Data protection information
In the following, we inform you about the collection of personal data when using our website and contacting us via a contact form, by e-mail or by telephone. Personal data in the sense of Art. 4 No. 1 of the EU General Data Protection Regulation (GDPR) is all information that can be related to you personally information, such as name, address, e-mail addresses, user behavior.
- Name and contact details of the controller and the data protection officer
The person responsible for the processing of personal data pursuant to Art. 4 No. 7 GDPR is:
Cabka Group GmbH
Wintersteinstrasse 22
10587 Berlin, Germany
You can reach our data protection officer, Mr. Christian Krösch, Attorney at Law, SLK Compliance Services GmbH, Koenigsbruecker Strasse 76, 01099 Dresden, Germany, by phone: +49 351 89676360 or by e-mail: [email protected].
- General information about the collection, transfer and storage period of personal data
The primary purpose of data processing is to provide access to our website and to establish and fulfill a contractual relationship with you. When you contact us by e-mail, via a contact form or by telephone, the data you provide (e.g. your e-mail address, name and telephone number, if applicable) will be stored by us in order to process your request. The primary legal basis for this is Art. 6 (1) b) GDPR. In addition, your separate consent pursuant to Art. 6 (1) a) GDPR may be used, if applicable. We also process your data in order to be able to fulfill our legal obligations, in particular in the area of commercial and tax law. This is done on the basis of Art. 6 (1) c) GDPR. Where necessary, we also process your data on the basis of Art. 6 (1) f) GDPR in order to protect legitimate interests of us or of third parties. These interests may arise, for example, for advertising, insofar as you have not objected to the use of your data, the assertion of legal claims and defense in legal disputes, ensuring the IT security of our company and for measures for business management and further development of services and products.
We will only disclose your personal data to third parties if you have given your consent in accordance with Art. 6 (1) a) GDPR, the disclosure is necessary for the assertion, exercise or defense of legal claims or for the protection of our legitimate interests in accordance with Art. 6 (1) f) GDPR (e.g. affiliated companies, courts, tax advisors, lawyers) and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, in the event that there is a legal obligation for the disclosure pursuant to Art. 6 (1) c) GDPR (e.g. tax authorities) and this is legally permissible and required pursuant to Art. 6 (1) b) GDPR for the processing of contractual relationships with you (e.g. banks, logistics service providers, IT service providers).
Depending on which services you use on our website or request from us, your personal data may be transferred to a third country. If we transfer personal data to recipients outside the European Economic Area (EEA), the transfer will only take place if the third country has been confirmed by the EU Commission to have an adequate level of data protection, if other appropriate data protection guarantees (e.g. binding corporate data protection regulations or EU standard contractual clauses) are in place, or if an exception for the transfer pursuant to Art. 49 of the GDPR applies.
We delete your personal data as soon as they are no longer required for the purposes stated in this data protection information. After termination of the contractual relationship, your personal data will be stored as long as we are legally obliged to do so. This regularly results from legal obligations to provide proof and to store data, which are regulated, among other things, in the German Commercial Code and the German Fiscal Code. The storage periods are then up to ten years. In addition, personal data may be retained for the period during which claims can be asserted against us (statutory limitation period of three or up to thirty years).
You only need to provide us with the personal data that is required for the provision and use of certain functions of our website or the establishment and performance of a contractual relationship and the fulfillment of the associated contractual obligations, or which we are required to collect by law. Without this data, we will not be able to provide the website and certain functions of the website and to enter into and perform a contract with you.
III. Collection and processing of personal data on our website
Visiting our website
In the case of merely informational use of the website, i.e. if you do not register or otherwise transmit information to us, we only collect the personal data that your browser transmits to our server and that are technically necessary for the presentation of our website and the guarantee of stability and security. These are the IP address, the request of your browser and the time of this request. In addition, the status and the amount of data transferred are recorded as part of this request. We also collect product and version information about the browser used and the operating system of your system. We further collect from which website the access of our site took place.
The temporary storage of the IP address by the system is necessary to enable delivery of the website to your browser. For this purpose, your IP address must remain stored for the duration of the session. The processing of the remaining data takes place in order to ensure the functionality of the website. In addition, the data serves us to optimize the website and to ensure the stability and security of our systems. The legal basis is Art. 6 (1) f) GDPR, based on a weighing of our legitimate and overriding interests mentioned above.
We transmit the collected data to external service providers (hosting provider, IT service provider, web agency), which support us in data processing for the above-mentioned purposes.
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Otherwise, deletion takes place at the latest within 7 days after calling up the website.
Cookies
When you use our website, we may collect information through the use of cookies or similar technologies (“cookies”). Cookies are small text files that are placed on your terminal device by your browser to store certain information. If you later visit our website again using the same terminal device, the information stored in Cookies is subsequently sent back either to our website or to another website to which the Cookie belongs. Through the stored and returned information, the respective website recognizes that you have already called up and visited it with the browser of your end device. Only the cookie itself is identified on your end device. We use cookies to improve our website, to store information about your preferred activities on the website and thus to tailor our website to your individual interests, as well as to comply with legal requirements.
This website uses the following types of cookies, the scope and functionality of which are explained below:
Essential cookies
Functional cookies
Performance cookies
Marketing cookies
Essential cookies are cookies without which you would not be able to use our website as intended or without which we would not be able to provide our website to you. These include, for example, functions such as setting and saving your privacy preferences, filling in and saving user input, and security functions. These cookies are used without your consent. However, you have the option to disable these cookies via your browser settings. The legal basis for the processing of personal data using strictly necessary cookies is Art. 6 (1) c) GDPR or Art. 6 (1) f) GDPR, based on a consideration of our legitimate and overriding interests in the technically smooth provision of our website and the services offered through it.
Functional cookies allow us to store functions you have requested or information you have provided and to offer you a better or more individualized use of our website based on this. This includes, for example, certain functions of our website, the language selection or the selected region. The legal basis for the processing of personal data using functional cookies is your consent pursuant to Art. 6 (1) a) GDPR.
We use performance cookies to understand how visitors use our website, in particular which areas they visit and how much time they spend on the website. In addition, we collect information and register error messages with the aim of improving our website. The legal basis for the processing of personal data using performance cookies is your consent pursuant to Art. 6 (1) a) GDPR.
We use marketing cookies to show you personalized promotional content and to measure the effectiveness of our marketing campaigns. To do this, we use third-party services and cookies. They may be used by these third parties to profile your interests and show you relevant ads on other websites. When you visit another website, your browser’s cookie is recognized by the website and selected ads are displayed to you based on the information stored in that cookie. The legal basis for the processing of personal data using marketing cookies is your consent pursuant to Art. 6 (1) a) GDPR.
You have the option via your browser to delete all cookies once they have been set. In addition, you can set your browser so that websites are prevented from storing and reading cookies. You can revoke your given consent to the use of cookies, unless they are absolutely necessary, at any time with effect for the future. You will find the link to the cookie settings in the footer of our website.
HubSpot CMP
We use the consent management platform HubSpot CMP of HubSpot Germany GmbH, c/o HubSpot Ireland Limited, HubSpot House, One Sir John Rogerson’s Quay, Dublin 2, Ireland (“HubSpot”). In doing so, we collect your consent or withdrawal of consent (cookie preferences), communication data (e.g. IP address, browser information) and usage data (e.g. date and time of visit).
We use Hubspot to obtain, manage and document your consent to store certain cookies on your terminal device. The legal basis for the processing of the data is Art. 6 (1) c) GDPR.
In addition to the processing of the above data by HubSpot, we transfer the collected data to external service providers (e.g. platform, hosting, support service providers) for processing in accordance with the above purposes (implementation of cookie consent management).
In cases where personal data is transferred from HubSpot to HubSpot Inc, 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. These are available here: https://legal.hubspot.com/dpa.
The personal data collected will be deleted as soon as they are no longer needed for the processing purposes. As long as processing operations to which the consent relates take place, the collected data will be stored for the purpose of fulfilling the accountability obligation pursuant to Art. 5 (2) GDPR. Insofar as the data provided is subject to retention obligations under tax and commercial law, it will be stored for the duration of the retention obligations of up to ten years and then deleted, unless you have consented to storage beyond this or the further processing of the data is necessary for the assertion, exercise or defense of legal claims (statutory limitation period of three years, accountability according to Art. 5 (2) GDPR).
HubSpot Analytics
We use the web analytics service HubSpot Analytics, provided by HubSpot Germany GmbH, c/o HubSpot Ireland Limited, HubSpot House, One Sir John Rogerson’s Quay, Dublin 2, Ireland (“HubSpot”). HubSpot Analytics uses cookies, which are stored on your terminal device and which allow an analysis of the use of the website by This involves the processing of personal data in the form of online identifiers (including cookie identifiers), IP addresses and device identifiers. On our behalf, HubSpot will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
We use HubSpot Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. The legal basis for the use of HubSpot Analytics is your consent according to Art. 6 (1) a) GDPR, in the case of transfer to the USA additionally Art. 49 (1) a) GDPR.
In addition to the processing of the above data by HubSpot, we transfer the collected data for processing to external service providers (e.g. platform, hosting, support and analytics service providers) in accordance with the above purposes (performance and support of web analytics).
In cases where personal data is transferred from HubSpot to HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. These are available here: https://legal.hubspot.com/dpa. [A level of data protection comparable to the EU is not guaranteed there. There is a risk that security authorities may access your data without any legal remedy].
The personal data collected will be deleted as soon as it is no longer needed for the processing purposes, which is regularly the case after 13 months from the collection of the data.
Google Analytics with advertising features
We use the web analytics service Google Analytics, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies, which are stored on your terminal device and which enable an analysis of your use of the website. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. Your IP address will be truncated beforehand by Google through the use of the extension “_anonymizeIP()” within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator. [We also use the User ID function. With the help of the User ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyze user behavior across devices].
We also use the advertising functions of Google Analytics on this website in addition to the above functions. These are (i) remarketing with Google Analytics, (ii) reports on impressions on the Google Display Network, (iii) Google Analytics reports on performance by demographic characteristics and interests, and (iv) integrated services for which data is collected in Google Analytics for advertising purposes, including the collection of data using cookies for ad preferences and via identifiers. In addition to the data collected in the standard implementation of Google Analytics, Google Analytics collects additional data via Google cookies for ad preferences and identifiers for access.
We use Google Analytics to analyze and regularly improve the use of our website. The statistics obtained enable us to improve our offer and make it more interesting for you as a user. We use this information, which we receive via the advertising functions of Google Analytics to improve our web offers, for targeted advertising and the analysis of the effect and efficiency of this advertising. The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 (1) a) GDPR.
In addition to the processing of the above data by Google, we transfer the collected data to external service providers (e.g. platform, hosting, support and analytics service providers) for processing in accordance with the above purposes (implementation and support of web analytics).
For the exceptional cases in which personal data is transferred from Google to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. These are available here: https://business.safety.google/adsprocessorterms/sccs/eu-p2p-intra-group/.
You can prevent the storage of cookies by selecting the appropriate settings on your browser software. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser add-on available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de. In addition, you can prevent the use of Google Analytics advertising features by (i) setting your browser software accordingly, (ii) via Google’s ad settings at https://www.google.com/ads/preferences/?hl=de, (iii) by deactivating them on the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org or (iv) through your cookie settings on our website.
The personal data collected will be deleted as soon as they are no longer needed for the processing purposes, which is regularly the case after 14 months from the collection of the data.
Google Ads Conversion and Remarketing
We use the advertising system Google Ads, of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”), to draw attention to our offer with the help of advertising (so-called Google Ads) on Google and other external websites. Google is responsible for the delivery of Google Ads and the associated data processing. Further information on Google Ads can be found at: https://ads.google.com/intl/de_DE/home/.
As part of the use of Google Ads, we use conversion tracking. If you click on a Google ad, Google stores cookies on your end device, which usually lose their validity after 30 days, and collects data about visits to our website, including URL, referrer URL, IP address, device and browser properties and timestamp. Based on the cookies, it is possible to identify which of our offers you have viewed and subsequently used. Google provides us with statistical evaluations that show which parameters of the Google Ads placed are working and where there is a need for optimization.
We also use Google Ads Remarketing. This involves delivering our Google ads to websites operated by third parties when these users or groups of users visit a Google website or a website in the Google advertising network. With Google Ads Remarketing, we analyze your usage behavior on our website, such as which of our offers you were interested in. Based on this, you can be shown targeted advertising on other websites even after you have left our website. Google stores cookies on your terminal device for this purpose, which usually lose their validity after 30 days. Based on the cookies, it is possible to recognize and analyze which of our offers you are interested in.
We use conversion tracking to determine how effectively clicks on Google ads lead to certain activities on our website, such as purchases, registrations or the completion of forms. We use remarketing to target users or groups of users who have already interacted with our website. The legal basis for the use of Google Ads Conversion and Remarketing is your consent according to Art. 6 (1) a) GDPR.
In addition to the processing of the above data by Google, we transfer the collected data for processing to external service providers (e.g., platform, hosting, support and analytics service providers) in accordance with the above purposes (implementation and support of targeted advertising and analysis of the effect and efficiency of this advertising).
In cases where personal data is transferred from Google to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. These are available here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.
You can prevent the use of the above tracking methods by (i) setting your browser software accordingly, (ii) by deactivating personalized advertising using the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin, (iii) by deactivating the interest-based ads of the providers via the link http://www.aboutads.info/choices or (iv) by your cookie settings on our website.
The personal data collected will be deleted as soon as they are no longer required for the processing purposes, which is regularly the case after 6 months from the collection of the data.
Facebook Pixel Conversion Tracking, Website Custom Audience, Retargeting
We use the analytics tool Facebook Pixel, of Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). Facebook Pixel uses JavaScript code and cookies to track the effectiveness of Facebook ads (“conversion tracking”), create target groups for future Facebook ads (“Website Custom Audiences”) and retarget users later (“retargeting”). If you click on a Facebook ad, Facebook stores cookies on your end device. Based on the cookies, it is possible to recognize which of our offers you have viewed and subsequently used. By integrating the Facebook pixel, Facebook receives the information that you have called up the corresponding web page of our website or clicked on an ad of ours. If you are registered with a Facebook service, Facebook can assign the visit to your account. Facebook provides us with statistical evaluations that show which parameters of the placed Facebook ads work and where there is a need for optimization. Based on the Facebook pixel, we also create target groups (“Website Custom Audiences”) in order to display Facebook ads only to those users who show interest in our offers or similar offers. Based on this data, Facebook can then play the respective Facebook ads only to those users who fall into the aforementioned target group. In doing so, we also use the option to address you again later with suitable advertising (“retargeting”).
We use conversion tracking to determine how effectively clicks on Facebook ads lead to specific activities on our website, such as purchases, registrations, or form completions. We use Website Custom Audiences and retargeting to efficiently target users or user groups who have already interacted with our website or offers. The legal basis for the use of Facebook Pixel is your consent pursuant to Art. 6 (1) a) GDPR.
For some of the data processing carried out in connection with Facebook Pixel, we are jointly responsible with Facebook within the meaning of Art. 26 GDPR. The joint responsibility includes the collection of such personal data (“Event Data”, https://www.facebook.com/legal/terms/businesstools_jointprocessing) by means of Facebook Pixel and its subsequent transfer to Facebook to be used for purposes of (i) displaying relevant advertising based on user interests, (ii) delivering commercial and transactional messages, and (iii) improving ad delivery and personalizing features and content. Facebook remains the sole controller of any processing of this data after it is transferred to Facebook. To this end, we have entered into an agreement with Facebook (“Controller Addendum,” https://www.facebook.com/legal/controller_addendum) that sets forth our respective responsibilities for fulfilling our obligations under the GDPR with respect to joint processing. Thereafter, we are responsible for providing information regarding the joint processing of personal data. Facebook is responsible for enabling the rights of data subjects under Art. 15-20 GDPR with respect to personal data stored by Facebook after joint processing. The contact details of the data controller as well as the data protection officer of Facebook are available here: https://www.facebook.com/about/privacy.
In addition to the processing of the above data by Facebook, we transfer the collected data to external service providers (e.g., platform, hosting, support, and analytics service providers) for processing in accordance with the above purposes (implementation of and support for targeted advertising and analysis of the effect and efficiency of this advertising).
In cases where personal data is transferred from Facebook to Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. The Facebook EU Data Transfer Addendum referencing the standard contractual clauses is available here: https://www.facebook.com/legal/EU_data_transfer_addendum.
You can prevent the use of the above tracking methods by (i) setting your browser software accordingly, (ii) as a Facebook user by deactivating the “Custom Audience” function at the following link: https://www.facebook.com/settings/?tab=ads#, (iii) by deactivating the interest-based ads of the providers via the link http://www.aboutads.info/choices or (iv) by your cookie settings on our website.
The collected personal data will be deleted as soon as they are no longer needed for the processing purposes, which is regularly the case after 6 months from the collection of the data.
LinkedIn Ads Conversion and Remarketing
We use the advertising system LinkedIn Ads, of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”), to draw attention to our offer with the help of advertisements (so-called LinkedIn Ads) on LinkedIn. LinkedIn is responsible for the delivery of LinkedIn Ads and the associated data processing. Further information on LinkedIn Ads can be found at: https://business.linkedin.com/de-de/marketing-solutions/ads and https://www.linkedin.com/help/linkedin/answer/a421454.
As part of the use of LinkedIn Ads, we use conversion tracking. If you click on a LinkedIn ad, LinkedIn stores cookies on your end device and collects data about visits to our website, including URL, referrer URL, IP address, device and browser properties, timestamp as far as demographic data from LinkedIn if you are an active LinkedIn user. IP addresses are shortened or (if used to reach members across devices) hashed. Members’ direct identifiers are removed within seven days to pseudonymize the data. This remaining pseudonymized data is then deleted within 180 days. LinkedIn does not share any personal data with us, but only provides reports and notifications (in which you are not identified) about website audience and ad performance. Based on the cookies, it is possible to identify which of our offers you have viewed and subsequently used.
We also use LinkedIn Ads Remarketing. This involves the targeted delivery of our LinkedIn ads on LinkedIn when these users or user groups visit LinkedIn. With LinkedIn Ads Remarketing, we analyze your usage behavior on our website, such as which of our offers you were interested in. Based on this, you can be shown targeted advertising on LinkedIn even after you have left our website. This makes it possible to recognize and analyze which of our offers you are interested in.
We use conversion tracking to determine how effectively clicks on LinkedIn ads lead to certain activities on our website, such as purchases, registrations or filling out forms. The legal basis for the use of LinkedIn Ads Conversion is your consent according to Art. 6 (1) a) GDPR.
In addition to the processing of the above data by LinkedIn, we transfer the collected data to external service providers (e.g. platform, hosting, support and analytics service providers) for processing in accordance with the above purposes (implementation and support of targeted advertising and analysis of the effect and efficiency of this advertising). In cases where personal data is transferred from LinkedIn to LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. The LinkedIn Data Processing Agreement with reference to the standard contractual clauses is available here: https://www.linkedin.com/legal/l/dpa.
You can prevent the use of the above tracking methods by (i) setting your browser software accordingly, (ii) as a user of LinkedIn via the settings at https://www.linkedin.com/psettings/enhanced-advertising, (iii) by deactivating the providers’ interest-based ads via the link http://www.aboutads.info/choices, (iv) by deactivating retargeting at https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out or (v) by your cookie settings on our website.
The personal data collected will be deleted as soon as they are no longer needed for the processing purposes, which is regularly the case after 6 months from the collection of the data.
- Further information on data processing within and outside our website
Contact and communication
We collect your personal data as a customer, business partner, interested party or supplier if you provide it to us voluntarily by e-mail, via a contact form on our website, by mail or by telephone. We then collect the information that comes about as part of the contact and/or cooperation. This includes in particular names and transmitted contact data, date and reason for contact.
The personal data collected from you will be used for the purpose of providing you with the requested products or services and corresponding with you (legal basis Art. 6 (1) b) GDPR), for the fulfillment of legal obligations (legal basis Art. 6 (1) c) GDPR) or on the basis of legitimate interests of us or of third parties (legal basis Art. 6 (1) f) GDPR), which are described in this privacy policy.
You are not obliged to provide the aforementioned personal data. The data provided may be necessary for the conclusion of a contract. Without the provision of the data, communication, conclusion of a contract or contract execution may not be possible.
A transmission of the data relevant in the respective individual case takes place on the basis of the legal regulations or a contractual agreement to public offices in the presence of overriding legal regulations, to external service providers or other contractors and to further external offices, as far as you have given your consent or a transmission is permissible for predominant interest.
The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Insofar as the data disclosed is subject to retention obligations under tax and commercial law, it will be stored for the duration of the retention obligations of ten years and then deleted, unless you have consented to storage beyond this or the further processing of the data is necessary for the assertion, exercise or defense of legal claims (statutory limitation period of three or up to thirty years).
Data protection information for applicants
We collect your personal data as an applicant only if you provide it to us voluntarily by e-mail, mail or telephone. This applies both to applications in response to job advertisements and to unsolicited applications. In this case, we record the information provided in the application. This includes in particular name, date of birth, contact data, interests, qualification data as well as educational and professional background. The personal data collected from you will only be used for the purpose of carrying out the application process. The legal bases are Art. 6 (1) a), b) and f) GDPR, § 26 BDSG.
You are not obliged to provide the aforementioned personal data. The data provided may be required for a future conclusion of a contract after completion of the application process. Without the provision of the data, communication, the implementation of the application process or a contract conclusion may not be possible.
A transmission of the data relevant in the respective individual case takes place on the basis of the legal provisions or a contractual agreement. Data is transferred to employees of the personnel department, employees of the management and the respective head of department. In the case of an online application, your data will be passed on to the provider of the online application system REXX (rexx systems GmbH, Suederstrasse 75-79, 20097 Hamburg) commissioned by us. There is no intention to transfer your data to a recipient in a third country (not a member state of the EU / EEA) or an international organization.
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. Therefore, once the application process has been carried out, we retain your data for six months after you have been notified of the rejection decision in the event of a rejection. If you have consented to longer storage, the storage period is regularly two years. After that, we will either delete your data or obtain your consent again. You have the option to revoke your consent to the processing of personal data at any time.
Newsletter
With your consent, you can subscribe to our newsletter, with which we inform you about our offers. The advertised goods and services are named in the declaration of consent.
For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your respective IP addresses used and times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data. The legal basis is Art. 6 (1) a) and c), Art. 7 (1), Art. 5 (2) GDPR.
Mandatory data for sending the newsletter is only your e-mail address, which is marked separately. The provision of further data is voluntary and will be used to address you personally. After your confirmation, we store your specified data for the purpose of sending the newsletter. The legal basis is Art. 6 (1) a) GDPR. The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Accordingly, the user’s email address will be stored as long as the subscription to the newsletter is active. We may store inactive e-mail addresses for up to three years in order to prove consent previously given and to be able to defend against possible claims. The legal basis is Art. 6 (1) c), Art. 5 (2) GDPR.
You can revoke your consent to the sending of the newsletter and personal evaluation of your usage behavior (performance measurement) at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in every newsletter email or by sending a message to the contact details provided in the imprint.
The newsletter is sent by Hubspot, an email marketing service of HubSpot Germany GmbH, c/o HubSpot Ireland Limited, HubSpot House, One Sir John Rogerson’s Quay, Dublin 2, Ireland (“HubSpot”). Your email address as well as your other data mentioned in these instructions for receiving the newsletter will be stored on Hubspot’s servers. Hubspot uses this information to send and measure the success of the newsletter on our behalf. The use of Hubspot is based on our legitimate interests pursuant to Art. 6 (1) f) GDPR. Our interest is directed towards the use of a user-friendly as well as secure newsletter system that serves both our business interests and meets the expectations of users. In cases where personal data is transferred from HubSpot to HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. These are available here: https://legal.hubspot.com/dpa.
Our newsletters contain so-called web beacons, i.e. a pixel-sized file that is retrieved from the Hubspot server when the newsletter is opened. As part of this retrieval, technical information, such as data on the browser and your system, as well as your IP address and the time of the retrieval are collected, which serve to technically improve the services based on the technical data or the target groups and their reading behavior. In addition, your usage behavior is evaluated to determine whether the newsletters were opened, when they were opened and which links were clicked. The evaluations are used to recognize the reading habits of our users and to adapt our content to them or to be able to offer different content according to the individual interests of our users. This performance measurement is included in the consent pursuant to Art. 6 (1) a) GDPR to send the newsletter. A revocation can therefore only be made together with the consent to send the newsletter.
Use of Microsoft Teams
To conduct video conferences and online meetings (“online meetings”), we use the “Microsoft Teams” service of Microsoft Ireland Operations Limited, The Atrium Building, Block B, Carmanhall Road, Sandyford Business Estate, Dublin 18, Ireland (“Teams”). The legal basis for data processing when conducting “online meetings” is Art. 6 (1) b) GDPR, insofar as these are conducted in the context of contractual relationships. Insofar as personal data is processed by our employees, Section 26 BDSG is the legal basis. If no contractual relationship exists or no processing is required for the establishment, implementation or termination of the employment relationship, the legal basis is Art. 6 (1) f) GDPR. Our legitimate interest in these cases is the effective implementation of “online meetings”.
Various types of data are processed when using “Teams”. The scope of the data also depends on the data you provide before or during participation in an “online meeting”. If we want to record “online meetings”, we will inform you transparently in advance and – if necessary – ask for your consent. That a recording is taking place will also be indicated to you in the “Teams” app. If it is necessary for the purposes of logging the results of an online meeting, we will log the chat content. However, this will not usually be the case. In the case of webinars, we may also process questions asked by webinar participants for purposes of recording and following up on webinars. If you are registered as a user with “Teams”, then reports of “online meetings” (meeting metadata, telephone dial-in data, questions and answers in webinars, survey function in webinars) may be stored by “Teams” for up to one month. The following personal data are subject to processing: User details (first name, last name, phone (optional), email address, password (if “single sign-on” is not used), profile picture (optional), department (optional)), meeting metadata (topic, description (optional), participant IP addresses, device/hardware information), Recording data (optional) (MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat) when dialing in with the telephone data (information on incoming and outgoing call number, country name, start and end time. If necessary, further connection data such as the IP address of the device may be stored) and text, audio and video data. You may have the opportunity to use the chat, question or survey functions in an “online meeting”. To this extent, the text entries you make are processed in order to display them in the “online meeting” and, if necessary, to log them. To enable the display of video and the playback of audio, the data from the microphone of your terminal device and from any video camera of the terminal device will be processed accordingly for the duration of the meeting. You can turn off or mute the camera or microphone yourself at any time via the “Teams” applications. In order to participate in an “Online Meeting” or to enter the “Meeting Room”, you must at least provide information about your name.
Personal data processed in connection with participation in “online meetings” will generally not be disclosed to third parties unless it is intended for disclosure. Please note that the content of “online meetings”, as well as personal meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on. In addition to Microsoft’s processing of the above data, we transfer the collected data to external service providers (e.g., platform, hosting, support, and analytics service providers) for processing in accordance with the purposes set forth above (to assist in providing and conducting “online meetings”).
In cases where personal data is transferred from Microsoft Ireland Operations Limited to Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. The Microsoft Products and Services Data Protection Addendum (DPA) referencing the standard contractual clauses is available here: https://www.aka.ms/dpa
We generally delete personal data when there is no need for further storage. A requirement may exist in particular if the data is still needed to fulfill contractual services, to check and grant or defend against warranty and, if applicable, guarantee claims. In the case of statutory retention obligations, deletion will only be considered after expiry of the respective retention obligation.
Social Media
We also process your personal data when you visit us on our social media accounts. We maintain these social media accounts primarily to communicate with customers, interested parties and users, to increase our brand awareness and to promote our products and services. The respective provider stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research, and/or demand-oriented design of its network. Such an evaluation is carried out in particular (also for non-logged-in users) for the display of needs-based advertising. For the respective data processing purposes and data categories, we refer to the individual social media accounts, which are explained in more detail below.
The legal basis for the use of these social media accounts is Art. 6 (1) f) GDPR, as we have a legitimate interest in communicating and informing customers and interested parties via these accounts. Insofar as you wish to enter into a contractual relationship with us with your request, the legal basis for this processing is Art. 6 (1) b) GDPR.
In addition to the processing of the above-mentioned data by the respective providers, we transfer the collected data to external service providers (e.g. platform, hosting, support and analysis service providers) for processing in accordance with the above-mentioned purposes (implementation and support of communication and information as well as advertising).
The collected personal data will be deleted as soon as they are no longer needed for the processing purposes.
We operate a social media account on Facebook (“Fanpage”), an online service of Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Facebook”). When you visit our Fanpage, Facebook processes your personal data in accordance with Facebook’s privacy policy. For more information, please visit: https://de-de.facebook.com/policy.php.
We process your personal data depending on your interaction with our Fanpage, including your Facebook username as well as comments you have posted on our Fanpage and your activity on our Fanpage via the Facebook Page Insights service. Page Insights are aggregate statistics created based on certain events logged by Facebook’s servers when people interact with Pages and their associated content, such as visits to our Fan Page, the volume of interactions, visits and average duration of video plays, information about what countries and cities you are from, and statistics about our visitors’ general relationships (“Events”) and other information necessary to respond to your potential inquiries. For more information about such Events, please visit: https://www.facebook.com/legal/terms/page_controller_addendum. Facebook provides Page Insights to us so that we can gain insights about how visitors interact with our Fan Page and with content associated with them. We do not have access to the personal data processed as part of events, only to the aggregated Page Insights.
We are jointly responsible with Facebook for some of the processing of this personal data into Page Insights events (“Insights Data”) in connection with the Fan Page within the meaning of Art. 26 of the GDPR. The joint responsibility includes the creation of the events and their aggregation into Page Insights, which are then made available to us. We have entered into an agreement with Facebook for this purpose (“Page Insights Supplement”, https://www.facebook.com/legal/terms/page_controller_addendum), which sets out the respective responsibilities for fulfilling the obligations under the GDPR with regard to joint processing. Facebook provides the essence of this Page Insights Supplement to data subjects (Art. 26 (2) GDPR). This is currently done via the Page Insights data information available here: https://www.facebook.com/legal/terms/information_about_page_insights_data. We are responsible for providing information on the joint processing of personal data. Facebook is responsible for enabling the rights of data subjects under Art. 15-20 GDPR with respect to personal data stored by Facebook after joint processing. The contact details of the data controller as well as Facebook’s data protection officer are available here: https://www.facebook.com/about/privacy.
In cases where personal data is transferred from Facebook to Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. The Facebook EU Data Transfer Addendum with reference to the standard contractual clauses is available here: https://www.facebook.com/legal/EU_data_transfer_addendum.
We operate a social media account on LinkedIn, an online service of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). When you visit us on our LinkedIn page, LinkedIn processes your personal data in accordance with LinkedIn’s privacy policy. For more information, please visit: https://www.linkedin.com/legal/privacy-policy.
We process your personal data depending on your interaction with us on our LinkedIn page, including your LinkedIn username as well as comments you have posted on our LinkedIn page and your activity on our LinkedIn page via the LinkedIn “Page Insights” service. “Page Insights” are aggregate statistics created based on certain interactions logged by LinkedIn servers when people interact on our LinkedIn Page and related content, such as visits to our LinkedIn Page, the volume of interactions, information about what countries and cities you are from, and statistics about our visitors’ area of work and other information necessary to respond to your potential inquiries. LinkedIn provides Page Insights to us so that we can gain insights about how visitors interact with our LinkedIn Page and with content associated with it. We do not have access to the personal data in this process, only to the aggregate statistics.
For some of the processing of this personal data for Page Insights that takes place in connection with the LinkedIn Page, we are jointly responsible with LinkedIn within the meaning of Art. 26 GDPR. The joint responsibility includes the processing of personal data for the creation of Page Insights, which are then made available to us. We have entered into an agreement with LinkedIn for this purpose (“Page Insights Joint Controller Addendum”, https://legal.linkedin.com/pages-joint-controller-addendum), which sets out the respective responsibilities for fulfilling the obligations under the GDPR with regard to joint processing. LinkedIn provides the essence of this Page Insights Joint Controller Addendum to data subjects at the link above (Art. 26 (2) GDPR). LinkedIn has thereafter committed to assume responsibility under the GDPR for the provision of Page Insights and will comply with all applicable obligations under the GDPR with respect to the processing of Page Insights (including, but not limited to, Art. 12-22 and Art. 32-34 of the GDPR). This means that LinkedIn will, among other things, ensure that users are informed about the data being processed and assist members with their rights of access and erasure. The contact details of the data controller as well as LinkedIn’s data protection officer are available here: https://www.linkedin.com/legal/privacy-policy.
In cases where personal data is transferred from LinkedIn to LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. You can request a copy of these standard contractual clauses from LinkedIn via https://www.linkedin.com/legal/privacy-policy.
YouTube
We operate a social media account on YouTube, an online service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“YouTube”). When you visit us on our YouTube channel, YouTube processes your personal data in accordance with YouTube’s privacy policy. For more information, please visit: https://policies.google.com/privacy.
We process your personal data depending on your interaction with us on our YouTube channel, including your YouTube username as well as comments you have posted on our YouTube channel and your activity on our YouTube channel via the YouTube Analytics service. We receive aggregate statistics based on certain interactions when people interact on our YouTube channel and related content, such as visits to our YouTube channel, the volume of interactions, visits and average duration of video plays, information about what countries and cities you are from, and statistics about the general relationships of our visitors and other information necessary to respond to your potential requests. YouTube provides these statistics to us so that we can gain insights into how visitors interact with our YouTube channel and with content associated with them. We do not have access to the personal data in this process, only to the aggregate statistics.
In cases where personal data is transferred from Google to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, these transfers are subject to the standard contractual clauses pursuant to Art. 46 GDPR. The YouTube order data processing terms and conditions with reference to the standard contractual clauses are available here: https://www.youtube.com/t/terms_dataprocessing
- Objection or revocation against the processing of your data
If you have given your consent to the processing of your data, you may revoke it at any time. Such revocation will affect the permissibility of the processing of your personal data after you have expressed it to us.
Insofar as we base the processing of your personal data on the balance of interests, you may object to the processing. This is the case if the processing is not necessary, in particular, for the performance of a contract with you, which is shown by us in each case in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing.
Of course, you can object to the processing of your personal data for purposes of advertising and data analysis at any time. You can inform us of your objection to advertising by using the contact details listed in section I.
- Your rights
In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. In particular, you can request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of complaint, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information about its details.
In accordance with Art. 16 GDPR, you have the right to request the correction of inaccurate or incomplete personal data stored by us without undue delay. In accordance with Art. 17 GDPR, you have the right to request the erasure of your personal data stored by us, unless the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims.
Pursuant to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, the processing is unlawful, but you object to its erasure and we no longer need the data, but you need it for the assertion, exercise or defense of legal claims or you have objected to the processing pursuant to Art. 21 GDPR.
In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
In accordance with Art. 7 (3) GDPR, you have the right to revoke your consent once given to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future.
You also have the right under Art. 77 GDPR to lodge a complaint about the processing of your personal data by us with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.
Download our product brochure
Enter your email and we will send you our product catalog and corporate brochure