Skip navigation

Privacy Notice

We would like to thank you for visiting our website and for your interest in our work. Data protection and data security are of very high priority for GRABAND. Therefore, protecting your personal data throughout our business processes is very important and of particular concern for us.

The following statement on data protection explains what information we collect or gather during your visit to our website, and how this information is used.


Designation of the responsible body

The body responsible for the data processing on this website is:

Dr. Graband & Partner GmbH
Efeuweg 9
38104 Braunschweig, Germany
Tel.: +49 531 273830
E-mail: info<script type="text/javascript"> obscureAddMid() </script>graband<script type="text/javascript"> obscureAddEnd() </script>de

Data protection officer

Thomas Lemm
Efeuweg 9
38104 Braunschweig, Germany
Tel.: +49 531 273830
E-mail: datenschutz<script type="text/javascript"> obscureAddMid() </script>graband<script type="text/javascript"> obscureAddEnd() </script>de


Scope of the processing of personal data

We process our users' personal data only to the extent necessary for the provision of a functioning website, including its content and services. The processing of our users' personal data generally takes place only after the user has given their consent. One exception to this applies in those cases where consent cannot be obtained in advance for reasons of fact, and the processing of the data is permitted by law.

In the context of online applications for advertised jobs or speculative applications, your data will be stored and analysed by us for the purposes of the job-advertisement and application procedure. If your application interests us, but there is no suitable job available, we would be keen, in individual cases, to retain a copy of your application documents beyond the duration of a single application process. We would however ask in advance for your consent to do so. Further information on the processing of candidate data can be found in our information sheet Privacy notice regarding job-application process.


Legal basis for the processing of personal data

Insofar as we obtain the data subject's consent for operations involving the processing of personal data, Article 6(1a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis.

With regard to the processing of personal data, where this is required for the performance of a contract to which the data subject is party, Article 6(1b) GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.

Insofar as the processing of personal data is required for compliance with a legal obligation to which our company is subject, Article 6(1c) GDPR serves as the legal basis.

If the processing is required to maintain a legitimate interest of our company or of a third party, and if the interests, fundamental rights and freedoms of the data subject do not outweigh the former interest, then Article 6(1f) GDPR shall serve as the legal basis for the processing.


Withdrawal of consent for data processing

Some data processing operations are only possible with your explicit consent. You may withdraw any consent you have already granted at any time. Informal notification by email will suffice for withdrawal to be deemed effective. The legality of data processing having occurred before withdrawal remains unaffected by the withdrawal.


Right to file a complaint with the competent supervisory authority

As a data subject, you are entitled, in the event of a breach of data protection law, to file a complaint to the competent supervisory authority. The competent supervisory authority for legal questions around data protection is the data protection officer of the federal state in which the headquarters of our company is located. The following link provides a list of data protection officers and their contact details:


Right to data portability

You are entitled to have data that we have automatically processed on the basis of your consent or in the performance of a contract, handed over to yourself or to third parties. It shall be provided in a machine-readable format. If you require the data to be transferred directly to another controller, this may only be done insofar as this is technically feasible.


Right of access, rectification, blocking, erasure

Within the framework of the existing statutory provisions, you have the right to receive information – for free and at any time – about your stored personal data, the origin of the data, its recipients and the purpose of the data processing and, as appropriate, the right to have the data rectified, blocked or erased at any time. You may contact us at any time with regard to this matter, or with regard to any other questions on the subject of personal data, using the contact options given in the Legal Information section.


SSL and/or TLS encryption

For security reasons and for the protection of the transmission of confidential content that you send to us as the website operator, our website uses SSL and/or TLS encryption. Thus, data that you send via this website cannot be read by third parties. An encrypted connection can be recognised by the "https://..." address line in your browser, and by the lock icon in the browser line.


Server log files

Via server log files, the website provider automatically collects and stores information that your browser automatically transmits to us. This information consists of:

  • Name of the retrieved webpage, file
  • Date and time of access
  • Quantity of data transferred
  • Messages about successful access
  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • The requesting provider

This data is not compiled with other data sources. Article 6(1b) GDPR forms the legal basis for the processing of data, where this permits the fulfilment of a contract or of pre-contractual measures.

The server-log-file information assures the stable provision of the websites, as well as security and the verification of hazards; the server-log-file information is only stored for a certain period of time and is then deleted. If the further retention of the data is required for evidential purposes, it is not deleted until the final clarification of the incident.



If contact is made (e.g. via email, contact form, telephone or via social media), the user's information is used in order to process the query. If the aim of the email contact is the conclusion of a contract, then the legal basis for the processing is deemed to be Article 6(1b) GDPR. Otherwise, the legal basis for the processing of data sent in the course of email correspondence is Article 6(1f) GDPR. The details of the information about the user may be stored in a customer relationship management ("CRM") system or on similar management software.

Data regarding the queries will be erased if no longer needed. Such necessity is assessed at regular intervals (usually every two years). Furthermore, statutory archiving obligations can apply.

If the user contacts us by email, he/she may object to the storage of his/her personal data at any time. In such a case, the conversation cannot be continued.



Our website uses cookies. They are small text files that your web browser stores on your device. Cookies help us to make our website more user-friendly, more effective and safer.

Some cookies are "session cookies". These cookies are automatically deleted after the end of your browser session. However, other cookies will remain on your device until you delete them yourself. These cookies help us to recognise you when you return to our website.

Using modern web browsers, you can monitor, restrict or prevent the use of cookies. Many web browsers can be configured so that cookies are automatically deleted upon closing down the program. The deactivation of cookies may lead to the limited functionality of our website.

The placement of cookies required for the purpose of electronic communication activities or for the provision of certain functions you wish to use (e.g. shopping basket), is performed on the basis of Article 6(1f) GDPR. As the operator of this website, we have a legitimate interest in the storage of cookies, so as to ensure a the technically error-free and smooth provision of our services. Insofar as other cookies are placed (e.g. for analysis functions), they are dealt with separately in this privacy notice.


Integration of services and content from third parties

As part of our website, and based on our legitimate interests (e.g. an interest in optimising the economic operation of the website by analysis techniques pursuant to Article 6(1f) GDPR), we use content or service offerings from third-party vendors so as to improve our website, for example through the integration of fonts or maps.

As a result of this, it is technically necessary (for presentation purposes) for the third party to receive, for example, the user's IP address via the standard browser communication channels.

Although this is not usually our intention, third-party providers may send invisible graphics (pixel tags) for statistical and marketing purposes. This allows data about visitors to the website to be generated (for example, name of the webpage accessed, file, date and time of access, amount of data transferred, messages about successful access, the user's browser type, operating system, referrer URL, IP address, and the requesting provider), and data may also be linked with other sources not known to us, for example, through the use of cookies.


Google Analytics

This website uses Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses so-called "cookies", which are text files placed on your computer to enable your use of the website to be analyzed. The information generated by the cookies regarding your use of this website will usually be transferred to a Google server in the USA and stored there. If IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within the Member States of the European Union or other signatories to the Agreement on the European Economic Area. We would like to point out that Google Analytics was extended on this website by the code "gat._anonymizeIp()" in order to guarantee anonymized collection of IP addresses (IP masking).

Only in exceptional cases will the full IP address be transferred to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website in order to compile reports about website activities and to provide additional services relating to website and Internet use. The IP address communicated by your browser as part of Google Analytics is not associated with any other data held by Google.

You can prevent the storage of cookies by selecting the appropriate settings on your browser software; however, please note that if you do so, you may not be able to use all the functions of this website to their full extent. You can also prevent the release of data generated by the cookies about your use of the website (including your IP address) to Google as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: You can prevent Google Analytics from collecting information by clicking the following link. An opt-out cookie will be installed that prevents the future collection of your information when you visit this website: Disable Google Analytics. Please note that when you delete the cookies on your device you will need to go back onto the link.

More information on user conditions and data privacy can be found at and at


Google maps

The website uses maps from the "Google Maps" service of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

Privacy policy of the provider:

Provider opt-out:


Google fonts

The website uses fonts of the provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland.

Privacy policy of the provider:

Provider opt-out: