Data Protection Policy
Please note that the original version of the Data protection is in German. In the event of any discrepancies or conflicts between the German version and its translation, the German version (Datenschutz) shall prevail.
I – Name and address of the person responsible
The Data Controller, as defined by the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations, is:
SnapSoft GmbH
Leipziger Str. 42
04860 Torgau
Germany
Tel .: +49 (0) 3421 760 98 99
Email: info[at] snapsoft.de
Website: www.snapsoft.de
II – General Information on Data Processing
1 Scope of Processing of Personal Data
We only process personal data of our users to the extent necessary to provide a functioning website as well as our content and services. The processing of personal data of our users takes place only with the user’s consent. An exception applies in cases where obtaining consent beforehand is not possible for factual reasons and the processing of data is permitted by legal regulations.
2 Legal Basis for the Processing of Personal Data
If we obtain the consent of the data subject for processing personal data, Article 6(1)(a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis. For processing personal data necessary for the performance of a contract to which the data subject is party, Article 6(1)(b) GDPR serves as the legal basis. This also applies to processing operations necessary for carrying out pre-contractual measures. If processing of personal data is necessary for compliance with a legal obligation to which our company is subject, Article 6(1)(c) GDPR serves as the legal basis. In the case that vital interests of the data subject or another natural person require the processing of personal data, Article 6(1)(d) GDPR serves as the legal basis. If processing is necessary to safeguard a legitimate interest of our company or a third party, and if the interests, fundamental rights, and freedoms of the data subject do not outweigh the first-mentioned interest, Article 6(1)(f) GDPR serves as the legal basis for processing.
3 Data Deletion and Duration of Storage
The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws, or other regulations to which the controller is subject. The data will also be blocked or deleted if a storage period prescribed by the mentioned standards expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract
III – Website Provision and Log File Creation
1 Description and Scope of Data Processing
Every time our website is accessed, our system automatically collects data and information from the accessing computer’s system. The following data is collected:
Information about the browser type and version used.
(1) The user’s IP address.
(2) Date and time of access.
(3) Websites from which the user’s system reached our website.
(4) Websites accessed by the user’s system through our website.
(5) This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
2 Legal Basis for Data Processing
The legal basis for the temporary storage of data and log files is Article 6(1)(f) GDPR.
3 Purpose of Data Processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To this end, the user’s IP address must be kept for the duration of the session. Storage in log files ensures the website’s functionality. Additionally, the data helps us optimize the website and to ensure the security of our information technology systems. Data is not evaluated for marketing purposes in this context. Our legitimate interest in data processing pursuant to Article 6(1)(f) GDPR justifies this processing.
4 Duration of Storage
The data are deleted as soon as they are no longer necessary for the purpose for which they were collected. For data collected for the purpose of providing the website, this is the case when the particular session is completed. If data is stored in log files, it is deleted after no more than seven days. Further storage is possible; in this case, users’ IP addresses are deleted or anonymized, making it no longer possible to identify the accessing client.
5 Objection and Removal Options
The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, the user does not have the option to object.
IV – Use of Cookies
1 Description and Scope of Data Processing
Our website uses cookies. Cookies are text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user visits a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is revisited. We use cookies to make our website more user-friendly. Some elements of our website require the calling browser to be identified even after a page change. The following data is stored and transmitted in the cookies:
(1) Language settings
(2) Time information
(3) Log-in information and session ID
Furthermore, our website uses cookies that allow for an analysis of the user’s surfing behavior. In this way, the following data can be transmitted:
(1) Frequency of page views
(2) Use of website features
The data collected in this way are pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data are not stored together with other personal data of the users. When accessing our website, users are informed by an information banner about the use of cookies for analysis purposes and referred to this privacy statement. In this context, there is also a note on how to prevent the storage of cookies in the browser settings.
2 Legal Basis for Data Processing
The legal basis for processing personal data using technically necessary cookies is Article 6(1)(f) GDPR.
The legal basis for processing personal data using cookies for analysis purposes, if the user has given their consent to this, is Article 6(1)(a) GDPR.
3 Purpose of Data Processing
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognized even after a page change.
Cookies are required for the following applications:
(1) Adoption of language settings
(2) Provision of time information
(3) Assignment of session information
User data collected through technically necessary cookies are not used to create user profiles. The use of analysis cookies is for the purpose of improving the quality of our website and its content. Through analysis cookies, we learn how the website is used and thus we can continuously optimize our offer. Furthermore, this allows for the optimization of content to more effectively convey information. This also constitutes our legitimate interest in processing the personal data according to Article 6(1)(f) GDPR.
4 Duration of Storage, Objection, and Removal Option
Cookies are stored on the user’s computer and transmitted to our site. Thus, as a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully utilize all the website’s features.
V – Google Analytics
1 Description and Scope of Data Processing
This website utilizes Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics employs “cookies,” which are text files placed on your computer to help analyze how you use the website. The information generated by the cookie about your use of the website, such as:
(1) Browser type/version
(2) Operating system used
(3) Referrer URL (the previously visited page)
(4) Host name of the accessing computer (IP address)
(5) Time of the server request
is generally transmitted to and stored on a Google server in the USA. The IP address sent by your browser as part of Google Analytics is not conflated with other Google data. This website has also implemented the “anonymizeIP” code for Google Analytics, ensuring your IP address is masked so all data is collected anonymously. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there.
2 Legal Basis for Processing Personal Data
The processing is based on Article 6(1) paragraph 1 lit. f GDPR.
3 Purpose of Data Processing
Google will use this information on behalf of this website’s operator to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage to the website operator. Additionally, Google Analytics is used to evaluate data from DoubleClick cookies and AdWords for statistical purposes. If you prefer not to have this data evaluated, you can disable it via the Ad Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=de).
4 Duration of Storage
Cookies are stored on your computer and transmitted to our site. Therefore, you have full control over the use of cookies. By changing your internet browser settings, you can disable or restrict the transmission of cookies. Previously stored cookies can be deleted at any time, which can also be performed automatically. If cookies are disabled for our website, it might not be possible to fully utilize all of the website’s functions.
5 Objection and Removal Option
You can prevent the storage of cookies by appropriately adjusting your browser software; however, please note that doing so may mean you won’t be able to fully utilize all the functions of this website.
You can also prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available under the following link: http://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, particularly for browsers on mobile devices, you can prevent data collection by Google Analytics by clicking on this link: Deactivate Google Analytics. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie applies only in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.
Instructions for integrating the opt-out cookie are available at: https://developers.google.com/analytics/devguides/collection/gajs/?hl=de#disable.
If you wish to prevent data from DoubleClick cookies and AdWords from being used for statistical purposes, you can deactivate this via the Ad Preferences Manager (http://www.google.com/settings/ads/onweb/?hl=de).
For more information on data protection in connection with Google Analytics, please visit the Google Analytics Help Center (https://support.google.com/analytics/answer/6004245?hl=de).
Users’ personal data are deleted or anonymized after 14 months.
VI – Vimeo
1 Description and Scope of Data Processing
Our website integrates videos from the video portal Vimeo, a service provided by Vimeo LLC, located at 555 West 18th Street, New York, New York 10011, USA (“Vimeo”). The video portal is integrated in a way that data transmission to Vimeo occurs only after you actively consent to it by clicking on the video. Vimeo processes the following data, among others:
(1) IP address
(2) Browser type
(3) Operating system
(4) Basic device information
(5) Website from which the video was loaded
(6) Web activity on the website (e.g., session duration)
If you are logged into your Vimeo account, Vimeo may associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your Vimeo account before using our website. Vimeo uses the data processed for purposes such as improving its services and for targeted advertising.
2 Legal Basis for the Processing of Personal Data
The processing is based on your consent, in accordance with Article 6(1) p. 1 lit. a GDPR. As Vimeo is based in the USA and processes your data there, the data transfer to a third country is also based on your consent.
3 Purpose of Data Processing
We use Vimeo to embed videos and provide our users with a multimedia experience on our website. Vimeo allows us to incorporate high-quality content directly on our site.
4 Duration of Storage
The data is stored according to Vimeo’s privacy policy, over which we have no control.
5 Objection and Removal Option
You can manage Vimeo’s cookies at any time through your browser settings. If you have a Vimeo account, you can also control the cookies used in your account settings.
VII – Registration
1 Description and Scope of Data Processing
We provide users on our website the opportunity to register by entering personal data. This data is entered into an input mask, transmitted to us, and stored. The data is not transferred to third parties. The following data is collected during the registration process:
(1) Email address
(2) Name
(3) Company
(4) Telephone number
(5) Registration code
Additionally, at the time of registration, we store:
(1) The user’s IP address
(2) Date and time of registration
Consent for the processing of this data is obtained from the user during the registration process.
2 Legal Basis for Data Processing
The processing of this data is based on Article 6(1)(a) GDPR.
If registration is necessary for the fulfillment of a contract to which the user is a party, or for carrying out pre-contractual measures, then the additional legal basis for the processing of the data is Article 6(1)(b) GDPR.
3 Purpose of Data Processing
User registration is necessary for providing certain contents and services on our website.
It is also required for the fulfillment of a contract with the user or to carry out pre-contractual measures.
4 Duration of Storage
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. This is the case for data collected during the registration process if the registration on our website is canceled or modified.
5 Objection and Removal Option
As a user, you have the right to cancel your registration at any time. You can have the data stored about you corrected at any time. If you wish to do so, please contact us directly via email or postal mail.
If the data is necessary for the fulfillment of a contract or for carrying out pre-contractual measures, premature deletion of the data is possible only if no contractual or legal obligations preclude such deletion.
VIII – Contact Form and Email Contact
1 Description and Scope of Data Processing
Our website features a contact form that can be used for electronic communication. When a user avails themselves of this option, the data entered in the input mask is transmitted to us and stored. This data includes:
(1) Name
(2) Email address
(3) Subject
(4) Message
(5) Spam filter check
(6) Consent to the data protection policy
Additionally, at the time the message is sent, the following data is stored:
(1) The user’s IP address
(2) Date and time of the message
Consent for processing this data is obtained during the sending process, with reference made to this privacy policy.
Alternatively, contact via the provided email address is possible. In this case, the user’s personal data transmitted with the email will be stored. This data is not passed on to third parties and is used solely for processing the communication.
2 Legal Basis for Data Processing
The legal basis for processing the data is Art. 6 Para. 1 lit. a GDPR.
For data transmitted via email, the legal basis for processing is Art. 6 Para. 1 lit. f GDPR. If the email contact aims to conclude a contract, then Art. 6 Para. 1 lit. b GDPR provides an additional legal basis for processing.
3 Purpose of Data Processing
The personal data from the input mask is processed solely for the purpose of facilitating contact. The same applies to contact made via email, which also constitutes a necessary legitimate interest in processing the data.
Other personal data processed during the sending process are aimed at preventing misuse of the contact form and ensuring the security of our information technology systems.
4 Duration of Storage
The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. For the personal data from the contact form input mask and that sent by email, this is when the respective conversation with the user has concluded, determined by whether the matter in question has been fully resolved.
Additional personal data collected during the sending process will be deleted after a maximum of seven days.
5 Objection and Removal Option
Users have the right to withdraw their consent to the processing of personal data at any time. If a user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot continue. For this purpose, please contact us in writing by email or postal mail.
All personal data stored in the course of contact will be deleted in such instances.
IX – Email newsletter
1 Description and Scope of Data Processing
You have the opportunity to subscribe to our newsletter, through which we provide information about our blog posts and SnapTrade news (e.g., trade fairs, celebrations, etc.). To subscribe, you need to enter your contact details in our newsletter subscription form and confirm the subscription via a link we send to your email address. The data required for sending the newsletter includes:
(1) Email address
(2) Consent to receive the newsletter
Providing a name is optional.
Additionally, the following data is stored at the time of newsletter registration:
(1) The user’s IP address
Your consent is obtained for the processing of this data during the registration process, and reference is made to this data protection declaration. We may use service providers for the dispatch of the newsletter.
2 Legal Basis for Data Processing
The legal basis for the processing of the data is your express consent, as per Art. 6 Para. 1 lit. a GDPR.
3 Purpose of Data Processing
The processing of personal data from the registration form is solely for the purpose of sending the newsletter.
4 Duration of Storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. For the personal data from the newsletter registration form, this is the case when you cancel the newsletter subscription.
5 Objection and Removal Option
You have the option to revoke your consent to the processing of personal data at any time. You can unsubscribe from the newsletter at any time by clicking on the corresponding link found in each newsletter. Upon cancellation, all personal data stored in the course of sending the newsletter, and not required for other legitimate purposes (e.g., for an existing customer account), will be deleted.
X – Online Booking
1 Description and Scope of Data Processing
On the SnapSoft GmbH website, users have the option to book products online. In this process, the following data is collected and processed:
(1) Company
(2) Address details
(3) Email address
(4) Tariff – Usage period
(5) VAT ID
(6) Consent to our General Terms and Conditions
(7) Consent to the right of withdrawal and acknowledgment of the withdrawal form
(8) Consent to the expiration of the withdrawal period upon complete fulfillment of the contract
2 Legal Basis for Data Processing
The processing of personal data necessary for the performance of a contract to which the data subject is a party, or to carry out pre-contractual measures, is based on Article 6(1)(b) GDPR.
3 Purpose of Data Processing
The processing of personal data is solely for the purpose of fulfilling the contract.
4 Duration of Storage
We delete your data after the contract has been processed and the tax and commercial retention periods have expired.
5 Objection and Removal Option
As a contractual partner, you have the option at any time to terminate the contract, observing the notice period. Your stored data will be deleted after the tax and commercial retention periods have expired.
You can have the data stored about you corrected at any time. Please contact us in writing by email or postal mail for this purpose.
XI – Contract Conclusion
1 Description and Scope of Data Processing
When you decide to enter into a contract with SnapSoft GmbH, a form will be sent to you via email. The following data is collected and processed through this process:
(1) Company
(2) Address details
(3) VAT ID
(4) Contact person
(5) Email
(6) Telephone
(7) Fax
Optionally:
(8) Different billing address
2 Legal Basis for Data Processing
The processing of personal data necessary for the performance of a contract to which the data subject is a party, or for carrying out pre-contractual measures, is based on Article 6(1)(b) GDPR.
3 Purpose of Data Processing
The processing of personal data is solely for the purpose of fulfilling the contract.
4 Duration of Storage
Your data will be deleted after the completion of the contract and the expiration of retention obligations under tax and commercial law.
5 Opposition and Removal Option
As a contracting party, you have the option to terminate the contract at any time, provided that the notice period is observed. Your stored data will be deleted after the expiration of tax and commercial retention obligations.
You are entitled to have the stored data about you corrected at any time. For modifications, please contact us in writing via email or postal mail.
XII – Payment Method: Instant Transfer (Sofortüberweisung)
1 Description and Scope of Data Processing
For the booking of additional products, payment can be made via Sofortüberweisung.
Sofortüberweisung is a payment service that facilitates cashless payments for products and services. This transfer method is a technical process through which the merchant receives immediate payment confirmation. Consequently, the merchant can immediately provide goods and services to the customer right after the order placement. The data collected and processed includes:
(1) SnapSoft customer number
(2) Purpose of the payment
(3) Internal transaction ID
2 Legal Basis for Data Processing
The processing of personal data necessary for the fulfillment of a contract to which the data subject is party, or for performing pre-contractual measures, is based on Article 6(1)(b) GDPR.
3 Purpose of Data Processing
The processing of personal data serves solely the purpose of contract fulfillment.
4 Duration of Storage
Your data will be deleted after the contract processing is completed and the tax and commercial retention periods have expired.
5 Opposition and Removal Option
You may object to the processing of personal data at any time. For this, please contact us in writing via email or postal mail. Your stored data will be deleted once the tax and commercial retention periods have expired.
For the specific data protection provisions of Sofortüberweisung, please visit https://www.klarna.com/sofort/datenschutz/.
XIII – Payment Method: SEPA Direct Debit
1 Description and Scope of Data Processing
For those who have entered into a contract with SnapSoft GmbH, the SEPA direct debit scheme is available for use.
A SEPA direct debit mandate provides the legal authorization for the collection of SEPA direct debits. Such a mandate encompasses the payer’s permission for the payee to collect payments via SEPA direct debit and instructs the payer’s payment service provider to honor the debits. The official texts for SEPA mandates (SEPA Direct Debit Mandate and SEPA Business-to-Business Direct Debit Mandate) can be obtained from your bank or payment service provider managing your account. The data collected and processed includes:
(1) Account holder / First name, Last name
(2) Street and house number
(3) Postal code and city
(4) Banking institution (name and BIC)
(5) IBAN
2 Legal Basis for Data Processing
The processing of personal data necessary for the performance of a contract to which the data subject is party, or for carrying out pre-contractual measures, is based on Article 6(1)(b) GDPR.
3 Purpose of Data Processing
The processing of personal data serves solely for the purpose of fulfilling the contract.
4 Duration of Storage
Your data will be deleted after the contract has been completed and the tax and commercial retention periods have expired.
5 Opposition and Removal Option
You have the right to revoke the SEPA direct debit mandate in writing at any time. Your stored data will be deleted after the expiration of tax and commercial retention periods.
XIV – Amazon MWS Data
1 Description and Scope of Data Processing
SnapTrade utilizes data accessible through the customer’s Amazon MWS (Marketplace Web Service) access. Amazon MWS is an integrated web service API that aids Amazon sellers in programmatically exchanging information about listings, orders, payments, reports, and more. Integrating data with Amazon facilitates a high level of sales automation, potentially helping sellers to boost their sales. Utilizing Amazon MWS, sellers can enhance their sales efficiency, reduce their workload, and respond more swiftly to customer inquiries. In addition to accessing the seller’s product range, personal sales data are also imported into SnapTrade. The collected and processed data includes:
(1) Date of purchase
(2) Amazon marketplace
(3) Delivery address
(4) Billing address
(5) Invoice amount and currency
(6) Item number and quantity ordered
The following data is anonymized:
(1) Buyer name
(2) Telephone number
2 Legal Basis for Data Processing
The processing of personal data necessary for the fulfillment of a contract to which the data subject is party, or for performing pre-contractual measures, is based on Article 6(1)(b) GDPR.
3 Purpose of Data Processing
The processing of personal data serves solely the purpose of fulfilling the contract.
4 Duration of Storage
Your data will be deleted after the processing of the contract is completed and the marketplace data is no longer needed.
5 Objection and Removal Option
As a contracting party, you have the right to terminate the agreement at any time, with respect to the notice period. Upon termination, your stored data will be automatically deleted. You have the ability to modify or delete the stored data at any time. Please contact us in writing via email or postal mail for such requests.
XV – Applications
1 Description and Scope of Data Processing
If you submit an application to SnapSoft GmbH, it can be done electronically via email or traditionally by letter. The data collected and processed includes:
(1) Name
(2) Address
(3) Email address
Voluntary information includes:
(4) Telephone number
(5) Passport photo
(6) Information from the curriculum vitae such as family information, educational background, driver’s license, hobbies, etc.
(7) Employment references with details on previous employment, activities, etc.
2 Legal Basis for Data Processing
The legal basis for processing the data is Article 6(1)(f) GDPR.
3 Purpose of Data Processing
The processing of personal data is utilized for managing the application process.
4 Duration of Storage
The data will be deleted when they are no longer necessary for the purpose for which they were collected, and no other legitimate interests exist for further processing. A legitimate interest might be, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG). However, if employment occurs, data relevant to the employment relationship will be retained.
5 Objection and Removal Option
The collection of data is essential for conducting the application process. You may object to the processing of your data at any time and request deletion of your data. If so, the application process will be terminated. Please reach out to us in writing, either by post or email, to initiate this process.
XVI – Social networks
1 Description and Scope of Data Processing
We maintain user accounts on various social media channels to enhance our visibility and engage with our customers and prospects across different platforms. Specifically, you can find us on:
LinkedIn, provided by LinkedIn Corp, located at 2029 Stierlin Court, Mountain View, CA 94043, USA.
Xing, provided by New Work SE, located at Am Strandkai 1, 20457 Hamburg, Germany.
Twitter, provided by Twitter Inc, located at One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland.
Facebook and Instagram, both provided by Meta Platforms Ireland Ltd, located at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Purpose of Data Processing
Our presence on social media platforms is aimed at providing responsive communication channels for our customers and prospects, and it serves as a complement to our digital marketing efforts. Visiting our social media pages may result in the storage of personal data by the platform operators. If you are logged into your account on these platforms, your visit to our social media pages could be linked with your user account data by the platform operators. The data processing practices of the platform operators are beyond our control; for more details, please refer to the privacy policies of the individual platforms.
3 Legal Basis for the Processing of Personal Data
Our social media presences are operated based on our legitimate interests in efficient communication and marketing opportunities, as allowed under Article 6(1)(f) GDPR. Considering that many of the platform operators or their parent companies are based in the USA, we have entered into data protection agreements incorporating the EU Commission’s standard contractual clauses with these operators. These clauses oblige the operators to process data only as per our directives and ensure a level of data protection equivalent to that in the EU.
4 Duration of Storage
We lack the technical means to delete data from your social media account. For such actions, please directly contact the respective platform operator.
5 Objection and Removal Option
For objections and deletion requests concerning data stored by the social media platforms, please contact the relevant platform operator directly or manage/delete your data within your user account on the respective platform.
XVII – Google Tag Manager
1 Description and Scope of Data Processing
This website employs Google Tag Manager, a tool provided by Google Inc. (“Google”). Google Tag Manager facilitates the management of website tools and tags. It processes the IP address of visitors to the website and may use cookies. Given that the processing of a visitor’s IP address by Google LLC, the US parent company, cannot be entirely excluded, Google Tag Manager is deployed only with the explicit consent of the visitor, in line with Article 6(1)(a) GDPR.
2 Legal Basis for the Processing of Personal Data
The processing is based on the visitor’s consent, as stipulated by Article 6(1)(a) GDPR.
3 Purpose of Data Processing
Google Tag Manager is used for the technical management of the website, facilitating the administration and loading of additional plugins and tools.
4 Duration of Storage
Cookies are stored on the user’s device and transmitted to our website. Users have full control over the use of cookies. By modifying internet browser settings, users can disable or restrict the transmission of cookies. Already stored cookies can be deleted at any time, and this process can also be automated. If cookies are disabled for our website, full functionality of the site may not be available.
5 Objection and Removal Option
Users can prevent the storage of cookies by adjusting their browser software accordingly. However, please note that doing so may limit your ability to fully use all features of this website.
XVIII – HubSpot
1 Description and Scope of Data Processing
For our digital marketing efforts, we utilize the services provided by HubSpot Inc. (located at 25 First St, 2nd Floor, Cambridge, MA 02141, USA), which also has offices in Germany (Am Postbahnhof 17, 10243 Berlin) and Ireland (One Dockland Central, Dublin 1, Ireland).
2 Purpose of Data Processing
HubSpot is employed to handle inquiries from customers and interested parties. We use HubSpot as a customer relationship management (CRM) system and as a sales marketing automation platform. Our sign-up service enables visitors to our website to learn more about our company, download content, and provide contact and other demographic information. This data is stored on servers managed by HubSpot and may be used by us to contact website visitors and identify services of interest to them. All collected information is governed by this privacy policy, and we only use the information to refine our marketing strategies.
3 Legal Basis for the Processing of Personal Data
The deployment of HubSpot is based on our legitimate interest in efficient and prompt handling of user requests and the optimization of our online offerings, as per Article 6(1)(f) GDPR. Given HubSpot’s headquarters in the USA, we have entered into an agreement incorporating the standard contractual clauses with HubSpot, where HubSpot commits to processing user data only as per our directives and adhering to the EU level of data protection standards. For more information on HubSpot’s privacy practices, please visit HubSpot’s website (https://legal.hubspot.com/dpa and https://legal.hubspot.com/privacy-policy, as of July 2023).
4 Duration of Storage
Inquiries are deleted when they are no longer necessary. Customers with an account can independently delete inquiries. However, inquiries from active customer accounts are not deleted. In case of legal archiving requirements, deletion occurs after these obligations expire (e.g., following the tax law retention period of 10 years).
5 Objection and Removal Option
You may decline the use of cookies by selecting the appropriate settings on your browser; however, please note that doing so may limit your ability to fully experience all features of this website.
XIX – YouTube
1 Description and Scope of Data Processing
Our website features videos embedded from the video platform YouTube, which is operated by YouTube LLC, located at 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”). When you visit a page on our website that contains an embedded YouTube video, you will initially be asked for your consent to data transmission to and from YouTube. If consent is provided, your browser will establish a connection with YouTube’s servers.
2 Purpose of Data Processing
We embed YouTube videos to provide a platform with a wide user base and superior user experience, catering to many users who have YouTube accounts and prefer to save videos for easy access. Our goal is to enhance user convenience by integrating YouTube’s video platform.
When you play a YouTube video on our site, certain data, such as your IP address and the site from which the request is made, are transmitted to YouTube. If you are logged into your YouTube account, YouTube may associate your video viewing on our site with your account data. This data processing is beyond our control.
3 Legal Basis for the Processing of Personal Data
The integration of YouTube on our website is based on your explicit consent, as indicated by your activation within the YouTube frame on our site (Article 6(1)(a) GDPR). Given that YouTube’s U.S. and Irish subsidiaries fall under Google, which is headquartered in the USA, we have entered into an agreement with YouTube incorporating the standard contractual clauses, ensuring that YouTube processes user data solely under our direction and in compliance with EU data protection standards. For more information on YouTube’s privacy policy, you can visit YouTube’s privacy policy page: (currently available at https://policies.google.com/privacy?hl=en, as of July 2023).
4 Duration of Storage
YouTube stores data for varying lengths of time, depending on factors such as whether you have a YouTube account. Account holders can manage and request the deletion of their data directly within their accounts.
5 Objection and Removal Option
Your consent can be withdrawn at any time, allowing you to manage your data preferences and exercise your right to object to data processing.
XX – Web Analysis Using Piwik Pro
1 Description and Scope of Data Processing
Our website has incorporated the service Piwik Pro from Piwik Pro GmbH, located at Kurfürstendamm 21, 10719 Berlin. This integration allows us to conduct web analytics to tailor our website to the interests of our customers.
2 Purpose of Data Processing
The aim of web analytics is to identify the primary interests of our customers and other visitors to our website. Understanding these interests helps us enhance our website by making it more relevant and engaging for users.
3 Legal Basis for the Processing of Personal Data
Web analytics through Piwik Pro is conducted based on your explicit consent, as per Article 6(1)(a) GDPR.
4 Duration of Storage
Cookies set by Piwik Pro have a lifespan of 14 months.
5 Objection and Removal Option
You have the right to withdraw your consent at any time, with future effect. To technically revoke your consent, you are advised to block Piwik Pro cookies in your browser settings and delete any existing cookies that were set with your consent.
XXI – Meta Pixel
1 Description and Scope of Data Processing
We have implemented the Meta Pixel service (previously known as Facebook Pixel), provided by Meta Platforms Ireland Ltd, located at 4 Grand Canal Square, Dublin 2, Ireland. This tool is utilized for executing targeted advertising campaigns aimed at potential and existing customers. The Facebook Pixel, a piece of code on our website, allows Facebook to track user actions post-clicking on our Facebook ads. For example, if you complete a purchase on our site, the Facebook Pixel interacts with cookies to link this activity, including your IP address, to your Facebook account, given you’re logged into Facebook during this interaction. This integration aids in customizing our advertising to match your interests, assuming you’ve enabled personalized ads on Facebook. Your ad preferences on Facebook are adjustable at any time.
2 Purpose of Data Processing
The primary goal of using web analytics, including Meta Pixel, is to grasp our customers’ interests and enhance our website accordingly with content that resonates with our audience.
3 Legal Basis for Processing Personal Data
This data processing is founded on your explicit consent as outlined in Article 6(1)(a) GDPR. Meta Platforms, based in the US and certified under the EU-US Data Privacy Shield, guarantees a level of data protection compliant with EU standards. Furthermore, Meta Platforms Ireland Ltd follows the European Commission’s standard contractual clauses as per Article 46 GDPR, ensuring adherence to data protection regulations.
4 Duration of Storage
The Meta Pixel code is a permanent fixture on our website, activated upon each user visit.
5 Objection and Removal Options
Facebook users can adjust the remarketing feature “Custom Audiences” within the ad settings of their Facebook account; login is necessary. For those without a Facebook account, Meta/Facebook’s targeted advertising can be disabled via the European Interactive Digital Advertising Alliance’s platform: https://www.youronlinechoices.com/de/praferenzmanagement/
XXII – LinkedIn Insight
1 Description and Scope of Data Processing
Our website employs LinkedIn Insight, a service provided by LinkedIn Ireland Unlimited Company, located at Wilton Place, Dublin 2, Ireland (“LinkedIn”), to analyze visitor information for the optimization of our services. The LinkedIn Insight Tag is a piece of code embedded in our website that enables us to more effectively target our advertising campaigns to LinkedIn members. This tool allows us to track customer interactions with our ads, evaluate the success of our advertising efforts, and tailor our marketing strategies based on the insights gained. The use of cookies facilitates the connection of your visit to our website with your interaction with our LinkedIn advertisements. Information collected includes your IP address, referrer URL, device and browser details, and the time of visit. LinkedIn anonymizes or hashes the IP address for enhanced data protection. Additionally, demographic information from your LinkedIn profile, such as location or industry, may be processed. We receive aggregated statistical analyses from LinkedIn that do not reveal individual identities but provide insights into overall ad interaction rates.
2 Purpose of Data Processing
This data processing is aimed at refining our marketing strategies and enhancing our online offerings.
3 Legal Basis for Processing Personal Data
This processing is grounded in your explicit consent, as outlined in Article 6(1)(a) GDPR. LinkedIn, through its parent company LinkedIn Corporation in the USA, certified under the EU-US Data Privacy Shield, ensures data protection standards equivalent to those of the EU. Moreover, adherence to the European Commission’s standard contractual clauses under Article 46 GDPR guarantees compliance with data protection regulations.
4 Duration of Storage
LinkedIn Insight Tag anonymizes direct identifiers within seven days. You have the option to halt the processing of personal data retained by LinkedIn by deleting your LinkedIn account.
5 Objection and Removal Options
You may opt-out of conversion tracking either through our Consent Manager (Cookie Banner) or by adjusting your browser settings accordingly.
XXIII – Lead Ads
1 Description and Scope of Data Processing
Our services are advertised on social networks, including Facebook and LinkedIn, where we employ lead ads that allow you to input personal data into a form. This data, which you voluntarily submit, is used for advertising purposes and/or to contact you. Your participation in these ads is entirely voluntary and comes with no obligations. Only the information you choose to provide is processed.
The platform hosting the lead ad (Facebook or LinkedIn) does not use the data you enter for its own purposes. Instead, it merely processes this data as needed to transmit it to us.
2 Purpose of Data Processing
Our goal with lead ads is to gain a deeper understanding of our customers and their interests. The information gathered is utilized to assess the effectiveness of our advertising campaigns and to establish contact with individuals.
3 Legal Basis for Processing Personal Data
Submitting data through lead ads is voluntary and based on your consent, as defined under Article 6(1)(a) of the GDPR.
4 Duration of Storage
The data collected from the questionnaires is stored for varying durations, depending on the purpose of the processing. Data that leads to newsletter subscriptions or is necessary for establishing contact is retained until the purpose for its collection no longer exists. Data collected for the evaluation of an advertising campaign is kept until the campaign’s completion and is anonymized whenever possible.
5 Objection and Removal Options
You have the right to contact us at any time to request the deletion of your data.
XXIV – Lead Ads Meta
1 Description and Scope of Data Processing
We have integrated the Meta Conversion API service, an interface and marketing analytics service provided by Meta Platforms Ireland Ltd, located at 4 Grand Canal Square, Dublin 2, Ireland, to analyze the effectiveness of our advertising campaigns.
Through the interface, we send data such as IP addresses, device information, pages visited, and any contact information to Meta to optimize our advertisements.
If you are logged into your Facebook account at the time of interaction with the Facebook Pixel, the visit to our website will be associated with your Facebook user account.
With the Facebook Pixel, we can tailor our advertising measures to your interests and preferences, provided you have allowed personalized advertising as a Facebook user. You can change your settings on Facebook at any time.
2 Purpose of Data Processing
Through web analytics, we aim to understand the interests of our customers and other website visitors to enhance our website and populate it with relevant content.
3 Legal Basis for the Processing of Personal Data
The aforementioned processing is based on your explicit consent in accordance with Article 6(1)(a) of the GDPR. We process the data as joint controllers under the terms of Article 26 GDPR. Our responsibility pertains to the collection and transmission of data to Meta. Meta is responsible for further processing of the data.
Facebook/Meta Platforms is a US-based company certified under the EU-US Data Privacy Framework, thereby ensuring a level of data protection consistent with EU law. Additionally, Meta Platforms Ireland Ltd adheres to the EU Commission’s Standard Contractual Clauses pursuant to Article 46 GDPR.
4 Duration of Storage
For information on the duration of data storage by Meta, please contact the company directly.
5 Right to Object and Erasure
You may withdraw your consent at any time.
XXV – Rights of the Data Subject
If your personal data is being processed, you, as the data subject under the GDPR, have the following rights with respect to the data controller:
1 Right of Access (Article 15 GDPR):
You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if that is the case, access to the personal data.
2 Right to Rectification (Article 16 GDPR):
You have the right to have inaccurate personal data about you corrected and incomplete personal data completed.
3 Right to Restriction of Processing (Article 18 GDPR):
You have the right to request the restriction of processing of your personal data under certain conditions.
4 Right to Erasure (‘Right to be Forgotten’, Article 17 GDPR):
You have the right, under certain conditions, to obtain the erasure of your personal data.
5 Right to be Informed (Article 19 GDPR):
If you have exercised the right to rectification, erasure, or restriction of processing, the controller is obliged to notify all recipients to whom the personal data have been disclosed.
6 Right to Data Portability (Article 20 GDPR):
You have the right to receive the personal data concerning you, which you have provided to a controller, in a structured, commonly used, and machine-readable format, and have the right to transmit those data to another controller.
7 Right to Object (Article 21 GDPR):
You have the right to object to the processing of your personal data under certain conditions, especially in the case of direct marketing.
8 Right to Withdraw Consent (Article 7(3) GDPR):
You have the right to withdraw your consent to the processing of your personal data at any time.
9 Automated Individual Decision-making, Including Profiling (Article 22 GDPR):
You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
10 Right to Lodge a Complaint with a Supervisory Authority (Article 77 GDPR):
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority.
Status: 19.12.2022