Privacy Policy

1) Information on the collection of personal data and contact details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about how your personal data is handled when you use our website. Personal data in this context means all data by which you can be personally identified. 1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Noah Rügamer, Rügamer & Steiner Consulting GmbH, Tußmannstraße 61, 40477 Düsseldorf, Tel.: 0152 09703658, e-mail: kontakt@ruegamer-steiner.de. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. 1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the Controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string „https://“ and the padlock symbol in your browser bar. 2) Data collection when visiting our website When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect such data as your browser transmits to our server (so-called „server log files“). When you access our website, we collect the following data, which is technically necessary for us to display the website to you: – The website you visited – Date and time at the moment of access – Amount of data sent in bytes – Source/referrer from which you reached the page – Browser used – Operating system used – IP address used (where applicable: in anonymised form) The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to review the server log files retrospectively should there be concrete indications of unlawful use. 3) Cookies In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable us to recognise your browser on your next visit (so-called persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data as well as IP address values, to an individual extent. Persistent cookies are deleted automatically after a predefined period, which may differ depending on the cookie. You can find the duration of the respective cookie storage in the overview of your web browser’s cookie settings. In some cases, the cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Article 6(1)(b) GDPR either for the performance of the contract, in accordance with Article 6(1)(a) GDPR in the case of consent that has been given, or in accordance with Article 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit. Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or can exclude the acceptance of cookies for certain cases or in general. Every browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains to you how you can change your cookie settings. You can find these for the respective browsers under the following links: Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac Opera: https://help.opera.com/de/latest/web-preferences/#cookies Please note that if you do not accept cookies, the functionality of our website may be restricted. 4) Contact When you contact us (e.g. via the contact form or by e-mail), personal data is collected. Which data is collected in the case of using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for making contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6(1)(b) GDPR. Your data will be deleted after the final processing of your enquiry. This is the case when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary. 5) Online appointment scheduling Own function for online appointment scheduling We process your personal data within the scope of the online appointment scheduling that is made available. You can see which data we collect for online appointment scheduling from the respective input form or the appointment request for scheduling an appointment. Insofar as certain data is necessary in order to be able to carry out an online appointment scheduling, we mark this accordingly in the input form or in the appointment request. Insofar as we provide you with a free-text field in the input form, you can describe your request in more detail there. You can then also control yourself which data you wish to enter in addition. The data you provide is stored and used exclusively for the purpose of scheduling the appointment. For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Article 6(1)(b) GDPR serves as the legal basis. If you have given us consent for the processing of your data, the processing is carried out on the basis of Article 6(1)(a) GDPR. Consent that has been given can be withdrawn at any time by sending a message to the Controller named at the beginning of this declaration. Calendly For the provision of an online appointment booking function, this website uses the software „Calendly“ of the provider Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA. For the purpose of allocating appointments, first and last name as well as e-mail address (and, where applicable, the telephone number, insofar as a telephone appointment is desired) are collected in accordance with Article 6(1)(b) GDPR and transmitted to Calendly in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in effective customer management and efficient appointment administration, where they are stored for the organisation of appointments. This may also involve data transfers to the servers of Calendly, LLC, in the USA. After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by Calendly. We have concluded a data processing agreement with Calendly in which we oblige Calendly to protect our customers‘ data in accordance with the statutory requirements. You can find details of Calendly’s data protection provisions here: https://calendly.com/de/pages/privacy 6) Data processing when opening a customer account and for contract processing In accordance with Article 6(1)(b) GDPR, personal data continues to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be carried out by sending a message to the above-mentioned address of the Controller. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to retention periods under tax and commercial law and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use of the data as permitted by law. 7) Use of customer data for direct advertising 7.1 Subscription to our e-mail newsletter If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory detail for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to be able to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter once you have expressly confirmed to us that you consent to receiving the newsletter. We will then send you a confirmation e-mail asking you to confirm, by clicking on a corresponding link, that you wish to receive the newsletter in future. By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6(1)(a) GDPR. When you subscribe to the newsletter, we store the IP address registered by your internet service provider (ISP) as well as the date and time of the subscription, in order to be able to trace any possible misuse of your e-mail address at a later point in time. The data collected by us when you subscribe to the newsletter is used exclusively for the purposes of advertising communication by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the Controller named at the outset. After you have unsubscribed, your e-mail address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this in a manner permitted by law and about which we inform you in this declaration. 7.2 Sending the e-mail newsletter to existing customers If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for goods or services similar to those already purchased from our range by e-mail. For this purpose, we do not have to obtain separate consent from you in accordance with Section 7(3) of the Act against Unfair Competition (UWG). In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalised direct advertising in accordance with Article 6(1)(f) GDPR. If you initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by sending a notification to the Controller named at the beginning. For this, you will only incur transmission costs according to the basic tariffs. After receipt of your objection, the use of your e-mail address for advertising purposes will be discontinued immediately. 7.3 Newsletter dispatch via ActiveCampaign Our e-mail newsletters are sent via the technical service provider ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, US, USA („ActiveCampaign“), to whom we pass on the data you provided when subscribing to the newsletter. This transfer is carried out in accordance with Article 6(1)(f) GDPR and serves our legitimate interest in using an advertising-effective, secure and user-friendly newsletter system. The data you enter for the purpose of subscribing to the newsletter (e.g. e-mail address) is stored on ActiveCampaign’s servers in the USA. ActiveCampaign uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the e-mails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. In this way, it can be determined whether a newsletter message was opened and which links, if any, were clicked. With the help of so-called conversion tracking, it can also be analysed whether, after clicking on the link in the newsletter, a predefined action (e.g. purchase of a product on our website) was carried out. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). The data is collected exclusively in pseudonymised form and is not linked to your other personal data; any direct attribution to a person is excluded. This data serves exclusively the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter. We have concluded a data processing agreement („Data Processing Agreement“) with ActiveCampaign by which we oblige ActiveCampaign to protect our customers‘ data and not to pass it on to third parties. You can view ActiveCampaign’s privacy policy here: https://www.activecampaign.com/privacy-policy 7.4 Newsletter dispatch via Klaviyo Our e-mail newsletters are sent via the technical service provider „Klaviyo“, 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when subscribing to the newsletter. This transfer is carried out in accordance with Article 6(1)(f) GDPR and serves our legitimate interest in using an advertising-effective, secure and user-friendly newsletter system. Please note that your data is generally transferred to a Klaviyo server in the USA and stored there. Klaviyo uses this information to send the newsletters on our behalf. Klaviyo does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties. To protect your data in the USA, we have a data processing agreement („Data-Processing-Agreement“) with Klaviyo, in which Klaviyo undertakes to protect our users‘ data, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. You can view Klaviyo’s data protection provisions here: https://www.klaviyo.com/privacy 7.5 Advertising by postal mail On the basis of our legitimate interest in personalised direct advertising, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the scope of the contractual relationship – your title, academic degree, your year of birth and your professional, industry or business designation in accordance with Article 6(1)(f) GDPR and to use it for sending interesting offers and information about our products by postal mail. You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the Controller. 8) Data processing for order processing 8.1 To process your order, we work together with the service provider(s) listed below, who support us wholly or partly in the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information. The personal data collected by us is passed on, within the scope of contract processing, to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods. We pass on your payment data, within the scope of payment processing, to the commissioned credit institution, insofar as this is necessary for payment processing. Insofar as payment service providers are used, we inform you about this explicitly below. The legal basis for passing on the data is Article 6(1)(b) GDPR. 8.2 Passing on of personal data to shipping service providers – Deutsche Post If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we pass on your e-mail address to Deutsche Post in accordance with Article 6(1)(a) GDPR before the delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we pass on only the name of the recipient and the delivery address to Deutsche Post in accordance with Article 6(1)(b) GDPR. The data is only passed on insofar as this is necessary for the delivery of the goods. In this case, prior arrangement of the delivery date with Deutsche Post or the delivery notification is not possible. Consent can be withdrawn at any time with effect for the future vis-à-vis the Controller designated above or vis-à-vis Deutsche Post. – DHL If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), we pass on your e-mail address to DHL in accordance with Article 6(1)(a) GDPR before the delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we pass on only the name of the recipient and the delivery address to DHL in accordance with Article 6(1)(b) GDPR. The data is only passed on insofar as this is necessary for the delivery of the goods. In this case, prior arrangement of the delivery date with DHL or the delivery notification is not possible. Consent can be withdrawn at any time with effect for the future vis-à-vis the Controller designated above or vis-à-vis the transport service provider DHL. – DPD If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we pass on your e-mail address and your telephone number to DPD before the delivery of the goods in accordance with Article 6(1)(a) GDPR for the purpose of arranging a delivery date or for delivery notification, provided that you have given your express consent for this during the ordering process. Otherwise, for the purpose of delivery, we pass on only the name of the recipient and the delivery address to DPD in accordance with Article 6(1)(b) GDPR. The data is only passed on insofar as this is necessary for the delivery of the goods. In this case, prior arrangement of the delivery date with DPD or the delivery notification is not possible. Consent can be withdrawn at any time with effect for the future vis-à-vis the Controller designated above or vis-à-vis the transport service provider DPD. – GLS If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein), we pass on your e-mail address to GLS in accordance with Article 6(1)(a) GDPR before the delivery of the goods for the purpose of arranging a delivery date or for delivery notification, provided that you have given your express consent for this during the ordering process.-Otherwise, for the purpose of delivery, we pass on only the name of the recipient and the delivery address to GLS in accordance with Article 6(1)(b) GDPR. The data is only passed on insofar as this is necessary for the delivery of the goods. In this case, prior arrangement of the delivery date with GLS or the transmission of status information on the delivery of the consignment is not possible. Consent can be withdrawn at any time with effect for the future vis-à-vis the Controller designated above or vis-à-vis the transport service provider GLS. 8.3 Use of payment service providers (payment services) – giropay In the case of payment via „giropay“, payment processing is carried out via giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to whom we pass on the information you provided within the scope of the ordering process together with the information about your order. Your data is passed on in accordance with Article 6(1)(b) GDPR exclusively for the purpose of payment processing and only insofar as it is necessary for this. At the following internet address, you will receive further information about the data protection provisions of giropay GmbH: https://www.giropay.de/rechtliches/datenschutzerklaerung 9) Contact for review reminders Own review reminder (not sent by a customer review system) We use your e-mail address for a one-time reminder to submit a review of your order for the review system we use, provided that you have given us your express consent for this during or after your order in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time by sending a message to the controller responsible for data processing. Review reminder by Trustpilot Provided that you have given us your express consent for this during or after your order in accordance with Article 6(1)(a) GDPR, we transmit your e-mail address to the review platform Trustpilot of Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (www.trustpilot.com), so that it can send you a review reminder by e-mail. You can withdraw your consent at any time by sending a message to the controller responsible for data processing or to the review platform. 10) Use of review and trust seal graphics Provenexpert widget On our website, we use the seal of Provenexpert, a widget of Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin („Provenexpert“). When you visit our website, dynamic content (current rating of the shop, certificate, etc.) is loaded into the widget by Provenexpert servers. In this process, information about the website you previously visited, the date and time of retrieval, the amount of data transferred, the browser type used, the operating system you use and the requesting provider (referrer data) may be transmitted to the servers of Provenexpert. Insofar as this also includes personal data, the processing is carried out on the basis of our overriding legitimate interest in optimising our offer in accordance with Article 6(1)(f) GDPR. You can find further information on data protection at Provenexpert at: https://www.provenexpert.com/de-de/datenschutzbestimmungen/ 11) Use of social media: social plugins 11.1 AddThis bookmarking as a standard plugin On our website, so-called social plugins („plugins“) of the bookmarking service AddThis are used, which is operated by AddThis LLC, Inc. 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA („AddThis“) as part of Oracle Corporation. The plugins are usually marked with an AddThis logo, for example in the form of a white plus sign on an orange background. You can find an overview of the AddThis plugins and their appearance here: https://www.addthis.com/get/sharing When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of AddThis. The content of the plugin is transmitted by AddThis directly to your browser and integrated into the page. Through this integration, AddThis stores a cookie on your end device and thereby collects your IP address as well as the information that your browser has called up the relevant page of our website. This information (including your IP address) is transmitted by your browser directly to a server of AddThis in the USA and stored there. When you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The data processing operations described are carried out in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interests of AddThis in displaying personalised advertising, in informing other users of the social network about your activities on our website and in the needs-based design of the AddThis service. If you wish to object to the collection of data by AddThis in the future, you can set a so-called opt-out cookie, which you can download at the following link: https://www.addthis.com/privacy/opt-out You can also completely prevent the loading of the AddThis plugins with add-ons for your browser, e.g. with the script blocker „NoScript“ (https://noscript.net/). For the purpose and scope of data collection and the further processing and use of the data by AddThis, as well as your related rights and setting options for protecting your privacy, please refer to AddThis’s data protection notices: https://www.addthis.com/privacy/privacy-policy 11.2 AddThis bookmarking plugins with Shariff solution On our website, so-called social plugins („plugins“) of the bookmarking service AddThis are used, which is operated by AddThis LLC, Inc. 8000 Westpark Drive, Suite 625, McLean, VA 2210, USA („AddThis“) as part of Oracle Corporation. In order to increase the protection of your data when visiting our website, these buttons are not integrated into the page without restriction as plugins, but merely by using an HTML link. This type of integration ensures that when you call up a page of our website that contains such buttons, no connection is yet established with the servers of AddThis. When you click on the button, a new browser window opens and calls up the page of AddThis, on which you can interact with the plugins there (where applicable, after entering your login data). You can withdraw your consent at any time by deactivating the activated plugin again by clicking on it once more. The withdrawal does not, however, have any effect on the data that has already been transmitted to AddThis. For the purpose and scope of data collection and the further processing and use of the data by AddThis, as well as your related rights and setting options for protecting your privacy, please refer to AddThis’s data protection notices: https://www.addthis.com/privacy/privacy-policy 11.3 Facebook as a standard plugin On our website, so-called social plugins („plugins“) of the social network Facebook are used, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“). The plugins are marked with a Facebook logo or the addition „Soziales Plug-in von Facebook“ or „Facebook Social Plugin“. You can find an overview of the Facebook plugins and their appearance here: https://developers.facebook.com/docs/plugins When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Facebook. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has called up the relevant page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted by your browser directly to a server of Facebook Inc. in the USA and stored there. If you are logged in to Facebook, Facebook can directly assign the visit to our website to your Facebook profile. When you interact with the plugins, for example by clicking the „Like“ button or posting a comment, this information is also transmitted directly to a server of Facebook and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends. The data processing operations described are carried out in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interests of Facebook in displaying personalised advertising, in informing other users of the social network about your activities on our website and in the needs-based design of the Facebook service. If you do not want Facebook to directly assign the data collected via our website to your Facebook profile, you must log out of Facebook before visiting our website. You can also object to the loading of the Facebook plugins, and thus to the data processing operations described above, for the future with add-ons for your browser, e.g. with the script blocker „NoScript“ (http://noscript.net/). For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options for protecting your privacy, please refer to Facebook’s data protection notices: https://www.facebook.com/policy.php 11.4 Facebook plugins with 2-click solution On our website, so-called social plugins („plugins“) of the social network Facebook are used, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“). In order to increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page by means of a so-called „2-click“ solution. You can recognise deactivated plugins by the fact that they have a grey background. This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the servers of Facebook. Only when you activate the plugins and thereby give your consent to the data transmission in accordance with Article 6(1)(a) GDPR does your browser establish a direct connection to the servers of Facebook. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of the data that Facebook collects with the help of the plugins. According to our knowledge, Facebook receives, in any case, information about which of our websites you have currently and previously called up. Through the integration of the plugins, Facebook also receives the information that your browser has called up the relevant page of our website, even if you do not have a profile with Facebook or are not currently logged in. The collected information (including your IP address) is transmitted by your browser directly to a server of Facebook Inc. in the USA and stored there. When you interact with the plugins, the corresponding information is also transmitted directly to a server of Facebook and stored there. The information is also published on Facebook and displayed there to your contacts. You can withdraw your consent at any time by deactivating the activated plugin again by clicking on it once more. The withdrawal does not, however, have any effect on the data that has already been transmitted to Facebook. For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options for protecting your privacy, please refer to Facebook’s data protection notices: https://www.facebook.com/policy.php 11.5 Facebook plugins with Shariff solution On our website, so-called social plugins („plugins“) of the social network Facebook are used, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“). In order to increase the protection of your data when visiting our website, these buttons are not integrated into the page without restriction as plugins, but merely by using an HTML link. This type of integration ensures that when you call up a page of our website that contains such buttons, no connection is yet established with the servers of Facebook. When you click on the button, a new browser window opens and calls up the page of Facebook, on which you can interact with the plugins there (where applicable, after entering your login data). For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options for protecting your privacy, please refer to Facebook’s data protection notices: https://www.facebook.com/policy.php 11.6 Instagram as a standard plugin On our website, so-called social plugins („plugins“) of the online service Instagram are used, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland („Facebook“). The plugins are marked with an Instagram logo, for example in the form of an „Instagram camera“. You can find an overview of the Instagram plugins and their appearance here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges. When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Instagram. The content of the plugin is transmitted by Instagram directly to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has called up the relevant page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to a server of Facebook Inc. in the USA and stored there. If you are logged in to Instagram, Instagram can directly assign the visit to our website to your Instagram account. When you interact with the plugins, for example by clicking the „Instagram camera“ button, this information is also transmitted directly to a server of Instagram and stored there. The information is also published on your Instagram account and displayed there to your contacts. The data processing operations described are carried out in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interests of Instagram in displaying personalised advertising, in informing other users of the social network about your activities on our website and in the needs-based design of the Instagram service. If you do not want Instagram to directly assign the data collected via our website to your Instagram account, you must log out of Instagram before visiting our website. You can also object to the loading of the Instagram plugins, and thus to the data processing operations described above, for the future with add-ons for your browser, e.g. with the script blocker „NoScript“ (http://noscript.net/). For the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your related rights and setting options for protecting your privacy, please refer to Instagram’s data protection notices: https://help.instagram.com/155833707900388/ 11.7 Instagram plugin as a Shariff solution On our website, so-called social plugins („plugins“) of the online service Instagram are used, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland („Facebook“). In order to increase the protection of your data when visiting our website, these buttons are not integrated into the page without restriction as plugins, but merely by using an HTML link. This type of integration ensures that when you call up a page of our website that contains such buttons, no connection is yet established with the servers of Instagram. When you click on the button, a new browser window opens and calls up the page of Instagram, on which you can interact with the plugins there (where applicable, after entering your login data). For the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your related rights and setting options for protecting your privacy, please refer to Instagram’s data protection notices: https://help.instagram.com/155833707900388/ 11.8 LinkedIn as a standard plugin On our website, so-called social plugins („plugins“) of the online service LinkedIn are used, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland („LinkedIn“). You can recognise the LinkedIn plugins by the LinkedIn logo or the „Recommend button“ („Empfehlen“) on our website. When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of LinkedIn. The content of the plugin is transmitted by LinkedIn directly to your browser and integrated into the page. Through this integration, LinkedIn receives the information that your browser has called up the relevant page of our website, even if you do not have a LinkedIn profile or are not currently logged in to LinkedIn. This information (including your IP address) is transmitted by your browser directly to a server of LinkedIn in the USA and stored there. If you are logged in to LinkedIn, LinkedIn can directly assign the visit to our website to your LinkedIn account. When you interact with the plugins, this information is also transmitted directly to a server of LinkedIn and stored there. The information is also published on your LinkedIn account and displayed there to your contacts. The data processing operations described are carried out in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interests of LinkedIn in displaying personalised advertising, in informing other users of the social network about your activities on our website and in the needs-based design of the LinkedIn service. If you do not want LinkedIn to directly assign the data collected via our website to your LinkedIn account, you must log out of LinkedIn before visiting our website. You can also object to the loading of the LinkedIn plugins, and thus to the data processing operations described above, for the future with add-ons for your browser, e.g. with the script blocker „NoScript“ (http://noscript.net/). For the purpose and scope of data collection and the further processing and use of the data by LinkedIn, as well as your related rights and setting options for protecting your privacy, please refer to LinkedIn’s data protection notices: https://www.linkedin.com/legal/privacy-policy 11.9 LinkedIn plugin as a Shariff solution On our website, so-called social plugins („plugins“) of the online service LinkedIn are used, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland („LinkedIn“). In order to increase the protection of your data when visiting our website, these buttons are not integrated into the page without restriction as plugins, but merely by using an HTML link. This type of integration ensures that when you call up a page of our website that contains such buttons, no connection is yet established with the servers of LinkedIn. When you click on the button, a new browser window opens and calls up the page of LinkedIn, on which you can interact with the plugins there (where applicable, after entering your login data). For the purpose and scope of data collection and the further processing and use of the data by LinkedIn, as well as your related rights and setting options for protecting your privacy, please refer to LinkedIn’s data protection notices: https://www.linkedin.com/legal/privacy-policy 11.10 Twitter as a standard plugin On our website, so-called social plugins („plugins“) of the microblogging service Twitter are used, which is operated by Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland („Twitter“). The plugins are marked with a Twitter logo, for example in the form of a blue „Twitter bird“. You can find an overview of the Twitter plugins and their appearance here: https://about.twitter.com/de/resources/buttons When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Twitter. The content of the plugin is transmitted by Twitter directly to your browser and integrated into the page. Through this integration, Twitter receives the information that your browser has called up the relevant page of our website, even if you do not have a profile with Twitter or are not currently logged in to Twitter. This information (including your IP address) is transmitted by your browser directly to a server of Twitter Inc. in the USA and stored there. If you are logged in to Twitter, Twitter can directly assign the visit to our website to your Twitter account. When you interact with the plugins, for example by clicking the „Tweet“ button, the corresponding information is also transmitted directly to a server of Twitter and stored there. The information is also published on your Twitter account and displayed there to your contacts. The data processing operations described are carried out in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interests of Twitter in displaying personalised advertising, in informing other users of the social network about your activities on our website and in the needs-based design of the Twitter service. If you are a member of the social network of Twitter and wish to limit the collection of data via our website as well as the merging of your user data with the data stored about you at the social network Twitter, you should log out of Twitter before visiting our website. You can also object to the loading of the Twitter plugins, and thus to the data processing operations described above, for the future with add-ons for your browser, e.g. with the script blocker „NoScript“ (https://noscript.net/). For the purpose and scope of data collection and the further processing and use of the data by Twitter, as well as your related rights and setting options for protecting your privacy, please refer to Twitter’s data protection notices: https://twitter.com/privacy 11.11 Twitter plugins with 2-click solution On our website, so-called social plugins („plugins“) of the microblogging service Twitter are used, which is operated by Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland („Twitter“). In order to increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page by means of a so-called „2-click“ solution. You can recognise deactivated plugins by the fact that they have a grey background. This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the servers of Twitter. Only when you activate the plugins and thereby give your consent to the data transmission in accordance with Article 6(1)(a) GDPR does your browser establish a direct connection to the servers of Twitter. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Twitter. We have no influence on the scope of the data that Twitter collects with the help of the plugins. According to our knowledge, Twitter receives, in any case, information about which of our websites you have currently and previously called up. Through the integration of the plugins, Twitter also receives the information that your browser has called up the relevant page of our website, even if you do not have a profile with Twitter or are not currently logged in. The collected information (including your IP address) is transmitted by your browser directly to a server of Twitter Inc. in the USA and stored there. When you interact with the plugins, the corresponding information is also transmitted directly to a server of Twitter and stored there. The information is also published on Twitter and displayed there to your contacts. You can withdraw your consent at any time by deactivating the activated plugin again by clicking on it once more. The withdrawal does not, however, have any effect on the data that has already been transmitted to Twitter. For the purpose and scope of data collection and the further processing and use of the data by Twitter, as well as your related rights and setting options for protecting your privacy, please refer to Twitter’s data protection notices: https://twitter.com/privacy 11.12 Twitter plugin as a Shariff solution On our website, so-called social plugins („plugins“) of the microblogging service Twitter are used, which is operated by Twitter International Company, One Cumberland Place, Fenian Street Dublin 2, D02 AX07 Ireland („Twitter“). In order to increase the protection of your data when visiting our website, these buttons are not integrated into the page without restriction as plugins, but merely by using an HTML link. This type of integration ensures that when you call up a page of our website that contains such buttons, no connection is yet established with the servers of Twitter. When you click on the button, a new browser window opens and calls up the page of Twitter, on which you can interact with the plugins there (where applicable, after entering your login data). Please note that information collected during interaction with the plugin (including your IP address) is transmitted by your browser directly to a server of Twitter Inc. in the USA and stored there. For the purpose and scope of data collection and the further processing and use of the data by Twitter, as well as your related rights and setting options for protecting your privacy, please refer to Twitter’s data protection notices: https://twitter.com/privacy 12) Use of social media: videos 12.1 Use of Vimeo videos On our website, plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated. When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of Vimeo. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has called up the relevant page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted by your browser directly to a server of Vimeo in the USA and stored there. If you are logged in to Vimeo, Vimeo can directly assign the visit to our website to your Vimeo account. When you interact with the plugins (such as, for example, clicking the start button of a video), this information is also transmitted directly to a server of Vimeo and stored there. The data processing operations described are carried out in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interest of Vimeo in market research and the needs-based design of the Vimeo service. If you do not want Vimeo to directly assign the data collected via our website to your Vimeo account, you must log out of Vimeo before visiting our website. For the purpose and scope of data collection and the further processing and use of the data by Vimeo, as well as your related rights and setting options for protecting your privacy, please refer to Vimeo’s data protection notices: https://vimeo.com/privacy In the case of Vimeo videos that are integrated on our page, the tracking tool Google Analytics of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo’s own tracking, to which we have no access and which cannot be influenced by us. For tracking, Google Analytics uses so-called „cookies“, which are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transferred to a server of Google and stored there; this may also involve a transfer to the servers of Google LLC. in the USA. This processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interest of Vimeo in the statistical analysis of user behaviour for optimisation and marketing purposes. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, deactivate this service in the „cookie consent tool“ provided on the website. 12.2 Use of YouTube videos This website uses the YouTube embedding function for displaying and playing videos of the provider „YouTube“, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). The extended data protection mode is used here, which, according to the provider, only initiates the storage of user information once the video(s) is/are played. When the playback of embedded YouTube videos is started, the provider „YouTube“ uses cookies in order to collect information about user behaviour. According to information from „YouTube“, these serve, among other things, to record video statistics, to improve user-friendliness and to prevent abusive practices. If you are logged in to Google, your data is assigned directly to your account when you click on a video. If you do not want the assignment to your profile on YouTube, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interests of Google in displaying personalised advertising, in market research and/or in the needs-based design of its website. You have a right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this. Within the scope of the use of YouTube, there may also be a transfer of personal data to the servers of Google LLC. in the USA. Irrespective of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence. You can find further information on data protection at „YouTube“ in the YouTube terms of use at https://www.youtube.com/static?template=terms as well as in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, deactivate this service in the „cookie consent tool“ provided on the website. 13) Use of audio plugins for music playback – Spotify On this website, plugins of the music service Spotify, an offer of Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden („Spotify“), are integrated for the playback of music tracks. You can recognise the Spotify plugins by the green logo on our page. You can find an overview of the Spotify plugins at: https://developer.spotify.com. When you visit this page, a direct connection can be established via the plugin between your browser and the servers of Spotify, even if you do not have a Spotify account or are not logged in to one. Spotify thereby receives the information that you have visited our page. The information collected in this respect (including your IP address) is transmitted by your browser directly to a server of Spotify and stored there. However, the information is not used to identify you personally and is not passed on to third parties. If you click on the Spotify button while you are logged in to your Spotify account, Spotify can assign the visit to our page to your user account. The data processing operations described above are carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the appealing acoustic design of visits to our website. If you do not want Spotify to be able to assign the visit to our page to your Spotify user account, please log out of your Spotify user account. You can also object to the loading of the Spotify plugin, and thus to the data processing operations described above, for the future with add-ons for your browser, e.g. with the script blocker „NoScript“ (http://noscript.net/). You can find further information on this in Spotify’s privacy policy at https://www.spotify.com/de/legal/privacy-policy/. 14) Online marketing 14.1 Facebook Pixel for the creation of custom audiences with advanced matching (with cookie consent tool) Within our online offering, the so-called „Facebook Pixel“ of the social network Facebook is used in advanced matching mode, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland („Facebook“). On the basis of their express consent, when a user clicks on an advertisement placed by us and displayed on Facebook, an addition is appended to the URL of our linked page by Facebook Pixel. This URL parameter is then, after forwarding, written into the user’s browser via a cookie that our linked page itself sets. In addition, specific customer data is recorded by this cookie, such as, for example, the e-mail address that we collect on our website linked to the Facebook advertisement during processes such as purchase completions, account log-ins or registrations (advanced matching). The cookie is then read out by Facebook Pixel and enables a forwarding of the data, including the specific customer data, to Facebook. With the help of the Facebook Pixel with advanced matching, it is possible for Facebook, on the one hand, to precisely determine the visitors to our online offering as a target group for the display of advertisements (so-called „Facebook ads“). Accordingly, we use the Facebook Pixel with advanced matching in order to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products, which are determined on the basis of the websites visited) that we transmit to Facebook (so-called „custom audiences“). With the help of the Facebook Pixel with advanced matching, we also wish to ensure that our Facebook ads correspond to the potential interest of the users and do not have a harassing effect. In this way, we can furthermore evaluate the effectiveness of the Facebook advertisements for statistical and market research purposes by tracing whether users were forwarded to our website after clicking on a Facebook advertisement (so-called „conversion“). Compared to the standard variant of Facebook Pixel, the advanced matching function helps us to measure the effectiveness of our advertising campaigns better by recording more attributed conversions. All transmitted data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook data use policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to place advertisements on and outside Facebook. These processing operations are carried out exclusively upon the granting of express consent in accordance with Article 6(1)(a) GDPR. Consent to the use of the Facebook Pixel may only be declared by users who are older than 16 years of age. If you are younger, we ask you to ask your legal guardians for permission. The information generated by Facebook is generally transferred to a server of Facebook and stored there; this may also involve a transfer to the servers of Facebook Inc. in the USA. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, remove the tick set next to the setting for the „Facebook Pixel“ in the „cookie consent tool“ integrated on the website. 14.2 Google AdSense This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). Google AdSense uses so-called cookies, which are text files that are stored on your computer and enable an analysis of your use of the website. In addition, in order to collect information, Google AdSense also uses so-called „web beacons“ (small invisible graphics), through the use of which simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transferred to a server of Google and stored there. This may also involve a transfer to the servers of Google LLC. in the USA. Google uses the information thus obtained in order to carry out an evaluation of your usage behaviour with regard to the AdSense advertisements. The IP address transmitted by your browser within the scope of Google AdSense is not merged with other data of Google. The information collected by Google may, under certain circumstances, be transferred to third parties, insofar as this is required by law and/or insofar as third parties process this data on behalf of Google. The processing of data described is carried out in accordance with Article 6(1)(f) GDPR for the purpose of the targeted advertising communication to the user by advertising third parties, whose advertisements are displayed on the basis of the evaluated user behaviour on this website. This processing also serves our financial interest in exploiting the economic potential of our website through the paid display of personalised third-party advertising content. At the following internet address, you will receive further information about the data protection provisions of Google: https://www.google.de/policies/privacy/ You can permanently deactivate cookies for advertisement settings by preventing them through a corresponding setting of your browser software, or you can download and install the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de Please note that certain functions of this website may not be usable, or only to a limited extent, if you have deactivated the use of cookies. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above. 14.3 Use of Google Ads conversion tracking This website uses the online advertising programme „Google Ads“ and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). We use the offer of Google Ads in order to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can, in relation to the data of the advertising campaigns, determine how successful the individual advertising measures are. In doing so, we pursue the aim of showing you advertising that is of interest to you, of making our website more interesting for you and of achieving a fair calculation of the advertising costs incurred. The cookie for conversion tracking is set when a user clicks on an Ads advertisement placed by Google. Cookies are small text files that are stored on your end device. These cookies generally lose their validity after 30 days and do not serve the purpose of personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was forwarded to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie serves to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their advertisement and were forwarded to a page provided with a conversion tracking tag. However, they do not receive any information by which users can be personally identified. If you do not wish to take part in the tracking, you can block this use by deactivating the cookie of the Google conversion tracking via your internet browser under the keyword „user settings“. You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising in accordance with Article 6(1)(f) GDPR. Within the scope of the use of Google Ads, there may also be a transfer of personal data to the servers of Google LLC. in the USA. At the following internet address, you will receive further information about the data protection provisions of Google: https://www.google.de/policies/privacy/ You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in of Google available at the following link: https://www.google.com/settings/ads/plugin?hl=de Please note that certain functions of this website may not be usable, or only to a limited extent, if you have deactivated the use of cookies. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, deactivate this service in the „cookie consent tool“ provided on the website or, alternatively, follow the option for lodging an objection described above. 14.4 Google Marketing Platform This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („GMP“). GMP uses cookies in order to place advertisements relevant to the users, to improve the reports on campaign performance or to avoid a user seeing the same advertisements several times. By means of a cookie ID, Google records which advertisements are placed in which browser and can thus prevent these from being displayed several times. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) GDPR. In addition, with the help of cookie IDs, GMP can record so-called conversions that relate to advertisement requests. This is the case, for example, when a user sees a GMP advertisement and later, when using the same browser, calls up the advertiser’s website and buys something via this website. According to Google, GMP cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with the server of Google. We have no influence on the scope and the further use of the data that is collected by Google through the use of this tool, and we therefore inform you, according to our knowledge, as follows: Through the integration of GMP, Google receives the information that you have called up the relevant part of our website or clicked on an advertisement of ours. If you are registered with a service of Google, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider finds out and stores your IP address. Within the scope of the use of GMP, there may also be a transfer of personal data to the servers of Google LLC. in the USA. If you wish to object to participation in this tracking procedure, you can deactivate cookies for conversion tracking by setting your browser so that cookies from the domain www.googleadservices.com are blocked (see https://www.google.de/settings/ads), whereby this setting is deleted if you deactivate your cookies. Alternatively, you can inform yourself about the setting of cookies at the Digital Advertising Alliance at the internet address www.aboutads.info and make your desired settings. Finally, you can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or can exclude the acceptance of cookies for certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted. At the following internet address, you will receive further information about the data protection provisions of GMP by Google: https://www.google.de/policies/privacy/ Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above. 14.5 Hubspot This website uses the services of HubSpot, a software-based marketing service of HubSpot Ireland Ltd., 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. With the help of Hubspot, various services of customer service and customer management can be digitally synchronised and processed via a central user interface. Thus, HubSpot enables the generation of leads, central e-mail and newsletter marketing, contact management via the division of user groups with the help of CRM, as well as the management of contact forms. In order to fulfil the various functions, HubSpot uses cookies, small text files that are stored locally in the cache of your web browser on your end device and enable an analysis of your use of the website by us. In doing so, the cookies record certain information, such as, for example, the IP address, the location, the time of the page access, among others. Information recorded by means of HubSpot is stored on servers of HubSpot and evaluated on our behalf. Insofar as personal data is processed in this context, the data processing is carried out for the statistical analysis of user behaviour for optimisation and marketing purposes in accordance with Article 6(1)(f) GDPR. Further legal bases for data processing operations that are applied within the scope of specific HubSpot services (such as, for example, the necessity of express consent in accordance with Article 6(1)(a) GDPR when sending newsletters) remain unaffected by this. We have concluded a data processing agreement with HubSpot by which we oblige HubSpot to protect our customers‘ data and not to pass it on to third parties. You can permanently object to the recording of the data by HubSpot by means of cookies and to the setting of cookies by preventing the storage of cookies accordingly through your browser settings. At the following internet address, you will receive further information about the data protection provisions of Hubspot: https://legal.hubspot.com/de/datenschutz Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above. 14.6 LinkedIn Insight This website uses the retargeting and conversion tool of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, with the help of which personalised advertisements can be displayed to visitors of this website on the platform „LinkedIn“. For this purpose, when you visit our website, a cookie, a small text file, is set on the browser of your end device, which loses its validity after 120 days. If the user visits certain pages of this website and is logged in to their LinkedIn account in parallel, a connection to the servers of LinkedIn is established, via which interest-based advertising can be displayed on the platform. At the same time, the cookie enables the creation of anonymous reports on the performance of the advertisements on LinkedIn as well as information on website interaction, which is provided to us and LinkedIn. The display of advertising as well as the creation of the statistical reports does not take place if the user is not logged in to their LinkedIn account in parallel when visiting this website. The information obtained with the help of the cookie never permits a personal identification of the respective user. The information is transmitted in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in targeted advertising and the statistical evaluation of the success of product advertisements on LinkedIn and thus serves to optimise our online offering. You can deactivate the LinkedIn Insight tool as well as the display of interest-based advertising on LinkedIn by setting an opt-out cookie at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on the above link again. At the following internet address, you will receive further information about the data protection provisions of LinkedIn: https://www.linkedin.com/legal/privacy-policy#choices-oblig Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above. 14.7 LinkedIn Marketing Solutions On our website, we use „LinkedIn Marketing Solutions“, a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter „LinkedIn“). This makes it possible to draw the attention of visitors of our web pages, based on usage behaviour on the social network LinkedIn, to further content of our own that is likely to correspond to the respective user interest. The display of this content is carried out on the basis of a cookie-based analysis of previous usage behaviour, whereby, however, no personal data is stored. For this interest-oriented content determination, cookies, i.e. small text files, are stored on your computer or mobile end device in order to record pseudonymised data about your surfing behaviour and thus to adapt the content individually to the stored information. Insofar as the information collected and evaluated has a personal reference, the processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the display of personalised page content and in market research. The information can be assigned to the person of the user with the help of further information that LinkedIn has stored about the user, e.g. on the basis of the ownership of an account on the social network „LinkedIn“. LinkedIn analyses the surfing behaviour on the basis of an algorithm and can subsequently display targeted product recommendations as personalised advertising banners on the user’s LinkedIn account. LinkedIn can, furthermore, connect the information collected via the cookies with further information that LinkedIn has collected via other websites and/or in connection with the use of the social network „LinkedIn“, and thus create pseudonymised usage profiles. In no case, however, can the recorded information be used to personally identify visitors of this website. You can prevent the recording of the aforementioned information by LinkedIn by setting an opt-out cookie on one of the web pages linked below: https://www.linkedin.com/psettings/guest-controls Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future by deactivating this service in the „cookie consent tool“ integrated on this website. You can find further information on the data protection provisions of LinkedIn on the following web page: https://www.linkedin.com/legal/privacy-policy 15) Web analytics services 15.1 1&1 IONOS WebAnalytics This website uses „1&1 IONOS WebAnalytics“, a web analytics service of 1&1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur („1&1 IONOS“), in order to trace and evaluate certain user actions. For this purpose, a JavaScript-based tracking pixel is implemented on our website, which, as a single-pixel file, can track user actions through interaction with 1&1 IONOS. Via the tracking pixel, certain user information is collected in anonymised form, transmitted to 1&1 IONOS and evaluated there. This anonymised information includes, among other things, the IP address of the user, referrer abbreviations of the previously visited web pages, the type of end device used, the browser type used, the operating system used and the timestamp of the access. Insofar as the information processed in this way includes personal user data, the processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation and marketing purposes. If you do not want the future processing of information by 1&1 IONOS, you can prevent this by deactivating the execution of JavaScript in your browser. Alternatively, you can also prevent the execution of JavaScript code by installing a JavaScript blocker (e.g. https://noscript.net/ or https://www.ghostery.com). In this case, however, it is very likely that you will not be able to use all functions of the website to their full extent. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above. 15.2 Google (Universal) Analytics with Google Signals This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). Google (Universal) Analytics uses so-called „cookies“, which are text files that are stored on your end device and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transferred to a server of Google and stored there; this may also involve a transfer to the servers of Google LLC. in the USA. This website uses Google (Universal) Analytics exclusively with the extension „_anonymizeIp()“, which ensures an anonymisation of the IP address by shortening it and excludes a direct attribution to a person. Through the extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a server of Google LLC. in the USA and shortened there. On our behalf, Google will use this information in order to evaluate your use of the website, to compile reports on the website activities and to render further services to us associated with the use of the website and the use of the internet. In this process, the IP address transmitted by your browser within the scope of Google (Universal) Analytics is not merged with other data of Google. In addition, via a special function, the so-called „demographic characteristics“, Google Analytics enables the creation of statistics with statements about the age, gender and interests of the page visitors on the basis of an evaluation of interest-related advertising and with the inclusion of third-party provider information. This allows the definition and differentiation of user groups of the website for the purpose of the target-group-optimised orientation of marketing measures. However, data records recorded via the „demographic characteristics“ cannot be assigned to a specific person. All of the processing operations described above, in particular the setting of Google Analytics cookies for the reading out of information on the end device used, are only carried out if you have given us your express consent for this in accordance with Article 6(1)(a) GDPR. Without this consent being given, the use of Google Analytics is omitted during your page visit. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the „cookie consent tool“ provided on the website. For the use of Google Analytics, we have concluded a data processing agreement with Google, by which Google is obliged to protect the data of our page visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Google relies here on so-called standard data protection clauses of the European Commission, which are intended to guarantee compliance with the European level of data protection in the USA. You can find further information on Google (Universal) Analytics here: https://policies.google.com/privacy?hl=de&gl=de As an extension of Google Analytics, this website also uses the service Google Signals. With Google Signals, we can have cross-device reports created by Google (so-called „cross-device tracking“). Insofar as you have activated „personalised advertising“ in your settings in your Google account and you have linked your internet-enabled devices with your Google account, Google can, upon corresponding consent being given to the use of Google Analytics in accordance with Article 6(1)(a) GDPR (see above), analyse user behaviour across devices and create database models based on this. In doing so, the log-ins and device types of all page visitors who were logged in to a Google account and carried out a conversion are taken into account. The data shows, among other things, on which device you first clicked on an advertisement and on which device the associated conversion took place. In this process, we do not receive any personal data from Google, but only statistics created on the basis of Google Signals. You have the option of deactivating the „personalised advertising“ function in the settings of your Google account and thus switching off the cross-device analysis. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de You can read further information on Google Signals here: https://support.google.com/analytics/answer/7532985?hl=de 15.3 Google (Universal) Analytics without cookies with Google Signals This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). This website uses Google (Universal) Analytics exclusively without the use of cookies, which means that the service does not set cookies on your end device at any time. Instead, the local storage of your browser is used in order to store there an individual ID assigned by Google (Universal) Analytics, which enables an analysis of your use of the website. For this purpose, certain user information is processed via the ID. The information generated by the ID about your use of this website (including the shortened IP address) is generally transferred to a server of Google and stored there; this may also involve a transfer to the servers of Google LLC. in the USA. This website uses Google (Universal) Analytics exclusively with the extension „_anonymizeIp()“, which ensures an anonymisation of the IP address by shortening it and excludes a direct attribution to a person. Through the extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a server of Google LLC. in the USA and shortened there. Only in exceptional cases is the full IP address transferred to a server of Google LLC. in the USA and shortened there. On our behalf, Google will use this information in order to evaluate your use of the website, to compile reports on the website activities and to render further services to us associated with the use of the website and the use of the internet. In this process, the IP address transmitted by your browser within the scope of Google (Universal) Analytics is not merged with other data of Google. In addition, via a special function, the so-called „demographic characteristics“, Google Analytics enables the creation of statistics with statements about the age, gender and interests of the page visitors on the basis of an evaluation of interest-related advertising and with the inclusion of third-party provider information. This allows the definition and differentiation of user groups of the website for the purpose of the target-group-optimised orientation of marketing measures. However, data records recorded via the „demographic characteristics“ cannot be assigned to a specific person. All of the processing operations described above are only carried out if you have given us your express consent for this in accordance with Article 6(1)(a) GDPR. Without this consent being given, the use of Google Analytics is omitted during your page visit. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, you can download and install the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de As an alternative to the browser plugin or within browsers on mobile devices, you can withdraw your consent by clicking on the following link in order to set an opt-out cookie that prevents the recording by Google Analytics within this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on this link again): Deactivate Google Analytics For the use of Google Analytics, we have concluded a data processing agreement with Google, by which Google is obliged to protect the data of our page visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Google relies here on so-called standard data protection clauses of the European Commission, which are intended to guarantee compliance with the European level of data protection in the USA. You can find further information on Google (Universal) Analytics here: https://policies.google.com/privacy?hl=de&gl=de As an extension of Google Analytics, this website also uses the service Google Signals. With Google Signals, we can have cross-device reports created by Google (so-called „cross-device tracking“). Insofar as you have activated „personalised advertising“ in your settings in your Google account and you have linked your internet-enabled devices with your Google account, Google can, upon corresponding consent being given to the use of Google Analytics in accordance with Article 6(1)(a) GDPR (see above), analyse user behaviour across devices and create database models based on this. In doing so, the log-ins and device types of all page visitors who were logged in to a Google account and carried out a conversion are taken into account. The data shows, among other things, on which device you first clicked on an advertisement and on which device the associated conversion took place. In this process, we do not receive any personal data from Google, but only statistics created on the basis of Google Signals. You have the option of deactivating the „personalised advertising“ function in the settings of your Google account and thus switching off the cross-device analysis. To do so, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de You can read further information on Google Signals here: https://support.google.com/analytics/answer/7532985?hl=de 16) Retargeting/ remarketing/ recommendation advertising Google Ads Remarketing Our website uses the functions of Google Ads Remarketing; with this, we advertise this website in the Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Article 6(1)(f) GDPR. Any data processing going beyond this only takes place insofar as you have agreed vis-à-vis Google that your internet and app browser history is linked by Google with your Google account and that information from your Google account is used to personalise advertisements that you view on the web. If, in this case, you are logged in to Google during the visit to our website, Google uses your data together with Google Analytics data in order to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups. Within the scope of the use of Google Ads Remarketing, there may also be a transfer of personal data to the servers of Google LLC. in the USA. You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in of Google available at the following link: https://www.google.com/settings/ads/onweb/ You can view further information and the data protection provisions regarding advertising and Google here: https://www.google.com/policies/technologies/ads/ Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, deactivate this service in the „cookie consent tool“ provided on the website or, alternatively, follow the option for lodging an objection described above. Outbrain This website uses the retargeting technology of Outbrain Inc., 39 W 13th Street, New York, NY 10011, USA („Outbrain“). This makes it possible to draw the attention of visitors of our web pages, based on usage behaviour, in a targeted manner to further content of our own or of third parties in the form of banners that is likely to correspond to the respective user interest. The display of this content is carried out on the basis of a cookie-based analysis of previous usage behaviour, whereby, however, no personal data is stored. For this interest-oriented content determination, a cookie is stored on your computer or mobile end device in order to record pseudonymised data about your surfing behaviour and thus to adapt the content individually to the stored information. Insofar as the information collected and evaluated has a personal reference, the processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the display of personalised page content and in market research. In order to deactivate the use of cookies on your end device in general, you can set your internet browser so that no more cookies can be stored on your end device in the future or cookies already stored are deleted. Switching off all cookies may result in some functions on our web pages no longer being able to be executed. You can also permanently object to the setting of cookies for advertisement settings by Outbrain by using the option of setting an opt-out cookie provided on the page linked below: https://www.outbrain.com/de/legal/privacy Under the designated link, you will also find further information on data protection at Outbrain. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above. Outbrain Pixel Within our online offering, we use the „Outbrain Pixel“ of Outbrain, Inc., 39 W 13th St, New York 10011, USA („Outbrain“). A cookie is set on your computer by Outbrain Pixel, provided that you reached our website via an advertisement or other campaign. Cookies are small text files that are stored on your end device. If the user visits certain pages of this website, we can recognise that the user clicked on the advertisement and was forwarded to this page (conversion page). Insofar as personal data is processed in this context, this is done in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in effective marketing. The information collected with the help of the conversion cookie serves to create conversion statistics, i.e. to record how many users reach a conversion page after clicking on an advertisement. We thereby learn the total number of users who clicked on our advertisement and were forwarded to a page provided with a conversion tracking tag. However, we do not receive any information by which users can be personally identified. If you do not wish to take part in the tracking, you can object to this by deactivating the cookie of Outbrain Pixel via your internet browser under user settings. Check whether advertising cookies from Outbrain are set in your browser and deactivate them. Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above or use the deactivation options in the cookie settings of this website. Further information on the data protection provisions of Outbrain can be found at https://www.outbrain.com/de/legal/privacy. Taboola This website uses the retargeting technology of Taboola Inc., 16 Madison Square West 7th Floor, New York, NY 10010, USA („Taboola“). This makes it possible to draw the attention of visitors of our web pages, based on usage behaviour, in a targeted manner to further content of our own or of third parties in the form of banners that is likely to correspond to the respective user interest. The display of this content is carried out on the basis of a cookie-based analysis of previous usage behaviour, whereby, however, no personal data is stored. For this interest-oriented content determination, a cookie is stored on your computer or mobile end device in order to record pseudonymised data about your surfing behaviour and thus to adapt the content individually to the stored information. In order to deactivate the use of cookies on your end device in general, you can set your internet browser so that no more cookies can be stored on your end device in the future or cookies already stored are deleted. Switching off all cookies may result in some functions on our web pages no longer being able to be executed. Insofar as the information collected and evaluated has a personal reference, the processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the display of personalised page content and in market research. You can also permanently object to the setting of cookies for advertisement settings by Taboola by using the option of setting an opt-out cookie provided on the page linked below: https://www.taboola.com/privacy-policy#optout You can view further information on data protection at Taboola here: https://www.taboola.com/privacy-policy Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above. 17) Tools and miscellaneous 17.1 – Debitoor For the handling of the accounting, we use the cloud-based accounting software of Debitoor GmbH, Grunerstr. 13, 10179 Berlin („Debitoor“). Debitoor processes incoming and outgoing invoices as well as, where applicable, the bank movements of our company, in order to record invoices automatically, to match them to the transactions and, from this, to create the financial accounting in a semi-automated process. Insofar as personal data is also processed in this context, the processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in an efficient organisation and documentation of our business transactions. You can find more detailed information on Debitoor, on the automated processing of data and on the data protection provisions at https://debitoor.de/datenschutz 17.2 Cookie consent tool based on Usercentrics technology For the obtaining of effective user consents for cookies and cookie-based applications requiring consent, this website uses a cookie consent tool with technology of Usercentrics GmbH, Rosental 4, 80331 Munich (hereinafter „Usercentrics“). Through the integration of a corresponding JavaScript code, a banner is displayed to users when they access the page, in which consents for certain cookies and/or cookie-based applications can be given by ticking a box. In doing so, the tool blocks the setting of all cookies requiring consent until the respective user gives the corresponding consents by ticking a box. This ensures that such cookies are only set on the respective end device of the user in the event of consent being given. So that the cookie consent tool can clearly assign page accesses to individual users and can individually record, log and store for the duration of a session the consent settings made by the user, certain user information (including the IP address) is collected by the cookie consent tool when our website is accessed, transmitted to servers of Usercentrics and stored there. This data processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website. A further legal basis for the data processing described is, moreover, Article 6(1)(c) GDPR. As the Controller, we are subject to the legal obligation to make the use of technically non-necessary cookies dependent on the respective user consent. We have concluded a data processing agreement with Usercentrics by which we oblige Usercentrics to protect the data of visitors of our website and not to pass it on to third parties. You can find further information on the use of data by Usercentrics in the Usercentrics privacy policy at https://usercentrics.com/privacy-policy/ 17.3 Google Customer Reviews (formerly Google Certified Shops programme) We work together with Google within the scope of the „Google Customer Reviews“ programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). This programme gives us the possibility of obtaining customer reviews from users of our website. In doing so, after a purchase on our website, you are asked whether you would like to take part in an e-mail survey by Google. If you give your consent in accordance with Article 6(1)(a) GDPR, we transmit your e-mail address to Google. You receive an e-mail from Google Customer Reviews in which you are asked to rate the purchase experience on our website. The rating you submit is subsequently summarised with our other ratings and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. In addition, your rating is used for Google Seller Ratings. Within the scope of the use of Google Customer Reviews, there may also be a transfer of personal data to the servers of Google LLC. in the USA. You can withdraw your consent at any time by sending a message to the controller responsible for data processing or to Google. You can access further information on data protection at Google in connection with the Google Customer Reviews programme at the following link: https://support.google.com/merchants/answer/7188525?hl=de You can read further information on data protection at Google Seller Ratings at this link: https://support.google.com/google-ads/answer/2375474 17.4 Google Translate This page uses, via an API integration, the translation service „Google Translate“ of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). So that the translation into a national language of your choice is displayed in an automated manner, the browser you use establishes a connection to the servers of Google. In doing so, Google uses so-called „cookies“, which are text files that are stored on your computer and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transferred to a server of Google and stored there; this may also involve a transfer to the servers of Google LLC. in the USA. Insofar as personal data is processed, this is done in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in a barrier-free and universal accessibility of our website. You can view further information on Google Translate as well as Google’s privacy policy at: https://www.google.com/policies/privacy/ Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, deactivate this service in the „cookie consent tool“ provided on the website. 17.5 Applications to job postings by e-mail On our website, we advertise currently vacant positions in a separate section, to which interested parties can apply by e-mail to the contact address provided. An inclusion in the application procedure presupposes here that applicants provide us, together with the application by e-mail, with all the personal data required for a well-founded and informed assessment and selection. The required details here include general information on the person (the name, the address, a telephone or electronic means of contact) as well as performance-specific evidence of the qualifications necessary for a position. Where applicable, health-related details are also required, which, in the interest of social protection, must receive special consideration under employment and social law in the person of the applicant. Which components an application must contain in the individual case for its eligibility for consideration, and in what form these components are to be transmitted by e-mail, can be seen from the respective job posting. After receipt of the application sent using the e-mail contact address provided, the applicant data is stored by us and evaluated exclusively for the purpose of processing the application. For queries arising in the course of the processing, we use, at our discretion, either the e-mail address provided by the applicant with their application or a telephone number provided. The legal basis for these processing operations, including the contacting for queries, is, as a matter of principle, Article 6(1)(b) GDPR (in the case of processing operations in Germany, in conjunction with Section 26(1) of the Federal Data Protection Act (BDSG)), within the meaning of which the going through of the application procedure is deemed to be the initiation of an employment contract. Insofar as, within the scope of the application procedure, special categories of personal data within the meaning of Article 9(1) GDPR (e.g. health data such as details of severe disability status) are requested from applicants, the processing is carried out in accordance with Article 9(2)(b) GDPR, so that we can exercise the rights arising from employment law and the law of social security and social protection and can fulfil our obligations in this respect. Cumulatively or alternatively, the processing of the special categories of data may also be based on Article 9(1)(h) GDPR if it is carried out for purposes of preventive healthcare or occupational medicine, for the assessment of the working capacity of the applicant, for medical diagnosis, the provision of care or treatment in the health or social sector or for the management of systems and services in the health or social sector. If, in the course of the evaluation described above, the applicant is not selected, or if an applicant withdraws their application prematurely, their data transmitted by e-mail as well as all electronic correspondence including the original application e-mail is deleted, after a corresponding notification, at the latest after 6 months. This period is measured on the basis of our legitimate interest in answering any follow-up questions on the application and, where applicable, in being able to fulfil our obligations to provide evidence under the provisions on the equal treatment of applicants. In the case of a successful application, the data provided is processed further on the basis of Article 6(1)(b) GDPR (in the case of processing operations in Germany, in conjunction with Section 26(1) BDSG) for the purposes of the implementation of the employment relationship. 17.6 Online applications via a form On our website, we offer those interested in a position the possibility of applying online via a corresponding form. An inclusion in the application procedure presupposes here that applicants provide us, via the form, with all the personal data required for a well-founded and informed assessment and selection. The required details include general information on the person (the name, the address, a telephone or electronic means of contact) as well as performance-specific evidence of the qualifications necessary for a position. Where applicable, health-related details are also required, which, in the interest of social protection, must receive special consideration under employment and social law in the person of the applicant. In the course of the sending of the form, the applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated exclusively for the purpose of processing the application. The legal basis for these processing operations is, as a matter of principle, Article 6(1)(b) GDPR (in the case of processing operations in Germany, in conjunction with Section 26(1) of the Federal Data Protection Act (BDSG)), within the meaning of which the going through of the application procedure is deemed to be the initiation of an employment contract. Insofar as, within the scope of the application procedure, special categories of personal data within the meaning of Article 9(1) GDPR (e.g. health data such as details of severe disability status) are requested from applicants, the processing is carried out in accordance with Article 9(2)(b) GDPR, so that we can exercise the rights arising from employment law and the law of social security and social protection and can fulfil our obligations in this respect. Cumulatively or alternatively, the processing of the special categories of data may also be based on Article 9(1)(h) GDPR if it is carried out for purposes of preventive healthcare or occupational medicine, for the assessment of the working capacity of the applicant, for medical diagnosis, the provision of care or treatment in the health or social sector or for the management of systems and services in the health or social sector. If, in the course of the evaluation described above, the applicant is not selected, or if an applicant withdraws their application prematurely, their data transmitted by form is deleted, after a corresponding notification, at the latest after 6 months. This period is measured on the basis of our legitimate interest in answering any follow-up questions on the application and, where applicable, in being able to fulfil our obligations to provide evidence under the provisions on the equal treatment of applicants. In the case of a successful application, the data provided is processed further on the basis of Article 6(1)(b) GDPR (in the case of processing operations in Germany, in conjunction with Section 26(1) BDSG) for the purposes of the implementation of the employment relationship. 17.7 – Google Maps On our website, we use Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). Google Maps is a web service for the display of interactive maps in order to present geographical information visually. Through the use of this service, our location is displayed to you and a possible journey is facilitated. Already when calling up those sub-pages in which the map of Google Maps is integrated, information about your use of our website (such as, for example, your IP address) is transferred to servers of Google and stored there; this may also involve a transfer to the servers of Google LLC. in the USA. This is carried out irrespective of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data is assigned directly to your account. If you do not want the assignment to your profile on Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Article 6(1)(f) GDPR on the basis of the legitimate interest of Google in displaying personalised advertising, in market research and/or in the needs-based design of Google websites. You have a right to object to the creation of these user profiles, whereby you must contact Google to exercise this. If you do not agree to the future transmission of your data to Google within the scope of the use of Google Maps, there is also the possibility of completely deactivating the web service of Google Maps by switching off the JavaScript application in your browser. Google Maps, and thus also the map display on this website, can then not be used. You can view Google’s terms of use at https://www.google.de/intl/de/policies/terms/regional.html; you can find the additional terms of use for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html You can find detailed information on data protection in connection with the use of Google Maps on Google’s website („Google Privacy Policy“): https://www.google.de/intl/de/policies/privacy/ Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Article 6(1)(a) GDPR. You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please follow the option for lodging an objection described above. 17.8 – Zenloop This website cooperates with zenloop GmbH, Pappelallee 78/79 10437 Berlin („zenloop“). Zenloop is a business-to-business software-as-a-service platform that enables us to have feedback from our customers collected and analysed via various channels. In this way, we can align and improve our offering to the needs of our customers. Via zenloop, specific surveys on our services can be created and sent to customers (respondents) by e-mail. The sending is carried out exclusively in the presence of an express consent of the customer in accordance with Article 6(1)(a) GDPR. For the evaluation of the survey, zenloop collects, insofar as a consent of the respondent in accordance with Article 6(1)(a) GDPR is present, on the one hand, their e-mail address. This consent can be withdrawn at any time with effect for the future. On the other hand, zenloop collects and stores any answers of the respondents, which, depending on the survey, may also contain personal data such as, for example, first and last names, and evaluates these on our behalf. Insofar as survey answers contain personal data, the processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the statistical evaluation of user satisfaction and the downstream optimisation of our online offering. We have concluded a data processing agreement with zenloop by which we oblige zenloop to protect the data of visitors of our website and not to pass it on to third parties. You can find further information on the use of data by zenloop in the zenloop privacy policy at https://www.zenloop.com/de/legal/privacy. 17.9 – Net Reviews S.A.S. for the verification and publication of customer reviews For the verification and publication of customer reviews, we use the services of Net Reviews S.A.S, 18-20 Avenue Robert Schuman, 13002, Marseille, France („Net Reviews“), operating in Germany under „Echte Bewertungen by NetReviews“. If you submit a review on our website, your first and last name, your e-mail address, order date and number as well as name and international references (GTIN/ISDNF) are collected, transmitted to Net Reviews and evaluated there in order to decide on the legitimacy of a customer review for a specific order. These processing operations are carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in guaranteeing the authenticity of customer reviews by ensuring the transaction relatedness and preventing review abuse. After the completed review check and approval, the data is deleted by Net Reviews. More information on data protection at Net Reviews can be found at https://www.echte-bewertungen.com/index.php?page=mod_protectiondonnees 17.10 – Google Meet We use the service „Google Meet“ of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter „Google Meet“), in order to hold online meetings, video conferences and/or webinars. In the case of the use of Google Meet, various data is processed. In this context, the scope of the processed data depends on which data you communicate before or during participation in an online meeting or a video conference or a webinar. Within the scope of the use of Google Meet, data of the communication participants is processed and stored on servers of Google. This data may include, in particular, your registration data (name, e-mail address, telephone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions of the participants, as well as voice inputs in chats, may be processed. This may also involve a transfer to the servers of Google LLC. in the USA. For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Article 6(1)(b) GDPR serves as the legal basis. If you have given us consent for the processing of your data, the processing is carried out on the basis of Article 6(1)(a) GDPR. Consent that has been given can be withdrawn at any time with effect for the future. Otherwise, the legal basis for the data processing in the holding of online meetings, video conferences or webinars is our legitimate interest in accordance with Article 6(1)(f) GDPR in the effective holding of the online meeting, webinar or video conference. You can find further information on the use of data by Google Meet in the data protection provisions of Google at https://www.google.de/policies/privacy/ – Microsoft Teams We use the service „Microsoft Teams“ of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA (hereinafter „Microsoft Teams“) in order to hold online meetings, video conferences and/or webinars. In the case of the use of Microsoft Teams, various data is processed. In this context, the scope of the processed data depends on which data you communicate before or during participation in an online meeting or a video conference or a webinar. Within the scope of the use of Microsoft Teams, data of the communication participants is processed and stored on servers of Microsoft Teams. This data may include, in particular, your registration data (name, e-mail address, telephone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions of the participants, as well as voice inputs in chats, may be processed. For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Article 6(1)(b) GDPR serves as the legal basis. If you have given us consent for the processing of your data, the processing is carried out on the basis of Article 6(1)(a) GDPR. Consent that has been given can be withdrawn at any time with effect for the future. Otherwise, the legal basis for the data processing in the holding of online meetings, video conferences or webinars is our legitimate interest in accordance with Article 6(1)(f) GDPR in the effective holding of the online meeting, webinar or video conference. You can find further information on the use of data by Microsoft Teams in the privacy policy of Microsoft Teams at https://privacy.microsoft.com/de-de/privacystatement – Zoom We use the service „Zoom“ of Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (hereinafter „Zoom“) in order to hold online meetings, video conferences and/or webinars. In the case of the use of Zoom, various data is processed. In this context, the scope of the processed data depends on which data you communicate before or during participation in an online meeting or a video conference or a webinar. Within the scope of the use of Zoom, data of the communication participants is processed and stored on servers of Zoom. This data may include, in particular, your registration data (name, e-mail address, telephone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions of the participants, as well as voice inputs in chats, may be processed. For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Article 6(1)(b) GDPR serves as the legal basis. If you have given us consent for the processing of your data, the processing is carried out on the basis of Article 6(1)(a) GDPR. Consent that has been given can be withdrawn at any time with effect for the future. Otherwise, the legal basis for the data processing in the holding of online meetings, video conferences or webinars is our legitimate interest in accordance with Article 6(1)(f) GDPR in the effective holding of the online meeting, webinar or video conference. You can find further information on the use of data by Zoom in the privacy policy of Zoom at https://zoom.us/docs/de-de/privacy-and-legal.html 18) Rights of the data subject 18.1 The applicable data protection law grants you, vis-à-vis the Controller, comprehensive data subject rights (rights of access and intervention) with regard to the processing of your personal data, about which we inform you below: – Right of access in accordance with Article 15 GDPR: You have, in particular, a right of access to your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or is being disclosed, the planned storage duration or the criteria for determining the storage duration, the existence of a right to rectification, erasure, restriction of processing, objection to the processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope concerning you and the intended effects of such processing, as well as your right to be informed of which safeguards in accordance with Article 46 GDPR exist in the case of the forwarding of your data to third countries; – Right to rectification in accordance with Article 16 GDPR: You have a right to the immediate rectification of incorrect data concerning you and/or the completion of your incomplete data stored by us; – Right to erasure in accordance with Article 17 GDPR: You have the right to demand the erasure of your personal data in the presence of the conditions of Article 17(1) GDPR. However, this right does not exist, in particular, if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims; – Right to restriction of processing in accordance with Article 18 GDPR: You have the right to demand the restriction of the processing of your personal data for as long as the accuracy of your data contested by you is being verified, if you refuse an erasure of your data on account of inadmissible data processing and instead demand the restriction of the processing of your data, if you need your data for the assertion, exercise or defence of legal claims after we no longer need this data after the achievement of the purpose, or if you have lodged an objection on grounds relating to your particular situation, for as long as it has not yet been established whether our legitimate grounds prevail; – Right to information in accordance with Article 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the Controller, the Controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves to be impossible or involves a disproportionate effort. You have the right to be informed about these recipients. – Right to data portability in accordance with Article 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to demand the transmission to another controller, insofar as this is technically feasible; – Right to withdraw consents given in accordance with Article 7(3) GDPR: You have the right to withdraw a consent to the processing of data once given at any time with effect for the future. In the case of withdrawal, we will delete the data concerned immediately, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal; – Right to complain in accordance with Article 77 GDPR: If you are of the opinion that the processing of the personal data concerning you infringes the GDPR, you have – without prejudice to any other administrative or judicial remedy – the right to complain to a supervisory authority, in particular in the member state of your place of residence, your place of work or the place of the alleged infringement. 18.2 RIGHT TO OBJECT IF, WITHIN THE SCOPE OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT, AT ANY TIME, ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION, TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE OR DEFENCE OF LEGAL CLAIMS. IF YOUR PERSONAL DATA IS PROCESSED BY US IN ORDER TO CONDUCT DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES. 19) Duration of the storage of personal data The duration of the storage of personal data is measured on the basis of the respective legal basis, on the processing purpose and – insofar as relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law). In the case of the processing of personal data on the basis of an express consent in accordance with Article 6(1)(a) GDPR, this data is stored until the data subject withdraws their consent. If statutory retention periods exist for data that is processed within the scope of legal-transaction or quasi-legal-transaction obligations on the basis of Article 6(1)(b) GDPR, this data is routinely deleted after the expiry of the retention periods, provided that it is no longer necessary for the performance of the contract or the initiation of the contract and/or there is no continuing legitimate interest on our part in continued storage. In the case of the processing of personal data on the basis of Article 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object in accordance with Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the assertion, exercise or defence of legal claims. In the case of the processing of personal data for the purpose of direct advertising on the basis of Article 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object in accordance with Article 21(2) GDPR. Insofar as nothing else results from the other information in this declaration about specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed. 20) Leadinfo

We use the lead-generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognises visits  by companies on our website on the basis of IP addresses and shows us, for this purpose, publicly available  information, such as, for example, company names or addresses. In addition, Leadinfo sets two first-party cookies  for the evaluation of user behaviour on our website and processes domains from form inputs  (e.g. „leadinfo.com„) in order to correlate IP addresses with companies and to improve the services.  You can find further information at www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In the case of an opt-out, your data is no longer  recorded by Leadinfo.