Privacy Policy

We are pleased that you are visiting our website. The protection and security of your personal information when you use our website are very important to us. We would therefore like to inform you at this point which of your personal data we collect when you visit our website, and for which purposes it is used. This privacy policy applies to the Internet offer of ATIX Informationstechnologie und Consulting AG, which is accessible under the domains atix.de, orcharhino.com, osad-munich.org as well as the various subdomains (“our website”).

Who is responsible and how can I contact you?

Responsible

for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR) ATIX Informationstechnologie and Consulting AG Parkring 15 85748 Garching Germany +49 89 4523538-0 info@atix.de

Data protection officer

www.mein-datenschutzbeauftragter.de Mr. Philipp Herold Hafenstr. 1a 23568 Lübeck datenschutz@atix.de

What is this about?

This privacy policy meets the legal transparency requirements in the processing of personal data. This refers to all information relating to an identified or identifiable natural person. This includes, for example, information such as name, age, address, telephone number, date of birth, e-mail address, IP address, or user behavior when visiting a website. Information for which we cannot (or only with a disproportionate effort) establish a reference to your person, e.g., by anonymization, is not personal data. The processing of personal data (e.g., collection, retrieval, use, storage, or transmission) always requires a legal basis and a defined purpose. Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate grounds for further storage of the data. We will inform you about the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal in individual cases for the assertion, exercise, or defense of legal claims and if there are statutory retention obligations.

Who gets my data?

We only disclose your personal data that we process on our website to third parties if this is necessary for the fulfillment of the purposes and is covered by the legal basis in the individual case (e.g., consent or protection of legitimate interests). In addition, we disclose personal data to third parties in individual cases if this serves the assertion, exercise, or defense of legal claims. Possible recipients may be law enforcement agencies, lawyers, auditors, courts, etc. Insofar as we use service providers for the operation of our website who process personal data on our behalf within the scope of commissioned processing pursuant to Art. 28 GDPR, they may be recipients of your personal data. For more information on the use of processors and web services, please refer to the overview of the individual processing operations.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your end device during your visit to our website and stored there. As an alternative to the use of cookies, information can also be saved in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies allow us to perform various analyses, so that we are able to, for example, recognize the browser you are using when you visit our website again and transmit different information to us (nonessential cookies). With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, e.g., by tracking your use of our website and determining your preferred settings (such as country and language settings). If third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses. We provide information about the respective services for which we use cookies in the individual processing procedures. You can find detailed information about the cookies used in the cookie settings or in the Consent Manager of this website.

What rights do I have?

Under the conditions of the statutory provisions of the General Data Protection Regulation (GDPR), you have the following rights as a person concerned:

  • Information pursuant to Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
  • Correction pursuant to Art. 16 GDPR of incorrect or incomplete data stored by us;
  • Deletion pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims;
  • Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you object to their deletion because you need them for the assertion, exercise, or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
  • Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 para. 1 lit. a GDPR or on the basis of a contract pursuant to Art. 6 para. 1 lit. b GDPR and these have been processed by us with the help of automated methods. You will receive your data in a structured, common, and machine-readable format or we will transfer the data directly to another responsible party, insofar as this is technically feasible.
  • Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is based on Art. 6 para. 1 lit. e, f GDPR and there are reasons for this that arise from your particular situation, or the objection is directed against direct advertising. The right to object does not exist if overriding compelling legitimate grounds for the processing are demonstrated or the processing is carried out for the assertion, exercise, or defense of legal claims. Where the right to object does not exist for individual processing operations, this is indicated there.
  • Revocation pursuant to Art. 7 para. 3 GDPR of your granted consent with effect for the future.
  • Complaint pursuant to Art. 77 GDPR to a supervisory authority if you are of the opinion that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work, or our company headquarters. Supervisory authority responsible for ATIX AG: Bavarian State Office for Data Protection Supervision (BayLDA) Promenade 18 91522 Ansbach Germany Phone: +49 (0) 981 180093-0 E-Mail: poststelle@lda.bayern.de

How is my data processed in detail?

In the following, we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data, and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

Provision of the website

Type and scope of processing

When you call up and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is stored temporarily in a so-called log file:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the accessed file
  • Website from which the access is made (referrer URL)
  • Browser used and, if applicable, the operating system of your computer as well as the name of your access provider
Purpose and legal basis

The processing is carried out to protect our predominantly legitimate interest to display our website and ensure security and stability on the basis of Art. 6 para. 1 lit. f GDPR. The collection of data and storage in log files are essential for the operation of the website. There is no right to object to the processing due to the exception under Art. 21 para. 1 GDPR. Insofar as the further storage of log files is required by law, the processing is based on Art. 6 para. 1 lit. c GDPR. There is no legal or contractual obligation to provide the data; however, calling up our website is technically not possible without doing so.

Storage period

The aforementioned data is stored for the duration of the website display.

Newsletter

Type and scope of processing

If you register on our website to receive our newsletter, we collect your e-mail address in addition to your name and store this information together with the date of registration and your IP address. You will then receive an e-mail in which you must confirm your registration for the newsletter (double opt-in). To send the newsletter, we use a service from Mailchimp, which processes your personal data on our behalf pursuant to Art. 28 GDPR. Your data will not be passed on to third parties.

Purpose and legal basis

We process your data for the purpose of sending the newsletter based on your consent pursuant to Art. 6 para. 1 lit. a GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future pursuant to Art. 7 para. 3 GDPR. There is no legal or contractual obligation to provide the data; however, sending the newsletter is not possible without your doing so.

Storage period

After successful confirmation, we store your data until you revoke your consent (unsubscribe from the newsletter).

Presences on social-media platforms

We maintain so-called fan pages or accounts or channels on the networks mentioned below in order to provide you with information and offers also within social networks and to present you with further ways to contact us and find out about our offers. In the following, we inform you about which data we or the respective social network process from you when you call up and use our fan pages/accounts.

Data of yours that we process

If you wish to contact us via messenger or direct message via the respective social network, we generally process your username with which you contact us and, if applicable, store further data provided by you insofar as this is necessary to process/respond to your request. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR (processing is necessary to protect the legitimate interests of the controller).

(Static) user data we receive from the social networks

We receive automatically provided statistics regarding our accounts via Insights functionalities. The statistics include, among other things, the total number of page views, likes, information on page activities and post interactions, reach, video views, and information on the proportion of men/women among our fans/followers. The statistics only contain aggregated data that cannot be related to individual persons. You are not identifiable to us through this.

What data of yours the social networks process

To view the content of our fan pages or accounts, you do not have to be a member of the respective social network, and, to this extent, no user account is required for the respective social network. Please note, however, that when you call up the respective social network, it also collects and stores data from website visitors without a user account (e.g., technical data so as to be able to display the website to you) and uses cookies and similar technologies, over which we have no control. For details, please refer to the privacy policy of the respective social network (see the corresponding links above). Insofar as you wish to interact with the content on our fan pages/accounts, e.g., comment on, share, or like our postings/contributions and/or contact us via messenger functions, prior registration with the respective social network and the provision of personal data is required. We have no influence on the data processing by the social networks within the scope of their use by you. To our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network as well as for the analysis of user behavior (using cookies, pixels/web beacons, and similar technologies), on the basis of which advertising according to your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data is stored by the social networks outside the EU/EEA and passed on to third parties. Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion as well as guidelines on the use of cookies and similar technologies in the context of registration and use of the social networks is available in the privacy policy/cookie policy of the social networks. There, you will also find information on your rights and objection options.

Facebook page

When you visit our Facebook page, Facebook collects, among other things, your IP address and other information that is present on your PC in the form of cookies. This information is used to provide us, as operators of the Facebook pages, with statistical information about the use of the Facebook page. Facebook provides more detailed information on this at the following link: https://facebook.com/help/pages/insights. It is not possible for us to draw conclusions about individual users by means of the statistical information transmitted. We only use this information to respond to the interests of our users and to continuously improve our online presence and ensure its quality. We collect your data via our fan page only to realize a possible provision for communication and interaction with us. This collection usually includes your name, message content, comment content, and the “public” information of your profile. The processing of your personal data for our above-mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel pursuant to Art. 6 para. 1 lit. f GDPR. Should you as a user have given your consent to the data processing to the respective provider of the social network, the legal basis of the processing extends to Art. 6 para. 1 a), Art. 7 GDPR. Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to fully access your data. Due to this, only the provider can directly take and implement appropriate measures to fulfill your user rights (information request, deletion request, objection, etc.). The assertion of corresponding rights is therefore most effective when directed at the respective provider. Together with Facebook, we are responsible for the personal content of the fan page. Data subject rights can be asserted with Meta Platforms Ireland Ltd as well as with us. According to the GDPR, the primary responsibility for the processing of Insights Data lies with Facebook, and Facebook fulfills all obligations under the GDPR with respect to the processing of Insights Data. Meta Platforms Ireland Ltd provides the essence of the Page Insights Supplement to data subjects. We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 GDPR, including legal basis, identity of the responsible, and storage period of cookies on user end devices. Further information can be found directly at Facebook (Supplemental Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.

Twitter page

Together with Twitter, we are responsible for the personal content of the fan page. Data subject rights can be asserted with Twitter Inc. as well as with us. According to the GDPR, the primary responsibility for the processing of Insights Data lies with Twitter and Twitter fulfills all obligations under the GDPR with respect to the processing of Insights Data. Twitter Inc. provides the essence of the Page Insights Supplement to data subjects. We do not make any decisions regarding the processing of Insights data and all other information resulting from Art. 13 of the GDPR, including legal basis, identity of the responsible, and storage period of cookies on user end devices. Further information can be found directly at Twitter: Privacy Policy. You can request the Twitter user concept on which the offer is based by contacting our e-mail address above with the keyword “Twitter user concept.”

LinkedIn page

LinkedIn is a social network of LinkedIn Inc. based in Sunnyvale, California, USA, which allows users to create private and professional profiles. They can maintain their existing contacts and establish new ones. Businesses can create profiles where photos and other company information are uploaded. Other LinkedIn users have access to this information and can write articles and share this content with others. The focus is on professional exchange regarding specialized topics with people who share the same professional interests. In addition, LinkedIn is often used by businesses and other organizations to hire employees and present themselves as an interesting employer. Further information on LinkedIn can be found at: https://about.linkedin.com/ Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policyWe do not collect or process any personal data via our LinkedIn company page.

XING page

XING is a social network of XING SE based in Hamburg, Germany, which allows users to create private and public profiles. They can maintain their existing contacts and establish new ones. Businesses can create profiles where photos and other company information are uploaded. Other XING users have access to this information and can write articles and share this content with others. The focus is on professional exchange regarding specialized topics with people who share the same professional interests. In addition, XING is often used by businesses and other organizations to hire employees and present themselves as an interesting employer. Further information about XING can be found at: https://corporate.xing.com/de/unternehmen/ Further information about data protection at XING can be found at: https://privacy.xing.com/de/datenschutzerklaerung. We do not collect or process any personal data via our XING company page.

Further third-party service providers

Facebook Pixel

Type and scope of processing

We use Facebook Pixel of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, to create so-called custom audiences, i.e., segment visitor groups of our online offer, determine conversion rates, and optimize them later on. This takes place in particular when you interact with advertisements that we have published with Facebook Ireland Ltd.

Purpose and legal basis

We process your data with the help of Facebook Pixel for the purpose of optimizing our website and for marketing purposes based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE. In addition, before such a third-country transfer, we obtain your consent pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Facebook Ireland Ltd. Further information can be found in the privacy policy for Facebook Pixel: https://www.facebook.com/privacy/explanation

Facebook Plugin

Type and scope of processing

We have integrated Facebook plugin components on our website. Facebook Plugin is a service of Facebook Ireland Ltd. and offers us the opportunity to aggregate content from the social media platform and display it on our website. When you access this content, you establish a connection to the servers of Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, whereby your IP address and possibly browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Facebook Plugin. If a user is registered with Facebook Ireland Ltd., Facebook Plugin can assign the content viewed to the profile.

Purpose and legal basis

The use of the service is based on your consent in accordance with. Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE. In addition, before such a third-country transfer, we obtain your consent pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Facebook Ireland Ltd. Further information can be found in the privacy policy for Facebook Plugin: https://www.facebook.com/policy.php

Google Analytics 4 und Google Signals

Type and scope of processing

We use Google Analytics 4 from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analysis service for the statistical evaluation of our online offering. This includes, for example, the number of views of our online offer, visited subpages, and the length of stay of visitors. Google Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity. The information is transferred to Google servers and processed there. Transmission to Google LLC, based in the USA, is also possible. As an extension to Google Analytics 4, Google Signals is used on this website to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can deactivate the “Personalized advertising” function in the settings of your Google account. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de You can find more information about Google Signals at the following link: https://support.google.com/analytics/answer/7532985?hl=de

Purpose and legal basis

We process data with the help of Google Analytics 4 and Google Signals for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy.

Google Fonts

Type and scope of processing

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service to provide fonts for our online offer. To obtain these fonts, you connect to servers of Google Ireland Limited, whereby your IP address is transmitted.

Purpose and legal basis

The use of Google Fonts is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE. In addition, before such a third-country transfer, we obtain your consent pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Analytics: https://policies.google.com/privacy?hl=en-US

Google Tag Manager

Type and scope of processing

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through one interface and allows us to control the exact integration of services on our website. This allows us to flexibly integrate additional services to evaluate user access to our website.

Purpose and legal basis

The use of Google Tag Manager is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914&from=DE. In addition, before such a third-country transfer, we obtain your consent pursuant to Art. 49 para. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

Google reCAPTCHA

Type and scope of processing

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service of Google Ireland Limited and enables us to distinguish whether a contact request originates from a natural person or is automated by means of a program. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and possibly browser data, such as your user agent, are transmitted. Furthermore, Google reCAPTCHA records the user’s browsing time and mouse movements in order to distinguish automated requests from human ones. This data is processed exclusively for the purposes mentioned above and to maintain the security and functionality of Google reCAPTCHA.

Purpose and legal basis

The use of the service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914from=DE.We also obtain your consent in accordance with Art. 49 para. 1 lit. a GDPR prior to such a third country transfer. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US

Hubspot Analytics

Type and scope of processing

We use HubSpot Analytics from HubSpot, Inc, Cambridge, Massachusetts, US, as an analysis service for the statistical evaluation of our online offering. HubSpot Analytics uses cookies and other browser technologies to evaluate user behaviour and recognize users. This information is used, among other things, to compile reports on website activity.

Purpose and legal basis

We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by HubSpot, Inc. determined Further information can be found in the privacy policy for HubSpot Analytics: https://legal.hubspot.com/privacy-policy.

Hubspot Pixel

Type and scope of processing

We use HubSpot Pixel from HubSpot, Inc, Cambridge, Massachusetts, US, to create so-called Custom Audiences, i.e. to segment visitor groups of our online offer, determine conversion rates and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with HubSpot, Inc.

Purpose and legal basis

The use of HubSpot Pixel is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. The data transfer to the USA is carried out in accordance with Art. 45 para. 1 GDPR on the basis of the adequacy decision of the European Commission. The US companies involved and/or their US subcontractors are certified in accordance with the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

Storage period

The specific storage period of the processed data cannot be influenced by us, but is determined by HubSpot, Inc. determined Further information can be found in the privacy policy for HubSpot Pixel: https://legal.hubspot.com/privacy-policy.

YouTube

Type and scope of processing

We have integrated YouTube Video on our website. YouTube Video is a component of the video platform of YouTube, LLC, on which users can upload content, share it over the Internet, and receive detailed statistics. YouTube Video allows us to integrate content from the platform into our website. YouTube Video uses cookies and other browser technologies to evaluate user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the content listened to and to generate reports. If a user is registered with YouTube, LLC, YouTube Video can associate the videos played with the profile. When you access this content, you connect to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, where your IP address and, if applicable, browser data, such as your user agent, are transmitted.

Purpose and legal basis

The use of the service is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914from=DE.We also obtain your consent in accordance with Art. 49 para. 1 lit. a GDPR prior to such a third country transfer. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy?hl=en-US. /HTML/?uri=CELEX:32021D0914from=DE

Matomo Cloud Analytics

Type and scope of processing

We use the open source software tool Matomo (formerly PIWIK) on our website. The software places a cookie in your browser (for cookies, see above). If individual pages of our website are accessed, the following data is stored: Two bytes of the IP address of the user’s accessing system (anonymized IP address) The website accessed The website from which the user reached the website accessed (referrer) The subpages accessed from the website accessed The time spent on the website The frequency with which the website is accessed We use a version of the software hosted by InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. The above data is processed by InnoCraft Ltd.

Purpose and legal basis

We process your data with the help of the analysis software Matomo for the purpose of evaluating the use of individual components and content of our website on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. You give your consent by setting the use of cookies (cookie banner/Consent Manager), with which you can also declare your revocation at any time with effect for the future pursuant to Art. 7 para. 3 GDPR. There is no legal or contractual obligation to provide your data. If you do not give us your consent, a visit to our website is possible without restriction, but not all functions may be fully available.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by InnoCraft Ltd. Further information can be found in the privacy policy for Matomo Cloud: https://www.innocraft.com/privacy

Matomo Tag Manager

Type and scope of processing

On our website, we use the Matomo Tag Manager. The Matomo Tag Manager is an extension of the open-source Matomo web analytics solution. The Tag Manager is used to integrate tracking events (marketing cookies) and control the integration of third-party code.

Purpose and legal basis

The legal basis for the data processing is Art. 6 para.1 lit. f DSGVO. The legitimate interest consists in an error-free function of the website.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by InnoCraft Ltd. Further information can be found in the privacy policy for Matomo Cloud: https://www.innocraft.com/privacy

Google Ads

Type and scope of processing

We have integrated Google Ads on our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Google Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Google Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider. If you are registered with a Google Ireland Limited service, Google Ads can associate the visit with your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identification features. In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose and legal basis

The use of Google Ads is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914from=DE.We also obtain your consent in accordance with Art. 49 para. 1 lit. a GDPR prior to such a third country transfer. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy?hl=en-US

Microsoft Ads

Type and scope of processing

We have integrated Bing Ads on our website. Bing Ads is a service provided by Microsoft Corporation to display targeted advertising to users. Bing Ads uses cookies and other browser technologies to analyze user behavior and recognize users. Bing Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Bing Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider. In this case, your data is passed on to the operator of Bing Ads, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.

Purpose and legal basis

The use of Bing Ads is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914from=DE.We also obtain your consent in accordance with Art. 49 para. 1 lit. a GDPR prior to such a third country transfer. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Microsoft Corporation. Further information can be found in the privacy policy for Bing Ads: https://privacy.microsoft.com/en-us/privacystatement

Twitter Ads

Type and scope of processing

We have integrated Twitter Ads on our website. Twitter Ads is a service of Twitter Inc. to display targeted advertising to users. Twitter Ads uses cookies and other browser technologies to evaluate user behavior and recognize users. Twitter Ads collects information about visitor behavior on various websites. This information is used to optimize the relevance of advertising. Furthermore, Twitter Ads delivers targeted advertising based on behavioral profiles and geographic location. Your IP address and other identifiers, such as your user agent, are transmitted to the provider. If you are registered with a Twitter Inc. service, Twitter Inc. can associate the visit with your account. Even if you are not registered with Twitter Inc. or have not logged in, it is possible that the provider finds out and saves your IP address and other identification features. In this case, your data will be passed on to the operator of Twitter Ads, Twitter Inc., San Francisco, US.

Purpose and legal basis

The use of Twitter Ads is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914from=DE.We also obtain your consent in accordance with Art. 49 para. 1 lit. a GDPR prior to such a third country transfer. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Twitter Inc. Further information can be found in the privacy policy for Twitter Ads: https://twitter.com/en/privacy

LinkedIn Insight Tag

Type and scope of processing

We use LinkedIn Insight Tag from LinkedIn Corporation, Sunnyvale, California, US, to create target groups, segment visitor groups of our online offer, determine conversion rates, and subsequently optimize them. This happens in particular when you interact with advertisements that we have placed with LinkedIn Corporation. To do this, LinkedIn Corporation provides retargeting for website visitors to display targeted ads outside of our website. LinkedIn Insight Tag collects data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent), and timestamp. This data is used to present anonymized reports about website audience and ad performance.

Purpose and legal basis

The use of LinkedIn Insight Tag is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914from=DE.We also obtain your consent in accordance with Art. 49 para. 1 lit. a GDPR prior to such a third country transfer. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by LinkedIn Corporation. Further information can be found in the privacy policy for LinkedIn Insight Tag: https://www.linkedin.com/legal/privacy-policy

Consentmanager

Type and scope of processing

We have integrated consentmanager.net on our website. consentmanager.net is a consent solution provided by consentmanager AB, Håltegelvägen 1, B723 48 Västerås, Sweden, to obtain and document consent to store cookies. consentmanager.net uses cookies or other web technologies to recognize users and store consent given or revoked.

Purpose and legal basis

The use of the service is based on obtaining the legally required consent to the use of cookies pursuant to Art. 6 para. 1 lit. c GDPR.

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by consentmanager AB. Further information can be found in the privacy policy for consentmanager.net: https://www.consentmanager.net/datenschutz/

Microsoft Clarity

Type and scope of processing

We have integrated Clarity on our website. Clarity is a service of Microsoft Corporation and provides optimization tools that analyze the behavior and feedback of users of our website through analysis and feedback tools. Clarity uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity and to statistically analyze visitor data. Furthermore, Clarity records clicks, mouse movements, and scroll heights in order to create so-called heat maps and session replays. In this case, your data is passed on to the operator of Clarity, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.

Purpose and legal basis

The use of Clarity is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. We intend to transfer personal data to third countries outside the European Economic Area, in particular the USA. In cases where no adequacy decision of the European Commission exists (e.g., in the USA), we have agreed with the recipients of the data on other appropriate safeguards within the meaning of Art. 44 et seq. GDPR. These are—unless otherwise stated—standard contractual clauses of the EU Commission pursuant to the Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32021D0914from=DE.We also obtain your consent in accordance with Art. 49 para. 1 lit. a GDPR prior to such a third country transfer. 1 sentence 1 lit. a GDPR, which you provide by giving your consent in the Consent Manager (or other forms, registrations, etc.). We would like to point out that in the case of third-country transfers, there may be unknown risks in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence and of which you may not become aware).

Storage period

The concrete storage period of the processed data cannot be influenced by us, but is determined by Microsoft Corporation. Further information can be found in the privacy policy for Clarity: https://privacy.microsoft.com/en-us/privacystatement