Privacy - Corporate Volunteering für alle

Data protection information

We, purpozed GmbH (hereinafter: company), take the protection of personal data very seriously. We treat personal data confidentially and in accordance with the statutory provisions of the relevant data protection laws, in particular the European General Data Protection Regulation (GDPR). This data protection notice relates to our services and digital offerings, including our social media profiles. Our digital offers may contain links to other websites of third party service providers to which this data protection notice does not apply.

Person responsible

The controller responsible for the processing of personal data is

purpozed GmbH

Ottersbekallee 16

20255 Hamburg

datenschutz@purpozed.org

If you have any questions about data protection at our company, please write to us at the above postal address with the addition “Data protection” or at the e-mail address provided.

Purpose of the processing of personal data

Data processing for the provision of contractual services

With purpozed, we offer an online platform at the URL purpozed.org for the realization of volunteering by employees of corporate customers in corresponding, usually non-profit organizations. Employees of corporate clients can be offered and manage volunteering opportunities with various organizations. Organizations can offer and implement volunteering opportunities.

We process personal data in order to handle the contractual relationships and to be able to submit contract offers in line with requirements. The data is collected in particular to conclude or execute a contract. For all forms, we only collect the personal data that is absolutely necessary for processing the contractual relationship or for your request for information. This information is marked with an asterisk. The collection of data that is not absolutely necessary, but in which we have an interest in order to optimize the fulfillment of the purpose, is only optional. In this case, you decide on a voluntary basis whether and which data you wish to provide us with.

In particular, we request the name and contact details of contact persons of the company from our business partners for the purpose of implementing the contractual relationship.

In the case of service providers, we process the personal data provided by them in this way or in another manner for our own ordering and retrieval of services and to pay for the services provided. We need the name, address data and account details for this. Depending on the service/contract, we may require additional data, which we will then clarify on a case-by-case basis. If you provide further data, we will also use it for the aforementioned purposes, but it is not required for the conclusion of the contract.

The basis for data processing is Art. 6 para. 1 p. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Customer area

On our website, we offer the option of registering for purpozed by providing personal data.

If you are an organization, we need the following information: Name of the organization and legal form, street, house number, postal code, city, website URL, the purposes and (sustainability) goals of the company and, optionally, a profile photo of the organization and the details of a contact person. If you would like to register as a volunteer, you will need your e-mail address, a password and the Company ID of your employer.

Data in purpozed in the area accessible only to registered users (customer area) can be viewed, edited and, if necessary, deleted using your e-mail address and password. In the event that you have forgotten your password for the customer portal, you will find the link “Forgotten password” on the log-in page. You can enter a new password by entering your e-mail address.

The personal data you enter when using the customer area will only be processed in order to be able to offer you the associated services, which can only be offered to registered users.

The basis for data processing is Art. 6 para. 1 p. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

Data processing for communication purposes

In addition to the contract data, we process communication data in order to be able to process inquiries and/or contact data subjects. Personal data provided to us by e-mail or via another communication channel opened by us will only be processed for correspondence with the data subject or only for the purpose for which the data was provided to us.

This data is processed on the basis of Art. 6 para. 1 lit. b GDPR, insofar as the request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on consent (Art. 6 para. 1 lit. a GDPR) if this has been obtained in this regard.

Newsletter

With your consent, you can subscribe to our newsletter, with which we inform you about our current interesting offers. The respective content of a newsletter is explained in the respective declaration of consent. If you would like to receive a newsletter offered by us, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the e-mail address provided and that you agree to receive the newsletter. For this purpose, we will send you an e-mail with a confirmation link to the e-mail address you have provided (double opt-in). If you do not confirm your registration, your information will be blocked and automatically deleted after one month.

The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to be able to address you personally. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of the procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data. We do not collect any other data in this context. We use this data exclusively for sending the requested newsletter. If we use a processor to send the newsletter, we will of course comply with the applicable data protection laws.

The data processing takes place on the basis of your consent in accordance with. Art. 6 para. 1 p. 1 lit. a GDPR. You can revoke your consent to the sending of a newsletter at any time and cancel the respective subscription. You can declare your revocation by clicking on the link provided in each e-mail or by sending us a message using the contact details given in section 1. The legality of the data processing operations already carried out remains unaffected by the revocation.

Cookies

We may use so-called cookies in order to be able to offer website-specific services. Cookies are small text files that are stored on a visitor’s computer and contain data on the respective user in order to give them access to various functions.

Websites may use both session cookies and persistent cookies. A session cookie is temporarily stored on the computer used while navigating through the website. A session cookie is deleted as soon as the Internet browser is closed or as soon as the session has expired after a certain period of time. A persistent cookie remains on the computer until it is deleted.

We may work with third parties for some of our offers and therefore cookies from partner companies may also be stored when you visit such a website (third-party cookies). We may inform you in advance about the use of such cookies and the scope of the data stored or retrieved in each case. Data subjects may receive additional information on the cookies used in each case via the cookie tool we use and the explanations provided there.

We use necessary cookies that are required to enable the provision of the services owed by us or to ensure the functionality of our services. The legal basis for the setting of these cookies is § 25 para. 2 No. 2 TTDSG. Any processing of personal data carried out in this context is then carried out on the basis of Art. 6 para. 1 p. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures or in accordance with Art. 6 para. 1 p. 1 lit. f GDPR, which permits data processing for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our interest then lies in ensuring the provision of the functions of our services.

We may obtain consent for the use of other, non-essential cookies. Cookies are then set on the basis of consent in accordance with §25 para. 1 TTDSG, any processing of personal data carried out in this context in accordance with Art. Art. 6 para. 1 p. 1 lit. a GDPR. Data subjects can revoke their consent at any time – e.g. via the cookie tool we may have integrated. The legality of the data processing already carried out on the basis of consent remains unaffected by the revocation.

Data processing in the context of our Facebook and Instagram pages

We operate a company page (fan page) on the social network facebook.com (“Facebook“) and a page/profile on the social network Instagram (“Instagram“) of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Together with Meta Platforms Ireland Limited (“Meta“), we are jointly responsible for the operation of the aforementioned pages within the meaning of Art. 4 No. 7 GDPR. Linked here you will find the Facebook terms of use and guidelines as well as the agreement on joint responsibility in accordance with. Art. 26 GDPR.

The type and scope of the personal data processed and any information provided, the associated purposes of the data processing, its legality and information on exercising the rights of data subjects can be found in Facebook’s data protection information and other information provided by Meta on the processing of “Insights data” (see above). Meta provides us with so-called page insights for our website. Page insights (e.g. https://www. facebook.com/business/a/page/page-insights) are summarized data that we can use to obtain information about how our website is interacted with. Facebook is responsible for generating and providing these Page Insights; we have no influence over this. This also applies to data processing that is carried out exclusively for the purposes of Meta Platforms Ireland Limited. Meta also assumes all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

The purpose of the data processing of the data provided by us is the statistical evaluation of the use of our company pages. This enables us, for example, to determine preferred visit and contribution times and use them to optimize our contributions and our company pages. In addition, we process personal data made publicly accessible there (e.g. real names in the user profile) as well as data directly related to activities on our company pages (e.g. contributions, posts, likes, tags), also for the purpose of communication.

The basis for data processing is Art. 6 para. 1 p. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures, insofar as the data is processed in accordance with the Facebook or Instagram terms of use, otherwise, insofar as we are responsible under data protection law, Art. 6 para. 1 p. 1 lit. f GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our interest lies in the provision of content and communication with users of social networks and in improving the reach and effectiveness of our contributions.

The rights to information, correction, deletion, restriction of processing and data portability of stored Insights data can be asserted against Meta, as Meta has assumed the corresponding obligations:

Meta Platforms Ireland Limited

4 Grand Canal Square

Dublin 2, Ireland

Data processing in the context of our LinkedIn company page

We operate a company page on the social network linkedin.com of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn“) and are provided with so-called page analytics by LinkedIn. We are jointly responsible with LinkedIn for this operation of the LinkedIn company page within the meaning of Art. 26 GDPR.

The type and scope of the information processed or provided by LinkedIn, the associated purposes of data processing by LinkedIn, its legality and information on the exercise of data subject rights can be found in LinkedIn’s data protection information at the URL https://www.linkedin.com/legal/privacy-policy and the agreement on joint responsibility, which can be found at the URL https://legal.linkedin.com/pages-joint-controller-addendum, can be taken from the Page Analytics is summarized data that allows us to gain information about how our pages are interacted with. The generation and provision of these page analytics is the responsibility of LinkedIn, we have no influence on this. LinkedIn assumes all obligations under the GDPR with regard to the processing of Insights data (including Articles 12 and 13 GDPR, Articles 15 to 22 GDPR and Articles 32 to 34 GDPR).

The purpose of the data processing of the data provided by LinkedIn by us is the statistical evaluation of the use of our company page. This enables us, for example, to determine preferred visit and contribution times and use them to optimize our contributions and our company page. In addition, we process personal data made publicly available on LinkedIn (e.g. real names in the user profile) as well as data directly related to activities on our company page (e.g. contributions, posts, likes, tags), also for the purpose of communication.

The basis for the aforementioned data processing is Art. 6 para. 1 p. 1 lit. a GDPR. If consent has been given to LinkedIn, this consent can be revoked at any time with effect for the future. If consent has been given to us in this regard, this consent can be revoked at any time with effect for the future. Otherwise, the basis for our data processing is Art. 6 para. 1 p. 1 lit. f GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our interest lies in the provision of content and communication with LinkedIn users and in improving the reach and effectiveness of our contributions.

The rights to information, correction, deletion, restriction of processing and data portability of stored Insights data can be asserted against LinkedIn, as LinkedIn has assumed the corresponding obligations:

LinkedIn Ireland Unlimited Company

Wilton Place

Dublin 2

Ireland

Online presence in other social networks

We may have set up online presences in other social networks in order to communicate and provide information about our services. In addition to our interaction with users, the social networks process data from visitors to their websites for the purpose of market research and advertising, i.e. a user profile may be created by the respective operator of the social network from the respective visit or usage behavior and the preferences and interests of visitors derived from this. Such user profiles can be used, among other things, to display advertisements customized to the respective user profile within the respective social network and possibly on other websites. Cookies (see above) may be stored on visitors’ devices, which can be used to collect data on usage behavior. This data can also be collected across multiple browsers and/or end devices, especially for logged-in members of the respective social network. Even if visitors do not have a profile on the respective social network, it cannot be ruled out that personal data will be processed and/or stored when they visit the respective website.

Requests for information regarding the data stored via our online presences in social networks or the exercise of other related data subject rights (see below) can be addressed to the provider of the respective service. Only the providers of the social networks have access to the respective data stored there and can provide the corresponding information, etc. With regard to the purpose and scope of data processing by the various social networks, we also refer to their respective data protection notices and the respective contact options:

New Work SE

Am Strandkai 1

20457 Hamburg

Germany

The processing of data in the context of our online presence in social networks takes place insofar as we are responsible under data protection law on the basis of our legitimate interest in effective information and direct communication with interested parties. The basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our interest lies in the provision of content and communication with users of the respective social networks and in improving the reach and effectiveness of our contributions.

Hubspot

We use the HubSpot software from the US software company of the same name with the following branch in Ireland: HubSpot, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland. Further information can be found in the terms of use and the privacy policy of HubSpot Inc. at http://www.hubspot.com/terms-of-service and at http://www.hubspot.com/privacy-policy.

HubSpot is a versatile software solution for the control and realization of digital inbound marketing and customer relationship management. CRM (Customer Relationship Management)). If you give your consent, Hubspot will set a so-called tracking cookie via your browser. In particular, this enables your previous and subsequent website visits to be identified and processed. If you want to revoke these settings for the specific browser, simply delete the cookies in your browser. When you re-enter/reload the website, you will then be asked again for your cookie preference. Further information on cookies and how they work in general can be found in section 2.5 of this privacy policy. Further information on how HubSpot’s specific tracking cookies work can be found at https://knowledge.hubspot.com/de/account/how-does-hubspot-track-visitors.

We use the services of HubSpot to get in touch with visitors to our website and to determine which of our company’s services are of interest to you. We use all the information collected exclusively to optimize our marketing. We use HubSpots to send automated e-mail notifications to registered customers and providers, such as welcome messages, but also – if you have given your consent – newsletters about our company’s current promotions. The following data is stored and processed for this purpose:

Your company or club name
Your domain/ website,
Your address,
Your first name and surname,
E-mail address,
Job title,
Selection of skills and

If you have voluntarily provided your telephone number, this information will also be processed.

The information is stored on HubSpot’s servers in the USA and elsewhere. As our company’s processor, HubSpot is contractually obliged to comply with the European Commission’s data protection standards in the interest of secure and data protection-compliant handling of your sensitive data. This is ensured by using so-called standard contractual clauses. The exact regulations can be found at https://legal.hubspot.com/dpa.

Important in connection with data processing in the USA: According to the European Court of Justice, the data protection standard in the USA is inadequate and there is a risk that your data will be processed by US authorities for control and monitoring purposes and possibly without the possibility of legal recourse. However, the standard contractual clauses of the EU Commission used in this case, as described above, are now intended to guarantee a European level of data protection.

The processing of personal data takes place on the basis of your consent in accordance with. Art. 6 para. 1 p. 1 lit. a GDPR in conjunction with. Art. 49 para. 1. p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. You can declare your revocation by sending a message to the contact details given in section 1. The legality of the data processing operations already carried out remains unaffected by the revocation.

Use of SalesViewer® technology

This website uses the SalesViewer® technology from SalesViewer® GmbH to display
Based on the legitimate interests of the website operator (Art. 6 para. 1 lit. f GDPR) data to
collected and stored for marketing, market research and optimization purposes.
For this purpose, a javascript-based code is used to collect company-related data.
and the corresponding use. The data collected with this technology is transmitted via a
non-reversible one-way function (so-called hashing). The data is immediately
pseudonymized and not used to personally identify the visitor to this website.
The data stored as part of Salesviewer® is deleted as soon as it is no longer required for its intended purpose.
purpose are no longer required and the deletion is not required by law.
storage obligations.
You can object to the collection and storage of data at any time with effect for the future.
by clicking on this link https://www.salesviewer.com/opt-out in order to download the

prevent future collection by SalesViewer® within this website. An opt-
out cookie for this website is stored on your device. If you delete your cookies in this browser, you must click this link again.

Chameleon

We use the Chameleon Onboarding Tool (hereinafter referred to as “Chameleon”) from Chameleon Intelligent Tech Inc, 714 Treat Ave, San Francisco, California, 94110 United States, to make our website convenient and easy to use. You can find more information about Chameleon’s data protection at: https://help.chameleon.io/en/collections/74930-security-privacy. You can find more information on how it works at: https://help.chameleon.io/en/articles/1226450-what-analytics-does-chameleon-provide.

This service makes it easier for you to use our website, especially on your first visit, by means of small applications and windows, so-called pop-ups. Information windows (tooltips), short feedback surveys (microsurveys) or tours, for example, ensure user-friendly interaction with the functions and content of the site. Chameleon can ensure these improvements by analyzing and storing the actions you perform, in particular clicking on a link, a button, a tour or a feedback collection, etc. Chameleon also tracks the respective tour, its retrieval and retrieval duration, any URLs and links you use, as well as the associated settings and geographical location (city and country). The respective tour, its retrieval and retrieval duration, any URLs and links, the browser you use and the associated settings and the geographical location of the retrieval (city and country) are also tracked. You can find more information on this at: https://help.chameleon.io/en/articles/1226450-what-analytics-does-chameleon-provide. Information and data can also be exchanged with other tools and services; in this case with Mixpanel (see section 2.11).

At a minimum, the processed data is:

– First & last names,

– E-mail address.

The following are also collected and processed:

– Company or club name,

– Company or club domain,

– Company or association address,

– Xing and LinkedIn profiles if applicable,

– Job title,

– Selection of skills,

– Sustainability goals.

If you have voluntarily provided your telephone number and/or your postal code, this information will also be processed.

The data is processed on Chameleon servers in the USA. Chameleon is used by us as a processor.

The processing of personal data on the basis of your consent in accordance with. Art. 6 para. 1 p. 1 lit. a GDPR in conjunction with. Art. 49 para. 1. p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. You can declare your revocation by sending a message to the contact details given in section 1 (e.g. e-mail, fax, letter). The legality of the data processing operations already carried out remains unaffected by the revocation.

Mixpanel

We use the Mixpanel tool on our website of Mixpanel Inc. with the following address: Mixpanel Inc, One Front Street, 28th Floor, San Francisco, CA 94111, U.S.A. A branch office in London is located at: Mixpanel, London 33 Broadwick St., London, W1F 0DQ, UK. You can find more information about the company and data processing in the terms of use and privacy policy at https://mixpanel.com/legal/terms-of-use/ and at https://help.mixpanel.com/hc/en-us/sections/115001299023-Data-Security-and-Privacy.

Mixpanel enables us to analyze the user behavior of website visitors. This is done, among other things, by breaking down which functions of our product are particularly relevant and popular, by recording the duration of use of individual users and the specific use of and interaction with the individual website functions. This information is evaluated, for example, by creating and summarizing various graphics. We use all the information collected exclusively to optimize our marketing.

For this purpose, it is necessary for Mixpanel to collect and process data. This includes the following data in particular: Your location, the country and city as well as the respective time zone from which you access this website, the browser used, including its version, your end device, the use of the mobile website, the ID of your end device (device ID), your user ID, the respective website from which you access, are located and the website you wish to access, your operating system, the resolution of your screen used, the search engine you used, the search words used, the individual clicks on links and functions and times of the respective actions as well as their duration. Depending on the operating system, specific information is also collected in this regard, such as the model of the end device, version, functions or apps used. You can also find more information on this at https://help.mixpanel.com/hc/en-us/articles/115004613766. Other relevant data relating to you that Mixpanel processes:

– Company or club name,

– Company or club domain,

– Company or association address,

– First name and surname,

– E-mail address,

– Xing and LinkedIn profiles, if applicable

– Job title,

– Selection of skills,

– Sustainability goals.

If you have voluntarily provided your telephone number and/or your postal code, this information will also be processed.

The information is stored on Mixpanel’s servers in the USA and elsewhere. As our company’s processor, Mixpanel undertakes to comply with the European Commission’s data protection standards in the interests of secure and privacy-compliant handling of your sensitive data. This is ensured by using so-called standard contractual clauses. The exact regulations can be found at https://mixpanel.com/legal/dpa/.

Important in connection with data processing in the USA: According to the European Court of Justice, the data protection standard in the USA is inadequate and there is a risk that your data will be processed by US authorities for control and monitoring purposes and possibly without the possibility of legal recourse. However, the standard contractual clauses of the EU Commission used in this case, as described above, are intended to guarantee a European level of data protection.

Tracking using Matomo

We may use the web analysis service Matomo to analyze the use and to optimize the respective website. When used, Matomo creates an internal hash value for each visitor to the respective website, which is calculated from various factors such as the anonymized IP address, the resolution, the browser, the plugins used and the operating system. In contrast to other statistics programs, Matomo does not transmit any data to a third-party server; Matomo is installed on one of our servers. The IP address transmitted by your browser via Matomo is neither merged with other data collected by us nor passed on to third parties and is only stored in anonymized form. As part of our web analysis with Matomo, no tracking cookies are set on your computer. If individual pages of our website are accessed, the following data is processed: two bytes of the IP address of your accessing system (anonymous), browser type and version, operating system used, the website accessed, the website from which you are visiting us (referrer URL) – unless your browser prohibits this, the pages and files that you access on our website, possibly the website you visit after ours (if you click on an external link on our website), the date and time of your access, the time you spend on the website, the frequency with which you visit the website, your location (country).

The use of Matomo described above is based on Art. 6 para. 1 p. 1 lit. f GDPR. We have a legitimate interest in analyzing user behavior in order to optimize our website/apps and identify errors

Google Analytics

Google Analytics may be used on some of our Internet pages, integrated via Google Tag Manager, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as “Google”), provided that you have consented to this data processing. Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website is usually transmitted to a Google server and stored there; it may also be transmitted to the servers of Google LLC in the USA.

However, since IP anonymization is activated on our website when Google Analytics is used, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC server in the USA and shortened there. Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing us with other services relating to website activity and internet usage.

Further information on terms of use and data protection can be found at http://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/. We would like to point out once again that on this website Google Analytics has been extended by the code “anonymizeIp” in order to ensure an anonymized collection of IP addresses (so-called IP masking).

The data processing explained above may take place on the basis of your consent in accordance with. Art. 6 para. 1 p. 1 lit. a GDPR in conjunction with. Art. 49 para. 1. p. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. You can declare your revocation by making the appropriate setting in the Consent Management Tool used, if applicable. The legality of the data processing operations already carried out remains unaffected by the revocation.

Google Marketing Platform and Google Ads Conversion, Google Dynamic Remarketing

On some of our websites, we may also use Google Analytics to analyze data from the Google Ads services and the Google Marketing Platform services for statistical purposes. This allows us to analyze what happens after a user clicks on our ad in order to improve our offers, e.g. whether the user has purchased our product or accessed the ad from a cell phone. You will also receive interest-based advertising via these services. If you do not want this, you can deactivate it via Google’s Ads Preferences Manager. Google Marketing Platform places a cookie on your computer to record your surfing behavior on various websites (tracking) and to display interest-based advertising. If you want to prevent this permanently, you can download a plug-in to deactivate the cookie at the following link.

Information collected using the Ads conversion cookie is used to generate conversion statistics for Ads customers who have opted for conversion tracking. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. We do not receive any information with which users can be personally identified. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie via your Internet browser under user settings or by deactivating it via the aforementioned plugins or settings.

The storage of Google cookies and the analysis for statistical purposes is based on your consent in accordance with Art. 6 para. 1 lit. f GDPR. Art. 6 para. 1 p. 1 lit. a GDPR in conjunction with. Art. 49 para. 1. p. 1 lit. a GDPR. You can revoke your consent at any time by making the appropriate setting in our Consent Management Tool. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data processing for the protection of legitimate interests

We may also process personal data if it is necessary to protect our legitimate interests or those of third parties. This may be the case in particular to ensure IT security and IT operations, especially in the case of support requests, to be able to trace and prove facts in the event of legal disputes and to statistically evaluate the use of our website. The basis for data processing is then Art. 6 para. 1 p. 1 lit. f GDPR.

Data processing for analysis, advertising or market research purposes

In the event that your data is used for advertising purposes and if not already described in detail in the above paragraphs, we may obtain your consent. The data processing then takes place on the basis of your consent (Art. 6 para. 1 sentence 1 lit. a GDPR). You can revoke your consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

In addition, we use your e-mail address for recommendations or inquiries if we already have a contractual relationship. You will receive these recommendations from us regardless of whether you have subscribed to a newsletter. In this way, we want to provide you with information about our offers that may be of interest to you on the basis of your inquiry or contractual relationship with us. In doing so, we adhere strictly to the legal requirements. If you no longer wish to receive recommendations or advertising messages from us, you can object to this at any time. A notification in text form to the contact details stated in section 1 (e.g. e-mail, fax, letter) is sufficient for this purpose.

The basis for the aforementioned data processing is Art. 6 para. 1 p. 1 lit. f GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject.

Data processing for market and opinion research

We also use your data for market and opinion research. Of course, we only use this data anonymously for statistical purposes and only for our company. Your answers to surveys will not be passed on to third parties or published.

The basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. Our interest lies in the economic use of the data to improve our offer.

Other data processing on the basis of consent

We may also request consent for the processing of personal data. Any granting of consent and the relevant data processing takes place on a voluntary basis and there are no disadvantages for the data subject in the event of non-consent.

The data processing is then carried out on the basis of the consent given in accordance with. Art. 6 para. 1 sentence 1 lit. a GDPR. Any consent given can be revoked at any time with effect for the future. All you need to do is send us an informal message. The legality of the data processing operations already carried out remains unaffected by the revocation.

Log files

Each time our website is accessed, usage data is transmitted by the respective Internet browser and stored in log files, the so-called server log files. The data records saved contain the following data:

the page from which the page was requested (so-called referrer URL)
the name and URL of the requested page
the date and time of the call
the description of the type, language and version of the web browser used
the IP address of the requesting computer
the amount of data transferred
the operating system
the message whether the call was successful (access status/Http status code)
the GMT time zone difference

This data cannot be assigned to specific persons. This data is not merged with other data sources. We reserve the right to check this data retrospectively if we become aware of specific indications of unlawful use.

The basis for data processing is Art. 6 para. 1 p. 1 lit. f GDPR, which permits the processing of data for the purposes of the legitimate interests pursued by the controller, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject. We have an interest in the prosecution, prevention and punishment of unlawful use of our website.

Data processing for the fulfillment of legal obligations

In addition, we process your data to fulfill legal obligations (e.g. regulatory requirements, commercial and tax law retention and verification obligations).

The basis for data processing is Art. 6 para. 1 p. 1 lit. c GDPR, which permits processing to fulfill a legal obligation.

Recipients of the personal data

Personal data will only be passed on or otherwise transmitted to third parties if this is necessary for the purpose of contract processing or billing or if prior consent has been given or if there is a legal basis for the transfer.

Your data will be forwarded to the respective responsible office and the responsible employees within our company to answer your inquiries, for communication or to carry out the order or to fulfill contractual obligations.

In the case of cooperations in which we only act as an intermediary, your personal data will only be passed on to the cooperation partner if this is necessary for the purpose of concluding and processing the contract for the cooperation partner. Both the cooperation partner and we are obliged to comply with data protection regulations as part of the cooperation. This obligation shall continue to exist even after termination of the respective contract.

Service providers who support us in the context of the processing of your data described above are sales and marketing partners, software (SaaS) providers, IT service providers, in particular. Service provider for software and hardware maintenance, and e-mail service provider.

If it is necessary for the purpose of processing the contract, data will be passed on to partner companies that have been commissioned to support the processing of the contract. The basis for this is then Art. 6 para. 1 p. 1 lit. b GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

In addition, data may be passed on to third parties commissioned to provide advice, such as consulting firms or law firms, tax consultants, auditors or comparable consulting service providers. They do not regularly act as processors, but are subject to statutory or contractually agreed confidentiality obligations.

Duration of data storage

In principle, we delete personal data as soon as it is no longer required for the above-mentioned purposes, unless temporary storage is still necessary. For example, we store personal data on the basis of legal obligations to provide evidence and retain data, including those arising from the German Commercial Code and the German Fiscal Code. The storage periods are then up to ten full years. In addition, we retain personal data for the period during which claims can be asserted against our company (statutory limitation period of three or up to thirty years).

Rights of data subjects

Within the framework of the applicable statutory provisions, data subjects have the right to obtain information free of charge at any time about their personal data stored by us, its origin and recipients and the purpose of the data processing and, if applicable, a right to rectification or erasure of this data.

You can contact us at any time using the contact details provided in section 1 if you have further questions on the subject of personal data.

Data subjects may also have the right to restrict the processing of their data and the right to receive the data they have provided in a structured, commonly used and machine-readable format.

If you have given us your consent to process personal data for specific purposes, you can withdraw your consent at any time with effect for the future. If we process your data to protect legitimate interests, you can object to this processing on grounds relating to your particular situation. If we cannot demonstrate compelling legitimate grounds for further processing which override your interests, rights and freedoms, or if we process your data for the purpose of direct marketing, we will no longer process your data.

In addition, data subjects have the option of contacting a data protection supervisory authority (right to lodge a complaint).

Please make sure.

A contract with HubSpot is required in which HubSpot undertakes to process user data only in accordance with your instructions and to comply with the EU data protection level; in addition, appropriate settings must be made in the backend to configure the software to be GDPR-compliant.

Permanent service providers such as hosting companies etc. should be named here.

Data protection information

PRODUKT

UNTERNEHMEN