Privacy Policy

In this privacy policy, we inform you about the processing of personal data and about accessing and storing information on your device when using our website. Personal data refers to information relating to an identified or identifiable individual. This includes, in particular, details that allow conclusions to be drawn about your identity, such as your name, telephone number, address, or email address. But also, certain identifiers such as your IP address or the device ID of your used device are considered personal data.
1. Name and Address of the controller
Controller for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in member states of the European Union and other provisions related to data protection is:

ecolytiq GmbH
Schlesische Straße 26
10997 Berlin
Germany
Phone: +49 30 2201232-0
Email: info@ecolytiq.com
Website: www.ecolytiq.com
2. Information of the Data Protection Officer
The Data Protection Officer of the controller is:

ISiCO Datenschutz GmbH
Am Hamburger Bahnhof 4
10557 Berlin
Email: datenschutz@ecolytiq.com

Any data subject may, at any time, contact our Data Protection Officer directly with all questions and suggestions concerning data protection. We expressly point out that when using this e-mail address, the contents are not exclusively acknowledged by our Data Protection Officer. If you wish to exchange confidential information, you should therefore first request direct contact with the Data Protection Officer via this e-mail address.
3. Data processing on our website
3.1. Accessing our website / connection data

Each time you use our website, we process connection data that your browser automatically transmits to enable you to visit the website. This connection data comprises the so-called HTTP header information, including the user agent, and includes in particular:

·      IP address of the requesting device;
·      Method(e.g. GET, POST), date and time of the request;
·      Address of the requested website and path of the requested file;
·      if applicable, the previously accessed website/file (HTTP referrer);
·      Information about the browser and operating system used;
·      Version of the HTTP protocol, HTTP status code, size of the delivered file;
·      Request information such as language, type of content, content coding, character sets;
·      Cookies stored on the device of the domain accessed.

The data processing of this connection data is absolutely necessary to enable the visit to the website, to ensure the permanent functionality and security of our systems and to maintain our website in general for administrative purposes. The connection data is also stored in internal log files for the purposes described above, temporarily and limited in content to what is absolutely necessary, in order to find the cause and take action in the event of repeated or criminal calls that jeopardise the stability and security of our website (e.g. in case of brute-force attacks).

The legal basis for this processing is Art. 6. (1)(b) GDPR, insofar as the page view occurs in the course of the initiation or execution of a contract, and otherwise Art. 6 (1)(f) GDPR due to our legitimate interest in enabling website access and the permanent functionality and security of our systems.The log files are generally stored for 24 hours and then anonymised.In exceptional cases, individual log files and IP addresses are stored for longer in order to prevent further attacks from this IP address in the event of cyber attacks and/or to take action against the attackers by way of criminal prosecution.


3.2 Contact

You have various ways to get in touch with us. These include the contact form, via email, or signing up for events. In this context, we process your data solely for the purpose of communicating with you. The legal basis for this processing is Art. 6 (1)(b) GDPR, insofar as your information is required to respond to your inquiry or to initiate or perform a contract, and otherwise Art. 6 (1)(f) GDPR due to our legitimate interest in you contacting us and being able to respond to your inquiry. We make promotional phone calls only if you have given your consent. If you are not an existing customer, we will send you promotional emails only based on your consent. The legal basis in these cases is Art. 6 (1)(a) GDPR in conjunction with § 7 (2)nos. 1 or 2 UWG. The data collected by us when you contact us will be automatically deleted after your inquiry has been fully processed, unless we still need your inquiry to fulfill contractual or legal obligations (see section 8 “Data retention”)


3.3. Newsletter

You have the option to subscribe to our newsletters, in which we regularly inform you about updates regarding our products and promotions.

3.3.1 Subscription to our newsletter
On the website of the ecolytiq GmbH, users are given the opportunity to subscribe to our enterprise’s newsletter. The input mask used for this purpose determines what personal data are transmitted, as well as when the newsletter is ordered from the controller.

The ecolytiq GmbH informs its customers and business partners regularly by means of a newsletter about enterprise offers.The enterprise’s newsletter may only be received by the data subject if (1) the data subject has a valid e-mail address and (2) the data subject registers for the newsletter shipping. A confirmation e-mail will be sent to the e-mail address registered by a data subject for the first time for newsletter shipping, for legal reasons, in the double opt-in procedure. This confirmation e-mail is used to prove whether the owner of the e-mail address as the data subject is authorized to receive the newsletter.

During the registration for the newsletter, we also store the IP address of the computer system assigned by the Internet service provider (ISP) and used by the data subject at the time of the registration, as well as the date and time of the registration. The collection of this data is necessary in order to understand the (possible) misuse of thee-mail address of a data subject at a later date, and it therefore serves the aim of the legal protection of the controller.

The personal data collected as part of a registration for the newsletter will only be used to send our newsletter. The subscription to our newsletter may be terminated by the data subject at any time.

The legal basis for processing is your consent in accordance with Art. 6. (1)(a) GDPR. You can withdraw your consent at anytime with effect for the future by unsubscribing from the newsletter. A corresponding unsubscribe link can be found in every newsletter. A message to the contact details given above or in the newsletter (e.g. by e-mail or letter)is of course also sufficient. There will be no transfer of personal data collected by the newsletter service to third parties.

3.3.2 Newsletter tracking / campaign
The newsletter of the ecolytiq GmbH contains so-called tracking pixels. A tracking pixel is a miniature graphic embedded in such e-mails, which are sent in HTML format to enable log file recording and analysis. This allows a statistical analysis of the success or failure of online marketing campaigns. Based on the embedded tracking pixel, the ecolytiq GmbH may see if and when an e-mail was opened by a data subject, and which links in the e-mail were called up by data subjects.Such personal data collected in the tracking pixels contained in the newsletters are stored and analyzed by the controller in order to optimize the shipping of the newsletter, as well as to adapt the content of future newsletters even better to the interests of the data subject.The legal basis for this is your consent in accordance with Art. 6 (1)(a) GDPR. The information in the device is then accessed on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 (1) TDDDG.You can withdraw your consent to the analysis of user behaviour at any time with effect for the future by unsubscribing from the newsletter. You can also prevent the measurement of the opening of an email by deactivating graphics or the output of HTML content in your email program by default.


3.4. Data protection for applications and the application procedures

The data controller shall collect and process the personal data of applicants for the purpose of the processing of the application procedure. The processing may also be carried out electronically.This is the case, in particular, if an applicant submits corresponding application documents by e-mail or by means of a web form on the website to the controller. The legal basis for the processing of your application data is Art. 6 (1)(b) GDPR.If the data controller concludes an employment contract with an applicant, the submitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If no employment contract is concluded with the applicant by the controller, the application documents shall be automatically erased two months after notification of the refusal decision, provided that no other legitimate interests of the controller are opposed to the erasure. Other legitimate interest in this relation is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).
4. Use of tools on the website
4.1. Technologies used

This website uses various services and applications (collectively referred to as “tools”) offered either by us or by third parties. These include tools that use technologies to store information on or access information from the device:

·      Cookies: Information stored on the device, consisting mainly of a name, a value, the storing domain, and an expiration date. So-called session cookies (e.g.,PHPSESSID) are deleted after the session, while so-called persistent cookies are deleted after the specified expiration date. Cookies can also be manually removed.

·      Web Storage (LocalStorage / Session Storage): Information stored on the device, consisting of a name and a value. Information in session storage is deleted after the session, while information in local storage does not have an expiration date and generally remains stored unless a deletion mechanism is inplace (e.g., storing a local storage entry with a timestamp). Information in local and session storage can also be manually removed.

·      JavaScript: Programming code (scripts) embedded in or called by the website, which can, for example, set cookies and web storage or actively capture information from the device or about the browsing behavior of visitors. JavaScript can be used for “active fingerprinting” and the creation of usage profiles. JavaScript can be blocked through browser settings, but most services will then not function.

·      Pixels: Tiny graphics automatically loaded by a service, which can enable the recognition of visitors by automatically transmitting common connection data(particularly IP address, information about browser, operating system, language, accessed address, and time of access) and, for example, detecting the opening of an email or the visit to a website. Pixels can thus potentially be used for “passive fingerprinting” and the creation of usage profiles. The use of pixels can be prevented by blocking images, for example, in emails, but this will significantly limit the display.

With these technologies and even through mere connection establishment on a page, so-called “fingerprints”can potentially be created, i.e., usage profiles that can recognize visitors even without the use of cookies or web storage. Fingerprints due to connection establishment cannot be completely prevented manually. Most browsers are set by default to accept cookies, execute scripts, and display images. However, you can usually adjust your browser settings to reject all or certain cookies, block scripts, and images. If you completely block the storage of cookies, the display of images, and the execution of scripts, our services will likely not function or not function properly. Below, the tools we use are listed by category, and we inform you in particular about the providers of the tools, the purposes of the processing, and the transfer of data to third parties. It is also explained in which cases we obtain your voluntary consent to use the tools and how you can withdraw this consent.


4.2. Legal basis and withdrawal

4.2.1. Legal basis
We use tools necessary for website operation based on our legitimate interest pursuant to Art. 6 (1)(f)GDPR to provide the basic functions of our website. In certain cases, these tools may also be required to fulfill a contract or carry out pre-contractual measures, and in these instances, processing is carried out pursuant to Art. 6(1)(b) GDPR. Access to and storage of information on the device is absolutely necessary in these cases and takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (2) TDDDG.

All other non-essential (optional) tools that provide additional functions are used based on your consent pursuant to Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG. Data processing using these tools only takes place if we have obtained your prior consent for this.

If the transfer of personal data to third countries occurs, we refer you, also with regard to any associated risks, to section 7 (“Data transfer to third countries”).We will inform you if there is an adequacy decision for the respective third country or if standard contractual clauses or other safeguards have been concluded for the use of certain tools. If you have given your consent to the use of certain tools and the associated transfer of your personal data to third countries, we transfer the data processed during the use of the tools (also)based on this consent pursuant to Art. 49 (1)(a) GDPR to third countries.

4.2.2. Obtaining your consent (Cookiebot)
To obtain and manage your consents, we use Cookiebot from Usercentrics Usercentrics A/S Havnegade 39,1058 Kopenhagen, Dänemark (“Usercentrics”). This creates a banner that informs you about data processing on our website and gives you the option to agree to all, individual, or no data processing by optional categories of tools. This banner appears on your first visit to our website and when you access your settings again to change them or withdraw consents. The banner also appears on subsequent visits to our website if you have disabled the storage of cookies orif cookies or information in local storage have been deleted or expired.

During your website visit, your consents or withdrawals, your IP address, information about your browser, your device,and the time of your visit are transmitted to Usercentrics. Additionally, necessary information is stored on your device to document your given consents and withdrawals (e.g. cookie “CookieConsent”, and local storage “CookieConsentBulkSetting-*”).

Data processing is necessary to provide you with the legally required consent management and to fulfill our documentation obligations. The legal basis is Art. 6 (1)(f) GDPR, justified by our interest in meeting the legal requirements for consent management. Access to and storage of information on the device is absolutely necessary in these cases and takes place on the basis of the implementation laws of the EU member states' ePrivacy Directive, in Germany according to § 25 (2) TDDDG.

4.2.3. Withdrawal of your consent or modification of your selection
You can withdraw your consent for certain categories of tools, i.e., for the storage and access to information on the device, the processing of your personal data, and the transfer of your data to third countries, at any time with effect for the future. To do so, click on the round icon in the right lower corner. There, you can also change the selection of tools’ categories you wish to consent to and find additional information about the tools used.Alternatively, you can directly withdraw your consent for certain tools with the respective provider.

4.2.4. Overview of the stored information on your device
You can find a list of stored information on your device, including the name, thetype, the domain, the expiry and the function, in our consent management platform described before. Further information about the data processing and additional stored information you can find below.

4.3. Necessary tools
We use certain tools to enable the basic functions of our website (“necessary tools”).These include, for example, tools for the preparation and display of website content, for the management and integration of tools, for the provision of payment processing services, for fraud detection and prevention, as well as for ensuring the security of our website. Without these tools, we could not provide our service. Therefore, necessary tools are used without consent.The legal basis for necessary tools is the necessity to fulfill our legitimate interests according to Art. 6 (1)(f) GDPR in providing the respective basic functions and operating our website. In cases where the provision of the respective website functions is necessary for the fulfillment of a contract or the implementation of pre-contractual measures, the legal basis for data processing is Art. 6 (1)(b)GDPR. Access to and storage of information on the device is absolutely necessary in these cases and takes place on the basis of the implementation laws of the EU member states' ePrivacy Directive, in Germany according to § 25 (2)TDDDG.In the event that personal data is transferred to third countries, we also refer you to the information provided in Section 7 below (“Data transfer to third countries”).

4.3.1. Google Tag Manager
Gordon House, Barrow Street, Dublin 4,Ireland for users from Europe, the Middle East, and Africa (EMEA), and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for all other users (collectively “Google”).Google Tag Manager facilitates the management of website tools by integrating website tags, elements stored in the website's source code to execute various tools, such as scripts. If these tools are optional, they are integrated by Google Tag Manager only with your explicit consent. Google Tag Manager operates using JavaScript and does not rely on cookies.The legal basis is Art. 6 (1)(f) GDPR, grounded in our legitimate interest to integrate and manage multiple tags on our website efficiently. Google collects information regarding the tags integrated through our website to ensure stability and functionality when using Google Tag Manager. However, Google Tag Manager does not store any personal data beyond establishing a connection, particularly no data concerning user behavior or visited pages.We have concluded a data processing agreement with Google Ireland Limited. Your personal data may also be transferred by Google Ireland Limited to Google LLC in the USA. Google LLC has joined the EU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.For more information, please see Google’s Tag Manger information: https://support.google.com/tagmanager/answer/6102821, or its privacy policy: https://policies.google.com/privacy.

4.3.2. HubSpot Forms
On this website we use HubSpot Forms from HubSpot Ireland Limited, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. HubSpot Forms is used to create forms for user’s input, e.g. for making contact or newsletter subscription. For these purposes, HubSpot uses cookies (e.g. “__cf_bm”, “_cfuvid”),pixel, and JavaScript. The used cookies ensure the main functionality of the forms.

The legal basis of the processing is Art. 6 (1)(b)GDPR, for handling and responding to contact requests, and otherwise our legitimate interest according to Art. 6 (1)(f)GDPR to implement and show forms on our website. Access to and storage of information in the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (2) No. 2 TDDDG.

We have concluded a data processing agreement with HubSpot Ireland Limited. Your personal data may also be transferred by HubSpot Ireland Limited to HubSpot, Inc., Two Canal Park, Cambridge, MA 02141in the USA. HubSpot Inc. has joined the EU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.For more information, please see HubSpot's privacy policy: https://legal.hubspot.com/privacy-policy, or its cookie information: https://knowledge.hubspot.com/privacy-and-consent/what-cookies-does-hubspot-set-in-a-visitor-s-browser.


4.4.   Functional tools

We also use optional tools to enhance the user experience on our website and offer you more features (“functional tools”). While these are not strictly necessary for the basic functions of the website, they can provide significant benefits to visitors, particularly regarding user-friendliness and the provision of additional communication, display, or payment channels. This may include, in particular, the integration of external content such as maps and videos, as well as registration via an existing social network account.

The legal basis for the functional tools is your consent pursuant to Art. 6 (1)(a)GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 (1) TDDDG. For withdrawing your consent, see section 4.2.3: “Withdrawal of your consent or modification of your selection”.In the event that personal data is transferred to third countries, we also refer you to the information provided in Section 7 below (“Data transfer to third countries”).

4.4.1 YouTube
We have embedded videos on our website that are stored on YouTube and can be played from our websites. YouTube is a multimedia service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”), offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from Europe, the Middle East, and Africa (EMEA), and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for all other users (collectively“Google”).

YouTube may store information such as cookies (e.g. “VISITOR_INFO1_LIVE”, “LAST_RESULT_ENTRY_KEY”,“YSC”), local storage (e.g. “yt-remote-device-id”, “yt-player-*”,“yt.innertube::*”), and session storage (e.g. “yt-remote-*”, “yt-player-*”) on your device, as well as execute JavaScript that accesses information on your device. Most of the information stored on the device is used to control the functionality of the video player, particularly the volume and subtitles settings, as well as video parameters such as bandwidth, resolution and quality.

The legal basis for this data processing is your consent in accordance with Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 (1) TDDDG.

Your personal data may also be transferred by Google Ireland Limited toGoogle LLC in the USA. Google LLC has joined the EU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.

By visiting our website, YouTube and Google receive the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether you are logged in to YouTube or Google or not. YouTube and Google use this data for advertising, market research, and to tailor their services to user needs. If you access YouTube on our website while logged into your YouTube or Google profile, YouTube and Google may also associate this event with the respective profiles. If you do not wish for this association to occur, it is necessary for you to logout of Google before accessing our website.

In addition to withdrawing your consent, you also have the option to disable personalized advertising in Google's advertising settings: https://adssettings.google.com/notarget.

For more information, please see Google’s privacy policy: https://policies.google.com/privacy.


4.5. Statistics tools

To improve our website, we use optional tools for recognizing visitors as well as for the statistical collection and analysis of general usage behavior based on access data (“statistics tools”). We also use analytics services to evaluate the use of our various marketing channels. The collected usage information is aggregated and allows us to understand the usage habits of our visitors. This helps us to adapt and optimize the design of our website and make the user experience more pleasant.

The legal basis for the statistics tools is your consent pursuant to Art. 6 (1)(a)GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 (1) TDDDG. For withdrawing your consent, see section 3.2.3: “Withdrawal of your consent or modification of your selection”.

In the event that personal data is transferred to third countries, we also refer you to the information provided in Section 7 below (“Data transfer to third countries”).

4.5.1. Google Analytics 4
Our website uses the Google Analytics 4 service (“Google Analytics”), which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,Ireland for users from Europe, the Middle East, and Africa (EMEA), and byGoogle LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for all other users (collectively “Google”).

Google Analytics uses JavaScript and pixels to read information on your device, as well as cookies (e.g. “_ga”, “_ga_H8LP7P2L64”, “IDE”) to store information on your device. This is used to analyze your usage behavior and improve our website. We will process the obtained information to evaluate your use of the website and to compile reports on website activities for the website operators. The data collected in this context may be transmitted to a server in the USA and stored there for evaluation by Google. The IP address will be anonymized before data evaluation. Furthermore, old user visit logs will be deleted automatically after specified retention period.

As part of the evaluation, Google Analytics also uses artificial intelligence such as machine learning for automated analysis and enrichment of data. Especially,Google Analytics models conversions when there is not enough data available to optimize evaluations and reports. Data evaluations are automated using artificial intelligence or based on specific individually defined criteria.

The following data is processed by Google Analytics:

·      IP address;
·      User ID, Google ID (Google Signals), and/or device ID;
·      Referrer URL (previously visited page);
·      Visited pages (date, time, URL, title, duration of stay);
·      Events and activities (e.g., scroll activity, downloaded files, clicked links to other websites, interaction with videos and forms, search queries);
·      Achievement of certain goals (conversions); Technical information: operating system; browser type, version, and language; device type, brand, model, and resolution;
·      Approximate location (country and possibly city, based on anonymized IP address).

The legal basis for this data processing is your consent in accordance with Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG.

We have concluded a data processing agreement with Google Ireland Limited. Your personal data may also be transferred by Google Ireland Limited to Google LLC in the USA. Google LLC has joined the EU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.For more information, please see Google’s privacy policy: https://policies.google.com/privacy.

4.5.2. HubSpot Analytics
We use HubSpot Analytics from HubSpot Ireland Limited, 2nd Floor 30 North Wall Quay,Dublin 1, Ireland (“HubSpot”), as an analysis service to statistically evaluate our online offering. This includes, for example, the number of visits to our online offering, visited subpages, and the length of time visitors spend on them.

HubSpot Analytics uses cookies (e.g. “__cf_bm”, “_cfuvid”, “__cfruid”), local storage,pixel, JavaScript and other browser technologies to analyze user behavior and recognize users, to monitor the first, last and current session, and to evaluate advertising campaigns. HubSpot also processes data about the visitor's device and behaviour, tracks the visitor across devices and marketing channels, collects information on user preferences and/or interaction with web-campaign content.

This information is used, among other things, to compile reports on website activity. In addition, we utilize HubSpot Call-to-Actions and HubSpot Lead Flows to track interactions with our visitors and generate potential leads.HubSpot is also used for promoting events or products.

The legal basis for this data processing is your consent in accordance with Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG.

We have concluded a data processing agreement with HubSpot Ireland Limited. Your personal data may also be transferred byHubSpot Ireland Limited to HubSpot, Inc., Two Canal Park, Cambridge, MA 02141 in the USA. HubSpot Inc. has joined the EU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.

For more information, please see HubSpot’s privacy policy: https://legal.hubspot.com/privacy-policy.

4.5.3. Apollo Search & Prospecting
We use Apollo Search & Prospecting from Zen Leads Inc. d/b/a Apollo.io, 440 N Barranca Ave #4750, Covina, CA 91723-1722, USA (“Apollo”). Apollo allows us to discover the names of companies that visit our website and to track our website visitors to understand whether prospects are actively engaging with our website. In addition, Apollo displays snapshots for identified companies with public information (such as contact information, employees) which have visited our website, as well as the number of visitors and the most visited pages. Apollo can filter visits by various parameters, such as time period, URL.Profiles are created about the visits of companies. Therefore, we use JavaScript to access information from your device and we store information in the local storage of the device (e.g. “apolloAnoId”, “eventQueue”).

The legal basis for this data processing is your consent in accordance with Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG.

Your personal data may also be transferred to the USA. ZenLeads Inc. has joined the EU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.

For more information, please see Apollo’s privacy policy: https://www.apollo.io/privacy-policy.


4.6.   Marketing tools

We also utilize optional tools for advertising purposes (“marketing tools”). Some of the access data generated during your use of our website is used to create usage profiles, which store information such as your usage behavior, viewed or clicked advertisements, and the categorization into advertising categories, interests, and preferences. By analyzing and evaluating this access data, we are able to display personalized advertising on our website and on the websites and services of other providers that corresponds to your actual interests and needs. We also analyze your usage behavior to recognize you on other sites and to address you personally based on your use of our site (so-called retargeting). Furthermore, we evaluate the effectiveness and success of our advertising campaigns (particularly conversions and leads).

The legal basis for the marketing tools is your consent pursuant to Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG. For withdrawing your consent, see section 3.2.3: “Withdrawal of your consent or modification of your selection”.

In the event that personal data is transferred to third countries, we also refer you to the information provided in Section 7 below (“Data transfer to third countries”).

In the following section, we would like to explain the tools and the providers used for this purpose in more detail. The collected data may include:

·      The device's IP address;
·      Information from a cookie and in local or session storage;
·      Device identifiers for mobile devices (e.g., device ID, advertising ID);
·      Referrer URL (previously visited page);
·      Pages visited (date, time, URL, title, duration); Downloaded files;
·      Clicked     links to other websites;
·      Achievement of specific goals (conversions), if applicable;
·      Technical information: operating system; browser type, version, and language; device type, brand, model, and resolution;
·      Approximate location (country and possibly city).

However, the collected data is stored only pseudonymously, so no immediate conclusions can be drawn about individuals.

4.6.1. Google Ad Manager (DoubleClick)
Our website uses Google Ad Manager, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from Europe, the Middle East, and Africa (EMEA), and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA for all other users (collectively “Google”).

Google Ad Manager uses cookies (e.g.“IDE”), pixels and other technologies to present you with adverts that are relevant to you. The use of the service enables Google and its partner websites to display adverts based on previous visits to our or other websites on the internet.In addition, this service is used to create and analyse reports on advertising campaigns. The service is also used to avoid multiple displays of the same adverts and to generate commission statements. Google also processes the data to improve and further develop its own products and services, to test the algorithms for displaying adverts, to monitor latency for end users and to ensure the accuracy of the forecasting system.

The legal basis for this data processing is your consent in accordance with Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG.

Your personal data may also be transferred by Google Ireland Limited to Google LLC in the USA. Google LLC has joined theEU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.

If you have not consented to the use of Google Ad Manager, Google will only display general advertising that has not been selected based on the information collected about you on this website.

In addition to withdrawing your consent, you also have the option of deactivating personalised advertising in Google's advertising settings: https://adssettings.google.com/notarget.

For more information, please see Google'sprivacy policy: https://policies.google.com/privacy.

4.6.2. LinkedIn Insight Tag (LinkedIn Analytics, LinkedIn Ads)
Our website utilizes the LinkedIn Insight Tag service, which is provided byLinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2,Ireland for users from the European Economic Area and Switzerland, and byLinkedIn Corporation, 2029 Stierlin Ct. Ste. 200 Mountain View, California 94043,USA for all other users (collectively “LinkedIn”).

This allows us to collect statistical data about your visit and usage of our website and to analyze it. It enables us to display interest-based and relevant offers, recommendations, and advertisements on LinkedIn (retargeting). Additionally, within this scope, an analysis of the effectiveness of advertisements(conversion tracking) is conducted. LinkedIn uses cookies (e.g. “AnalyticsSyncHistory”,“UserMathHistory”, “li_sugr”, “lidc”, “bcookie”), pixels, and JavaScript for this purpose.

The legal basis for this data processing is your consent in accordance with Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG.

If you are logged into LinkedIn while visiting our website, LinkedIn may link the collected information to your member account and use it for targeted advertising on LinkedIn. You can view your privacy settings on LinkedIn at the following link: https://www.linkedin.com/psettings/enhanced-advertising.

We have entered into a data processing agreement with LinkedIn. Your personal data may be transferred from LinkedIn Ireland Unlimited Company to LinkedIn Corporation in the USA. LinkedIn Corporation has joined the EU-US Data PrivacyFramework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.

For more information, please see LinkedIn's privacy policy: https://de.linkedin.com/legal/privacy-policy, or its cookie information: https://www.linkedin.com/legal/l/cookie-table.

4.6.3. Outbrain
Our website uses the technology provided by Outbrain Inc., 111 West 19th Street, 3rd Floor, New York, NY 10011, USA (“Outbrain”), to suggest further content that may also be of interest to our visitors within our website and on third-party websites.

The additional reading recommendations integrated by Outbrain, for example, below an article, are determined based on the previously read content. To display these interest-based additional content, Outbrain uses cookies (e.g. “dicbo_id”),among other things, which are stored on the visitors' devices. The content displayed in the Outbrain widget is automatically controlled and delivered by Outbrain both in terms of content and technology.

Outbrain creates a unique identifier for visitors using cookies, a UUID (Unique UserIdentifier). The UUID is a sequence of numbers and/or letters. The recommendations for articles are based on:

·      Browser history;
·      Similar surfing patterns of other visitors;
·      Recommendations popular with Outbrain's audience at the time;
·      A certain degree of randomness;
·      Target requirements of Outbrain's clients.

To achieve this, Outbrain collects the following data in addition to a UUID:

·      IP address (anonymized according to industry standards);
·      User-Agent data: device type (e.g., iPhone), browser type (e.g., Chrome), operating system (e.g., iOS);
·      Pages visited;
·      Time of visit; Referring URLs and other information typically transmitted with HTTP requests.

The UUID is tied to your device and varies depending on the browser used. In other words, Outbrain collects different UUIDs depending on which device and/or browser you use to access partner websites. This means, for example, that you will have one UUID when visiting a partner website from your mobile phone using the Safari browser and another UUID when visiting a partner website from your iPad using the Safari browser. Outbrain combines and consolidates a UUID from a mobile device (handheld or tablet) from a browser, which then accesses an application from the same device (or vice versa). By assigning a UUID, Outbrain can combine the visited pages and clicks on Outbrain's recommendations from this UUID, all aimed at providing interesting recommendations. The display of reading recommendations by Outbrain using cookies is purely pseudonymous.

The legal basis for this data processing is your consent in accordance with Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG.

Your personal data may also be transferred in the USA. Outbrain Inc. has joined the EU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.

In addition to withdrawing your consent, you also have the option of deactivating personalised advertising with Outbrain: https://my.outbrain.com/recommendations-settings/optout/.

For more information, please see Outbrain's privacy policy: https://www.outbrain.com/privacy/, or its cookie information: https://www.outbrain.com/privacy/cookies/.

4.6.4. Google AdSense
Our website uses the Google AdSense service, which is provided by Google Ireland Limited, GordonHouse, Barrow Street, Dublin 4, Ireland for users from Europe, the Middle East, and Africa (EMEA), and by Google LLC, 1600 Amphitheatre Parkway, Mountain View,CA 94043, USA for all other users (collectively “Google”).

Google AdSense enables the placement of advertisements on third-party sites based onan algorithm that selects the ads displayed on third-party sites to match the content of those sites. This allows for interest-based targeting of visitors through the generation of individual usage profiles. When you visit our website, your usage is analyzed and evaluated for this purpose. With each page visit, data is automatically transmitted to Google for the purposes of online advertising, generating advertising revenue, and commission billing. Google becomes aware of personal data such as your IP address, which is used, among other things, to track the origin of visitors and clicks on advertisements.Google also processes the data to improve and develop its own products and services, enhance ad serving on third-party sites, reporting, and to prevent and combat fraud and abuse. For this purpose, Google AdSense uses cookies (e.g.“_gcl_au”), which are stored on your device, and pixels that establish a connection to the Google server. The data collected in this context may be transmitted by Google to a server in the USA for evaluation and storage.

The legal basis for this data processing is your consent in accordance with Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG.

Your personal data may also be transferred by Google Ireland Limited to Google LLC in the USA. Google LLC has joined the EU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.

If you use a Google account, Google may link your web and app browsing history with your Google account, depending on the settings stored in your Google account, and use information from your Google account to personalize ads. If you do not want this association with your Google account, it is necessary to logout of Google before visiting our website.

If you have not consented to the use of Google AdSense, Google will only display general advertisements that are not selected based on the information collected about you on this website. In addition to withdrawing your consent, you also have the option to disable personalized advertising in Google’s advertising settings: https://adssettings.google.com/notarget.

For more information, please see Google’s data usage notices: https://policies.google.com/technologies/ads, and its privacy policy: https://policies.google.com/privacy.

4.6.5. Google Ads Conversion Tracking and Remarketing
Our website uses the Google Ads services, which is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for users from Europe, the Middle East, and Africa(EMEA), and by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043,USA for all other users (collectively “Google”).

With GoogleAds, customer actions defined by us (such as clicking on an ad, page views, downloads) are recorded and analysed using “Google Ads Conversion Tracking”. We use “Google Ads Remarketing” to show you individualised advertising messages for our products on Google partner websites. Both services use cookies (e.g.“_gcl_au”, “IDE”), JavaScript, pixels and other technologies for this purpose. Google also processes the data to improve and further develop its own products and services, for aggregated statistical analysis of conversions and to improve the quality and accuracy of conversions.

The legal basis for this data processing is your consent in accordance with Art. 6 (1)(a) GDPR. Access to and storage of information on the device then takes place on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to§ 25 (1) TDDDG.

Your personal data may also be transferred by Google Ireland Limited to Google LLC in the USA. Google LLC has joined the EU-US Data Privacy Framework, so the transfer in this case is based on the adequacy decision for the USA according to Art. 45 GDPR.

If you use a Google account, Google may link your web and app browsing history with your Google account, depending on the settings stored in your Google account, and use information from your Google account to personalize ads. If you do not want this association with your Google account, it is necessary to logout of Google before visiting our website.If you have not consented to the use of Google Ads, Google will only display general advertisements that are not selected based on the information collected about you on this website. In addition to withdrawing your consent, you also have the option to disable personalized advertising in Google’s advertising settings: https://adssettings.google.com/notarget.

For more information, please see Google’s data usage notices: https://policies.google.com/technologies/ads, or its privacy policy: https://policies.google.com/privacy.
5. Online presence in social networks
We maintain online presences on social networks to communicate with customers and interested parties, among other purposes, and to inform them about our products and services. User data is typically processed by the respective social networks for market research and advertising purposes. Thus, usage profiles can be created based on the interests of users. Cookies and other identifiers are stored on the computers of the individuals concerned for this purpose. Based on these usage profiles, advertisements are then placed within the social networks as well as on third-party websites.

As part of operating our online presences, we may have access to information such as usage statistics provided by the social networks. These statistics are aggregated and may include demographic information (e.g., age, gender, region, country), data on interaction with our online presences (e.g., likes, subscriptions, shares, viewing of images and videos), and the content and contributions disseminated through them. They can also provide information about the interests of users and which content and topics are particularly relevant to them. We may use this information to tailor and optimize the design, activities, and content of our online presence for our audience.Details and links to the data of the social networks that we can access as operators of the online presences are provided in the list below. The collection and use of this data is usually subject to joint responsibility. If applicable, the corresponding contract is listed below.

The legal basis for data processing is Art. 6 (1)(f) GDPR, based on our legitimate interest in effective information and communication with users, or Art. 6 (1)(b)GDPR, to stay in touch with our customers and inform them, as well as to conduct pre-contractual measures with prospective customers.

If you have an account with the social network, it is possible that we can see the information and media you have made publicly available when we view your profile. Additionally, the social network may allow us to contact you under certain circumstances. This could be done, for example, via direct messages or through posted contributions. The content communication via the social network and the processing of content data are the responsibility of the social network as a messaging and platform service. Once we import or further process personal data from you into our own systems, we are independently responsible for it and do so to carry out pre-contractual measures and fulfill a contract in accordance with Art. 6 (1)(b) GDPR.

Please refer to the privacy notices of the respective social network for the legal basis of data processing carried out by the social networks under their own responsibility. You can also find further information on the respective data processing and options for objection using the links below.

We would like to point out that data protection inquiries can be most efficiently addressed to the respective provider of the social network, as only these providers have access to the data and can directly take appropriate measures. Of course, you can also contact us with your concerns. In this case, we will process your request and forward it to the provider of the social network. Below is a list of information about the social networks on which we maintain online presences:

Facebook (Meta Platforms Ireland Ltd.,Serpentine Avenue, Block J, Dublin 4, Ireland)
·     
Operation of the Facebook fanpage under joint controllership based on an agreement on the joint processing of personal data (so-called Page Insights Controller Addendum): https://www.facebook.com/legal/terms/page_controller_addendum
·      Information on the processed Page Insights data and contact options for data protection inquiries:
https://www.facebook.com/legal/terms/information_about_page_insights_data
·      Privacy Policy: https://www.facebook.com/privacy/policy/
·      Opt-Out: https://www.facebook.com/settings?tab=ads.

Instagram (Meta Platforms Ireland Ltd.,Serpentine Avenue, Block J, Dublin 4, Ireland)
·      Instagram Business account based on an agreement on the joint processing of personal data (so-called Page Insights Controller Addendum): https://www.facebook.com/legal/terms/page_controller_addendum
·      Information on the processed Page Insights data and contact options for data protection inquiries: https://www.facebook.com/legal/terms/information_about_page_insights_data
·      Privacy Policy: https://privacycenter.instagram.com/policy/
·      Opt-Out (Explanation): https://de-de.facebook.com/help/instagram/2885653514995517?locale=de_DE

Google/YouTube (Google Ireland Limited,Gordon House, Barrow Street, Dublin 4, Ireland)
·      Privacy Policy: https://policies.google.com/privacy
·      Opt-Out: https://www.google.com/settings/ads.

X (Twitter International Company, OneCumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland)
·      Privacy Policy: https://twitter.com/de/privacy
·      Opt-Out: https://twitter.com/personalization.

LinkedIn (LinkedIn Ireland UnlimitedCompany Wilton Place, Dublin 2, Ireland)
·      Operation of the LinkedIn company page under joint controllership based on an agreement on the joint processing of personal data (so-called Page Insights Joint Controller Addendum): https://legal.linkedin.com/pages-joint-controller-addendum
·      Information on the processed Page Insights data and contact options for data protection inquiries: https://legal.linkedin.com/pages-joint-controller-addendum
·      Privacy Policy: https://www.linkedin.com/legal/privacy-policy
·      Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Xing/Kununu (New Work SE, Am Strandkai 1, 20457 Hamburg)
·      Privacy Policy/Opt-Out: https://privacy.xing.com/de/datenschutzerklaerung.
6. Data disclosure
The disclosure of data collected by us generally only occurs if there is aspecific legal basis for data protection, especially if:

·      You have provided your explicit consent pursuant to Art. 6 (1)(a) GDPR,
·      Disclosure is necessary for the assertion, exercise, or defense of legal claims pursuant to Art. 6 (1)(f) GDPR, and there is no reason to believe that you have a predominant legitimate interest in not disclosing your data,
·      We are legally obligated to disclose the data pursuant to Art. 6 (1)(c) GDPR, especially if this is due to official inquiries, court orders, and legal proceedings for legal enforcement or prosecution, or
·      This is legally permissible and required for the processing of contractual relationships with you or for the implementation of pre-contractual measures initiated at your request pursuant to Art. 6 (1)(b) GDPR.

Part of the data processing may be carried out by our service providers. In addition to the service providers mentioned in this privacy policy, these may include, in particular, data centers that store our website and databases,software providers, IT service providers that maintain our systems, agencies,market research companies, group companies, and consulting companies. If we disclose data to our service providers, they may only use the data to fulfill their tasks. The service providers have been carefully selected and commissioned by us. They are contractually bound by our instructions, have appropriate technical and organizational measures to protect the rights of the data subjects, and are regularly monitored by us.

For the provision of our website, we utilizes the following IT services providers for hosting and content delivery:

·      Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (e.g. cdn.prod.website-files.com);
·      Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855, Luxemburg (e.g. *.cloudfront.net) ;
·      Fastly Inc., 475 Brannan St, Unit 300, San Francisco, CA 94107, USA (e.g. cdn.jsdelivr.net);
·      Webflow Inc., 398 11thSt. Fl 2, San Francisco, California, 94103, USA (e.g.: uploads-ssl.webflow.com).

The above-mentioned IT service providers from the USA have joined the EU-US Data Privacy Framework, so the transfer in these cases are based on the adequacy decision for the USA according to Art. 45 GDPR.
7. Data transfer to third countires
As explained in this privacy policy, we use services whose providers are partially located in so-called third countries (outside the European Union orthe European Economic Area) or process personal data there, i.e., countries whose level of data protection does not correspond to that of the European Union. If this is the case and the European Commission has not issued anadequacy decision for these countries (Art. 45 GDPR), we have taken appropriate measures to ensure an adequate level of data protection for any data transfers. These include, among other things, the standard contractual clauses of the European Union or binding corporate rules.

Where this is not possible, we base the data transfer on exceptions in Art.49 GDPR, especially your explicit consent or the necessity of the transfer for the performance of a contract or the implementation of pre-contractual measures.

If a transfer to a third country is envisaged and there is no adequacy decision or suitable guarantees, it is possible, and there is a risk, that authorities in the respective third country (e.g., intelligence agencies) may gain access to the transmitted data to collect and analyze it,and that the enforceability of your data subject rights cannot be guaranteed.You will also be informed about this when obtaining your consent via the consent banner
8. Data retention
In principle, we only store personal data for as long as it is necessary to fulfill the purposes for which we collected the data. After that, we delete the data immediately, unless we need the data until the statutory limitation period expires for evidentiary purposes for civil law claims, due to statutory retention obligations, or there is another legal basis for continued processing of your data in the specific individual case.

For evidentiary purposes, we must retain contract data, in particular, for three years from the end of the year in which the business relationship with you ends. Any claims become statute-barred at the earliest at this time.

Even after that, we may still have to store your data partially for accounting reasons. We are obliged to do so due to legal documentation obligations that may arise from the Commercial Code, the FiscalCode, the Banking Act, the Money Laundering Act, and the Securities Trading Act. The periods specified there for the retention of documents are two to ten years.
9. Your rights, especially withdrawaland objection
You have the rights set out in Art. 7 (3), 15-21 of the GDPR at all times,provided the respective legal requirements are met:

·      Right to withdraw your consent (Art. 7 (3) GDPR)
·      Right to object to the processing of your personal data (Art. 21 GDPR)
·      Right to information about your personal data processed by us (Art. 15 GDPR)
·      Right to rectification of your personal data stored by us (Art. 16 GDPR)
·      Right to erasure of your personal data (Art. 17 GDPR)
·      Right to restriction of processing of your personal data (Art. 18 GDPR)
·      Right to data portability of your personal data (Art. 20 GDPR)

To assert your rights described here, you can contact us at any time using the contact details above. This also applies if you would like to receive copies of guarantees to demonstrate an adequate level of data protection. If the respective legal requirements are met, we will comply with your data protection request.

Your requests to exercise data protection rights and our responses to them will be stored for documentation purposes for up to three years and, in individual cases, beyond that if there is a reason to assert, exercise, ordefend legal claims. The legal basis is Art. 6 (1)(f) GDPR, based on our interest in defending against any civil law claims pursuant to Art. 82 GDPR,avoiding fines pursuant to Art. 83 GDPR, and fulfilling our accountability obligations under Art. 5 (2) GDPR.

You have the right to withdraw your consent, which has been given once,at any time. This will result in us discontinuing the data processing based on this consent for the future. The withdrawal of consent does not affect the legality of the processing carried out based on the consent until the withdrawal.

Where we process your data based on legitimate interests, you have the right to object to the processing of your data at any time for reasons arising from your particular situation. If the objection concerns the processing of your data for direct marketing purposes, you have a general right to object,which we will implement even without stating reasons.

If you wish to exercise your right of withdrawal or objection, an informal notification to the contact details mentioned above is sufficient.


You also have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR. You can exercise this right, for example, with a supervisory authority in the Member State of your habitual residence, your place of work, or the place of the alleged infringement. In Berlin, our location, the competent supervisory authority is: Berlin Commissioner for Data Protection and Freedom of Information, Alt-Moabit 59-61, 10555 Berlin.
10. Changes to the privacy policy
We occasionally update thisprivacy policy, for example when we adapt our website or when legal orregulatory requirements change.

Version: 1.0 / Status: July 2024