolution. Handing these data over to third parties does not take place in principle, as long as there is no legal obligation to hand them over.

The registration of the person concerned under voluntary indication of personal data serves IBsolution to offer the person concerned contents or services, which due to the nature of the matter can only be offered to registered users. Registered persons are free to change the personal data given during registration at any time or to have it completely deleted from the database.

IBsolution provides every person concerned at any time on request information about what personal data about the person concerned is stored. Furthermore, the data controller corrects or deletes personal data on request or notice of the person concerned, as long as there are no legal storage obligations to the contrary.

Privacy statement for the use of Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Web analytics is the collection and evaluation of data about the behavior of visitors to websites. Among other things, a web analytics service collects data on which website a person concerned came to a website from (so-called referrer), which subpages of the website were accessed or how often and for how long a subpage was viewed. A web analytics is mainly used to optimize a website.

Google Analytics uses so-called “cookies”. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information generated by the cookie about your use of this website is transferred to a Google server in the USA and stored there. Google uses the data and information obtained to evaluate the use of our website, among other things, in order to compile online reports for us which show the activities on our website and to provide further services in connection with the use of our website. Google may hand over this personal data collected through the technical process to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do so you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link:

Furthermore, the person concerned has the opportunity to object to the collection of data generated by Google Analytics and relating to the use of this website, as well as to the processing of this data by Google, and to prevent such processing. For this purpose, the person concerned must download and install a browser add-on under the link This browser add-on informs Google Analytics via JavaScript that no data and information about visits to websites may be transmitted to Google Analytics. The installation of the browser add-on is considered by Google to be an objection. If the information technology system of the person concerned is deleted, formatted or re-installed at a later date, the person concerned must re-install the browser add-on in order to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the person concerned or another person within his or her sphere of control, the browser add-on may be reinstalled or reactivated.

We use the function “Activation of IP anonymization” on this website. This means that your IP address will be shortened by Google within the member states of the European Union and in other states which are party to the Agreement on the European Economic Area before. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities and provide further services to the website operator in connection with the use of the website and the internet. The IP address transmitted by your browser within the framework of Google Analytics is not combined with other data from Google.

Further information and the applicable privacy policy of Google can be found at and Google Analytics is explained in more detail under this link:

Privacy statement for the use of HubSpot

On our website we use the services of HubSpot listed below. HubSpot is a software company based in the USA with offices in Ireland, HubSpot, 2nd Floor 30 North Wall Quay, Dublin, Ireland. HubSpot is certified under the terms of the EU-US Privacy Shield Framework. For more information about HubSpot’s privacy policy, please visit

HubSpot Analytics (HubSpot, Inc.)

HubSpot Analytics is an analytics service of HubSpot, Inc. which, similar to Google Analytics, collects and evaluates data of visitors to our website. The data collected in this way is used exclusively to optimize IBsolution’s web offer.

Collected personal data: cookies and usage data.

Please also note our general information about cookies. You will find these in our privacy statement below.

HubSpot Email (HubSpot, Inc.)

HubSpot Email is a service provided by HubSpot, Inc. for managing e-mail addresses and sending messages.

Personal information collected: e-mail and usage data.

HubSpot CRM (HubSpot, Inc.)

HubSpot CRM is a user database management service provided by HubSpot, Inc.

Personal information collected: e-mail, phone number and various types of data, as described in the service’s privacy policy.

HubSpot Lead Management (HubSpot, Inc.)

HubSpot Lead Management is a user database management service for HubSpot, Inc.

Personal information collected: various types of data, as described in the service’s privacy policy.


This website uses the Hotjar web analytics service provided by Hotjar Ltd. Hotjar is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, Tel: +1 (855) 464-6788).

Hotjar’s technology helps us gain a better understanding of our users’ experiences, such as

  • how much time users spend on which sites,
  • which links they click on,
  • what they like and what they don’t like.

This helps us to align our offer with the feedback of our users. Hotjar works with cookies and other technologies to collect information about the behavior of our users and their end devices.

This includes in particular:

  • IP address of the device (is only collected and stored in anonymous form)
  • Screen size, device type (unique device identifiers)
  • Information about the browser used
  • Location (country only) to display the preferred language

Hotjar stores this information in a pseudonymous user profile. The information is not used by Hotjar or by us to identify individual users or merged with other data about individual users and is therefore not traceable at any time.

The use of Hotjar and the storage of Hotjar cookies is based on Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in analyzing user behavior in order to optimize both our web offering and our advertising. You can find further information in Hotjar’s privacy policy.

In accordance with Art. 28 GDPR, we have entered into a contract with Hotjar for the processing of orders and will fully implement the resulting requirements.

Possibility of objection: If you wish to object to the storage of a user profile of information about visits to our website by Hotjar and the setting of Hotjar Tracking cookies on other websites, please use the opt-out link.


The websites partly use so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted at the end of your visit. Other cookies remain stored on your end device until you delete them. These cookies enable us to recognize your browser the next time you visit us.

You can set your browser to inform you about the setting of cookies and to allow cookies only in individual cases, to exclude the acceptance of cookies for certain cases or in general and to activate the automatic deletion of cookies when closing the browser. If you deactivate cookies, the functionality of this website may be limited.

Contact form

If you send us enquiries via the contact form, your details from the contact form, including the contact data you provide there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions.

We will not hand over this data without your consent.

Subscription to our newsletter

On the website of IBsolution GmbH , users are given the opportunity to subscribe to our company’s newsletter. Which personal data is transmitted to the data controller when ordering the newsletter can be seen from the input mask used for this purpose.

IBsolution GmbH informs its customers and business partners about company offers in regular intervals by means of a newsletter. Our company’s newsletter can only be received by the person concerned if (1) the person concerned has a valid e-mail address and (2) the person concerned registers to receive the newsletter. For legal reasons, a confirmation e-mail will be sent to the e-mail address registered for the first time by a person concerned for the purpose of receiving the newsletter using the double opt-in procedure. This confirmation mail is used to check whether the owner of the e-mail address has authorized the receipt of the newsletter as the person concerned.

The personal data collected during registration for the newsletter is used exclusively for sending our newsletter. In addition, subscribers to the newsletter could be informed by e-mail if this is necessary for the operation of the newsletter service or for registration in this regard, as might be the case if there are changes to the newsletter offer or if technical conditions change. The personal data collected within the scope of the newsletter service will not be handed over to third parties. The subscription to our newsletter can be cancelled by the person concerned at any time. The consent to the storage of personal data, which the person concerned has given us for the newsletter service, can be revoked at any time. For the purpose of revoking the consent, a corresponding link is included in every newsletter. It is also possible to unsubscribe from the newsletter at any time directly on the website of the data controller or to inform the data controller in another way.

Newsletter tracking

The newsletters of IBsolution GmbH contain so-called tracking pixels. A tracking pixel is a miniature graphic that is embedded in e-mails sent in HTML format to enable log file recording and log file analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. By means of the embedded tracking pixels, IBsolution GmbH can identify whether and when an e-mail was opened by a person concerned and which links in the e-mail were clicked on by the person concerned.

Such personal data collected via the tracking pixels contained in the newsletters are stored and evaluated by the data controller in order to optimize the newsletter dispatch and to adapt the content of future newsletters even better to the interests of the person concerned. This personal data is not handed over to third parties. Persons concerned are entitled to revoke their consent at any time by unsubscribing from receiving the newsletter.

Comment function in the blog on the website

IBsolution GmbH offers users the opportunity to leave individual comments on blog posts in a blog located on the website of the data controller. A blog is a portal on a website, usually open to the public, where one or more persons, called bloggers or web bloggers, can post articles or write down thoughts in so-called blog posts. The blog posts can usually be commented by third parties. If a person concerned leaves a comment in the blog published on this website, information on the time of the comment entry and the user name (pseudonym) chosen by the person concerned is stored and published in addition to the comments left by the person concerned. Furthermore, the IP address assigned to the person concerned by the internet service provider (ISP) is also logged. This storage of the IP address is done for security reasons and in case the person concerned violates the rights of third parties or posts illegal content by submitting a comment. The storage of this personal data is therefore in the own interest of the data controller, so that it can be exculpated if necessary in the event of an infringement of the law. The personal data collected will not be handed over to third parties, unless such a transfer is required by law or serves the purpose of legal defence.

Routine deletion and blocking of personal data

The data controller shall process and store personal data relating to the person concerned only for the time necessary to achieve the purpose for which the data are stored, or where provided for by the European legislator or by any other law or regulation to which the data controller is subject.

If the purpose of storage ceases to apply or if a storage period prescribed by the European legislator body or any other competent legislator expires, the personal data will be blocked or deleted as a matter of routine and in accordance with the law.

Rights of the person concerned

Right of confirmation

Every person concerned has the right, granted by the European legislator, to obtain confirmation from the controller as to whether personal data relating to him/her are being processed. If a person concerned wishes to exercise this right of confirmation, he or she may at any time use the contact details given above.

Right of information

Every person concerned by the processing of personal data has the right to receive free information from IBsolution at any time about the personal data stored about him/her.

If a person concerned would like to make use of this right of information, he/she can contact us at any time using the contact details given above.

Right of rectification

Any person concerned by the processing of personal data has the right, granted by the European legislator, to request the rectification without delay of inaccurate personal data concerning him. Furthermore, the person concerned has the right to request the completion of incomplete personal data, including by means of a complementary declaration, having regard to the purposes of the processing.

If a person concerned wishes to exercise this right of rectification, he or she may at any time use the contact details given above.

Right of erasure (right to be forgotten)

Every person concerned by the processing of personal data has the right to demand from IBsolution that the personal data concerning him/her be deleted immediately, if IBsolution is obliged to delete the personal data.

Right of restricted processing

Every person concerned by the processing of personal data has the right, granted by the European legislator, to request the controller to limit the processing. IBsolution will restrict the processing, unless the legal requirements for such a restriction do not exist.

If a person concerned wishes to request the restriction of personal data stored by IBsolution GmbH, he/she can use the contact details given above.

Right of data transferability

Every person concerned by the processing of personal data has the right, granted by the European legislator, to receive the personal data concerning him/her provided by the person concerned to a data controller in a structured, common and machine-readable format. In order to exercise the right of data transferability, the person concerned may at any time use the contact details given above.

Right of objection

Any person concerned by the processing of personal data has the right to object at any time, for reasons arising from his or her particular situation, to the processing of personal data concerning him or her carried out pursuant to Article 6 (1) (e) or (f) of the GPDR. This also applies to profiling based on these provisions.

In order to exercise the right of objection, the person concerned may use the contact details given above. The person concerned is also free to exercise his or her right of objection in connection with the use of information society services by means of automated procedures involving technical specifications, notwithstanding Directive 2002/58/EC.

Right of withdrawal of a privacy consent

Any person concerned by the processing of personal data has the right to withdraw his or her consent to the processing of personal data at any time as granted by the European legislator.

If the person concerned wishes to exercise his or her right to revoke consent, he or she may at any time use the contact details given above.

Privacy in applications and in the application process

IBsolution collects and processes the personal data of applicants for the purpose of processing the application procedure. The processing can also be done electronically. This is especially the case when an applicant submits the relevant application documents to IBsolution electronically, for example by e-mail or via a web form on the website. If IBsolution concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in accordance with the legal regulations. If no employment contract is concluded with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision or after the end of the applicant selection process, provided that no other legitimate interests of the data controller conflict with the deletion. Other legitimate interests in this sense include, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG).

Collection and processing of personal data

If you provide us with personal data as part of the application process, this data is divided into the following data types and data categories for collection, processing and/or use:

  • Personal data (first and last name, date of birth, address, school-leaving certificate)
  • Communication data (phone number, mobile number, fax number, e-mail address)
  • Information (from third parties, e.g. credit agencies or from public directories)
  • Data on assessment and evaluation in the application procedure
  • Data on education (school, vocational training, civil/ military service, studies, doctorate)
  • Data on previous professional career, training and work certificates
  • Information on other qualifications (e.g. language skills, PC skills, voluntary work)
  • Application photo
  • Details of the desired salary
  • Application history

Use and disclosure of personal data

We use the personal data you provide exclusively for processing your application for the advertised job. Only persons involved in the application process will be informed of your personal data. All employees entrusted with data processing are obliged to maintain the confidentiality of your data. We do not hand over your personal data to third parties unless you have consented to handing over the data or we are obliged to hand over data due to legal regulations and/or official or court orders. With an application an account is created in our career portal where you can view and manage your application. In the course of the application process you have the possibility to evaluate the application process and our company with the service provider softgarden e-recruiting GmbH online. This feedback can appear on the evaluation portals of softgarden and kununu GmbH.

Order data processing

On the basis of a separate agreement on the processing of personal data, your personal data will be processed by

softgarden e-recruiting GmbH, Tauentzienstraße 14, 10789 Berlin, Germany

within the scope of order processing in accordance with the relevant legal requirements on our behalf. However, this does not involve the transfer of your personal data to third parties in data protection terms. We, IBsolution GmbH, remain responsible to you in data protection terms.

However, you have the possibility to allow the company softgarden e-recruiting GmbH to process your personal data transmitted within the application process. This is done by a separate explicit consent.

The giving of such consent is always voluntary. Not giving consent to softgarden e-recruiting GmbH has no effect on the application process carried out by us.

Storage and deletion of data

Your data will be automatically deleted within six months after completion of the specific application procedure. This does not apply if legal regulations oppose deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly agreed to longer storage.

Talent pool

If you choose to be included in the talent pool, the entire company will have access to your personal data in the event of any job openings. You can join the talent pool by accepting a recruiter’s invitation or proactively by using the “Get in touch” form. You can revoke this consent for further processing at any time. In this case your data will be deleted immediately.


We take all necessary technical and organizational security measures to protect your personal data from loss and abuse. Your data is stored in a secure operating environment that is not accessible to the public. Your data is encrypted during transmission by the so-called Transport Layer Security (TLS). This means that the communication between your computer and our servers takes place using a recognized encryption method.

Legitimate interests in the processing, which are pursued by the person responsible or a third party

If the processing of personal data is based on Art. 6 I lit. f GDPR, our legitimate interest is to carry out our business activities for the benefit of the well-being of all our employees and our shareholders.

Duration for which personal data are stored

The criterion for the duration of storage of personal data is the respective legal retention period. After this period has expired, the corresponding data is routinely deleted, provided that it is no longer required for the fulfilment or initiation of a contract.

Legal or contractual regulations for the provision of personal data

Necessity for the conclusion of the contract; obligation of the person concerned to provide the personal data; possible consequences of not providing the data

We would like to inform you that the provision of personal data is partly required by law (e.g. tax regulations) or can also result from contractual regulations (e.g. information on the contractual partner). It may sometimes be necessary for a contract to be concluded that a person concerned provides us with personal data which we must then process. For example, the person concerned is obliged to provide us with personal data if our company concludes a contract with him or her. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before the person concerned makes personal data available to us, the person concerned must contact one of our employees. Our employee will inform the person concerned on a case-by-case basis whether the provision of the personal data is required by law or contract or is necessary for the conclusion of the contract, whether there is an obligation to provide the personal data and what the consequences would be if the personal data were not provided.

Existence of automated decision making (profiling)

As a responsible company, we avoid automatic decision making or profiling.


This privacy statement is a translation of the German version. In case of differences between the German and the English version and in other cases of doubt, only the German version shall be binding.