Privacy Policy

Below we inform you, in accordance with Art. 12, 13 and 21 of the General Data Protection Regulation (GDPR), about how we handle your personal data when you use our website www.kajima.de (hereinafter: “Website”).

1. Controller and Data Protection Contact

The controller for this website is:
Kajima Deutschland GmbH
Eisenhutweg 118–120
12487 Berlin
Phone: +49-30 68 99 11 00
Email: info@kajima.de

You can reach our data protection representative at:
Kajima Deutschland GmbH
Katja Friedrich
Eisenhutweg 118–120
12487 Berlin
Phone: +49-30 68 99 1000
Email: datenschutz@kajima.de

We are not obliged to appoint a Data Protection Officer.

2. Purposes and Legal Bases of Data Processing When Using the Website

2.1. Informational Use of the Website

You can visit our Website without providing any information about yourself. If you use our Website purely for informational purposes and, for example, do not transmit any information about yourself to us, we do not process any personal data, with the exception of the data that your browser transmits to enable you to visit the Website, as well as information transmitted to us in connection with cookies used on the Website.

2.1.1. Technical Provision of the Website

Purpose:
For the purpose of the technical provision of the Website, our system (i.e., the web server) automatically collects information from your browser each time the Website is accessed. The temporary storage of your IP address by our system is necessary to enable the delivery of the Website to your computer. For this purpose, the user’s IP address must necessarily be stored for the duration of the session.

The storage of the IP address in log files is carried out to ensure the functionality of our Website. These data also help us to optimize the Website and to ensure the security of our information technology systems (e.g., detection of attacks). Furthermore, the data are evaluated for marketing purposes in connection with the tools referred to under section 2.1.3 “Analytics and Tracking”.

In this context, the following information is collected:
• IP address of the requesting device
• Date and time of access
• HTTP method (e.g., GET, POST)
• Requested resource (URL / Request URL)
• HTTP version (e.g., HTTP/1.1, HTTP/2)
• Status code (e.g., 200, 404, 500)
• Transferred data volume (request/response bytes)
• Referrer page
• Browser type/version
• Browser language
• Operating system
• Browser window resolution
• Screen resolution
• JavaScript activation
• Java on/off
• Cookies on/off
• Color depth

We also use cookies to make our Website available to you for use. Cookies are text files that are stored in or by the Internet browser on your computer system when a website is accessed. A cookie contains a characteristic string that enables the browser to be uniquely identified when the Website is accessed again.

We use these cookies, among other things, to provide you with our Website and its technical functions. Some functions of our Website cannot be offered without the use of cookies. The following information is stored in the cookies and transmitted to us:
• The language selected by you on our Website;
• An identification code used by our service provider so that you can be recognized when you visit our Website again.

You can find further information on the handling of cookies in our Cookie Policy.

Legal bases:
• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures when you visit the Website to obtain information about our company and products/services
• Art. 6(1)(f) GDPR – legitimate interests in providing a functional, user-friendly, and secure Website

Storage period:
If you merely visit our Website, we store your personal data on our servers only for the duration of your visit to our Website. Our server deletes the personal data in question immediately after you leave our Website. An exception applies to the language selection and the identification code; these are stored permanently.

2.1.2. Use of Google reCAPTCHA

Purpose:
We use Google reCAPTCHA on our Website. reCAPTCHA is a tool provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). reCAPTCHA detects automated access (bots) and prevents the abusive use of our online forms. reCAPTCHA evaluates user behavior in the background and assigns a risk score to each interaction, which helps determine whether a request is likely to originate from a natural person or not. For this purpose, reCAPTCHA analyzes the behavior of the Website visitor on the basis of various characteristics and evaluates different types of information. The analysis starts automatically as soon as the Website visitor accesses the Website and takes place in the background (“invisible”), without a checkbox. It can be integrated across the entire site. The data collected during the analysis are transmitted to Google. Depending on the interaction, Google may also set cookies. The purpose is to secure our IT systems, ensure the availability of our services and protect against spam and attacks.

In the context of reCAPTCHA, the following data in particular are collected and processed:

  • IP address and other metadata of the request (date, time, referrer URL, accessed URL);
  • Interaction data and usage parameters (mouse/keyboard/scroll behavior, time spent on the page, click paths);
  • Device and browser information (e.g., operating system, browser type/version, language setting, screen resolution);
  • Cookies or similar technologies used by Google for risk assessment and fraud detection;
  • Where applicable, Google account information, if you are logged in to Google during your visit.

Further information on Google’s terms of use and privacy policy can be found at http://www.google.com/analytics/terms/de.html and https://www.google.de/intl/de/policies/.

Legal Bases:
We process your personal and non-personal data for the technical provision of our Website on the basis of the following legal bases:

  • For the technical provision of our Website and reCAPTCHA pursuant to Section 25(2) no. 2 of the German Telecommunications-Telemedia Data Protection Act (TDDDG), as the processing of the above-mentioned data is strictly necessary to enable you to use our Website as you have expressly requested;
  • For the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR, insofar as you visit our Website to obtain information about our products and our events;
  • For the purposes of our legitimate interests pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in providing you with an attractive, technically functional and user-friendly Website as well as taking measures to protect our Website and to secure our IT systems, ensure the availability of our services, protect against spam and cyber risks and prevent cyber risks originating from our Website from affecting third parties.

Storage period:
The storage period of the data collected by reCAPTCHA is determined by Google. Google processes the data for as long as necessary to provide the service, ensure security, prevent abuse and carry out error analysis. Detailed information on storage periods and deletion can be found in our “CookieYes” consent manager or in Google’s privacy notices.

2.1.3. Consent Manager

Purpose:
We use the consent manager “CookieYes” of CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom (“CookieYes”) on our Website. The CookieYes consent manager is a solution that enables us to obtain your consent to certain data processing activities that require consent (e.g., analytics). By using CookieYes, we are able to inform you about each of the cookies and tools we use. You can use CookieYes to choose which cookies and tools you wish to allow or reject, individually or by category. This enables you to make an informed decision regarding the disclosure of your data and allows us to use cookies and tools in a manner that is compliant with data protection requirements, transparent and documented.

The consent manager processes your personal data in order to record your decision regarding the allowance of cookies and tools and to store it for a future visit to our Website. This includes the relevant cookie with your consent decision as well as further usage data, e.g. IP address, domain name, time of the request, server data and other data transmission types, server status, etc., country, browser and operating system. Further information and the CookieYes privacy policy are available at https://www.cookieyes.com/privacy-policy/.

Legal bases:
We process your personal and non-personal data for the technical provision of our Website on the basis of the following legal bases:

  • For the technical provision of our Website and consent management pursuant to Section 25(2) no. 2 TDDDG, as the processing of the above-mentioned data is strictly necessary to enable you to use our Website as you have expressly requested (i.e., also without or with cookies);
  • For the performance of a contract or in order to take steps prior to entering into a contract pursuant to Article 6(1)(b) GDPR, insofar as you visit our Website to obtain information about our products and our events;
  • For compliance with a legal obligation under the GDPR pursuant to Article 6(1)(c) GDPR, which consists in providing the possibility to give consent and documenting your decision;
  • For the purposes of our legitimate interests pursuant to Article 6(1)(f) GDPR. Our legitimate interest lies in providing you with an attractive, technically functional and user-friendly Website and taking measures to protect our Website against cyber risks and to prevent cyber risks originating from our Website from affecting third parties.

Storage period:
The “cookieyes-consent” is stored for a maximum period of one year.

2.1.4. Analytics, Tracking, etc.

Purpose:
For the purpose of analyzing and tracking the use of our Website, we and/or service providers acting on our behalf use cookies that enable an evaluation of your browsing behavior. This enables us to improve the quality of our Website and its content. We learn how the Website is used and can thus continuously optimize our offer.

Web analytics involves the collection, compilation and evaluation of data about the behavior of visitors to websites. A web analytics service records, among other things, data about which website a data subject has come to a website from (so-called referrer), which subpages of the website were accessed or how often and for what period a subpage was viewed. Web analytics is regularly used to optimize a website and for cost-benefit analyses of internet advertising.

Legal bases:
We process your personal data on the basis of the following legal bases:

  • With your consent pursuant to Article 6(1)(a) GDPR;
  • With your consent pursuant to Section 25(1) TDDDG with regard to the initial storage and reading of data; and
  • For the purposes of our legitimate interests pursuant to Article 6(1)(f) GDPR, our legitimate interest being to analyze traffic on our Website in order to continuously adapt our quality and our marketing and our economic interest in being able to provide you with targeted offers and information that correspond to your interests.

Storage period:
The storage period is specified below.

2.1.4.1. Google Analytics

Purpose:
We use Google Analytics on our Website, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies to analyze how you use the Website. The information generated by the cookie about your use of our Website is generally transmitted to a Google server in the USA and stored there. If IP anonymization is activated on our Website, your IP address will, however, be shortened by Google beforehand within member states of the European Union (“EU”) or in other states party to the Agreement on the European Economic Area (“EEA”). Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The company is certified under the EU–US Data Privacy Framework (DPF).

On our behalf, Google will use this information for the purpose of evaluating your use of the Website, compiling reports on Website activity and providing us with other services relating to Website activity and internet usage. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other data held by Google.

Legal basis:
We process your personal and non-personal data for analytics on our Website on the basis of the following legal bases:

  • With your consent pursuant to Section 25(1) TDDDG with regard to the initial storage and reading of data; and
  • With your consent pursuant to Article 6(1)(a) GDPR for further data processing (e.g., analytics).

Withdrawal of your consent
We only use Google Analytics with your consent. You may withdraw consent granted at any time by:

  • Preventing the storage of cookies by selecting the appropriate settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of our Website to their full extent;
  • Downloading and installing the browser plugin available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

Further information on the terms of use and data protection of Google Analytics can be found at http://www.google.com/analytics/terms/de.html and at https://www.google.de/intl/de/policies/.

Storage period:
The cookies are stored for a maximum period of two years.

2.1.4.2. YouTube

Purpose:
We integrate videos from the YouTube service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). In order to make the videos available, Google processes technically necessary data for this purpose. Google is responsible for this processing.

We use YouTube in enhanced privacy mode. According to Google, this mode means that YouTube does not store information about visitors to this Website before they view a video. However, the enhanced privacy mode does not necessarily exclude the transfer of data to YouTube partners. Thus, YouTube connects to the Google DoubleClick network regardless of whether you watch a video. As soon as you start a YouTube video on this Website, a connection to YouTube’s servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your browsing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Furthermore, after you start a video, YouTube can store various cookies on your end device or use comparable recognition technologies (e.g., device fingerprinting). In this way, YouTube can obtain information about visitors to this Website. This information is used, among other things, to collect video statistics, improve user-friendliness and prevent fraud attempts. Additional data processing operations over which we have no influence may be triggered after a YouTube video is started. Further information on the processing of your personal data by Google can be found at: https://policies.google.com/privacy?hl=de.

Legal basis:
We process your personal and non-personal data for the embedding of videos on our Website on the basis of the following legal bases:

  • With your consent pursuant to Article 6(1)(a) GDPR and with your consent pursuant to Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG;
  • For the purposes of our legitimate interests pursuant to Article 6(1)(f) GDPR, our legitimate interest being the demand-oriented design of our Website, which also requires the integration of videos.

The company is certified under the EU–US Data Privacy Framework (DPF).

Storage period:
Storage takes place until the end of your visit to our Website.

2.1.5. Social Links

Our Website contains a link to the LinkedIn and YouTube services. When you click on the link, you are, for example, redirected to our LinkedIn page; only then is user information transmitted to the relevant site. Information on the handling of your data when using the social media pages can be found in the privacy notices at:

2.1.6. Applications

On our Website, we also offer access to information on positions that we wish to fill at our locations. If you wish to apply for a position with us, you can contact us electronically, for example. You will then receive separate further information on the handling of your data in the application process, the legal bases of the processing, etc.

2.2. Active Use of the Website / Inquiries

In addition to purely informational use of our Website, you can also use our Website actively to download information or to contact us. In addition to the processing of your personal data described above for purely informational use, we then also process further personal data from you that we need, for example, to respond to your enquiries.

Purpose:
In order to process and respond to your enquiries to us, e.g., via the contact form or to our e-mail address, we process the data you provide in this context. This includes, in any case, your name and your e-mail address so that we can send you a reply, as well as any other information you send us as part of your message (in particular, in the “Message” mandatory field). Mandatory fields are marked with an “*”.

Legal bases:
We process your personal data for responding to enquiries on the basis of the following legal bases:

  • For the purposes of our legitimate interests pursuant to Article 6(1)(f) GDPR; our legitimate interest is the proper handling and answering of customer enquiries;
  • If the enquiry is aimed at the conclusion of a contract, an additional legal basis is Article 6(1)(b) GDPR.

Storage period:
We generally store your personal data for these purposes for the duration of processing the enquiry or, if based on a contract, for the duration of the business relationship. This also includes the performance of a contract. Otherwise, the storage periods specified below with regard to compliance with statutory obligations or the enforcement of rights apply.

3. Compliance with Legal Obligations

Purpose:
We also process your personal data in order to comply with other legal obligations. These may arise in particular in connection with business communication or the implementation of data security requirements. This includes, in particular, commercial, trade or tax law retention obligations (e.g., Sections 238, 257(4) of the German Commercial Code (HGB) or Section 147(3), (4) of the German Fiscal Code (AO)), as well as other statutory obligations, such as the implementation of technical and organizational measures pursuant to Article 32 GDPR or ensuring IT security.

Legal bases:
We process your personal data on the basis of the following legal basis:

  • For compliance with a legal obligation to which we are subject pursuant to Article 6(1)(c) GDPR in conjunction with commercial, trade or tax law, insofar as we are obliged to record and store your data, or other statutory provisions that we are obliged to comply with.

Storage period:
We initially store your data for the duration of the statutory retention periods in order to comply with legal obligations. These can be between two and ten years. During this period, the data are processed solely in the event of a review by, for example, the tax authorities. Further storage may then take place for the purpose of legal enforcement.

4. Legal Enforcement and Compliance

Purpose:
We also process your personal data in order to assert our rights and enforce our legal claims. We also process your personal data so that we can defend ourselves against legal claims. Finally, we process your personal data to the extent necessary to prevent or prosecute criminal offences, to investigate and clarify suspected or actual illegal activities or to ensure and monitor compliance.

Legal bases:
We process your personal data for this purpose on the basis of the following legal bases:

  • For the purposes of our legitimate interests pursuant to Article 6(1)(f) GDPR, to the extent that we assert legal claims, defend ourselves in legal disputes, prevent or investigate criminal offences or illegal acts, or ensure and monitor compliance;
  • Article 17(3)(e) GDPR for the establishment, exercise or defence of legal claims in the event of a potential obligation to erase personal data.

Storage period:
We store your personal data until the limitation periods for any legal claims arising from the relationship with you have expired in order to be able to use them as evidence if necessary. The limitation period is usually between one and three years but can be up to thirty years. In the event of pending legal disputes, we store your personal data until such disputes are finally concluded.

5. Links

Some sections of our Website contain links to third-party websites. These websites are subject to their own privacy policies. We are not responsible for their operation, including their data handling practices. If you send information to or via such third-party sites, you should review the privacy policies of those sites before providing them with information that can be attributed to you personally.

6. Sources

Data that we have not collected directly from you are obtained from the following sources:

  • Your previous employers, if you have consented to us contacting them as part of your recruitment process.
  • Authorities or other public bodies, e.g., tax offices, employment agencies;

7. Categories of Recipients

Initially, only our employees will have knowledge of your personal data.

Your data will only be passed on to third parties to the extent permitted or required by law, or if you have given your consent. We also share your data to the necessary extent with the service providers we use so that we can provide our services. We limit the disclosure of data to what is necessary in order to provide our services to you. Some of our service providers receive your data as processors and are then strictly bound by our instructions in their handling of your data. Some recipients act independently with your data, which we transmit to them.

Below we list the categories of recipients of your data:

  • Affiliated companies within the corporate group, insofar as they act as processors for us and, for example, provide IT services, to the extent that this is necessary for the provision of our services and permissible by law;
  • IT service providers or cloud service operators that provide services for us in connection with our Website or our services, such as the storage of data, hosting, operation and provision of the Website and the services or tools offered there (e.g., consent management, reCAPTCHA or analytics tools) as well as their execution, support in the administration, maintenance and development of IT systems, the Website, apps or tools, and technical support;
  • File archiving and destruction service providers;
  • Legal advisors in the assertion, etc., of our claims;
  • Public authorities and institutions to the extent we are legally obliged to do so.

In addition, we may share your personal data within our globally operating corporate group, e.g., with the parent company or other subsidiaries that require such data to fulfil our contractual and legal obligations or on the basis of our legitimate interests. These may be economic, administrative or other internal business purposes, provided that your interests or fundamental rights and freedoms, which require the protection of personal data, do not prevail. Beyond this, we do not disclose your data to third parties.

8. Transfers to Third Countries

We operate our business globally. Your personal data may therefore be transferred to countries outside the EU to other parts of our company. Data transfer to countries outside the EU or the EEA (so-called third countries) only takes place to the extent necessary in the context of the performance of our contractual relationships or where legally required (e.g., tax reporting obligations), if you have given us your consent, or in the context of processing on behalf.

When transferring data to third countries, we ensure that a level of data protection is maintained in accordance with Articles 44 et seq. GDPR.

In the context of using tools provided by Google, such as Google Analytics and YouTube, we transfer your IP address or shortened IP address to countries outside the EU, including the USA. Where service providers in third countries are used and we are able to exert influence, they are required, in addition to written instructions, to comply with the European level of data protection by entering into the EU Standard Contractual Clauses. Alternatively, we transfer data on the basis of Binding Corporate Rules or an adequacy decision.

You can obtain further information from our data protection contact person.

Apart from this, we do not transfer your personal data to countries outside the EU or the EEA or to international organizations.

9. Your Rights as a Data Subject

If your personal data are processed, you are a “data subject” within the meaning of the GDPR. You have the following rights vis-à-vis us as the controller, which you can also exercise vis-à-vis the operator of the respective platform with regard to our social media presences. Please note that we do not have full control over the data processing activities of the operator. Our possibilities are largely determined by the corporate policy of the respective provider. Your rights as a data subject are as follows:

  • Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority – in particular in the Member State of your habitual residence – if you consider that the processing of your personal data by us infringes the GDPR.
  • Right of access: You may request information as to whether we process personal data concerning you. If this is the case, you have the right to obtain access to such personal data and to further information relating to the processing (Article 15 GDPR). Please note that this right of access may be restricted or excluded in certain cases.
  • Right to rectification: If personal data concerning you are (no longer) accurate or incomplete, you may request that these data be rectified and, where appropriate, completed (Article 16 GDPR).
  • Right to erasure or restriction of processing: Subject to the statutory requirements, you may request the erasure of your personal data (Article 17 GDPR) or the restriction of the processing of such data (Article 18 GDPR). However, the right to erasure pursuant to Article 17(1) and (2) GDPR does not apply, among other things, if the processing of personal data is necessary for compliance with a legal obligation (Article 17(3)(b) GDPR).
  • Right to object: On grounds relating to your particular situation, you may object at any time to the processing of your personal data by us (Article 21 GDPR). If the statutory requirements are met, we will subsequently no longer process your personal data.
  • Right to data portability: You have the right, under the conditions set out in Article 20 GDPR, to request that we provide you with the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format.
  • Right to withdraw consent: You have the right to withdraw your consent at any time. The withdrawal only takes effect for the future; i.e., the lawfulness of processing based on consent before its withdrawal is not affected.

The supervisory authority responsible for us is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61
10555 Berlin
Telephone: +49 30 13889
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de

However, we recommend that you first address any complaint to our data protection contact person.

Your requests to exercise your rights should, where possible, be addressed in writing to the address specified in section 1 above or directly to our data protection contact person.

10. Scope of Your Obligations to Provide Data

As a rule, you are not obliged to provide us with your personal data. However, if you do not do so, we may, for example, be unable to provide you with our Website, respond to your enquiries or process your application.

11. Profiling / Automated Decision-Making

We do not use procedures for automated decision-making or profiling within the meaning of the GDPR.

Right to Object pursuant to Article 21 GDPR
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your data which is based on Article 6(1)(f) GDPR (data processing on the basis of a balancing of interests) or Article 6(1)(e) GDPR (data processing in the public interest). This also applies to profiling based on these provisions within the meaning of Article 4(4) GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is for the establishment, exercise or defence of legal claims.

We also process your personal data in individual cases for the purpose of direct marketing. If you do not wish to receive any advertising, you have the right to object at any time to the processing of your personal data for such marketing; this also applies to profiling to the extent that it is related to such direct marketing. We will respect this objection for the future.

We will no longer process your data for direct marketing purposes if you object to processing for these purposes.

The objection may be made without any formal requirements and should preferably be addressed to the address specified in section 1.

12. Changes

We reserve the right to amend this Privacy Policy at any time. Any changes will be communicated by publishing the amended Privacy Policy on our Website. Unless otherwise specified, such changes take effect immediately. You should therefore review this Privacy Policy regularly in order to view the current version.

Last updated: January 2026