bsw - Privacy Policy

With this privacy policy, we would like to inform you about the nature, scope and purpose of the processing of personal data (hereinafter also referred to as ‘data’). Personal data is any data that can be related to you personally, e.g. your name, address, email address or your user behaviour. The privacy policy applies to all data processing operations carried out by us, both within the scope of our core activities and for the online media we provide.

 

 

Who is responsible for data processing at our company

Responsible for data processing is:

Bildungswerk der Sächsischen Wirtschaft gGmbH
Rudolf-Walther-Straße 4
01156 Dresden
Deutschland
0351 42502-0
info@bsw-mail.de
www.bsw-sachsen.de/impressum/

 

Contact details of our data protection officer

You can contact our data protection officer by email at datenschutzbeauftragter@bsw-mail.de or by post at our postal address with the addition ‘for the attention of the data protection officer’.

 

Table of contents

Processing of your Data in the Context of the Education and Training Services we provide

Your Rights under the GDPR

When do we delete your Data?

Cookies

Handling of your Data in the Application Process

Registration, Login and User Account

Marketing via Email, Post, or Telephone

Notice Regarding Data Transfers to the USA

Web Analytics and Statistics

Third-party Plugins we use

Our online Presence on Social Networks

Online Meetings, Video Conferences and Screen Sharing

Content Services

Security

Updates and Changes to this Privacy Policy

 

 

Processing of your Data in the Context of the Educational and Training Services we provide

 

If you participate in our education and training services or are interested in our services, the type, scope and purpose of the processing of your data is based on the contractual or pre-contractual relationship between us. In this sense, the data we process includes all data that you have provided or will provide for the purpose of using the contractual or pre-contractual services and that is required to process your enquiry or the contract concluded between us. This also includes the assessment and evaluation of our services and teaching staff. Unless otherwise stated in this privacy policy, the processing of your data and its transfer to third parties is limited to data that is necessary and appropriate for responding to your enquiries and/or fulfilling the contract concluded between you and us, for safeguarding our rights and for fulfilling legal obligations. We will inform you of the data required for this purpose before or during the data collection process. If we use third-party providers to provide our services, the data protection information of the respective third-party providers applies.

 

Special categories of data

If you participate in our training and education services or send us an enquiry because you are interested in the training and education services we offer, so-called special categories of data may also be affected by data processing. This includes, in particular, information about your health and information that reveals your political opinions or religious or philosophical beliefs (Art. 9 (1) GDPR). We process this data exclusively for training services, to protect your health, social protection or your vital interests. If we require the aforementioned information for purposes other than those mentioned above, we will inform you of this in detail before processing this data and will then obtain your express consent.

If it is necessary for the fulfilment of the contract concluded between us, for training services, for the protection of your health, social protection or your vital interests, we may also transfer your data to third parties, such as authorities or tax advisors.

Data concerned:

  • Inventory data (e.g. names, addresses)
  • Payment data (e.g. bank details, invoices)
  • Contact details (e.g. email address, telephone number, postal address)
  • Contract data (e.g. subject matter of the contract, duration of the contract)

Special categories of personal data:

  • Health data
  • Data revealing religious or political beliefs

Data subjects: Pupils, trainees, students, interested parties, business and contractual partners

Purpose of processing: Processing contractual services, communication and responding to contact enquiries, office and organisational procedures

Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR; compliance with a legal obligation, Art. 6(1)(c) GDPR; legitimate interest, Art. 6(1)(f) GDPR.

 

Your Rights under the GDPR


According to the GDPR, you have the following rights, which you may exercise at any time by contacting the controller specified in Section 1 of this Privacy Policy:

  • Right of Access: You have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data.
  • Right to Rectification: You have the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed.
  • Right to Erasure: You have the right to obtain the erasure of personal data concerning you.
  • Right to Restriction of Processing: In certain cases, you have the right to obtain restriction of processing of your personal data.
  • Right to Data Portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and to transmit those data to another controller.
  • Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority. The competent authority is the supervisory authority of your habitual residence, place of work, or the place of the alleged infringement.

Right to Withdraw Consent

You have the right to withdraw your consent to data processing at any time.

Right to Object

WHEN DATA PROCESSING IS BASED ON ARTICLE 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. THE LEGAL BASIS FOR EACH PROCESSING OPERATION IS SET OUT IN THIS PRIVACY NOTICE. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ARTICLE 21(1) GDPR).

WHERE YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING; THIS INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ARTICLE 21(2) GDPR).

Regardless of the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.

Please address your objection to the contact details of the controller provided above.

 

When do we delete your Data?

 

We will delete your data when we no longer need it or when you instruct us to do so. This means that, unless otherwise specified in the individual data protection notices in this privacy policy, we will delete your data

  • when the purpose of data processing has ceased to exist and the respective legal basis specified in the individual data protection notices no longer applies, e.g.
  1. upon termination of the contractual or membership relationship between us (Art. 6(1)(a) GDPR), or
  2. once our legitimate interest in further processing or storing your data ceases to exist (Art. 6(1)(f) GDPR),
  • if you withdraw your consent and no other legal basis for processing pursuant to Art. 6(1)(b–f) GDPR applies,
  • if you object to the processing and there are no overriding legitimate grounds for the continued processing of your data.

However, if we are required to retain (certain parts of) your data for other purposes—such as compliance with statutory retention obligations (typically 6 years for business correspondence or 10 years for accounting records), the establishment, exercise or defence of legal claims arising from contractual relationships (up to four years), or to protect the rights of another natural or legal person—we will only delete (the relevant part of) your data after these periods have expired. Until the expiry of these periods, the processing of your data will be restricted to these specific purposes (i.e. compliance with retention obligations).

 

Cookies

 

Our website uses cookies. Cookies are small text files consisting of a sequence of numbers and letters that are stored on the device you use. Cookies primarily serve to exchange information between your device and our website. This includes, for example, language settings on a website, login status, or the point at which a video was last viewed.

When visiting our website, two types of cookies are used:

  • Temporary Cookies (Session Cookies): These store a so-called session ID, which allows various requests from your browser to be assigned to the same session. Session cookies are deleted when you log out or close your browser.
  • Permanent Cookies: These remain stored even after the browser is closed. This allows our website to recognize your device when you return. These cookies may store information such as language settings or login information. They can also be used to document and analyze your browsing behavior. Such data may be used for statistical, marketing, and personalization purposes.

In addition to this classification, cookies can also be differentiated based on their purpose:

  • Necessary Cookies: These are cookies that are essential for the operation of our website, such as storing logins or shopping carts during your session, or cookies set for security reasons.
  • Statistics, Marketing, and Personalization Cookies: These are cookies used for analysis or reach measurement. Such "tracking" cookies may store information such as search terms entered or the frequency of page views. They may also store a user profile based on individual browsing behavior (e.g., viewing specific content, using functions, etc.). These profiles are used to display content to users that matches their potential interests. If we use services that store cookies for statistical, marketing, and personalization purposes on your device, we will inform you separately in the following sections of this Privacy Policy or when obtaining your consent.

Data concerned:

  • Usage data (e.g., access times, pages clicked)
  • Communication data (e.g., information about the device used, IP address)

Data subjects: Users of our online services

Purpose of processing: Display of our website, ensuring the operation of our website, improvement of our online offering, communication and marketing

Legal basis:
Legitimate Interest, Art. 6(1)(f) GDPR
If we do not obtain your consent to set cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, particularly its content and functions. You may object to the use of cookies set on the basis of our legitimate interest via your browser’s security settings. There you can specify whether you want to accept cookies at all, only upon request, or have them deleted after each browser session. If cookies are disabled for our website, some functions of the website may no longer be fully available.

Consent, Art. 6(1)(a) GDPR
If we ask for your consent to set certain cookies before you visit our website and you give your consent, this consent constitutes the legal basis. We will inform you during the consent process about which cookies we use. If you do not give your consent, only technically necessary cookies will be set, which are required for the proper operation and display of our website in your browser. If you have given your consent to the use of cookies, you may withdraw it at any time.

Contacting Us

If you contact us via email, social media, telephone, fax, post, our contact form, or by any other means and provide us with personal data such as your name, telephone number, or email address, or other information about yourself or your inquiry, we will process this data to respond to your request within the context of our pre-contractual or contractual relationship.

Data concerned:

  • Inventory data (e.g., names, addresses)
  • Contact data (e.g., email address, telephone number, postal address)
  • Content data (texts, photos, videos)
  • Contract data (e.g., subject matter of the contract, duration of the contract)

Data subjects: Interested parties, customers, business and contractual partners

Purpose of processing: Communication and response to contact requests, office and organizational procedures

Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR, Legitimate interest, Art. 6(1)(f) GDPR

 

Handling of Your Data in the Application Process

 

If you apply to us, we process the personal data you provide during the application process, such as your name, address, place of residence, age, application photo, email address, and telephone number, as well as your professional background including education, training, and academic studies. If you send your data via email or through a contact form on our website, the processing is carried out electronically. When submitting your application via the contact form, your data is transmitted in encrypted form in accordance with the current state of the art. If you send your data via email, please note that transmission is generally unencrypted. If an employment contract is concluded following the application process, we will store your data for the purpose of managing the employment relationship in compliance with legal requirements.

Data concerned:

  • Inventory data (e.g., names, addresses)
  • Payment data (e.g., bank details, invoices)
  • Contact data (e.g., email address, telephone number, postal address)
  • Contract data (e.g., subject matter of the contract, contract duration)

Data subjects: Applicants

Purpose of processing: Management of the application process

Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR, Legal obligation, Art. 6(1)(c) GDPR

Deletion:
If no employment contract is concluded, your data will be deleted after the application process has ended, or at the latest two months thereafter. This does not apply if legal provisions prevent deletion or if further storage of your data is necessary for the purpose of providing evidence, for example in proceedings under the General Equal Treatment Act (AGG). The application process is considered completed upon dispatch of the rejection notice.

 

Registration, Login, and User Account

 

You have the option to register on our online platform in order to create a user account. For this purpose, it is necessary to provide personal data as requested in the input form. This typically includes your name, email address, and, if applicable, a username and password. We store and process this data to create your user account and enable (repeated) login. You may change or delete this data at any time. The data will not be shared with third parties unless this is necessary for the technical and organizational execution of the user agreement between us.

To protect both you and us from abusive registrations, we store the IP address assigned to you at the time of registration, as well as the date and time of registration.

Data concerned:

  • Inventory data (e.g., names, addresses)
  • Contact data (e.g., email address, telephone number, postal address)
  • Contract data (e.g., subject matter of the contract, contract duration)
  • Payment data (e.g., bank details, invoices)
  • Content data (e.g., posts, photos, videos)
  • Usage data (e.g., access times, pages clicked)
  • Communication data (e.g., information about the device used, IP address)

Purpose of processing:
Execution of contractual services, communication and response to contact requests, security measures

Legal basis: Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR, Legal obligation, Art. 6(1)(c) GDPR, Legitimate interest, Art. 6(1)(f) GDPR

Deletion: Please refer to the section: “When do we delete your data?” Additionally, we would like to point out that the data collected during registration and the content data stored in the account will be deleted—subject to any conflicting statutory retention obligations—once you delete your account. Therefore, if you wish or need to access the content data stored in your account after deletion, please ensure that you back it up elsewhere before deleting your account.

 

Marketing via Email, Post, or Telephone

 

We process personal data for our marketing communications via email, postal mail, or telephone. You may object to receiving our marketing communications at any time or withdraw your previously given consent. To be able to demonstrate, if necessary, that your consent was originally given, we may retain your data for up to 4 years following your objection or withdrawal. Your data will not be used for any other purposes after your objection or withdrawal. If you wish for your data to be deleted earlier, we will do so once you confirm that you had originally provided consent.

Data concerned:

  • Contact data (e.g., email address, telephone number, postal address)
  • Inventory data (e.g., names, addresses)

Data subjects: Communication partners

Purpose of processing: Direct marketing via email, postal mail, or telephone

Legal basis: Consent, Art. 6(1)(a) GDPR, Legitimate interest, Art. 6(1)(f) GDPR

Withdrawal:
You may withdraw your consent to receive newsletters at any time. We offer the following options for submitting your withdrawal:

  • Via the contact details provided in the legal notice on our website

CleverReach

Service provider: CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede
Website: https://www.cleverreach.com/de
Privacy Policy: https://www.cleverreach.com/de/datenschutz/

 

Notice Regarding Data Transfers to the USA


Our website includes tools provided by companies based in the United States. When these tools are active, your personal data may be transferred to the servers of these companies in the USA. Please note that the USA is not considered a safe third country under EU data protection law. U.S. companies are legally obligated to disclose personal data to security authorities, and you, as the data subject, may not have legal recourse against such disclosures. Therefore, it cannot be ruled out that U.S. authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on U.S. servers for surveillance purposes. We have no influence over these processing activities.

 

Web Analytics and Statistics

 

To measure visitor traffic and analyze usage patterns on our website, we use web analytics services. These services collect data such as the referring website, pages accessed, duration of visits, and interactions. Additionally, data about your browser, operating system, and device type may be collected. Depending on the provider and your consent, demographic data such as age or gender may also be processed. If you have consented to location tracking, this data may also be processed.

To collect and store this data, the analytics service places a cookie on your device, which also captures your IP address. However, this address is anonymized using IP masking, so it cannot be linked to your visit. No clear identifiers such as names or email addresses are stored. Neither we nor the analytics provider can identify individual visitors.

Please note that depending on the provider’s country of residence, data collected via the service may be transferred and processed outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be upheld, and your rights may be difficult to enforce.

Data concerned:

  • Usage data (e.g., access times, pages clicked)
  • Communication data (e.g., device information, IP address)

Data subjects: Users of our online services

Purpose of processing: Audience measurement, campaign performance analysis, remarketing, and interest- or behavior-based marketing

Legal basis: Consent, Art. 6(1)(a) GDPR (if obtained prior to using the service), Legitimate interest, Art. 6(1)(f) GDPR (to analyze visitor flows and improve functionality and user experience)

 

Use of the following web analytics services:

Privacy Policy on the Use of Google Analytics (with Anonymization Function)

The controller has integrated the component Google Analytics (with anonymization function) on this website. Google Analytics is a web analytics service. Web analytics involves the collection, gathering, and evaluation of data about the behavior of visitors to websites. A web analytics service collects, among other things, data about the website from which a data subject has accessed a website (so-called referrer), which subpages were accessed, how often, and for what duration a subpage was viewed. Web analytics is primarily used for the optimization of a website and for cost-benefit analysis of internet advertising.

The operating company of the Google Analytics component is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

The controller uses the "_gat._anonymizeIp" extension for web analytics via Google Analytics. By means of this extension, the IP address of the data subject’s internet connection is shortened and anonymized by Google when access to our website occurs from a Member State of the European Union or another Contracting State to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor traffic on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile online reports for us that show the activities on our website, and to provide other services related to the use of our website.

Google Analytics sets a cookie on the data subject’s IT system. What cookies are has already been explained above. By setting the cookie, Google is enabled to analyze the use of our website. Each time one of the individual pages of this website, which is operated by the controller and on which a Google Analytics component has been integrated, is accessed, the internet browser on the data subject’s IT system is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google gains knowledge of personal data, such as the IP address of the data subject, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission settlements.

By means of the cookie, personal information such as the time of access, the location from which access originated, and the frequency of visits to our website by the data subject is stored. Each time our website is visited, this personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States. Google may pass this personal data collected through the technical process on to third parties.

The data subject may, at any time, prevent the setting of cookies by our website, as already described above, by means of a corresponding setting of the internet browser used and thus permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Google from setting a cookie on the data subject’s IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the possibility to object to and prevent the collection of data generated by Google Analytics relating to the use of this website and the processing of this data by Google. To do so, the data subject must download and install a browser add-on available at the following link: https://tools.google.com/dlpage/gaoptout. This browser add-on informs Google Analytics via JavaScript that no data and information about website visits may be transmitted to Google Analytics. The installation of the browser add-on is considered an objection by Google. If the data subject’s IT system is later deleted, formatted, or reinstalled, the data subject must reinstall the browser add-on to deactivate Google Analytics. If the browser add-on is uninstalled or deactivated by the data subject or another person within their sphere of control, it is possible to reinstall or reactivate the browser add-on.

Further information and the applicable privacy policies of Google can be found at: https://www.google.de/intl/en/policies/privacy/ and http://www.google.com/analytics/terms/en.html .
Google Analytics is further explained at: https://www.google.com/intl/en_en/analytics/ 

Privacy Policy on the Use of Google AdWords

The controller has integrated Google AdWords on this website. Google AdWords is an online advertising service that allows advertisers to place ads both in Google’s search engine results and within the Google advertising network. Google AdWords enables advertisers to predefine specific keywords, through which an ad will only be displayed in Google’s search results when the user retrieves a keyword-relevant search result using the search engine. Within the Google advertising network, ads are distributed to topic-relevant websites using an automated algorithm and in accordance with the predefined keywords.

The operating company of the Google AdWords services is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043-1351, USA.

The purpose of Google AdWords is to promote our website by displaying interest-based advertising on third-party websites and in the search engine results of Google, as well as to display third-party advertising on our website.

If a data subject accesses our website via a Google ad, a so-called conversion cookie is placed on the data subject’s IT system by Google. What cookies are has already been explained above. A conversion cookie loses its validity after thirty days and is not used to identify the data subject. As long as the cookie has not expired, it is used to determine whether certain subpages of our website, such as the shopping cart of an online shop system, have been accessed. Through the conversion cookie, both we and Google can determine whether a data subject who accessed our website via an AdWords ad has generated a sale, i.e., completed or abandoned a purchase.

The data and information collected through the use of the conversion cookie are used by Google to generate visit statistics for our website. These visit statistics are used by us to determine the total number of users who were referred to us via AdWords ads, to assess the success or failure of each AdWords ad, and to optimize our AdWords campaigns for the future. Neither our company nor other Google AdWords advertisers receive information from Google that could identify the data subject.

The conversion cookie stores personal information, such as the websites visited by the data subject. Each time our website is visited, personal data, including the IP address of the internet connection used by the data subject, is transmitted to Google in the United States of America. This personal data is stored by Google in the United States. Google may disclose this personal data collected through the technical process to third parties.

The data subject may, at any time, prevent the setting of cookies by our website, as already described above, by adjusting the settings of the internet browser used and thereby permanently object to the setting of cookies. Such a setting would also prevent Google from placing a conversion cookie on the data subject’s IT system. In addition, a cookie already set by Google AdWords can be deleted at any time via the internet browser or other software programs.

Furthermore, the data subject has the option to object to interest-based advertising by Google. To do so, the data subject must access the link www.google.de/settings/ads  from each internet browser they use and configure the desired settings there.

Further information and the applicable privacy policies of Google can be found at: https://www.google.de/intl/de/policies/privacy/ 

 

Third-Party Plugins Used by Us

 

We have embedded plugins in the form of “social media buttons” from the providers we use on our website. You can identify which plugin belongs to which provider by the respective logo displayed on the plugin. When you access a page of our online presence that contains such a plugin, a connection is automatically established between your browser and the servers of the respective plugin provider, and a cookie is set on your device by the provider. At this point, data may already be transmitted—even if you do not have an account with the respective social network provider or are not logged in at the time of visiting our website. Additional data may be transmitted to the provider as a result of further interactions with the respective social plugin (e.g., clicking the “Like” button on Facebook or the “Retweet” button on Twitter).

Please note that, depending on the country in which the service provider is based, the data described below may be transferred to and processed on servers located outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that the enforcement of your rights may be limited or more difficult.

Data concerned:

  • Usage data (e.g., access times, pages clicked)
  • Communication data (e.g., device information, IP address)

Data subjects: Users of our website

Purpose of processing: Display of our website, provision of content, ensuring the operation of our website

Legal basis: Consent via cookie consent banner, Art. 6(1)(a) GDPR, Legitimate interests, Art. 6(1)(f) GDPR

 

We use the following plugins:

Facebook
Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
EU headquarters: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Website: www.facebook.com 
Privacy Policy: https://www.facebook.com/about/privacy/ 
Privacy Policy for Facebook Pages: https://www.facebook.com/legal/terms/information_about_page_insights_data 

LinkedIn
Service provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA
Office in Germany: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich
Website: https://www.linkedin.com 
Privacy Policy: https://www.linkedin.com/legal/privacy-policy 

Twitter
Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Website: https://twitter.com 
Privacy Policy: https://twitter.com/privacy 

XING
Service provider: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
Website: https://www.xing.com 
Privacy Policy: https://privacy.xing.com/en/privacy-policy 

 

Our Online Presence on Social Networks

 

We operate online presences on the social networks listed below. When you visit one of these presences, the respective provider collects and processes the data specified below. This data is generally collected for advertising and market research purposes, and user profiles are created based on this data. These user profiles may store data independently of the device you use—especially if you are a member of the respective platform and logged in at the time of your visit. The user profiles may be used by the providers to display interest-based advertising. You have the right to object to the creation of such user profiles. To exercise this right, you must contact the respective provider directly.

If you have an account with one of the providers listed below and are logged in when visiting our website, the respective provider may collect data about your usage behavior on our website. To prevent such linkage of your data, you can log out of the provider’s service before visiting our website.

For information on the purpose and scope of data collection by the provider, please refer to the respective privacy policies linked below.

Please note that, depending on the provider’s country of residence, data collected via their platform may be transferred to and processed on servers located outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that the enforcement of your rights may be limited or more difficult.

Data concerned:

  • Inventory and contact data (e.g., name, address, telephone number, email address)
  • Content data (e.g., posts, photos, videos)
  • Usage data (e.g., access times, pages clicked)
  • Communication data (e.g., device information, IP address)

Purpose of processing: Communication and marketing, tracking and analysis of user behavior

Legal basis: Consent, Art. 6(1)(a) GDPR, Legitimate interests, Art. 6(1)(f) GDPR

Right to object: For information on how to object (opt-out), please refer to the links provided by the respective providers below.

 

We maintain online presences on the following social networks:

Facebook
Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
EU headquarters: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Website: https://www.facebook.com/ 
Privacy Policy: https://www.facebook.com/about/privacy/ 
Privacy Policy for Facebook Pages: https://www.facebook.com/legal/terms/information_about_page_insights_data 

Instagram
Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
EU headquarters: Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
Website: https://www.instagram.com/ 
Privacy Policy: http://instagram.com/about/legal/privacy 

LinkedIn
Service provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA
Office in Germany: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich
Website: https://www.linkedin.com/ 
Privacy Policy: https://www.linkedin.com/legal/privacy-policy 

Twitter
Service provider: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA
Website: https://twitter.com/ 
Privacy Policy: https://twitter.com/privacy 

WhatsApp
Service provider: WhatsApp Inc., 1601 Willow Road, Menlo Park, CA 94025, USA
EU headquarters: WhatsApp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Website: https://www.whatsapp.com/ 
Privacy Policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy 

XING
Service provider: New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany
Website: https://www.xing.com/ 
Privacy Policy: https://privacy.xing.com/en/privacy-policy 

 

Online Meetings, Video Conferences, and Screen Sharing

 

We use services provided by third-party providers to conduct online meetings, video and/or audio conferences, and online seminars with employees, prospects, or customers. When you communicate with us via such a service, the data collected during the communication process is processed both by us and by the third-party provider. The data that may be generated during such communication includes, in particular, your registration and contact details, chat messages, video and audio contributions, and shared screen content. The data processed by the third-party provider primarily includes user data and metadata (e.g., IP address, system information). These providers generally process such data to ensure the security of the service. Additionally, insights gained from the data may be used to improve the provider’s services and for marketing purposes. Please refer to the respective provider’s privacy policy for further information.

Please note that, depending on the provider’s country of residence, data collected via the service may be transferred to and processed on servers located outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that the enforcement of your rights may be limited or more difficult.

Data concerned:

  • Inventory data (e.g., names, addresses)
  • Contact details (e.g., email address, telephone number)
  • Shared content (e.g., photos, videos, text, audio recordings)
  • User data (e.g., access times, visited websites, interest in content)
  • Metadata and communication data (e.g., IP address, system information)

Data subjects: Prospects, customers, communication partners

Purpose of processing: Handling contact inquiries, internal and external communication with employees, prospects, and customers, performance of contractual obligations, provision of services

Legal basis: Consent, Art. 6(1)(a) GDPR, Performance of a contract and pre-contractual inquiries, Art. 6(1)(b) GDPR, Legitimate interests, Art. 6(1)(f) GDPR

 

Services we use:

Microsoft Teams
Services offered: Video conferences, chats, voice calls
Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Website: https://www.microsoft.com/de-de/microsoft-365/microsoft-teams/group-chat-software 
Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement 

 

Content Services

We use certain services to deliver specific content or graphics (videos, images, music, fonts, maps) via our website. In doing so, the services we use process the IP address assigned to you at the time of your visit, as this is necessary for the content to be displayed in your browser. Additionally, these service providers may place further cookies on your device, through which information about your usage behavior, interests, the device and browser you use, as well as the time and duration of your session may be collected. These data are typically used by the providers for analytics, statistical, and marketing purposes. This information may also be combined with data from other sources, especially if you have an account with the provider and are logged in at the time of your visit.

Please note that, depending on the provider’s country of residence, the data described below may be transferred to and processed on servers located outside the European Union. In such cases, there is a risk that the level of data protection required by the GDPR may not be maintained and that the enforcement of your rights may be limited or more difficult.

Data concerned:

  • Usage data (e.g., access times, pages clicked)
  • Communication data (e.g., device information, IP address)

Data subjects: Users of our website

Purpose of processing: Display of our website, provision of content, ensuring the operation of our website

Legal basis: Consent via cookie consent banner, Art. 6(1)(a) GDPR Legitimate interests, Art. 6(1)(f) GDPR

We use the following content services:

Google Maps
We use Google Maps on our website. Google collects and processes the visitor’s IP address. When you visit a page that includes Google Maps, your IP address and location data (the latter generally only with your consent) are transmitted to Google, regardless of whether you actually use Google Maps or are logged into your Google account. If you are logged into your Google account when visiting our website, your IP address will be associated with your Google account.

Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
EU headquarters: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Website: https://www.google.de/maps
Privacy Policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de

YouTube
We use components from YouTube on this website to embed videos that can be played via your browser when visiting our website. During your visit, both YouTube and Google are informed of which page or subpage you accessed, as your IP address is transmitted to Google’s external servers in the USA. This transmission occurs regardless of whether the videos are actually viewed or clicked, or whether you are logged into your YouTube or Google account. If you are logged in, this information is associated with your Google account.

Service provider: YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA
Website: https://www.youtube.com/
Privacy Policy: https://policies.google.com/privacy
Opt-out: https://tools.google.com/dlpage/gaoptout?hl=de

Security Measures

We implement technical and organizational security measures in accordance with the state of the art to comply with data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction, or unauthorized access by third parties.

 

Updates and changes to this privacy policy

 

This Privacy Policy is currently valid and was last updated in September 2020. It may become necessary to amend this Privacy Policy due to changes in legal or regulatory requirements.