top of page

Data protection

NP4 GmbH is committed to data protection and respects your privacy. This data protection declaration would like to inform you about our data protection regulations and data protection-compliant measures in order to enable user-controlled data processing in the sense of the informational self-determination protected by the Federal Constitutional Court. Accordingly, we would like to enable you to determine how and in what form your data is electronically recorded and for what purposes it is processed. Our Internet pages are basically designed in such a way that they can be visited and used without identifying or providing personal data. This declaration can be called up on the start page as well as on all other pages in the footer.

§ 1 General information and notes

In the following we inform you about the collection of personal data when using our website. Personal data are all data that can be related to you personally, e.g. B. Name, address, email addresses, user behavior.


Contact options

​ The person responsible in accordance with Article 4 No. 7 of the EU General Data Protection Regulation (GDPR) is

  • NP4 Ge­sell­schaft für Netzwerk- undKom­mu­ni­ka­ti­ons­sys­te­me mbH
    Gräfenhäuser Straße 26
    64293 Darmstadt
    Phone: +49 6151 42846 0
    (see legal notice)


Responsible data protection supervisory authority

  • The Hessian Commissioner for Data Protection and Freedom of Information
    Gustav-Stresemann-Ring 1
    65189 Wiesbaden

You can contact our external data protection officer at

  • CTM-COM GmbH
    Mr. Moritz Görmann
    Contact person: Nikolai Haas
    In the Leppsteinswiesen 14
    64380 Roßdorf
    Phone: +49 6154 57605 111


When you contact us, the data you provide (your e-mail address, possibly your name and telephone number) will be saved by us in order to answer your questions. We delete the data that arises in this context after it is no longer required to store it, or we restrict processing if there are statutory retention requirements.

The processing of this data takes place on the basis of Art. 6 Para. 1 S. 1 lit. In all other cases, the processing is based on your consent (Art. 6 Paragraph 1 Sentence 1 Letter a GDPR) and / or on our legitimate interests (Art. 6 Paragraph 1 Sentence 1 Letter f GDPR), as we have a legitimate interest in the effective processing of the inquiries sent to us.
If we use contracted service providers for individual functions of our offer or would like to use your data for advertising purposes, we will inform you in detail below about the respective processes. We also state the specified criteria for the storage period.

Your rights

You have the following rights vis-à-vis us with regard to your personal data:

  • Right to information

  • Right to rectification or deletion

  • Right to restriction of processing

  • Right to object to processing

  • Right to data portability


You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

To exercise your rights with regard to your personal data, please contact .

Please note that in the event of a request for information, we will store both this request and our subsequent information for the purposes of evidence regarding the proper information for a period of three years.

Objection or revocation against the processing of your data

If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case, in particular, if the processing is not necessary to fulfill a contract with you, which we describe in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either stop or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue processing.

You can of course object to the processing of your personal data for advertising and data analysis purposes at any time.

§ 2 Processing of personal data

If you only use the website for information purposes, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server.

If you would like to view our website, we collect the following data, which is technically necessary for us to display our website to you and to guarantee stability and security (legal basis is Art. 6 Para. 1 S. 1 lit.f GDPR):

  • Name of the file accessed

  • Date and time of the call

  • amount of data transferred

  • Message as to whether the retrieval was successful

  • Description of the type of web browser used

  • requesting domain


Data transfer to service providers and partners

In some cases, we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly.

Furthermore, we can pass on your personal data to third parties if we offer participation in campaigns, competitions, conclusion of contracts or similar services together with partners. You will receive more information on this when you provide your personal data or in the description of the offer.

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you in the description of the offer.

Data transfers to the USA

The US is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. In particular, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly even without the possibility of redress.

Please note in particular the further information on the tools and services we use in this data protection declaration with regard to data transfers to the USA.

Many tools and services use so-called "cookies" (more on this below under "Cookies"). Typically, data transfers to the USA from US providers such as e. B. Google, Facebook, Twitter, YouTube, LinkedIn etc. go hand in hand. If you do not want this, make sure that you do not give the corresponding consent that we obtain when you access the website.

§ 3 Additional information

The following points contain our more extensive data protection promises.

1. Use of data

The information provided by users during the registration process will only be evaluated by NP4 GmbH in anonymised form for statistical purposes with the consent of the user. Addresses will not be sold to third parties.

2. Confidentiality

The employees of NP4 GmbH are obliged to maintain secrecy about personal data. This data is only passed on to third parties if this is necessary for the fulfillment of the contract. Such third parties are also obliged by NP4 GmbH through agreements to observe the data protection of the users.

3. Data security

All under  Any data that is located and stored on the servers is protected from unauthorized access by a series of security systems. Employees of NP4 GmbH and their system service providers regularly check the effectiveness of the protection.

4. Automatically collected non-personal data

When you access our website, information generated automatically (i.e. not via registration) is occasionally collected that cannot be assigned to a specific person (e.g. by means of an Internet browser or an operating system; domain names of websites from which are accessed via a web link; number of visits; average dwell time; pages accessed). We use this information to constantly improve and update the appearance of our website and to increase its attractiveness. The data cannot be assigned to a specific natural person, but only allow statistical conclusions.

5. Transfer of data to third parties

NP4 GmbH will not sell, rent or in any other way make your personal data available to third parties. NP4 GmbH does not pass on your data to third parties unless you are interested in products and services from third parties. When providing your data, we need your express consent.

6. Personal data security

NP4 GmbH is committed to protecting your personal data. In order to prevent unauthorized access or disclosure of your data and to guarantee the correctness and lawful use of your data, NP4 GmbH has appropriate technical and organizational procedures to protect and secure the data recorded.

We use SSL encryption (SSL = Secure Sockets Layer) when collecting or transmitting confidential data, such as credit card numbers. The SSL encryption ensures that nobody but us can read the data. This security standard is active when either the symbol of an intact key or a closed lock (depending on the browser) appears in the lower area of your browser window.

Credit card numbers are used only for payment processing and for no other purpose. As part of real-time payment processing, NP4 GmbH works closely with the security authorities. This offers you and NP4 GmbH a plus in security, prevents credit card fraud and protects your financial data from misuse.

7. Modification of this declaration

If updates to this data protection declaration become necessary, we will provide the changes and update the change date of this document accordingly. In this way, you always know what data we collect online, how it is used and what protection options are available to you.

8. Contact

We take care of compliance with data protection regulations in all areas of our platform and our company. Your opinion is important to us. If you have any comments or questions about our privacy policy, please contact
NP4 GmbH  privacy .

§ 4 Cookies ("Cookie Policy")

What are cookies?

Our website uses so-called cookies to save user-specific data. Cookies are small files that are stored on your computer by our website and contain certain user data about you, such as language or personal page settings. When you call up our site again, your browser transmits the "user-related" information back to our site. Thanks to cookies, our website knows who you are and offers you your usual standard settings. A cookie consists of a name and a value.


Consent to the use of cookies

When you visit our website for the first time, you will be asked which cookies you would like to allow (using a so-called “cookie banner” or “cookie consent tool”). Cookies that are not essential to provide the services of this website are only used after you have given your consent. However, this decision is in turn stored in a cookie for the purpose of verification and to implement your setting.


You can view and change your "cookie settings" at any time using the button at the bottom of the screen.

The use of cookies represents a legitimate interest and is justified by Art. 6 Para. 1 S. 1 lit.f GDPR. In the case of non-essential cookies, the processing of your personal data by cookies takes place on the basis of your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR for the individual cookies. You are entitled to the rights described in Section I. at all times.


By opting out of the use of the respective cookies by US providers such as If, for example, you consent to Google, Facebook, Twitter, YouTube, LinkedIn, etc., you also consent to your data being processed in the USA in accordance with Art. 49 Para. 1 S. 1 lit.

Whether cookies are set and which data is stored in them under which other circumstances is also explained in more detail in our information on the tools, plug-ins and services used.

First party and third party cookies

There are both first-party cookies and third-party cookies. First-party cookies are created directly from our side, third-party cookies are created by partner websites or their tools / plug-ins / services (e.g. Google Analytics). Each cookie must be evaluated individually, as each cookie stores different data. The expiry time of a cookie also varies from a few minutes to a few years. Cookies are not software programs and do not contain viruses, Trojans or other "pests". Cookies cannot access information on your PC either.

What types of cookies are there?

Absolutely necessary cookies

These cookies are necessary to ensure the basic functions of the website. For example, when the user puts a product in the shopping cart, then surfs on other pages and only goes to checkout later. These cookies do not delete the shopping cart, even if the user closes his browser window.


Absolutely necessary cookies used


    • Used for security reasons​

      • Duration: session​

  • hs

    • Used for security reasons​

      • Duration: session​

  • svSession

    • Used in connection with user registration​

      • Duration: 2 years​

  • SSR caching

    • Used to indicate the system from which the website was rendered​

      • Duration: 1 minute​

  • _wixCIDX

    • Used for system monitoring / troubleshooting​

      • Duration: 3 months​

  • _wix_Browser_sess

    • Used for system monitoring / troubleshooting ​​

      • Duration: session​

  • consent policy

    • Used for the parameters of the cookie banner​

      • Duration: 12 months​

  • smSession

    • Used to identify registered website members​

      • Duration: session​

  • TS *

    • Used for security reasons and to combat fraud​

      • Duration: session​

  • bSession

    • Used to measure system effectiveness​

      • Duration: 30 minutes​

  • fedops.logger.sessionId

    • Used to measure system effectiveness​

      • Duration: 12 months ​


Functional cookies

These cookies are not absolutely necessary, but they increase the functionality of the website. This includes, for example, information such as user names, language selection, form data entered once, size of the font, etc.

Functional cookies used:

  • wixLanguage

    • Used on multilingual websites to save the user's language​

      • Duration: 12 months ​


Marketing cookies

Cookies for marketing purposes are used to measure the effectiveness of advertising, to record the interests of visitors and to adapt advertisements to their personal needs.

Cookies used for marketing purposes

  • test_coockie

    • Is set as a test to check whether the browser allows cookies to be set. Does not contain any identification features.

      • Duration: 15 minutes

  • IDE

    • Contains a randomly generated user ID. Using this ID, Google can recognize the user across different websites across domains and display personalized advertising.

      • Duration: 12 months

Analytics cookies

These cookies collect information about user behavior on the website and whether users receive error messages (if so, which ones?) In order to enable the content and structure of the website to be improved. These cookies are also used to measure loading times or the behavior of the website with different browser types.

Analytics cookies used:

  • __utma

    • Contains a randomly generated user ID. Using this ID, Google Analytics can recognize returning users on this website and merge the data from previous visits.

      • Duration: 24 months

  • __utmb

    • Contains a randomly generated session ID. This cookie is stored for only 30 minutes. All actions that a user takes on the website within this period are summarized in Google Analytics in a "visit" (session).

      • Duration: 30 minutes

  • __utmc

    • Contains a randomly generated session ID. This cookie is no longer actively used and is only set for reasons of compatibility with an older version of Google Analytics.

      • Duration: session

  • __utmt

    • Certain data is only sent to Google Analytics a maximum of once every 10 minutes. The cookie has a lifespan of 10 minutes. As long as it is set, certain data transfers are prevented.

      • Duration: 10 minutes

  • __utmz

    • This cookie stores information about the source (from which other website or via which advertisement) a user last came to the website.

      • Duration: 6 months

Deactivation or deletion of cookies on the browser side

You can set your web browser so that cookies are generally prevented from being saved on your device or you are asked each time whether you agree to the setting of cookies. Once you have set cookies, you can delete them at any time. How this works is described in the help function of the web browser you are using.
A general deactivation of cookies can lead to functional restrictions on this website.

§ 5 (Online) Application

Purpose and legal basis of the processing

We process your personal data to establish an employment relationship in accordance with Art. 6 Para. 1 S. 1 lit. V. m. Art. 88 GDPR and § 26 BDSG. The processing takes place exclusively for the purpose of assessing your suitability, qualifications and professional performance with regard to the position for which you are applying. We also process your personal data for specific purposes (e.g. for longer storage) if you have given us your consent to data processing within the meaning of Art. 6 Para. 1 S. 1 lit. V. m. Art. 7 GDPR.

If necessary, we are obliged to process your personal data in accordance with Article 6, Paragraph 1, Sentence 1, Letter c GDPR. There may be various legal obligations for this (e.g. obligations under the Commercial Code; the Tax Code; for the storage of tax-relevant data; according to the Social Security Code; according to the General Equal Treatment Act; or other relevant regulations).

Expiry, recipient and storage period

Your online application data will be sent directly to the HR department by email and will of course be treated confidentially. The necessary organizational and technical measures ensure that your personal data is treated confidentially within the statutory provisions. When completing your online application, please note that the data is transmitted unencrypted by e-mail and that the data could possibly be read or falsified by unauthorized persons.

If you have applied for a specific position and it is already filled, or if we consider you also or even better suited for another position, we would be happy to forward your application within our company. Please inform us if you do not agree with this procedure.

After completion of the application process, but no later than 6 months , your personal data will be automatically deleted, unless you expressly consent to storage for a longer period of time.

§ 6 Analysis tools

Google Analytics

General information
We use Google Analytics, a web analysis service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043 USA. Google Analytics uses so-called "cookies", which enable you to analyze usage behavior on the website. The data collected in this way is used by Google to provide us with an evaluation of the visit to our website and of the usage activities there. This data can also be used to provide other services related to the use of our website and the Internet.

Processed categories of data
As part of the service, usage and user-related information such as IP address, location, time or frequency of visits to our website are recorded.

Legal basis
The legal basis is Article 6, Paragraph 1, Sentence 1, Letter f of the GDPR. Our legitimate interest lies in the analysis, optimization and economic operation of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.
The legal basis for setting the cookie is the consent you have given in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. You can find details on this under the heading "Cookies" above.

Deactivation of data collection by Google Analytics
You can revoke your consent to the storage of cookies at any time. For this we refer to the previous information on "cookies" and the rights you are entitled to.

You can also prevent the storage of cookies by setting your browser software accordingly; we would like to point out, however, that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by using the browser plug-in available under the following link. Download and install in: .

IP anonymization

We have implemented the IP address anonymization of Google Analytics on this website. The anonymization or masking of the IP takes place as soon as the IP addresses arrive in the Google Analytics data collection network and before the data is stored or processed. As a result, IP addresses are further processed in abbreviated form, so that personal references can be ruled out. You can find more information on IP anonymization at: .

Data protection of the provider
You can find Google's privacy policy at ; as well as the terms of use for Google Analytics at: .
It cannot be ruled out that the processing is carried out by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. Please note our information on data transfers to the USA.

§7 Embedded Services


Integration of YouTube videos


General information
We have integrated YouTube videos into our online offer, which are stored on and can be played directly from our website. [These are all integrated in the "extended data protection mode", which means that no data about you as a user will be transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer.] Without this "extended data protection", a connection to the YouTube server in the USA is established as soon as you call up one of our Internet pages on which a YouTube video is embedded.

Processed categories of data
As soon as you visit one of our pages that has a YouTube video integrated, YouTube sets at least one cookie that saves your IP address and our URL. If you are logged into your YouTube account, YouTube can usually assign your interactions on our website to your profile with the help of cookies. This includes data such as session duration, bounce rate, approximate location, technical information such as browser type, screen resolution or your Internet provider. Further data can be contact details, any ratings, sharing content via social media or adding it to your favorites on YouTube. If you want to prevent this, you must either log out of YouTube before visiting our website or make the appropriate settings in your YouTube user account.

If you are not signed in to a Google account or a Youtube account, Google stores data with a unique identifier that is linked to your device, browser or app. For example, your preferred language setting is retained. But a lot of interaction data cannot be saved because fewer cookies are set.

Legal basis
The legal basis is Article 6 (1) lit.f GDPR. Our legitimate interest lies in improving the quality of our website.
For the purpose of functionality and to analyze usage behavior, YouTube permanently saves cookies on your device via your Internet browser. If you do not agree to this processing, you have the option of preventing the storage of cookies by setting your Internet browser.
The legal basis for setting the cookie is the consent you have given in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. You can find details on this under the heading "Cookies" above.

Data protection of the provider
Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: . Google also processes your personal data in the USA.

​§ 8 Social Media

general information
We maintain publicly accessible profiles on social networks. The individual social networks we use can be found below.
Social networks can generally analyze your user behavior comprehensively when you visit their website or a website with integrated social media content (e.g. like buttons or advertising banners). Visiting our social media profile triggers numerous data protection-related processing operations.

Personal data
If you are logged into your social media account and visit our social media profile, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data can also be recorded if you are not logged in or do not have an account with the respective social media portal. In this case, this data is recorded, for example, using cookies that are stored on your device or by recording your IP address.

With the help of the data collected in this way, the operators of the social media portals can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media profile. If you have an account with the respective social network, the interest-related advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot retrace all processing processes on the social media portals. Depending on the provider, further processing operations can therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and data protection provisions of the respective social media portals.

Notice of risks
We would like to point out that the respective providers can process user data outside of the European Union. This can result in risks for the user, because z. B. enforcing the rights of users could be made more difficult. With regard to US providers who offer guarantees of a secure level of data protection through, for example, EU standard contractual clauses, we would like to point out that they undertake to comply with EU data protection standards.

Purpose of processing / legal basis
Our own processing of personal data on our social media sites is based on our legitimate interests in accordance with Art. 6 Paragraph 1 Sentence 1 lit. to find the publication and to communicate with the customers, interested parties and users who are active there. We have no influence on any further processing by the provider.

The legal basis for setting the aforementioned cookies is the consent you have given in accordance with Art. 6 Paragraph 1 Clause 1 lit. a GDPR. You can find details on this under the heading "Cookies" or under "Social Media Plugins".

Shared responsibility
If you visit one of our social media sites (e.g. Facebook), we and the operator of the social media platform are responsible for the data processing operations triggered during this visit.

Please note that, despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are largely based on the company policy of the respective provider.

Rights management
In principle, you can exercise your rights against us as well as claim against the operator of the respective social media portal.

However, we would like to point out that these can be most effectively asserted with the operators. Only the operators have access to the data of the users and can take appropriate measures and provide information. If you still need help, please do not hesitate to contact us.

Storage period
The data collected directly by us via the social media profile will be deleted from our systems as soon as the purpose for their storage no longer applies, you ask us to delete them, revoke your consent to storage or the purpose for data storage no longer applies. Saved cookies remain on your device until you delete them. Mandatory legal provisions - especially retention periods - remain unaffected.

We have no influence on the storage period of your data, which is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Data protection of the provider
For a detailed description of the respective forms of processing and the possibilities of objection (opt-out), we refer to the data protection declarations and information provided by the providers of the respective social media networks, over which we have no influence and which apply when the respective websites are accessed.

Existing social media profiles

a) Facebook

Own profile: 
Service provider: Facebook Ireland Ltd. also Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA; Website: ;

Data protection declaration:

"Insights data"
Furthermore, when using our fan page, Facebook provides us with statistical data from various categories (so-called "Insights data"), which we can access accordingly. These page insights are aggregated data that allow us to understand how people interact with our page. This includes: the total number of page views, "likes", page activities, post interactions, video views, post range, comments, shared content, responses, proportion of men and women, origin based on country and city, language, views and clicks in the shop, Clicks on route planner and clicks on phone numbers.
Further information on “Insights data”, including how to exercise your rights, is available at: .

Shared responsibility
According to Art. 26 GDPR, the fan page operator and Facebook are jointly responsible.
A corresponding agreement was made with the fan page operators for this purpose (available at:
Facebook assumes primary responsibility for the processing of Insights data in accordance with the GDPR and fulfills all of the obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR ) fulfill.
You can contact Facebook's data protection officer using the general contact form at or for insights data at .

b) Instagram

Own profile:
Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA;

Website: ;

Data protection declaration: ;

Opposition option (opt-out): .

c) LinkedIn
Own profile:
Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;

Website: ;

Data protection declaration : ;

Opposition option (opt-out): .

d) Xing
Own profile:
Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany;

Website: ;

Data protection declaration: .

Linking of social media profiles via graphic or text link

We also link to social media profiles on the platforms listed above on our website. The integration takes place via a linked graphic or a text link of the respective platform. The use of this link prevents that when a website that has a social media link is called up, a connection is automatically established to the respective server of the platform in order to display a graphic of the respective platform itself. The user is only forwarded to the service of the respective platform by clicking on the corresponding graphic. After the user has been forwarded, information about the user is recorded by the respective provider. It cannot be ruled out that the data collected in this way will be processed in the USA. Please note our information on data transfers to the USA. This is initially data such as the IP address, date, time and page visited. If the user is logged into his user account on the respective platform during this time, the operator can, if necessary, assign the information collected from the specific visit of the user to his personal account. If the user interacts via a “share” button on the respective platform, this information can be saved in the user's personal user account and, if necessary, published. If the user wants to prevent the information collected from being directly assigned to his user account, he must log out before clicking on the graphic. It is also possible to configure the respective user account accordingly.

bottom of page