Privacy Policy

1. Name and contact details of the controller and contact details of the data protection officer.

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is: Deutscher Fachverlag GmbH, Mainzer Landstraße 251, 60326 Frankfurt am Main, Germany.

If you have any questions that this Privacy Policy has not been able to answer, or if you would like more detailed information on any point therein, please contact us at any time at  presse@dfv.de  or by post (Deutscher Fachverlag GmbH, Corporate Communications, Mainzer Landstr. 251, 60326 Frankfurt am Main). 

You can reach the company data protection officer at:  datenschutz@dfv.de or by mail at Deutscher Fachverlag GmbH, Privacy Policy, Mainzer Landstr. 251, 60326 Frankfurt.

2. Web hosting, provision of the website, and creation of log files.

In order to provide our website securely and efficiently, we use the services of bitfuel GmbH, Louis-Appia-Passage 9, 60314 Frankfurt am Main. In doing so, our website is accessed from their servers (or servers managed by them). For these purposes, we may use infrastructure and platform services, computing capacity, storage space, and database services, as well as security services and technical maintenance services.

Our web hosting provider processes, as part of the hosting, all data that is generated during the use of our website and communication with us. This regularly includes the IP address, which is necessary to deliver the content of online offers to browsers, and all entries made within our online offer or web pages.

Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer.

The following data may be collected in the process:

·    Information about the type of browser and the version used
·    Your operating system 
·    Your IP address 
·    Date and time of access
·    Referrer URL (the previously visited page)

This data is also stored in the log files of our system. This data is not stored together with other personal data of the user.

The legal basis for the temporary storage of the data and the log files is § 25 Para. 2 No. 2 TTDSG. The temporary storage of the IP address by the system is necessary to enable delivery of the website to your computer. For this purpose, your IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the website. In addition, we use the data for the technical optimisation of the website and to ensure the security of our information technology systems.

The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility to object.

Further information on data protection at our web hosting provider can be found here:  https://bitfuel.de/datenschutzerklaerung. 

3. Contact

When contacting us (e.g. via contact form, e-mail, telephone or via social media), we process your data for the purpose of processing the contact request and its handling.  
If you have given us your consent for this, the legal basis for the processing of this data is Art. 6 Para. 1 lit. a GDPR. Otherwise, the legal basis for the processing of this data is Art. 6 Para. 1 lit. f GDPR, in particular in the event that the data is transmitted to us by you by sending an e-mail. Insofar as you wish to work towards the conclusion of a contract by contacting us, Art. 6 Para. 1 lit. b GDPR represents an additional legal basis.

If we provide a contact form on our website, the data you enter will be transmitted to us and stored, e.g. inventory data (e.g. names, addresses) and contact data (e.g. e-mail, telephone numbers).

In addition, we record your IP address and the time of sending. The processing of the personal data that you enter serves us solely to process your contact request. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. Unless explicitly stated in the contact form, the data will not be passed on to third parties.

Your information may also be temporarily stored in a customer relationship management system ("CRM System") or comparable inquiry organizational system.

Subject to statutory retention periods, the data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data that you enter into the contact form and any data sent by e-mail, this is the case when we have finally processed your respective request.

You have the option to revoke your consent to the processing of personal data at any time. If you contact us by e-mail, you can object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.
 

4. Services subject to registration 

4.1 Newsletter and electronic notifications

If you register for our newsletter on the website, this is generally done using the so-called double opt-in procedure. In this process, you will receive, usually after providing your name (for the purpose of personal address), your e-mail address, and possibly other information (if required for the purpose of the newsletter), an e-mail in which you will be asked to confirm your registration. This confirmation allows us to verify that you are the owner of the e-mail address provided. The entry of a valid e-mail address is necessary so that we can prevent improper registration of third-party e-mail addresses. Therefore, we log the registration to the newsletter to be able to prove the registration process in accordance with legal requirements. For this purpose, we store the time of registration and confirmation as well as your IP address.

If you purchase products on our website and enter your e-mail address, this may subsequently be used by us for sending a promotional newsletter or e-mail advertising. In such a case, only direct advertising for our own similar goods or services will be sent via the e-mails. You can object to this sending at any time.

The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR if you have given your consent. If the contents of the newsletter are specifically described on the registration page, they are relevant for the consent. If the registration serves the fulfilment of a contract or the implementation of pre-contractual measures, the legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR. In addition, the data processing is based on our legitimate economic interest pursuant to Art. 6 Para.1 lit. f GDPR for the purpose of ensuring a smooth and easy processing of your order, the efficient handling of any queries, for the design of our offers in line with demand, for product information, and for customer care. We send further e-mails and electronic notifications, e.g. in the case of existing customer advertising, on the basis of our legitimate interests in direct marketing. The logging of the registration process takes place on the basis of our legitimate interests for the purpose of proving that a double opt-in procedure has been properly carried out. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure sending system.

The data will be deleted as soon as they are no longer necessary to achieve the purpose of their processing. Accordingly, your e-mail address will be stored as long as the subscription to the newsletter is active. Even after the end of the contract, there may be a contractual or legal requirement to store personal data of the contractual partner. In this case, there is no right to deletion, but possibly to restriction of data processing.

You can cancel the receipt of our newsletter at any time, i.e. revoke your consent or object to the further receipt thereof. You will find a link to cancel the newsletter either at the end of each newsletter or you can otherwise use one of the contact options provided above for this purpose. If we are obliged to permanently observe certain objections, we store the e-mail addresses after the objection has been filed in a blacklist (so-called "blacklist" or "Robinson list") solely for this purpose.

The following services and service providers may be used:

•    Mailchimp: e-mail delivery and marketing platform; Service provider: The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA; Website: https://mailchimp.com; Privacy policy: https://mailchimp.com/legal/privacy/.

•    Mailjet: e-mail delivery and marketing platform; Service provider: Mailjet SAS, 13-13 bis, rue de l'Aubrac, 75012 Paris, France; Website: https://www.mailjet.de; Privacy policy: https://www.mailjet.de/privacy-policy.

•    SendinBlue: e-mail delivery and marketing platform; Service provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany; Website: https://de.sendinblue.com/; Privacy policy: https://de.sendinblue.com/legal/privacypolicy/.    

•    Inxmail: E-mail delivery and marketing platform; Service provider: Inxmail GmbH, Wentzingerstr. 17, 79106 Freiburg, Germany; Website: https://www.inxmail.de/; Privacy policy: https://www.inxmail.de/datenschutz.

•    Scope: e-mail delivery and marketing platform; Service provider: Scope Content AG, Weinbergstrasse 137, 8006 Zurich, Switzerland; Website: https://www.thescope.com/; Privacy policy: https://www.thescope.com/datenschutz.

•    Drimify: e-mail marketing platform; Service provider: Drimlike Ltd, EH20 Business Centre, 6 Dryden Road, Loanhead, Scotland, EH20 9LZ; Website: https://drimify.com/; Privacy policy: https://drimify.com/en/legal/

•    rapidmail: e-mail delivery and marketing platform; Service provider: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany; Website: https://www.rapidmail.de/; Privacy policy: https://www.rapidmail.de/datenschutz.

•    Salesforce Marketing Cloud: automation and analytics software for e-mail, mobile, social and online marketing; Service provider: salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany; Website: https://www.salesforce.com/de/; Privacy policy: https://www.salesforce.com/de/company/privacy/

4.2 User account

If we offer you the opportunity to register on our website and create a user account by providing personal data, the data is usually entered in an entry form and transmitted to us and stored. The data will not be passed on to third parties, unless otherwise stated. The following data may be collected during the registration process: Inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), and contract data (e.g. subject matter of the contract, term, customer category).

At the time of registration, the following data may also be stored: Usage data (e.g. websites visited, interest in content, access times) and meta/communication data (e.g. device information, IP addresses).

If you have given your consent, the legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR. If the registration serves the fulfilment of a contract to which you are a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 Para. 1 lit. b GDPR.

The registration and creation of a user account is necessary for the provision of certain content and services on our website. In addition, registration may also be necessary for the performance of a contract or for the implementation of pre-contractual measures.

The data is deleted as soon as the data are no longer required to achieve the purpose for which they were collected. This is usually the case for the data collected during the registration process when the registration on our website is cancelled or modified. This is the case for data collected during the registration process for the fulfilment of a contract or for the implementation of pre-contractual measures when the data are no longer required for the 
implementation of the contract. Even after the conclusion of the contract, there may be a need to store personal data of the contractual partner in order to comply with contractual or legal obligations.

As a user, you have the option to cancel the registration at any time. If the data are required for the fulfilment of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

4.3 Whitepaper 

4.3 Whitepaper  

We make whitepapers available for download on this website. When you download a whitepaper, we collect certain data to enable you to receive the whitepaper.

The provision of a whitepaper is associated with higher financial costs. For this reason, you can only obtain a whitepaper in return for providing various personal data, possibly in conjunction with the granting of consent to receive advertisements. The specific data to be provided can be found on the registration form and in the scope of the declaration of consent that you provide when downloading the corresponding whitepaper. As a rule, this includes inventory data (e.g. names, addresses) and contact data (e.g. e-mail, telephone numbers).

In this context, we also process your data for advertising purposes. The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR if you have given your consent. The provision of your data is neither legally nor contractually required. Failure to provide it will result in you not being able to download the whitepaper.

We may also transfer your data to advertising partners to use for promotional purposes. Please refer to the scope of the declaration of consent that you provide when you receive the whitepaper to find out whether and to whom such a transfer takes place.

The data will be deleted by us as soon as it is no longer required to achieve the purpose of said data’s processing, but at the latest after revocation of your consent, unless there is a legitimate interest in the continued storage of the data.

4.4 Webinars

You have the option on our website to register for webinars. When you register for a webinar, we collect certain data to enable you to participate in the webinar.

The provision of a webinar is associated with higher financial costs. Therefore, you can only participate in a webinar in return for providing various personal data,  possibly in conjunction with the granting of consent to receive advertisements. The specific types of data to be provided can be found on the registration form and in the scope of the declaration of consent that you provide when registering for the relevant webinar. As a rule, this includes inventory data (e.g. names, addresses) and contact data (e.g. e-mail, telephone numbers).

In this context, we also process your data for advertising purposes. The legal basis for the processing of the data is Art. 6 Para. 1 lit. a GDPR if you have given your consent. The provision of your data is neither legally nor contractually required. Failure to provide it will result in you not being able to participate in the webinar.

We may also transfer your data to advertising partners to use for promotional purposes. Please refer to the scope of the declaration of consent that you provide when registering for the webinar to find out whether and to whom such a transfer takes place.

The data will be deleted by us as soon as it is no longer required to achieve the purpose of said data’s processing, but at the latest after revocation of your consent, unless there is a legitimate interest in the continued storage of the data.

The following services and service providers may be used:

•    GoToWebinar: conferencing software; Service provider: LogMeIn, Inc, 333 Summer Street, Boston, MA 02210 USA, to collect registration and host the webinar; Website: https://www.logmeininc.com/; Privacy policy: https://www.logmeininc.com/de/legal/privacy

•    Microsoft Teams: messenger and conferencing software; Service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, to capture registration and host the webinar/video conference; Website: https://www.microsoft.com/de-de/microsoft-teams/group-chat-software; Privacy policy: https://privacy.microsoft.com/de-de/privacystatement

•    Zoom: conferencing software; Service provider: Zoom Video Communications, Inc, 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA, to capture registration and host the webinar / video conference; Website: https://zoom.us; Privacy policy: https://zoom.us/docs/de-de/privacy-and-legal.html.

•    Crowdcast: conferencing software; Service provider: Crowdcast Inc, 2323 Broadway Oakland, California 94612, USA, to capture registration and host the webinar; Website: https://www.crowdcast.io/; Privacy policy: https://www.crowdcast.io/privacy-policy

5. Use of cookies

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the computer system. When you access a website, a cookie may be stored on your operating system. This cookie contains a characteristic string of characters that enables the browser to uniquely identify you when you return to the website.

We use cookies to make our website functional and user-friendly. These cookies help make a website usable by enabling basic functions such as page navigation and access to secure areas of the website.

The legal basis for the use of technically necessary cookies is § 25 Para. 2 No. 2 TTDSG. The purpose of the use in these cases is to enable and simplify the use of our website for you. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

Cookies are stored on the user's computer and transmitted from it to our site. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transmission of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

6. Third-party services 

We also use services on our website that we use for reach measurement, online marketing, and the integration of third-party content and functions.

For reach measurement, we analyse the surfing behaviour of website visitors, i.e. we evaluate the behaviour and interests of users, e.g. to determine which content is particularly interesting or which functions require optimisation. For this purpose, cookies or similar procedures with the same purpose may be used to create user profiles of website visitors. In addition to the IP address, information concerning visited websites, viewed content, and technical characteristics, such as the browser used as well as information on usage times and location data, may be processed in this context, for example.

In the context of online marketing, we process personal data of website visitors for the marketing of advertising space or the presentation of advertising content. These should be tailored to the potential interests of the users, which is why we measure their effectiveness. Cookies or similar procedures with the same purpose may be used for this purpose and user profiles of the website visitors may be created. In addition to the IP address, information on visited websites, viewed content, and technical characteristics, such as the browser used as well as information on usage times and location data, can be processed in this context, for example. These cookies can later generally also be read on other websites that use the same online marketing procedure and analysed for the purpose of displaying content as well as supplemented with further data and stored on the server of the online marketing procedure provider.

In addition, we integrate functional and content elements (e.g. images, videos, texts and buttons) from third-party providers on our website. These functional and content elements are usually obtained from the servers of these third-party providers. In order to display this content and functionality, it is necessary for the providers to process the IP address of the users in order to send the content to the browser. The providers of the functional and content elements may also use so-called pixel tags or "web beacons", i.e. invisible graphics, for statistical and marketing purposes. This information may also be stored in cookies. In addition to the IP address, information on visited websites, viewed content, and technical characteristics, such as the browser used as well as information on usage times and the use of our offers, can be processed in this context, for example. This information may also be combined with such information from other sources.

The legal basis for the processing of personal data by the services listed below is, if you have given us your consent, § 25 Para. 1 Sent. 1 TTDSG. For some data processing, on the other hand, § 25 Para. 2 No. 2 TTDSG forms the legal basis. This serves the purpose of improving the quality of our website and its content. Through this, we learn how the website is used and can thus continuously optimise our offer. For the specific legal basis for the respective data processing, please refer to the information below and the cookie settings on the website. The data processed by the respective service can also be found in the cookie settings on the website or the privacy policy of the respective service.  

You can change your privacy settings or revoke your consent at any time by accessing the cookie banner again, e.g. by clicking on the "Cookie Settings" link in the footer or the corresponding icon on the website. If you use software such as Ghostery, AdBlock or the like via your browser, the cookie banner may be blocked. Consequently, the privacy information in it may not be displayed to you.

Services used and service providers:

•    Google Maps: Map service; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: consent (§ 25 Para. 1 Sent. 1 TTDSG, Art. 6 Para. 1 Sent. 1 lit. a GDPR); Website: https://mapsplatform.google.com/; Privacy policy: https://policies.google.com/privacy.

•    ADITION: We use the ADITION service from ADITION technologies AG, Oststraße 55, 40211 Düsseldorf, Germany on our website. ADITION technologies AG is part of the virtual minds group (virtual minds Aktiengesellschaft, Ellen-Gottlieb-Straße 16, D-79106 Freiburg im Breisgau) and offers a technology solution for automated, data-based digital marketing across all channels from a central enterprise platform for advertising agencies and publishers.
ADITION uses cookies to control and optimize the display of advertising materials. This concerns, for example, the maximum display frequency of advertisements that a user can see and to create reports on advertising campaigns or to improve them. The cookie is also used to place and display user-relevant advertising. In individual cases, ADITION uses stored cookie information for statistical surveys. 
ADITION does not collect data such as names, e-mail addresses or other personal information by setting cookies. All information is pseudonymized and contains technical information such as the frequency and date of display of advertisements, the browser used, or the operating system installed. ADITION operates in strict compliance with German data protection law in all data collection processes. All stored data are stored on servers in the Federal Republic of Germany. In addition, ADITION complies with all P3P specifications (Privacy Preferences Project). 
For more information on data processing, please refer to the privacy policy, which you can access via the following link: ADITION Privacy Policy.
Your opt-out option: follow the link at https://www.adition.com/datenschutz/. Under “2. Right to object" and then under "b) Advertising" you will find the option to set an opt-out cookie. In addition, you can use the preference management of the EDAA, which you can reach via the following link: http://www.youronlinechoices.com/

Integrated in or shared with ADITION on our website is the following service:
The Adex GmbH. ADEX is provided by The Adex GmbH Torstrasse 19, 10119 Berlin and serves as a provider for verification, ad fraud detection & viewability, among other things. This tool makes it possible to measure the viewability of advertising media, ensure brand safety, and prevent invalid traffic. You can object to the collection or analysis of your data through this tool here https://www.theadex.com/datenschutz-opt-out.  

•    YouTube Videos: Social network and video platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Legal basis: consent (§ 25 Para. 1 Sent. 1 TTDSG, Art. 6 Para. 1 Sent. 1 lit. a GDPR); Website: https://www.youtube.com; Privacy policy: https://policies.google.com/privacy.

•    Piwik PRO: web analytics, reach measurement; Service provider: Piwik PRO GmbH, Kurfürstendamm 21, 10719 Berlin; to analyse visitor flows and user behaviour. Piwik PRO may use cookies, tags, IP addresses, and so-called fingerprinting for this purpose. This may include the collection or processing of the following data: IP address (anonymized), user ID, date and time of the request, title or URL of the page visited, URL of the previously visited page, screen resolution, time zone, files clicked and downloaded, links leading to external websites clicked, creation speed of pages, user geographic data (country, region, city, approximate latitude and longitude), browser language, user agent of the browser used, randomly assigned unique visitor ID, time of a user's first visit, time of a user's previous visit, number of visits by a user. 
We use Piwik PRO to analyse and regularly improve the use of our website. The statistics obtained allow us to improve our offer and make it more interesting for you as a user. The information about the use of our website collected by the cookies is stored on the servers of Piwik PRO or the service providers commissioned by them in the EU; Legal basis: absolute necessity (§25 Para. 2 No. 2 TTDSG), legitimate interests (Art. 6 Para. 1 Sent. 1 lit. f GDPR); Website: https://piwikpro.de/; Privacy policy: https://piwikpro.de/datenschutz/.

•    Salesforce CRM: customer relationship management; Service provider: salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany (Parent company: Salesforce.com, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA); Legal basis: absolute necessity (§25 Para. 2 No. 2 TTDSG), contract fulfilment and pre-contractual requests (Art. 6 Para. 1 Sent. 1 lit. b) GDPR), legitimate interests (Art. 6 Para. 1 Sent. 1 lit. f GDPR); Website: https://www.salesforce.com/de/; Privacy policy: https://www.salesforce.com/de/company/privacy/.

•    Salesforce Marketing Cloud: automation and analysis software for e-mail, mobile, social and online marketing; Service provider: salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany (Parent company: Salesforce.com, Inc., Salesforce Tower, 415 Mission Street, 3rd Floor, San Francisco, CA 94105, USA); we use the "Marketing Cloud" to process contact requests, for reach measurement (e.g. access statistics, recognition of returning visitors), for marketing and remarketing purposes, for conversion measurement (measurement of the effectiveness of marketing measures) and to create profiles with user-related information. For this purpose, personal data is processed and stored on servers in the EU. This data may include, in particular, inventory data (e.g. names, addresses), contact data (e.g. e-mail, telephone numbers), content data (e.g. entries in online forms), usage data (e.g. websites visited, interest in content, access times), and meta/communication data (e.g. device information, IP addresses). e.g. device information, IP addresses); Legal basis: consent (§ 25 Para. 1 Sent. 1 TTDSG, Art. 6 Para. 1 Sent. 1 lit. a GDPR); Website: https://www.salesforce.com/de/; Privacy policy: https://www.salesforce.com/de/company/privacy/

7. Social media presence 

In order to offer information about us and to be able to communicate with users, we operate accounts on various social media networks. These can be accounts of our company as well as individual divisions and media brands, as well as the pages of our corporate influencers.

Various user data may also be processed by the operators of the social media networks outside the European Union and in particular in the USA. This data may include, in particular, inventory data (e.g., names, addresses), contact data (e.g., e-mail, telephone numbers), content data (e.g., entries in online forms), usage data (e.g., websites visited, interest in content, access times), and meta/communication data (e.g., device information, IP addresses).

The operators of the social media networks generally also process the users' data for market research and advertising purposes. The usage behaviour stored in cookies on the users' computers and the interests of the users can be used by the operators to play interest-based advertising inside and outside the networks. Therefore, we refer to the privacy policies of the respective networks for a detailed presentation of data processing and data subject rights.

We process data in connection with the operation of our presence on various social media networks on the basis of our legitimate economic interest pursuant to Art. 6 Para. 1 Sent. 1 lit. f GDPR for the efficient processing of contact requests and queries and for communication with you, for the needs-based design of our offers, for product information, and for customer care.

Pages can be operated on the following social media networks:

•    Instagram: social network; Service provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA (Parent company: Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland); Website: https://www.instagram.com; Privacy policy: https://instagram.com/about/legal/privacy.

•    Facebook pages: Social network; Service provider: Meta Platforms, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are an EU resident, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We are jointly responsible with Facebook Ireland Ltd. for the collection of data from visitors to our Facebook pages. Facebook and we are each independently responsible for the further processing of the data. This data may include content data (e.g., input in online forms), usage data (e.g., interest in content, access times), and meta/communication data (e.g., device information, IP addresses). Facebook also processes this information in order to provide it to us by way of analysis via so-called "page insights". This provides us with insights into how people interact with our pages and what content is of interest. For this purpose, we have concluded a data protection agreement with Facebook, in which Facebook states the security measures it uses to protect this data and that it complies with the rights of data subjects (e.g. information, deletion). You can access the agreement here: https://www.facebook.com/legal/terms/page_controller_addendum. Further information can be found in the "Page Insights Information": https://www.facebook.com/legal/terms/information_about_page_insights_data; Website: https://www.facebook.com; Privacy policy: https://www.facebook.com/about/privacy.

•    LinkedIn: social network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Website: https://www.linkedin.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

•    Twitter: social network; Service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland; Parent company: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA; Privacy policy: https://twitter.com/privacy, (settings for individualisation and data: https://twitter.com/personalization).

•    Xing: social network; Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany; Website: https://www.xing.de; Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.

•    TikTok: social network; Service provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, Kaleidoscope, 4 Lindsey Street, London, United Kingdom, EC1A 9HP; Website: https://www.tiktok.com; Privacy policy: https://www.tiktok.com/de/privacy-policy.

8. Social media plugins 

So-called plugins from social media networks may also be used on our website. We may use plugins from the following providers: Facebook, Twitter, XING, LinkedIn, Instagram.

We do not use direct plugins from social media networks on our website, but instead use a privacy-friendly alternative in which the social media buttons are merely integrated as links to the pages of the external service providers. With the help of this solution, you can determine yourself whether and when data is transmitted to the operators of the respective social media networks. Therefore, when you call up our website, no data will be automatically transmitted to the above-mentioned social media networks as a matter of principle. Only when you yourself actively click on the respective button do you switch to the website of the social media network and your browser establishes a connection to the servers of the respective social media network. Thereupon, your data can be processed by the operator.

For more information on the purpose and scope of data processing by the plugin provider, please refer to the respective privacy policies of these providers. There you will also receive further information about your rights in this regard and setting options for protecting your privacy.
 

9. Data processing when using our apps  

When using our apps, we process your data in order to provide the functionalities of our apps, as well as to monitor their security and to be able to further develop them. 
If the provision of the functionalities of the apps requires the processing of your data, this serves the fulfilment of contractual obligations. If the provision of the functionalities requires your active authorisation (e.g. by enabling device functions), this is also necessary for the fulfilment of contracts and pre-contractual requests. The legal basis is therefore Art. 6 Para. 1 Sent. 1 lit. b. GDPR or §25 Para. 2 No. 2 TTDSG. Your authorisation to access certain functions of the device used and the data stored in the device may be necessary for the use of the app and its functions under certain circumstances. These authorisations can be granted by users and revoked by default in the settings of the device used. The exact procedure for controlling app permissions in this case depends on the device and the software. By changing the settings in your device (revocation of the respective permissions), it may no longer be possible to fully use all functions of the app.

If you have expressly given us your consent to the processing of the data, then the processing of the data allowed via your consent is based on said consent, Art. 6 Para. 1 Sent. 1 lit. a. GDPR or §25 Para. 1 Sent. 1 TTDSG.

In addition to inventory data (e.g. names, addresses), as well as meta/communication data (e.g. device information, IP addresses), and payment data (e.g. bank details, invoices, payment history), contractual data (e.g. subject matter of the contract, term, customer category) may also be processed.

For the purpose of analysing the use and functionality of the apps as well as storing your individual settings, a universal and unique identifier (UUID) is stored. This identifier is generated when the app is installed (but is not associated with the device), remains stored between the launch of the app as well as its updates, and is deleted when you remove the app from your device.

Our apps are downloaded via special online platforms operated by other service providers (so-called “App Stores"). Therefore, in addition to this Privacy Policy, we also refer to the privacy policies of the respective App Stores. This applies in particular with regard to the procedures used in the App Stores for reach measurement, interest-based marketing, and payment obligations if applicable.

In addition to inventory data (e.g., names, addresses), payment data (e.g., bank details, invoices, payment history), contact data (e.g., e-mail, telephone numbers), and contractual data (e.g., subject matter of contract, term, customer category), the operators of the App Stores may also process usage data (e.g., web pages visited, interest in content, access times) and meta/communication data (e.g., device information, IP addresses) for the provision of contractual services and/or for customer service. The legal basis for this is the fulfilment of the contract and pre-contractual inquiries (Art. 6 Para. 1 Sent. 1 lit. b. GDPR) and, if applicable, legitimate interests (Art. 6 Para. 1 Sent. 1 lit. f. GDPR) and §25 Para. 2 No. 2 TTDSG.

Services used and service providers:
•    Apple App Store: app and software sales platform; Service provider: Apple Inc, Infinite Loop, Cupertino, CA 95014, USA; Website: https://www.apple.com/de/ios/app-store/; Privacy policy: https://www.apple.com/legal/privacy/de-ww/.
•    Google Play Store: app and software sales platform; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; Website: https://play.google.com/store/apps?hl=de; Privacy policy: https://policies.google.com/privacy.

10. Rights of the data subject  

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-a-vis the controller:

•    Right of access by the data subject, Art. 15 GDPR
•    Right to rectification, Art. 16 GDPR
•    Right to erasure, Art. 17 GDPR
•    Right to restriction of processing, Art. 18 GDPR
•    Right to data portability, Art. 20 GDPR
•    Right to object, Art. 21 GDPR.

If you have given us consent pursuant to §25 Para. 1 Sent. 1 TTDSG, Art. 6 Para. 1 lit. a GDPR, or Art. 9 Para. 2 lit. a GDPR, you have the right to revoke this consent at any time. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent up until the revocation.

You also have the right to lodge a complaint with the supervisory authority responsible for our jurisdiction.

In individual cases, the provision of personal data may be required by law (for example, to fulfil tax obligations) or contractually or may be necessary for the conclusion of a contract. In these cases, you are obliged to provide the personal data. Otherwise, it may not be possible to conclude a contract.

11. Changes and retrievability of this Privacy Policy 

Due to changes and adjustments to the offer, legal innovations and, if applicable, subsequently recognized regulatory gaps, changes to this Privacy Policy may become necessary. You can retrieve the current Privacy Policy from any page of this website under the link Privacy Policy.