Privacy Policy

1. Introduction

This website is operated by: White Label Advisory GmbH.

It is very important to us to handle our website visitors' data confidentially and to protect it in the best possible way. For this reason, we make every effort to comply with the requirements of the GDPR.

Below we explain how we process your data on our website. We use language that is as clear and transparent as possible so that you really understand what happens to your data.

2. General information

2.1 Processing of personal data and other terms

Data protection applies to the processing of personal data. Personal data means all data with which you can be personally identified. This is, for example, the IP address of the device (PC, laptop, smartphone, etc.) you are currently using. Such data is processed when 'something happens to it'. Here, for example, the IP is transmitted from the browser to our provider and automatically stored there. This is then a processing (according to Art. 4 No. 2 GDPR) of personal data (according to Art. 4 No. 1 GDPR).

These and other legal definitions can be found in Art. 4 GDPR.

2.2 Applicable regulations/laws - GDPR, BDSG and TDDDG

The scope of data protection is regulated by law. In this case, these are the GDPR (General Data Protection Regulation) as a European regulation and the BDSG (Federal Data Protection Act) as a national law.

In addition, the TDDDG supplements the provisions of the GDPR as far as the use of cookies is concerned.

2.3 The person responsible

The controller within the meaning of the GDPR is responsible for data processing on this website. This is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

You can reach the person responsible at:

White Label Advisory GmbH

Shanghaiallee 9, 20457 Hamburg

info@whitelabeladvisory.de

2.4 Data Protection Officer

We have appointed a data protection officer for our company. You can reach him under:

simply Legal GmbH

Sebastian Schenk

Burkarderstr. 36, 97082 Würzburg

dpo@dieter-datenschutz.de

2.5 How data is generally processed on this website

As we have already established, there is data (e.g. IP address) that is collected automatically. This data is mainly required for the technical provision of the website. If we also use personal data or collect other data, we will inform you of this or ask for your consent.

You consciously provide us with other personal data.

You will find detailed information on this below.

2.6 Your rights

The GDPR provides you with comprehensive rights. These include, for example, free information about the origin, recipient and purpose of your stored personal data. You can also request the rectification, blocking or erasure of this data or lodge a complaint with the competent data protection supervisory authority. You can revoke your consent at any time.

You can find out what these rights look like in detail and how to exercise them in the last section of this Privacy Policy.

2.7 Data protection - Our view

Data protection is more than just a chore for us! Personal data has great value and careful handling of this data should be a matter of course in our digitalized world. As a website visitor, you should also be able to decide for yourself what "happens" to your data, when and by whom. That is why we are committed to complying with all legal regulations, only collect the data we need and, of course, treat it confidentially.

2.8 Forwarding and deletion

The transfer and deletion of data are also important and sensitive issues. We would therefore like to briefly inform you in advance about our general approach to this.

Data will only be passed on on the basis of a legal basis and only if this is unavoidable. This may be the case in particular if it is a so-called Data Processor and a Data Processing Agreement has been concluded in accordance with Art. 28 GDPR.

We delete your data when the purpose and legal basis for processing no longer apply and the deletion does not conflict with any other legal obligations. Art. 17 GDPR also provides a 'good' overview of this.

For further information, please refer to this Privacy Policy and contact the controller if you have any specific questions.

2.9 Hosting

United Domains

On our website we use hosting and domain services from United Domains. United Domains is operated by united-domains GmbH, based in Starnberg, Germany, registered with the Munich Local Court under HRB 294348. The service provides domain registration, domain administration, DNS and email forwarding as well as the connection of domains to external hosting providers. Personal data is processed during use, including IP address, technical connection data (date, time, pages accessed, browser information), tracking data (browser activity, clickstream, session heatmaps), contact information (e.g. e-mail address or telephone number, if provided) and, if applicable, geographical location data. The purpose of the processing is to provide and manage domains, to ensure operational security and, if necessary, to communicate with users, in particular in the event of administrative inquiries or support cases. The legal basis for data processing is Art. 6 para. 1 lit. b GDPR (fulfillment of contract or implementation of pre-contractual measures), Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and reliable hosting) and, if technically unnecessary cookies or tracking procedures are used, Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG (consent). It cannot be ruled out that United Domains uses cookies in the context of analysis or tracking services; however, these are only activated with prior consent and can be revoked at any time. As far as we are currently aware, no personal data is transferred to third countries outside the European Economic Area. Personal data is deleted as soon as the purpose of processing no longer applies, consent is withdrawn or statutory retention periods expire. Further information can be found in the Privacy Policy of United Domains: https://www.uniteddomains.com/service/privacy/

Xano

We use the hosting and backend infrastructure of Xano on our website. Xano is a Backend-as-a-Service (BaaS) provider operated by Xano, Inc, 20700 Ventura Blvd Ste 210, Woodland Hills, California, United States. Xano provides the technical basis for the storage and management of data as well as the provision of APIs, authentication functions and automation services. In particular, personal data entered via web forms and interfaces or transmitted as part of the services offered is processed; this includes, among other things, name, email address, location data, account information, authentication data and all information provided by users or processed by the API structure. The purpose of data processing is the secure operation of the web application, the management and processing of usage data and the provision of functionalities and interfaces for the website. The legal basis is Art. 6 para. 1 lit. b GDPR for the initiation or execution of contractual relationships and Art. 6 para. 1 lit. f GDPR due to our legitimate interest in a central, secure and efficient technical infrastructure. Cookies are not set by Xano independently, but only if this is required by the specific integration and use in the front end; in this case, technically necessary cookies are used on the basis of Section 25 (2) TDDDG; other cookies, e.g. for analysis or marketing purposes, are only set with consent in accordance with Section 25 (1) TDDDG and Art. 6 (1) lit. a GDPR. Data may be transferred to the USA, as Xano is operated by a US company; the EU standard contractual clauses are used as guarantees to ensure an adequate level of data protection. The data is stored for the duration of the purpose limitation and deleted as soon as it is no longer required for the purposes of processing or consent is revoked, unless there are legal storage obligations to the contrary. Further information can be found at: https://legal.xano.com/privacy-notice

HubSpot

We use the HubSpot website building system on our website, operated by HubSpot Ireland Limited, HubSpot House, One Sir John Rogerson's Quay, Dublin 2, Ireland. HubSpot enables the creation and management of websites, the integration of forms, landing pages, live chat and analytical evaluations to optimize the website and to integrate marketing, CRM and sales functions. During use, IP addresses, information on pages visited (page paths), cookie consent status, website activity data, data entered via forms and browser identification features are processed. The purpose of data processing is the technical provision, optimization and content delivery of the website, as well as the recording of website interactions for marketing and analysis purposes, including lead generation and customer communication. The legal basis for this processing is Art. 6 para. 1 lit. a GDPR in conjunction with. § Section 25 (1) TDDDG, if consent has been given via the cookie banner, otherwise Art. 6 (1) (f) GDPR for the technically necessary provision and analysis of the website functions. HubSpot uses various cookies, including functional cookies to provide the website functions, as well as analysis and marketing cookies for evaluation and marketing purposes; analysis and marketing cookies are only set with express consent. The legal basis for this is Art. 6 para. 1 lit. a GDPR i.V.m. § 25 para. 1 TDDDG. Personal data may be transferred to countries outside the European Economic Area, in particular to the USA. HubSpot uses the standard contractual clauses approved by the EU Commission in accordance with Art. 46 para. 2 lit. c GDPR as a suitable guarantee. The data is stored and deleted as soon as it is no longer required for the purposes of its processing, in the event of withdrawal of consent or after expiry of statutory retention periods. Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/privacy-policy

2.10 Legal basis

The processing of personal data always requires a legal basis. The GDPR provides the following possibilities in Art. 6 para. 1 sentence 1:

a) The data subject has given their consent to the processing of their personal data for one or more specific purposes;

b) Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;

c) The processing is necessary for compliance with a legal obligation to which the controller is subject;

d) Processing is necessary in order to protect the vital interests of the data subject or of another natural person;

e) The processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

f) Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

In the following sections, we will provide you with the specific legal basis for the respective processing.

3. What happens on our website

When you visit our website, we process your personal data.

We use SSL or TLS encryption to provide the best possible protection against unauthorized access by third parties. You can recognize this encrypted connection by the https:// or lock symbol in the address bar of your browser.

Below you can find out what data is collected when you visit our website, for what purpose this is done and on what legal basis.

3.1 Data collection when accessing the website

When you visit the website, information is automatically stored in so-called server log files. This is the following information:

Browser type and browser version

Operating system used

Referrer URL

Host name of the accessing computer

Time of the server request

IP address

This data is required temporarily in order to be able to display our website to you permanently and without any problems. In particular, this data is used for the following purposes:

System security of the website

System stability of the website

Troubleshooting on the website

Establishing a connection to the website

Presentation of the website

Data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR and is based on our legitimate interest in the processing of this data, in particular our interest in the functionality of the website and its security.

Where possible, this data is stored in pseudonymized form and deleted once the respective purpose has been achieved.

If the server log files make it possible to identify the data subject, the data is stored for a maximum period of 14 days. An exception is made if a security-relevant event occurs. In this case, the server log files are stored until the security-relevant event has been resolved and finally clarified.

Otherwise, no merging with other data takes place.

3.2 Cookies

3.2.1 General information

This website uses so-called cookies. This is a data record, information that is stored in the browser of your end device and is related to our website.

The use of cookies can make it easier for visitors to navigate the website.

In our cookie consent tool, you will find all information about the cookies that we use on our website (if applicable, with your consent).

3.2.2 Rejecting cookies

You can manage all cookies that are not technically necessary directly via our cookie consent tool.

You can prevent cookies from being set by adjusting your browser settings.

Here you will find the corresponding links to frequently used browsers:

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen?redirectslug=Cookies+l%C3%B6schen&redirectlocale=en

Google Chrome: https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=de

Microsoft Edge: https://support.microsoft.com/de-de/windows/l%C3%B6schen-und-verwalten-von-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Safari: https://support.apple.com/de-de/guide/mdm/mdmf7d5714d4/web and https://support.apple.com/de-de/guide/safari/sfri11471/mac.

If you are using a different browser, we recommend that you enter the name of your browser and 'delete and manage cookies' in a search engine and follow the official link to your browser.

Alternatively, you can also manage your cookie settings at www.aboutads.info/choices/ or www.youronlinechoices.com.

However, we must point out that a comprehensive blocking/deletion of cookies can lead to impairments in the use of the website.

3.2.3 Technically necessary cookies

We use technically necessary cookies on this website to ensure that our website functions correctly and in accordance with the applicable laws. They help to make the website user-friendly. Some functions of our website cannot be displayed without the use of cookies.

The legal basis for this is Art. 6 para. 1 lit. b, c and/or f GDPR, depending on the individual case.

3.2.4 Technically not necessary cookies

We also use cookies on our website that are not technically necessary. These cookies are used, among other things, to analyze the surfing behavior of the website visitor or to offer functions of the website that are not technically necessary.

The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR.

Technically unnecessary cookies are only set with your consent, which you can revoke at any time in the cookie consent tool.

3.3 Data processing through user input

3.3.1 Own data collection

We offer the following (service) on our website: Appointment booking.

We collect the following data for this purpose:

Name

E-mail address

Phone number

The legal basis for this data processing is Art. 6 para. 1 lit. b GDPR.

The data will be deleted as soon as the respective purpose no longer applies and it is possible in accordance with the legal requirements.

3.3.2 Contact us

a) e-mail

When you contact us by email, we process your email address and any other data contained in the email. This data is stored on the mail server and in some cases on the respective end devices. Depending on the request, the legal basis for this is regularly Art. 6 para. 1 lit. f GDPR or Art. 6 para. 1 lit. b GDPR. The data will be deleted as soon as the respective purpose no longer applies and it is possible in accordance with the legal requirements.

b) Telephone

If you contact us by telephone, the call data may be stored in pseudonymized form on the respective end device and with the telecommunications provider used. Personal data collected during the telephone call will only be processed in order to process your request. Depending on the request, the legal basis for this is regularly Art. 6 para. 1 lit. f GDPR or Art. 6 para. 1 lit. b GDPR. The data will be deleted as soon as the respective purpose no longer applies and it is possible in accordance with the legal requirements.

c) Contact form

HubSpot

Our website uses the HubSpot contact form, provided by HubSpot, Inc, 1 Sir John Rogerson's Quay, Dublin 2, Ireland. The form is used to record and manage contact requests and supports integration into customer relationship management and the automation of marketing and sales processes. The data entered in the form, such as name, e-mail address, telephone number, company affiliation and, if applicable, other details and information provided in the course of making contact, as well as technical data such as the IP address and information on usage behavior collected by cookies, are processed. Processing is carried out for the purpose of processing contact inquiries, preparing and implementing contract initiation, organizing customer relationship management and evaluating and tracking inquiries. The legal basis is Art. 6 para. 1 lit. b GDPR for (pre-)contractual measures, Art. 6 para. 1 lit. f GDPR based on the legitimate interest in efficient communication and, insofar as consent is required (e.g. for marketing purposes, tracking via cookies), Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG. HubSpot uses functional, analysis and marketing cookies in the context of form use, which are only activated and set after express consent has been given; consent can be revoked at any time. Personal data may be transferred to third countries, in particular to the USA; HubSpot uses the EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR as a suitable guarantee. The stored data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected or any consent given is revoked, unless statutory retention obligations prevent deletion. Detailed information can be found at: https://legal.hubspot.com/privacy-policy

d) Chat

HubSpot Chat

This website uses the HubSpot Chat service provided by HubSpot, Inc, Two Canal Park, Cambridge, MA 02141, USA, for real-time communication and to offer a chat function. The service enables website visitors to contact support or sales directly via a live chat widget, make inquiries, exchange information and, if necessary, make appointments or create support tickets. Personal data such as IP address, geographical location data, browser and device information, call and session behavior, content of the chat communication, e-mail addresses or other identification features are processed if these are transmitted by the user, as well as any entries in form fields during the chat. The purpose of data processing is the provision of low-threshold communication channels, the simplification of inquiries and the qualification and control of incoming messages to optimize customer service. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR for pre-contractual or contractual inquiries, otherwise Art. 6 para. 1 lit. f GDPR due to the legitimate interest in effective visitor communication; for the use of chat cookies, the processing is based on Art. 6 para. 1 lit. a GDPR in conjunction with. § Section 25 (1) TDDDG, provided that consent is obtained. HubSpot Chat uses functional cookies ("messagesUtk") in particular to store interactions and chat histories; these are only set with the appropriate consent and are used exclusively for chat provision and history. The legal basis for this is the declared consent. As HubSpot, Inc. is a US provider, the transfer of personal data to the USA cannot be ruled out. According to HubSpot's own information, suitable guarantees such as the EU standard contractual clauses are used for security purposes. Data is only stored for as long as is necessary for the communication and processing of the request and in accordance with legal retention periods and any revocations; data in cookies is deleted depending on the selected storage period or until consent is revoked. Further information on data protection and the processing mechanisms of HubSpot Chat can be found at https://legal.hubspot.com/privacy-policy.

e) Chatbot

HubSpot Chatbot

We use the HubSpot chatbot service on our website, a service for automated customer communication and lead generation, operated by HubSpot, Inc, Two Canal Park, Cambridge, MA 02141, USA. The chatbot enables direct interaction with website visitors, answers inquiries, assists with navigation, qualifies prospective contacts, enables meetings to be booked and collects information for the purpose of establishing contact or lead nurturing. Typically, data such as views of the chat widget, conversations started, answers to chatbot questions (such as name, email address, order number, feedback), contact details, details of meetings booked, interaction data and browser-related information are processed. The processing is carried out for the purpose of providing customer service, lead qualification, booking appointments, evaluating the use of the chatbot and improving and analyzing our digital customer service. The legal basis for this is generally Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication and customer loyalty). If there are active inquiries or appointment bookings, the processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR (contract initiation and execution). If the service uses cookies or similar technologies, this is done on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. HubSpot may use cookies for functional, analytical and marketing purposes; these will only be installed with your express consent. Personal data may be transferred to the USA. HubSpot uses the standard contractual clauses of the EU Commission as suitable guarantees for data transfer in accordance with Art. 46 GDPR. Data is deleted as soon as it is no longer required for the purposes of its processing, data subjects revoke their consent or deletion is required by law, unless longer statutory retention periods exist. Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/privacy-policy

f) Appointment scheduling tool

HubSpot

On our website, we use the appointment booking function of HubSpot, a service of HubSpot, Inc, Two Canal Park, Cambridge, MA 02141, USA. HubSpot provides an integrated platform for appointment scheduling that allows appointments to be made online and automatically stored in the CRM. As part of the appointment booking process, personal data such as name, e-mail address, other information entered by the person booking the appointment, IP address, browser information, time and session data are processed. The purpose of the processing is to provide a convenient appointment booking service, to coordinate appointment requests and to manage and document them as part of the contract initiation or execution process. The legal basis is Art. 6 para. 1 lit. b GDPR, as far as the initiation or fulfillment of contract-related appointments is concerned, as well as Art. 6 para. 1 lit. f GDPR due to our legitimate interest in efficient appointment organization and customer communication. HubSpot uses functional cookies as part of the appointment scheduling process to provide the booking form and store the session information; these cookies are only used with consent, the legal basis for this is Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG. Data may be transferred to the USA. HubSpot uses the EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR as suitable guarantees. The data will be deleted as soon as the purpose of the processing no longer applies, consent is revoked or statutory retention obligations have expired. Further information can be found at: https://legal.hubspot.com/privacy-policy

3.4 Cookie Consent Tool

Cookiebot

We use the consent management service Cookiebot on our website to manage and document cookie consents, offered by Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark. Cookiebot enables the display of an individualized consent banner, the automatic recognition and categorization of all cookies used on the website and blocks non-essential cookies and trackers until consent is given by users. In particular, the user's consent preferences (e.g. consent or refusal for necessary, functional, statistical and marketing cookies), the time and status of the consent given, technical metadata on cookies and trackers, as well as anonymous usage data such as browser type, referrer information, timestamps and random identifiers when the analysis function is activated are processed. The purpose of data processing is the legally compliant recording, documentation and management of cookie consents as well as the implementation of legal transparency and verification obligations with regard to the use of cookies and other tracking technologies on this website. The legal basis for the processing of personal data in connection with the use of Cookiebot is Art. 6 para. 1 lit. c GDPR for the fulfillment of legal obligations in the context of consent management and Art. 6 para. 1 lit. f GDPR due to the legitimate interest in a verifiable, data protection-compliant design of the website. The storage and evaluation of any cookie consents by means of technically unnecessary cookies is carried out exclusively on the basis of express consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG, which can be revoked at any time. Cookiebot uses both technically necessary cookies to manage consent and - depending on the selected user decision - optional cookies for analysis and marketing purposes. The exact cookie types and their duration are listed transparently in the cookie banner and can be viewed at any time. Cookiebot does not transfer data to third countries, as data processing takes place within the European Union. Personal data in connection with consent is stored for as long as is necessary for the documentation of consent or in accordance with the statutory retention obligations. Personal data will be deleted at the latest as soon as the purpose of the processing ceases to apply or consent given is revoked, provided that there are no legal retention periods to the contrary. Further information on data protection at Cookiebot can be found at: https://www.cookiebot.com/en/privacy-policy/

3.5 Website construction kit system

HubSpot

We use the HubSpot website building system on our website, operated by HubSpot Ireland Limited, HubSpot House, One Sir John Rogerson's Quay, Dublin 2, Ireland. HubSpot enables the creation and management of websites, the integration of forms, landing pages, live chat and analytical evaluations to optimize the website and to integrate marketing, CRM and sales functions. During use, IP addresses, information on pages visited (page paths), cookie consent status, website activity data, data entered via forms and browser identification features are processed. The purpose of data processing is the technical provision, optimization and content delivery of the website, as well as the recording of website interactions for marketing and analysis purposes, including lead generation and customer communication. The legal basis for this processing is Art. 6 para. 1 lit. a GDPR in conjunction with. § Section 25 (1) TDDDG, if consent has been given via the cookie banner, otherwise Art. 6 (1) (f) GDPR for the technically necessary provision and analysis of the website functions. HubSpot uses various cookies, including functional cookies to provide the website functions, as well as analysis and marketing cookies for evaluation and marketing purposes; analysis and marketing cookies are only set with express consent. The legal basis for this is Art. 6 para. 1 lit. a GDPR i.V.m. § 25 para. 1 TDDDG. Personal data may be transferred to countries outside the European Economic Area, in particular to the USA. HubSpot uses the standard contractual clauses approved by the EU Commission in accordance with Art. 46 para. 2 lit. c GDPR as a suitable guarantee. The data is stored and deleted as soon as it is no longer required for the purposes of its processing, in the event of withdrawal of consent or after expiry of statutory retention periods. Further information on data protection at HubSpot can be found at: https://legal.hubspot.com/privacy-policy

3.6 Newsletter

Brevo (formerly Sendinblue)

On our website, we use the services of Brevo (formerly Sendinblue), offered by Sendinblue (Brevo), 17 rue Salneuve, 75017 Paris, France, to send newsletters and manage recipient data. Brevo enables the creation, management and sending of newsletters and automated email marketing campaigns, the segmentation of contact lists, the management of registrations via web forms and the implementation of marketing automation. In particular, email addresses, details from registration forms (such as name or individual preferences), consent indicators (opt-in status) and campaign-related information are processed. Processing is carried out for the purpose of sending newsletters, maintaining and segmenting recipient lists and implementing marketing automation. The legal basis is regularly Art. 6 para. 1 lit. a GDPR (consent to receive the newsletter) and, in the case of purely administrative processing within the framework of existing contractual relationships, Art. 6 para. 1 lit. b GDPR; in the case of functional cookies or statistics cookies, Section 25 para. 1 TDDDG also applies. If Brevo sets cookies as part of web forms or integrated marketing functions, this is done exclusively on the basis of previously obtained consent; this consent can be revoked at any time. The type of cookies includes in particular functional cookies and - depending on the integration - possibly also analysis or marketing cookies. The processing of personal data by Brevo takes place exclusively within the European Union; data is not transferred to third countries. Data will be deleted as soon as it is no longer required for the purpose of processing or consent has been withdrawn, provided there are no legal retention periods to the contrary. Further information can be found at: https://www.brevo.com/legal/privacypolicy/

Brevo

Our website uses functions from Brevo (formerly Sendinblue), a newsletter management and marketing automation service from Sendinblue SAS, 7 Rue de Madrid, 75008 Paris, France. Brevo enables the sending of newsletters, the management of contact and registration data, the tracking of user interactions (e.g. openings and clicks within emails) as well as the automation of email campaigns and the synchronization of CRM data. Personal data is processed, in particular email addresses, contact characteristics entered by the user via forms (such as name or interests) and interaction data (e.g. email open and click rates). Data processing is used to send and analyze newsletters, to manage and segment contacts and to optimize marketing measures. The legal basis is regularly Art. 6 para. 1 lit. a GDPR i.V.m. § Section 25 para. 1 TDDDG with prior consent; in the case of existing business relationships, Art. 6 para. 1 lit. b GDPR may also apply. Insofar as cookies or comparable technologies (such as tracking pixels) are used in connection with the use of Brevo, this is done exclusively on the basis of consent; the type, purpose and storage duration of the cookies are specifically described in the consent banner in each case. Personal data is not transferred to third countries, as the data is processed on servers within the European Union. Data is deleted as soon as the purpose of processing no longer applies, consent is withdrawn or statutory retention obligations expire. Further information on data processing by Brevo and on data protection rights can be found at: https://www.brevo.com/legal/privacypolicy/

3.7 Analysis and tracking tools

Google Ads

Our website uses Google Ads, an online advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to place, control and analyze advertisements. Google Ads makes it possible to place targeted ads based on usage data, to measure the reach of advertising measures and to offer so-called conversion and remarketing functions. Depending on the integration, the following personal data may be processed IP address, information on browser and device type, pages and URLs accessed, click data, location data (if available), conversion and engagement information (e.g. purchases, completed forms), as well as contact information pseudonymized using a hash when using enhanced conversions. The data is processed in order to efficiently manage advertising campaigns, measure the success of advertisements (conversion tracking), retarget website visitors (remarketing), analyze user behavior with regard to advertisements and optimize advertising playout. The legal basis for the processing of personal data when using Google Ads is generally consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as cookies or comparable technologies are used for recognition; the use can be based on Art. 6 para. 1 lit. f GDPR in individual cases, provided that there is a legitimate interest in efficient marketing and no consent is required. Google Ads uses cookies and similar technologies as part of its functions to evaluate user behavior, measure conversions and create target groups; if this concerns analysis, conversion and marketing cookies, they are only set with the active consent of the website visitor in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Art. 25 para. 1 TDDD. § 25 para. 1 TDDDG. A transfer of data to third countries, in particular to the USA, cannot be ruled out; for such transfers, Google uses the EU standard contractual clauses as suitable guarantees in accordance with Art. 46 GDPR. Personal data is stored for as long as it is required for the stated purposes or until consent is withdrawn; statutory retention obligations remain unaffected, after which it is deleted. Further information on data protection at Google and specific information on Google Ads can be found at: https://policies.google.com/privacy?hl=de

YouTube

The YouTube service, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is integrated on this website for analysis and tracking purposes. The service enables the evaluation of interaction with YouTube videos on the website, such as playing, pausing and the progress of videos, in order to understand user behavior and measure the performance of video content. Typically, IP address, browser and device information, video interaction data (play, pause, progress, completion), referrer URL, screen settings, language settings and video metadata such as title and URL are processed. The processing is carried out for the purpose of measuring reach, optimizing the video offer, analyzing the interaction with video content and measuring the success of marketing measures. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG (regarding access to terminal device information and setting cookies); if consent is not given, processing is based on our legitimate interest in analysis and optimization in accordance with Art. 6 para. 1 lit. f GDPR. As part of the video integration, YouTube can set cookies and comparable technologies for analysis, functional and marketing purposes; these cookies are only used with prior express consent. The integration of YouTube may result in the transfer of personal data to third countries, in particular to servers of Google LLC in the USA. According to Google, it uses the EU Commission's standard contractual clauses as suitable guarantees for this transfer. The data will be deleted as soon as the purpose of the processing no longer applies or consent has been revoked, provided there are no statutory retention obligations to the contrary. Further information can be found in Google's Privacy Policy at: https://policies.google.com/privacy?hl=de

Google Maps

The map service Google Maps is used on our website to display interactive maps and to show locations and route planning. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps enables the integration of maps on which locations can be displayed and interactive functions such as zoom, route planning or searching for local providers can be used. During use, personal data such as IP address, location data (if permitted), browser and device information, search queries entered and interaction data (e.g. locations clicked on) are processed. The processing serves to provide user-friendly location information, to facilitate directions and to improve the functionality of the online offer. The legal basis for the use of Google Maps is generally consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG, insofar as access to terminal device information takes place, and otherwise Art. 6 para. 1 lit. f GDPR, from the legitimate interest in a needs-based presentation of locations and user-friendly navigation. Google Maps regularly sets cookies for analysis, functional and possibly marketing purposes. Non-essential cookies are set exclusively on the basis of prior consent, which can be revoked at any time. The transfer of personal data to third countries such as the USA cannot be ruled out. Google regularly uses the standard contractual clauses of the EU Commission as a suitable guarantee for these data transfers in accordance with Art. 46 GDPR. The stored data is deleted as soon as it is no longer required for the respective purposes or consent is revoked, provided that there are no statutory retention obligations to the contrary. Further information can be found in Google's Privacy Policy at https://policies.google.com/privacy.

Brevo

Brevo is used on our website for analysis and tracking purposes. Brevo is a service provided by Sendinblue SAS, 17 rue Salneuve, 75017 Paris, France. Brevo enables the recording of visitor behavior on the website, the tracking of interactions with marketing campaigns (such as e-mail openings, clicks or conversions) and the integration of website and e-commerce analyses to evaluate user activities and campaign successes. As a rule, Brevo processes IP addresses, browser type and version, operating system, referrer and exit URLs, cookie information and - if provided by forms or tracking pixels - contact data. Data processing is used to optimize marketing activities, analyze user behavior, measure the success of campaigns and evaluate the business performance of sales and website services. The legal basis for the use is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as consent has been given for the setting of cookies or comparable technologies; otherwise the processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in the analysis, optimization and economic operation of the website. Brevo uses analysis and tracking cookies, which are only activated with prior consent; consent can be revoked at any time with effect for the future. Personal data is generally processed within the European Union; it is not transferred to third countries. Stored data will be deleted as soon as it is no longer required for the stated purposes or consent has been withdrawn, provided that there are no statutory retention obligations to the contrary. Further information can be found at: https://www.brevo.com/legal/privacypolicy/

LinkedIn Insight Tag

Our website uses the LinkedIn Insight Tag, an analysis and tracking service provided by LinkedIn Ireland Unlimited Company, Gardner House, 2 Wilton Place, Dublin 2, Ireland. The LinkedIn Insight Tag enables website visits to be analyzed, conversions to be measured and target groups to be created for LinkedIn advertising campaigns. The service typically collects the IP address, device type, operating system, referral source, referrer domain, URLs visited, timestamps, page views, form submissions and - if visitors are LinkedIn members - information such as job title, company and industry. The processing is carried out for the purposes of web analysis, measuring the success of advertising measures, target group formation and retargeting. The legal basis for the use of the LinkedIn Insight Tag is consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG, insofar as information is stored in the end device or information already stored in the end device (e.g. cookies) is accessed. If consent is not given, no processing takes place. The service sets cookies that are used both to analyze website usage and for marketing purposes through targeted advertising on external platforms; these cookies are only set with express consent. Personal data may be transferred to third countries such as the USA. In these cases, LinkedIn uses the standard contractual clauses approved by the European Commission as suitable guarantees in accordance with Art. 46 GDPR. The stored data is generally deleted as soon as it is no longer required for the stated purposes or consent is revoked, provided that there are no legal retention obligations to the contrary. Further information on data protection at LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy

Google Tag Manager

Our website uses the tag management service Google Tag Manager, which is operated by Google Ireland Limited, Google Building, 4th Floor, 70 Sir John Rogerson's Quay, Dublin 2, Ireland (D02 X576). With Google Tag Manager, various tracking and marketing scripts (so-called "tags") can be centrally managed and integrated on the website without the need to make any adjustments to the source code. The service itself does not use any tracking mechanisms, but forwards data streams to the integrated third-party tags. Google Tag Manager typically processes all personal data that is transmitted through configured tagging, such as IP address, user interaction data (e.g. clicks, page views, form submissions), technical information about the browser or end device, as well as tracking IDs, geographical location data and e-commerce information. The scope depends on the respective tag configuration and the respective third-party tags. The purpose of the use is the efficient management and display of analysis and marketing tags, the evaluation of user behavior and the optimization of the online offer. The legal basis for the use is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in the technically secure, efficient and economical provision of analysis and marketing services. Insofar as tracking or marketing tags are set with consent, this is done on the basis of Art. 6 para. 1 lit. a GDPR i. V. m. § 25 para. 1 TDDDG. Google Tag Manager itself does not set any cookies, but can control the triggering of cookies by integrated third-party tags. Which cookies are set in detail depends on the respective tag configuration; more detailed information on this can be found in the corresponding sections of the Privacy Policy. Google Tag Manager may transfer personal data to third countries, in particular the USA, via downstream, integrated third-party tags. Google ensures suitable guarantees for its own processing operations in accordance with Art. 46 GDPR, in particular the use of the EU standard contractual clauses. The data collected as part of the tag will be deleted as soon as the respective purpose of the processing no longer applies, the data subject withdraws consent or statutory retention obligations permit deletion. The storage period of the integrated third-party services may differ and can be found in their Privacy Policies. Further information on data protection at Google Tag Manager can be found at: https://policies.google.com/privacy?hl=de

Google Analytics

We use the analysis service Google Analytics on our website to evaluate visitor behavior and to optimize our online services. Google Analytics is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics collects and analyzes information about the interaction of users with our website, including page views, length of stay, clicks, navigation, geographical origin (at city and state level), device and browser information used and the origin of traffic. In addition, technical identifiers such as the anonymized IP address, cookie IDs, client IDs or user IDs are processed. If activated, demographic characteristics and interests may also be included. Processing is carried out for the purpose of measuring reach, analyzing user behavior, improving the website and checking the success of marketing measures. The legal basis for the use of Google Analytics is consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG. Processing only begins after active consent has been given by the website visitor. Google Analytics uses cookies that are stored on the end device and read out corresponding information. These are analysis cookies that are used exclusively on the basis of consent. The transfer of personal data to a third country (e.g. the USA) cannot be ruled out. Insofar as data is processed outside the EU/EEA, Google uses the standard contractual clauses approved by the EU Commission as guarantees for compliance with the European level of data protection. The storage periods of Google Analytics can be configured and are 2 to 14 months by default. Collected data is deleted as soon as it is no longer required for the processing purposes or if consent is withdrawn, provided that there is no legal obligation to retain it. Further information can be found at: https://policies.google.com/privacy?hl=de

3.8 Social media plugins

Facebook

Social media functions from Facebook, a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are integrated on our website. Facebook enables the integration of social sharing functions, embedded content such as posts or videos, comment functions and a login via "Login with Facebook". As a rule, IP addresses, device and browser information, cookies or other identifiers, pages visited, click and interaction data and - when using the Facebook login - Facebook profile information and, if applicable, e-mail addresses are processed through the integration. Data processing is carried out for the purpose of improving the user-friendliness of our website, enabling social interactions, targeted advertising and analyzing website usage. The legal basis is regularly Art. 6 para. 1 lit. a GDPR i. V. m. § Section 25 (1) TDDDG, if consent is given for social plugins and tracking, otherwise the use is based on Art. 6 (1) (f) GDPR due to legitimate interests in reach analysis and user-oriented provision of content. Facebook uses cookies for analysis, marketing and functional purposes. Cookies that are not absolutely necessary are only used with express consent. If data is transferred to third countries outside the EEA, in particular the USA, as part of the use of Facebook services, this is done on the basis of the EU standard contractual clauses. The data will be deleted as soon as the purpose of the processing no longer applies, consent is withdrawn or the statutory retention obligations expire. Further information on the processing of personal data by Facebook can be found at: https://www.facebook.com/privacy/policy/

LinkedIn

Functions and content of the social network LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, D02 AD98, Ireland, are integrated on this website. LinkedIn enables the integration of social media content such as share buttons, embedded profiles and direct access to network functions such as sharing, following or logging in via LinkedIn. Personal data is processed, including IP address, browser and device data, referrer URL, timestamp of interaction, details of interactions (e.g. clicks, shares), LinkedIn profile information (e.g. member ID and profile details for logged-in users) as well as cookies and tracking IDs. The purpose of data processing is the integration and functionality of social media elements, the improvement of reach, the analysis of user behavior, targeted advertising and networking in a professional context. The legal basis for the integration and analysis is regularly Art. 6 para. 1 lit. f GDPR due to the legitimate interest in efficient information dissemination and external presentation. If personal data is processed for tracking, reach analysis or marketing cookies, this is done on the basis of consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG. LinkedIn uses different types of cookies, including functional cookies to provide the embedded services, analytics cookies to measure reach and marketing cookies to display personalized advertising. These cookies are only activated if consent has been given and can be revoked at any time. The transfer of personal data to third countries, in particular to the USA, cannot be ruled out. In these cases, LinkedIn uses EU standard contractual clauses in accordance with Art. 46 GDPR as appropriate safeguards to ensure an adequate level of data protection. Personal data will be deleted as soon as they are no longer required for the purposes of their processing, users revoke their consent or there are no longer any legal obligations to retain them. Further information on data processing by LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy

YouTube

Video content is integrated on this website via the YouTube service, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. YouTube allows videos to be displayed directly on the website, providing multimedia content for information and entertainment and strengthening user loyalty. Personal data is regularly processed, including IP address, browser and device information, usage data such as playback and interaction behavior and, if applicable, account-related data if users are logged in with a Google or YouTube account during use. The purpose of data processing is to provide video content, make the website appealing, increase reach and promote interaction. The legal basis for the integration is Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG, provided that consent to the use of cookies and comparable technologies has been given. No integration or transmission of personal data to YouTube takes place without consent. YouTube uses cookies and similar technologies as part of the video integration, which are used in particular for analysis, functional and marketing purposes. These are only set on the basis of the user's express consent. When using YouTube, personal data may be transferred to Google LLC companies in the USA. In this case, the transfer takes place on the basis of the EU standard contractual clauses of the European Commission as suitable guarantees within the meaning of Art. 46 para. 2 lit. c GDPR. Personal data will be deleted as soon as it is no longer required for the processing purposes or consent has been revoked, provided that there are no statutory retention obligations to the contrary. Further information on data protection at YouTube can be found at: https://policies.google.com/privacy?hl=de

Instagram

Our website integrates functions of Instagram, a social media service for sharing photos and videos, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin, Dublin 2, Ireland. Instagram allows you to view and interact with public Instagram content, such as feeds, posts and hashtag campaigns, directly on the website to support brand engagement, user interactions and marketing efforts. As a rule, public content (photos, videos, reels), profile information, engagement data (likes, comments, clicks, impressions) and interaction data with the integrated elements are processed. In the case of authenticated interfaces, further analysis data can also be processed. The purpose of processing is to increase reach, display user-generated content, promote brand loyalty and marketing. The legal basis for data processing is generally consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG, provided that the integration of Instagram elements already enables tracking when the page is loaded, otherwise there may also be a legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in the integration and presentation of social media content. Instagram uses cookies and similar technologies for analysis, marketing and personalization purposes. These cookies are only set on the basis of prior consent, which can be revoked at any time. The legal basis for the use is Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. When using Instagram, personal data may be transferred to Meta in the USA and other third countries. Instagram/Meta uses the EU standard contractual clauses in accordance with Art. 46 GDPR as suitable guarantees for this. The stored data will be deleted as soon as it is no longer required for the purposes for which it was collected or consent is revoked, unless statutory retention obligations prevent this. Further information can be found in Instagram's Privacy Policy: https://about.instagram.com/data-policy

3.8.1 Threads

We also use the functions of Threads. Data collected when using the service, including IP address, application used and information on the end device as well as websites accessed, location and mobile phone provider, are processed by Meta Platform, Inc. as described above. This data may also be transferred to countries outside the European Union. The data collected is linked to the account or profile at Threads. There is no control over the specifics of the data processed by Threads, including its processing, use or disclosure to third parties. Further information:

https://help.instagram.com/769983657850450/?helpref=uf_share

https://privacycenter.instagram.com/policy.

3.9 Social media profiles

In addition to our website, our company is also present on social networks. Here we want to present our company and create the opportunity to get in touch with us.

We also use the opportunity to place advertisements and job advertisements on social media.

In the following, we provide information about which data we and the respective social network process when you visit and interaction with our profile.

Facebook

We operate a Facebook fan page on https://www.facebook.com/. This social network is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Interaction with our company profile

When you visit our Facebook profile and interact with us, we process personal data. On the one hand, the data made publicly available on the profile. On the other hand, we also process the personal data contained in posts, comments or direct messages to us. Through interactions such as liking or sharing, we can see the user profile with the public information. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. It is in our legitimate interest to provide relevant and interesting content and to enable the use and functionality of our Facebook profile. Insofar as an inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures, our processing is based on Art. 6 para. 1 lit. b GDPR.

Page Insights

As explained in the Meta Privacy Policy under "How do we use your information?", Meta also collects and uses information to provide analytics services, known as Page Insights, for page operators. This also applies to our Facebook page. Page insights are summarized statistics that are created based on certain interactions of visitors with pages and the content associated with them (e.g. viewing a page or a video, subscribing to a page, marking a page with "Like" or "No longer like", etc.) and are logged by the Meta servers. Meta provides us with summarized statistics and insights in connection with the Page Insights, which give us information about how people interact with our company website. We do not have access to any personal data, only to the summarized Page Insights. With the help of Page Insights, we can view anonymous statistics, e.g. the reach of our account, page views, likes, etc.. These also contain evaluations according to the age, gender and location of the users (as specified by them in their respective Facebook profiles). To evaluate the reach, we can make settings or set appropriate filters with regard to the selection of a time period, the viewing of a specific post and demographic groupings. This data is anonymized. It is not possible for us to draw conclusions about specific individuals. The purpose of processing this data is to analyze our reach and adapt our content and advertisements to user interests so that visitors can derive the greatest possible benefit from them. By evaluating this data, we can recognize how our content, our profile and our advertising are consumed. This enables us to create target group-specific content and place advertising to better market our company and our services. The processing is based on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. When processing personal data in the course of the so-called Page Insights, we are jointly responsible with Facebook in accordance with Art. 26 para. 1 GDPR. We have concluded a corresponding agreement with Facebook for this purpose, which can be viewed here: https://www.facebook.com/legal/terms/page_controller_addendum. Facebook's contact details are as follows: Online contact: https://www.facebook.com/help/contact/1650115808681298 Postal: Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland. For Facebook, you can contact the data protection officer at the following link: https://www.facebook.com/help/contact/540977946302970. Further information about Page Insights: https://de-de.facebook.com/legal/terms/page_cntroller_addendum

Processing of personal data and cookies by Meta

When a Facebook page is accessed, the IP address assigned to the end device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for "German" IP addresses). Facebook also stores information about the end devices of its users (e.g. as part of the "login notification" function); Facebook may thus be able to assign IP addresses to individual users. Anyone who is currently logged in to Facebook has a cookie with a Facebook identifier on their device. This enables Facebook to track who has visited this page and how it has been used. Facebook buttons integrated into websites enable Facebook to record visits to these websites and assign them to Facebook profiles. This data can be used to offer personalized content or advertising. Information on how personal data can be managed or deleted can be found in Facebook's Privacy Center: https://www.facebook.com/privacy/center/. More information on how Facebook handles data can be found here: http://de-de.facebook.com/about/privacy.

Instagram

We operate an Instagram profile. This social media platform is offered by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Interaction with our company profile

When you visit our Instagram profile and interact with us, we process personal data. On the one hand, the data made publicly available on the profile. On the other hand, we also process the personal data contained in posts, comments or direct messages to us. Through interactions such as liking or sharing, we can see the user profile with the public information. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. It is in our legitimate interest to provide relevant and interesting content and to enable the use and functionality of our Instagram profile. Insofar as a request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures, our processing is based on Art. 6 para. 1 lit. b GDPR.

Insights

As explained in the Meta Privacy Policy under "How do we use your information?" (https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect), Meta also collects and uses information to provide analytics services, known as insights, for site operators. This also applies to our Instagram profile. Insights are summarized statistics that are created based on certain interactions of visitors with pages and the content associated with them and are logged by the Meta servers. This includes the following information: - how many people see and interact with our products, services or content, such as posts, videos, Instagram pages, advertisements, stores and advertisements (if the advertisement is shown on Meta products); - how people interact with our content, websites, apps and services; - which group of people interact with our content or which group of people use our services. Meta provides us with aggregated reports and insights that tell us how well our content, features, products and services are performing. We do not have access to personal data, only to the summarized reports. To evaluate the reach, we can make settings or set appropriate filters with regard to the selection of a time period, the viewing of a specific post and demographic groupings. This data is anonymized. It is not possible for us to draw conclusions about specific individuals. The purpose of processing this data is to analyze our reach and adapt our content and advertisements to user interests so that visitors can derive the greatest possible benefit from them. By evaluating this data, we can recognize how our content, our profile and our advertising are consumed. This enables us to create target-group-specific content and place advertising to better market our company and our services. The processing is based on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. When processing personal data in the course of the so-called Insights, the processing is carried out in joint responsibility with Meta in accordance with Art. 26 para. 1 GDPR. We have entered into a corresponding agreement with Meta for this purpose, which can be viewed [here](https://www.facebook.com/legal/terms/page_controller_addendum.). Meta's contact details are as follows: Online contact: https://www.facebook.com/help/contact/1650115808681298 Postal: Meta Platforms Ireland Limited, ATTN: Privacy Operations, Merrion Road, Dublin 4, D04 X2K5, Ireland. For Instagram, you can contact the data protection officer at the following link: https://www.facebook.com/help/contact/540977946302970. Further information about Insights: https://de-de.facebook.com/help/pages/insights. The complete privacy policy of Instagram: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

Processing of personal data and cookies by Meta

When an Instagram page is accessed, the IP address assigned to the end device is transmitted to Meta. According to Meta, this IP address is anonymized (for "German" IP addresses). Meta also stores information about the end devices of its users (e.g. as part of the "login notification" function); Meta may thus be able to assign IP addresses to individual users. If you are currently logged in to Instagram as a user, a cookie with the Instagram identifier is stored on the end device. This enables Meta to track who has visited and used this page. Meta buttons integrated into websites enable Meta to record your visits to these websites and assign them to your Instagram profile. This data can be used to offer personalized content or advertising. Further information: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect

Xing

We operate a Xing page. This social media platform is offered by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

Interaction with our company profile

When you visit our Xing profile and interact with us via it, we process personal data. On the one hand, the data made publicly available on the profile. On the other hand, we also process the personal data contained in posts, comments or direct messages to us. Through interactions such as liking or sharing, we can see the user profile with the public information. It is also possible to contact us as the operator via the specified contact channels via the company profile. If users are logged in to XING with their user account when they access the company page, information about accessing the service can be assigned to the respective user account. This information is also available to us as the operator of the company profile. The provision of information can be avoided by logging out of the XING user account before accessing the company page. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR. It is in our legitimate interest to provide relevant and interesting content, to maintain business contacts, to draw attention to our services and job advertisements and to get in touch with visitors to our profile and interested parties. Insofar as an inquiry is related to the performance of a contract or is necessary for the implementation of pre-contractual measures, our processing is based on Art. 6 para. 1 lit. b GDPR.

Processing of personal data and cookies by Xing

When using and accessing our company profile, personal data is also processed by Xing. Xing is solely responsible for this processing. We have no influence on the processing by Xing. If consent has been given (for example, by setting the XING status to "actively looking for a job"), Xing will contact you directly to suggest suitable job offers. The processing of data can be restricted in the privacy settings. Xing's Privacy Policy can be viewed here: https://privacy.xing.com/de/datenschutzerklaerung

LinkedIn

We operate a LinkedIn profile on https://www.linkedin.com/. This social network is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Interaction with our company profile

When you visit our LinkedIn profile and interact with us, we process personal data. On the one hand, the data made publicly available on the profile. On the other hand, we also process the personal data contained in posts, comments or direct messages to us. Through interactions such as liking or sharing, we can see the user profile with the public information. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. It is in our legitimate interest to provide relevant and interesting content and to enable the use and functionality of our LinkedIn profile. Insofar as a request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures, our processing is based on Art. 6 para. 1 lit. b GDPR.

Page Insights

LinkedIn provides us with aggregated statistics and insights (called Page Insights) that tell us how people interact with our Company Page. Among other things, we receive information about the number of profiles that view, comment on or otherwise interact with our posts, as well as aggregated demographic and other information that helps us learn about the interaction with our page or LinkedIn profile. Page Insights provided to us by LinkedIn consist of aggregated data, and LinkedIn does not provide us with any personally identifiable information about members in relation to Page Insights. We also have no way of linking Page Insights to individual members. When placing ads, LinkedIn provides us with information about the types of people who see our ads and the success of our ads. Personal data is only passed on to us if this person has consented to such processing. We also receive information from LinkedIn that allows us to understand which of our ads led to a purchase being made or an action being taken. This data is processed for the purpose of analyzing our reach and adapting our content and ads to user interests. By evaluating this data, we can recognize how our content, our profile and our advertising are consumed. This enables us to create target-group-specific content and place advertisements in order to better market our company and our services. The processing is based on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. When processing personal data in the course of the so-called Page Insights, the processing is carried out in joint responsibility with LinkedIn in accordance with Art. 26 para. 1 GDPR. We have concluded a corresponding agreement with LinkedIn for this purpose, which can be viewed [here](https://legal.linkedin.com/pages-joint-controller-addendum). LinkedIn's contact details are as follows: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. For LinkedIn, you can contact the data protection officer at the following link: https://www.linkedin.com/help/linkedin/ask/TSO-DPO.

Processing by LinkedIn

By visiting our company profile, LinkedIn may also process additional personal data. In this case, the processing is carried out under the sole responsibility of LinkedIn and without our knowledge. More information from LinkedIn on this: https://de.linkedin.com/legal/privacy-policy.

Google company profile

We have a so-called Google company profile. We use the information service offered by Google and the services of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Data processing by Google

The Google page and its functions are used under your own responsibility. This applies in particular to the use of social and interactive functions (e.g. commenting, sharing, rating, direct messages). When you visit and interact with our Google company profile entry, Google also collects your IP address and other information that is stored on your device in the form of cookies. This may enable Google to assign IP addresses to individual users or user accounts. This information is used to provide us, as the operator of the Google company profile entry, with statistical information about the use of Google services. The data collected in this context is processed by Google and may be transferred to countries outside the European Union. Google generally describes what information Google receives and how it is used in its Privacy Policy. If you contact us via our Google company profile entry or other Google services by direct message, we cannot rule out the possibility that these messages may also be read and analyzed by Google (both by employees and automatically). We therefore advise against communicating personal data to us there. Instead, another form of communication should be chosen as early as possible. The use of this service is subject to the Google Privacy Policy. Further information can be found in the Privacy Policy at the following link: https://policies.google.com/privacy?hl=de.

Data processing by us

As the provider of our Google company profile entry, we do not collect and process any further data from the use of this Google service. When you contact us or publish a review, we process published profile data and the content of the review/comment. The legal basis is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the presentation of our company and in enabling the evaluation of our services in order to present our company and our services and to present them well to the outside world.

3.9.1 Threads

We also use the functions of Threads. Data collected when using the service, including IP address, application used and information on the end device as well as websites accessed, location and mobile phone provider, are processed by Meta Platform, Inc. as described above. This data may also be transferred to countries outside the European Union. The data collected is linked to the account or profile at Threads. There is no control over the specifics of the data processed by Threads, including its processing, use or disclosure to third parties. Further information:

https://help.instagram.com/769983657850450/?helpref=uf_share

https://privacycenter.instagram.com/policy.

3.10 Audio and video conferencing

Zoom

Our website uses the video conferencing and communication service Zoom, provided by Zoom Video Communications, Inc, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA, for European users with services via regional subsidiaries such as ZVC Germany, ZVC Netherlands or ZVC UK. Zoom enables audio and video conferences, webinars, live chats, screen sharing and online meetings to be held directly via the website. In the course of use, IP addresses, account information, session and meeting data, registration information for webinars, engagement data (e.g. recordings, transcripts) and interaction data such as chat messages, shared files or technical usage information are usually processed. The data processing serves the provision and management of online meetings, interactive communication and the implementation and evaluation of digital events. The legal basis for the processing is regularly Art. 6 para. 1 lit. b GDPR (implementation of (pre-)contractual measures), for support or administrative processes as well as analysis purposes Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient communication and IT security). Depending on the integration, Zoom uses functional cookies for session management and, if necessary, analysis or marketing cookies to evaluate usage, whereby analysis and marketing cookies are only used with consent in accordance with Art. 6 Para. 1 lit. a GDPR in conjunction with. § 25 para. 1 TDDDG are used. Functional cookies are necessary for operation and are used in accordance with Art. 6 para. 1 lit. f GDPR in conjunction with. § 25 para. 2 TDDDG are used. Personal data is transferred to third countries, in particular to the USA, whereby Zoom uses the EU standard contractual clauses as suitable guarantees in accordance with Art. 46 para. 2 lit. c GDPR. The storage period depends on the respective purpose, i.e. data is deleted or blocked after the purpose of processing ceases to apply, if consent is revoked or objected to, or if statutory retention periods expire. Further information can be found in Zoom's Privacy Policy: https://www.zoom.com/en/trust/privacy/privacy-statement/

Microsoft Teams

We integrate Microsoft Teams from Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland, on our website to provide audio and video conferencing as well as chat and collaboration functions. Microsoft Teams makes it possible to hold and participate in online meetings, video conferences and chats directly via the browser, integrate appointments, share files and communicate in real time. As a rule, profile information (e.g. name, email address, profile picture), communication content (chat messages, meeting content, shared files, recordings, transcripts), device and connection data (e.g. app version, device type, country code), usage data (usage behavior, interaction details), optional location data and, if activated, media content (images, video recordings within meetings) are processed. The purpose of data processing is to provide, conduct and follow up on online meetings and to enable efficient team communication and collaboration. The legal basis is Art. 6 para. 1 lit. b GDPR, insofar as the use takes place in the context of (pre-)contractual measures, as well as Art. 6 para. 1 lit. f GDPR to safeguard the legitimate interest in a modern, efficient communication and collaboration platform. If Microsoft Teams uses cookies to provide the function, this is only done for session management and functionality with consent, which can be revoked at any time; the legal basis for this is Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. Data may be transferred to third countries, in particular the USA, as part of support, maintenance or subcontracting processes; Microsoft uses the EU standard contractual clauses as a suitable guarantee in accordance with Art. 46 GDPR. Data will be deleted as soon as the purpose of processing ceases to apply, if consent is withdrawn or after expiry of statutory retention periods. Further information is available at https://privacy.microsoft.com/en-us/privacystatement.

3.11 CRM systems

Hubspot CRM

We use the CRM system Hubspot. This service is offered by Hubspot Inc, 25 Street, Cambridge, MA 02141 USA. CRM (Customer Relationship Management) is a system for managing all of a company's interactions and relationships with its current and potential customers. It supports the automation and optimization of sales processes, marketing campaigns, customer service and customer communication. As soon as we collect your personal data on our website, we process it in the Hubspot CRM system. The legal basis for this is Art. 6 para. 1 lit. b GDPR. The data processing is carried out to fulfill (pre-)contractual obligations. Hubspot is certified under the EU-U.S. Data Privacy Framework. Otherwise, the Standard Contractual Clauses (SCC) of the EU Commission apply. Further information: https://legal.hubspot.com/de/privacy-policy?hubs_content=www.hubspot.de/&hubs_content-cta=Datenschutzbestimmungen.

3.12 Cloud backups

AWS Backup

On our website, we use the AWS Backup service from Amazon Web Services, Inc, 410 Terry Ave North, Seattle, WA 98109-5210, USA, for the automated backup and restoration of data in our cloud infrastructure. The service enables the centralized and automated creation, storage and restoration of backups for various AWS resources such as EC2 instances, EBS volumes, S3 buckets, RDS databases, EFS file systems and DynamoDB tables used for the operation of our website. The data specified in the backup configuration is processed from the aforementioned cloud resources as well as metadata on the backup processes (e.g. timestamps, resource IDs, status messages) and access and administration data (e.g. IAM roles and authorizations). The processing of this data serves the purpose of fail-safety, the recovery of systems in the event of a disaster, compliance with legal and business archiving obligations and the prevention of data loss. The legal basis for data processing is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in data security and business continuity, unless a contractual requirement pursuant to Art. 6 para. 1 lit. b GDPR is relevant in individual cases. AWS Backup does not use cookies as part of this functionality, as the service is not integrated into the user interaction on the website, but works exclusively on the server side for backup purposes. Data may be transferred to third countries, in particular to the USA, in certain cases. In this case, Amazon Web Services relies on the EU standard contractual clauses as suitable guarantees in accordance with Art. 46 GDPR. Data will be deleted as soon as the purpose of the backup no longer applies, a retention period expires or at the request of the website operator, provided that there are no legal retention obligations to the contrary. Further information on data protection at Amazon Web Services can be found at: https://aws.amazon.com/privacy/

OneDrive

The cloud storage service Microsoft OneDrive, which is operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA, is integrated on our website. OneDrive enables the storage, synchronization, exchange, joint editing and management of files and documents in real time. During use, the content and metadata of the stored files (such as file names, file types, version histories), user and sharing data (who accessed or edited which file and when), activities in connection with files (uploading, editing, sharing) and, if applicable, structured data from uploaded forms or worksheets are processed. Data processing is carried out for the purpose of providing central file storage, smooth collaboration, document management and ensuring access controls and traceability. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR due to the legitimate interest in efficient teamwork, secure data management and simplified file exchange; if files are provided or shared as part of a contractual relationship, Art. 6 para. 1 lit. b GDPR may also be relevant. Insofar as cookies are set as part of the integration, this is only done for functionality and security; these technically necessary cookies are subject to Art. 6 para. 1 lit. f GDPR and § 25 para. 2 TDDDG; further use of cookies (e.g. for analysis purposes) does not take place via the embedding of OneDrive functions. Personal data is transferred to the USA. The standard contractual clauses of the EU Commission are used as suitable guarantees in accordance with Art. 46 GDPR, supplemented by additional technical and organizational measures for data security. The data is stored for the duration of the use of the functions until files or accounts are deleted or at the request of the user, provided that there are no legal storage obligations to the contrary. Further information is available at: https://www.microsoft.com/en-us/privacy/privacystatement

GitHub

We use the cloud backup and hosting service GitHub on our website, operated by GitHub Germany GmbH, Berlin, Germany (Charlottenburg District Court HRB 229086 B). GitHub provides functions for versioning and backing up source code, for managing repositories and for providing cloud backups and static hosting (e.g. GitHub Pages). Typically, IP addresses, browser and device information, pages and repositories visited, interaction events (such as clicks on repository widgets), GitHub user names and, if applicable, profile data (for authentication) and referrer information are processed during use. Data processing is used to secure and version project files as part of a cloud backup, to provide hosting and integration functions and to analyze and improve the offering. The legal basis for the processing is Art. 6 para. 1 lit. f GDPR due to the legitimate interest in efficient management and backup of digital projects as well as Art. 6 para. 1 lit. b GDPR, provided that (pre-)contractual obligations are fulfilled. GitHub may set functional and analysis cookies, in particular when embedded content (e.g. gists, project pages) is called up, whereby their use is based on consent. The legal basis for this is Art. 6 para. 1 lit. a GDPR i.V.m. § 25 para. 1 TDDDG. Personal data may be transferred to third countries, in particular the USA; in this case, the EU standard contractual clauses are used as a suitable guarantee. Data will be deleted as soon as the purpose of storage ceases to apply or consent given is revoked, provided that this does not conflict with statutory retention obligations. Further information can be found at: https://docs.github.com/site-policy/privacy-policies/github-privacy-statement

Microsoft Azure

For backup and cloud storage purposes on our website, we use the services of Microsoft Azure, provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052, USA. Microsoft Azure provides cloud infrastructure that enables the storage and backup of data to protect against data loss, recovery and secure management. When using Microsoft Azure, in particular IP addresses, authentication and access data (e.g. via Azure Active Directory), transmitted content data, upload content (e.g. backup files) and technical information such as browser and device data may be processed. The purpose of data processing is to secure and provide backups, to restore the website in the event of data loss and to comply with business and IT security requirements. The legal basis is Art. 6 para. 1 lit. f GDPR due to our legitimate interest in secure and reliable data storage and, if applicable, Art. 6 para. 1 lit. b GDPR if the processing is necessary for the performance of a contract. Cookies are not set by the Microsoft Azure backup service on our website. Data may be transferred to the USA. Microsoft uses the EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR as suitable guarantees. Data is stored by Microsoft for as long as necessary to fulfill the purpose and then deleted in accordance with the statutory retention periods or in the event of revocation or discontinuation of the purpose. Further information can be found at: https://www.microsoft.com/en-us/privacy/privacystatement

Bubble.io

For the provision of cloud backup and web hosting functions, this website uses the Bubble.io service, operated by Bubble Group, Inc, 22 W 21st Street, 2nd Floor, New York, NY 10010, USA. Bubble.io enables the creation, provision and management of web applications as well as the storage and backup of application data in the cloud. During use, session IDs, session signatures, temporary user IDs (including for visitors who are not logged in via cookies) and - if set up - content from forms, data generated by users, browser information and interaction data are processed. The data processing serves to provide and secure the respective web application, the backup function and the stability and security of the website. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR, insofar as it concerns the fulfilment of a contract or pre-contractual measures, as well as Art. 6 para. 1 lit. f GDPR due to the legitimate interest in the technical and organizational security of data and ensuring the functionality of the website; if consent is obtained for optional cookies or additional functions, the processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR in conjunction with Art. 25 para. 1 TDDD. § 25 para. 1 TDDDG. Bubble.io uses essential cookies, including functional cookies to manage sessions and temporarily store user information. Analysis or marketing cookies are only set after consent has been obtained and can be revoked at any time. The use of essential cookies is based on Art. 6 para. 1 lit. f GDPR or § 25 para. 2 no. 2 TDDDG. Personal data is transferred to the USA. The standard contractual clauses of the EU Commission are used as suitable guarantees for this transfer. Data is generally deleted as soon as the purpose of its processing no longer applies, consent has been revoked or there are no statutory retention obligations to the contrary. Further information can be found at: https://bubble.io/privacy

Vercel

We use the Vercel cloud hosting and provisioning service on our website, operated by Vercel Inc, San Francisco, California, United States. Vercel enables the hosting and automated provision of web applications as well as serverless functions and analysis services in real time. During use, Vercel processes, among other things, IP addresses, the approximate location (city and country, derived from the IP address), information on the end device used (device type, browser, operating system), the page URLs accessed (without query parameters), referrer information, host names, traffic data (page views, clicks, timestamps), UTM parameters (for Plus/Enterprise use), a daily, pseudonymized visitor hash, web performance metrics and other system-related information. Data processing is carried out for the purpose of secure and high-performance hosting, monitoring website performance and ensuring the functionality of the websites provided. The legal basis is Art. 6 para. 1 lit. f GDPR, as there is a legitimate interest in the secure and efficient provision and analysis of the website. Vercel does not set any cookies that require consent, but processes the aforementioned data for the purpose of technical provision and statistical evaluation on the basis of legitimate interest. Personal data may be transferred to the USA as a third country. The EU standard contractual clauses pursuant to Art. 46 para. 2 lit. c GDPR are used as a suitable guarantee. The storage period depends on the respective processing purpose; personal data is deleted as soon as it is no longer required to achieve the respective purpose or a statutory retention period expires. Further information on data protection at Vercel can be found at: https://vercel.com/legal/privacy-policy

4. What else is important

Finally, we would like to inform you in detail about your rights and how you will be informed about changes to data protection requirements.

4.1 Your rights in detail

4.1.1 Right to information in accordance with Art. 15 GDPR

You can request information about whether your personal data is being processed. If this is the case, you can request further information on the type and manner of processing. A detailed list can be found in Art. 15 para. 1 lit. a to h GDPR.

4.1.2 Right to rectification in accordance with Art. 16 GDPR

This right includes the correction of incorrect data and the completion of incomplete personal data.

4.1.3 Right to erasure in accordance with Art. 17 GDPR

This so-called 'right to be forgotten' gives you the right, under certain conditions, to request the deletion of your personal data by the controller. This is generally the case if the purpose of the data processing no longer applies, if consent has been withdrawn or the initial processing took place without a legal basis. A detailed list of reasons can be found in Art. 17 para. 1 lit. a to f GDPR. This "right to be forgotten" also corresponds to the controller's obligation under Art. 17 para. 2 GDPR to take reasonable steps to ensure that the data is generally erased.

4.1.4 Right to restriction of processing in accordance with Art. 18 GDPR

This right is subject to the conditions set out in Art. 18 para. 1 lit. a to d.

4.1.5 Right to data portability in accordance with Art. 20 GDPR

This regulates the basic right to receive your own data in a commonly used form and to transfer it to another controller. However, this only applies to data processed on the basis of consent or a contract in accordance with Art. 20 (1) (a) and (b) and insofar as this is technically feasible.

4.1.6 Right to object pursuant to Art. 21 GDPR

In principle, you can object to the processing of your personal data. This applies in particular if your interest in objecting outweighs the legitimate interest of the controller in the processing and if the processing relates to direct marketing and/or profiling.

4.1.7 Right to "individual decision-making" pursuant to Art. 22 GDPR

In principle, you have the right not to be subject to a decision based solely on automated processing (including profiling) which produces legal effects concerning you or similarly significantly affects you. However, this right is also restricted and supplemented by Art. 22 (2) and (4) GDPR.

4.1.8 Further rights

The GDPR contains comprehensive rights to inform third parties about whether or how you have asserted rights under Art. 16, 17, 18 GDPR. However, this only applies insofar as this is possible or feasible with reasonable effort.

We would like to take this opportunity to draw your attention once again to your right to withdraw your consent in accordance with Art. 7 (3) GDPR. However, this does not affect the lawfulness of the processing carried out up to that point.

We would also like to draw your attention to your rights under §§ 32 ff. BDSG, which, however, are largely congruent with the rights just described.

4.1.9 Right to lodge a complaint pursuant to Art. 77 GDPR

You also have the right to lodge a complaint with a data protection supervisory authority if you consider that the processing of personal data relating to you infringes this Regulation.

5. What if the GDPR is abolished tomorrow or other changes take place?

The current status of this Privacy Policy is 14.04.2026. From time to time it is necessary to adapt the content of the Privacy Policy in order to react to actual and legal changes. We therefore reserve the right to amend this Privacy Policy at any time. We will publish the amended version in the same place and recommend that you read the Privacy Policy regularly.

Created with the kind support of Dieter macht den Datenschutz