Privacy Policy

Introduction

Data protection has a particularly high priority for secjur GmbH (hereinafter: "We", "Us").
With the information presented below, we provide you with an overview of the processing of your personal data on our website https://www.secjur.com/ (hereinafter "website"). In addition, the privacy policy also applies to our presences in the social and professional networks, our newsletter and the application process.
We also want to inform you about your rights under data protection laws. We always process your personal data in accordance with the General Data Protection Regulation (hereinafter "GDPR"), the Telecommunications and Telemedia Data Protection Act (hereinafter "TTDSG")and all applicable country-specific data protection regulations. This Privacy Notice is also aligned the Swiss Data Protection Act (“DPA”) and the revised Swiss Data Protection (“revDPA”). However, the application of these laws depends on each individual case.

1. Controller

The controllerin the sense of the GDPR is:
secjur GmbH
Falkensteiner Ufer 40
22587 Hamburg
Phone: +49 40/80 90 81 146
E-mail: dsb@secjur.com

2. Data Protection Officer

You can reach our data protection officers as follows:
Eagle LSP
Data Protection
Neustädter Neuer Weg 22
20459 Hamburg
E-mail: internaldataprotection@secjur.com

You can contact our data protection officers directly with all questions and suggestions regarding data protection and the exercise of your rights.

3. Definition

3.            Definitions

This privacy policy is based on the terminology of the GDPR. To simplify matters, we would like to explain some important terms in this context:

  • Consent means any freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or her.
  • Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
  • Data subjtect is any identified or identifiable natural person whose personal data is processed by the controller.
  • Personal data means any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
  • Processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
  • Processor means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller, e.g. hosting providers, newsletter services, cloud services.
  • Recipient means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing.
  • Third Party means a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.

4.            Origin of personal data

We may obtain personal data in the following ways:

4.1.         Information provided by you

You have the option of providing information about yourself (e.g., contact details) on our website.

4.2.         Automatically collected and generated data

Data is automatically collected and generated when you use our website.

4.3.         Data collected by third parties

If we maintain a presence on social and professional networks, we may receive data about you through these networks (e.g., if you contact us via a social or professional network or respond to one of our posts there).

5.            General information about data processing

Below, we provide an overview of the personal data we process. We describe the scope, purposes, and legal basis for our processing of personal data. We also indicate, where applicable, which third-party providers we use that receive your data. Finally, we inform you whether the respective processing by the third-party provider involves a transfer to a third country.

The provision of your personal data is always voluntary. However, it may be that the respective functionality only works if you provide your information (e.g., contact form).

We will not disclose your personal data to third parties without your consent, unless this is permitted by law (e.g., because it is necessary for the performance of the contract).

The processing of your personal data may be based on the following legal grounds:

  • Art. 6(1)(a) GDPR serves as the legal basis for processing operations in which we obtain consent for a specific processing operation.
  • If the processing of personal data is necessary for the performance of a contract to which you are a party, the processing is based on Art. 6(1)(b) GDPR. The same applies to processing operations that are necessary for the implementation of pre-contractual measures.
  • If we are subject to a legal obligation that requires the processing of personal data, the processing is based on Art. 6(1)(c) GDPR in conjunction with the respective standard from which the obligation arises.
  • Processing operations may also be based on Art. 6(1)(f) GDPR. Processing operations are based on this legal basis if the processing is necessary to safeguard a legitimate interest of ours, provided that the interests, fundamental rights, and freedoms of the data subject do not prevail.

Insofar as we transfer personal data to a third country for processing, we ensure compliance with Art. 44 et seq. GDPR, i.e. before transferring personal data to third parties in a country outside the EU or the EEA (Norway, Iceland, Liechtenstein), we check how an adequate level of protection can be ensured. An adequate level of protection can be ensured, among other things, by obtaining an adequacy decision from the EU Commission, by concluding standard data protection clauses with the recipient and taking further additional measures, or by ensuring that the transfer to a third country is permissible under other guarantees regulated in Art. 46 ff. GDPR. The USA is considered a country with an inadequate level of data protection according to EU standards. There is a risk that US authorities may access personal data even without legal protection. In addition, it may be difficult to exercise data subject rights, such as the right to information or erasure. If the data transfer is based on Articles 46, 47, or 49(1) GDPR, you can obtain a copy of the guarantees for the existence of an adequate level of data protection in relation to the data transfer or a reference to the availability of a copy of the guarantees from us. Please contact us for this purpose.

6.            Transfer of personal data

In the course of our processing of personal data, it may happen that personal data is transferred to other recipients or disclosed to them. The recipients of this personal data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your personal data to protect your personal data. For further information and a copy of the security , please contact our data protection officer.

7.            Deletion of data

The personal data we process will be deleted in accordance with legal requirements as soon as the consent given for processing is revoked or other permissions cease to apply (e.g., if the purpose of processing this personal data no longer applies or it is not necessary for the purpose). If the personal data is not deleted because it is required for other and legally permissible purposes, its processing will be restricted to these purposes. This means that the personal data will be blocked and not processed for other purposes. This applies, for example, to personal data that must be retained for commercial or tax law reasons or whose storage is necessary for the assertion, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person.

Our privacy policy also contains further information on the storage and deletion of personal data, which takes precedence for the respective processing operations.

8.            Data for the provision of the website and the creation of log files

If you use this website for informational purposes only, without otherwise transmitting data to us (e.g., by registering or using the contact form), we collect technically necessary data via server log files, which is automatically transmitted to our server, including:

  • Browser type and browser version
  • Operating system used
  • Referrer URL (previously visited website)
  • Host name of the accessing computer
  • Date and time of the server request
  • IP address

The temporary storage of data is necessary for the duration of a website visit in order to display our website to you. This processing is technically necessary to ensure the functionality of the website and the security of the information technology systems. The legal basis for the processing is therefore Art. 6(1)(f) GDPR in order to guarantee the provision, security, and stability of our website.

The data is deleted as soon as it is no longer necessary for the purpose for which it was collected. In the case of the provision of the website, this is the case when the respective session has ended. For security reasons (e.g., to investigate misuse or fraud), the log files are stored for a maximum of 7 days and then deleted. Data that needs to be kept longer for evidence purposes is stored until the matter is finally clarified.

To provide our online services, we use storage space, computing capacity, and software that we rent or otherwise obtain from the server provider Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (web host).

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the United States that are certified accordingly are permitted. Webflow, Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

9.            Contact form

You can contact us via a contact form on our website. When you contact us and we respond to your inquiry, we process the following personal data about you:

  • First and last name
  • Business email address
  • Affiliated company
  • Phone
  • Date and time of the inquiry
  • IP address
  • Communication content, if applicable

If you contact us within the framework of an existing contractual relationship or contact us in advance for information about our range of services or our other services, the personal data you provide will be processed for the purpose of processing and responding to your contact request in accordance with Art. 6(1)(b) GDPR. Furthermore, to protect our legitimate interests in accordance with Art. 6(1)(f) GDPR for the proper response to customer/contact inquiries.

We will delete your personal data as soon as it is no longer necessary for the purpose for which it was collected. In the context of contact requests, this is generally the case when it is clear from the circumstances that the specific matter has been conclusively dealt with. Mandatory legal provisions, in particular retention periods under commercial or tax law, remain unaffected.

Our contact form is provided by HubSpot Germany GmbH, Postbahnhof 17, 10243 Berlin, Germany. We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law, which ensures that the provider only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the US that are certified accordingly are permitted. The affiliated company HubSpot Inc. is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

10.          Contact options / inquiries by email, telephone, or fax

If you contact us by email, telephone, or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of processing your request. We will not pass on this data without your consent.

When contacting you and responding to your inquiry, we process the following personal data about you:

  • Name
  • Email
  • Date and time of the inquiry
  • Meta data of the email
  • Other personal data that you provide to us when contacting us.

We process your data to respond to your request and other related matters. 

This data is processed on the basis of Art. 6(1)(b) GDPR, provided that your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective processing of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this has been requested; consent can be revoked at any time.

The data you send us via contact requests will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular statutory retention periods—remain unaffected.

11.           Newsletter

For the automated sending of newsletters, in particular for system notifications, invitations to online training courses, etc., we use the external service HubSpot from HubSpot Germany GmbH, Postbahnhof 17, 10243 Berlin, Germany. The following data is processed in this context:

  • Email address
  • First and last name
  • Organization
  • Preferred language
  • Subject and content of the email
  • Time of sending

Emails are sent for the purpose of automated communication with our customers, in particular for system-related notifications, the administration of online training courses, and recommended compliance measures relating to the services booked.

Insofar as this is a contractually owed service, the legal basis for sending emails is Art. 6(1)(b) GDPR. The legal basis for sending emails in other cases is Art. 6(1)(f) GDPR. Our legitimate interest lies in efficient and reliable communication with our users.

The data will only be stored for as long as is necessary for sending emails and ensuring the traceability of communication.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider only processes  personal data of our website visitors in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45 (3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the US that are certified accordingly are permitted. The affiliated company HubSpot Inc. is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

12.          Customer and contract data

We process your personal data that we receive from you during our business relationship. We also process personal data about you that we have received from a legal entity (prospective customer and/or customer or other contractual partner) in your capacity as a representative/authorized representative of that entity. To the extent permitted, we also obtain certain data from publicly available sources (e.g., commercial registers, press, Internet) or from public authorities. In addition to the data you provide to us directly, the categories of personal data we receive about you from third parties include, in particular, information from public registers, information we obtain in connection with official and legal proceedings, information in connection with your professional functions and activities (so that we can, for example, conclude and process transactions with your employer with your help), information about you in correspondence and meetings with third parties, credit reports (insofar as we conduct business with you personally).

We process the following personal data in the context of contract initiation or contract fulfillment:

  • Master data (e.g., first and last name, address)
  • Contact details (e.g., email address, telephone number) and details of affiliated companies
  • Contact person data: company, industry, and job title, contact details
  • Bank details for SEPA procedures, invoice and payment data

We use the personal data we collect primarily to conclude and execute our contracts with our customers and business partners, in particular in the context of licensing our products and providing expert support, as well as the activities of a data protection officer for our customers and the purchase of products and services from our suppliers and subcontractors, and to comply with our legal obligations at home and abroad. If you work for such a customer or business partner, your personal data may of course also be affected in this capacity.

The legal basis is the fulfillment of the contract and the implementation of pre-contractual measures in accordance with Art. 6(1)(b) GDPR.

We delete your personal data as soon as it is no longer necessary for the purpose for which it was collected and there are no legal retention obligations.

We use the HubSpot CRM system. We use the "sevDesk" software from sevDesk GmbH (Hauptstraße 115, 77652 Offenburg, Germany) to create and send invoices.

We have concluded a data processing agreement (DPA) with both providers. This is an agreement required by data protection law that ensures that they process the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Personal data may also be transferred to the United States. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. The affiliated company HubSpot Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

13.          Job applications

We also offer you the opportunity to apply for job vacancies and send us your application online or by post.

If you apply to us electronically, i.e., by email or via our web form on our recruiting page, we will collect and process your personal data for the purpose of handling the application process and implementing pre-contractual measures.

By submitting an application on our recruitment page, you are expressing your interest in working for us. In this context, you provide us with personal data, which we use and store exclusively for the purpose of your job search/application.

You also have the option of uploading relevant documents such as a cover letter, your resume, and references. These may contain additional personal data such as your date of birth, address, etc.

As part of the application process, we process the following personal data:

  • Master data (e.g., first and last name, address)
  • Contact details (e.g., email address, telephone number)
  • Application data (e.g., cover letter, resume, references, and other supporting documents)

Only authorized employees from the HR department or employees involved in the application process have access to your data.

In addition, we offer you the opportunity to be included in our "applicant pool." You must give your consent in advance. With your consent, we will store your data for inclusion in our applicant pool for six months after the end of the application process in order to identify any other positions that may be of interest to you. This also applies, for example, to applications for training or internship positions.

The legal basis for the processing of your data is the initiation of a contract in accordance with Art. 6(1)(b) GDPR, which takes place at your request. If we obtain your consent (e.g. for inclusion in our applicant pool), this constitutes the legal basis for data processing in accordance with Art. 6(1)(a) GDPR. After completion of the application process, the data will be stored for up to six months. Your data will be deleted or anonymized after six months at the latest. In this case, the data will only be available to us as so-called metadata without direct personal reference for statistical evaluations (e.g., proportion of female or male applicants, number of applications per period, etc.).

If you receive an offer of employment from us during the application process and accept it, we will store the personal data collected during the application process for at least the duration of the employment relationship.  

In the event of a legal obligation, the data will be stored in accordance with the applicable provisions. Longer storage is only possible if we add the personal data to our applicant pool as described above after obtaining your consent.

Your data will be passed on to the service provider Personio SE & Co. KG, Seidlstraße 3, 80335 Munich, to the extent necessary for order processing. We have concluded an order processing agreement (DPA) with the provider. This is an agreement required by data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.  

14.          Our presence on social and professional networks

We maintain presences on social and professional networks in order to communicate with you, inform you about our services, and find new employees.

If you visit one of our pages there, we may be jointly responsible with the provider of the respective platform for the processing operations triggered by this, which concern personal data, within the meaning of Art. 26 GDPR.

To the best of our knowledge, the following data, among others, is processed as part of the processing operations:

  • Master data (e.g., first and last name, address, age, gender)
  • Content data (e.g., texts, photographs, videos)
  • Usage data (e.g., visits to websites, interests)
  • Metadata (e.g., device information, IP address).

This usage data is often processed by providers on social and professional networks for advertising purposes or to analyze user behavior, without us being able to influence this. In addition, providers often create usage profiles, which can then be used to display user-based advertising within and outside the network. Cookies are often used for this purpose, or your usage behavior is directly assigned to your own member profile on the network (if you are logged in here). In addition, we use the user data to communicate with you via the respective network and to provide you with information. If you interact with our company profile on the respective network (e.g., visit our company profile, comment on something, or "like" something), there is a possibility that your user profile, including your personal data, will be made public.

Information on the processing of your data in social and professional networks and the possibility of exercising your right to object or withdraw consent (opt-out) is provided below.

We process your personal data for the following purposes:

  • Public relations and marketing purposes, i.e., we provide information about our services and offers and communicate with you
  • (Only in professional networks:) Recruitment, i.e. we engage in "active sourcing."

The legal basis for our public relations and the marketing purposes pursued in this context is your consent in accordance with Art. 6(1)(a) GDPR.

The legal basis for recruitment is our overriding legitimate interest in finding new employees in accordance with Art. 6(1)(f) GDPR.

In principle, your data is stored by the respective network provider and not directly by us. We store your activities and personal data published via our website until the purpose of processing no longer applies or your consent has been revoked, provided that there are no retention obligations to the contrary.

We maintain presences on the following social and professional networks.

5. Data Processing
   
Network   
   
Provider   
   
Third country   
   
Guarantees   
   
More information   
   
LinkedIn   
   
LinkedIn   Ireland Unlimited Company Wilton Place, Dublin 2, Ireland   
   
USA   
   
Standard   data protection clauses    
   
Privacy   Policy
   
Opt-out   and advertising settings
   
Joint responsibility contract   
   
Instagram   
   
Meta Platforms Ireland Limited,   4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland   
   
USA   
   
Standard   data protection clauses    
   
Privacy policy
   
   
   
Xing   
   
New   Work SE
   
At   the beach quay 1
   
20457   Hamburg
   
Germany   
   
USA   
   
Standard   data protection clauses    
   
Privacy   policy
   
   
   
YouTube   
   
Google Ireland Limited, Gordon   House, Barrow Street, Dublin 4, Ireland   
   
USA   
   
Standard data   protection clauses   
   
Privacy policy
   

   
Advertising   settings   
   
Twitter   
   
Twitter International Company, One   Cumberland Place, Fenian Street, Dublin 2, Ireland   
   
USA   
   
Standard data protection clauses   
   
Privacy policy
   
Objection   settings   
   
Vimeo   
   
555   West 18th Street, New York, New York 10011, USA   
   
USA   
   
Standard   data protection clauses   
   
Privacy policy
   
   

15.          Use of cookies

15.1.      General information

We use cookies on our website. These are text files that your browser automatically creates and that are stored on your IT system when you visit our site. Cookies provide certain information to the entity that sets the cookie. The use of cookies does not make it possible to execute programs or transfer viruses to your device. If you do not want cookies to be used, you can disable them in your settings.

From a legal perspective, a distinction must be made between necessary and non-necessary cookies.

(a)           Necessary cookies

We use necessary cookies. These are cookies that are technically necessary to provide all the functions of our website. The legal basis for data processing is our legitimate interest within the meaning of Art. 6(1)(f) GDPR. We have an overriding legitimate interest in being able to offer our services in a technically flawless manner. The legal basis for the use of cookies in relation to our contractual partners who use the services we are contractually obliged to provide via our website is Art. 6(1)(b) GDPR, the performance of our contractual services.

(b)          Non-essential cookies

We also use non-essential cookies (e.g., analysis and marketing cookies). These are cookies that are not technically necessary. We use these to understand your behavior on our website and to improve our offering. The legal basis for data processing is your consent pursuant to Art. 6(1)(a) GDPR. The cookies are only set after you have given your consent via our "cookie banner."

15.2.      Storage period

With regard to the storage period, a distinction is made between the following types of cookies:

·         Temporary cookies (also known as session cookies): Temporary cookies are deleted at the latest after a user leaves an online offering and closes their device (e.g., browser or mobile application).

·         Permanent cookies: Permanent cookies remain stored even after the device is closed. This allows, for example, the login status to be saved or preferred content to be displayed directly when the user visits a website again. The user data collected with the help of cookies can also be used to measure reach. Unless we provide users with explicit information about the type and storage duration of cookies (e.g., when obtaining consent), users should assume that cookies are permanent and that the storage period can be up to two years.

For further information, please refer to the information we provide in the cookie banner.

16.          Third-party tools

16.1.      Usercentrics Consent Management

We use the cookie banner Usercentrics Consent Management from Usercentrics GmbH (Rosental 4, 80331 Munich, Germany; hereinafter referred to as Usercentrics). This enables us to obtain and manage the consent of website users for data processing.

When you visit our website or a subpage for the first time, a "cookie banner" will be displayed. There you will be informed about the individual cookies we use. You can find out about each individual cookie in terms of its name, provider, purpose of processing, and storage duration. 

Our cookie banner informs you about the specific cookies we use. In addition, we give you the option to decide whether you want to consent to the setting of non-essential cookies. The following are processed:

·         Approved cookies of the user (cookie status), which serve as proof of consent

·         Usage data (e.g., websites visited, time of access)

·         Meta and communication data (e.g., IP address)

Insofar as we use cookies and similar technologies in connection with the integration of the service, or insofar as data is stored on your device or read from it by the service, this is done in accordance with Section 25(2) TDDDG. Subsequent data processing is carried out on the basis of Art. 6(1)(f) GDPR. We have an overriding legitimate interest in using the cookie banner, which enables us to obtain the legally required consent for the use of non-essential cookies and to comply with our duty to provide information regarding cookies. 

In the event of consent, the encrypted key and the cookie status are stored on the user's device using a cookie in order to establish the corresponding cookie status for future page views. This cookie is automatically deleted after 12 months.

Usercentrics is the recipient of your personal data and acts as a processor for us. Processing takes place in the European Union. We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law, which ensures that the provider only processes your personal data in accordance with our instructions and in compliance with the GDPR.

Further information on options for objection and removal vis-à-vis Usercentrics can be found at How we protect your privacy | Usercentrics Privacy Policy.

16.2.      Fireflies.ai

We use the Fireflies.ai service provided by Fireflies.AI Corp. (5424 Sunol Blvd, Ste 10-531, Pleasanton, CA 94566, USA; hereinafter Fireflies) to automatically record and transcribe meetings and conversations. The purpose of Fireflies.ai is to capture, store, and analyze meeting content to increase productivity and optimize meeting documentation. Fireflies.ai also helps gain insights from meetings, improve communication, and facilitate team collaboration.

Fireflies.ai collects a variety of personal data, including names, email addresses, company information, and meeting content and transcripts. In addition, the tool collects technical information such as IP addresses, browser type, and device information used to access the services.

Fireflies.ai uses this data to provide, improve, and protect its services. Cookies and similar technologies are used to optimize the user experience and collect usage data.

The legal basis for the use of the service is Art. 6(1)(a) GDPR, i.e., integration only takes place with your consent. You can revoke your consent at any time.

Fireflies.ai implements appropriate technical and organizational measures to ensure the security of the data processed and to prevent unauthorized access. Your personal data will be stored for as long as necessary to fulfill the stated purposes, provided that there are no legal retention obligations to the contrary.

We have concluded a data processing agreement (DPA) for the use of Fireflies.ai. This is an agreement required by data protection law that ensures that Fireflies.ai will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the United States that are certified accordingly are permitted. Fireflies is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

Further information and Fireflies' complete privacy policy can be found at Privacy Policy

16.3.      Amazon CloudFront

This website uses Amazon CloudFront, a service provided by Amazon Web Services, Inc. (410 Terry Avenue North, Seattle, WA 98109-5210, USA; hereinafter referred to as Amazon), to ensure the proper delivery of our website content. In the European Union (EU) and the European Economic Area (EEA), the services are provided by Amazon Web Services EMEA SARL (38 Avenue John F. Kennedy, L-1855, Luxembourg; hereinafter referred to as Amazon).

Amazon CloudFront is a service that acts as a content delivery network (CDN) on our website. A CDN helps to deliver content from our online offering, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to Amazon's servers, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Amazon CloudFront.

The legal basis for the provision of these services is our legitimate interest pursuant to Art. 6(1)(f) GDPR in ensuring the provision, security, and stability of our website.

Your data will only be stored for as long as is necessary to achieve the purpose of the collection or until you revoke your consent. The specific storage period of the processed data is not within our control, but is determined by Amazon.

We have concluded a data processing agreement (DPA)  for the use of Amazon. This is an agreement required by data protection law, which ensures that Amazon processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR. Personal data may also be transferred to the United States. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the United States that are certified accordingly are permitted. Amazon is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For more information, please refer to Amazon's Privacy Policy.

16.4.      Loom

We use Loom, a platform provided by Loom, Inc. (85 2nd Street Floor 1 San Francisco, CA 94105 USA), which allows users to record their computer screen while simultaneously recording themselves via webcam and audio. This allows viewers of a video in which something is being shown or explained to see the authors at the same time.

Loom also collects personal data via cookies. Loom uses cookies to count the number of times a video is viewed when someone watches the video:

  • For at least 5 seconds
  • or 75% of the total duration
  • or if you fast-forward to the end and the video ends

You can avoid this by blocking or deleting cookies in your browser or cookie settings.

For more information, please refer to Loom's cookie policy at the following link: https://www.atlassian.com/legal/loom/cookie-policy.

Loom enables us to quickly and easily create high-quality screen recordings without investing a lot of time or technical expertise. The visual representation on the screen allows our customers to see exactly what they need to do. Loom offers us the opportunity to show our voice and, if necessary, our face in the explanatory videos.

The legal basis for using the service is our legitimate interest pursuant to Art. 6(1)(f) GDPR in order to quickly and easily create high-quality videos and screen recordings and embed videos.

If we obtain your consent for processing through cookies or other functions, the legal basis for the processing of your personal data by Loom is your consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time.

Personal data will be deleted as soon as it is no longer necessary for the purpose for which it was collected.

We have concluded a data processing agreement (DPA) for the use of Loom. This is an agreement required by data protection law that ensures that Loom will only process your personal data in accordance with our instructions and in compliance with the GDPR. Loom, Inc. maintains and uses a cloud service provider in Europe, but your data may be processed or stored in the United States. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the United States that are certified accordingly are permitted. Loom, Inc. is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For more information on data processing by Loom, please visit Product-Specific Terms | Atlassian.

16.5.      Google Analytics

Our website uses features of the web analytics service Google Analytics from Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA; hereinafter Google). In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter Google). With the help of Google Analytics, we analyze your user behavior in order to make decisions regarding product and marketing optimization based on the results. Through Google Analytics, we process the following personal data, among other things:

  • Time of the request
  • IP addresses
  • Online identifiers  
  • Device identifiers
  • Technical characteristics of users (e.g., browser type and version, device type, operating system)
  • Measurement of usage behavior (e.g., visits to individual pages/content, visits to content in different areas, session duration/length of stay, bounce rate)
  • Use of individual website features (e.g., search queries, downloads)
  • eCommerce activity (e.g., products purchased, sales)
  • Referrer URL (the previously visited page)

The legal basis for the use of Google Analytics is your voluntary and revocable consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by making the appropriate changes or adjustments to your cookie settings.

Personal data is anonymized by Google 14 months after your last activity, unless there are legal obligations to retain it.

We have concluded a data processing agreement (DPA) with the provider. This is a contract required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

Further information and the data protection provisions can be found in Google's Privacy Policy.

16.6.      Google Ads & Conversion Tracking

Our website uses Google Ads (formerly Google AdWords) from Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA; hereinafter Google). In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter Google).

Google Ads enables us to draw attention to our offers with the help of advertising material on external websites and to determine how successful individual advertising measures are. This helps us to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.

We use conversion tracking as part of Google Ads. The advertising material is delivered by Google via so-called "ad servers." For this purpose, we use so-called ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. These cookies enable Google to recognize your web browser. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the specific ad and were redirected to this page.

Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked across the websites of Ads customers. The following information is usually stored in the cookie as analysis values: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (indication that the user no longer wishes to be targeted). The information collected using the conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. Ads customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The legal basis for the use of Google Ads & Conversion Tracking is your voluntary and revocable consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by making the appropriate changes or adjustments in your cookie settings.

By integrating the services on our websites, data is transmitted to the above-mentioned recipients and processed there for as long as is necessary to achieve the stated purposes.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also betransferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework. Google is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

Further information and the data protection provisions can be found in Google's Privacy Policy.

16.7.      Google Ads Remarketing

Our website uses Google Ads Remarketing from Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA; hereinafter Google). In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter Google).

With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups in order to then show them interest-based advertising in the Google advertising network (remarketing or retargeting).

Furthermore, the advertising target groups created with Google Ads Remarketing can be linked to Google's cross-device functions. In this way, interest-based, personalized advertising messages that have been tailored to you based on your previous usage and surfing behavior on one device (e.g., cell phone) can also be displayed on another of your devices (e.g., tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google account for this purpose. This allows the same personalized advertising messages to be displayed on every device on which you log in with your Google account.

To support this feature, Google collects authenticated user IDs, which are temporarily linked to our Google Ads data in order to define and create target groups for cross-device advertising.

The legal basis for the use of Google Ads remarketing is your voluntary and revocable consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by making the appropriate changes or adjustments in your cookie settings.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

16.8.      Google Adsense (in conjunction with Adsense for YouTube)

Our website uses Google AdSense (in conjunction with Adsense for YouTube), the services for integrating advertisements from Google LLC (1600 Amphitheatre Parkway, Mountain View, California 94043, USA; hereinafter Google). In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter).

Google AdSense uses so-called "cookies," i.e., text files that are stored on your computer and serve to display advertisements on our website that are ly tailored to our content and your interests. Google AdSense also uses so-called web beacons (invisible graphics). These web beacons enable information about visitor traffic on our pages to be statistically evaluated for online marketing purposes.

The information generated by cookies and web beacons about your use of our website (including your IP address) and the delivery of advertising formats is transmitted to a Google server in the USA and stored there. This information may be passed on to third parties by Google. However, Google will not associate your IP address with any other data that Google may have stored about you.

The legal basis for the use of the service is Art. 6(1)(a) GDPR, i.e., integration only takes place with your consent. You can revoke your consent at any time with effect for the future.

You can prevent the installation of cookies by adjusting your browser software settings accordingly; however, we would like to point out that in this case you may not be able to use all the functions of this website to their full extent. By using this website, you consent to the processing of data about you by Google in the manner and for the purposes set out above. Further information and the privacy policy can be found in Google's Privacy Policy.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

16.9.      Google Tag Manager

We use Google Tag Manager to control the use of code snippets ("tags"), such as tracking code on our website. In the European Union (EU) and the European Economic Area (EEA), the services are provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter Google).

Google Tag Manager is a tool that helps us integrate tracking or statistics tools and other technologies into our website. Google Tag Manager allows us to quickly and easily exchange code on our website via a web interface without having to intervene in the source code. We process the following personal data, among other things, using Google Tag Manager:

  • IP address
  • Device data, such as operating system, browser version, screen resolution

The legal basis for the use of Google Tag Manager is your voluntary and revocable consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by making the appropriate changes or adjustments to your cookie settings.

Personal data is anonymized by Google after 14 months, provided there are no legal obligations to retain it.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

Further information and the data protection provisions can be found in Google's Privacy Policy.

16.10.   Google Maps

On our website, we use the Google Maps map service from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter Google). This allows us to display interactive maps directly on the website and enables you to conveniently use the map function.  

When you use Google Maps, information about your use of this website, including your IP address and the (start) address entered in the route planner function, is collected. When you visit a page on our website that contains Google Maps, your browser establishes a direct connection to Google's servers. The map content is transmitted directly from Google to your browser and integrated into the website. We have no influence on the extent of the data collected by Google in this way. To the best of our knowledge, this includes at least the following data:

  • Date and time of the visit to the website in question
  • Internet address or URL of the website accessed
  • IP address, (start) address entered for route planning

The data is transmitted regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want your data to be associated with your Google user account, you must log out before activating the button. Google stores your data as usage profiles and uses it for advertising, market research, and/or the needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

The legal basis for the use of Google Maps is your voluntary and revocable consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by making the appropriate changes or adjustments in your cookie settings.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework. Google is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

Further information and the privacy policy can be found in Google's Privacy Policy.

16.11.   YouTube

Our website uses plugins from the YouTube video platform to embed videos and play them directly on our website. The video platform is operated by Google Ireland Limited, (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter Google). Google Ireland is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as Google).

When you activate embedded videos on our website, a connection to YouTube's servers is established and data transfer begins. We have no influence on the scope and content of the data that is transmitted to YouTube and, if applicable, other YouTube partners when the plugin is activated. Among other things, the YouTube server is informed which of our pages you have visited. According to YouTube, this information is used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior. YouTube uses cookies to collect information about user behavior. The cookies remain on your device until you delete them. If you are logged into your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account before activating the play button. Further information on the handling of user data can be found in Google's Privacy Policy.

The legal basis for this use is your voluntary and revocable consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by making the appropriate changes or adjustments in your settings.

YouTube videos are integrated in what is known as "extended data protection mode," which, according to the provider, only starts storing user information when the video(s) are played. However, the extended data protection mode does not necessarily prevent data from being passed on to YouTube partners. YouTube establishes a connection to the Google DoubleClick network regardless of whether you watch a video.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Google is certified under the EU-U.S. Data Privacy Framework. Google is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

Further information and the data protection provisions can be found in Google's Privacy Policy.

16.12.   HubSpot CRM

We use HubSpot CRM on this website. The provider is HubSpot Inc. (2 Canal Park, Cambridge, MA 02141 USA; hereinafter referred to as HubSpot). HubSpot CRM also enables us to track and analyze the user behavior of our contacts on our website.

Among other things, HubSpot CRM enables us to manage existing and potential customers as well as customer contacts. This is an integrated software solution that we use to cover various aspects of our online marketing. These include: email marketing (newsletters and automated mailings, e.g., to provide downloads), social media publishing & reporting, reporting (in particular traffic sources, hits, etc.), contact management (in particular user segmentation & CRM), landing pages, and contact forms. HubSpot places cookies on your computer. This allows personal data to be stored and evaluated, in particular:

  • Company domain: the company domain of company visitors. This data is only collected if visitors identify themselves by filling out a form or registering on our website or in our newsletter.
  • Timestamp: the date and time at which visitors accessed the web pages. This data helps to ensure the accuracy and frequency of visits and provides customers with insights into time-based visits and intentions.
  • VID: A series of numbers that is created when an unidentified visitor visits our website and interacts with us.
  • The visitor's activity (in particular, which pages were visited and which elements were clicked on)
  • Device and browser information (in particular, the IP address and operating system),
  • Data about the advertisements displayed (in particular, which advertisements were displayed and whether the visitor clicked on them)
  • Data from advertising partners (in particular pseudonymized user IDs).

The personal data collected in this way can be evaluated and used for communication with the potential customer or for marketing measures.

Insofar as the processing of personal data is an essential part of the implementation of our online offering and/or a necessary service, such as the provision of contact forms, downloads, etc., Art. 6(1)(f) GDPR is the legal basis for data processing. In these cases, our interest lies in the efficient implementation of the online offering. If your consent is obtained for further functions of HubSpot, the legal basis is Art. 6(1)(a) GDPR and Section 25(1) TDDDG, i.e., integration only takes place with your consent. You can revoke your consent at any time by changing the corresponding settings in your browser or cookie banner or by deleting the cookies.

We have concluded a data processing agreement (DPA)for the use of HubSpot. This is an agreement required by data protection law that ensures that HubSpot will only process your personal data in accordance with our instructions and in compliance with the GDPR.The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art.45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the US that are certified accordingly are permitted. HubSpot is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For more information, please refer to HubSpot's Privacy Policy.

16.13.   Leadinfo

Our website uses Leadinfo, a service provided by Leadinfo B.V. (Crooswijksesingel 50, 3034 CJ Rotterdam, Netherlands; hereinafter referred to as Leadinfo). This service enables us to identify company visits to our website and provides us with relevant, publicly available information about these visits. This helps us to improve our marketing and sales strategies in a targeted manner.

Leadinfo collects the following data to identify and analyze company visits to our website:

  • IP addresses: Leadinfo recognizes visits from companies to our website based on the IP addresses of visitors.
  • Publicly available information: This includes company names, addresses, and other details that are publicly available.
  • Cookies: Leadinfo uses two first-party cookies that collect information about user behavior on our website, such as pages visited, time spent on the site, and interactions.
  • Form entries: Domains entered in forms on our website (e.g., "mycompany.com") may be processed by Leadinfo to assign IP addresses to specific companies.

Leadinfo processes the data on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest is to identify potential business partners, optimize our marketing activities, and continuously improve our services.

The data collected by Leadinfo is stored within the European Union and is subject to the data protection provisions of the GDPR. Leadinfo uses appropriate technical and organizational measures to ensure the security of the data and prevent unauthorized access.

We have concluded a data processing agreement (DPA) for the use of Leadinfo. This is a contract required by data protection law that ensures that Leadinfo only processes your personal data in accordance with our instructions and in compliance with the GDPR.

For more information about data processing by Leadinfo can be found at Privacy - Leadinfo.

16.14.   LinkedIn Insight Tag

Our pages use the LinkedIn Insight Tag from the LinkedIn social network. This is provided by LinkedIn Ireland Unlimited Company, (Wilton Place, Dublin 2, Ireland; hereinafter LinkedIn; hereinafter LinkedIn). The LinkedIn Insight Tag is a small piece of JavaScript code that we have added to our website.

LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser properties, and time of access). The IP addresses are truncated or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within 180 days.

If a website visitor is registered with LinkedIn, we can analyze the key professional data (e.g., career level, company size, country, location, industry, and job title) of our website visitors and thus better tailor our site to the respective target groups. Furthermore, with the help of LinkedIn Insight Tags, we can measure whether visitors to our websites make a purchase or take other action (conversion measurement). Conversion measurement can also be carried out across devices (e.g., from PC to tablet). LinkedIn also offers retargeting for website visitors, allowing us to use this data to display targeted advertising outside our website without identifying the member.

LinkedIn does not share any personal data with us, but only provides summary reports on the website target group and ad performance.

You can object to the analysis of usage behavior and targeted advertising by LinkedIn at the following link.

The legal basis for the use of the service is Art. 6(1)(a) GDPR and Section 25(1) TDDDG, i.e., integration only takes place with your consent. You can revoke your consent at any time at by changing the relevant settings in your browser or cookie banner or by deleting the cookies.

Furthermore, LinkedIn members can control the use of their personal data for advertising purposes in their account settings at the following link. To prevent LinkedIn from linking data collected on our website to your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. LinkedIn is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

Details on data collection, your rights, and setting options can be found in LinkedIn's Privacy Policy.

16.15.   Microsoft Advertising

Our website uses Microsoft Advertising from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA; hereinafter Microsoft) for marketing and analysis purposes.

Microsoft Advertising collects and stores various types of data, from which usage profiles are created using pseudonyms in order to provide and optimize personalized ads:

  • Device and usage data: Microsoft Ads collects information about the device you use to access Microsoft services, such as the device type, IP address, browser type and version, device settings and configurations, and usage data such as pages visited and search queries.
  • Location data: If you allow access to location services, Microsoft Ads collects your location to display ads that are relevant to your location.
  • Demographic data: Microsoft Ads may collect information about your age, gender, and other demographic data to provide personalized ads.
  • Interest-based data: Microsoft Ads may collect data about which ads you have clicked on, which search queries you have performed, and which pages you have visited in order to understand your interest in certain topics and deliver personalized ads.

Microsoft Advertising enables us to track user activity on our website when users arrive at our website via Bing Ads. If you arrive at our website via such an ad, a cookie is set on your device.

Among other things, the length of time spent on the website, which areas of the website were accessed, and which ad brought you to the website are collected. In particular, Microsoft and we learn the total number of users who clicked on an ad and reached a predefined landing page. Microsoft processes and uses the cookies to create usage profiles using pseudonyms, analyze user behavior, and display advertisements. In addition, Microsoft can track your usage behavior across multiple electronic devices using cross-device tracking.

The legal basis for the use of the service is Art. 6(1)(a) GDPR and Section 25(1) TDDDG, i.e., integration only takes place with your consent. You can revoke your consent at any time by changing the relevant settings in your browser or cookie banner or by deleting the cookies.

Data is stored by Microsoft for 36 months. A period of 13 months is also provided for cookie storage.

In addition, Microsoft may, under certain circumstances, track your usage behavior across multiple electronic devices using cross-device tracking, enabling it to display personalized advertising on or in Microsoft websites and apps at . You can disable this behavior at Microsoft account | Privacy.

We have entered into a data processing agreement (DPA) for the use of Microsoft Advertising. This is an agreement required by data protection law that ensures that your personal data is only processed in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the USA that are certified accordingly are permitted. Microsoft is certified under the EU-U.S. Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

Further information on how your data is handled can be found in Microsoft Privacy Statement – Microsoft privacy.

For more information about Microsoft Advertising's analytics services, please visit FAQ: Universal Event Tracking.

16.16.   Sentry

To continuously maintain the operational security of our offering, we use Sentry from Functional Software, Inc. (45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA; hereinafter referred to as Sentry). Sentry helps us identify and analyze errors and problems within our website in real time. This enables us to respond quickly to crashes, performance issues, or other irregularities, thereby ensuring the stability and reliability of the website.

When using Sentry, we process the following data in accordance with privacy-friendly default settings:

  • Error details: Information about the error itself, including the type of error and the error message, as well as the context in which the error occurred.
  • System information: Browser version, device type, operating system, and other relevant information about the system on which the error occurred.
  • Usage data: Information about how the application was being used at the time of the error, including specific user actions that may have led to the error. Personal data is anonymized or masked as far as possible.
  • Network information: IP address (in anonymized form, if possible), as well as request details that may clarify the context of the error.

The primary purpose of using Sentry is error analysis. By collecting error reports and performance data, we can understand the causes of problems and take targeted measures to fix them. This contributes significantly to security by allowing us to quickly address security vulnerabilities and increase the efficiency of our services.

The processing of personal data in the context of error analysis with Sentry is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Our legitimate interest lies in ensuring the security and functionality of the website, which is also in the interest of our users.

The data collected as part of error analysis with Sentry is only stored for as long as is necessary for the analysis and resolution of the problems detected. The data is then deleted or anonymized so that it can no longer be traced back to a specific or identifiable person. The maximum storage period is usually 90 days.

We have concluded a data processing agreement (DPA) for the use of Sentry. This is an agreement required by data protection law that ensures that Sentry will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the USA. The European Commission has issued an adequacy decision pursuant to Art. 45(3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the United States that are certified accordingly are permitted. Sentry is certified under the EU-U.S. Data Privacy Framework at and is therefore committed to complying with appropriate data protection standards.

For more information on Sentry's use of data, please visit Privacy Policy 3.3.2 (October 29, 2025) | Sentry.

16.17.   jsDelivr CDN

We use the jsDelivr CDN service from Volentio JSD Limited (Suite 2a1, Northside House, Mount Pleasant, Barnet, England, EN4 9EB) on our website. With jsDelivr CDN, our content is mirrored on various servers to ensure optimal accessibility worldwide.

When you access this content, you connect to jsDelivr servers, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of jsDelivr CDN.

The use of jsDelivr CDN is based on our legitimate interests, i.e., interest in the secure and efficient provision and optimization of our online offering in accordance with Art. 6 (1) (f) GDPR.

We have no influence on the specific storage period of the processed data; this is determined by jsDelivr.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the United Kingdom. The European Commission has issued an adequacy decision for the United Kingdom in accordance with Art. 45(3) GDPR. Based on this decision, data transfers to entities in the United Kingdom are permitted.

Further information on the handling of the transferred data can be found in the jsDelivr Privacy Policy.

16.18.   Jotform

We have integrated Jotform into our website. The provider is Jotform Ltd, Albert Mews, Albert Road, London, N4 3RD, United Kingdom (hereinafter Jotform). Jotform enables us to create online forms to collect messages, inquiries, and other input from our website visitors. Your personal data is processed on Jotform's servers. As part of this service, we process the following personal data from you, depending on your input:

  • First and last name
  • Email
  • Phone
  • Address
  • Date and time of the request
  • Device and usage data, such as device type, IP address, browser type, and version
  • The information you have entered

We use Jotform on the basis of our legitimate interest in the optimal digital processing of your request in accordance with Art. 6(1)(f) GDPR. In connection with a contractual relationship, processing is carried out on the basis of Art. 6(1)(b) GDPR. If consent has been requested, processing is carried out on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, provided that the consent includes the storage of cookies on your device. You can revoke your consent at any time.

The data you enter in the form will remain with us until you request us to delete it, revoke your consent to its storage, or the purpose for data storage no longer applies (e.g., after your request has been processed). Mandatory legal provisions—in particular retention periods—remain unaffected. Regardless of this, the data on the Jotform servers is automatically deleted after a short retention period.

The transfer of your data to the Jotform servers and our retrieval of this data are encrypted.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR. The personal data may also be transferred to the United Kingdom and the United States. The European Commission has issued an adequacy decision for the United Kingdom in accordance with Art. 45(3) GDPR. Based on this decision, data transfers to entities in the United Kingdom are permitted. The European Commission has issued an adequacy decision in accordance with Art. 45 (3) GDPR for the EU-U.S. Data Privacy Framework. Based on this decision, data transfers to organizations based in the US that are certified accordingly are permitted. The affiliated company Jotform Inc. is certified under the EU-US Data Privacy Framework and is therefore committed to complying with appropriate data protection standards.

For more information on how the transferred data is handled, please visit GDPR Compliant Forms | Jotform.

16.19.   Embedly

Our website uses Embedly, a cloud-based image and video management service for displaying embedded content. The service provider is the US company Embedly LLC, (611 South DuPont Highway, Suite 102 Dover, DE 19901, USA; hereinafter Embedly).

When you visit a page that contains content displayed via Embedly, a connection to the Embedly server is established. Embedly acts as a content delivery network (CDN) on our website.

A CDN helps to deliver content from our online offering, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you establish a connection to Cloudinary's servers, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Embedly.

The legal basis for data processing is Art. 6(1)(f) GDPR. The purpose of data processing is to provide you with optimized embedded content.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR.

16.20.   Cello

We use the Cello service provided by Powerplay GmbH (Sumpfmeisenweg 3A, 81249 Munich, Germany) to give our existing customers the opportunity to refer new customers. Cello is integrated into our website and provides a personalized referral link on request, which existing customers can use to refer new customers. If a new customer registers with us using this link, this information is tracked and the referring existing customer receives a reward. For this purpose, Cello processes personal data, in particular information about the registration of the new customer, including information about the selected subscription, as well as the contact details used by existing and new customers.

When you fill out a form on our website, the personal data you enter is processed by Cello. This may include, for example, the following data:

  • First and last name
  • Business email address
  • Company name
  • Phone number
  • Technical data (IP address, browser, device, timestamp, referrer)
  • Additional entries

The legal basis for this data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR in providing you with a simple advertising option. You can object to the data processing at any time.

If further personal data is processed by the cookies, the legal basis is also Art. 6(1)(a) GDPR and Section 25(1) TDDDG, i.e., the integration only takes place with your consent. You can revoke your consent at any time by changing the corresponding settings in your browser or in the cookie banner or by deleting the cookies.

Your personal data will be stored for as long as is necessary to fulfill the specified purposes, provided that there are no legal retention obligations to the contrary.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR.

Further information on data processing by Cello can be found at Privacy Policy - Cello Platform | Cello.

16.21.   Smartlook

To analyze your user behavior on our website, we use Smartlook from Smartlook.com, s.r.o. (Šumavská 524/31, Veveří, 602 00 Brno, Czech Republic). The following data is collected for this purpose:

  • Technical data (e.g., IP address, browser version, device, operating system, time of access)
  • Interaction data
  • Masked entries, if applicable

With Smartlook, only your mouse and scroll movements and clicks are recorded anonymously on this page. Smartlook uses this information to create so-called heat maps, which can be used to determine which areas of the website are preferred by website visitors. We can also determine how long you stayed on a page and when you left it. We can also determine at which point you canceled your entries in a contact form (so-called conversion funnels). In addition, Smartlook can be used to obtain direct feedback from website visitors. This function serves to improve the website operator's web offerings. Smartlook uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting).

The legal basis for the use of Smarlook is your voluntary and revocable consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by making the appropriate changes or adjustments in your cookie settings.

Your personal data will be stored for as long as necessary to fulfill the specified purposes, provided that there are no legal retention obligations to the contrary.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR.

Further information on data processing by Smartlook can be found at Privacy first.

16.22.   ConvertCalculator

With the help of ConvertCalculator, we use interactive form functions from the service provider Stay Bold B.V., Hoeveneind 60 4847NG, Teteringen, Netherlands, on our websites. These are dynamic price or inquiry calculators that accept user input and display calculated results.

When using ConvertCalculator, the following personal data may be processed:

  • Content entered by you in the form (e.g., quantities, options, text entries)
  • Contact details
  • Technical metadata such as IP address, browser type, operating system, language settings
  • Time and duration of use

The use of these tools is based on Art. 6(1)(f) GDPR. We have a legitimate interest in designing our website to be user-friendly and in optimizing interactive communication processes.

Your personal data will be stored for as long as necessary to fulfill the stated purposes, provided that there are no legal retention obligations to the contrary.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR.

16.23.   ConvertStaging

We use the staging or test environment tool Convertstaging from the service provider Stay Bold B.V., Hoeveneind 60 4847NG, Teteringen, Netherlands, to ensure the quality assurance of the ConvertCalculator tool. This environment is used exclusively for internal purposes such as testing, error checking, and optimizing functionality. The aim is to ensure the stability and reliability of the tool before new functions or adjustments are transferred to the productive environment.

Certain personal data is processed when using this test environment. This primarily involves technical information such as

Technical data such as IP address, browser type, operating system, language settingstimestamps

In some cases, simulated test data may also be processed, but this does not originate from real user input and is created exclusively for internal testing purposes.

This data is processed for the purpose of checking the functionality of the tool, identifying and correcting errors, and optimizing user-friendliness and performance. Without these measures, it would not be possible to provide a stable and secure application.

The legal basis for this processing is Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring the error-free and user-friendly functionality of our website and the integrated tools. This interest prevails because the processing is kept to a minimum and does not include any sensitive data.

Your personal data will be stored for as long as necessary to fulfill the stated purposes, provided that there are no legal retention obligations to the contrary.

We have concluded a data processing agreement (DPA) with the provider. This is an agreement required by data protection law that ensures that the provider will only process your personal data in accordance with our instructions and in compliance with the GDPR.

17.          Your rights as a data subject

As a data subject, you have various rights under the GDPR, which arise in particular from Articles 15 to 21 GDPR. If you wish to exercise any of your rights, please contact us at the above contact addresses or our data protection officer.

17.1.       RIGHT TO OBJECT

YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU BASED ON ART. 6 (1) (E) OR F OF THE GDPR; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. IF THE PERSONAL DATA CONCERNING YOU IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

17.2.      Right of access

You have the right to request confirmation as to whether personal data concerning you is being processed and to obtain access to this personal data, as well as further information and a copy of the personal data in accordance with the legal requirements.

17.3.      Right to rectification

In accordance with legal requirements, you have the right to request the completion of personal data concerning you or the correction of inaccurate personal data concerning you.

17.4.      Right to erasure

You have the right to request that we delete personal data concerning you without delay if one of the reasons provided for by law applies and if the processing or storage is not necessary.

17.5.      Right to restriction of processing

You have the right to request that we restrict processing if one of the legal requirements is met.

17.6.      Right to data portability

You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format in accordance with legal requirements, or to request that it be transferred to another controller.

17.7.      Right to withdraw consent

You have the right to withdraw your consent at any time.

17.8.      Complaint to supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work, or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the provisions of the GDPR.

18.          Updates and changes to the privacy policy

This privacy policy is currently valid and has the following status: November 2025. If we further develop our website and our offerings, or if legal or regulatory requirements change, it may be necessary to amend this privacy policy. You can access the current privacy policy at any time here.