Data protection notice

As the operator of this website, we take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection notice.

When you use this website, various personal data are collected. Personal data are data that can be used to identify you personally. This data protection notice explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission on the Internet, for example when communicating by email, may have security gaps. Complete protection of data against access by third parties is not possible.

1 General information

1.1 Provider and controller within the meaning of data protection law

Frisbii Germany GmbH

Managing Director: Gregory Herbert

Mainzer Landstraße 51

60329 Frankfurt am Main

Tel.: +49 69 348 7799 20

Email: contact(at)frisbii.com

Please direct general enquiries relating to data protection, such as the enforcement of data subject rights, to the following email address, from which your enquiry will be forwarded to the Data Protection Officer and our data protection team:

contact(at)frisbii.com

Phone: +49 69 348 7799 20 or +49 (0)6101-982 94 22

Confidential data protection enquiries can be directed to our Data Protection Officer by telephone, post or email:

Ronald Baranowski

SIX DATENSCHUTZ GmbH

Marktplatz 6

D – 61118 Bad Vilbel

Tel.: +49 6101 982 9422

rb(at)six-datenschutz.de (for confidential enquiries)

1.2 Scope of application

This data protection notice applies to our online offering, available in particular at frisbii.com, and whenever reference is made to this data protection notice from one of our offerings, for example websites, subdomains, mobile applications, web services or integrations in third-party sites, regardless of how you access or use it.

1.3 Integration of third-party services and content

Our offering sometimes includes content, services and features from other providers. In order for this data to be retrieved and displayed in the user’s browser, the transmission of the IP address is technically necessary. The providers, hereinafter referred to as “third-party providers”, therefore receive the IP address of the respective user.

Although we endeavour to use only third-party providers that only require the IP address in order to deliver content, we have no influence on whether the IP address may be stored. In such cases, this process may serve, among other things, statistical purposes. If we are aware that the IP address is stored, we inform our users accordingly.

1.4 Transfer of personal data to third countries

If we transfer data to third countries, i.e. countries outside the European Union, the transfer takes place exclusively in compliance with the legally regulated permissibility requirements.

If the transfer of data to a third country is not for the purpose of fulfilling our contract with you, we do not have your consent, the transfer is not necessary for the establishment, exercise or defence of legal claims and no other exemption under Art. 49 GDPR applies, we will only transfer your data to a third country if an adequacy decision under Art. 45 GDPR or appropriate safeguards under Art. 46 GDPR are in place.

An adequate level of data protection in the USA was most recently declared by the adequacy decision “Data Privacy Framework (DPF)” adopted in July 2023. US companies must certify in order to be listed within the DPF. You can find the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

We have agreed so-called EU standard data protection clauses with providers in third countries and, in some cases, data processing on servers in Germany and the EU. Timely data deletion reduces the risk of third-party access.

Alternatively or additionally, entering into the EU standard data protection clauses adopted by the European Commission with the receiving entity creates appropriate safeguards in accordance with Art. 46 para. 2 c) GDPR and an adequate level of data protection. Copies of the EU standard data protection clauses are available on the website of the European Commission, available here.

1.5 Disclosure of data to third parties

Your data will not be transferred to unauthorised third parties. Where external service providers receive your personal data, we have ensured that they implement appropriate technical and organisational measures and that they comply with the applicable data protection regulations and laws.

1.6 Data transmission upon conclusion of a contract for services and digital content

We only transfer personal data to third parties if this is necessary in the context of contract processing, for example to the credit institution responsible for payment processing.

Any further transfer of data will not take place or will only take place if you have expressly consented to the transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

1.7 Data minimisation

In accordance with the principles of data avoidance and data minimisation, we only store personal data for as long as is necessary or prescribed by law (statutory retention period). If the purpose of the data collected no longer applies or the retention period ends, we block or delete the data.

2 Processing operations in detail

In the following, we inform you for what purpose, in what way and to what extent your personal data will be processed when you visit our website.

2.1 Collection of personal data when visiting our website

In the case of purely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which are technically necessary for us to display our website to you and to ensure stability and security. The legal basis for this is Art. 6 para. 1 lit. f) GDPR, legitimate interest:

IP address
Host name
Date and time of the request
Time zone difference to Greenwich Mean Time (GMT)
Content of the request (specific page)
Access status/HTTP status code
Amount of data transferred in each case
Website from which the request came (referrer)
The specific pages of our website that you have accessed
Browser: type, version and language setting
Operating system: type and version

If JavaScript is enabled, also:

Screen resolution
Colour depth
Size of the browser window
Installed browser plug-ins

2.2 Cookies

This website uses so-called cookies. These are text files that are stored on your computer by the server. They may contain information about the browser, IP address, operating system and internet connection. We do not pass this data on to third parties or link it to personal data without your consent.

Cookies fulfil two main tasks. They help us to make it easier for you to navigate through our offering and enable the website to be displayed correctly. They are not used to introduce viruses or to launch programs.

Users have the option of accessing our offering without cookies. To do this, the corresponding settings must be changed in the browser. Please use the help function of your browser to find out how to deactivate cookies. However, we would like to point out that this may impair some of the functions of this website and reduce user comfort.

The websites www.aboutads.info/choices/ (USA) and www.youronlinechoices.com/uk/your-ad-choices/ (Europe) allow you to manage interest-based advertising.

2.3 Use of essential cookies

Essential cookies do not require your consent and are processed by us in accordance with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest here is the smooth and optimal use and presentation of our website.

2.4 Cookie consent / Required consent for the use of services by third-party providers

On our website, we use the cookie consent tool of Borlabs GmbH, Hamburger Str. 11, 22083 Hamburg, Germany. The purpose of this processing is to request your consent for the technically non-essential cookies used on our website and to document it in accordance with applicable data protection regulations and laws.

When you visit our website, a cookie is stored in your browser in which the consents you have given or the revocation of these consents are documented.

The legal basis for this data processing is Art. 6 para. 1 lit. c) GDPR – legal obligation, consisting of the requirement to obtain consent for technically non-essential cookies before they are used.

The collected data will be stored until you request us to delete it, until you delete the cookie yourself or until the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected. Further details on data processing by the provider can be found here.

2.5 Hosting

Our website has been created using the WordPress open-source content management system. This service is provided by Automattic Inc. (60 29th Street #343, San Francisco, CA 94110, USA) (hereinafter: “WordPress”).

We also use WordPress extensions (so-called plugins) offered by various service providers, with which we can design the website in a visual and user-friendly way.

The data is stored locally until it is no longer required for the purposes stated above.

We have integrated the following services to extend the functionalities of WordPress:

elementor is a service for designing our websites. elementor provides us with various functionalities so that our pages can be displayed correctly and optimally on the respective end devices. This service is provided by elementor Ltd, 9 Clare Street, Dublin 2, D02 HH30, Ireland (with headquarters at Rehov Tuval 40, 5252247 Ramat Gan, Israel) (hereinafter: “elementor”).

When using this service, technical data (see section 2.1) is collected in order to ensure the provision of our services. The data is stored until it is no longer required for the purposes stated above. It cannot be ruled out that this data may also be transferred to servers in third countries. In this case, elementor has EU standard contractual clauses or adequacy decisions of the EU Commission. We have concluded a data processing agreement with elementor in order to establish the necessary contractual arrangements.

The legal basis for this type of processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the fast and efficient provision of our website.

elementor follows industry-standard security and data protection measures. Further information on elementor’s privacy policy can be found here and details on compliance in data processing can be found here.

“WPML” is a cookie used to store language settings on our website. The storage period of the cookie is 1 day.

2.6 Cloudflare

In order to reduce loading times, we use a so-called Content Delivery Network (“CDN”) for some of our offerings. With this service, content, for example large media files, is delivered via regionally distributed servers of external CDN service providers. Therefore, access data, for example IP address, browser type, browser version, date and time of access, is processed on the servers of the service providers. The data is stored for the duration of the service provision or until the purpose no longer applies.

This service is provided by Cloudflare (Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA; address in Germany: Cloudflare Germany GmbH, Rosental 7, 80331 Munich, hereinafter: “Cloudflare”).

If you wish to prevent the use of this service, you have the option of installing a JavaScript blocker. Please note, however, that this may prevent you from using our website to its full extent and in the usual manner.

Further information on Cloudflare’s data protection can be found here:

https://www.cloudflare.com/privacypolicy/

2.7 Contact form

If you send us enquiries via the contact form, your details from the enquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the enquiry and in the event of follow-up questions. The disclosure of your data is entirely voluntary.

This data is processed on the basis of Art. 6 para. 1 lit. b) GDPR, provided your enquiry is related to the fulfilment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the enquiry addressed to us (Art. 6 para. 1 lit. f) GDPR). You can object to the processing of your data at any time. The lawfulness of the data processing operations carried out up to the time of objection remains unaffected by the objection. Your data will remain with us until you request its deletion, object to the processing or the purpose for storing the data no longer applies, for example after your enquiry has been processed. Mandatory statutory provisions, in particular retention periods, remain unaffected.

Your data will not be passed on to unauthorised third parties. The data collected in this way is also not compared with data that may be collected by other components of our website. The services offered can be used, as far as technically possible and reasonable, without providing this information or by providing anonymised data or a pseudonym.

2.8 Appointment booking with Calendly

As part of our “Book a demo” or “Book a meeting” offering, you have the option of booking an appointment with us directly online. For this purpose, we use the scheduling tool “Calendly”. The provider is Calendly LLC, based in the USA (115 E Main St., Ste A1B, Buford, GA 30518, USA, hereinafter: Calendly). If you book an appointment online, your name, contact details (email address and telephone number), information about your company and technical data (see section 2.1) will be processed.

Calendly is a listed company in the Data Privacy Framework. A transfer of data to the USA therefore takes place under permissible conditions. We have entered into an agreement with Calendly on data processing operations (Data Processing Addendum). The transfer of data to Calendly is additionally governed by the standard contractual clauses in order to comply with the applicable data protection regulations.

Further information about Calendly can be found in its terms of use and privacy notice.

2.9 Newsletter

A valid email address is required to receive the newsletter. The IP address you use to register for the newsletter and the date on which you subscribe to the newsletter are also stored. This data serves as proof in the event of misuse if a third-party email address is registered for the newsletter. In addition, to ensure that an email address is not misused by third parties and entered into our mailing list, we use the so-called “double opt-in” procedure in accordance with the law. As part of this procedure, the newsletter subscription, the sending of the confirmation email and the receipt of the registration confirmation are logged. In addition, we analyse opening and click rates in order to design and optimise future information in line with the interests of our recipients.

We use HubSpot as our newsletter service provider. HubSpot is a software company based in the USA, with a branch in Ireland: HubSpot, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland. The processing by our service provider is carried out on a contractual basis in accordance with Art. 28 GDPR.

HubSpot is a listed company in the Data Privacy Framework (see also section 1.4 of this data protection notice). Further information on HubSpot’s privacy policy can be found here; more information on the cookies used by HubSpot can be found here and here.

The data entered in the newsletter registration form is processed exclusively on the basis of your consent (Art. 6 para. 1 lit. a) GDPR). The consent given for the storage of the data, the email address and its use for sending the newsletter can be revoked at any time, for example via the “unsubscribe” link in the newsletter. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.

The data you provide to us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and deleted after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this.

Sporing af nyhedsbreve

I forbindelse med abonnementet på nyhedsbrevet analyserer vi åbnings- og klikrater med henblik på optimering og for at sikre en høj leveringsevne. Dette hjælper os med at forbedre kvaliteten af indholdet i vores nyhedsbreve og samtidig tage hensyn til vores abonnenters individuelle interesser. Vi behandler disse data med dit samtykke i henhold til artikel 6, stk. 1, litra a), i GDPR. Du kan til enhver tid trække dit samtykke tilbage, f.eks. ved at afmelde nyhedsbrevet. Du finder et afmeldingslink i slutningen af hvert nyhedsbrev.

2.10 Registration on our website

When you register on our website in order to make use of personalised services, personal data is collected. This includes your name, address, telephone number and email address as contact and communication data, as well as other data that may be required for registration.

Registration enables access to services and content that are only available to registered users. If necessary, registered users have the option of changing or deleting the data provided during registration at any time, subject to statutory retention periods. Upon request, we will of course inform you which personal data has been collected and stored. The legal basis is Art. 6 para. 1 lit. b) GDPR, based on pre-contractual measures and/or for the fulfilment of the contract.

In addition, we will correct or delete the data upon request, provided that there are no statutory retention obligations that prevent this. If you have any questions or would like to request the correction or deletion of data, please use the contact details provided in this data protection notice.

2.11 Processing of data (customer and contract data)

We collect, process and use personal data only insofar as it is necessary for the establishment, content or amendment of the legal relationship (master data). This is done on the basis of Art. 6 para. 1 lit. b) GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual measures. In all other cases, processing is carried out in our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in designing efficient and optimal processes for initiating and maintaining our business relationship with you. Only the data that is essential for the respective purpose is processed. We collect, process and use data about the use of our websites (usage data) only insofar as this is necessary to enable you to use the service or to bill you.

If you have purchased products or services from us and we received your email address when the contract was concluded, we reserve the right to use this email address for direct advertising for our own similar products or services. Advertising communication to our customers falls within our legitimate interest in customer retention, external presentation and the promotion of our products and services. You can object to the processing of data for these purposes at any time by using one of the contact options mentioned above or the unsubscribe link in the advertising email, without incurring any costs other than transmission costs according to the basic rates. The legal basis for this type of processing is Section 7 para. 3 UWG.

The customer data collected will be deleted after completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

2.12 Registration for Frisbii events

If we offer events, they are organised via the doo.net platform of doo GmbH (Hultschiner Straße 8, 81677 Munich, Germany, hereinafter: “doo”). doo is an event management platform that enables us to organise events. doo provides us with a registration form that you can use to register for the respective event. For this purpose, data relating to your person, company and contact details will be processed by doo. You can subsequently view and, if necessary, edit your booking using a booking login code and the email address you used to register for the event. Participation in events is generally free of charge. The legal basis is Art. 6 para. 1 lit. b) GDPR for the fulfilment of the contract. We have concluded a contractual basis for this processing on our behalf with doo in accordance with Art. 28 GDPR. Further information about doo and data protection can be found here.

When you register, you can give us your consent to use your data to send you information about services and offers by email. This may also include combining and evaluating your data for personalised content, customer support and market research. The legal basis is your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time vis-à-vis us, for example by email to contact@frisbii.com.

The collected data will be stored until you request us to delete it or the purpose for storing the data no longer applies. Mandatory statutory retention periods remain unaffected.

2.13 Tracking to measure the success of advertising campaigns and optimise the display of advertising

Below we describe how your personal data is processed using tracking technologies on the basis of your consent pursuant to Art. 6 para. 1 lit. a) GDPR in order to make the success of advertising campaigns measurable and to optimise the display of advertising.

Tracking to measure the success of advertising campaigns serves to optimise our ads for the future and also to enable marketers and advertisers to optimise their ads accordingly. The purpose of tracking to optimise the display of advertising is to show users advertising tailored to their interests, to increase the success of the advertising and thereby also the advertising revenue.

The legal basis for this processing of personal data is Art. 6 para. 1 lit. a) GDPR (consent). If you have given us your consent, you can revoke it at any time in the cookie settings.

The tracking methods used in detail:

2.13.1 LinkedIn Ads

We use the conversion tracking technology and retargeting function of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, with headquarters in the USA: LinkedIn Corp., 1000 Q Maude Ave, Sunnyvale, CA 94085.

With this technology, visitors to this website can be shown personalised advertisements on LinkedIn. There is also the option of creating anonymous reports on the performance of the advertisements and information on website interaction.

For this purpose, the LinkedIn Insight Tag is integrated on this website, which establishes a connection to the LinkedIn server if you visit this website and are logged into your LinkedIn account at the same time.

We have entered into an agreement with LinkedIn on data processing operations (Data Processing Agreement), which regulates the following operations: the processing of personal data that we upload for LinkedIn as part of the services or that LinkedIn otherwise provides, the processing of personal data by LinkedIn on our behalf in connection with the services and the processing of any personal data that LinkedIn uploads for us in connection with the services or otherwise makes available to us. The agreement is available at: https://de.linkedin.com/legal/l/dpa. The transfer of data to LinkedIn is also regulated by the standard contractual clauses to comply with the applicable data protection regulations.

Please note that, according to LinkedIn’s privacy policy, personal data may also be processed by LinkedIn in the USA or other third countries. According to its own information, LinkedIn only transfers personal data to countries for which an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists or on the basis of appropriate safeguards pursuant to Art. 46 GDPR.

Further information on data collection and data use, as well as options and rights to protect your privacy, can be found in LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy. If you are logged into LinkedIn, you can deactivate data collection at any time using the following link:

https://www.linkedin.com/psettings/enhanced-advertising.

2.13.2 Google AdWords

Google AdWords is an internet advertising service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (belonging to Google Inc., headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

This service allows advertisers to place adverts both in Google’s search engine results and in the Google advertising network. Google AdWords enables an advertiser to specify certain keywords in advance, by means of which an advert is only displayed in Google’s search engine results if the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, the adverts are distributed to topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The purpose of Google AdWords is to advertise our website by displaying interest-relevant advertising on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party advertising on our website.

If a data subject reaches our website via a Google advertisement, a so-called conversion cookie is stored on the data subject’s IT system by Google. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping basket of an online shop system, have been accessed on our website.

The data and information collected through the use of the conversion cookie are used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who have been referred to us via AdWords advertisements and to optimise our AdWords advertisements for the future. Neither our company nor other Google AdWords advertising customers receive information from Google that could be used to identify the data subject.

Personal information, for example the websites visited by the data subject, is stored by means of the conversion cookie. Each time our websites are visited, personal data, including the IP address of the internet connection used by the data subject, is therefore transmitted to Google in the United States of America and may be stored by Google in the United States of America. Google may disclose this personal data collected via the technical process to third parties.

The data subject can prevent the setting of cookies by our website at any time by means of an appropriate setting in the internet browser used and thus permanently object to the setting of cookies.

The legal basis for this type of processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the data subject must call up the link www.google.de/settings/ads from each of the internet browsers they use and make the desired settings there. Further information and Google’s applicable privacy policy can be accessed at www.google.de/intl/de/policies/privacy/.

2.13.3 Microsoft Advertising

Microsoft Advertising is a service provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland and affiliated companies. The purposes of processing are: analysis of viewing duration, delivery of personalised advertising, measurement of advertising success and billing of advertising. Microsoft Advertising processes the IP address as well as search history and click path. This processing is carried out with your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time in the cookie settings. In addition, you have the option to prevent processing: Opt-out.

If personal data is transferred, this is carried out in accordance with the current legal provisions (see section 1.4 of this data protection notice).

The data will be deleted as soon as it is no longer required for our recording purposes. More detailed information on the storage period can be found in the cookie settings.

Further information on this service and the protection of your data can be found here: https://privacy.microsoft.com/de-de/privacystatement

2.14 Analytics services to optimise our services and their use

The analysis of user behaviour by means of tracking helps us to check the effectiveness of our services, to optimise them and adapt them to the needs of users and to fix errors. It also serves to statistically determine key figures on the use of our services (reach, intensity of use, surfing behaviour of users) on the basis of uniform standard procedures and thus to obtain market-wide comparable values.

Tracking is carried out on the basis of your prior consent pursuant to Art. 6 para. 1 lit. a) GDPR. If you have given us your consent, you can revoke it at any time in the cookie settings.

The services in detail:

2.14.1 Google Analytics

This website uses functions of the web analytics service Google Analytics from Google. “Google” is a group of companies consisting of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliated companies of Google LLC. Google Analytics uses so-called “cookies”. These are text files that are stored on your computer and enable your use of the website to be analysed.

The information generated by the cookie about your use of the website, such as

browser type/version,
operating system used,
referrer URL (the previously visited page),
host name of the accessing computer (IP address),
time of the server request,

is generally transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. We have also added the code “anonymizeIP” to Google Analytics on this website. This guarantees that your IP address is changed so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.

Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. You can prevent the storage of cookies by selecting the appropriate settings in your browser software; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website, including your IP address, and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie will be set that prevents the future collection of your data when you visit this website. The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics Help: https://support.google.com/analytics/answer/6004245?hl=de

The legal basis for the processing of the data is your consent pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR.

We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

We use the data obtained to determine how you have used our website. This helps us to optimise the website and continually improve user-friendliness. Our legitimate interest in processing your personal data also lies in these purposes.

We delete your personal data when it is no longer required to achieve the purpose for which it was processed. This is the case after seven days.

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set that prevents the collection of your data on future visits to this website: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Demographic characteristics with Google Analytics

This website uses the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section “Objection to data collection”.

2.14.2 Google Marketing Platform (formerly DoubleClick by Google)/Campaign Manager

This website uses the online marketing tool Campaign Manager from Google. “Google” is a group of companies consisting of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliated companies of Google LLC.

Campaign Manager uses cookies to display advertisements that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same advertisements more than once. Google uses a cookie ID to record which advertisements are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Campaign Manager can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager advertisement and later visits the advertiser’s website using the same browser and buys something there. According to Google, Campaign Manager cookies do not contain personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: through the integration of Campaign Manager, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address.

The processing takes place with your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time in the cookie settings.

You can also prevent participation in this tracking process in various ways:

by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any advertisements from third-party providers;
by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain googleadservices.com, https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies;
by deactivating interest-based advertisements from providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies;
by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers at http://www.google.com/settings/ads/plugin;
by using the appropriate cookie setting. We would like to point out that in this case you may not be able to use all functions of this offering to their full extent.

In addition, you can prevent Google from collecting the data generated by the cookies about your use of the websites and from processing this data by Google by downloading and installing the browser plug-in available at https://support.google.com/adsense/answer/142293?hl=de under “Ad settings”, “Campaign Manager deactivation extension”.

The data sent by us and linked to cookies is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

Further information on Google Marketing Platform can be found at https://marketingplatform.google.com/about and on data protection at Google in general at https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

2.14.3 LinkedIn Analytics

We use “LinkedIn Analytics”, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (with headquarters in the USA: LinkedIn Corp., 1000 Q Maude Ave, Sunnyvale, CA 94085), to analyse user behaviour.

For this purpose, cookies are used, among other things, which are stored locally in the cache of your web browser on your end device and which enable an analysis of the use of our website by our users.

We use LinkedIn Ads for marketing and optimisation purposes, in particular to analyse the use of our website and to continuously improve individual functions and the user experience.

Through the statistical evaluation of user behaviour, we can improve our offering and make it more interesting for our users. This is also our legitimate interest in the processing of the above data by the third-party provider.

The legal basis is Art. 6 para. 1 lit. a) GDPR, as the use of this service requires your consent. You can revoke your consent at any time in the cookie settings.

You can also prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. You can also prevent the above information from being collected, in particular by LinkedIn, by clicking on the following link and setting an opt-out cookie:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Please note that this setting will be deleted when you delete your cookies.

LinkedIn is a listed company in the Data Privacy Framework (see also section 1.4 of this data protection notice).

2.14.4 Google Tag Manager

This website uses Google Tag Manager of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (belonging to Google Inc., headquartered at 1600 Amphitheatre Parkway in Mountain View, CA 94043, USA).

Google Tag Manager offers a technical platform for running other web services and web tracking programs using so-called “tags” and for controlling them together. In this context, Google Tag Manager stores cookies on your computer and analyses your surfing behaviour, insofar as web tracking tools are executed via Google Tag Manager.

The data sent by individual tags integrated into Google Tag Manager is combined, stored and processed by Google Tag Manager under a uniform user interface. All integrated “tags” are listed separately in this data protection notice.

When using our website with the integration of tags from Google Tag Manager activated, data such as your IP address and user activities are transmitted to servers of Google Ireland Ltd. and processed and stored outside the European Union, for example in the USA.

On our behalf, Google will use this information to evaluate your visit to this website, to compile reports on website activity and to provide us with other services related to website use and internet use.

The IP address transmitted by your browser as part of Google Tag Manager is not merged with other data of Google Ireland Ltd.

The storage and analysis of the data is based on Art. 6 para. 1 lit. a) GDPR (consent), either as part of registration with Google (opening a Google account and accepting the data protection information implemented there) or, if you have not registered with Google, by explicit consent when opening our site. Your consent can be revoked at any time in the cookie settings.

Further information on Google Tag Manager can be found in Google’s privacy policy.

2.14.5 Meta Pixel (formerly Facebook Pixel)

To measure conversion rates, this website uses the visitor activity pixel from Facebook/Meta. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement, the data collected is also transferred to the USA and other third countries.

This tool enables the tracking of website visitors after they have been redirected to the provider’s website after clicking on a Facebook advertisement. This makes it possible to analyse the effectiveness of Facebook advertisements for statistical and market research purposes and to optimise future advertising campaigns.

For us as the operator of this website, the data collected is anonymous. We are unable to draw conclusions about the identity of users. However, Facebook archives and processes the information so that it can be assigned to the respective user profile and Facebook can use the data for its own advertising purposes in accordance with Facebook’s data use policy (https://www.facebook.com/about/privacy/). This enables Facebook to place advertisements on Facebook pages as well as outside Facebook. As the operator of this website, we have no influence on the use of this data.

These services are used on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time.

Within Meta Pixel, we use the advanced matching function. Advanced matching enables us to transfer various types of data (for example place of residence, federal state, postcode, hashed email addresses, names, gender, date of birth or telephone number) of our customers and interested parties that we collect via our website to Meta (Facebook). By activating this function, we can tailor the offers presented in our Facebook advertising campaigns even more precisely to people interested in our offering. In addition, this advanced matching optimises the attribution of website conversions and expands Custom Audiences.

Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after the transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (for example requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your data subject rights with us, we are obliged to forward them to Facebook.

The data transfer to the USA is based on the standard contractual clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

In Facebook’s privacy policy, you can find further information on protecting your privacy at: https://www.facebook.com/about/privacy/.

You can also deactivate the remarketing function “Custom Audiences” in the ad settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must first log in to Facebook.

If you do not have a Facebook account, you can deactivate any user-related advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

2.14.6 Microsoft Clarity

We use Microsoft Clarity, a service that analyses the behaviour of visitors on our website. The analysis is carried out using a unique user ID (pseudonym) assigned by Microsoft Clarity. The data associated with this user ID includes, for example, the evaluation of mouse movements or performance data relating to certain website presentations.

Microsoft Clarity provides us with information and metrics that help us analyse and improve the user-friendliness of our website and web application.

In particular, the following data is processed:

type of device used to access the website
browser
the page from which our website was visited (entry and exit URL)
IP address
operating system of the accessing computer
location data and country from which the page was accessed
time information relating to access; session duration
movement data (mouse movements, scroll movements) in pseudonymised form

We have ensured through appropriate settings that data collection by Microsoft is already pseudonymised, in particular through IP masking (pseudonymisation of the IP address).

The legal basis for the use of this service is your consent (Art. 6 para. 1 lit. a) GDPR). The primary purpose of data processing in connection with Clarity is to have Clarity create anonymised statistics for us about user behaviour in our web application in order to derive possibilities for improvement.

Please also note Microsoft’s data protection information at https://privacy.microsoft.com/en-us/privacystatement.

The purposes of processing further include user tracking by creating anonymised user profiles for user experience purposes, for example common errors, obstacles that prevent a good user experience, problems with the user interface, frequent JavaScript errors that occur when users click, and the proportion of users who use a certain operating system and browser type.

Please also note Microsoft’s data protection information at https://privacy.microsoft.com/en-us/privacystatement.

Microsoft Clarity is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; website: https://clarity.microsoft.com; Microsoft Clarity privacy policy: https://privacy.microsoft.com/de-de/privacystatement and https://privacy.microsoft.com/en-us/privacystatement; opt-out option: https://choice.microsoft.com/de-DE/opt-out.

2.14.7 HubSpot Analytics

We use the “HubSpot Analytics” service on our website to analyse user interactions and website performance. HubSpot is a software company based in the United States with a branch in Ireland. The provider is HubSpot Ireland Limited (hereinafter: “HubSpot”), 1 Sir John Rogerson’s Quay, Dublin 2, Ireland.

The legal basis for the use of HubSpot Analytics is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future.

The data processed by HubSpot Analytics includes data contained in our CRM (see also section 2.16.1 HubSpot), your IP address, device and browser information, geographical location data, time and duration of the visit, pages viewed and interactions with the website; the service may set cookies to track user behaviour.

HubSpot Analytics may collect and combine data in order to create user profiles for marketing and analysis purposes. For this purpose, our advertising campaigns with other service providers are also linked with this data (see also section 2.13.1 LinkedIn Ads, section 2.13.2 Google Ads and section 2.14.5 Meta Pixel). This gives us, for example, insights into click rates and through which of our advertising offers you came to our website. This gives us a more complete picture of our campaign performance and helps us improve our advertising strategies.

The purpose of the data processing is the statistical analysis of user interactions and the optimisation of marketing and sales activities.

It cannot be ruled out that personal data may be transferred to unsafe third countries (USA), where the level of data protection is lower than in the EU. HubSpot is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens’ data in the USA. We have concluded a data processing agreement (DPA) with HubSpot, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.

Further information on HubSpot Analytics’ privacy policy can be found at: https://legal.hubspot.com/privacy-policy

2.15 Social media

We maintain publicly accessible profiles on social networks.

As a rule, social networks analyse your user behaviour comprehensively when you visit their websites. By visiting our social media presences, numerous processing operations relevant to data protection are triggered. For the social networks LinkedIn, Instagram, Facebook and YouTube, we have integrated a direct link to our pages on our website. You can recognise the links by the corresponding symbols.

If you are logged into your social media account and visit our social media presence in a social network, the operator of the social network can assign this visit to your user account. Your personal data may also be collected if you are not logged in or do not have an account with the respective social network. In this case, this data is collected, for example, via cookies that are stored on your device or by recording your IP address.

Using the data collected in this way, the operators of the social networks can create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social networks. If you have an account with the respective social network, the interest-based advertising can be displayed on all devices on which you are or were logged in.

Please also note that we cannot trace all processing operations of the social networks. Depending on the provider, further processing operations may therefore be carried out. Details can be found in the terms of use and privacy policies of the respective social network (see below).

Our social media presences are intended to ensure the broadest possible presence of our company, goods and services on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. The analysis processes initiated by the social networks may be based on different legal bases, which must be specified by the operators of the social networks, for example your consent within the meaning of Art. 6 para. 1 lit. a) GDPR.

If you visit one of our social media presences, we are jointly responsible with the operator of the respective social network for the data processing operations triggered during this visit. You can generally assert your rights (to information, correction, deletion, restriction of processing, data portability and your right to lodge a complaint) both against us and against the operator of the respective social network.

Please note that, despite joint responsibility pursuant to Art. 26 GDPR, we do not have full influence on the data processing operations of the operators of the respective social network. Our ability to influence these operations is largely determined by the corporate policy of the respective provider.

When visiting our social media presences and during other interactions with our content and our presence, data of site visitors may be processed outside the European Union. Information can be found in the privacy policies of the respective provider.

The data collected directly by us via the social media presence will be deleted by our systems as soon as the purpose for storing it no longer applies, you request us to delete your data, you revoke your consent to storage or the purpose for storing the data no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory provisions and retention periods remain unaffected.

We have no influence on the duration of storage of your personal data by the operators of the social networks for their own purposes. Please inform yourself directly with the operators of the social networks, for example in their privacy policies, see below.

2.15.1 LinkedIn

The platform is provided by LinkedIn Corporation (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland). LinkedIn is solely responsible for the processing of personal data when visiting our LinkedIn profile.

Further information on the processing of personal data by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

2.15.2 YouTube

This website contains plugins from YouTube by Google. “Google” is a group of companies consisting of Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland, Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and other affiliated companies of Google LLC.

We use YouTube’s no-cookie function, i.e. we have activated enhanced privacy mode; videos are not accessed via youtube.com, but via youtube-nocookie.com.

YouTube itself provides this function and thereby assures that YouTube initially does not store cookies on your device. When the relevant pages are accessed, however, the IP address and the other data mentioned in section 2.1 are transmitted and, in particular, information is provided about which of our websites you have visited. However, this information cannot be assigned to you if you are permanently logged into YouTube or another Google service when accessing the page.

As soon as you start playing an embedded video by clicking on it, YouTube only stores cookies on your device in enhanced privacy mode that do not contain personally identifiable data, unless you are currently logged into a Google service. According to information from YouTube, the cookies serve, among other things, to record video statistics, improve user-friendliness and prevent abusive actions.

Irrespective of whether the embedded videos are played, a connection to the Google network “DoubleClick” is established each time this website is accessed, which may trigger further data processing operations without our influence.

The processing takes place in accordance with your consent (Art. 6 para. 1 lit. a) GDPR). If you have given your consent, you can revoke it at any time in the cookie settings.

These cookies can also be prevented by appropriate browser settings and extensions.

Through the embedded use of YouTube, further services are reloaded; we cannot prevent this and we do not actively use these services ourselves.

These services are:

Google Fonts
For the uniform presentation of fonts
DoubleClick
Details see section Google Marketing Platform
Google Photos
Supporting service at YouTube for image display
Google APIs
Supporting service at Google for providing the programming interface
Google Video
Supporting service at YouTube for video display
YouTube Images
Supporting service at YouTube for image display

Google Marketing Platform / DoubleClick / Campaign Manager

Through the embedded use of YouTube, the online marketing tool Campaign Manager is loaded. Campaign Manager uses cookies to display advertisements that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same advertisements more than once. Google uses a cookie ID to record which advertisements are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Campaign Manager can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager advertisement and later visits the advertiser’s website using the same browser and buys something there. According to Google, Campaign Manager cookies do not contain personal information.

If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will obtain and store your IP address.

The processing takes place in accordance with your consent (Art. 6 para. 1 lit. a) GDPR). If you have given your consent, you can revoke it at any time in the cookie settings.

You can prevent participation in Google tracking procedures in various ways:

by setting your browser accordingly; in particular, suppressing third-party cookies means that you will not receive any advertisements from third-party providers;
by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain googleadservices.com, https://www.google.de/settings/ads, whereby this setting will be deleted if you delete your cookies;
by deactivating interest-based advertisements from providers that are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices, whereby this setting will be deleted if you delete your cookies;
by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers at http://www.google.com/settings/ads/plugin;
by using the appropriate cookie setting. We would like to point out that in this case you may not be able to use all functions of this offering to their full extent. In addition, you can prevent Google from collecting the data generated by the cookies about your use of the websites and from processing this data by Google by downloading and installing the browser plug-in available at https://support.google.com/adsense/answer/142293?hl=de under “Ad settings”, “Campaign Manager deactivation extension”.

The data sent by us and linked to cookies is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

2.15.3 Instagram

The operating company of the Instagram services is Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The data collected is also transferred to the USA and other third countries and stored on servers in the USA or other third countries. We have concluded an agreement with Meta on joint responsibility (Controller Addendum). This agreement specifies which data processing operations we or Facebook are responsible for when you visit the Instagram page. You can view this agreement at the following link:

www.facebook.com/legal/terms/page_controller_addendum

You can customise your advertising settings yourself in your user account. To do this, click on the following link and log in:

https://help.instagram.com/131112217071354

Details can be found in Instagram’s privacy notice:

https://about.instagram.com/de-de/safety

Further information and Instagram’s applicable privacy policy can be accessed at help.instagram.com/155833707900388 and www.instagram.com/about/legal/privacy/.

2.16 Other services

2.16.1 HubSpot

We use HubSpot for our online marketing activities and the management of customer relationships. HubSpot is a software company based in the USA with a branch in Ireland: HubSpot Ireland Limited, 1 Sir John Rogerson’s Quay, Dublin 2, Ireland (hereinafter: “HubSpot”). This is an integrated software-as-a-service solution (“SaaS solution”) with which we cover various aspects of our online marketing.

These include, among others:

email marketing (newsletters, personal emails and automated emails)
social media publishing & reporting
reporting (e.g. traffic sources, access statistics, etc.)
contact management (CRM)
landing pages and contact forms

This information is stored on HubSpot servers. It can be used by us to get in touch with visitors to our website and to determine which services of our company are of interest to them.

All information collected by us is subject to this data protection notice. We use all collected information exclusively to optimise our marketing, sales and customer relationship management.

The legal basis for the use is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the provision and enhancement of the security and performance of our website offering. For the analysis of your user behaviour (tracking, analytics), the legal basis is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future. The lawfulness of the data processing operations already carried out remains unaffected by the revocation.

Further information on HubSpot’s privacy policy can be found here; more information on the cookies used by HubSpot can be found here and here.

Services reloaded by HubSpot:

HubSpot uses the “Cloudflare” service provided by Cloudflare Inc. (101 Townsend St., San Francisco, CA 94107, USA). This service increases the security and performance of the website. For this purpose, your IP address, log file data (date, time) and information about your system configuration are stored.

The data is deleted as soon as it is no longer required for the purpose. The storage period is a maximum of 1 day.

Further information about this service can be found here: https://www.cloudflare.com/privacypolicy/

For the uniform graphical presentation of fonts, HubSpot uses Google Fonts from Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, affiliated with Google Inc., headquartered at 1600 Amphitheatre Parkway in Mountain View, CA 94043, USA).

Technical data (e.g. IP address, browser type, etc.) may be processed by the service provider. The use of the above-mentioned service is in the interest of a uniform and appealing presentation.

2.17 Data protection for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application process and for deciding on the establishment of an employment relationship. This is done on the basis of Art. 88 para. 1 GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG) and Art. 6 para. 1 lit. b) GDPR – pre-contractual measures. Processing may also be carried out electronically by email or via the job portal frisbii.recruitee.com.

We would like to point out that, as part of the application process, we may also view and use publicly available data. This includes, for example, data that can be found in search engines or that you publish about yourself in professional social networks (e.g. Xing, LinkedIn, Stepstone). We may also contact you via professional social networks. This processing is a pre-contractual measure for the preparation and initiation of a contract pursuant to Art. 6 para. 1 lit. b) GDPR. The categories of data processed include data relating to your person and contact details, as well as other data that you make publicly available (e.g. photos, professional career, etc.). For this purpose, we only process personal data that is related to the planned filling of the position.

We only process personal data that we receive from you as part of the application process. This may include general data about you, such as your name, address and contact details, information about your professional qualifications and school education or information about your further vocational training or other information that you provide to us in connection with your application.

We process the data, for example, using PDF software and Microsoft 365 (including email communication) from Microsoft Corporation Inc. Ireland or Redmond, WA 98052, USA. Your data may therefore also reach the USA. Applications sent to us by email are stored on our servers.

This personal data is processed for the purpose of contacting you by email, telephone or post, carrying out the application process and deciding on the establishment of an employment relationship.

The legal basis is primarily Art. 6 para. 1 lit. b) GDPR (pre-contractual measures and contract fulfilment) in conjunction with Art. 88 GDPR and Section 26 BDSG (new) (data processing for the purposes of the employment relationship). If an applicant provides us with documents that contain “special categories of personal data” within the meaning of Art. 9 para. 1 GDPR, the legal basis for the processing of this data is Art. 6 para. 1 lit. a) GDPR in conjunction with Art. 9 para. 2 lit. a) GDPR (explicit consent), as the data was provided voluntarily and consciously. If this includes data that is necessary for the exercise of a profession, the legal basis is Art. 6 para. 1 lit. b) GDPR in conjunction with Art. 9 para. 2 lit. b) GDPR – contract fulfilment.

If the data may be required for legal prosecution or legal defence after completion of the application process, data processing may be carried out on the basis of the requirements of Art. 6 para. 1 lit. f) GDPR for the protection of legitimate interests. Our interest then lies in asserting or defending claims.

After receipt of your application, your applicant data will be passed on by the management to the managers relevant for the assessment of your application and viewed by them. The HR department organises and controls the application process. In principle, only those persons have access to your data who need it for the proper execution of the application process. Your data will be treated confidentially and will not be passed on to unauthorised third parties.

We use a collaborative applicant management system from recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands (hereinafter: “recruitee”) for the efficient implementation of application procedures. We have concluded a data processing agreement with the provider in accordance with Art. 28 GDPR in order to ensure compliance with data protection regulations. The legal basis for this type of processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f) GDPR. We have a legitimate interest in advertising and filling our current vacancies. The job portal and its functionalities are provided to us by recruitee on an external website (frisbii.recruitee.com). You can view recruitee’s privacy notice here.

For the analysis of susceptibility to errors and the monitoring of system stability, recruitee uses the Sentry service. The provider is Functional Software, Inc., 132 Hawthorne St., San Francisco, CA 94107, USA.

For the purpose stated above, user data is collected, for example your IP address, information about the device and browser used, as well as data that may have led to a technical error (user behaviour). recruitee has a legitimate interest in ensuring and safeguarding the stability of the website offered.

Further information on Sentry can be found in its terms of use and privacy notice.

For the uniform graphical presentation of fonts, recruitee uses Google Fonts from Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, affiliated with Google Inc., headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

Technical data (e.g. IP address, browser type, etc.) may be processed by the service provider. The use of the above-mentioned service is in the interest of a uniform and appealing presentation.

If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after notification of the rejection decision, provided that deletion does not conflict with any contractual, statutory or other legitimate interests of the controller. Another legitimate interest in this sense is, for example, an obligation to provide evidence in defence in proceedings under the General Equal Treatment Act (AGG).

Consent / data processing for the talent pool

If you give us your consent, we may also store your application data after completion of the application process so that we can inform you in the future about vacancies at our company that may be of interest to you. The legal basis for this is Art. 6 para. 1 lit. a) and Art. 88 GDPR in conjunction with Section 26 para. 2 BDSG. You give your consent voluntarily. Revoking your consent or not granting consent for the “talent pool” has no negative effects or disadvantages for your application.

2.18 Participation in webinars and use of the download function for documents/files

You have the option of participating in webinars via our website or downloading white papers and other downloads (files, keynotes, etc.) on various topics.

In order to provide you with this offer, we need your personal data such as first name, last name, email address and, where applicable, further data for marketing purposes (for sending our newsletter and other emails on subscription-related topics and, where applicable, for contacting you by telephone). Without providing the data required to carry out the webinar or to download files, you cannot use our services. This data is marked as mandatory during registration.

Information about webinars:

The webinars are held live and recorded. This only affects the speaker and their presentation. Image, sound or text messages from participants are not recorded. Participants are informed in advance that recording will take place. The recordings are subsequently made available to participants on our YouTube channel (by link via email). See also section 2.15.2 Social media/YouTube.

Information about white papers and other downloads:

The white papers, keynotes, documents, files and reports are created by Frisbii Germany GmbH and/or by partners and are offered for download on the website of Frisbii Germany GmbH. Registration is required for the download, during which you must provide personal data such as first name, last name and email address. After submitting the registration, you will receive a confirmation email from contact(at)frisbii.com asking you to confirm your email address (double opt-in). Only after confirmation has been given will you receive a further email containing the link to the desired download.

We process your data with your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Otherwise, we will of course treat your data confidentially and will not transfer it to third parties without your consent.

If there are no statutory retention periods, we will delete your data as soon as it is no longer required for the purpose for which we collected it. In the case of statutory retention periods, we will delete your data after expiry of the retention period.

3 Your rights

Information, blocking, deletion and correction

Within the framework of the applicable statutory provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients and the purpose of the data processing and, where applicable, a right to correction, blocking or deletion of this data. You can contact us or our Data Protection Officer at any time at the address provided in the imprint if you have any questions about this or other questions on the subject of personal data.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke consent already given at any time. An informal notification by email to us is sufficient. The lawfulness of the data processing carried out up to the time of revocation remains unaffected by the revocation.

Right to object to data collection and direct advertising (Art. 21 GDPR)

If data processing is carried out on the basis of Art. 6 para. 1 lit. a) or f) GDPR (consent or legitimate interest), you have the right at any time to object, on grounds relating to your particular situation, to the processing of your personal data; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection notice. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms or the processing serves the establishment, exercise or defence of legal claims (objection pursuant to Art. 21 para. 1 GDPR).

If you are a customer of ours, your data may also be used for direct advertising if the topics are the same or similar in connection with the services you have ordered. If your personal data is processed for the purpose of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for the purposes of direct advertising (objection pursuant to Art. 21 para. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged violation. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

The supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit

Gustav-Stresemann-Ring 1

65189 Wiesbaden

Phone: +49 611 14080

Email: poststelle@datenschutz.hessen.de

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a commonly used, machine-readable format. If you request that the data be transferred directly to another controller, this will only be done if it is technically feasible.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time using the address provided in the imprint. The right to restriction of processing exists in the following cases:

If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the check, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data was/is unlawful, you can request restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request restriction of processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data may, apart from storage, only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

4 Changes to our data protection notice

In order to ensure that our data protection notice always complies with current legal requirements, we reserve the right to make changes at any time. This also applies if the data protection notice has to be adapted due to new or revised services, for example new service offerings. The new data protection notice will then apply the next time you visit our offering. This data protection notice is dated July 2026.