Data collection and processing
Every access to our website and every retrieval of a file stored on the website is logged. The storage serves internal system-related and statistical purposes. To be logged:
- Name of the retrieved file,
- Date and time of retrieval,
- volume of data transferred,
- message about successful retrieval,
- operating system used,
- browser and browser type,
- the internet page from which was redirected,
- the internet service provider,
- visited pages and requesting domain.
In addition, the IP addresses of the requesting computers are logged. However, the responsible party does not draw any conclusions about a person. This data is only required to display the content of our website correctly, to optimize the content for you on a permanent basis and to support prosecutions in the event of hacker attacks. The data is processed on the basis of our legitimate interest pursuant to Art. 6 (1) (1) lit. f) GDPR. The processing of the data is necessary for the operation of the website. The data is stored as long as it is needed to fulfill the purpose and then automatically deleted.
Data subject rights
According to Art. 15 GDPR, you have the right to information about the processing of your personal data. In addition, you are free to exercise your rights to rectification, erasure or, if erasure is not possible, restriction of processing and data portability in accordance with Articles 16-18, 20 GDPR. Should you wish to exercise this right, please contact our data protection officer. Furthermore, you have the right to complain to the competent supervisory authority at any time. If you are of the opinion that your personal data is not being processed in compliance with data protection laws, we would kindly ask you to contact our data protection officer. Furthermore, you have the right to object to the processing of your personal data at any time.
Protection of the stored data
We use technical and organizational security measures in order to protect the personal data you have made available to us from manipulation, loss, destruction or access by unauthorized persons. Our security measures are continuously improved and adapted according to the state of the art. It cannot be ruled out that data transmitted by you without encryption can be viewed by third parties during transmission. It is pointed out that with regard to data transmission via the Internet (e.g. communication by e-mail) no conclusive secure transmission can be guaranteed. Sensitive data should therefore either not be transmitted at all or only via a secure connection (SSL) over the Internet.
Protection of minors
Consent to the processing of personal data can only be given by a person of legal age. For information society services, the consent of a child is permissible from the age of sixteen in accordance with Art. 8 GDPR.
Contact forms
All your personal data and other information that you provide to us via the contact form set up on our website will only be collected and processed for the purpose of handling and responding to your inquiries.
As far as you contact us, you give your consent for the data processing according to Art. 6 (1) (1) lit. a) GDPR.
If you are interested in an offer, your personal data will be processed for the purpose of initiating a contract pursuant to Art. 6 (1) (1) lit. b) GDPR. Your data will be forwarded to us by e-mail via our provider. If it is not provided, it is unfortunately not possible for us to contact you and process your request. Automated decision making is not performed.
A transfer of your personal data to external third parties takes place to: HubSpot, 25 First Street, Cambridge, MA 02141, United States.
We use HubSpot as a service provider; the transmitted data is processed by HubSpot in the USA. To ensure the security of your data, we have entered into an order processing agreement with HubSpot accordingly, which also includes the EU standard contractual clauses.
All information about the service provider we use for contact forms and newsletters can be found at the provider's website:
HubSpot Privacy Policy: https://legal.hubspot.com/privacy-policy
HubSpot Data Processing Agreement: https://legal.hubspot.com/dpa
HubSpot Customer Terms of Service: https://legal.hubspot.com/terms-of-service
You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected.
Your personal data, which you provide to us via the contact form, will be stored by us for the duration of the processing of your request and will be kept until the expiry of the corresponding legal periods.
E-mail contact and phone
On our website, it is possible to contact us via the e-mail address provided. In addition, you can contact us via the telephone or fax number provided on the website. If you make use of these options, the personal data transmitted in the process will be stored and only collected and processed for the purpose of handling and answering your inquiry.
As far as you contact us, you give your consent for the data processing according to Art. 6 (1) (1) lit. a) GDPR. If you are interested in an offer, your personal data will be processed for the purpose of initiating a contract pursuant to Art. 6 (1) (1) lit. b) GDPR. If not provided, it is unfortunately not possible for us to process your request. An automated decision-making is not made.
Your personal data will not be passed on to external third parties. A transfer of the personal data provided by you to a third country or an international organization does not take place and is not planned.
You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected. Your personal data, which you provide to us, will be stored by us for the duration of the processing of your request until the expiry of the relevant legal periods.
Newsletter
Insofar as you order our electronic newsletter, your personal data will be processed for the purpose of regularly sending our newsletter on the basis of Art. 6 (1) (1) lit. a) GDPR. The logging of the registration process is based on our legitimate interests pursuant to Art. 6 (1) (1) lit. f) GDPR and serves as proof of consent to receive the newsletter.
The registration for our newsletter takes place in a so-called double opt-in process. This means that after registration you will receive an e-mail in which you are asked to confirm your registration. This confirmation is necessary so that no one can register with foreign e-mail addresses. The registrations for the newsletter are logged in order to be able to prove the registration process according to the legal requirements. This includes the storage of the registration and confirmation time, as well as the IP address. Likewise, the changes to your data stored with the shipping service provider are logged. In case of non-consent, it is unfortunately not possible for us to provide you with our newsletter. An automated decision-making process is not carried out.
The newsletters contain a so-called "web beacon", i.e. a pixel-sized file that is retrieved from the server of the dispatch service provider when the newsletter is opened. Within the scope of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of the services based on the technical data or the target groups and their reading behavior based on their retrieval locations (which can be determined with the help of the IP address) or the access times in accordance with Art. 6 (1) (1) lit. f) GDPR. The statistical surveys also include the determination of whether the newsletters are opened, when they are opened and which links are clicked. This information is anonymized, a conclusion to your e-mail address is not possible. The evaluations serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
A transfer of your personal data to external third parties takes place to:
HubSpot, 25 First Street, Cambridge, MA 02141, United States.
We use HubSpot as a service provider; the transmitted data is processed by HubSpot in the USA. To ensure the security of your data, we have entered into an order processing agreement with HubSpot accordingly, which also includes the EU standard contractual clauses.
All information about the service provider we use for contact forms and newsletters can be found at the provider's website:
HubSpot Privacy Policy: https://legal.hubspot.com/privacy-policy
HubSpot Data Processing Agreement: https://legal.hubspot.com/dpa
HubSpot Customer Terms of Service: https://legal.hubspot.com/terms-of-service
You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until the revocation remains unaffected.
Your personal data, which you provide to us in the context of ordering the newsletter, will be stored by us until you revoke your consent to receive the newsletter and will be removed from the distribution list after you unsubscribe.
Online registration for the webinar or panel
All of your personal data and other information that you provide to us via registration for our webinars will only be collected and processed for the purpose of registering for our webinars on the basis of Art. 6 (1) (1) lit. b) GDPR.
Your data will be forwarded to us by e-mail via our provider. If not provided, we are unfortunately unable to register you for one of our webinars. Automated decision making is not performed.
This data is transmitted to us as the organizer of the webinar by the provider in encrypted form. With the registration for participation you will receive further information and reminders before and after the webinar by e-mail.
Your personal registration data will be stored by us for the duration of the contractual relationship and for the duration of the statutory retention period and then deleted or blocked. A transfer of your personal data to external third parties takes place to:
HubSpot, 25 First Street, Cambridge, MA 02141, United States.
We use HubSpot as a service provider; the transmitted data is processed by HubSpot in the USA. To ensure the security of your data, we have entered into an order processing agreement with HubSpot accordingly, which also includes the EU standard contractual clauses.
All information about the service provider we use for contact forms and newsletters can be found at the provider's website:
HubSpot Privacy Policy: https://legal.hubspot.com/privacy-policy
HubSpot Data Processing Agreement: https://legal.hubspot.com/dpa
HubSpot Customer Terms of Service: https://legal.hubspot.com/terms-of-service
You have the right to revoke your consent at any time with effect for the future. The legality of the data processing until the revocation remains unaffected. Your personal data, which you provide to us as part of the online registration, will be stored by us for the purpose of receiving e-mailings with information about the registered event until you revoke your consent and will be removed from the distribution list after you unsubscribe.
Web conferencing tools
We want to make communication with prospects, customers and users easier and adapted to the current technical and practical reality. Therefore, we use conferencing tools for video and audio conferencing. You can find out which individual web conferencing tools we use in the following section.
As a rule, data is first collected that represents metadata and technical data of the users and the conferences. Metadata includes, for example, the duration of the conference, the period of participation, the number of participants or the name and/or description of the meeting. Technical data are such as the IP addresses and device as well as hardware information of the participants, such as MAC addresses, device and operating systems or information about peripheral devices and connection quality. In the case of optional participation via a cell phone, further data may be stored in addition to the telephone number. In addition, the data collected includes all data that you provide for the use of the service (in some cases also optionally). The usual data here are the name, telephone number, e-mail address and other log and profile data.
During a meeting in a web conferencing tool, video and audio data recorded by your microphone/camera, as well as any content that can be uploaded (messages in chats, surveys or similar, as well as other files such as presentation documents) can be processed, logged or displayed. When optionally using the recording function of web conferences, this data can be stored permanently, also on servers of service providers.
However, we would like to point out that we generally have no influence on what data is collected. Accordingly, failure to provide the aforementioned data may mean that it is not possible for you to participate in the web conference. No automated decision-making will be carried out. Details on the processing of data by the services concerned can be found in the data protection notices of the respective services, which are designated in the following section.
We use the web conferencing tools to communicate with you in a simple, effective and direct way. The legal basis for this is our legitimate interest pursuant to Art. 6 (1) (1) lit. f) GDPR. In the case of an existing contractual relationship, the use of such a service serves the purpose of providing a service, for which the legal basis of the processing is Art. 6 (1) (1) lit. b) GDPR. The same legal basis arises for the registration as well as the participation in an online webinar offered by us. If your consent has been obtained, the legal basis for processing the data is Art. 6 (1) (1) lit. a) GDPR and Section 25 (1) TTDSG, provided that the consent within the meaning of the TTDSG relates to the setting of cookies or access to information on your terminal device. You have the right to revoke your consent at any time with effect for the future. The legality of the data processing carried out until the revocation remains unaffected.
We have no influence on the storage period of the data stored by the service providers for their own purposes. If you request us to delete the data or the purpose for storing the data no longer applies, we will delete your data unless mandatory legal provisions prevent this. Cookies stored by you remain on your terminal device until you delete them.
Microsoft Teams
We use the web conferencing tool Microsoft Teams. This is an application of Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA; hereinafter: "Microsoft"). The personal data you provide will be collected and processed exclusively for the purpose of conducting external and internal video conferences as part of a contractual relationship pursuant to Art. 6 (1) (1) lit. b) GDPR.
If no contractual relationship exists, the legal basis is Art. 6 (1) (1) lit. f) GDPR. Our interest here is the effective communication and exchange of the parties involved.
The provision of your personal data is necessary for the implementation of the video conferences. If you do not provide it, you will unfortunately not be able to participate. Automated decision-making will not be carried out.
Personal data processed in connection with videoconferencing will not be disclosed to third parties as a matter of principle, unless it is specifically intended for disclosure.
Microsoft's privacy policy can be found at: https://privacy.microsoft.com/de-de/privacystatement
Data transfer to the USA is based on the EU standard contractual clauses, details of which can be found here: https://docs.microsoft.com/de-de/compliance/regulatory/offering-EU-Model-Clauses.