Privacy statement
We welcome you to our websites and appreciate your interest. The protection of your personal data is an important concern for us. Therefore, we conduct our activities in accordance with the applicable legal regulations for the protection of personal data and data security. Below, we would like to inform you about which data from your visit is used for what purposes.
Responsible body for processing under the GDPR
The responsible body within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws applicable in the Member States of the European Union, as well as other provisions of a data protection nature, is:
evenito AGHafnerstrasse 248005 Zurichhttps://evenito.com/info@evenito.com+41445202401
Data Protection Officer
Nils MöllersKeyed GmbHSiemensstraße 1248341 Altenbergeinfo@keyed.de+49 2505-6397-97https://keyed.de/
What is personal data?
The concept of personal data is defined in the Federal Data Protection Act (BDSG) and the EU GDPR. According to these, it refers to specific information about personal or factual circumstances of an identified or identifiable natural person. This includes, for example, your legal name, your address, your telephone number, or your date of birth. Learn more here about what data protection exactly is.
Scope of anonymous data collection and processing
Unless otherwise stated in the following sections, no personal data is generally collected, processed, or used when you use our websites. However, through the use of analysis and tracking tools, we obtain certain technical information based on the data transmitted by your browser (for example, browser type/version, operating system used, webpages visited on our site including duration of stay, previously visited webpage). We evaluate this information solely for statistical purposes.
Relevant legal bases for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a GDPR serves as the legal basis.
For the processing of personal data necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations required to carry out pre-contractual measures.
Insofar as processing of personal data is required to fulfill a legal obligation to which our company is subject, Art. 6 (1) lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d GDPR serves as the legal basis.
If processing is necessary for the purposes of the legitimate interests pursued by our company or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, Art. 6 (1) lit. f GDPR serves as the legal basis for processing.
Use of cookies
The websites of evenito AG use cookies. Cookies are data that are stored by the internet browser on the user's computer system. The cookies can be transmitted to a page when it is accessed and thus enable an assignment of the user. Cookies help to simplify the use of websites for users.
It is possible to object to the setting of cookies at any time by changing the settings in the internet browser accordingly. Set cookies can be deleted. Please note that if cookies are deactivated, you may not be able to fully use all functions of our website. The user data collected in this way is pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users. When accessing our website, users are informed about the use of cookies for analysis purposes via an info banner and are referred to this privacy policy. In this context, there is also an indication of how the storage of cookies can be prevented in the browser settings. The legal basis for processing personal data using technically necessary cookies is Art. 6 (1) lit. f GDPR. The legal basis for processing personal data using cookies for analysis purposes, provided the user has given consent, is Art. 6 (1) lit. a GDPR. Please refer to our cookie banner and the information in this privacy policy to find out whether and to what extent cookies are used on our website.
Cookiebot
Description and purpose
For the management and documentation of consent to the use of cookies and comparable technologies, we use the consent management platform Cookiebot by Usercentrics A/S. Cookiebot enables the collection, management, and storage of website visitors' consents as well as the documentation of the selected cookie settings. In particular, the consent decision, the IP address (in abbreviated form), information on the end device used, browser data, and timestamps of the consent are processed. The processing takes place for the purpose of legally compliant collection, management, and verifiability of consents in accordance with data protection requirements.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the data protection-compliant design of our website.
Recipients
The recipient of your personal data is Usercentrics A/S, Havnegade, 1058, Copenhagen, Denmark.
Transfer to third countries
Personal data is generally processed within the European Union or the European Economic Area. In the event of a transfer of personal data, the provider ensures the level of protection of the GDPR by complying with Art. 44 et seq. GDPR. If there is no adequacy decision with the third country in which the data importer is located, the transfer takes place subject to appropriate safeguards. For inquiries, please feel free to contact our Data Protection Officer.
Duration of data storage
The data will be deleted as soon as they are no longer necessary to achieve the purpose for which they were collected. In addition, the data will be deleted if you exercise your right to erasure within the meaning of Art. 17 (1) GDPR.
Objection
In the case of data processing based on the legal basis of Art. 6 (1) lit. f GDPR, you have the right to object to the processing of your personal data at any time pursuant to Art. 21 (1) GDPR. If you exercise your right, processing for this purpose will no longer take place. Further information can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here: https://www.cookiebot.com/de/privacy-policy/?campaign_id=678797541&adset_id=1163285266775464&ad_id=&matchtype=e
Creation of log files
Every time the website is accessed, evenito AG collects data and information through an automated system. These are stored in the server's log files. The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.The following data may be collected:(1) Information about the browser type and version used(2) The user's operating system(3) The user's Internet Service Provider(4) The user's IP address(5) Date and time of access(6) Websites from which the user's system accesses our website (referrers)(7) Websites accessed by the user's system via our website
Duration of storage of personal data
Personal data is stored for the duration of the respective statutory retention period. After expiration of the period, the corresponding data is routinely deleted, provided it is no longer required to initiate or fulfill a contract.
Contact options
There is a contact form on the websites of evenito AG which can be used for electronic contact. Alternatively, contact can be made via the provided email address. If the data subject contacts the controller via one of these channels, the personal data transmitted by the data subject is automatically stored. The storage solely serves the purpose of processing or contacting the data subject. The data is not passed on to third parties. The legal basis for processing the data is Art. 6 (1) lit. a GDPR if the user has given consent. The legal basis for processing the data transmitted in the course of sending an email is Art. 6 (1) lit. f GDPR. If the email contact aims at concluding a contract, an additional legal basis for processing is Art. 6 (1) lit. b GDPR. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by email, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the relevant facts have been conclusively clarified.
Newsletter
If you subscribe to our company's newsletter, the data in the respective input mask will be transmitted to the controller. Registration for our newsletter takes place in a so-called double opt-in procedure. This means you will receive an email after registration in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with other people's email addresses. When registering for the newsletter, the user's IP addressHier ist die vollständige englische Übersetzung deines Textes. Wie gewünscht habe ich alle Überschriften-Ebenen um eine Stufe nach unten skaliert (die Hauptkategorien sind jetzt H3 statt H2, die Unterkategorien H4 statt H3 und Unter-Unterkategorien H5 statt H4).
We welcome you to our websites and appreciate your interest. The protection of your personal data is an important concern for us. Therefore, we conduct our activities in accordance with the applicable legal regulations for the protection of personal data and data security. Below, we would like to inform you about which data from your visit is used for what purposes.
Responsible body for processing under the GDPR
The responsible body within the meaning of the General Data Protection Regulation (GDPR) and other data protection laws applicable in the Member States of the European Union, as well as other provisions of a data protection nature, is:
evenito AGHafnerstrasse 248005 Zurichhttps://evenito.com/info@evenito.com+41445202401
Data Protection Officer
Nils MöllersKeyed GmbHSiemensstraße 1248341 Altenbergeinfo@keyed.de+49 2505-6397-97https://keyed.de/
What is personal data?
The concept of personal data is defined in the Federal Data Protection Act (BDSG) and the EU GDPR. According to these, it refers to specific information about personal or factual circumstances of an identified or identifiable natural person. This includes, for example, your legal name, your address, your telephone number, or your date of birth. Learn more here about what data protection exactly is.
Scope of anonymous data collection and processing
Unless otherwise stated in the following sections, no personal data is generally collected, processed, or used when you use our websites. However, through the use of analysis and tracking tools, we do obtain certain technical information based on the data transmitted by your browser (for example, browser type/version, operating system used, websites visited on our site including the duration of the visit, previously visited website). We evaluate this information only for statistical purposes.
Relevant legal bases for the processing of personal data
Insofar as we obtain the consent of the data subject for processing operations of personal data, Art. 6 (1) lit. a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.
When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) lit. b) GDPR serves as the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.
Insofar as the processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 (1) lit. c) GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person require the processing of personal data, Art. 6 (1) lit. d) GDPR serves as the legal basis.
If processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, Art. 6 (1) lit. f) GDPR serves as the legal basis for processing.
Use of Cookies
The websites of evenito AG use cookies. Cookies are data that are stored by the internet browser on the user's computer system. The cookies can be transmitted to a page when it is accessed and thus enable an assignment of the user. Cookies help to simplify the use of websites for users.
It is possible at any time to object to the setting of cookies by changing the settings in the internet browser accordingly. Set cookies can be deleted. Please note that if cookies are deactivated, it may not be possible to fully use all functions of our website. The data of the users collected in this way is pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users. When accessing our website, users are informed by an info banner about the use of cookies for analytical purposes and referred to this privacy policy. In this context, there is also a reference to how the storage of cookies can be prevented in the browser settings. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f) GDPR. The legal basis for the processing of personal data using cookies for analytical purposes, provided the user has given consent, is Art. 6 (1) lit. a) GDPR. Please refer to our cookie banner and our information in this privacy policy to find out whether and to what extent cookies are used on our website.
Cookiebot
Description and purpose
For the management and documentation of consent to the use of cookies and comparable technologies, we use the consent management platform Cookiebot by Usercentrics A/S. Cookiebot enables the collection, management, and storage of website visitors' consent as well as the documentation of the selected cookie settings. In particular, the consent decision, the IP address (in abbreviated form), information about the device used, browser data, and the timestamp of the consent are processed. Processing is carried out for the purpose of legally compliant collection, management, and verifiability of consent in accordance with data protection requirements.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. c GDPR and Art. 6 (1) lit. f GDPR. Our legitimate interest lies in the data protection-compliant design of our website.
Recipients
The recipient of your personal data is Usercentrics A/S, Havnegade, 1058, Copenhagen, Denmark.
Transfer to third countries
Processing of personal data generally takes place within the European Union or the European Economic Area. In the event of a transfer of personal data, the provider ensures the level of protection of the GDPR by complying with Art. 44 et seq. GDPR. If there is no adequacy decision with the third country in which the data importer is located, the transfer is subject to appropriate safeguards. If you have any questions, please feel free to contact our Data Protection Officer.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Objection
In the case of data processing based on the legal basis of Art. 6 (1) lit. f), you have the right to object to the processing of your personal data at any time in accordance with Art. 21 (1) GDPR. If you exercise your right, processing for this purpose will no longer take place. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here: https://www.cookiebot.com/de/privacy-policy/?campaign_id=678797541&adset_id=1163285266775464&ad_id=&matchtype=e
Creation of log files
Every time the website is accessed, evenito AG automatically collects data and information. This is stored in the server's log files. The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.The following data may be collected:(1) Information about the browser type and the version used(2) The user's operating system(3) The user's Internet Service Provider(4) The user's IP address(5) Date and time of access(6) Websites from which the user's system reaches our website (referrer)(7) Websites accessed by the user's system via our website
Duration of storage of personal data
Personal data is stored for the duration of the respective statutory retention period. After the period expires, the data is routinely deleted, unless there is a need to initiate or fulfill a contract.
Options for contacting us
A contact form is available on the evenito AG websites, which can be used for electronic contact. Alternatively, you can contact us via the provided e-mail address. If the data subject contacts the controller via one of these channels, the personal data transmitted by the data subject is automatically stored. The storage serves solely for the purpose of processing or contacting the data subject. The data is not passed on to third parties. The legal basis for processing the data is Art. 6 (1) lit. a) GDPR if the user has given consent. The legal basis for processing data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f) GDPR. If the e-mail contact aims at concluding a contract, the additional legal basis for processing is Art. 6 (1) lit. b) GDPR. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been finally clarified.
Newsletter
If you subscribe to our company's newsletter, the data in the respective input mask is transmitted to the controller. Registration for our newsletter takes place in a so-called double opt-in procedure. This means that you will receive an e-mail after registering, in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with third-party e-mail addresses. When registering for the newsletter, the user's IP address and the date and time of registration are stored. This serves to prevent misuse of the services or the data subject's e-mail address. The data is not passed on to unauthorized third parties. For the purpose of sending the newsletter, however, necessary data may be transmitted to respective service providers. An exception also exists if there is a legal obligation to disclose. The data is used exclusively for sending the newsletter. The subscription to the newsletter can be cancelled by the data subject at any time. Likewise, the consent to the storage of personal data can be revoked at any time. For this purpose, a corresponding link is provided in every newsletter. The legal basis for processing the data after the user has registered for the newsletter is Art. 6 (1) lit. a) GDPR, provided the user has given consent. The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 (3) UWG.
Brevo
Description and purpose
For sending the newsletter, we use the newsletter service Brevo, provided by Brevo GmbH, Köpenicker Str. 126, 10179 Berlin. With Brevo, among other things, the sending of newsletters is organized and analyzed. When you register for our newsletter, we process your personal data in the form of the IP address, e-mail address, date and time, action type, metadata, object, and profile reference. We process this data, including any changes to consent, for the use of the newsletter. For verification purposes regarding your consent or its revocation, we process your IP address, online identifiers, date, and time. Using the Brevo service, we measure the success and reach of our newsletter campaigns. In this context, it is also evaluated, for example, whether you open a newsletter or how you otherwise interact with the newsletter. For this purpose, Brevo sets and stores cookies and web beacons, for example, to enable statistical recording and to create interest profiles. In this way, we learn whether and how you interact with our newsletters.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. a) GDPR and Art. 6 (1) lit. f). Our overriding legitimate interest arises from direct marketing for the acquisition of new customers.
Recipients
The recipient of your personal data is Brevo GmbH, Köpenicker Str. 126, 10179 Berlin.
Transfer to third countries
Personal data is not transferred to third countries.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation and objection
You have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".In the case of data processing based on the legal basis of Art. 6 (1) lit. f), you have the right to object to the processing of your personal data at any time in accordance with Art. 21 (1) GDPR. If you exercise your right, processing for this purpose will no longer take place. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here: https://www.brevo.com/de/legal/privacypolicy/
Registration on our website
If the data subject uses the option to register on the website of the controller by providing personal data, the data in the respective input mask is transmitted to the controller. The data is stored exclusively for the purpose of internal use by the controller. The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. During registration, the user's IP address and the date and time of registration are stored. This serves to prevent misuse of the services. The data is not passed on to third parties. An exception applies if there is a legal obligation to disclose. Registration of the data is necessary for the provision of content or services. Registered individuals have the option to have the stored data deleted or modified at any time. The data subject shall receive information about their stored personal data at any time.
Routine deletion and blocking of personal data
The controller processes and stores the personal data of the data subject only for the period necessary to achieve the purpose of storage. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other provisions to which the controller is subject. As soon as the purpose of storage ceases to apply or a storage period prescribed by the aforementioned regulations expires, the personal data is routinely blocked or deleted.
Rights of the data subject
If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-Ă -vis the controller:
Right of access according to Art. 15 GDPR
You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If such processing takes place, you can request the following information from the controller:
- the purposes for which the personal data is processed;
- the categories of personal data being processed;
- the recipients or categories of recipients to whom your personal data has been or will be disclosed;
- the planned duration of storage of your personal data or, if specific information on this is not possible, criteria for determining the storage period;
- the existence of a right to rectification or erasure of your personal data, a right to restriction of processing by the controller, or a right to object to such processing;
- the existence of a right to lodge a complaint with a supervisory authority;
- any available information on the source of the data if the personal data is not collected from the data subject;
- the existence of automated decision-making, including profiling, referred to in Art. 22 (1) and (4) GDPR and – at least in those cases – meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
You have the right to request information as to whether your personal data is transferred to a third country or to an international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR relating to the transfer.
Right to rectification according to Art. 16 GDPR
You have a right to rectification and/or completion vis-Ă -vis the controller if the processed personal data concerning you is incorrect or incomplete. The controller must make the correction without delay.
Right to erasure according to Art. 17 GDPR
(1) You may demand that the controller erase your personal data without delay, and the controller is obliged to erase this data without delay where one of the following grounds applies:
- The personal data concerning you is no longer necessary in relation to the purposes for which it was collected or otherwise processed.
- You withdraw your consent on which the processing is based according to Art. 6 (1) lit. a) or Art. 9 (2) lit. a) GDPR, and where there is no other legal ground for the processing.
- You object to the processing pursuant to Art. 21 (1) GDPR and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) GDPR.
- The personal data concerning you has been unlawfully processed.
- The personal data concerning you has to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.
- The personal data concerning you has been collected in relation to the offer of information society services referred to in Art. 8 (1) GDPR.
(2) Where the controller has made the personal data public and is obliged pursuant to Art. 17 (1) GDPR to erase the personal data, the controller, taking account of available technology and the cost of implementation, shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.(3) The right to erasure does not apply to the extent that processing is necessary
- for exercising the right of freedom of expression and information;
- for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
- for reasons of public interest in the area of public health in accordance with Art. 9 (2) lit. h) and i) as well as Art. 9 (3) GDPR;
- for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes in accordance with Art. 89 (1) GDPR, insofar as the right referred to in paragraph 1 is likely to render impossible or seriously impair the achievement of the objectives of that processing; or
- for the establishment, exercise, or defense of legal claims.
Right to restriction of processing according to Art. 18 GDPR
Under the following conditions, you may request the restriction of the processing of your personal data:
- if you contest the accuracy of your personal data, for a period enabling the controller to verify the accuracy of the personal data;
- the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
- the controller no longer needs the personal data for the purposes of the processing, but you need them for the establishment, exercise, or defense of legal claims; or
- if you have objected to processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override your grounds.
Where processing of your personal data has been restricted, such data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing was restricted according to the above conditions, you will be informed by the controller before the restriction is lifted.
Right to information according to Art. 19 GDPR
If you have asserted the right to rectification, erasure, or restriction of processing against the controller, the controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients by the controller.
Right to data portability according to Art. 20 GDPR
You have the right to receive the personal data concerning you, which you have provided to the controller, in a structured, commonly used, and machine-readable format. Furthermore, you have the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided, where:
- the processing is based on consent pursuant to Art. 6 (1) lit. a) GDPR or Art. 9 (2) lit. a) GDPR or on a contract pursuant to Art. 6 (1) lit. b) GDPR; and
- the processing is carried out by automated means.In exercising this right, you also have the right to have your personal data transmitted directly from one controller to another, where technically feasible. Freedoms and rights of other persons must not be adversely affected by this. The right to data portability shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
Right to object according to Art. 21 GDPR
You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on Art. 6 (1) lit. e) or f) GDPR, including profiling based on those provisions. The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims. Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.
Right to withdraw consent under data protection law according to Art. 7 (3) GDPR
You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint with a supervisory authority according to Art. 77 GDPR
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Art. 78 GDPR.
Automated individual decision-making, including profiling
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision:
- is necessary for entering into, or performance of, a contract between you and the data controller;
- is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or
- is based on your explicit consent.
However, these decisions shall not be based on special categories of personal data referred to in Art. 9 (1) GDPR, unless Art. 9 (2) lit. a) or g) applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place. Regarding the cases referred to in a. and c., the data controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express your point of view, and to contest the decision.
Integration of other third-party services and content
Description and purpose
It may happen that third-party content, such as videos, fonts, or graphics from other websites, is integrated within this online offering. This always presupposes that the providers of this content (hereinafter referred to as "third-party providers") perceive the IP address of the users. Because without the IP address, they could not send the content to the browser of the respective user. The IP address is therefore required for the presentation of this content. We endeavor to use only such content whose respective providers use the IP address solely for the delivery of the content. However, we have no influence on whether third-party providers store the IP address, e.g., for statistical purposes. Insofar as this is known to us, we inform users about it. We intend to provide and improve our online offering through these integrations.
Legal bases
The legal basis for the integration of other third-party services and content is Art. 6 (1) lit. f) GDPR. Our overriding legitimate interest lies in the intention of providing an appropriate presentation of our online presence and in user-friendly and economically efficient services on our part. Further details can be found in the respective privacy statements of the providers.
Contractual or legal obligation to provide personal data
The provision of personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it may mean that you cannot use this function or cannot fully use it.
Data transfer to third countries
The controller may transfer personal data to a third country. In principle, the controller can ensure that an adequate level of protection is brought about for the processing through various appropriate safeguards. There is the possibility of transmitting data transfers on the basis of an adequacy decision, internal data protection regulations, approved codes of conduct, standard data protection clauses, or an approved certification mechanism according to Art. 46 (2) lit. a) – f) GDPR.If the controller undertakes a transfer to a third country on the legal basis of Art. 49 (1) lit. a) GDPR, you will be informed at this point about the possible risks of a data transfer to a third country.There is a risk that the third country receiving your personal data may not have an equivalent level of protection compared to the protection of personal data in the European Union. This may be the case, for example, if the EU Commission has not issued an adequacy decision for the respective third country or if certain agreements between the European Union and the respective third country are declared invalid. Specifically, there are risks in some third countries regarding the effective protection of EU fundamental rights through the use of surveillance laws (e.g., USA). In such a case, it is the responsibility of the controller and the recipient to evaluate whether the rights of the data subjects in the third country enjoy an equivalent level of protection as in the Union and can also be effectively enforced.Through the General Data Protection Regulation, however, the level of protection guaranteed across the Union for natural persons should not be undermined when personal data is transferred from the Union to controllers, processors, or other recipients in third countries or to international organizations, even if personal data is further transferred from a third country or from an international organization to controllers or processors in the same or another third country or to the same or another international organization.
Additional website features
Google Analytics 4
Description and purpose
This website uses the "Google Analytics 4" service, which is offered by Google LLC, to analyze website usage by users. The service uses "cookies" - text files that are stored on your end device. First-party cookies are used for this. With a first-party cookie, the user can only be recognized by the page from which the cookie originated, not across multiple domains. The information collected by the cookies is generally sent to a Google server in the USA and stored there. If applicable, Google Analytics on this website is used with the extension code "gat._anonymizeIp();" to ensure an anonymized collection of IP addresses (so-called IP masking). Please also note the following information on the use of Google Analytics: The IP address of the users is shortened within the member states of the EU and the European Economic Area. This shortening eliminates the personal reference of your IP address. For EU citizens, the IP address is also only used to derive location data and is then deleted again. You also have the option to enable or disable the collection of detailed location and device data for individual regions (tracking settings). In addition, Google Signals can be disabled to prevent association with a Google account, and personalized ads can be disabled. Within the framework of the data processing agreement that the website operators have concluded with Google LLC, the latter uses the information collected to evaluate website usage and website activity and provides services associated with internet use.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. a) GDPR.
Recipients
The recipient of your personal data is Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have concluded standard contractual clauses with the data importer. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR. The maximum storage period is 14 months.
Revocation
You have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here: https://support.google.com/analytics/answer/6004245?hl=de https://policies.google.com/privacy?hl=de&gl=de.
Google Ads and Conversion Tracking
Description and purpose
In order to draw attention to our current projects and developments, planned activities, and services, we place Google AdWords ads and use Google Conversion Tracking as part of this. Google AdWords (Google Ads) is a service of Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). These ads are displayed after search queries on websites of the Google advertising network. We have the ability to combine our ads with certain search terms. In addition, we use AdWords remarketing lists for search ads. This allows us to customize search ad campaigns for users who have previously visited our website. The services give us the opportunity to combine our ads with specific search terms or to display ads to previous visitors, advertising, for example, services that visitors have viewed on our website. For interest-based offers, an analysis of online user behavior is necessary. Google uses cookies to carry out this analysis. When a user clicks on an ad or visits our website, Google places a cookie on the user's computer. This information is used to be able to address the visitor in a targeted manner in a later search query. Further information on the cookie technology used can also be found in Google's notes on website statistics and in the privacy policy. With the help of this technology, Google and we as a customer receive information that a user has clicked on an ad and was forwarded to our websites in order to contact us via the contact form. Likewise, Google and we as a customer receive information, using Google forwarding numbers, that a user has clicked on a phone number of ours on the internet and contacted us by phone. The information obtained is used exclusively for statistical evaluation for ad optimization. We do not receive any information that personally identifies visitors. The statistics provided to us by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were forwarded to a page of our website provided with a conversion tag. Based on these statistics, we can trace which search terms were clicked particularly often on our ad and which ads lead to contact via the contact form or by phone by the user. Regarding telephone contact by interested parties or customers, the statistics provided by Google include the start time, end, status (missed or received), duration (seconds), the caller's area code, the telephone costs, and the call type.
Legal basis
The legal basis for the processing of your personal data is consent pursuant to Art. 6 (1) lit. a) GDPR.
Recipients
The recipient of your personal data is Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA). The data controller responsible for processing your information depends on your habitual residence, unless otherwise stated in the privacy notices of a specific service:
- Google Ireland Limited for users of Google services who have their habitual residence in the European Economic Area or Switzerland.
- Google LLC for users of Google services who have their habitual residence in the United Kingdom.
Transfer to third countries
The personal data is transferred to the USA (server location). The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have concluded standard contractual clauses pursuant to Art. 46 (2) lit. c) GDPR with the data importer. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation
You have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here: www.google.com/policies/privacy/
Google Tag Manager
Description and purpose
We use Google Tag Manager (Google LLC. 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) on our website. Google Tag Manager allows us to manage website tags via an interface and is a cookie-free domain that does not collect any personal information but can trigger other tags that collect data. Google pseudonymizes the data, and the IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. a) GDPR.
Recipients
The recipient of your personal data is Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, where necessary, we have concluded appropriate safeguards within the meaning of Art. 46 (2) GDPR with the data importer. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation
You have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here:https://policies.google.com/privacy?hl=de&gl=de
Google Maps
Description and purpose
This website uses the Google Maps API from Google LLC. (1600 Amphitheatre Parkway Mountain View, CA 94043, USA) to visually display geographical information. When using Google Maps, Google also collects, processes, and uses data about the use of the Maps functions by visitors to the websites.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. a) GDPR.
Recipients
The recipient of your personal data is Google LLC (1600 Amphitheatre Parkway Mountain View, CA 94043, USA).
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, where necessary, we have concluded appropriate safeguards within the meaning of Art. 46 (2) GDPR with the data importer. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation
You have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual or legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here:https://policies.google.com/privacy?hl=de&gl=de
LinkedIn Functions & Analytics
Description and purpose
Our website uses functions of the LinkedIn network; this also includes the LinkedIn Analytics function. Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our websites with your IP address. If you click the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account. We point out that we as the provider of the pages have no knowledge of the content of the transmitted data or its use by LinkedIn. LinkedIn Analytics uses "cookies" that are stored on your computer and allow an analysis of your use of the website. LinkedIn uses this information to evaluate your use of the website, to compile reports on website activity for website operators, and to provide other services related to website activity and internet usage.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. a) GDPR.
Recipients
The recipient of your personal data is LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, where necessary, we have concluded appropriate safeguards within the meaning of Art. 46 (2) GDPR with the data importer. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation
You have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here:https://www.linkedin.com/legal/privacy-policy
Vimeo
Description and purpose
We use the provider Vimeo, among others, for the integration of videos. Vimeo is operated by Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011. On some of our web pages, we use plugins from the provider Vimeo. When you access the web pages of our website provided with such a plugin – for example, our media library or e-learning – a connection is established to the Vimeo servers, and the plugin is displayed. This transmits to the Vimeo server which of our web pages you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When using the plugin, e.g., by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. a) GDPR.
Recipients
The recipient of your personal data is Vimeo LLC, headquartered at 555 West 18th Street, New York, New York 10011.
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, the provider has concluded standard data protection clauses with the data importer pursuant to Art. 46 (2) lit. c) GDPR. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation
You have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here:https://vimeo.com/privacy
Hubspot
Description and purpose
We use HubSpot (HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland) for our online marketing activities. This is an integrated software solution with which we cover various aspects of our online marketing. These include:E-mail marketing (newsletters and automated mailings, e.g., to provide downloads), Social Media Publishing & Reporting, Reporting (e.g., traffic sources, access, etc.), Contact management (e.g., user segmentation & CRM), Landing pages, and contact forms.Our registration service allows visitors to our website to learn more about our company, download content, and provide their contact information as well as other demographic information. This information, as well as the content of our website, is stored on servers belonging to our software partner HubSpot. It can be used by us to contact visitors to our website and to determine which of our company's services are of interest to them. All information we collect is subject to this privacy policy. We use all recorded information exclusively to optimize our marketing measures.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. a) (Consent for live chat, newsletter, and further success measurements) and lit. f) GDPR. Our legitimate interest in the use of this service is the optimization of our customer service and the management of our contact data.
Recipients
The recipient of your personal data is HubSpot (2nd Floor 30 North Wall Quay, Dublin 1, Ireland).
Transfer to third countries
It currently cannot be ruled out that personal data will be transferred to the United States of America. There has been an adequacy decision for the USA since July 10, 2023 (EU-US Data Privacy Framework). The parent company Hubspot Inc. has a corresponding certification under the EU-US Data Privacy Framework, which is why there is an adequacy decision for third-country transfers to the USA to HubSpot Inc.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation and objection
In cases of processing based on Art. 6 (1) lit. a) GDPR, you have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".In cases of processing based on Art. 6 (1) lit. f) GDPR, you have the right to object to the processing of your personal data at any time in accordance with Art. 21 (1) GDPR. If you exercise your right, processing for this purpose will no longer take place. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here: https://legal.hubspot.com/privacy-policy
Microsoft Ads
Description and purpose
On the website, we use technologies from Microsoft Ads (bingads.microsoft.com), which are provided and operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"). A cookie is set on your end device by Microsoft if you have reached our website via a Microsoft Bing ad. In this way, Microsoft Bing and the website operator can recognize that someone has clicked on an ad, was redirected to our website, and reached a previously determined destination page (conversion page). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion page. Microsoft collects, processes, and uses information via the cookie from which usage profiles are created using pseudonyms (Microsoft Conversion Tracking). These usage profiles serve to analyze visitor behavior and are used to display advertisements. No personal information about the identity of the user is processed.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit a) GDPR.
Recipients
The recipient of your personal data is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA ("Microsoft"), where it is transferred and stored.
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. Where necessary, we have concluded appropriate safeguards within the meaning of Art. 46 (2) GDPR with the data importer. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation
You have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on the processing of your personal data can be found here:https://privacy.microsoft.com/en-US/privacystatement
Microsoft Clarity
Description and purpose
We use the Microsoft Clarity service from Microsoft Corporation on our website. Microsoft Clarity serves the purpose of giving us better insights into the use of our website to further increase user-friendliness. Through the service, heat maps, overviews of cursor and scroll movements can be created, and data such as access times and IP addresses can be processed.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. a) GDPR.
Recipients
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have concluded state-approved contractual clauses such as the standard contractual clauses approved by the European Commission with the data importer pursuant to Art. 46 (2) lit. c) GDPR. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation
You have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on data protection at Microsoft can be found here: https://privacy.microsoft.com/de-de/privacystatement
Navattic
Description and purpose
To provide interactive product demonstrations and to analyze the use of these demos, we use the service Navattic Inc. Navattic enables the creation, provision, and evaluation of interactive software demonstrations on websites, landing pages, or in sales and marketing processes.As part of its use, information about interaction with the provided demos can be processed. This includes, for example, pages and sections accessed, click paths, duration of stay, devices used, browser information, IP address, and other technical usage data. Processing takes place for the purpose of presenting our products and services, measuring the success of marketing measures, and optimizing the user experience.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. f GDPR.If consent is required for tracking or analysis, processing takes place on the basis of Art. 6 (1) lit. a GDPR.
Recipients
The recipient of your personal data is Navattic Inc., 2261 Market Street, San Francisco, CA 94114, USA.
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have concluded state-approved contractual clauses such as the standard contractual clauses approved by the European Commission with the data importer pursuant to Art. 46 (2) lit. c) GDPR. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Revocation and objection
In cases of processing based on Art. 6 (1) lit. a) GDPR, you have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".In cases of processing based on Art. 6 (1) lit. f) GDPR, you have the right to object to the processing of your personal data at any time in accordance with Art. 21 (1) GDPR. If you exercise your right, processing for this purpose will no longer take place. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on data protection can be found here:https://www.navattic.com/legal/privacy‍
G2 Digital Markets (G2DM)
Description and purpose
To analyze marketing and sales activities and to evaluate potential customers' interest in our products and services, we use G2 Digital Markets (G2DM) from G2.com, Inc.As part of its use, information about interactions with our marketing content, website visits, product interests, and other usage data may be processed and transmitted to G2DM. Processing is primarily for buyer intent measurement, campaign evaluation, measuring the success of marketing measures, and optimizing our sales and marketing activities.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. f GDPR.If consent is required, processing takes place on the basis of Art. 6 (1) lit. a GDPR.
Recipients
The recipient of your personal data is G2.com, Inc., 100 South Wacker Drive, Suite 600, Chicago, IL 60606, USA.
Transfer to third countries
The personal data is transferred to the United States. The transfer is subject to appropriate safeguards in accordance with Art. 46 GDPR. To this end, we have concluded state-approved contractual clauses such as the standard contractual clauses approved by the European Commission with the data importer pursuant to Art. 46 (2) lit. c) GDPR. In addition, we are aware of our responsibility and, where necessary, take further measures to protect the rights and freedoms of natural persons to ensure the protection of personal data.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Objection and revocation
In cases of processing based on Art. 6 (1) lit. a) GDPR, you have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".In cases of processing based on Art. 6 (1) lit. f) GDPR, you have the right to object to the processing of your personal data at any time in accordance with Art. 21 (1) GDPR. If you exercise your right, processing for this purpose will no longer take place. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on data protection can be found here: https://legal.g2.com/privacy-policy
Leadfeeder
Description and purpose
To analyze the use of our website and identify corporate visitors, we use the Leadfeeder service from Dealfront Group GmbH. Leadfeeder is a B2B website tracking solution that analyzes website visits and cross-references IP addresses with publicly available corporate databases to identify visiting companies.Technical usage data, in particular IP addresses, page views, duration of stay, referrer information, and other information about visits to our website, are processed here. Processing takes place for the purpose of B2B lead generation, identifying potential business customers, sales support, and analyzing and optimizing our marketing and sales activities.Leadfeeder compares the IP addresses collected during a visit to our website with corporate databases to draw conclusions about the visiting company. Identification of individual visitors generally does not occur. The information obtained is used to identify potential business customers (B2B leads), for sales support, and to evaluate interest in our products and services.
Legal basis
The legal basis for the processing of your personal data is Art. 6 (1) lit. f GDPR.Insofar as consent is required for tracking or storing information on end devices, processing is based on Art. 6 (1) lit. a GDPR.
Recipients
The recipient of your personal data is Dealfront Group GmbH, Durlacher Allee 73, 76131 Karlsruhe, Germany.
Transfer to third countries
Processing of personal data generally takes place within the European Union or the European Economic Area. In the event of a transfer of personal data, the provider ensures the level of protection of the GDPR by complying with Art. 44 et seq. GDPR. If there is no adequacy decision with the third country in which the data importer is located, the transfer is subject to appropriate safeguards. If you have any questions, please feel free to contact our Data Protection Officer.
Duration of data storage
The data will be deleted as soon as it is no longer necessary to achieve the purpose for which it was collected. Furthermore, the data will be deleted if you assert your right to erasure in accordance with Art. 17 (1) GDPR.
Objection and revocation
In cases of processing based on Art. 6 (1) lit. a) GDPR, you have the right to revoke your consent at any time, see Art. 7 (3) sentence 1 GDPR. This can be done informally and without stating reasons and takes effect for the future. The revocation of consent shall not affect the lawfulness of processing based on consent before its withdrawal. Further information on this can be found further up in our privacy policy under "Rights of the data subject".In cases of processing based on Art. 6 (1) lit. f) GDPR, you have the right to object to the processing of your personal data at any time in accordance with Art. 21 (1) GDPR. If you exercise your right, processing for this purpose will no longer take place. Further information on this can be found further up in our privacy policy under "Rights of the data subject".
Contractual and legal obligation
There is no contractual or legal obligation to provide the data.
Further data protection information
Further information on data protection can be found here:https://www.leadfeeder.com/de/privacy/privacy-notice/
Applications (Training & Job Offers)
By submitting the application to us, applicants agree to the processing of their data for the purposes of the application process in accordance with the type and scope outlined in this privacy policy. The legal basis for the processing of applicant data is Art. 88 GDPR, Section 26 BDSG (new), and Art. 9 (2) lit. b) GDPR. If special categories of personal data within the meaning of Art. 9 (1) GDPR are voluntarily provided as part of the application process, their processing is additionally carried out in accordance with Art. 9 (2) lit. b) GDPR (e.g., health data, such as severely disabled status or ethnic origin). If special categories of personal data within the meaning of Art. 9 (1) GDPR are requested from applicants as part of the application process, their processing is additionally carried out in accordance with Art. 9 (2) lit. a) GDPR (e.g., health data if this is necessary for exercising the profession). Provided it is available, applicants can submit their applications to us using an online form on our website. The data is transmitted to us encrypted according to the state of the art. Furthermore, applicants can send us their applications via e-mail. However, we ask you to note that e-mails are generally not sent encrypted and that applicants must ensure encryption themselves. We therefore cannot accept any responsibility for the transmission path of the application between the sender and receipt on our server and therefore recommend using an online form or postal delivery. Instead of applying via the online form and e-mail, applicants still have the option of sending us the application by post. The data provided by applicants can be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is not successful, the applicant's data will be deleted. The applicant's data will also be deleted if an application is withdrawn, which applicants are entitled to do at any time. Deletion takes place after a period of six months so that we can answer any follow-up questions to the application and meet our burden of proof obligations under the General Equal Treatment Act (AGG). Invoices for any reimbursement of travel expenses will be archived in accordance with tax law requirements.
Data recipients
Insofar as this is legally permitted or required, or insofar as you have consented, we also share your personal data with other recipients who provide services for us. We limit the disclosure of your personal data to what is necessary. In some cases, our service providers receive your personal data as data processors and are then strictly bound by our instructions when handling your personal data (data processing agreement pursuant to Art. 28 GDPR). In some cases, the recipients act independently with your data that we transfer to them. The following categories of service providers/recipients may receive your data:
- Providers of e-mail marketing via newsletter
- Providers of hosting services for the operation of our servers
- Service providers in the area of applications to support the selection of applicants
- Service providers for development work, including programming, development, maintenance, and support of software applications
- Postal service providers
- External legal advice
- Marketing agencies / Website maintenance
- Other IT service providers (e.g., system houses)
- Other services and tools
The service providers we employ must meet strict confidentiality requirements. They only receive the access to your data necessary to fulfill their assigned tasks.In the event of a suspected criminal offense, data may be passed on to law enforcement authorities.
Security
We have taken extensive technical and operational precautions to protect your data from accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. Our security procedures are regularly reviewed and adapted to technological progress. In addition, data protection is continuously guaranteed through constant auditing and optimization of the data protection organization.
Conclusion
evenito AG reserves all rights to make changes and updates to this privacy policy. This privacy policy was created by the data protection management system as part of hellotrust, a brand of Keyed GmbH.
‍