Data protection notice

2.11.2 Google-AdWords

Google AdWords is an internet advertising service provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland (part of Google Inc., headquartered at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).

This service allows advertisers to place adverts both in Google’s search engine results and in the Google advertising network. Google AdWords enables an advertiser to specify certain keywords in advance, by means of which an advert is only displayed in Google’s search engine results if the user retrieves a keyword-relevant search result using the search engine. In the Google advertising network, the adverts are distributed to relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The purpose of Google AdWords is to advertise our website by displaying interest-relevant adverts on the websites of third-party companies and in the search engine results of the Google search engine and by displaying third-party adverts on our website.

If a data subject reaches our website via a Google advert, a so-called conversion cookie is stored on the data subject’s IT system by Google. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping basket from an online shop system, have been accessed on our website.

The data and information collected through the use of the conversion cookie is used by Google to compile visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who have been referred to us via AdWords ads and to optimise our AdWords ads for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could be used to identify the data subject.

The data subject can prevent the setting of cookies by our website at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies.

The legal basis for this type of processing is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Furthermore, the data subject has the option of objecting to interest-based advertising by Google. To do this, the data subject must call up the link www.google.de/settings/ads from each of the Internet browsers they use and make the desired settings there. Further information and the applicable data protection provisions of Google may be retrieved under  privacy policy.

2.12 Analysis services to optimise our services and their use

The analysis of user behaviour by means of tracking helps us to check the effectiveness of our services, to optimise them and adapt them to the needs of users and to correct errors. It is also used to statistically determine key values about the use of our services (reach, intensity of use, surfing behaviour of users) – on the basis of uniform standard procedures – and thus to obtain market-wide comparable values.

Tracking is carried out on the basis of your previously provided consent in accordance with Art. 6 para. 1 lit. a) GDPR. If you have given us your consent, you can revoke it at any time in the cookie settings.

The services in detail:

2.12.1 Matomo

We use the web analysis service Matomo, from InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand, which enables the cross-page recognition of the user to analyse user behaviour. This allows us to find out when which pages were accessed, which regions they come from and which actions the user has performed (e.g. clicks or purchases).

The following usage data is processed: two bytes of the IP address of your calling system, the website called up and the website from which you were redirected to the website called up (referrer URL), subpages of our website visited, location data (based on the anonymised IP address), user times, length of stay and frequency of visits and browser/device data.

The usage information collected (including your truncated IP address) is transmitted to our server and stored. Your IP address is anonymised so that the data cannot be assigned to an identifiable person and the individual user remains anonymous. The usage data collected is not passed on to third parties.

Tracking takes place on the basis of your previously given consent (Art. 6 para. 1 lit. a) GDPR). If you have given us your consent and you do not agree to the storage and evaluation of the data from your visit, you can revoke your consent for storage and use at any time in the cookie settings. In this case, a so-called opt-out cookie will be stored in your browser, which means that Matomo will not collect any site data. Please note: If you delete your cookies, the opt-out cookie will also be deleted and may have to be reactivated by you.

The data is deleted as soon as it is no longer required for our recording purposes. You can find more information on the storage period in the cookie settings.

When using this service, data may be transferred outside the EU. A transfer takes place in accordance with point 1.4 of this data protection notice.

2.12.2 Google Analytics

This website uses functions of the web analysis service Google Analytics from Google. ‘Google’ is a group of companies consisting of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC. Google Analytics uses so-called ‘cookies’. These are text files that are stored on your computer and enable your use of the website to be analysed.

The information generated by the cookie about your use of the website, such as

• Browser type/version
• operating system used,
• Referrer URL (the previously visited page),
• Host name of the accessing computer (IP address),
• time of the server enquiry,

are generally transmitted to a Google server in the USA and stored there. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. We have also added the code ‘anonymiseIP’ to Google Analytics on this website. This guarantees that your IP address is changed so that all data is collected anonymously. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

Google will use this information on behalf of the operator of this website to analyse your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. An opt-out cookie will be set to prevent the future collection of your data when you visit this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

Further information on data protection in connection with Google Analytics can be found, for example, in the Google Analytics help centre (https://support.google.com/analytics/answer/6004245?hl=de)

 The legal basis for the processing of the data is your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

We have concluded an order processing contract with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

We use the data obtained to determine how you have used our website. This helps us to optimise the website and continually improve its user-friendliness. Our legitimate interest in processing your personal data also lies in these purposes.

We delete your personal data when it is no longer required to fulfil the purpose for which it was processed. This is the case after seven days.

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie is set that prevents the collection of your data when you visit this website in the future: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Demographic characteristics with Google Analytics

This website uses the ‘demographic features’ function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google and visitor data from third-party providers. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the section ‘Objection to data collection’.

2.12.3 Google Marketing Plattform (formerly DoubleClick by Google)/Campaign Manager

This website uses the online marketing tool Campaign Manager from Google. ‘Google’ is a group of companies consisting of Google Ireland Ltd (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC.

Campaign Manager uses cookies to display adverts that are relevant to users, to improve campaign performance reports or to prevent a user from seeing the same adverts more than once. Google uses a cookie ID to record which adverts are displayed in which browser and can thus prevent them from being displayed more than once. In addition, Campaign Manager can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager advert and later visits the advertiser’s website with the same browser and makes a purchase there. According to Google, Campaign Manager cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: through the integration of Campaign Manager, Google receives the information that you have called up the corresponding part of our website or clicked on an advert from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out your IP address and store it.

The processing takes place with your consent in accordance with Art. 6 para. 1 a) GDPR. You can revoke your consent at any time in the cookie settings.

You can also prevent participation in this tracking process in various ways:

• by setting your browser accordingly, in particular, suppressing third-party cookies means that you will not receive any ads from third-party providers;
• by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain googleadservices.com, https://www.google.de/settings/ads , whereby this setting will be deleted if you delete your cookies;
• by deactivating interest-based ads from providers who are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices , whereby this setting will be deleted if you delete your cookies;
• by permanently deactivating in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin,
• by using the appropriate cookie setting. We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.

We would like to point out that in this case you may not be able to use all the functions of this website to their full extent. In addition, you can prevent Google from collecting the data generated by the cookies about your use of the websites and the processing of this data by Google by downloading and installing the browser plug-in available at https://support.google.com/adsense/answer/142293?hl=de under ‘Display settings’, ‘Campaign Manager deactivation extension’.

The data sent by us and linked to cookies is automatically deleted after 14 months. Data that has reached the end of its retention period is automatically deleted once a month.

Further information on the Google Marketing Platform can be found at https://marketingplatform.google.com/about and on data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the website of the Network Advertising Initiative (NAI) at http://www.networkadvertising.org.

2.12.4 LinkedIn Analytics

We use “LinkedIn Analytics”, a service of the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (headquartered in the USA: LinkedIn Corp., 1000 Q Maude Ave, Sunnyvale, CA 94085) for the analysis of user behavior.

For this purpose, cookies are used, which are stored locally in the cache of your web browser on your end device and which enable an analysis of the use of our website by our users.

We use LinkedIn Ads for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and the user experience.

 Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for our users. This is also our legitimate interest in the processing of the above data by the third party.

The legal basis is Art. 6 para. 1 lit. a) GDPR, since the use of this service requires your consent. You can revoke your consent at any time in the cookie settings.

You can also prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. You can also prevent the above information from being collected, in particular by LinkedIn, by clicking on the following link and setting an opt-out cookie:

https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Note that this setting will be deleted when you delete your cookies.

With LinkedIn, we have entered into an agreement on data processing operations that regulates the following processes: the processing of personal data, which we upload as part of the services for LinkedIn or which LinkedIn provides in another way, the processing of personal data by LinkedIn on our behalf in connection with the services and the processing of any personal data, which LinkedIn uploads to us in connection with the services or makes them available to us in another way. The agreement is available at: https://de.linkedin.com/legal/l/dpa. The transfer of data to LinkedIn is also regulated in the standard contractual clauses to comply with the applicable data protection regulations.

Please note that according to the LinkedIn ‐ data protection directive, personal data are also processed by LinkedIn in the USA or other third countries. According to its own information, LinkedIn only transfers personal data to countries for which an adequacy decision of the European Commission according to Art. 45 GDPR is available or on the basis of suitable guarantees according to Art. 46 GDPR.

LinkedIn is a listed company in the Data Privacy Framework (see also point 1.4 of these data protection notices).

2.12.5 Google Tag Manager

This website uses Google Tag Manager of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (belonging to Google Inc., headquartered in 1600 Amphitheater Parkway in Mountain View, CA 94043, USA).

Google Tag Manager offers a technical platform to run other web services and web tracking programs using so-called “tags” and to be able to control them in a bundle. In this context, Google Tag Manager stores cookies on your computer and, as far as web tracking tools are carried out using Google Tag Manager, analyzes your surfing behavior (so-called “tracking”).

This data sent by individual tags integrated in Google Tag Manager is merged, stored and processed by Google Tag Manager under a uniform user interface. All integrated “tags” are listed separately in these data protection information.

As part of the use of our website with the activated integration of tags from Google Tag Manager, data such as in particular your IP address and your user activities on servers of the company Google Ireland Ltd. transferred and outside the European Union, e.g. processed and stored in the USA.

On our behalf, Google will use this information to evaluate your visit to this website, to compile reports on website activity and to provide us with other services related to website use and internet use.

The IP address transmitted by your browser as part of Google Tag Manager will not be used with other data from Google Ireland Ltd. merged.

The data is stored and analyzed on the basis of Art. 6 para. 1 lit. a) GDPR (consent), either as part of the registration with Google (opening of a Google account and acceptance of the data protection information implemented there) or, if you have not registered with Google, by explicit consent when opening our site. Your consent can be revoked at any time in the cookie settings.

For more information about Google Tag Manager, see Google’s privacy policy.

2.12.6 Meta Pixel (formerly Facebook Pixel)

This website uses the visitor activity pixel from Facebook / Meta to measure the conversion rates. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to the Facebook statement, the data collected is also transferred to the United States and other third countries.

This tool enables page visitors to track them after they have been redirected to the provider’s website after clicking on a Facebook advertisement. This makes it possible to analyze the effectiveness of Facebook advertisements for statistical and market research purposes and to optimize future advertising campaigns.

For us as the operator of this website, the data collected is anonymous. We are unable to draw conclusions about the identity of the users. However, Facebook archives the information and processes it so that it can be assigned to the respective user profile and Facebook can use the data for its own advertising purposes in compliance with the Facebook data use directive (https://www.facebook.com/about/privacy/). This enables Facebook to place advertisements on Facebook pages, but also in locations outside of Facebook. We as the operator of this website have no influence on the use of this data.

These services are used on the basis of your consent in accordance with Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time.

Within the meta-pixel we use the function of the extended comparison. The extended comparison enables us to transfer various types of data (e.g. place of residence, state, postcode, hashed e-mail addresses, names, gender, date of birth or telephone number) of our customers and interested parties, which we collect via our website, to Meta (Facebook) to transfer. This activation enables us to tailor the offers presented in our advertising campaigns on Facebook to those interested in our offer. In addition, this extended comparison optimizes the assignment of website conversions and extends the custom audiences.

Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The shared responsibility is limited to the collection of the data and its transmission to Facebook. The post-forward processing by Facebook is not part of the shared responsibility. The obligations incumbent on us have been laid down in a joint processing agreement. The wording of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for the provision of data protection information when using the Facebook tool and for the data protection-proof implementation of the tool on our website. Facebook is responsible for the data security of Facebook products. You can assert data subject rights (e.g. requests for information) regarding the data processed by Facebook directly on Facebook. If you assert the rights of the person concerned with us, we are obliged to forward them to Facebook.

Data is transmitted to the USA on the basis of the standard contractual clauses (SCC) of the European Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

In Facebook’s privacy policy, you can find more information on protecting your privacy at: https://www.facebook.com/about/privacy/.

You can also deactivate the remarketing function „Custom Audiences “ in the ad settings under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must first log in to Facebook.

If you do not have a Facebook account, you can deactivate any user-related advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/

2.12.7 Microsoft Clarity

With Microsoft Clarity, we use a service that analyzes the behavior of visitors on our website. The analysis is carried out using a unique user ID (pseudonym), which is assigned by Microsoft Clarity. The data associated with this user ID is e.g. the evaluation of mouse movements or performance data via certain website presentations.

Microsoft Clarity provides us with information and measured values, with the help of which we can analyze and improve the user-friendliness of our website and our web application.

The following data are processed in particular:

• Type of device used to access the website
• browser
• From which page our website was visited (entrance and exit URL)
• IP address
• Operating system of the access computer
• Location data and country from which the page was accessed
• times to access; Session duration
• Movement data (mouse movements, scroll movements) in pseudonymized form.

With appropriate settings, we have ensured that data collection by Microsoft is already pseudonymized, in particular through IP masking (pseudonymization of the IP address).

The legal basis for using this service is your consent (Art. 6 para. 1 lit. a) GDPR), the primary purpose of data processing in connection with Clarity is to have Clarity produce anonymized statistics about user behavior in our web application to derive opportunities for improvement.

Please also note the data protection information from Microsoft under https://privacy.microsoft.com/en-us/privacystatement

The purposes of the processing are still the implementation of user tracking by creating anonymized user profiles for the purposes of user experience, e.g. B. common errors, obstacles that prevent a good user experience, problems with the user interface, frequent Javascript errors that occur when the user clicks, proportion of users who use a certain operating system and a certain browser type.

Please also note the data protection information from Microsoft under https://privacy.microsoft.com/en-us/privacystatement

Microsoft Clarity is a service of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; Website: https://clarity.microsoft.com; Microsoft Clarity Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement and https://privacy.microsoft.com/en-us/privacystatement; Option (opt-out): https://choice.microsoft.com/de-DE/opt-out.

2.13 Social Media

We maintain publicly accessible profiles on social networks.

As a rule, social networks analyze your user behavior comprehensively when you visit their websites. By visiting our social media presences, numerous processing processes relevant to data protection are triggered. For the social networks LinkedIn, Instagram, Facebook and YouTube, we have integrated a direct link to our pages on our website. You can recognize the link by the corresponding symbols.

If you are logged into your social media account and visit our social media presence in a social network, the operator of the social network can assign this visit to your user account. Your personal data may also be recorded if you are not logged in or do not have an account with the respective social network. In this case, this data is collected, for example, via cookies that are stored on your device or by entering your IP address.

With the help of the data recorded in this way, the operators of the social networks can create user profiles in which your preferences and interests are stored. In this way, interest-related advertising can be displayed inside and outside the respective social networks. If you have an account with the respective social network, the interest-related advertising can be displayed on all devices on which you are logged in or logged in.

Please also note that we cannot understand all processing processes on social networks. Depending on the provider, further processing operations can therefore be carried out if necessary. For details, please refer to the terms of use and data protection regulations of the respective social network (see below).

Our social media appearances should ensure the broadest possible presence of our company, our goods and services on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR. The analysis processes initiated by the social networks may be based on deviating legal bases, which must be specified by the operators of the social networks (e.g. on your consent within the meaning of Art. 6 para. 1 lit. a) GDPR).

When you visit one of our social media appearances, we are responsible for the data processing operations triggered during this visit together with the operator of the respective social network. In principle, you can assert your rights (for information, correction, deletion, restriction of processing, data transferability and your right to lodge a complaint) against both us and the operator of the respective social network.

Please note that despite the shared responsibility acc. Art. 26 GDPR does not have a full influence on the data processing processes by the operators of the respective social network. Our (influencing) options are largely based on the company policy of the respective provider.

When visiting our social media appearances and during other interactions with our content and our appearance, data from site visitors can be processed outside the European Union. You can find information in the data protection information of the respective provider.

The data collected directly by us via the social media presence will be deleted by our systems as soon as the purpose for their storage no longer applies, you ask us to delete your data, revoke your consent to the storage or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal provisions and retention periods remain unaffected.

We have no influence on the duration of the storage of your personal data by the operators of the social networks for our own purposes. Please contact the operators of the social networks directly (e.g. in their data protection information, see below).

2.13.1 LinkedIn

The platform is provided by LinkedIn Corporation (LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2 Ireland). LinkedIn is solely responsible for processing personal data when visiting our LinkedIn profile.

With LinkedIn, we have entered into an agreement on data processing operations that regulates the following processes: the processing of personal data, which we upload as part of the services for LinkedIn or which LinkedIn provides in another way, the processing of personal data by LinkedIn on our behalf in connection with the services and the processing of any personal data, which LinkedIn uploads to us in connection with the services or makes them available to us in another way. The agreement is available at: https://de.linkedin.com/legal/l/dpa.

Please note that according to the LinkedIn ‐ data protection directive, personal data is also processed by LinkedIn in the USA or other third countries. According to its own information, LinkedIn only transfers personal data to countries for which an adequacy decision of the European Commission according to Art. 45 GDPR is available or on the basis of suitable guarantees according to Art. 46 GDPR.

Further information on the processing of personal data by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

2.13.2 YouTube

This website contains plugins from YouTube from Google. „Google“ is a group of companies and consists of Google Ireland Ltd. (Service provider), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA and other related companies of Google LLC.

We use the YouTube function No-Cookies, i.e. we have activated extended data protection, videos are not called on youtube.com, but on youtube-nocookie.com.

YouTube provides this itself, thereby ensuring that YouTube does not initially save cookies on your device. When calling up the relevant pages, however, the IP address and the other data mentioned in 2.1 are transmitted and, in particular, which of our websites you have visited. However, this information cannot be assigned to you if you are permanently logged on to YouTube or another Google service when you visit the website.

As soon as you start playing an integrated video by clicking on it, YouTube only saves cookies on your device due to the extended data protection mode, which do not contain any personally identifiable data, unless you are currently logged on to a Google service. According to information from Youtube, cookies serve, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior.

Regardless of the playback of the embedded videos, a connection to the Google network „DoubleClick“ is established each time this website is called up, which can trigger further data processing processes without our influence.

The processing takes place according to your consent (Art. 6 para. 1 lit. a) GDPR). If you have given your consent, you can revoke it at any time in the cookie settings.

In addition, these cookies can be prevented by appropriate browser settings and extensions.

The embedded use of YouTube reloads other services, we cannot prevent this and we do not actively use these services ourselves.

These services are:

• Google Fonts
  see section Google Fonts
• DoubleClick
  see section Google Marketing Plattform
• Google Photos

Supporting service on YouTube for image display

• Google APIs

Supporting service at Google for providing the programming interface

• Google Video

Supporting service on YouTube for video display

• YouTube Images

Supporting service on YouTube for displaying images

Google Marketing Plattform / DoubleClick / Campaign Manager

The embedded use of YouTube loads the online marketing tool Campaign Manager from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Campaign Manager uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed multiple times. Campaign Manager can also use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a Campaign Manager ad and later visits the advertiser’s website using the same browser and buys something there. According to Google, Campaign Manager cookies do not contain any personal information. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and save your IP address. The processing is carried out in accordance with your consent (Art. 6 para. 1 lit. a GDPR). If you have given your consent, you can revoke it at any time in the cookie settings.

You can prevent participation in Google tracking processes in various ways:

• by setting your browser accordingly, in particular, suppressing third-party cookies means that you will not receive any ads from third-party providers;
• by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain googleadservices.com, https://www.google.de/settings/ads , whereby this setting will be deleted if you delete your cookies;
• by deactivating interest-based ads from providers who are part of the “About Ads” self-regulation campaign via the link http://www.aboutads.info/choices , whereby this setting will be deleted if you delete your cookies;
• by permanently deactivating in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin,
• by using the appropriate cookie setting. We would like to point out that in this case you may not be able to use all the functions of this offer to their full extent.

In addition, you can prevent Google from collecting the data generated by the cookies about your use of the websites and the processing of this data by Google by downloading and installing the browser plug-in available at https://support.google.com/adsense/answer/142293?hl=de under “Display settings”, “Campaign Manager deactivation extension”.

The data we send and linked to cookies is automatically deleted after 14 months. Data whose retention period has been reached is automatically deleted once a month.

You can find more information about the Google Marketing Platform at https://marketingplatform.google.com/about and about data protection at Google in general: https://www.google.de/intl/de/policies/privacy. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org.

2.13.3 Instagram

The operating company of the Instagram services is Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland.

The data collected is also transferred to the USA and other third countries and stored on servers in the USA or other third countries. We have concluded an agreement with Meta on joint responsibility (Controller Addendum). This agreement specifies which data processing operations we or Meta are responsible for when you visit the Instagram page. You can view this agreement at the following link:

www.facebook.com/legal/terms/page_controller_addendum

You can customise your advertising settings yourself in your user account. To do this, click on the following link and log in:

https://help.instagram.com/131112217071354

Details can be found in Instagram’s privacy policy:

https://about.instagram.com/de-de/safety

Further information and Instagram’s applicable privacy policy can be found at help.instagram.com/155833707900388 and www.instagram.com/about/legal/privacy/.

2.14 Other services

2.14.1 HubSpot

We use HubSpot for our online marketing activities and the management of customer relationships. HubSpot is a software company based in the USA with a branch in Ireland: HubSpot, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland (hereinafter: „HubSpot “).  This is an integrated software-as-a-service solution („SaaS solution “) with which we cover various aspects of our online marketing.

These include:

• e-mail marketing (newsletters, personal e-mails and automated e-mails)
• social media publishing & reporting
• reporting (e.g. traffic sources, accesses etc.)
• contact management
• landing pages and contact forms

This information is stored on HubSpot servers. They can be used by us to get in touch with visitors to our website and to determine which services of our company are interesting for them.

All information we collect is subject to this privacy policy. We use all information collected solely to optimise our marketing, sales and customer relationship management.

The legal basis for the analysis of your user behaviour (tracking, analyses) is your consent pursuant to Art. 6 para. 1 lit. a) GDPR. You can withdraw your consent at any time with effect for the future. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Hubspot processes this data as our processor. You can find details here: https://legal.hubspot.com/de/dpa

You can find more information about HubSpot’s privacy policy here; you can find more information about the cookies used by HubSpot here and here.

2.14.2 Google Fonts

For the graphically uniform representation of fonts, we use the fonts of the provider Google (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, belonging to Google Inc., with headquarters in 1600 Amphitheater Parkway in Mountain View, CA 94043, USA).

These are dynamically loaded fonts. Technical data (e.g. IP address, browser type etc.) can be processed by the service provider. The above mentioned service is used in the interest of a uniform and appealing presentation of our online offers. Processing takes place in accordance with Art. 6 para. 1 a) GDPR, with your consent.

2.15 Data privacy for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application process and for deciding on the establishment of an employment relationship. This is done on the basis of Art. 88 para. 1 GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG) and Art. 6 para. 1 lit. b) GDPR – pre-contractual measures. Processing can also be carried out electronically by e-mail or via the job portal billwerk.recruitee.com).

We would like to point out that we may also view and use publicly available data as part of the application process. These include e.g. data that can be found in search engines or that you publish on yourself in professional social networks (e.g. Xing, LinkedIn, Stepstone). We may also contact you via the professional social networks. This processing is a pre-contractual measure for the preparation and initiation of a contract in accordance with Art. 6 para. 1 lit. b) GDPR. The processed data categories include personal data and contact details, as well as other data that make you publicly available (e.g. photos, professional career, etc.).  For this purpose, we only process personal data that are related to the planned filling of the position.

We only process personal data that we receive from you as part of the application process. This can be general data about you, such as name, address and contact details, information about your professional qualification and school education or information about your further vocational training or other information that you provide to us in connection with your application.

We process the data e.g. B. with PDF software and with Microsoft 365 (including e-mail communication) from Microsoft Corporation Inc. Ireland or Redmond WA, 98052, USA. Your data may also reach the USA. Applications sent to us by e-mail are saved on our servers.

This personal data is processed for the purpose of contacting us by e-mail, by telephone or post, as well as carrying out the application process and deciding on the establishment of an employment relationship.

Insofar as an applicant provides us with documents that contain „special categories of personal data within the meaning of Art. 9 para. 1 GDPR, the legal basis for the processing of this data is Art. 9 para. 2 lit. a) GDPR (express consent), since the data was transmitted voluntarily and consciously. If data that are necessary for the exercise of the profession are included, the legal basis is Art. 9 para. 2 lit. b) GDPR – fulfillment of contract.

If the data may be necessary for legal prosecution or legal defense after the application process has been completed, data processing can be carried out on the basis of the requirements of Art. 6 para. 1 lit. f) GDPR for the protection of legitimate interests. Our interest then lies in asserting or defending claims.

Consent / data processing for the talent pool

If you give us your consent, we can save your application data even after the application process has been completed, so that in the future we can draw your attention to any vacancies that our company may be of interest to you. The legal basis for this is Artt. 6 para. 1 lit. a) and 88 GDPR in conjunction with Section 26 (2) BDSG. You give your consent voluntarily. A revocation or if you do not want to give your consent to the ‚Talent Pool has no negative effects or disadvantages for your application.

After receipt of your application, your applicant data will be passed on by the management and the managers relevant to the assessment of your application and viewed by them. The HR department organizes and controls the application process. In principle, only those people have access to your data who need this for the proper execution of the application process. Your data will be treated confidentially and will not be passed on to unauthorized third parties. 

We use a collaborative applicant management system from recruitee B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands (hereinafter referred to as ‘recruitee’) for the efficient implementation of application procedures. We have concluded an order processing contract with the provider in accordance with Art. 28 GDPR to ensure compliance with data protection regulations. The job portal and its functionalities are provided to us by recruitee on an external website (billwerk.recruitee.com). You can view recruitee’s data protection information here, the data protection information for our job portal can be found here.

If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted six months after the cancellation decision has been announced, provided that the deletion does not conflict with any contractual, legal or other legitimate interests of the person responsible. Other legitimate interest in this sense is, for example, an obligation to provide evidence in defense in a procedure under the General Equal Treatment Act (AGG).

If, based on your consent, we may continue to save your data after the application process has been completed in order to inform you of other vacancies of our company that are of interest to you, this will take place for a maximum of 24 months; your data will then be deleted immediately, counting from the date of your last consent.

2.16 Participation in webinars and use of the download function for documents / files

You can participate in webinars via our website or download WhitePapers and other downloads (files, keynotes, etc.) on various topics.

In order to provide you with this offer, we need your personal data such as first name, last name, e-mail address and, if necessary, others for marketing purposes (for sending our newsletter and other e-mails on subscription topics and, if necessary, for telephone addressing). You cannot use our services without notifying the data required to carry out the webinar or to download files. This data is marked as mandatory when registering.

Information about webinars:

The webinars are held live and recorded. This only affects the speaker and his presentation. Image / sound / text messages from the participating people are not recorded. The participating persons are informed beforehand that a recording will take place. The recordings are then available to the participating people on our YouTube channel (via link via e-mail). See also point 2.13.2 Social media / YouTube.

Information about WhitePapers and other downloads:

The WhitePapers, keynotes, documents, files and reports are created by Frisbii Germany GmbH and / or by partners and are available for download on the website of Frisbii Germany GmbH. A registration is required for the download, in which you must provide your personal data such as first name, last name and e-mail address. After submitting the registration, you will receive a confirmation e-mail from contact(at)frisbii.com asking you to confirm your e-mail address (double opt-in). You will only receive another e-mail after the confirmation has been given, which contains the link to the desired download.

We process your data with your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

For the rest, we will of course treat your data confidentially and will not transmit it to third parties without your consent.

If there are no statutory retention periods, we will delete your data as soon as it is no longer necessary for the purpose for which we collected it. In the case of statutory retention periods, we will delete your data after the retention period has expired.

3. Your rights

Information, blocking, deletion and correction

Within the framework of the applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipient and the purpose of data processing and, if applicable, a right to correction, blocking or deletion of this data. You can contact us or our data protection officer at any time at the address provided in the imprint if you have any questions about this or other questions on the subject of personal data.

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke your consent at any time. All you need to do is send us an informal e-mail. The legality of the data processing carried out up to the time of revocation remains unaffected by the revocation.

Right to object to data collection and direct advertising (Art. 21 GDPR)

If the data processing is carried out on the basis of Art. 6 para. 1 lit. a) or f) GDPR (consent or legitimate interest), you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this data protection notice. If you object, we will no longer process your personal data unless we can demonstrate compelling reasons for the processing that outweigh your interests, rights and freedoms or the processing serves to assert, exercise or defend legal claims (objection according to Art. 21 para. 1 GDPR).

If you are a customer of ours, your data may also be used for direct advertising if the topics are the same or similar in connection with the services you have ordered. If your personal data is processed to conduct direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct advertising. If you object, your personal data will subsequently no longer be used for the purposes of direct advertising (objection in accordance with Art. 21 para. 2 GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, those affected have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged violation. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

The supervisory authority responsible for us is:

Der Hessische Beauftragte für Datenschutz und Informationsfreiheit
Gustav-Stresemann-Ring 1
65189 Wiesbaden
phone:             +49 611 14080
e-mail:             poststelle(at)datenschutz.hessen.de

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request that the data be transferred directly to another responsible party, this will only be done if this is technically feasible.

Right to restriction of processing

You have the right to request that the processing of your personal data be restricted. You can contact us at any time using the address provided in the imprint. The right to restriction of processing exists in the following cases:

• If you dispute the accuracy of your personal data stored by us, we usually need time to check this. For the duration of the check, you have the right to request that the processing of your personal data be restricted.
• If the processing of your personal data was/is unlawful, you can request that the data processing be restricted instead of deleted.
• If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request that the processing of your personal data be restricted instead of deleted.
• If you have lodged an objection in accordance with Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request that the processing of your personal data be restricted.

If you have restricted the processing of your personal data, these data may – with the exception of storage – only be processed with your consent or for the establishment, exercise or defense of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

4. Changes to our data privacy information

In order to ensure that our data protection information always complies with the current legal requirements, we reserve the right to make changes at any time. This also applies if the data protection information has to be adjusted due to new or revised services, for example new services. The new data protection information will then take effect the next time you visit our website. This data protection information is dated March 2025