1. An overview of data protection
General information
The following information will provide you with an easy to
navigate overview of what will happen with your personal data when
you visit this website. The term “personal data” comprises all
data that can be used to personally identify you. For detailed
information about the subject matter of data protection, please
consult our Data Protection Declaration, which we have included
beneath this copy.
Data recording on this website
Who is the responsible party for the recording of data on this
website (i.e., the “controller”)?
The data on this website is processed by the operator of the
website, whose contact information is available under section
“Information about the responsible party (referred to as the
“controller” in the GDPR)” in this Privacy Policy.
How do we record your data?
We collect your data as a result of your sharing of your data with
us. This may, for instance be information you enter into our
contact form.
Other data shall be recorded by our IT systems automatically or
after you consent to its recording during your website visit. This
data comprises primarily technical information (e.g., web browser,
operating system, or time the site was accessed). This information
is recorded automatically when you access this website.
What are the purposes we use your data for?
A portion of the information is generated to guarantee the error
free provision of the website. Other data may be used to analyze
your user patterns.
What rights do you have as far as your information is concerned?
You have the right to receive information about the source,
recipients, and purposes of your archived personal data at any
time without having to pay a fee for such disclosures. You also
have the right to demand that your data are rectified or
eradicated. If you have consented to data processing, you have the
option to revoke this consent at any time, which shall affect all
future data processing. Moreover, you have the right to demand
that the processing of your data be restricted under certain
circumstances. Furthermore, you have the right to log a complaint
with the competent supervising agency.
Please do not hesitate to contact us at any time if you have
questions about this or any other data protection related issues.
Analysis tools and tools provided by third parties
There is a possibility that your browsing patterns will be
statistically analyzed when your visit this website. Such analyses
are performed primarily with what we refer to as analysis
programs.
For detailed information about these analysis programs please
consult our Data Protection Declaration below.
2. Hosting and Content Delivery Networks (CDN)
We are hosting the content of our website at the following
providers:
Amazon Web Services (AWS)
The provider is the Amazon Web Services EMEA SARL, 38 Avenue John F.
Kennedy, 1855 Luxembourg (hereinafter referred to as “AWS”).
AWS is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate
interest in a depiction of our website that is as reliable as
possible. If appropriate consent has been obtained, the processing
is carried out exclusively on the basis of Art. 6(1)(a) GDPR and §
25 (1) TTDSG, insofar the consent includes the storage of cookies or
the access to information in the user's end device (e.g.,
device fingerprinting) within the meaning of the TTDSG. This consent
can be revoked at any time.
Data processing
We have concluded a data processing agreement (DPA) for the use of
the above-mentioned service. This is a contract mandated by data
privacy laws that guarantees that they process personal data of our
website visitors only based on our instructions and in compliance
with the GDPR.
Webflow
The provider is the Webflow, Inc., 398 11th Street, 2nd Floor, San
Francisco, CA 94103, USA (hereinafter referred to as “Webflow”).
When you visit our website, Webflow records various logfiles,
including your IP address.
Webflow is a tool for the creation and hosting of websites. Webflow
stores cookies or other recognition technologies that are required
for the depiction of the site, for the provision of certain website
functions and to guarantee its security (necessary cookies).
We use Webflow on the basis of Art.6(1)(f) GDPR. We have a
legitimate interest in ensuring that our website is depicted as
reliable as possible. If appropriate consent has been obtained, the
processing is carried out exclusively on the basis of Art. 6(1)(a)
GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of
cookies or the access to information in the user's end device
(e.g., device fingerprinting) within the meaning of the TTDSG. This
consent can be revoked at any time.
Data processing
We have concluded a data processing agreement (DPA) for the use of
the above-mentioned service. This is a contract mandated by data
privacy laws that guarantees that they process personal data of our
website visitors only based on our instructions and in compliance
with the GDPR.
Amazon CloudFront CDN
We use the Content Delivery Network Amazon CloudFront CDN. The
provider is Amazon Web Services EMEA SARL, 38 avenue John F.
Kennedy, L-1855, Luxembourg (hereinafter referred to as “Amazon”).
Amazon CloudFront CDN is a globally distributed Content Delivery
Network. During these transactions, the information transfer between
your browser and our website is technically routed via the Content
Delivery Network. This enables us to boost the global availability
and performance capabilities of our website.
The use of Amazon CloudFront CDN is based on our legitimate interest
in keeping the presentation of our web services as error free and
secure as possible (Art. 6(1)(f) GDPR).
Data processing
We have concluded a data processing agreement (DPA) for the use of
the above-mentioned service. This is a contract mandated by data
privacy laws that guarantees that they process personal data of our
website visitors only based on our instructions and in compliance
with the GDPR.
3. General information and mandatory information
Data protection
The operators of this website and its pages take the protection of
your personal data very seriously. Hence, we handle your personal
data as confidential information and in compliance with the
statutory data protection regulations and this Data Protection
Declaration.
Whenever you use this website, a variety of personal information
will be collected. Personal data comprises data that can be used to
personally identify you. This Data Protection Declaration explains
which data we collect as well as the purposes we use this data for.
It also explains how, and for which purpose the information is
collected.
We herewith advise you that the transmission of data via the
Internet (i.e., through e-mail communications) may be prone to
security gaps. It is not possible to completely protect data against
third-party access.
Information about the responsible party (referred to as the
“controller” in the GDPR)
The data processing controller on this website is:
Alpha Sophia Technologies GmbH
An St. Magdalenen 8
50678
Cologne
Germany
Phone: +1 (857) 800-9488
E-mail:
hello@alphasophia.com
The controller is the natural person or legal entity that
single-handedly or jointly with others makes decisions as to the
purposes of and resources for the processing of personal data (e.g.,
names, e-mail addresses, etc.).
Storage duration
Unless a more specific storage period has been specified in this
privacy policy, your personal data will remain with us until the
purpose for which it was collected no longer applies. If you assert
a justified request for deletion or revoke your consent to data
processing, your data will be deleted, unless we have other legally
permissible reasons for storing your personal data (e.g., tax or
commercial law retention periods); in the latter case, the deletion
will take place after these reasons cease to apply.
General information on the legal basis for the data processing on
this website
If you have consented to data processing, we process your personal
data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if
special categories of data are processed according to Art. 9 (1)
DSGVO. In the case of explicit consent to the transfer of personal
data to third countries, the data processing is also based on Art.
49 (1)(a) GDPR. If you have consented to the storage of cookies or
to the access to information in your end device (e.g., via device
fingerprinting), the data processing is additionally based on § 25
(1) TTDSG. The consent can be revoked at any time. If your data is
required for the fulfillment of a contract or for the implementation
of pre-contractual measures, we process your data on the basis of
Art. 6(1)(b) GDPR. Furthermore, if your data is required for the
fulfillment of a legal obligation, we process it on the basis of
Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried
out on the basis of our legitimate interest according to Art.
6(1)(f) GDPR. Information on the relevant legal basis in each
individual case is provided in the following paragraphs of this
privacy policy.
Designation of a data protection officer
We have appointed a data protection officer.
Paul-Lukas Hoffschmidt
Alpha Sophia Technologies GmbH
An St. Magdalenen 8
50678
Cologne
GermanyPhone: +1 (857) 800-9488
E-mail:
hello@alphasophia.com
Information on data transfer to the USA and other non-EU countries
Among other things, we use tools of companies domiciled in the
United States or other from a data protection perspective non-secure
non-EU countries. If these tools are active, your personal data may
potentially be transferred to these non-EU countries and may be
processed there. We must point out that in these countries, a data
protection level that is comparable to that in the EU cannot be
guaranteed. For instance, U.S. enterprises are under a mandate to
release personal data to the security agencies and you as the data
subject do not have any litigation options to defend yourself in
court. Hence, it cannot be ruled out that U.S. agencies (e.g., the
Secret Service) may process, analyze, and permanently archive your
personal data for surveillance purposes. We have no control over
these processing activities.
Revocation of your consent to the processing of data
A wide range of data processing transactions are possible only
subject to your express consent. You can also revoke at any time any
consent you have already given us. This shall be without prejudice
to the lawfulness of any data collection that occurred prior to your
revocation.
Right to object to the collection of data in special cases; right to
object to direct advertising (Art. 21 GDPR)
IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR
(F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING
OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE
SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE
PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF
DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF
YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED
PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING
PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT
OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF
THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL
ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR). IF YOUR
PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT
ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR
AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY
TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS
AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR
PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT
ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled
to log a complaint with a supervisory agency, in particular in the
member state where they usually maintain their domicile, place of
work or at the place where the alleged violation occurred. The right
to log a complaint is in effect regardless of any other
administrative or court proceedings available as legal recourses.
Right to data portability
You have the right to have data that we process automatically on the
basis of your consent or in fulfillment of a contract handed over to
you or to a third party in a common, machine-readable format. If you
should demand the direct transfer of the data to another controller,
this will be done only if it is technically feasible.
Information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have
the right to demand information about your archived personal data,
their source and recipients as well as the purpose of the processing
of your data at any time. You may also have a right to have your
data rectified or eradicated. If you have questions about this
subject matter or any other questions about personal data, please do
not hesitate to contact us at any time.
Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far
as the processing of your personal data is concerned. To do so, you
may contact us at any time. The right to demand restriction of
processing applies in the following cases:
-
In the event that you should dispute the correctness of your
data archived by us, we will usually need some time to verify
this claim. During the time that this investigation is ongoing,
you have the right to demand that we restrict the processing of
your personal data.
-
If the processing of your personal data was/is conducted in an
unlawful manner, you have the option to demand the restriction
of the processing of your data instead of demanding the
eradication of this data.
-
If we do not need your personal data any longer and you need it
to exercise, defend or claim legal entitlements, you have the
right to demand the restriction of the processing of your
personal data instead of its eradication.
-
If you have raised an objection pursuant to Art. 21(1) GDPR,
your rights and our rights will have to be weighed against each
other. As long as it has not been determined whose interests
prevail, you have the right to demand a restriction of the
processing of your personal data. If you have restricted the
processing of your personal data, these data — with the
exception of their archiving — may be processed only
subject to your consent or to claim, exercise or defend legal
entitlements or to protect the rights of other natural persons
or legal entities or for important public interest reasons cited
by the European Union or a member state of the EU.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential
content, such as purchase orders or inquiries you submit to us as
the website operator, this website uses either an SSL or a TLS
encryption program. You can recognize an encrypted connection by
checking whether the address line of the browser switches from
“http://” to “https://” and also by the appearance of the lock icon
in the browser line. If the SSL or TLS encryption is activated, data
you transmit to us cannot be read by third parties.
Encrypted payment transactions on this website
If you are under an obligation to share your payment information
(e.g. account number if you give us the authority to debit your bank
account) with us after you have entered into a fee-based contract
with us, this information is required to process payments. Payment
transactions using common modes of paying (Visa/MasterCard, debit to
your bank account) are processed exclusively via encrypted SSL or
TLS connections. You can recognize an encrypted connection by
checking whether the address line of the browser switches from
“http://” to “https://” and also by the appearance of the lock icon
in the browser line. If the communication with us is encrypted,
third parties will not be able to read the payment information you
share with us.
Rejection of unsolicited e-mails
We herewith object to the use of contact information published in
conjunction with the mandatory information to be provided in our
Site Notice to send us promotional and information material that we
have not expressly requested. The operators of this website and its
pages reserve the express right to take legal action in the event of
the unsolicited sending of promotional information, for instance via
SPAM messages.
4. Recording of data on this website Cookies
Our websites and pages use what the industry refers to as “cookies.”
Cookies are small data packages that do not cause any damage to your
device. They are either stored temporarily for the duration of a
session (session cookies) or they are permanently archived on your
device (permanent cookies). Session cookies are automatically
deleted once you terminate your visit. Permanent cookies remain
archived on your device until you actively delete them, or they are
automatically eradicated by your web browser. Cookies can be issued
by us (first-party cookies) or by third-party companies (so-called
third-party cookies). Third-party cookies enable the integration of
certain services of third-party companies into websites (e.g.,
cookies for handling payment services). Cookies have a variety of
functions. Many cookies are technically essential since certain
website functions would not work in the absence of these cookies
(e.g., the shopping cart function or the display of videos). Other
cookies may be used to analyze user behavior or for promotional
purposes. Cookies, which are required for the performance of
electronic communication transactions, for the provision of certain
functions you want to use (e.g., for the shopping cart function) or
those that are necessary for the optimization (required cookies) of
the website (e.g., cookies that provide measurable insights into the
web audience), shall be stored on the basis of Art. 6(1)(f) GDPR,
unless a different legal basis is cited. The operator of the website
has a legitimate interest in the storage of required cookies to
ensure the technically error-free and optimized provision of the
operator's services. If your consent to the storage of the
cookies and similar recognition technologies has been requested, the
processing occurs exclusively on the basis of the consent obtained
(Art. 6(1)(a) GDPR and § 25 (1) TTDSG); this consent may be revoked
at any time. You have the option to set up your browser in such a
manner that you will be notified any time cookies are placed and to
permit the acceptance of cookies only in specific cases. You may
also exclude the acceptance of cookies in certain cases or in
general or activate the delete-function for the automatic
eradication of cookies when the browser closes. If cookies are
deactivated, the functions of this website may be limited. Which
cookies and services are used on this website can be found in this
privacy policy.
Consent with Usercentrics
This website uses the consent technology of Usercentrics to obtain
your consent to the storage of certain cookies on your device or for
the use of specific technologies, and to document the former in a
data protection compliant manner. The party offering this technology
is Usercentrics GmbH, Sendlinger Straße 7, 80331 München, Germany,
website:
https://usercentrics.com/
(hereinafter referred to as “Usercentrics”). Whenever you visit our
website, the following personal data will be transferred to
Usercentrics:
-
Your declaration(s) of consent or your revocation of your
declaration(s) of consent
- Your IP address
- Information about your browser
- Information about your device
-
The date and time you visited our website Moreover, Usercentrics
shall store a cookie in your browser to be able to allocate your
declaration(s) of consent or any revocations of the former. The
data that are recorded in this manner shall be stored until you
ask us to eradicate them, delete the Usercentrics cookie or
until the purpose for archiving the data no longer exists. This
shall be without prejudice to any mandatory legal retention
periods. The Usercentrics banner on this website has been
configured with the assistance of eRecht24. This can be
identified by the eRecht24 logo. To display the eRecht24 logo in
the banner, a connection to the image server of eRecht24 will be
established. In conjunction with this, the IP address is also
transferred; however, is only stored in anonymized form in the
server logs. The image server of eRecht24 is located in Germany
with a German provider. The banner as such is provided
exclusively by Usercentrics. Usercentrics uses cookies to obtain
the declarations of consent mandated by law. The legal basis for
the use of specific technologies is Art. 6(1)(c) GDPR.
Data processing
We have concluded a data processing agreement (DPA) for the use of
the above-mentioned service. This is a contract mandated by data
privacy laws that guarantees that they process personal data of our
website visitors only based on our instructions and in compliance
with the GDPR.
Contact form
If you submit inquiries to us via our contact form, the information
provided in the contact form as well as any contact information
provided therein will be stored by us in order to handle your
inquiry and in the event that we have further questions. We will not
share this information without your consent. The processing of these
data is based on Art. 6(1)(b) GDPR, if your request is related to
the execution of a contract or if it is necessary to carry out
pre-contractual measures. In all other cases the processing is based
on our legitimate interest in the effective processing of the
requests addressed to us (Art. 6(1)(f) GDPR) or on your agreement
(Art. 6(1)(a) GDPR) if this has been requested; the consent can be
revoked at any time. The information you have entered into the
contact form shall remain with us until you ask us to eradicate the
data, revoke your consent to the archiving of data or if the purpose
for which the information is being archived no longer exists (e.g.,
after we have concluded our response to your inquiry). This shall be
without prejudice to any mandatory legal provisions, in particular
retention periods.
Request by e-mail, telephone, or fax
If you contact us by e-mail, telephone or fax, your request,
including all resulting personal data (name, request) will be stored
and processed by us for the purpose of processing your request. We
do not pass these data on without your consent. These data are
processed on the basis of Art. 6(1)(b) GDPR if your inquiry is
related to the fulfillment of a contract or is required for the
performance of pre-contractual measures. In all other cases, the
data are processed on the basis of our legitimate interest in the
effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR)
or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been
obtained; the consent can be revoked at any time. The data sent by
you to us via contact requests remain with us until you request us
to delete, revoke your consent to the storage or the purpose for the
data storage lapses (e.g. after completion of your request).
Mandatory statutory provisions — in particular statutory
retention periods — remain unaffected.
Communication via WhatsApp
For communication with our customers and other third parties, one of
the services we use is the instant messaging service WhatsApp. The
provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand
Canal Harbour, Dublin 2, Ireland. The communication is encrypted
end-to-end (peer-to-peer), which prevents WhatsApp or other third
parties from gaining access to the communication content. However,
WhatsApp does gain access to metadata created during the
communication process (for example, sender, recipient, and time). We
would also like to point out that WhatsApp has stated that it shares
personal data of its users with its U.S.-based parent company Meta.
Further details on data processing can be found in the WhatsApp
privacy policy at:
https://www.whatsapp.com/legal/#privacy-policy. The use of WhatsApp is based on our legitimate interest in
communicating as quickly and effectively as possible with customers,
interested parties and other business and contractual partners (Art.
6(1)(f) GDPR). If a corresponding consent has been requested, data
processing is carried out exclusively on the basis of the consent;
this consent may be revoked at any time with effect for the future.
The communication content exchanged between and on WhatsApp remains
with us until you request us to delete it, revoke your consent to
storage or the purpose for which the data is stored ceases to apply
(e.g. after your request has been processed). Mandatory legal
provisions, in particular retention periods, remain unaffected. We
use WhatsApp in the “WhatsApp Business” variant. transmission to the
US is based on the Standard Contractual Clauses (SCC) of the
European Commission. Details can be found here:
https://www.whatsapp.com/legal/business-data-transfer-addendum?lang=en. We have set up our WhatsApp accounts in such a way that there is
no automatic synchronization of data with the address book on the
smartphones in use. We have concluded a data processing agreement
(DPA) with the above-mentioned provider.
Typeform
We have integrated Typeform on this website. The provider is
TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain
(hereinafter “Typeform”). Typeform enables us to create online forms
and integrate them into our website. The data you enter in our
Typeform forms is stored on Typeform's servers until you ask us
to delete it, revoke any consent you have given to store it, or the
purpose for storing the data no longer applies (e.g., after we have
finished processing your request). Mandatory legal provisions
— in particular, retention periods — remain unaffected
by this. The use of Typeform is based on Art. 6(1)(f) GDPR. The
website operator has a legitimate interest in functioning online
forms. If appropriate consent has been obtained, the processing is
carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25
(1) TTDSG, insofar the consent includes the storage of cookies or
the access to information in the user's end device (e.g.,
device fingerprinting) within the meaning of the TTDSG. This consent
can be revoked at any time.
Data processing
We have concluded a data processing agreement (DPA) for the use of
the above-mentioned service. This is a contract mandated by data
privacy laws that guarantees that they process personal data of our
website visitors only based on our instructions and in compliance
with the GDPR.
Google Forms
We have integrated Google Forms into this website. The provider is
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland (hereinafter referred to as „Google”). Google Forms enables
us to generate online forms to record messages, inquiries and other
entries entered by visitors to our website. All entries you make
will be processed on Google's servers. Google Forms stores a
cookie in your browser that contains a unique ID (NID cookie). This
cookie stores a wide range of information, including, for example
your language settings. We use Google Forms on the basis of our
legitimate interest in determining your needs as effectively as
possible (Art. 6(1)(f) GDPR). If appropriate consent has been
obtained, the processing is carried out exclusively on the basis of
Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes
the storage of cookies or the access to information in the
user's end device (e.g., device fingerprinting) within the
meaning of the TTDSG. This consent can be revoked at any time. The
data you enter into the form will remain in our possession until you
ask us to delete them, revoke your consent to the archiving of your
data or until the purpose of archiving the data no longer exists
(e.g., upon completion of the processing of your inquiry). This does
not affect mandatory statutory provisions — in particular
those governing retention periods. For more information, please
consult Google's Data Privacy Policy at
https://policies.google.com/.
Data processing
We have concluded a data processing agreement (DPA) for the use of
the above-mentioned service. This is a contract mandated by data
privacy laws that guarantees that they process personal data of our
website visitors only based on our instructions and in compliance
with the GDPR.
Use of Chatbots
We use chatbots to communicate with you. Chatbots have the
capability to respond to your questions and other entries without
the assistance of humans. To do this, chatbots analyze your entries
and other data to give matching responses (e.g., names, email
addresses and other contact information, customer numbers and other
identification, orders, and chat progresses). The chatbot can also
register your IP address, log files, location information and other
meta data. The data is archived on the servers of the chatbot
provider. It is possible to generate user profiles based on the
recorded data. Moreover, the data can be used to display
interest-related advertising if the other legal requirements are met
(in particular if consent has been obtained). Moreover, it is
possible to link chatbots to analytical and advertising tools. The
recorded data can also be used to improve our chatbots and their
response patterns (machine learning). We or the chatbot operator
retain the data you enter until you ask us to delete it, revoke your
consent to archive it or if the purpose for the data storage is no
longer in effect (e.g., once your inquiry has been fully processed).
This does not affect mandatory statutory provisions — in
particular, retention time frames. The legal basis for the use of
chatbots is Art. 6(1)(b) GDPR, if the chatbot is used to negotiate a
contract or in conjunction with the fulfillment of a contract. If
appropriate consent has been obtained, the processing is carried out
exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG,
insofar the consent includes the storage of cookies or the access to
information in the user's end device (e.g., device
fingerprinting) within the meaning of the TTDSG. This consent can be
revoked at any time. In all other cases, the use is based on our
legitimate interest in the most effective client communication
possible (Art. 6(1)(f) GDPR).
Calendly
You can make appointments with us on our website. We use the
“Calendly” tool for booking appointments. The provider is Calendly
LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA
(hereinafter “Calendly”). To book an appointment, enter the requested
data and the desired date in the screen provided. The data entered
will be used for planning, executing and, if necessary, for the
follow-up of the appointment. The appointment data is stored for us on
the servers of Calendly, whose privacy policy can be viewed here:
https://calendly.com/de/pages/privacy. The data you have entered will remain with us until you ask us to
delete it, revoke your consent for storage or the purpose for which
the data was stored ceases to apply. Mandatory legal provisions, in
particular retention periods, remain unaffected. The legal basis for
data processing is Art. 6(1)(f) GDPR. The website operator has a
justified interest in making appointments with interested parties and
customers in as uncomplicated a manner as possible. If appropriate
consent has been obtained, the processing is carried out exclusively
on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the
consent includes the storage of cookies or the access to information
in the user's end device (e.g., device fingerprinting) within the
meaning of the TTDSG. This consent can be revoked at any time. The
data transfer to the USA is based on the standard contractual clauses
of the European Commission. Details can be found here:
https://calendly.com/pages/dpa.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
Google Calendar
On our website, you have the option to set up appointments with our
company. For planning purposes, we use Google Calendar. The provider
is Google Ireland Limited (“Google”), Gordon House, Barrow Street,
Dublin 4, Ireland (hereinafter referred to as “Google”). To make
reservations for an appointment, you will enter the requested data
and your preferred meeting date into the dedicated screen. The data
you enter will be used to plan, conduct, and possibly also follow up
on the appointment. The appointment information will be stored on
the servers of Google Calendar on our behalf. You may review the
company's data protection policy here:
https://policies.google.com/privacy. The data recorded in this manner will be stored until you ask us
to delete them, revoke your consent to the archiving of your data or
until the purpose of archiving the data no longer exists. This does
not affect mandatory statutory provisions — in particular
those governing retention periods. The legal basis for the
processing of the data is Art. 6(1)(f) GDPR. The operator of the
website has a legitimate interest in ensuring that appointments with
customers and prospective customers can be scheduled as easily as
possible. If appropriate consent has been obtained, the processing
is carried out exclusively on the basis of Art. 6(1)(a) GDPR and §
25 (1) TTDSG, insofar the consent includes the storage of cookies or
the access to information in the user's end device (e.g.,
device fingerprinting) within the meaning of the TTDSG. This consent
can be revoked at any time. Data transfer to the US is based on the
standard contractual clauses of the EU Commission. Details can be
found here:
https://workspace.google.com/terms/dpa_terms.html
and
https://cloud.google.com/terms/sccs.
Data processing
We have concluded a data processing agreement (DPA) for the use of
the above-mentioned service. This is a contract mandated by data
privacy laws that guarantees that they process personal data of our
website visitors only based on our instructions and in compliance
with the GDPR.
Microsoft Bookings
Our website gives you the option to schedule appointments with us.
We use Microsoft Bookings to book these appointments. The provider
is Microsoft Ireland Operations Limited, One Microsoft Place, South
County Business Park, Leopardstown, Dublin 18, Ireland,
https://learn.microsoft.com/en-us/microsoft-365/bookings/?view=o365-worldwide. To book an appointment, enter the requested data and the desired
date in the form provided. The data entered will be used for
planning, conducting and, if necessary, for the follow-up of the
appointment. The appointment data will be stored for us on the
servers of Microsoft Bookings, whose privacy policy you can view
here:
https://privacy.microsoft.com/de-de/privacystatement. The data recorded in this manner will be stored until you ask us
to delete them, revoke your consent to the archiving of your data or
until the purpose of archiving the data no longer exists. This does
not affect mandatory statutory provisions — in particular
those governing retention periods. The legal basis for the
processing of the data is Art. 6(1)(f) GDPR. The operator of the
website has a legitimate interest in ensuring that appointments with
customers and prospective customers can be scheduled as easily as
possible. If appropriate consent has been obtained, the processing
is carried out exclusively on the basis of Art. 6(1)(a) GDPR and §
25 (1) TTDSG, insofar the consent includes the storage of cookies or
the access to information in the user's end device (e.g.,
device fingerprinting) within the meaning of the TTDSG. This consent
can be revoked at any time. Data transfer to the US is based on the
standard contractual clauses of the EU Commission. Details can be
found here:
https://learn.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses.
Hubspot CRM
We use Hubspot CRM on this website. The provider is Hubspot Inc. 25
Street, Cambridge, MA 02141 USA (hereafter Hubspot CRM). Hubspot CRM
enables us, among other things, to manage existing and potential
customers and customer contacts, to communicate with you and to plan
and execute marketing activities in line with your interests.
Hubspot CRM enables us to capture, sort and analyze customer
interactions via email, social media, or phone across multiple
channels. The personal data collected in this way can be evaluated
and used for communication with the potential customer or marketing
measures (e.g., newsletter mailings). Hubspot CRM also enables us to
collect and analyze the user behavior of our contacts on our
website. The use of Hubspot CRM is based on Art. 6(1)(f) GDPR. The
website operator has a legitimate interest in the most efficient
customer management and customer communication. If appropriate
consent has been obtained, the processing is carried out exclusively
on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the
consent includes the storage of cookies or the access to information
in the user's end device (e.g., device fingerprinting) within
the meaning of the TTDSG. This consent can be revoked at any time.
For details, please refer to Hubspot's privacy policy:
https://legal.hubspot.com/de/privacy-policy. Data transmission to the US is based on the standard contractual
clauses of the EU Commission. Details can be found here:
https://www.hubspot.de/data-privacy/privacy-shield.
Data processing
We have concluded a data processing agreement (DPA) for the use of
the above-mentioned service. This is a contract mandated by data
privacy laws that guarantees that they process personal data of our
website visitors only based on our instructions and in compliance
with the GDPR.
Registration on this website
You have the option to register on this website to be able to use
additional website functions. We shall use the data you enter only
for the purpose of using the respective offer or service you have
registered for. The required information we request at the time of
registration must be entered in full. Otherwise, we shall reject the
registration. To notify you of any important changes to the scope of
our portfolio or in the event of technical modifications, we shall
use the e-mail address provided during the registration process. We
shall process the data entered during the registration process on
the basis of your consent (Art. 6(1)(a) GDPR). The data recorded
during the registration process shall be stored by us as long as you
are registered on this website. Subsequently, such data shall be
deleted. This shall be without prejudice to mandatory statutory
retention obligations.
Registration with Google
Instead of registering directly on this website, you can register
with Google. The provider of this service is Google Ireland Limited
(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. To
register with Google, you must only enter your Google name and
password. Google will identify you and confirm your identity to our
website. When you sign in with Google, we may be able to use certain
information in your account to complete your profile with us. You
decide whether you want this information to be used and if so, which
information it is, within the framework of your Google security
settings, which you can find here:
https://myaccount.google.com/security
and
https://myaccount.google.com/permissions. The data processing associated with Google's registration is
based on our legitimate interest in making the registration process
as simple as possible for our users (Art. 6(1)(f) GDPR). Since the
use of the registration function is voluntary and the users
themselves can decide on the respective access options, no
conflicting predominant rights of the data subjects are apparent.
Registration with Facebook Connect
Instead of registering directly on this website, you also have the
option to register using Facebook Connect. The provider of this
service is Meta Platforms Ireland Limited, 4 Grand Canal Square,
Dublin 2, Ireland. According to Facebook's statement the
collected data will be transferred to the USA and other third-party
countries too. If you decide to register via Facebook Connect and
click on the “Login with Facebook”/„Connect with Facebook” button,
you will be automatically connected to the Facebook platform. There,
you can log in using your username and password. As a result, your
Facebook profile will be linked to this website or our services.
This link gives us access to the data you have archived with
Facebook. These data comprise primarily the following:
- - Facebook name
- - Facebook profile photo and cover photo
- - Facebook cover photo
- - E-mail address archived with Facebook
- - Facebook-ID
- - Facebook friends lists
- - Facebook Likes (“Likes” information)
- - Date of birth
- - Gender
- - Country
- - Language
This information will be used to set up, provide and customize your
account. The registration via Facebook Connect and the affiliated
data processing transactions are implemented on the basis of your
consent (Art. 6(1)(a) GDPR). You may revoke this consent at any
time, which shall affect all future transactions thereafter. Insofar
as personal data is collected on our website with the help of the
tool described here and forwarded to Facebook, we and Meta Platforms
Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin
2, Ireland are jointly responsible for this data processing (Art. 26
DSGVO). The joint responsibility is limited exclusively to the
collection of the data and its forwarding to Facebook. The
processing by Facebook that takes place after the onward transfer is
not part of the joint responsibility. The obligations incumbent on
us jointly have been set out in a joint processing agreement. The
wording of the agreement can be found under:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the
privacy information when using the Facebook tool and for the
privacy-secure implementation of the tool on our website. Facebook
is responsible for the data security of Facebook products. You can
assert data subject rights (e.g., requests for information)
regarding data processed by Facebook directly with Facebook. If you
assert the data subject rights with us, we are obliged to forward
them to Facebook. Data transmission to the US is based on the
Standard Contractual Clauses (SCC) of the European Commission.
Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://de-de.facebook.com/help/566994660333381
and
https://www.facebook.com/policy.php. For more information, please consult the Facebook Terms of Use
and the Facebook Data Privacy Policies. Use these links to access
this information:
https://www.facebook.com/about/privacy/
and
https://www.facebook.com/legal/terms/.
The comment function on this website
When you use the comment function on this website, information on
the time the comment was generated and your e-mail-address and, if
you are not posting anonymously, the username you have selected will
be archived in addition to your comments.
Storage of the IP address
Our comment function stores the IP addresses of all users who enter
comments. Given that we do not review the comments prior to
publishing them, we need this information in order to take action
against the author in the event of rights violations, such as
defamation or propaganda.
Subscribing to comments
As a user of this website, you have the option to subscribe to
comments after you have registered. You will receive a confirmation
e-mail, the purpose of which is to verify whether you are the actual
holder of the provided e-mail address. You can deactivate this
function at any time by following a respective link in the
information e-mails. The data entered in conjunction with
subscriptions to comments will be deleted in this case. However, if
you have communicated this information to us for other purposes and
from a different location (e.g., when subscribing to the
newsletter), the data shall remain in our possession.
Storage period for comments
Comments and any affiliated information shall be stored by us and
remain on this website until the content the comment pertained to
has been deleted in its entirety or if the comments had to be
deleted for legal reasons (e.g., insulting comments).
Legal basis
Comments are stored on the basis of your consent (Art. 6(1)(a)
GDPR). You have the right to revoke at any time any consent you have
already given us. To do so, all you are required to do is sent us an
informal notification via e-mail. This shall be without prejudice to
the lawfulness of any data collection that occurred prior to your
revocation.
5. Social media eRecht24 Safe Sharing Tool
Users may share the content of this website and its pages in a data
protection law compliant manner on social networks, such as Facebook,
Twitter et al. For this purpose, this website uses the
eRecht24 Safe Sharing Tool. This tool does not establish a direct connection between the network
and the user until the user has actively clicked on one of the buttons.
The click on this button constitutes content as defined in Art. 6(1)(a)
GDPR and § 25 (1) TTDSG. This consent may be revoked by the user at any
time, which shall affect all future actions. This tool does not
automatically transfer user data to the operators of these platforms. If
the user is registered with one of the social networks, an information
window will pop up as soon as the social media elements of Facebook,
Twitter et al is used, which allows the user to confirm the text prior
to sending it. Our users have the option to share the content of this
website and its page in a data protection law compliant manner on social
networks, without entire browsing histories are being generated by the
operators of these networks. This service is used to obtain the consent
to the use of certain technologies required by law. The legal basis for
this is Art. 6(1)(c) GDPR.
Facebook
We have integrated elements of the social network Facebook on this
website. The provider of this service is Meta Platforms Ireland Limited,
4 Grand Canal Square, Dublin 2, Ireland. According to Facebook's
statement the collected data will be transferred to the USA and other
third-party countries too. An overview of the Facebook social media
elements is available under the following link:
https://developers.facebook.com/docs/plugins/. If the social media element has been activated, a direct connection
between your device and the Facebook server will be established. As a
result, Facebook will receive information confirming your visit to this
website with your IP address. If you click on the Facebook Like button
while you are logged into your Facebook account, you can link content of
this website to your Facebook profile. Consequently, Facebook will be
able to allocate your visit to this website to your user account. We
have to emphasize that we as the provider of the website do not receive
any information on the content of the transferred data and its use by
Facebook. For more information, please consult the Data Privacy Policy
of Facebook at:
https://de-de.facebook.com/privacy/explanation. If your approval (consent) has been obtained the use of the
abovementioned service shall occur on the basis of Art. 6 Sect. 1 lit. a
GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may be
revoked at any time. If your consent was not obtained, the use of the
service will occur on the basis of our legitimate interest in making our
information as comprehensively visible as possible on social media.
Insofar as personal data is collected on our website with the help of
the tool described here and forwarded to Facebook, we and Meta Platforms
Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2,
Ireland are jointly responsible for this data processing (Art. 26
DSGVO). The joint responsibility is limited exclusively to the
collection of the data and its forwarding to Facebook. The processing by
Facebook that takes place after the onward transfer is not part of the
joint responsibility. The obligations incumbent on us jointly have been
set out in a joint processing agreement. The wording of the agreement
can be found under:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the
privacy information when using the Facebook tool and for the
privacy-secure implementation of the tool on our website. Facebook is
responsible for the data security of Facebook products. You can assert
data subject rights (e.g., requests for information) regarding data
processed by Facebook directly with Facebook. If you assert the data
subject rights with us, we are obliged to forward them to Facebook. Data
transmission to the US is based on the Standard Contractual Clauses
(SCC) of the European Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://de-de.facebook.com/help/566994660333381
and
https://www.facebook.com/policy.php.
Twitter
We have integrated functions of the social media platform Twitter into
this website. These functions are provided by Twitter International
Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07,
Ireland. If the social media element has been activated, a direct
connection between your device and Twitter's server will be
established. As a result, Twitter will receive information on your visit
to this website. While you use Twitter and the “Re-Tweet” function,
websites you visit are linked to your Twitter account and disclosed to
other users. We must point out, that we, the providers of the website
and its pages do not know anything about the content of the data
transferred and the use of this information by Twitter. For more
details, please consult Twitter's Data Privacy Declaration at:
https://twitter.com/en/privacy. If your approval (consent) has been obtained the use of the
abovementioned service shall occur on the basis of Art. 6(1)(a) GDPR and
§ 25 TTDSG (German Telecommunications Act). Such consent may be revoked
at any time. If your consent was not obtained, the use of the service
will occur on the basis of our legitimate interest in making our
information as comprehensively visible as possible on social media. Data
transmission to the US is based on the Standard Contractual Clauses
(SCC) of the European Commission. Details can be found here:
https://gdpr.twitter.com/en/controller-to-controller-transfers.html. You have the option to reset your data protection settings on Twitter
under the account settings at
https://twitter.com/account/settings.
Instagram
We have integrated functions of the public media platform Instagram
into this website. These functions are being offered by Meta Platforms
Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2,
Ireland. If the social media element has been activated, a direct
connection between your device and Instagram's server will be
established. As a result, Instagram will receive information on your
visit to this website. If you are logged into your Instagram account,
you may click the Instagram button to link contents from this website
to your Instagram profile. This enables Instagram to allocate your
visit to this website to your user account. We have to point out that
we as the provider of the website and its pages do not have any
knowledge of the content of the data transferred and its use by
Instagram. If your approval (consent) has been obtained the use of the
abovementioned service shall occur on the basis of Art. 6(1)(a) GDPR
and § 25 TTDSG (German Telecommunications Act). Such consent may be
revoked at any time. If your consent was not obtained, the use of the
service will occur on the basis of our legitimate interest in making
our information as comprehensively visible as possible on social
media. Insofar as personal data is collected on our website with the
help of the tool described here and forwarded to Facebook or
Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal
Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible
for this data processing (Art. 26 DSGVO). The joint responsibility is
limited exclusively to the collection of the data and its forwarding
to Facebook or Instagram. The processing by Facebook or Instagram that
takes place after the onward transfer is not part of the joint
responsibility. The obligations incumbent on us jointly have been set
out in a joint processing agreement. The wording of the agreement can
be found under:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the
privacy information when using the Facebook or Instagram tool and for
the privacy-secure implementation of the tool on our website. Facebook
is responsible for the data security of Facebook or Instagram
products. You can assert data subject rights (e.g., requests for
information) regarding data processed by Facebook or Instagram
directly with Facebook. If you assert the data subject rights with us,
we are obliged to forward them to Facebook. Data transmission to the
US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum,
https://help.instagram.com/519522125107875
and
https://de-de.facebook.com/help/566994660333381. For more information on this subject, please consult
Instagram's Data Privacy Declaration at:
https://instagram.com/about/legal/privacy/.
LinkedIn
This website uses elements of the LinkedIn network. The provider is
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin
2, Ireland. Any time you access a page of this website that contains
elements of LinkedIn, a connection to LinkedIn's servers is
established. LinkedIn is notified that you have visited this website
with your IP address. If you click on LinkedIn's “Recommend”
button and are logged into your LinkedIn account at the time, LinkedIn
will be in a position to allocate your visit to this website to your
user account. We have to point out that we as the provider of the
websites do not have any knowledge of the content of the transferred
data and its use by LinkedIn. If your approval (consent) has been
obtained the use of the abovementioned service shall occur on the
basis of Art. 6 (1)(a) GDPR and § 25 TTDSG (German Telecommunications
Act). Such consent may be revoked at any time. If your consent was not
obtained, the use of the service will occur on the basis of our
legitimate interest in making our information as comprehensively
visible as possible on social media. Data transmission to the US is
based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://www.linkedin.com/help/linkedin/answer/62538/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=en. For further information on this subject, please consult
LinkedIn's Data Privacy Declaration at:
https://www.linkedin.com/legal/privacy-policy.
6. Analysis tools and advertising Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited,
Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager
is a tool that allows us to integrate tracking or statistical tools
and other technologies on our website. The Google Tag Manager itself
does not create any user profiles, does not store cookies, and does
not carry out any independent analyses. It only manages and runs the
tools integrated via it. However, the Google Tag Manager does collect
your IP address, which may also be transferred to Google's parent
company in the United States. The Google Tag Manager is used on the
basis of Art. 6(1)(f) GDPR. The website operator has a legitimate
interest in the quick and uncomplicated integration and administration
of various tools on his website. If appropriate consent has been
obtained, the processing is carried out exclusively on the basis of
Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the
storage of cookies or the access to information in the user's end
device (e.g., device fingerprinting) within the meaning of the TTDSG.
This consent can be revoked at any time.
Google Analytics
This website uses functions of the web analysis service Google
Analytics. The provider of this service is Google Ireland Limited
(“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google
Analytics enables the website operator to analyze the behavior
patterns of website visitors. To that end, the website operator
receives a variety of user data, such as pages accessed, time spent on
the page, the utilized operating system and the user's origin.
This data is summarized in a user-ID and assigned to the respective
end device of the website visitor. Furthermore, Google Analytics
allows us to record your mouse and scroll movements and clicks, among
other things. Google Analytics uses various modeling approaches to
augment the collected data sets and uses machine learning technologies
in data analysis. Google Analytics uses technologies that make the
recognition of the user for the purpose of analyzing the user behavior
patterns (e.g., cookies or device fingerprinting). The website use
information recorded by Google is, as a rule transferred to a Google
server in the United States, where it is stored. The use of these
services occurs on the basis of your consent pursuant to Art. 6(1)(a)
GDPR and § 25(1) TTDSG. You may revoke your consent at any time. Data
transmission to the US is based on the Standard Contractual Clauses
(SCC) of the European Commission. Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/.
Browser plug-in
You can prevent the recording and processing of your data by Google by
downloading and installing the browser plugin available under the
following link:
https://tools.google.com/dlpage/gaoptout?hl=en. For more information about the handling of user data by Google
Analytics, please consult Google's Data Privacy Declaration at:
https://support.google.com/analytics/answer/6004245?hl=en.
Google Signals
We use Google Signals. Whenever you visit our website, Google
Analytics records, among other things, your location, the progression
of your search and YouTube progression as well as demographic data
(site visitor data). This data may be used for customized advertising
with the assistance of Google Signal. If you have a Google account,
your site visitor information will be linked to your Google account by
Google Signal and used to send you customized promotional messages.
The data is also used to compile anonymized statistics of our
users' online patterns.
Contract data processing
We have executed a contract data processing agreement with Google and
are implementing the stringent provisions of the German data
protection agencies to the fullest when using Google Analytics.
Hotjar
This website utilizes Hotjar. The provider is Hotjar Ltd., Level 2, St
Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000,
Malta, Europe (website:
https://www.hotjar.com). Hotjar is a tool used to analyze your user patterns on this
website. Hotjar allows us to for instance record your mouse and scroll
movements as well as your click. During this process, Hotjar also has
the capability to determine how long your cursor remained in a certain
position. Based on this information, Hotjar compiles so-called
Heatmaps, that make possible to determine which parts of the website
the website visitor reviews with preference. We are also able to
determine how long you have stayed on a page of this website and when
you left. We can also determine at which point you suspended making
entries into a contact form (so-called conversion funnels).
Furthermore, Hotjar can be deployed to obtain direct feedback from
website visitors. This function aims at the improvement of the website
offerings of the website operator. Hotjar uses technologies that make
it possible to recognize the user for the purpose of analyzing the
user patterns (e.g., cookies or the deployment of device
fingerprinting). If your approval (consent) has been obtained the use
of the abovementioned service shall occur on the basis of Art. 6(1)(a)
GDPR and § 25 TTDSG (German Telecommunications Act). Such consent may
be revoked at any time. If your consent was not obtained, the use of
the service will occur on the basis of Art. 6(1)(f) GDPR; the website
operator has a legitimate interest in the analysis of user patterns to
optimize both, the web presentation and the operator's
advertising activities.
Deactivation of Hotjar
If you would like to deactivate the recording of data by Hotjar,
please click on the link below and follow the instructions provided
under the link:
https://www.hotjar.com/policies/do-not-track/. Please keep in mind that you will have to separately deactivate
Hotjar for every browser and every device. For more detailed
information about Hotjar and the data to be recorded, please consult
the Data Privacy Declaration of Hotjar under the following link:
https://www.hotjar.com/privacy.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
Google Optimize
We have incorporated Google Optimize on this website. The provider is
Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin
4, Ireland (hereinafter Google Optimize). Google Optimize allows us to
optimize our website by performing tests (A/B Testing) and
personalizations of the website. For this purpose, Google Optimize
processes the IP address of website visitors. The personal data
collected may subsequently be processed by other analysis tools. The
use of Google Optimize is based on Art. 6 (1)(f) GDPR. The website
operator has a legitimate interest in an optimal arrangement of its
online presence. If a corresponding consent has been requested, the
processing is carried out exclusively on the basis of Art. 6 (1)(a)
GDPR and §25 (1) TTDSG, insofar as the consent includes the storage of
cookies or access to information in the user's terminal device (e.g.,
for device fingerprinting) as defined by the TTDSG. This consent can
be revoked at any time. For more details, please refer to the
provider's privacy policy:
https://business.safety.google/adsprocessorterms/. Data transfer to the US is based on the standard contractual
clauses of the EU Commission. Details can be found here:
https://policies.google.com/privacy/frameworks
and
https://privacy.google.com/businesses/controllerterms/mccs/.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
Google Ads
The website operator uses Google Ads. Google Ads is an online
promotional program of Google Ireland Limited (“Google”), Gordon
House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to
display ads in the Google search engine or on third-party websites, if
the user enters certain search terms into Google (keyword targeting).
It is also possible to place targeted ads based on the user data
Google has in its possession (e.g., location data and interests;
target group targeting). As the website operator, we can analyze these
data quantitatively, for instance by analyzing which search terms
resulted in the display of our ads and how many ads led to respective
clicks. The use of these services occurs on the basis of your consent
pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your
consent at any time. Data transmission to the US is based on the
Standard Contractual Clauses (SCC) of the European Commission. Details
can be found here:
https://policies.google.com/privacy/frameworks
and
https://privacy.google.com/businesses/controllerterms/mccs/.
Google Ads Remarketing
This website uses the functions of Google Ads Remarketing. The
provider of these solutions is Google Ireland Limited (“Google”),
Gordon House, Barrow Street, Dublin 4, Ireland. With Google Ads
Remarketing, we can assign people who interact with our online
offering to specific target groups in order to subsequently display
interest-based advertising to them in the Google advertising network
(remarketing or retargeting). Moreover, it is possible to link the
advertising target groups generated with Google Ads Remarketing to
device encompassing functions of Google. This makes it possible to
display interest-based customized advertising messages, depending on
your prior usage and browsing patterns on a device (e.g., cell phone)
in a manner tailored to you as well as on any of your devices (e.g.,
tablet or PC). If you have a Google account, you have the option to
object to personalized advertising under the following link:
https://www.google.com/settings/ads/onweb/. The use of these services occurs on the basis of your consent
pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your
consent at any time. For further information and the pertinent data
protection regulations, please consult the Data Privacy Policies of
Google at:
https://policies.google.com/technologies/ads?hl=en.
Formation of Target Groups with Customer Reconciliation
For the formation of target groups, we use, among other things, the
Google Ads Remarketing customer reconciliation feature. To achieve
this, we transfer certain customer data (e.g., email addresses) from
our customer lists to Google. If the respective customers are Google
users and are logged into their Google accounts, matching advertising
messages within the Google network (e.g., YouTube, Gmail or in a
search engine) are displayed for them to view.
Google Conversion-Tracking
This website uses Google Conversion Tracking. The provider of this
service is Google Ireland Limited (“Google”), Gordon House, Barrow
Street, Dublin 4, Ireland. With the assistance of Google Conversion
Tracking, we are in a position to recognize whether the user has
completed certain actions. For instance, we can analyze the how
frequently which buttons on our website have been clicked and which
products are reviewed or purchased with particular frequency. The
purpose of this information is to compile conversion statistics. We
learn how many users have clicked on our ads and which actions they have
completed. We do not receive any information that would allow us to
personally identify the users. Google as such uses cookies or comparable
recognition technologies for identification purposes. The use of these
services occurs on the basis of your consent pursuant to Art. 6(1)(a)
GDPR and § 25(1) TTDSG. You may revoke your consent at any time. For
more information about Google Conversion Tracking, please review
Google's data protection policy at:
https://policies.google.com/privacy?hl=en Meta-Pixel (formerly Facebook Pixel) To measure conversion rates, this
website uses the visitor activity pixel of Facebook/Meta. The provider
of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square,
Dublin 2, Ireland. According to Facebook's statement the collected
data will be transferred to the USA and other third-party countries too.
This tool allows the tracking of page visitors after they have been
linked to the website of the provider after clicking on a Facebook ad.
This makes it possible to analyze the effectiveness of Facebook ads for
statistical and market research purposes and to optimize future
advertising campaigns. For us as the operators of this website, the
collected data is anonymous. We are not in a position to arrive at any
conclusions as to the identity of users. However, Facebook archives the
information and processes it, so that it is possible to make a
connection to the respective user profile and Facebook is in a position
to use the data for its own promotional purposes in compliance with the
Facebook Data Usage Policy (
https://www.facebook.com/about/privacy/). This enables Facebook to display ads on Facebook pages as well as in
locations outside of Facebook. We as the operator of this website have
no control over the use of such data. The use of these services occurs
on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1)
TTDSG. You may revoke your consent at any time. Within the meta pixel,
we are using the expanded alignment function. The expanded alignment
allows us to transfer to Meta (Facebook) different types of data (e.g.,
place of residence, federal state, zip code, hashed email addresses,
names, gender, date of birth or phone number) of our customers and
prospects we collect through our website. As a result of this
activation, we can tailor the offers presented in our advertising
campaigns on Facebook to individuals interested in what we offer even
more precisely. Moreover, this expanded alignment optimizes the
allocation of website conversions and expands custom audiences. Insofar
as personal data is collected on our website with the help of the tool
described here and forwarded to Facebook, we and Meta Platforms Ireland
Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
are jointly responsible for this data processing (Art. 26 DSGVO). The
joint responsibility is limited exclusively to the collection of the
data and its forwarding to Facebook. The processing by Facebook that
takes place after the onward transfer is not part of the joint
responsibility. The obligations incumbent on us jointly have been set
out in a joint processing agreement. The wording of the agreement can be
found under:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing the
privacy information when using the Facebook tool and for the
privacy-secure implementation of the tool on our website. Facebook is
responsible for the data security of Facebook products. You can assert
data subject rights (e.g., requests for information) regarding data
processed by Facebook directly with Facebook. If you assert the data
subject rights with us, we are obliged to forward them to Facebook. Data
transmission to the US is based on the Standard Contractual Clauses
(SCC) of the European Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum
and
https://de-de.facebook.com/help/566994660333381. In Facebook's Data Privacy Policies, you will find additional
information about the protection of your privacy at:
https://www.facebook.com/about/privacy/. You also have the option to deactivate the remarketing function
“Custom Audiences” in the ad settings section under
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook. If you do not have a
Facebook account, you can deactivate any user-based advertising by
Facebook on the website of the European Interactive Digital Advertising
Alliance:
http://www.youronlinechoices.com/de/praferenzmanagement/.
Facebook Conversion API
We have integrated Facebook Conversion API into this website. The
provider of this service is Meta Platforms Ireland Limited, 4 Grand
Canal Square, Dublin 2, Ireland. However, based on the information
provided by Facebook, the recorded data is also transmitted to the
United States and other Non-EU and Non-EEZ countries. Facebook
Conversion API enables us to record the interactions of our website
visitors with our website and to share this information with Facebook
to improve the promotional performance with Facebook. To do this, in
particular the time you accessed the site, the website you accessed,
your IP address and your user agent, as well as, if applicable, other
specific data (e.g., purchased products, value of the shopping cart
and currency) are tracked. For a complete overview of the tracked
data, please visit:
https://developers.facebook.com/docs/marketing-api/conversions-api/parameters. The use of this service occurs on the basis of your consent
pursuant to Art. 6 Sect. 1 lit. a GDPR and § 25 Sect. 1 TTDSG. You may
revoke your consent at any time. If personal data is collected on our
website with the assistance of the tool described herein and if it is
shared with Facebook, we and Meta Platforms Ireland Limited, 4 Grand
Canal Square, Grand Canal Harbour, Dublin 2, Ireland shall be jointly
responsible for the processing of your data, i.e., we are the data
controllers (Art. 26 GDPR). This shared responsibility is limited
exclusively to the recording of your data and its sharing with
Facebook. The processing that occurs after the data has been shared
with Facebook is not part of this shared responsibility. The
obligations we share responsibility for have been documented in an
agreement on joint processing. The concrete wording of this agreement
can be found at:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for the provision
of the data protection information when using the Facebook tool and
for the data protection law compliant secure implementation of the
tool on our website. Facebook is liable for the data security of
Facebook products. You may request information on your rights as a
data subject (e.g., request for information) related to the data
processed by Facebook directly from Facebook. If you claim any data
subject rights with us, we are required to forward your request to
Facebook. The transfer of data to the United States is based on the
standard contract clauses of the EU commission. For details please
visit:
https://www.facebook.com/legal/EU_data_transfer_addendum
and
https://de-de.facebook.com/help/566994660333381. In Facebook's data privacy policy, you will find additional
information pertaining to the protection of your privacy:
https://de-de.facebook.com/about/privacy/.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
Facebook Custom Audiences
We use Facebook Custom Audiences. The provider of this service is Meta
Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Whenever you visit or use our website and apps, utilize our portfolio
(e.g., participation in sweepstakes), transfer data to us or interact
with the Facebook content of our company, we record related personal
data. In the event that you have given us your consent to the use of
Facebook Custom Audiences, we will share these data with Facebook to
put Facebook in a position to send you compatible ads. These data may
also be used to defined target audiences (Lookalike Audiences).
Facebook processes these data as our contract processor. For details,
please consult the user agreement of Facebook:
https://www.facebook.com/legal/terms/customaudience. The use of these services occurs on the basis of your consent
pursuant to Art. 6(1)(a) GDPR and § 25(1) TTDSG. You may revoke your
consent at any time. The transfer of date to the USA is based on the
standard contract clauses of the EU Commission. For details please
see:
https://www.facebook.com/legal/terms/customaudience
and
https://www.facebook.com/legal/terms/dataprocessing.
LinkedIn Insight Tag
This website uses the Insight Tag from LinkedIn. This service is
provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton
Place, Dublin 2, Ireland.
Data processing by LinkedIn Insight Tag
We use the LinkedIn Insight Tag to obtain information about visitors
to our website. Once a website visitor is registered with LinkedIn, we
can analyze the key occupational data (e.g., career level, company
size, country, location, industry, job title) of our website visitors
to help us better target our site to the relevant audience. We can
also use LinkedIn Insight tags to measure whether visitors to our
websites make a purchase or perform other actions (conversion
measurement). Conversion measurement can also be carried out across
devices (e.g. from PC to tablet). LinkedIn Insight Tag also features a
retargeting function that allows us to display targeted advertising to
visitors to our website outside of the website. According to LinkedIn,
no identification of the advertising addressee takes place. LinkedIn
itself also collects log files (URL, referrer URL, IP address, device
and browser characteristics and time of access). The IP addresses are
shortened or (if they are used to reach LinkedIn members across
devices) hashed (pseudonymized). The direct identifiers of LinkedIn
members are deleted by LinkedIn after seven days. The remaining
pseudonymized data will then be deleted within 180 days. The data
collected by LinkedIn cannot be assigned by us as a website operator
to specific individuals. LinkedIn will store the personal data
collected from website visitors on its servers in the USA and use it
for its own promotional activities. For details, please see
LinkedIn's privacy policy at
https://www.linkedin.com/legal/privacy-policy#choices-oblig.
Legal basis
If your approval (consent) has been obtained the use of the
abovementioned service shall occur on the basis of Art. 6(1)(a) GDPR
and § 25 TTDSG (German Telecommunications Act). Such consent may be
revoked at any time. If your consent was not obtained, the use of the
service will occur on the basis of Art. 6(1)(f) GDPR; the website
operator has a legitimate interest in effective advertising promotions
that include the utilization of social media. Data transmission to the
US is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://www.linkedin.com/legal/l/dpa
and
https://www.linkedin.com/legal/l/eu-sccs.
Objection to the use of LinkedIn Insight Tag
You can object to LinkedIn's analysis of user behavior and
targeted advertising at the following link:
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. In addition, LinkedIn members can control the use of their personal
information for promotional purposes in the account settings. To
prevent LinkedIn from linking information collected on our site to
your LinkedIn account, you must log out of your LinkedIn account
before you visit our site.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
7. Newsletter Newsletter data
If you would like to receive the newsletter offered on the website, we
require an e-mail address from you as well as information that allows
us to verify that you are the owner of the e-mail address provided and
that you agree to receive the newsletter. Further data is not
collected or only on a voluntary basis. For the handling of the
newsletter, we use newsletter service providers, which are described
below.
Mailchimp
This website uses the services of Mailchimp to send out its
newsletters. The provider is the Rocket Science Group LLC, 675 Ponce
De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. Among other
things, Mailchimp is a service that can be deployed to organize and
analyze the sending of newsletters. Whenever you enter data for the
purpose of subscribing to a newsletter (e.g. your e-mail address), the
information is stored on Mailchimp servers in the United States. With
the assistance of the Mailchimp tool, we can analyze the performance
of our newsletter campaigns. If you open an e-mail that has been sent
through the Mailchimp tool, a file that has been integrated into the
e-mail (a so-called web-beacon) connects to Mailchimp's servers
in the United States. As a result, it can be determined whether a
newsletter message has been opened and which links the recipient
possibly clicked on. Technical information is also recorded at that
time (e.g. the time of access, the IP address, type of browser and
operating system). This information cannot be allocated to the
respective newsletter recipient. Their sole purpose is the performance
of statistical analyses of newsletter campaigns. The results of such
analyses can be used to tailor future newsletters to the interests of
their recipients more effectively. If you do not want to permit an
analysis by Mailchimp, you must unsubscribe from the newsletter. We
provide a link for you to do this in every newsletter message. The
data is processed based on your consent (Art. 6(1)(a) GDPR). You may
revoke any consent you have given at any time by unsubscribing from
the newsletter. This shall be without prejudice to the lawfulness of
any data processing transactions that have taken place prior to your
revocation. The data deposited with us for the purpose of subscribing
to the newsletter will be stored by us until you unsubscribe from the
newsletter or the newsletter service provider and deleted from the
newsletter distribution list after you unsubscribe from the
newsletter. Data stored for other purposes with us remain unaffected.
Data transmission to the US is based on the Standard Contractual
Clauses (SCC) of the European Commission. Details can be found here:
https://mailchimp.com/eu-us-data-transfer-statement/
and
https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses. After you unsubscribe from the newsletter distribution list, your
e-mail address may be stored by us or the newsletter service provider
in a blacklist, if such action is necessary to prevent future
mailings. The data from the blacklist is used only for this purpose
and not merged with other data. This serves both your interest and our
interest in complying with the legal requirements when sending
newsletters (legitimate interest within the meaning of Art. 6(1)(f)
GDPR). The storage in the blacklist is indefinite. You may object to
the storage if your interests outweigh our legitimate interest.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
8. Plug-ins and Tools YouTube with expanded data protection
integration
Our website embeds videos of the website YouTube. The website operator
is Google Ireland Limited (“Google”), Gordon House, Barrow Street,
Dublin 4, Ireland. We use YouTube in the expanded data protection
mode. According to YouTube, this mode ensures that YouTube does not
store any information about visitors to this website before they watch
the video. Nevertheless, this does not necessarily mean that the
sharing of data with YouTube partners can be ruled out as a result of
the expanded data protection mode. For instance, regardless of whether
you are watching a video, YouTube will always establish a connection
with the Google DoubleClick network. As soon as you start to play a
YouTube video on this website, a connection to YouTube's servers
will be established. As a result, the YouTube server will be notified,
which of our pages you have visited. If you are logged into your
YouTube account while you visit our site, you enable YouTube to
directly allocate your browsing patterns to your personal profile. You
have the option to prevent this by logging out of your YouTube
account. Furthermore, after you have started to play a video, YouTube
will be able to place various cookies on your device or comparable
technologies for recognition (e.g. device fingerprinting). In this way
YouTube will be able to obtain information about this website's
visitors. Among other things, this information will be used to
generate video statistics with the aim of improving the user
friendliness of the site and to prevent attempts to commit fraud.
Under certain circumstances, additional data processing transactions
may be triggered after you have started to play a YouTube video, which
are beyond our control. The use of YouTube is based on our interest in
presenting our online content in an appealing manner. Pursuant to Art.
6(1)(f) GDPR, this is a legitimate interest. If appropriate consent
has been obtained, the processing is carried out exclusively on the
basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent
includes the storage of cookies or the access to information in the
user's end device (e.g., device fingerprinting) within the
meaning of the TTDSG. This consent can be revoked at any time. For
more information on how YouTube handles user data, please consult the
YouTube Data Privacy Policy under:
https://policies.google.com/privacy?hl=en.
Vimeo Without Tracking (Do-Not-Track)
This website uses plugins of the Vimeo video portal. The provider is
Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.
Whenever you visit one of our pages featuring Vimeo videos, a
connection with the servers of Vimeo is established. In conjunction
with this, the Vimeo server receives information about which of our
sites you have visited. Vimeo also receives your IP address. However,
we have set up Vimeo in such a way that Vimeo cannot track your user
activities and does not place any cookies. We use Vimeo to make our
online presentation attractive for you. This is a legitimate interest
on our part pursuant to Art. 6(1)(f) GDPR. If a respective declaration
of consent was requested (e.g. concerning the storage of cookies),
processing shall occur exclusively on the basis of Art. 6(1)(a) GDPR;
the given consent may be revoked at any time. Data transmission to the
US is based on the Standard Contractual Clauses (SCC) of the European
Commission and, according to Vimeo, on “legitimate business
interests”. Details can be found here:
https://vimeo.com/privacy. For more information on the handling of user data, please consult
Vimeo's data privacy policy at:
https://vimeo.com/privacyGoogle Fonts (local embedding) This website uses so-called Google
Fonts provided by Google to ensure the uniform use of fonts on this
site. These Google fonts are locally installed so that a connection to
Google's servers will not be established in conjunction with this
application. For more information on Google Fonts, please follow this
link:
https://developers.google.com/fonts/faq
and consult Google's Data Privacy Declaration under:
https://policies.google.com/privacy?hl=en.
Adobe Fonts
In order to ensure the uniform depiction of certain fonts, this
website uses fonts called Adobe Fonts provided by Adobe Systems
Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe).
When you access pages of this website, your browser will automatically
load the required fonts directly from the Adobe site to be able to
display them correctly on your device. As a result, your browser will
establish a connection with Adobe's servers in the United States.
Hence, Adobe learns that your IP address was used to access this
website. According to the information provided by Adobe, no cookies
will be stored in conjunction with the provision of the fonts. Data
are stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website
operator has a legitimate interest in a uniform presentation of the
font on the operator's website. If appropriate consent has been
obtained, the processing is carried out exclusively on the basis of
Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the
storage of cookies or the access to information in the user's end
device (e.g., device fingerprinting) within the meaning of the TTDSG.
This consent can be revoked at any time. Data transmission to the US
is based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://www.adobe.com/de/privacy/eudatatransfers.html. For more information about Adobe Fonts, please read the policies
under:
https://www.adobe.com/privacy/policies/adobe-fonts.html. Adobe's Data Privacy Declaration may be reviewed under:
https://www.adobe.com/privacy/policy.html.
Google Maps
This website uses the mapping service Google Maps. The provider is
Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin
4, Ireland. To enable the use of the Google Maps features, your IP
address must be stored. As a rule, this information is transferred to
one of Google's servers in the United States, where it is
archived. The operator of this website has no control over the data
transfer. In case Google Maps has been activated, Google has the
option to use Google Fonts for the purpose of the uniform depiction of
fonts. When you access Google Maps, your browser will load the
required web fonts into your browser cache, to correctly display text
and fonts. We use Google Maps to present our online content in an
appealing manner and to make the locations disclosed on our website
easy to find. This constitutes a legitimate interest as defined in
Art. 6(1)(f) GDPR. If appropriate consent has been obtained, the
processing is carried out exclusively on the basis of Art. 6(1)(a)
GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of
cookies or the access to information in the user's end device
(e.g., device fingerprinting) within the meaning of the TTDSG. This
consent can be revoked at any time. Data transmission to the US is
based on the Standard Contractual Clauses (SCC) of the European
Commission. Details can be found here:
https://privacy.google.com/businesses/gdprcontrollerterms/
and
https://privacy.google.com/businesses/gdprcontrollerterms/sccs/. For more information on the handling of user data, please review
Google's Data Privacy Declaration under:
https://policies.google.com/privacy?hl=en.
OpenStreetMap
We are using the mapping service provided by OpenStreetMap (OSM). We
embed the map data from OpenStreetMap on the server of the
OpenStreetMap Foundation, St John's Innovation Centre, Cowley Road,
Cambridge, CB4 0WS, United Kingdom. The United Kingdom is considered a
secure third country under data protection law. This means that the
United Kingdom has a level of data protection that is equivalent to
the level of data protection in the European Union. When using the
OpenStreetMap maps, a connection is established to the servers of the
OpenStreetMap-Foundation. In the process and among other things, your
IP address and other information about your behavior on this website
may be forwarded to the OSMF. OpenStreetMap may store cookies in your
browser or use similar recognition technologies for this purpose. We
use OpenStreetMap with the objective of ensuring the attractive
presentation of our online offers and to make it easy for visitors to
find the locations we specify on our website. This establishes
legitimate grounds as defined in Art. 6(1)(f) GDPR. If appropriate
consent has been obtained, the processing is carried out exclusively
on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the
consent includes the storage of cookies or the access to information
in the user's end device (e.g., device fingerprinting) within the
meaning of the TTDSG. This consent can be revoked at any time.
Google reCAPTCHA
We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on
this website. The provider is Google Ireland Limited (“Google”),
Gordon House, Barrow Street, Dublin 4, Ireland. The purpose of
reCAPTCHA is to determine whether data entered on this website (e.g.,
information entered into a contact form) is being provided by a human
user or by an automated program. To determine this, reCAPTCHA analyzes
the behavior of the website visitors based on a variety of parameters.
This analysis is triggered automatically as soon as the website
visitor enters the site. For this analysis, reCAPTCHA evaluates a
variety of data (e.g., IP address, time the website visitor spent on
the site or cursor movements initiated by the user). The data tracked
during such analyses are forwarded to Google. reCAPTCHA analyses run
entirely in the background. Website visitors are not alerted that an
analysis is underway. Data are stored and analyzed on the basis of
Art. 6(1)(f) GDPR. The website operator has a legitimate interest in
the protection of the operator's websites against abusive
automated spying and against SPAM. If appropriate consent has been
obtained, the processing is carried out exclusively on the basis of
Art. 6(1)(a) GDPR and § 25 (1) TTDSG, insofar the consent includes the
storage of cookies or the access to information in the user's end
device (e.g., device fingerprinting) within the meaning of the TTDSG.
This consent can be revoked at any time. For more information about
Google reCAPTCHA please refer to the Google Data Privacy Declaration
and Terms Of Use under the following links:
https://policies.google.com/privacy?hl=en
and
https://policies.google.com/terms?hl=en.
Zendesk
We deploy the CRM system Zendesk to process user inquiries. The
provider is Zendesk, Inc., 1019 Market Street in San Francisco, CA
94103 USA. We use Zendesk to be able to respond to your inquiries
promptly and efficiently. This constitutes a legitimate interest as
defined in Art. 6(1)(f) GDPR. In order to be able to submit inquiries,
you must provide your e-mail address and name. The messages addressed
to us remain with us until you request deletion, or the data storage
purpose no longer applies (e.g. after completed processing of your
request). Mandatory statutory provisions, in particular retention
periods, remain unaffected. Zendesk has Binding Corporate Rules (BCR)
which have been approved by the Irish Data Protection Authority. These
are binding corporate rules that legitimize the transfer of data
within the company to third countries outside the EU and EEA. Details
can be found here:
https://www.zendesk.de/blog/update-privacy-shield-invalidation-european-court-justice/. If you should not want to agree to the processing of your inquiries
by us via Zendesk, you have the alternative option to communicate with
us via e-mail, telephone, or fax. For more information, please consult
Zendesk's Data Privacy Declaration at:
https://www.zendesk.com/company/customers-partners/privacy-policy/.
Zendesk Chat Functions
Our website offers you the opportunity to send us messages via a chat
window. The chat functions are provided by Zendesk. Whenever you use
this chat window, we do not only store your chat messages, but also
your IP address. You do not have to provide your name to engage in
chats.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
Zapier
We have integrated Zapier on this website. The provider is Zapier Inc,
Market St. #62411, San Francisco, CA 94104-5401, USA (hereinafter
“Zapier”). Zapier allows us to link and synchronize various
functionalities, databases, and tools with our website. In this way,
it is possible, for example, to automatically play out content that we
publish on our website on our social media channels or to export
content from marketing and analysis tools. Depending on the
functionality, Zapier may also collect various personal data in the
process. The use of Zapier is based on Art. 6(1)(f) GDPR. The website
operator has a legitimate interest on the most effective integration
of the tools used. If appropriate consent has been obtained, the
processing is carried out exclusively on the basis of Art. 6(1)(a)
GDPR and § 25 (1) TTDSG, insofar the consent includes the storage of
cookies or the access to information in the user's end device
(e.g., device fingerprinting) within the meaning of the TTDSG. This
consent can be revoked at any time. Data transfer to the USA is based
on the standard contractual clauses of the EU Commission. You can find
details here:
https://zapier.com/tos.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
9. Online marketing and partner programs Affiliate Programs on this
website
We participate in affiliate partner programs. In conjunction with
affiliate partner programs, ads of businesses (advertisers) are placed
on websites of other enterprises within the affiliate partner network
(publisher). If you click on one of these affiliate ads, you will be
transferred to the promoted offer. If you should subsequently engage
in a certain transaction (conversion), the publisher will receive a
respective commission in exchange for the service. To be able to
compute the commission amount, the affiliate network operator must be
in a position to track the ad that has resulted in you seeing the
offer and in you completing the predefined transaction. To make this
possible, cookies or comparable recognition technologies are deployed
(e.g., device fingerprinting). Data is stored and analyzed on the
basis of Art. 6(1)(f) GDPR. The website operator has a legitimate
interest in the correct computation of its affiliate compensation. If
appropriate consent has been obtained, the processing is carried out
exclusively on the basis of Art. 6(1)(a) GDPR and § 25 (1) TTDSG,
insofar the consent includes the storage of cookies or the access to
information in the user's end device (e.g., device
fingerprinting) within the meaning of the TTDSG. This consent can be
revoked at any time.
10. eCommerce and payment service providers
Processing of Customer and Contract Data
We collect, process, and use personal customer and contract data for
the establishment, content arrangement and modification of our
contractual relationships. Data with personal references to the use of
this website (usage data) will be collected, processed, and used only
if this is necessary to enable the user to use our services or
required for billing purposes. The legal basis for these processes is
Art. 6(1)(b) GDPR. The collected customer data shall be deleted upon
completion of the order or termination of the business relationship
and upon expiration of any existing statutory archiving periods. This
shall be without prejudice to any statutory archiving periods.
Data transfer upon closing of contracts for services and digital
content
We share personal data with third parties only if this is necessary in
conjunction with the handling of the contract; for instance, with the
financial institution tasked with the processing of payments. Any
further transfer of data shall not occur or shall only occur if you
have expressly consented to the transfer. Any sharing of your data
with third parties in the absence of your express consent, for
instance for advertising purposes, shall not occur. The basis for the
processing of data is Art. 6(1)(b) GDPR, which permits the processing
of data for the fulfilment of a contract or for pre-contractual
actions.
Credit checks
We may conduct a credit check in the event that purchases are made on
account or based on other payment terms that require us to extend
credit (scoring). For this purpose, we transmit the data you have
entered (e.g., name, address, age, or banking information) to a credit
information agency. Based on this data, the probability of non-payment
is determined. If the likelihood of non-payment is excessive, we may
reject the respective payment term. The credit check is performed on
the basis of contractual fulfillment (Art. 6(1)(b) GDPR) and to avert
non-payment (justified interest pursuant to Art. 6(1)(f) GDPR). If
consent has been obtained, the credit check shall be performed on the
basis of this consent (Art. 6(1)(a) GDPR); the consent may be revoked
at any time.
Payment services
We integrate payment services of third-party companies on our website.
When you make a purchase from us, your payment data (e.g. name,
payment amount, bank account details, credit card number) are
processed by the payment service provider for the purpose of payment
processing. For these transactions, the respective contractual and
data protection provisions of the respective providers apply. The use
of the payment service providers is based on Art. 6(1)(b) GDPR
(contract processing) and in the interest of a smooth, convenient, and
secure payment transaction (Art. 6(1)(f) GDPR). Insofar as your
consent is requested for certain actions, Art. 6(1)(a) GDPR is the
legal basis for data processing; consent may be revoked at any time
for the future. We use the following payment services / payment
service providers within the scope of this website:
PayPal
Apple Pay
Google Pay
Stripe
Amazon Pay
The provider of this payment service is Amazon Payments Europe S.C.A.,
38 avenue J.F. Kennedy, L-1855 Luxembourg. Details regarding the use
of your data can be found in Amazon Pay's Privacy Policy at the
following link:
https://pay.amazon.de/help/201212490?ld=APDELPADirect.
American Express
Mastercard
VISA
11. Online-based Audio and Video Conferences (Conference tools) Data
processing
We use online conference tools, among other things, for communication
with our customers. The tools we use are listed in detail below. If
you communicate with us by video or audio conference using the
Internet, your personal data will be collected and processed by the
provider of the respective conference tool and by us. The conferencing
tools collect all information that you provide/access to use the tools
(email address and/or your phone number). Furthermore, the conference
tools process the duration of the conference, start and end (time) of
participation in the conference, number of participants and other
“context information” related to the communication process (metadata).
Furthermore, the provider of the tool processes all the technical data
required for the processing of the online communication. This
includes, in particular, IP addresses, MAC addresses, device IDs,
device type, operating system type and version, client version, camera
type, microphone or loudspeaker and the type of connection. Should
content be exchanged, uploaded, or otherwise made available within the
tool, it is also stored on the servers of the tool provider. Such
content includes, but is not limited to, cloud recordings, chat/
instant messages, voicemail uploaded photos and videos, files,
whiteboards, and other information shared while using the service.
Please note that we do not have complete influence on the data
processing procedures of the tools used. Our possibilities are largely
determined by the corporate policy of the respective provider. Further
information on data processing by the conference tools can be found in
the data protection declarations of the tools used, and which we have
listed below this text.
Purpose and legal bases
The conference tools are used to communicate with prospective or
existing contractual partners or to offer certain services to our
customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools
serves to generally simplify and accelerate communication with us or
our company (legitimate interest in the meaning of Art. 6(1)(f) GDPR).
Insofar as consent has been requested, the tools in question will be
used on the basis of this consent; the consent may be revoked at any
time with effect from that date.
Duration of storage
Data collected directly by us via the video and conference tools will
be deleted from our systems immediately after you request us to delete
it, revoke your consent to storage, or the reason for storing the data
no longer applies. Stored cookies remain on your end device until you
delete them. Mandatory legal retention periods remain unaffected. We
have no influence on the duration of storage of your data that is
stored by the operators of the conference tools for their own
purposes. For details, please directly contact the operators of the
conference tools.
Conference tools used
We employ the following conference tools:
Zoom
We use Zoom. The provider of this service is Zoom Communications Inc,
San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, USA.
For details on data processing, please refer to Zoom's privacy
policy:
https://zoom.us/en-us/privacy.html. Data transmission to the US is based on the Standard Contractual
Clauses (SCC) of the European Commission. Details can be found here:
https://zoom.us/de-de/privacy.html.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
Microsoft Teams
We use Microsoft Teams. The provider is the Microsoft Ireland
Operations Limited, One Microsoft Place, South County Business Park,
Leopardstown, Dublin 18, Ireland. For details on data processing,
please refer to the Microsoft Teams privacy policy:
https://privacy.microsoft.com/en-us/privacystatement.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
Google Hangouts
We use Google Hangouts. The provider is Google Ireland Limited, Gordon
House, Barrow Street, Dublin 4, Ireland. For details on data
processing, please see the Google Hangouts privacy policy:
https://policies.google.com/privacy?hl=en.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
Google Meet
We use Google Meet. The provider is Google Ireland Limited, Gordon
House, Barrow Street, Dublin 4, Ireland. For details on data
processing, please see the Google privacy policy:
https://policies.google.com/privacy?hl=en.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
12. Custom Services Handling applicant data
We offer website visitors the opportunity to submit job applications
to us (e.g., via e-mail, via postal services on by submitting the
online job application form). Below, we will brief you on the scope,
purpose and use of the personal data collected from you in conjunction
with the application process. We assure you that the collection,
processing, and use of your data will occur in compliance with the
applicable data privacy rights and all other statutory provisions and
that your data will always be treated as strictly confidential.
Scope and purpose of the collection of data
If you submit a job application to us, we will process any affiliated
personal data (e.g., contact and communications data, application
documents, notes taken during job interviews, etc.), if they are
required to make a decision concerning the establishment or an
employment relationship. The legal grounds for the aforementioned are
§ 26 BDSG according to German Law (Negotiation of an Employment
Relationship), Art. 6(1)(b) GDPR (General Contract Negotiations) and
— provided you have given us your consent — Art. 6(1)(a)
GDPR. You may revoke any consent given at any time. Within our
company, your personal data will only be shared with individuals who
are involved in the processing of your job application. If your job
application should result in your recruitment, the data you have
submitted will be archived on the grounds of § 26 BDSG and Art.
6(1)(b) GDPR for the purpose of implementing the employment
relationship in our data processing system.
Data Archiving Period
If we are unable to make you a job offer or you reject a job offer or
withdraw your application, we reserve the right to retain the data you
have submitted on the basis of our legitimate interests (Art. 6(1)(f)
GDPR) for up to 6 months from the end of the application procedure
(rejection or withdrawal of the application). Afterwards the data will
be deleted, and the physical application documents will be destroyed.
The storage serves in particular as evidence in the event of a legal
dispute. If it is evident that the data will be required after the
expiry of the 6-month period (e.g., due to an impending or pending
legal dispute), deletion will only take place when the purpose for
further storage no longer applies. Longer storage may also take place
if you have given your agreement (Article 6(1)(a) GDPR) or if
statutory data retention requirements preclude the deletion.
Admission to the applicant pool
If we do not make you a job offer, you may be able to join our
applicant pool. In case of admission, all documents and information
from the application will be transferred to the applicant pool in
order to contact you in case of suitable vacancies. Admission to the
applicant pool is based exclusively on your express agreement (Art.
6(1)(a) GDPR). The submission agreement is voluntary and has no
relation to the ongoing application procedure. The affected person can
revoke his agreement at any time. In this case, the data from the
applicant pool will be irrevocably deleted, provided there are no
legal reasons for storage. The data from the applicant pool will be
irrevocably deleted no later than two years after consent has been
granted.
OneDrive
We have integrated OneDrive on this website. The provider is the
Microsoft Ireland Operations Limited, One Microsoft Place, South
County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter
“OneDrive”). OneDrive enables us to include an upload area on our
website where you can upload content. When you upload content, it is
stored on the OneDrive servers. When you access our website, a
connection to OneDrive is also established so that OneDrive can
determine that you have visited our website. The use of OneDrive is
based on Art. 6(1)(f) GDPR. The website operator has a legitimate
interest in a reliable upload area on its website. If the relevant
consent has been requested, processing is carried out exclusively on
the basis of Art. 6(1)(a) GDPR; consent may be revoked at any time.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
Google Drive
We have integrated Google Drive on this website. The provider is
Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin
4, Ireland. Google Drive allows us to include an upload area on our
website where you can upload content. When you upload content, it is
stored on Google Drive's servers. When you visit our website, a
connection to Google Drive is additionally established so that Google
Drive can determine that you have visited our website. The use of
Google Drive is based on Art. 6(1)(f) GDPR. The website operator has a
legitimate interest in having a reliable upload area on its website.
If a corresponding consent has been obtained, the processing is
carried out exclusively on the basis of Art. 6(1)(a) GDPR; the consent
can be revoked at any time.
Data processing
We have concluded a data processing agreement (DPA) for the use of the
above-mentioned service. This is a contract mandated by data privacy
laws that guarantees that they process personal data of our website
visitors only based on our instructions and in compliance with the
GDPR.
13. California Consumer Privacy Act (CCPA) Policy
If you are a California resident, the California Consumer Privacy Act
(CCPA) may permit you or your authorized agent to opt-out of the
“sale” of personal information to third parties. Our Privacy Policy
describes the limited circumstances in which we may share your
information with third parties. We do not sell personal information
collected through our website or personal information relating to our
customers. However based on the CCPA's broad definition of the
term “sale,” our disclosure of specific health care providers'
personal information to our customers regarding their professional
background (e.g., medical school, residency, etc.), occupational
history (e.g., surgeries/procedures performed, medical devices
utilized, etc.), and current place of employment is a sale under the
CCPA.
For reference, we only sell the following types of personal
information:
- Identifiers (name, NPI, medical specialty)
- Public Educational Information
- Professional or employment-related information
- Inferences drawn from other personal information
To exercise your opt out right (or if you are an authorized agent for
a California resident), please contact us via:
E-mail: hello@alphasophia.com
Mail: Alpha Sophia Technologies
GmbH, An St. Magdalenen 8, 50678 Cologne, Germany
To submit a verifiable consumer request, you (or your authorized
agent) will be asked to:
-
Provide your full name, title and designations, phone number,
employing institution, business email address
-
Provide a link to an existing public profile in your employing
institution where that exists
-
Provide evidence of authorization / copy of power of attorney
where you are an authorized agent of the consumer
-
Where a request is made by email, to submit the above information
from the consumer's business email account above, or where
you are an agent, copy the consumer on the email sent from your
business email account.
Only you (or an authorized agent) may make a verifiable consumer
request.