1. Name and address of the data controller and the data protection officer
- a) Data controller
The data controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:
Tel: +49 (0) 89 21538970
- b) Data Protection Officer
The data protection officer of the data controller is:
2. Explanation of terms
3. Legal basis for the processing of personal data
We only process your personal data, such as your last and first name, your eMail address and IP address, etc., if there is a legal basis for doing so. Here, according to the General Data Protection Regulation, the following regulations in particular come into consideration:
- Art. 6 Sec. 1 p. 1 lit. a GDPR: The data subject has given consent to the processing of personal data concerning him or her for one or more specific purposes.
- Art. 6 Sec. 1 p. 1 lit. b GDPR: The processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the data subject.
- Art. 6 Sec. 1 p. 1 lit. c GDPR: Processing is necessary for compliance with a legal obligation to which the controller is subject.
- Art. 6 Sec. 1 p. 1 lit. d GDPR: Processing is necessary in order to protect the vital interests of the data subject or of another natural person.
- Art. 6 Sec. 1 p. 1 lit. e GDPR: Processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
- Art 6 Sec. 1 p. 1 lit. f GDPR: Processing is necessary for the purposes of the legitimate interests of the controller or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.
4. Disclosure of personal data
The disclosure of personal data is also processing within the meaning of the previous point 3. However, at this point we would like to inform you again separately about the issue of passing on information to third parties. The protection of your personal data is very important to us. For this reason we are particularly careful when it comes to passing on your data to third parties.
Disclosure to third parties therefore only takes place if there is a legal basis for the processing. For example, we disclose personal data to persons or companies that act as processors for us in accordance with Art. 28 GDPR. A processor is anyone who processes personal data on our behalf – i.e. in particular in a relationship of instruction and control with us.
In accordance with the requirements of the GDPR, we conclude a contract with each of our order processors to oblige them to comply with data protection regulations and thus provide comprehensive protection for your data.
5. Storage period and deletion
Your personal data will be deleted by us if it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims.
6. SSL encryption
This website uses SSL encryption for security reasons and to protect the transmission of confidential content, such as enquiries that you send to us as the website operator. You can recognise an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.
If SSL encryption is activated, the data you transmit to us cannot be read by third parties.
When using cookies, a distinction is made between technically necessary cookies and “other” cookies. Technically necessary cookies are when they are strictly necessary to provide an information society service that you have specifically requested.
1. Session cookies
In order to make the use of our site more pleasant for you, we use so-called session cookies (e.g. language and font selection, shopping cart, etc.). These session cookies fall under the category of technically necessary cookies and are automatically deleted after you leave our site. The legal basis for the cookies results from Art. 6 Sec. 1 p. 1 lit. c GDPR, legal permission.
2. CleanTalk Anti-Spam Test
We use the “CleanTalk” service, which protects the website from spam. Usage takes place on the basis of our legitimate interests within the meaning of Art. 6 Para. 1 let. f) General Data Protection Regulation (GDPR).
For security reasons and to protect against spam, your data will be processed in the CleanTalk Cloud Service and stored in log files for a maximum of 45 days. After the specified period has expired this data will be completely deleted. CleanTalk may use information about spam activity from IP or email addresses to provide adequate anti-spam protection to all websites connected to its service.
Further information on the collection and use of data by CleanTalk can be found in the data protection information from CleanTalk Inc.: https://cleantalk.org
4. Other cookies
Other cookies include cookies for statistical, analysis, marketing and retargeting purposes.
We set the following cookies on our website:
We use these cookies either for the legitimate interest according to Art. 6 Sec. 1 p. 1 lit. f GDPR to improve and optimise our offers or on the basis of your consent according to Art. 6 Sec. 1 p. 1 lit. a GDPR.
When cookies are used for a legitimate interest, you can of course object to their further use in the future at any time.
We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
Changing cookie settings.
8. Collection and storage of personal data as well as their type and purpose of use
- a) When visiting the website
When you access our website, information is automatically sent to the server of our website by the browser used on your end device. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the retrieved file
- Website from which the access is made (referrer URL)
- The browser used and, if applicable, the operating system of your computer as well as the name of your access provider
The above data will be processed by us for the following purposes:
- Ensuring a smooth connection set-up of the website
- Ensuring a comfortable use of our website
- Evaluation of system security and stability
- Error analysis
- For other administrative purposes
Data that allow a conclusion to be made about your person, such as the IP address, are deleted after 7 days at the latest. Should we store the data beyond this period, this data will be pseudonymised so that it is no longer possible to assign it to you.
The legal basis for the data processing is Art. 6 Sec. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data collection purposes listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.
- b) Newsletter
Newsletter content and registration data
We will only send you a newsletter if you order it from us and have given your consent in accordance with Art. 6 Sec. 1 p. 1 lit. a GDPR. The contents of the newsletter are specifically described when you register for the newsletter. To subscribe to the newsletter, it is sufficient to provide your eMail address. If you provide further voluntary information, such as your name and/or gender, this will only be used to personalise the newsletter addressed to you.
Double opt-in and logging
For security reasons, we use the so-called double opt-in procedure to register for our newsletter so that no one can register with other people’s eMail addresses. Therefore, after registering for our newsletter, you will first receive an eMail asking you to confirm your registration. It only becomes effective with the confirmation of the registration.
Furthermore, your subscription to the newsletter is logged. The logging includes the storage of the registration and confirmation time, your specified data and your IP address. If you make changes to your data, these changes are also logged.
If you no longer wish to receive our newsletter, you can revoke your consent at any time for the future. To do this, you can click on the unsubscribe link at the end of each newsletter or send us an eMail to the following email address: firstname.lastname@example.org
The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation
Use of “HubSpot”
We send our newsletter using the newsletter service “HubSpot,” which is offered by HubSpot Inc (25 First Street, Cambridge, MA 02141 USA).
The eMail addresses of our newsletter recipients and also their other data described in the context of this notice are stored on HubSpot’s servers in the USA. HubSpot uses this information to send and evaluate the newsletter on our behalf. Furthermore, according to its own information, HubSpot may use this data to optimise or improve its own services, e.g. for the technical optimisation of the dispatch and presentation of the newsletters or for economic purposes to determine from which countries the recipients come. However, HubSpot does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.
We have concluded an order processing contract with HubSpot. HubSpot does not obtain the right to share your data.
The use of the HubSpot newsletter service is based on our legitimate interests pursuant to Art. 6 Sec. 1 p. 1 lit. f GDPR. We are interested in using a user-friendly and secure newsletter system that serves our business interests and meets the expectations of our users.
- c) Contact form / eMail contact
We provide you with a form on our website so that you have the possibility to contact us at any time. In order to use the contact form, it is necessary to provide a name for a personal salutation and a valid eMail address for contacting us, so that we know who the enquiry is from and can also process it.
If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provide there, as well as your IP address, will be processed in accordance with Art. 6 Sec. 1 p. 1 lit. b and f GDPR for the purpose of carrying out pre-contractual measures in response to your enquiry or for the exercise of our legitimate interest, namely to carry out our business activities.
You are also welcome to send us an eMail instead using the eMail address provided on our website. In this case, we store and process your eMail address and the information you provide in the eMail in accordance with Art. 6 Sec. 1 p. 1 lit. b and f GDPR to process your message.
- d) Use of Google Maps
Our website uses the Google Maps API. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on servers in the United States.
Google may transfer the information obtained through Maps to third parties where required to do so by law, or where such third parties process the information on Google’s behalf. However, your IP address will under no circumstances be associated with any other data held by Google. Nevertheless, we must point out that it would be technically quite possible for Google to identify individual users on the basis of the data received.
The use of Google Maps is a service for you so that you can see exactly where we are and, if necessary, plan your visit to us better. The use of Google Maps is based on your consent pursuant to Art. 6 Sec. 1 p. 1 lit. a GDPR.
- e) Event/Webinar form
We offer a form for those interested in our webinars. If you wish to participate, we need your name and eMail address to identify you as a participant of the webinar. To participate in the event, we will send you an access link in advance to the eMail address you provide. After the end of the event, you will also receive another eMail with material.
If you register for an event, your details from the enquiry form, including the contact details you provide there, as well as your IP address, will be processed in accordance with Art. 6 Sec. 1 p. 1 lit. b and f GDPR for the purpose of carrying out pre-contractual measures in response to your enquiry or for the exercise of our legitimate interest, namely to carry out our business activities.
Use of “HubSpot”
The registration takes place with the help of the newsletter service “HubSpot”, which is offered by HubSpot Inc (25 First Street, Cambridge, MA 02141 USA).
The eMail addresses of those interested and also their other data described in the context of this notice are stored on HubSpot’s servers in the USA. HubSpot uses this information to send and evaluate the participation links on our behalf. Furthermore, according to its own information, HubSpot may use this data to optimise or improve its own services, e.g. for the technical optimisation of the dispatch and presentation of the invitation or for economic purposes to determine from which countries the recipients come. However, HubSpot does not use the data of our prospective customers to write to them itself or to pass it on to third parties.
We have concluded an order processing contract with HubSpot. HubSpot does not obtain the right to share your data.
The use of the HubSpot service is based on our legitimate interests pursuant to Art. 6 Sec. 1 p. 1 lit. f GDPR. We are interested in using a user-friendly and secure ticket system that serves our business interests and meets the expectations of our users.
We use the service provider GoToWebinar from LogMeIn Ireland Limited (Bloodstone Building Block C70 Sir John Rogerson’s Quay Dublin 2, Ireland) to organise our events. When registering for the event, the personal data you provide (name, eMail address, company and telephone number) will be processed. These are in particular the last name, first name, company, telephone number and eMail address.
We have concluded an order processing contract with GoToWebinar. GoToWebinar does not acquire any right to share your data.
The use of the GoToWebinar service is based on our legitimate interests pursuant to Art. 6 Sec. 1 p. 1 lit. f GDPR. We are interested in providing a user-friendly and secure webinar tool that serves our business interests and meets the expectations of our users.
9. Analysis and tracking tools
We use the analysis and tracking tools listed below on our website. These serve to ensure the ongoing optimisation of our website and to design it in line with requirements.
We use these tools on the basis of your consent pursuant to Art. 6 Sec. 1 p. 1 lit. a GDPR. You can revoke your consent at any time by changing the cookie settings. The processing remains lawful until revocation.
The respective data processing purposes and data categories can be found in the corresponding tools.
- a) Google Analytics
We use Google Analytics, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”), on our website.
- Name and version of the browser used
- Operating system of your computer
- Website from which the access is made (referrer URL)
- IP address of the requesting computer
- Time of the server request
are usually transferred to a Google server in the USA and stored there.
However, as we have activated IP anonymisation on our website, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.
On our behalf, Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
You can prevent cookies from being stored by setting your browser software accordingly. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link http://tools.google.com/dlpage/gaoptout?hl=de
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set which will prevent the collection of your data during future visits to our website:
Click here to opt-out of Google Analytics
- a) Google remarketing
We use the remarketing function of Google Analytics to target advertising campaigns – including Google AdWords campaigns – to visitors to our website.
Based on your previous visits to our website, you will be presented with relevant advertisements when you visit other websites in the Google Display Network.
The DoubleClick cookie enables Google to allow us and other third parties to display targeted advertisements that match interests identified based on your previous visits to our website and/or other websites. These advertisements may be displayed on websites of Google and/or other operators of the Google advertising network. We also use the Google Analytics advertising features to analyse the effectiveness of our own advertising campaigns.
You can personalise your Google Ads settings and opt out of interest-based ads from Google. In this case, the cookie ID of the DoubleClick cookie (assigned individually for each cookie) is overwritten and can no longer be associated with a specific browser.
If you delete all cookies from your device, a new DoubleClick cookie may be placed. Then you may need to renew your objection settings. You can permanently disable the DoubleClick cookie by clicking here: http://www.google.com/settings/ads/plugin to download and install the appropriate browser plugin. You can disable the use of third party cookies for online advertising purposes on the US website http://www.aboutads.info/choices/ or the EU website http://www.youronlinechoices.com/.
Where you have consented in your Google Account for your web and app browsing history to be linked by Google to your Google Account and for information from your Google Account to be used to personalise ads, Google will use data from you together with Google Analytics data to create targeting lists for cross-device remarketing. For this purpose, Google Analytics first collects Google-authenticated IDs for you as a user on our website, which are linked to your Google account. Google Analytics then temporarily links these IDs to Google Analytics data in order to optimise our target groups.
- b) Google AdWords
We use Google AdWords, an online advertising program from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), on our website. Conversion tracking is also used in this process. With this tool, Google AdWords sets a cookie on your end device when you come to our website via a Google ad.
The cookie is no longer valid after 30 days. It does not serve any personal traceability. If you visit our website as a user and the cookie is still working, it will be recognisable to us together with Google that you have clicked on the corresponding advertisement and have been redirected to our site. A different cookie is assigned to each Google AdWords customer. Cookies are thus not traceable via the websites of AdWords customers.
Conversion statistics for AdWords customers are created with the data collected by conversion cookies. As Google AdWords customers, we learn the total number of users who responded to our ad and were then redirected to a web page that was tagged with a conversion tracking tag. We do not receive any information during this process with which we could personally identify you as a user.
If you reject the tracking procedure, the Google conversion tracking cookie can be deactivated via your internet browser.
- c) HubSpot
We use the analytics service “HubSpot” on our website, which is offered by HubSpot Inc (25 First Street, Cambridge, MA 02141 USA).
- d) LinkedIn Conversion Tracking
We use the conversion tracking function of LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place,Dublin 2, Ireland) on our website. This gives us the opportunity to target you with advertisements following a visit to our website. In addition, LinkedIn carries out reporting that shows how successful our advertisements are and how users interact with our site in general. If you have logged in via LinkedIn before visiting our site, this will be recognised as part of the conversion tracking and you will be connected to your LinkedIn account as a visitor to our site.
You also have the option to opt out of interest-based advertising via LinkedIn. This is possible via the following link:
10. Video integration
We embed videos from YouTube, which is operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), into our website within the framework of iFrame. In the context of embedding the videos, we have activated YouTube’s extended data protection mode.
If you play a YouTube video during your visit, a connection is established to the YouTube servers and the YouTube server is informed which of our pages you have visited. This enables YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your member account before visiting our website. In addition, YouTube sets various cookies when starting the service in order, according to its own information, to improve the services it offers and to prevent misuse.
The legal basis results from the consent given by you pursuant to Art. 6 Sec. 1 p. 1 lit. a GDPR. You can revoke your consent at any time by changing the cookie setting on our website.
11. Rights of the data subject
You have the following rights:
- a) Information
In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about
- the processing purposes
- the categories of personal data
- the recipients or categories of recipients to whom your data have been or will be disclosed
- the planned storage period or at least the criteria for determining the storage period
- the existence of a right to rectification, erasure, restriction of processing or objection
- the existence of a right of appeal to a supervisory authority
- the origin of your personal data, if it has not been collected by us
- the existence of automated decision-making, including profiling, and, if applicable, meaningful information about its details
- b) Correction
In accordance with Art. 16 GDPR, you have the right to have incorrect or incomplete stored personal data corrected by us without delay.
- c) Deletion
In accordance with Art. 17 GDPR, you have the right to request the immediate deletion of your personal data from us, insofar as the further processing is not necessary for one of the following reasons:
- the personal data are still necessary for the purposes for which they were collected or otherwise processed
- for the exercise of the right to freedom of expression and information
- for compliance with a legal obligation which requires processing under the law of the European Union or the Member States to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
- for reasons of public interest in the area of public health pursuant to Art. 9 Sec. 2 lit. h and i as well as Art. 9 Sec. 3 GDPR
- for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Article 89 Sec. 1 GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing
- for the assertion, exercise or defence of legal claims
- d) Restriction of processing
In accordance with Art. 18 of the GDPR, you may request the restriction of the processing of your personal data for one of the following reasons:
- You dispute the accuracy of your personal data.
- The processing is unlawful and you object to the erasure of the personal data.
- We no longer need the personal data for the purposes of processing, but you need it to assert, exercise or defend legal claims.
- You object to the processing pursuant to Art. 21 Sec. 1 GDPR.
- e) Information
If you have requested the correction or deletion of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 Sec. 1 and Art. 18 GDPR, we will communicate this to all recipients to whom your personal data have been disclosed, unless this proves impossible or involves a disproportionate effort. You can request that we inform you of these recipients.
- f) Transmission
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format.
You also have the right to request the transfer of this data to a third party, provided that the processing was carried out with the aid of automated procedures and is based on consent pursuant to Art. 6 Sec. 1 p. 1 lit. a or Art. 9 Sec. 2 lit. a or on a contract pursuant to Art. 6 Sec. 1 p. 1 lit. b GDPR.
- g) Revocation
In accordance with Art. 7 Sect 3 GDPR, you have the right to revoke your consent at any time. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until revocation. In the future, we may no longer continue the data processing that was based on your revoked consent.
- h) Complaint
In accordance with Art. 77 GDPR, you have the right to complain to a supervisory authority if you believe that the processing of your personal data violates the GDPR.
- i) Right to object
If your personal data is processed on the basis of legitimate interests pursuant to Art. 6 Sec. 1 p. 1 lit. f GDPR, you have the right to object to the processing of your personal data pursuant to Art. 21 GDPR, insofar as there are grounds for doing so that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right of objection, which is implemented by us without specifying the particular situation. If you wish to exercise your right of revocation or objection, an eMail to email@example.com.
- j) Automated decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This shall not apply if the decision
- is necessary for the conclusion or performance of a contract between you and us
- is permitted by legislation of the European Union or the Member States to which we are subject and that legislation contains appropriate measures to safeguard your rights and freedoms and your legitimate interests
- is done with your express consent
However, these decisions must not be based on special categories of personal data pursuant to Art. 9 Sec. 1 GDPR, unless Art. 9 Sec. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms and your legitimate interests.
With regard to the cases referred to in i) and iii), we shall take reasonable measures to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person from our side, to express your point of view and to contest the decision.