Privacy Policy

General

As the operator of this website and as a company, we come into contact with your personal data. This means all data that says something about you and with which you can be identified. In this privacy policy, we would like to explain to you in what way, for what purpose, and on what legal basis we process your data.

The controller responsible for data processing on this website and in our company is:

EPOS Marketing GmbH

Kaiserswerther Str. 135

40474 Düsseldorf

E-Mail: hello@epos-marketing.com

General Information

SSL or TLS encryption

When you enter your data on websites, place online orders, or send emails over the internet, you must always expect that unauthorized third parties may access your data. There is no complete protection against such access. However, we do everything in our power to protect your data as best as possible and to close security gaps to the extent that is possible for us.

An important protective mechanism is the SSL or TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize the encryption by the padlock icon in front of the entered internet address in your browser and by the fact that our internet address begins with https:// and not http://.

How long do we store your data?

In some places in this privacy policy, we inform you about how long we or the companies that process your data on our behalf store your data. If such information is missing, we store your data until the purpose of the data processing no longer applies, you object to the data processing, or you revoke your consent to the data processing.

In the event of an objection or revocation, we may nevertheless continue to process your data if at least one of the following conditions applies:

  • We have compelling legitimate grounds for continuing the data processing that override your interests, rights and freedoms (only in the case of an objection to data processing; if the objection is directed at direct advertising, we cannot present any legitimate grounds).
  • The data processing is necessary to assert, exercise, or defend legal claims (this does not apply if your objection is directed against direct advertising).
  • We are legally obligated to retain your data.

In this case, we delete your data as soon as the condition(s) no longer apply.

Data transfer to the USA

We also use tools on our website from companies that transmit your data to the USA, store it there, and may process it further. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework. This establishes that the USA ensures an adequate level of protection for personal data from the EU that is transferred to US companies. This decision is based on new guarantees and measures introduced by the USA to meet data protection requirements. The adequacy decision includes, among other things, restrictions and guarantees regarding the access of US intelligence services to the data. Binding guarantees have been introduced to limit US intelligence services' access to the extent necessary and proportionate for the protection of national security. Additionally, enhanced oversight of US intelligence activities has been established to ensure that restrictions on surveillance activities are complied with. An independent redress mechanism has also been established to handle and resolve complaints from European citizens regarding access to their data. The EU-US Data Privacy Framework thus enables European companies to transfer data to certified US companies without having to implement additional data protection guarantees. You can view a list of all certified companies at the following link: https://www.dataprivacyframework.gov/s/participant-search

A change in the decision of the European Commission cannot be ruled out.

Your Rights

Objection to data processing

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND THEREFORE BASE THIS ON ART. 6 PARA. 1 SENTENCE 1 LIT. F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THIS PURSUANT TO ART. 21 GDPR. THIS ALSO APPLIES TO PROFILING CARRIED OUT ON THE BASIS OF THE AFOREMENTIONED PROVISION. THE PREREQUISITE IS THAT YOU PROVIDE REASONS FOR THE OBJECTION THAT ARISE FROM YOUR PARTICULAR SITUATION. A JUSTIFICATION IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT ADVERTISING.

THE CONSEQUENCE OF THE OBJECTION IS THAT WE ARE NO LONGER ALLOWED TO PROCESS YOUR DATA. THIS DOES NOT APPLY ONLY IF ONE OF THE FOLLOWING CONDITIONS IS MET:

  • WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS.
  • THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

THE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT ADVERTISING OR AGAINST PROFILING CONNECTED WITH SUCH ADVERTISING.

Further rights

Revocation of your consent to data processing

Many data processing operations are based on your consent. You grant this consent, for example, by ticking the corresponding box in online forms before submitting the form, or by allowing certain cookies when you visit our website. You can revoke your consent at any time without stating reasons (Art. 7 Para. 3 GDPR). From the time of revocation, we are no longer permitted to process your data. The only exception: we are legally obliged to retain the data for a certain period of time. Such retention periods exist in particular in tax and commercial law.

Right to lodge a complaint with the competent supervisory authority

If you believe that we are violating the General Data Protection Regulation (GDPR), you have the right to lodge a complaint with a supervisory authority pursuant to Art. 77 GDPR. You may contact a supervisory authority in the member state of your residence, your workplace, or the place where the alleged violation occurred. The right to complain exists in addition to administrative or judicial remedies.

Right to data portability

Data that we process automatically on the basis of your consent or in fulfillment of a contract must be provided to you or a third party in a common machine-readable format if you request it. We can only transfer the data to another controller insofar as this is technically possible.

Right to information, deletion, and correction of data

Pursuant to Art. 15 GDPR, you have the right to receive, free of charge, information about which personal data we have stored about you, where the data originates, to whom we transmit the data, and for what purpose it is stored. Should the data be incorrect, you have a right to rectification (Art. 16 GDPR); under the conditions of Art. 17 GDPR, you may request that we delete the data.

Right to restriction of processing

In certain situations, you may request that we restrict the processing of your data pursuant to Art. 18 GDPR. The data may then only be processed as follows, apart from storage:

  • with your consent
  • for the assertion, exercise, or defense of legal claims
  • to protect the rights of another natural or legal person
  • for reasons of important public interest of the European Union or a member state

The right to restriction of processing exists in the following situations:

  • You have contested the accuracy of your personal data stored with us, and we need time to verify this. In this case, you have the right for the duration of the verification.
  • The processing of your personal data is carried out unjustly or was unlawful in the past. In this case, there is the right to restrict processing instead of deletion of the data.
  • We no longer need your personal data, but you need it to exercise, defend, or assert legal claims. In this case, you have the right to request restriction of processing instead of deletion.
  • You have lodged an objection pursuant to Art. 21(1) GDPR, and now your interests and ours must be weighed against each other. This right exists as long as the result of the balancing has not yet been determined.

Hosting and Content Delivery Networks (CDN)

External hosting

Our website is hosted on a server of the following internet service provider (host):

RAIDBOXES GmbH
Hafenstr. 32
48151 Münster

Has a data processing agreement been concluded with the hoster or are standard contractual clauses (SCC) used?

Yes

How do we process your data?

The hoster stores all data of our website. This also includes all personal data that is collected automatically or through your input. This can include in particular: your IP address, pages accessed, names, contact data and inquiries, as well as meta and communication data. When processing data, our hoster follows our instructions and only processes the data to the extent necessary to fulfill its service obligations towards us.

On what legal basis do we process your data?

Since we address potential customers via our website and maintain contacts with existing customers, the data processing by our host serves the initiation and fulfillment of contracts and is therefore based on Art. 6 (1) lit. b) GDPR. Furthermore, it is our legitimate interest as a company to provide a professional internet presence that meets the necessary requirements for security, speed, and efficiency. In this respect, we also process your data on the basis of Art. 6 (1) lit. f) GDPR.

Cloudflare

What is Cloudflare?

Content Delivery Network (CDN) with Domain Name System (DNS)

Who processes your data?

Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA

Was a contract for order processing concluded with Cloudflare?

Yes

Where can you find more information about data protection at Cloudflare?

https://www.cloudflare.com/privacypolicy/

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We use the services of Cloudflare for our website. The global content delivery network ensures that all content we provide online reaches you quickly, even when large amounts of data have to be moved over long distances. This is made possible by Cloudflare being placed between our website and your browser with all its technical capabilities and servers around the world, analyzing traffic and filtering out malicious data before it reaches our server. In doing so, Cloudflare also comes into contact with personal data collected via our website. In addition, the company may use cookies or other technologies to recognize internet users. Data processing by Cloudflare always serves the sole purpose of enabling fast data traffic.

On what legal basis do we process your data?

We have a legitimate interest in providing visitors to our website with the fastest and most efficient online offering possible. The data processing is therefore based on Art. 6 (1) lit. f) GDPR.

Perspective

What is Perspective?

Content Delivery Network (CDN)

Who processes your data?

Perspective Software GmbH, Müggelstraße 22, 10247 Berlin

Has a data processing agreement been concluded with Perspective?

Yes

Where can you find more information about data protection at Perspective?

https://www.perspective.co/de/datenschutzerklaerung

How do we process your data?

We use the services of Perspective for our website. The global content delivery network ensures that all content we provide online reaches you quickly, even when large amounts of data have to be moved over long distances. This is made possible by Perspective, with all its technical capabilities and servers around the world, being placed between our website and your browser, analyzing data traffic and filtering out malicious data before it reaches our server. In doing so, Perspective also comes into contact with personal data collected via our website. The company may also use cookies or other technologies to recognize internet users. Data processing by Perspective always serves exclusively the purpose of enabling fast data traffic.

On what legal basis do we process your data?

We have a legitimate interest in providing visitors to our website with the fastest and most efficient online offering possible. The data processing is therefore based on Art. 6 (1) lit. f) GDPR.

Data collection on this website

Use of Cookies

Our website places cookies on your device. These are small text files that serve different purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are required to enable certain actions or functions on the site (functional cookies). For example, without cookies it would not be possible to use the benefits of a shopping cart in an online store. Other cookies serve to analyze user behavior or optimize advertising measures. When we use third-party services on our website, e.g. for processing payment transactions, these companies may also leave cookies on your device when you visit the website (so-called third-party cookies).

How do we process your data?

Session cookies are only stored on your device for the duration of a session. As soon as you close the browser, they disappear on their own. Permanent cookies, on the other hand, remain on your device unless you delete them yourself. This can, for example, lead to your user behavior being analyzed on a permanent basis. You can influence how your browser handles cookies via the settings in your browser:

  • Do you want to be informed when cookies are set?
  • Do you want to exclude cookies generally or in specific cases?
  • Do you want cookies to be automatically deleted when the browser is closed?

If you disable or do not allow cookies, the functionality of the website may be restricted.

If we use cookies from other companies or for analysis purposes, we will inform you about this in this privacy policy. We also ask for your consent in this regard when you visit our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our online offerings can be used by visitors without technical problems and that all desired functions are available to them. The storage of necessary and functional cookies on your device is therefore based on Art. 6 (1) lit. f) GDPR. We use all other cookies on the basis of Art. 6 (1) lit. a) GDPR, provided you give us your corresponding consent. You can revoke this consent at any time with effect for the future. If you have consented to the placement of necessary and functional cookies when asked for consent, the storage of these cookies is also based exclusively on your consent.

Cookie consent with Consent Manager

What is Consent Manager?

Consent Management Provider (CMP) for obtaining, processing, and forwarding GDPR-compliant consents

Who processes your data?

Consentmanager AB, Håltegelvägen 1b, 72348 Västerås, Sweden

Was a contract for order processing concluded with Consent Manager Provider?

Yes

Where can you find more information about data protection at Consent Manager?

https://www.consentmanager.de/datenschutz/

How do we process your data?

We use Consent Manager to obtain your consent for storing cookies on your device and to document it in a data protection compliant manner. When you visit our website and close the cookie window from Consent Manager with the consent query, the following data is transmitted to the company:

  • Your IP address (from which your country is also determined)
  • the browser used
  • the language used
  • the website accessed

In addition, Consent Manager stores various cookies in your browser in order to be able to assign the granted consents or their revocation to your browser. All recorded data is stored until the cookies are no longer needed, you delete the cookies from Consent Manager, or you request us to delete the data. This only does not apply if we are legally obliged to retain the data.

On what legal basis do we process your data?

We are legally obliged to obtain the consent of our website visitors for the use of certain cookies. To fulfill this obligation, we use a Consent Manager. The legal basis for data processing is therefore Art. 6 (1) lit. c) GDPR.

Server log files

Server log files record all requests and accesses to our website and log error messages. They also include personal data, in particular your IP address. However, this is anonymized by the provider after a short time, so that we cannot assign the data to your person. The data is automatically transmitted from your browser to our provider.

How do we process your data?

Our provider stores server log files to be able to trace activities on our website and identify errors. The files contain the following data:

  • Browser type and version
  • operating system used
  • Referrer URL
  • Hostname of the accessing computer
  • Time of the server request
  • IP address (possibly anonymized)

We do not combine this data with other data, but use it solely for statistical analysis and to improve our website.

On what legal basis do we process your data?

We have a legitimate interest in ensuring that our website runs without errors. It is also our legitimate interest to obtain an anonymized overview of the accesses to our website. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR.

Contact form

You can send us a message via the contact form on this website.

How do we process your data?

We store your message and the information provided in the form in order to process your inquiry, including any follow-up questions. This also applies to the contact details you provide. We do not share the data with other parties without your consent.

How long do we store your data?

We delete your data as soon as one of the following points occurs:

  • Your request has been processed.
  • You request us to delete the data.
  • You revoke your consent to storage.

This only does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

If your request is related to our contractual relationship or serves the performance of pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b) GDPR. In all other cases, it is our legitimate interest to effectively process requests addressed to us. The legal basis for data processing is therefore Art. 6 (1) lit. f) GDPR. If you have consented to the storage of your data, Art. 6 (1) lit. a) GDPR is the legal basis. In this case, you can revoke your consent at any time with effect for the future.

Inquiry by email, telephone, or fax

You can send us a message by email or fax, or call us.

How do we process your data?

We store your message as well as the contact details you provide or the transmitted telephone number in order to process your inquiry including any follow-up questions. Without your consent, we do not pass this data on to other parties.

How long do we store your data?

We delete your data as soon as one of the following points occurs:

  • Your request has been processed.
  • You request us to delete the data.
  • You revoke your consent to storage.

This only does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

If your request is related to our contractual relationship or serves the performance of pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b) GDPR. In all other cases, it is our legitimate interest to effectively process requests addressed to us. The legal basis for data processing is therefore Art. 6 (1) lit. f) GDPR. If you have consented to the storage of your data, Art. 6 (1) lit. a) GDPR is the legal basis. In this case, you can revoke your consent at any time with effect for the future.

Calendly

What is Calendly?

Scheduling tool

Who processes your data?

Calendly LLC, 88 N Avondale Road #603, Avondale Estates, GA 30002, USA

Has a contract for order processing been concluded with Calendly?

Yes

Where can you find more information about data protection at Calendly?

https://calendly.com/pages/privacy

On what basis do we transfer your data to the USA?

Calendly adheres to the Standard Contractual Clauses of the European Commission (see https://calendly.com/pages/dpa)

How do we process your data?

To schedule an appointment with us, you can use the Calendly tool on our website. We use the data for planning, conducting, and, if applicable, following up on the appointment.

How long do we store your data?

We delete your data as soon as one of the following points occurs:

  • The purpose of data processing has ceased to exist.
  • You request us to delete the data.
  • You revoke your consent to storage.

This only does not apply if we are legally obligated to retain the data.

On what legal basis do we process your data?

We have a legitimate interest in arranging appointments with customers and other interested parties as easily as possible. The data processing is therefore carried out on the basis of Art. 6 (1) lit. f) GDPR. If you have consented to the storage of your data, Art. 6 (1) lit. a) GDPR is the sole legal basis. In this case, you can revoke your consent at any time with effect for the future.

Analysis tools and advertising

We use the following tools to analyze the behavior of our website visitors and to show you advertisements.

Google Tag Manager

What is Google Tag Manager?

Tag management system for integrating tracking codes and conversion pixels from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google Tag Manager?

https://policies.google.com/privacy

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We use the Google Tag Manager. This tool helps us integrate tracking codes and conversion pixels into our website, manage them, and deliver them. The Google Tag Manager itself does not create user profiles, does not place cookies on your device, and does not analyze your behavior as a user. However, it does collect your IP address and transmit it to Google servers in the USA.

On what legal basis do we process your data?

We have a legitimate interest in the fast and uncomplicated integration and management of various tools on our website. The use of Google Tag Manager is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR. If you have consented to the transfer of your IP address, we process your data exclusively on the basis of Art. 6 (1) lit. a) GDPR. You can revoke your consent at any time with effect for the future.

Google Analytics

What is Google Analytics?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Was a contract for order processing concluded with Google Analytics?

Yes

Where can you find more information about data protection at Google Analytics?

https://support.google.com/analytics/answer/6004245?hl=de

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How can you prevent data collection?

Among other things, with a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de

How do we process your data?

We are always interested in optimizing our website for visitors and placing advertisements optimally. Google Analytics helps us with this, a tool that analyzes user behavior and thus provides us with the necessary data basis for adjustments. Through the tool, we receive information about the origin of our visitors, their page views, and their dwell time on the pages, as well as the operating system they use.

Standard processing

To collect the data, Google Analytics uses cookies, device fingerprinting, or other technologies to recognize users. The data is transmitted to Google servers in the USA and, with the help of the also collected IP address, is combined into a profile that can be assigned to you or your device.

You can prevent Google from processing your data by installing a browser plugin provided by Google itself: https://tools.google.com/dlpage/gaoptout?hl=de.

IP anonymization

We have activated the "IP anonymization" function within Google Analytics. For you, this means that Google shortens your IP address (from the EU or EEA) before transmitting it to the USA. Only in exceptional cases does Google transmit the full IP address to servers in the USA and shorten it only there.

How long do we store your data?

Data stored at the user and event level that is linked to cookies, user identifiers (e.g., user IDs), or advertising IDs is deleted or anonymized by Google after 14 months according to its own information (see https://support.google.com/analytics/answer/7667196?hl=de).

On what legal basis do we process your data?

As website operators, we have a legitimate interest in analyzing user behavior in order to optimize our web offering and the advertising placed there. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have otherwise consented to data processing by Google Analytics, Art. 6 (1) lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

Google Ads

What is Google Ads?

Online advertising program of Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a data processing agreement been concluded with Google Ads?

Yes

Where can you find more information about data protection at Google Ads?

https://policies.google.com/privacy?hl=en&gl=en

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We use Google Ads. Google's advertising program enables us to display advertisements in the Google search engine or on third-party websites when visitors to our website enter certain search terms on Google (keyword targeting). Furthermore, we can use the user data available at Google (e.g., location data and interests) to place targeted advertisements (audience targeting). We evaluate the collected data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many ads resulted in corresponding clicks.

On what legal basis do we process your data?

As website operators, we have a legitimate interest in the placement and evaluation of advertisements. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have otherwise consented to data processing by Google, Art. 6 (1) lit. a) GDPR is the sole legal basis. You may revoke your consent at any time with effect for the future.

Google Analytics Remarketing

What is Google Analytics Remarketing?

Tool for personalized advertising from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Was a data processing agreement concluded with Google Analytics Remarketing?

Yes

Where can you find more information about data protection at Google Analytics Remarketing?

https://www.google.de/intl/de/policies/privacy/ and https://policies.google.com/technologies/ads

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How can you prevent data processing?

By objecting to personalized advertising in your Google account or on this page: https://www.google.com/settings/ads/onweb/

How do we process your data?

We are always interested in placing our advertising optimally. The remarketing function of Google Analytics helps us with this.

Standard processing

Remarketing means that we analyze your behavior on our website in order to assign you to a specific advertising target group and then show you suitable advertising messages when you visit other websites. In addition, we link the advertising target groups with Google's cross-device functions. This enables us to display interest-based, personalized advertising messages that have been adapted to you based on your usage and browsing behavior on one device (e.g., your mobile phone) on another device (e.g., a tablet or PC) as well.

Customer Match

When creating advertising target groups, we also use the customer match function. In doing so, we pass certain customer data (e.g., email addresses) from our customer lists to Google. If the customers in question are Google users and are logged into their Google account, they will subsequently be shown relevant advertising messages within the Google network (e.g., on YouTube, Gmail, or in the search engine).

Object to personalized advertising

You can adjust the ad settings in your Google account. To do so, click on the following link and log in: https://adssettings.google.com/authenticated. Outside of your Google account, you can opt out of personalized advertising via the following link: https://www.google.com/settings/ads/onweb/ (the setting will then only apply to the device and browser you are currently using).

On what legal basis do we process your data?

As website operators, we have a legitimate interest in the effective marketing of our services and products. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have otherwise consented to data processing by Google Analytics Remarketing, Art. 6 (1) lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

Google Conversion Tracking

What is Google Conversion Tracking?

Tool for analyzing user behavior from Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Has a contract for order processing been concluded with Google Conversion Tracking?

Yes

Where can you find more information about data protection in Google Conversion Tracking?

https://www.google.de/intl/de/policies/privacy/

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We are always interested in optimizing our website for users and placing advertising optimally. For this purpose, we also use Google's conversion tracking. With its help, we can record whether and how often visitors have clicked on certain buttons on our website and which products were viewed and purchased particularly frequently (conversion statistics) . In the course of data collection and storage, we do not receive any information with which we can personally identify individual visitors. Google itself uses cookies or comparable recognition technologies for identification.

On what legal basis do we process your data?

As website operators, we have a legitimate interest in analyzing user behavior in order to optimize our web offering and the advertising placed there. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have otherwise consented to data processing by Google Conversion Tracking, Art. 6 (1) lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.


META Pixel

What is META Pixel?

Tool for analyzing user behavior that measures the effectiveness of advertising on Facebook

Who processes your data?

Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland

Has a contract for order processing been concluded with META Pixel?

Yes

Where can you find more information about data protection at META Pixel?

https://de-de.facebook.com/about/privacy/

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How can you prevent data processing?

If you have a Facebook account: Disable the remarketing function „Custom Audiences“ in the Ad Settings area (https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen).

If you do not have a Facebook account: Disable Facebook's usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

How do we process your data?

We use the META Pixel on our website. The analytics tool helps us learn more about the behavior of visitors to our website after they have clicked on one of our advertisements on Facebook. This allows us to measure how effective our Facebook advertising is and to align future advertising measures with the insights gained. The data that Facebook collects via the pixel is anonymous for us as the operator of this website. We therefore cannot identify you as a visitor. However, the data is stored and processed by Facebook. Facebook uses the pixel to establish a connection to your Facebook account and also uses the data to place its own advertising within and outside the network (cf. Facebook Data Policy). As part of the storage and processing, Facebook also transfers the data to the USA and other third countries.

If you have a Facebook account, you can deactivate the remarketing function "Custom Audiences" in the ad settings area under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen.

If you do not have a Facebook account, you have the option to deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

On what legal basis do we process your data?

As the website operator, we have a legitimate interest in effective advertising measures on social networks. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have otherwise consented to data processing by Facebook, Art. 6 (1) lit. a) GDPR is the sole legal basis. You can revoke your consent at any time with effect for the future.

LinkedIn Insight Tag

What is LinkedIn Insight Tag?

Tool for analyzing user behavior of LinkedIn Ireland Unlimited Company

Who processes your data?

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland

Has a data processing agreement been concluded with LinkedIn Insight Tag?

Yes

Where can you find more information about data protection at LinkedIn Insight Tag?

https://www.linkedin.com/legal/privacy-policy#choices-oblig

On what basis do we transfer your data to the USA?

LinkedIn Insight Tag adheres to the Standard Contractual Clauses of the European Commission (cf. https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs)

How can you prevent data processing?

By objecting to LinkedIn's analysis of your user behavior and targeted advertising via the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. If you have a LinkedIn account, you can also adjust settings there regarding the use of your personal data for advertising purposes.

How do we process your data?

We use the LinkedIn Insight Tag on our website. The analytics tool helps us learn more about the visitors to our website and adapt our online offering accordingly. If our visitors are registered with LinkedIn, we can use the tool to analyze, among other things, their professional key data such as career level, company size, country, location, industry, and job title. It also allows us to measure whether they make a purchase or take some other action (conversion measurement). This data is collected across devices. Finally, LinkedIn Insight Tag offers a retargeting function that allows us to display targeted advertising to our visitors outside our website. LinkedIn assures that individual advertising recipients cannot be identified in the process.

In addition to the data mentioned, the analytics tool collects the following data from you when you visit our website: URL, referrer URL, IP address, device and browser properties, as well as the time of access. IP addresses are shortened or pseudonymized. The latter occurs when you, as a LinkedIn member, are to be reached across devices.

The data collected by LinkedIn is anonymous for us as website operators. We therefore cannot identify you as a visitor. However, LinkedIn will store your personal data on its servers in the USA and use it for its own advertising measures.

You can prevent LinkedIn from linking the data collected on our website with your LinkedIn account by logging out of your account before you continue browsing the internet. You can also prevent the use of your data for advertising purposes through the corresponding settings in your account.

If you do not have a LinkedIn account, you can object to the analysis of your usage behavior and targeted advertising by LinkedIn via the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

How long do we store your data?

LinkedIn deletes the direct identifiers of LinkedIn members after 7 days. The remaining pseudonymized data will be deleted within 180 days.

On what legal basis do we process your data?

As the website operator, we have a legitimate interest in optimizing our online offering and our advertising measures. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have otherwise consented to data processing, Art. 6 (1) lit. a) GDPR is the sole legal basis. You may revoke your consent at any time with effect for the future.

Google Ads Remarketing

What is Google Ads remarketing?

Online advertising program of Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Was a contract for order processing concluded with Google Ads Remarketing?

Yes

Where can you find more information about data protection at Google Ads Remarketing?

https://policies.google.com/privacy?hl=en&gl=en

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

We use Google Ads remarketing. Remarketing is a feature of online marketing in which ads are shown to users who have already interacted with a website or an online shop. Google Remarketing uses data from the Google advertising platform and Google Ads tracking to target advertising campaigns specifically at users who have already shown interest in a particular product or service. Google's advertising program enables us to display ads in the Google search engine or on third-party websites when visitors to our website enter certain search terms on Google (keyword targeting). Furthermore, we can use the user data available at Google (e.g., location data and interests) to place targeted ads (audience targeting). We evaluate the collected data quantitatively by, for example, analyzing which search terms led to the display of our ads and how many ads resulted in corresponding clicks.

You can adjust the advertising settings in your Google account. To do so, click on the following link and log in: https://www.google.com/settings/ads/onweb/

On what legal basis do we process your data?

As website operators, we have a legitimate interest in the placement and evaluation of advertisements. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR. In the event that you have, for example, consented to the storage of cookies or have otherwise consented to data processing by Google, Art. 6 (1) lit. a) GDPR is the sole legal basis. You may revoke your consent at any time with effect for the future.

Brevo

What is Brevo?

Service for sending newsletters and messages, analyzing recipient behavior, and managing marketing activities

Who processes your data?

Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

Was a contract for order processing concluded with Brevo?

Yes

Where can I find more information about data protection at Brevo?

https://www.brevo.com/de/legal/privacypolicy/ and https://www.brevo.com/de/legal/antispampolicy/

How do we process your data?

Brevo enables us to manage a database of email contacts, phone numbers, or any other contact information to communicate with customers and other interested parties.
Information can also be collected about the date and time a message was read, as well as when the recipient interacts with incoming messages, for example by clicking on links contained therein.

It is also possible to send - time-controlled - messages to customers and other interested parties.

If you would like to receive our newsletter or other messages, we need your email address/corresponding contact information. We will also use a confirmation email (double opt-in procedure) to verify that you are indeed the owner of this email address and/or phone number. We do not collect any further data, or only on a voluntary basis. We use your data exclusively for sending newsletters/messages.

If we send a newsletter via Brevo and you open it, a file contained in the newsletter automatically connects to Brevo's servers. This allows the service to know that the newsletter was opened and to register all clicks on the links contained therein. In addition, Brevo collects technical information such as the time of access, IP address, browser type, and operating system.

You can unsubscribe from the newsletter/message dispatch at any time.

How long do we store your data?

After you have unsubscribed, the data will be deleted from the newsletter distribution list. Under certain circumstances, we may also place your email address on a blacklist; this is necessary, for example, if we have received an objection from you to advertising. The storage then takes place on the basis of Art. 6 Para. 1 lit. f) GDPR.

Furthermore, we reserve the right to delete the data at any time after the purpose of collection has ceased to exist or at our own discretion.

On what legal basis do we process your data?

By entering the subscriber list, you consent to data processing by Brevo. This is carried out lawfully on the basis of Art. 6 (1) lit. a) GDPR. You can revoke your consent by unsubscribing from the newsletter or by sending us an informal notice. For us, this means that we are no longer permitted to send you newsletters from that point onward.

Plugins and Tools

Google Fonts (local hosting)

We use fonts from the US company Google on our website. The fonts are installed locally, so no connection to Google's servers is made when you visit our website.

You can find more information about Google Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://policies.google.com/privacy?hl=de.

Google Maps

What is Google Maps?

Map service of Google Ireland Ltd.

Who processes your data?

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland

Where can you find more information about data protection at Google?

https://policies.google.com/privacy?hl=de

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

How do we process your data?

On our website, we use Google Maps. In order for you to use all functions of the map service, Google stores your IP address on one of its servers in the USA.

On what legal basis do we process your data?

The maps from Google Maps ensure that the locations specified on our website are easier for visitors to find. As a company, we have a legitimate interest in this. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f) GDPR.

If you have consented to the data processing, we process your data exclusively on the basis of Art. 6 (1) lit. a) GDPR. You can revoke your consent at any time. From the time of revocation, we are no longer permitted to process your data.

Audio and video conferencing

As a company, we are in contact with many people: customers, business partners, service providers, etc. In addition to other means of communication, we also use so-called online conference tools for the exchange. You will find data protection-relevant information about the provider(s) of the tools we use at the end of this section. If you communicate with us via such a tool, not only we, but in particular the provider of the respective tool, process your personal data.

How do we process your data?

Online conference tools collect and store various personal data to enable participation in an online conference and its smooth execution. In addition to registration, conference, and technical data, this also includes certain communication content.

  • Registration data: your email address and/or phone number and, if applicable, other data you provide when registering for the conference.
  • Conference data: start, end, and duration of your participation in the conference, the number of participants, and other metadata about the conference.
  • Technical data: IP address, MAC address, device ID, device type, operating system and version, client version, camera type, microphone or speaker, as well as the type of connection.
  • Communication content: cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards, and other information shared during the use of the service.

For details on data processing, please refer to the privacy policies of the respective conference tool provider.

How long do we store your data?

As your communication partner, we delete your data from our systems as soon as one of the following points occurs:

  • The purpose of the data processing no longer applies.
  • You request us to delete the data.
  • You revoke your consent to storage.

This only does not apply if we are legally obligated to retain the data.

Cookies remain on your device until you delete them.

The providers of conference tools also store your data for their own purposes. Please ask the providers directly what this means for the duration of your data storage.

On what legal basis do we process your data?

If we are already contractually bound or you wish to enter into a contract with us, we use conference tools to fulfill the contract or to inform you about our services or products. Data processing is therefore carried out on the basis of Art. 6 (1) lit. b) GDPR. Otherwise, the use of conference tools serves simple and fast communication, without which we could not run our company efficiently. We therefore also have a legitimate interest in data processing pursuant to Art. 6 (1) lit. f) GDPR. Another legal basis may be your consent. In this case, Art. 6 (1) lit. a) GDPR is relevant. This basis ceases to apply in the future if you revoke your consent.

Which online conference tools do we use?

Microsoft Teams

What is Microsoft Teams?

Communication platform for collaboration in teams

Who processes your data?

Microsoft Corp., One Microsoft Way, Redmond, WA 98052-6399, USA

Has a contract for order processing been concluded with Microsoft Teams?

Yes

Where can you find more information about data protection at Microsoft Teams?

https://privacy.microsoft.com/de-de/privacystatement

On what basis do we transfer your data to the USA?

Based on the adequacy decision of the European Commission and the corresponding certification of the company.

Own services / Other

Handling of applicant data

If you would like to work for us, we are happy to receive your application. We treat all submitted personal data as strictly confidential. This also applies to data that we only collect later in the course of the application process.

How do we process your data?

All data that we collect in the course of the application process is stored and used by us insofar as this is necessary for the decision on the establishment of an employment relationship. In addition to contact and communication data as well as application documents, this also includes, for example, notes that we make during job interviews. Within our company, we only pass on your data to persons who are involved in the processing of your application.

If your application is successful, we store the data required to carry out the employment relationship in our data processing systems.

If we cannot currently offer you a suitable position, we will gladly include your data in our applicant pool with your consent. This gives us the opportunity to contact you if a position becomes available that matches your profile.

How long do we store your data?

If we are unable to make you a job offer, you decline a job offer, or you withdraw your application, we reserve the right to retain your documents and other application data for up to 6 months after the conclusion of the application process. The reason is that we may need the data for evidentiary purposes in the event of a legal dispute. After the expiration of this period, we will delete the data and destroy the documents. If a legal dispute is actually imminent or already pending, we will delete the data and documents when they are no longer needed for evidentiary purposes.

We delete data in the applicant pool no later than 2 years after consent is granted. If you revoke your consent before this period expires, we will delete it earlier.

The deletion of your data always requires that we are not legally obligated to retain it for a longer period.

On what legal basis do we process your data?

We process your applicant data on the basis of § 26 BDSG-new (initiation of an employment relationship) and Art. 6 (1) lit. b) GDPR (general contract initiation).

The same applies if your application is successful.

If we are unable to offer you a position, you decline a job offer, or you withdraw your application, we have a legitimate interest in using your data for evidentiary purposes in any potential legal dispute. The data processing is therefore based on Art. 6 (1) lit. f) GDPR.

If you have expressly consented to the storage of your data, we process your data on the basis of Art. 6 (1) lit. a) GDPR. You may revoke your consent at any time with effect for the future.

Data processing on social media

What is Social Media?

By social media, we mean the social networks on which we have created publicly accessible profiles. You can read below which social networks these are specifically.

Who processes your data?

The respective operating companies of the social networks. You can find the individual operators further down under the respective networks.

How is your data processed?

Operators of social networks are generally able to collect and analyze comprehensive data about the behavior of visitors and users of the network. It is not possible for us to trace all processing operations in the social networks we use, which is why further processing operations not listed here may be carried out by the operators of the social networks. You can find more information on this in the terms of use and privacy policies of the respective social networks.

The processing of your data can be triggered by visiting the social network's website or our profile page there. Even if you visit a website that uses certain content from the network, such as Like or Share buttons, data can already be transmitted to the operators of the social network. If you are yourself a user of the social network and are logged into your user account, your visit to our profile page can be attributed to your account by the operator of the social network. Even if you have not registered a user account yourself or are not logged in, it is possible that the network operator may still collect your personal data, for example by capturing your IP address or setting cookies. With this data, the operators can create user profiles tailored to your behavior and interests and show you interest-based advertising within and outside the network. If you are a registered user of the network, interest-based advertising can also be displayed on all devices on which you are or were logged in.

On what legal basis is your data processed?

Our profiles on social networks are intended to ensure the most comprehensive presence of our company on the internet. As a company, we have a legitimate interest in this. The data processing is therefore lawful pursuant to Art. 6 (1) lit. f GDPR.

The data processing operations and analyses carried out by the operators of the social networks themselves may be based on other legal grounds. These must be specified by the operators of the social networks.

Who is responsible for processing your data and how can you assert your rights?

When you visit one of our profiles on social networks, we are jointly responsible with the operator of the respective network for the data processing operations triggered during this visit. In principle, you can assert your rights both against us and against the operator of the respective network.

Despite the joint responsibility with the operators of the social networks, our influence on the data processing operations of the respective operator is, however, limited and is primarily determined by the operator's specifications.

How long is your data stored?

When we collect data via our profiles on social networks, this data is deleted from our systems as soon as the purpose for its storage no longer applies, you request us to delete it, or you revoke your consent to its storage. Stored cookies remain on your device until you delete them. Mandatory legal provisions – in particular retention periods – remain unaffected.

We have no influence on how long the operators of social networks store your data that they collect for their own purposes. You can obtain information about this directly from the operator of the respective social network, e.g., in their respective privacy policy.

Which social media do we use?

Instagram

What is Instagram?
A social network specialized in photos and videos

Who processes your data?
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland

Is your data transferred to third countries?
Yes

Where can you find more information about data protection at Instagram?
https://help.instagram.com/519522125107875/?helpref=hc_fnav&bc[0]=Instagram-Hilfebereich&bc[1]=Richtlinien%20und%20Meldungen

Where can you as a user adjust your privacy settings?
As a registered Instagram user, you can adjust your privacy settings in your user account. To do so, click on the following link and log in:
https://www.instagram.com/accounts/privacy_and_security/

LinkedIn

What is LinkedIn?

A social network for business contacts

Who processes your data?

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Will your data be transferred to third countries?

Yes

Where can you find more information about data protection at LinkedIn?

https://de.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy

Where can you as a user adjust your privacy settings?

As a registered LinkedIn user, you can adjust your privacy settings in your user account. To do so, click on the following link and log in:
https://www.linkedin.com/psettings/

[lc-dse-de]