Privacy Policy and further information about our online offer


Privacy policy and further information about our internet presence is a service of Gesellschaft für Anlagen- und Reaktorsicherheit (GRS) gGmbH. You can find more information about us in our legal notice.

1. Privacy policy

Contact details of the person responsible pursuant to the GDPR

Gesellschaft für Anlagen- und Reaktorsicherheit (GRS) gGmbH
Schwertnergasse 1
50667 Köln

GRS takes the protection of personal data seriously and collects this data sparingly and only where it is necessary for the user-friendly provision of our information services. As a company under private law, we are subject to the provisions of the European General Data Protection Regulation (GDPR), the Telecommunications Telemedia Data Protection Act (TTDSG) and the Federal Data Protection Act (BDSG). We have taken technical and organisational measures to ensure that the regulations on data protection are observed both by us and by external service providers.

a.) General remarks

In order to better adapt our websites and apps to your needs and to protect our technical systems, personal data is collected and processed to the extent necessary for this and in various ways - in particular through technically necessary cookies, server log files, and the integration of third-party media.

We explain below which personal data are specifically collected and processed (b.) and which rights you have as a data subject (c.).

For questions and information on the topic of data protection at GRS, please contact the data protection officer of GRS gGmbH.

Gesellschaft für Anlagen- und Reaktorsicherheit (GRS) gGmbH
Schwertnergasse 1
50667 Köln


The data protection officer is also the contact person for the enforcement of your rights as a data subject (see 1 c.)).

b.) Information about the (automatic) collection and processing of personal data, about the purposes of the data processing and to establish the lawfulness of the processing pursuant to Art. 6 para. 1 lit. f GDPR and other legal bases


Cookies are small pieces of information that a provider stores in the RAM of the visitor's computer. A randomly generated, unique identification number, a so-called session ID, is stored in a session cookie. In addition, a cookie contains information about its origin and the storage period. These cookies cannot store any other data. The software uses session cookies to allow unique identification of visitors.

When calling up the GRS website, only technically necessary cookies are set. The session cookies used on this page do not contain any personal data and are deleted after the forms are submitted or the browser is closed. This information is not merged with personal data.


Your visit to this website is currently recorded using the privacy-friendly web analysis service Matomo. The information collected is used exclusively for statistical purposes and to improve the website and server. Further information can be found in the Matomo Cloud Privacy Policy and in the Matomo Data Processing Addendum.

The software is set in such a way that the IP addresses are not stored completely, but 2 bytes of the IP address are masked (e.g.: In this way, it is no longer possible to assign the shortened IP address to the calling computer, so that you remain anonymous as a user.

The following information is stored: title of the page visited, search engines used, page URL, number of pages visited, location of the visitor (country), provider, browser, operating system, screen resolution, browser plug-ins, visit times, visit duration, entry pages, exit pages, downloads, referring websites.

As a user, you can opt to object to tracking by Matomo at any time here. If you would like to adjust your decision regarding the analysis of your visit (web analysis) using the cookie or revoke the consent you have already given, you can do this here for the rest of your visit.

The software also sets a so-called session cookie.

    Links to websites and social media providers

Our website contains links to websites of other providers and social media. The links to social media providers are - in contrast to the use of so-called social media plugins - generally only integrated on our website as a link to the corresponding services. Only after clicking on the embedded graphic will you be redirected to the page of the respective provider; i.e. only then will user information be transmitted to the respective social media provider. In these cases, there is no direct data transmission from our website to social network providers. For information on the handling of your personal data when using these websites, please refer to the respective privacy policies of the providers. We expressly draw your attention to the fact that they process the data of their users in accordance with their own privacy policies. GRS has no influence on whether these providers comply with the privacy policy.

    Use of YouTube plug-ins

In addition to links to websites and social media providers, our websites also use so-called social plug-ins of the social network YouTube (YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA).

The videos are stored on You can play these videos directly from our website. The videos are all embedded in "extended data protection mode", which means that no data about you as a user is stored by YouTube unless you play the videos. Nevertheless, YouTube contacts the Google service Double Click, but according to YouTube, no data is stored in this case. Only when you play the videos is your IP address and the information that you have watched the video stored by YouTube. If you are logged in to YouTube, this information is also assigned to your YouTube user account. If you do not wish this, you must log out of your YouTube account before playing the video. We have no influence on the data collection and processing by YouTube. You can find more information about data processing by YouTube in their privacy policy. You can find this under

    Communication via contact/registration form, e-mail or newsletter

Personal data is collected by us when you provide it to us, for example when you contact us. We will, of course, use the personal data provided to us in this way exclusively for the purpose for which you provide it when contacting us or registering for an event. Any communication of this information is expressly on a voluntary basis and with your consent, the legal basis being Art. 6 para. 1 lit. a GDPR. Insofar as this involves information on communication channels (e.g. e-mail address, telephone number), you also consent to us contacting you via this communication channel, if necessary, in order to respond to your request. You can, of course, revoke your declarations of consent at any time for the future.

    Application procedure

If you apply for jobs advertised by us, you can preferably do so by e-mail. Please note that our e-mails are only transport encrypted (SSL/TSL) by default. Please make sure that transport encryption (SSL/TSL) is also set in your e-mail program. The use of transport encryption offers basic protection. If you require "end-to-end encryption", please let us know in advance of your application. You yourself determine the scope of the data that you wish to transmit to us as part of your application. For applications by e-mail, please only use the e-mail address This ensures that only the employees responsible for processing HR matters have access, and only insofar as this is necessary for the purposes of applicant management and human resources administration.

We process the data that you disclose to us as part of your application exclusively for the purpose of selecting applicants and, if an employment relationship is established following an application, for the implementation of the employment relationship. The processing is carried out on the basis of Art. 88 GDPR in conjunction with § 26 BDSG. If an employment relationship is established, the necessary application documents will be added to the personnel file. No data will be processed for other purposes. As a rule, applications are forwarded to the direct managers of the position you are applying for after a pre-selection has taken place. Your application data will not be passed on for any other purpose. Your details will be treated confidentially within our organisation. If your application is unsuccessful, your documents will be deleted after six months, unless there are longer-term retention obligations under other laws or regulations.

If we are also allowed to consider your application for other or future job advertisements, please note this directly on the application. We will then process your data on the basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time. 

    Server logs (log files)

When you use our website, our servers automatically record data for backup purposes that may allow identification. These server log files contain the anonymised IP address, browser type, browser language as well as the date and time of your request and pages viewed. There is no personal utilisation. We store IP addresses for a maximum of seven days. They are stored for data security reasons to ensure the stability and operational reliability of our system. These server log files do not leave the GRS website structure. Statistics are compiled by the GRS web server at hourly intervals. The log files of the web server serve as a source here, but after the one-off processing they are only used in anonymised form (e.g. the calls through Google links are only kept in the statistics as a continuous number, but a list of IP addresses is not kept). The local statistics are therefore anonymised.

c.) Rights of the data subject

If your personal data is processed, you are a data subject as defined by the GDPR or the German Federal Data Protection Act (BDSG) and you have various rights (in particular the right to information Art. 15 GDPR, the right to rectification Art. 16 GDPR, the right to erasure Art. 17 GDPR, the right to restriction of processing Art. 18 GDPR, the right to object Art. 21 GDPR) vis-à-vis the data controller.

Please note: If the identification of the data subject by the data controller is not or no longer necessary for the purposes for which the data controller processes personal data, the data controller is not obliged under Article 11 GDPR to retain, obtain or process additional information in order to identify the data subject for the sole purpose of complying with this Regulation. If the data controller can demonstrate that they are unable to identify the data subject, they shall inform the data subject of this, where possible. In such cases, Articles 15 to 20 shall not apply unless the data subject provides additional information enabling them to be identified in order to exercise their rights laid down in those Articles.

Right to revoke a declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Right of complaint to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

2. Contents of the internet presence

The author accepts no responsibility for the topicality, correctness, completeness or quality of the information provided. Liability claims against the author relating to material or non-material damage caused by the use or non-use of the information provided or by the use of incorrect or incomplete information are excluded as a matter of principle, insofar as there is no demonstrable intentional or grossly negligent fault on the part of the author. All services offered are subject to change without notice and are non-binding. The author expressly reserves the right to change, supplement or delete parts of the pages or the entire service without prior notice or to cease publication temporarily or permanently.

3. References and links, legal validity of the disclaimer

In the case of direct or indirect references to external websites (\"hyperlinks\") that lie outside the author's area of responsibility, a liability obligation would only come into force if the author had knowledge of the content and it would be technically possible and reasonable for him to prevent use in the case of illegal content. The author hereby expressly declares that at the time the links were created, no illegal content was discernible on the linked pages. The author has no influence on the current and future design, content or authorship of the linked pages. For this reason, he hereby expressly distances himself from all content of all linked pages that have been changed after the link was created. This statement applies to all links and references set within the author's own internet presence. For illegal, incorrect or incomplete content and in particular for damages arising from the use or non-use of such information, the provider of the page to which reference is made shall be solely liable, and not the party who merely refers to the respective publication via links.

This disclaimer is to be regarded as part of the internet presence from which reference was made to this page. If sections or individual phrases of this text do not comply, no longer comply or do not fully comply with the applicable legal situation, the content and validity of the remaining parts of the document shall remain unaffected.

4. Copyright and trademark law

The author endeavours to observe the copyrights of the photos, graphics, sound documents, video sequences and texts used in all publications, to use photos, graphics, sound documents, video sequences and texts created by himself or to resort to licence-free photos, graphics, sound documents, video sequences and texts.

All brand names and trademarks mentioned on the website and possibly protected by third parties are subject without restriction to the provisions of the applicable trademark law and the ownership rights of the respective registered owners. The mere mention of a trademark does not imply that it is not protected by the rights of third parties.

The copyright for published objects created by the author himself remains solely with the author of the pages. Any duplication or use of objects such as diagrams, sounds or texts in other electronic or printed publications is not permitted without the author's express permission.

Insofar as GRS publishes reports prepared by it within the scope of its internet presence, these are protected by copyright.

Status: 04 March 2024