Last updated: 19 September 2026
Unless otherwise stated below, the provision of your personal data is neither required by law or by contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other statement is made in the processing operations described below.
„Personal data“ means any information relating to an identified or identifiable natural person.
Server log files
You can visit our web pages without providing any information about yourself.
Our website is hosted by STRATO GmbH, Otto-Ostrowski-Straße 7, 10249 Berlin, Germany (“STRATO”). Each visit involves the processing of technical usage data, including the requested file, date and time, transferred volume, browser and operating-system information, referrer and IP address. STRATO processes this data on our behalf under Art. 28 GDPR.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is the secure, stable and technically reliable provision of the website and the detection and prevention of attacks. According to STRATO, IP addresses are stored for attack detection for no more than seven days. Web-server logs made available in the customer area contain anonymised host names or IP addresses and may remain available there for a limited period.
Further information is available in STRATO’s privacy information.
Consent management with Cookiebot
We use Cookiebot, a service provided by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, to manage and document your consent choices. In particular, your choice, its time, a shortened IP address, browser information and an anonymous identifier may be processed.
The legal bases are Art. 6(1)(c) GDPR in conjunction with Sec. 25 TDDDG and Art. 6(1)(f) GDPR. Our legitimate interest is compliant, user-friendly consent management. The storage periods are shown in the cookie overview.
Google Analytics 4
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. This may process pages viewed, technical device and browser data, approximate location, interactions and online identifiers. The service is loaded only after you consent to the “Statistics” category.
The legal bases are your consent under Art. 6(1)(a) GDPR and, where information is stored on or accessed from your device, Sec. 25(1) TDDDG. You can withdraw consent at any time with future effect in the cookie settings.
Google may process data in the United States. Where applicable, transfers are based on the EU-US Data Privacy Framework or appropriate safeguards under Art. 46 GDPR.
Contact
Controller
Please feel free to contact us. The controller responsible for data processing is: CEYLAN GmbH, Adlerstraße 6, 45307 Essen, Germany, +49 201 815039-0, info@ceylan-online.de
Customer-initiated contact by email
If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data processing serves the purpose of processing and responding to your enquiry.
If the contact serves to carry out pre-contractual measures (for example, advice in the event of an interest in purchasing, or the preparation of a quotation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in processing and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
We use your email address only to process your enquiry. Your data will subsequently be deleted, subject to statutory retention periods, unless you have consented to further processing and use.
Collection and processing of applications submitted by email
Visitors to our site may apply by email if they are interested in vacancies advertised on our website. In this context, we collect your personal data only to the extent that you provide it. This includes your contact details (e.g. name, email address, telephone number), information on your professional qualifications and education, information on professional development, and performance-related records.
The data processing serves the purpose of establishing contact and of deciding on the creation of an employment relationship with you. Provision of the data is necessary in order to carry out the application procedure. Your personal data is processed on the basis of Art. 6(1)(b) GDPR in conjunction with Sec. 26(1) BDSG for the purpose of carrying out pre-contractual measures (completion of the application procedure as the initiation of an employment contract).
Insofar as you have given us consent to process personal data for inclusion in our applicant pool, for example by ticking a checkbox, the processing is carried out on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent vis-à-vis us at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the point of withdrawal.
Insofar as special categories of personal data within the meaning of Art. 9(1) GDPR are requested from applicants in the course of the application procedure, such as information on the degree of severe disability, this is done on the basis of Art. 9(2)(b) GDPR so that we can exercise the rights and fulfil the obligations arising from employment law and the law on social security and social protection.
We store your personal data for as long as this is necessary in order to decide on your application. Your data will subsequently be deleted after no more than six months, unless you have consented to further processing and use. If an employment relationship arises following the application procedure, the data provided will be further processed on the basis of Art. 6(1)(b) GDPR in conjunction with Sec. 26(1) BDSG for the purposes of carrying out the employment relationship, and will subsequently be transferred to the personnel file.
WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; „WhatsApp“). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves the purpose of processing and responding to your enquiry. For this purpose, we collect and process the mobile telephone number stored in your WhatsApp account, your name if provided, and further data to the extent that you provide it. For this service we use a mobile device whose address book contains exclusively data of users who have contacted us via WhatsApp. Personal data is therefore not transferred to WhatsApp without your having already consented to this vis-à-vis WhatsApp.
WhatsApp may process data in the United States. Where applicable, transfers are based on the EU-US Data Privacy Framework or appropriate safeguards under Art. 46 GDPR. If the contact serves to carry out pre-contractual measures (for example, advice in the event of an interest in purchasing, or the preparation of a quotation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in providing a fast and simple means of contact and in responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
We use your personal data only to process your enquiry. Your data will subsequently be deleted, subject to statutory retention periods, unless you have consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service
Links to social networks and external services
Our website contains ordinary links to Instagram, LinkedIn, YouTube, TikTok, WhatsApp and the CEYLAN Shop. We do not load social-media plugins or embedded content from these providers. Only after you follow a link does your browser connect to that provider, which then processes data under its own responsibility.
Your rights
Where the statutory requirements are met, you have rights of access, rectification, erasure, restriction, data portability and objection under Arts. 15–22 GDPR. You may withdraw consent at any time with future effect.
You may also lodge a complaint with a data protection authority. The supervisory authority responsible for us is the State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.
To exercise your rights, contact info@ceylan-online.de or use the postal address above.