Privacy Policy of Scopevisio AG

We greatly appreciate your interest in our company. Data protection is of particular importance to the management of Scopevisio AG, Bonn. The use of our websites is generally possible without providing any personal data. However, if an individual wishes to utilize specific services offered by our company through our website, it may be necessary to process personal data. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain the consent of the data subject.

The processing of personal data, such as the name, address, email address, or telephone number of an individual, always occurs in accordance with the General Data Protection Regulation (GDPR) and in compliance with the applicable data protection regulations specific to our organization. Through this privacy policy, we aim to inform the public about the nature, scope, and purpose of the personal data we collect, use, and process. Additionally, this privacy policy serves to enlighten individuals about their rights.

Scopevisio AG, Bonn, as the data controller, has implemented numerous technical and organizational measures to ensure the most comprehensive protection of the personal data processed through this website. However, internet-based data transmissions may have inherent security vulnerabilities, making it impossible to guarantee absolute protection. For this reason, individuals are free to transmit personal data to us through alternative means, such as by telephone.

3. Name and Address of the Data Protection Officer

The data protection officer of the data controller is:

Günter Hilgers
EcoVisio GmbH
Rheinwerkallee 3
53227 Bonn
Email: datenschutz@scopevisio.com

Any individual concerned can contact our data protection officer directly with any questions or suggestions regarding data protection.

4. Contact Details of the Supervisory Authority

The competent supervisory authority for the data controller is:

Name: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Street: Kavalleriestraße 2 – 4
City: 40213 Düsseldorf
Phone: 0211 / 38424-0
Fax: 0211 / 38424-10
Email: poststelle@ldi.nrw.de

6. Collection of General Data and Information¹

With each visit to our website by a data subject or an automated system, a series of general data and information is collected and stored in the server log files. The following data may be collected: (1) types and versions of browsers used, (2) the operating system used by the accessing system, (3) the website from which an accessing system reaches our website (referrer), (4) the subpages accessed via an accessing system on our website, (5) the date and time of access to the website, (6) an Internet Protocol address (IP address), (7) the Internet service provider of the accessing system, and (8) other similar data and information that serve to avert threats in the event of attacks on our information technology systems.

We do not draw any conclusions about the data subject when using this general data and information. Rather, this information is needed to (1) deliver the contents of our website correctly, (2) optimize the contents of our website and its advertising, (3) ensure the permanent functionality of our information technology systems and the technology of our website, and (4) provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack. We evaluate this anonymously collected data and information statistically on the one hand and with the aim of increasing data protection and data security in our company, ultimately to ensure an optimal level of protection for the personal data we process. The anonymous data in the server log files is stored separately from all personal data provided by a data subject.

We also use Local Storage and Session Storage technology (also called “Local Data,” “Local Storage,” and “Session Storage”). With Local Storage, data is stored locally in your browser’s cache and can still be accessed and read even after closing the browser window or exiting the program, unless you actively delete the cache. Local Storage allows your preferences when using our websites to be stored on your computer and used by you. The function of Session Storage corresponds to Local Storage, but the corresponding data is automatically removed from your browser’s cache immediately after closing the browser (“session”).

The data stored in Local Storage and Session Storage cannot be accessed by third parties. They are not disclosed to third parties and are not used for advertising purposes. In particular, this technology is used to present our content to you in an appealing graphical format (e.g., pop-up windows, etc.) and to personalize our offering and navigation on our pages for you. You manage Local Storage content in the browser through the settings for “History” or “Local Data,” depending on the browser you use. If you restrict these functions accordingly, there may be limitations in functionality.

Legal basis for the processing of personal data

Art. 6(1) lit. f GDPR (legitimate interest). Our legitimate interest is to maintain the compatibility and stability of this web application for as many users as possible, including combating abuse and troubleshooting.

Duration of storage

The aforementioned technical data is deleted as soon as it is no longer needed to ensure the compatibility of this web application for all visitors, but no later than 3 months after using the web application. We have no influence on the storage period of data in your Local Storage. You manage Local Storage content in the browser through the settings for “History” or “Local Data,” depending on the browser you use. If you restrict these functions accordingly, there may be limitations in functionality.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as the requests you send to us as the site operator, this page uses SSL or TLS encryption. You can recognize an encrypted connection by the change in the address line of the browser from “http://” to “https://” and the lock symbol in your browser’s address bar.

When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

7. Scope and Purpose of Data Collection

7.1 Scopevisio Websites – General

When requesting a webpage or accessing a file through a web browser, the following data is stored:

• The requested webpage or file,
• Date and time of the request,
• The amount of data transferred,
• Description of the web browser type and operating system used,
• IP address of the requesting computer.

This information is used to optimize the Scopevisio websites and to log any attacks on our services via the internet.

The mentioned data is automatically deleted after one year or by employees of Scopevisio AG.

7.2 Scopevisio Websites – Accounting Services

During registration for the accounting services provided by Scopevisio AG, the following mandatory data is stored:

• User’s email address,
• Company name,
• User’s first and last name,
• Postal code,
• City,
• Industry in which the company operates,
• Legal form of the company,
• Number of employees in the company,
• Estimated number of monthly accounting documents.

Scopevisio AG uses this data to connect the user with a partner who can perform the selected accounting service. The above-mentioned information is shared with the selected partner for this purpose.

Scopevisio AG is authorized to collect, store, and share this data with a partner for the purpose of facilitating the accounting service if this usage is specifically indicated on the respective websites.

7.3 Scopevisio Websites – Contact Forms, Support Inquiries, and Webinars

Scopevisio websites provide the option to contact Scopevisio AG in general, submit inquiries to the Scopevisio AG support, or register for webinars. The following mandatory data is stored for these purposes:

• Email address,
• Free text (only for contact forms and support inquiries),
• Phone number (only for webinars).

This data is used by Scopevisio AG to respond to inquiries or provide webinar schedules.

7.4 Scopevisio Websites – Contact Forms

The data stored in individual cases corresponds to the fields provided in the forms and is directly visible from the forms. Data will only be disclosed to third parties with the consent of the respective user.

7.5 Scopevisio Software – Registration

During registration for Scopevisio software via the website, the user’s email address is stored. The password entered during registration for Scopevisio software is stored in an encrypted form and cannot be decrypted by Scopevisio AG.

Scopevisio AG expressly informs that the email addresses of all active (i.e., not deleted) users are used to send notifications regarding the availability of our contractually assured services to these users, such as maintenance schedules. Since these are contractually relevant information, it is not possible to unsubscribe from these notifications.

7.6 Scopevisio Software

Various server-side actions can be executed during the request or storage of data to read, store, and process the data before sending a transmission or response to the user’s computer. The following data is stored as part of these actions:

• Type of action to be executed and any automatically executed actions,
• Date and time of the start and completion of all executed actions,
• Customer number used,
• User’s login name used,
• ID of the user session used,
• Amount of data transferred from the user’s computer to Scopevisio AG servers and vice versa,
• Type and quantity of requested data but not the content,
• IP address of the computer.

This data is stored on Scopevisio AG servers for a maximum period of one year and is automatically deleted thereafter or by employees of Scopevisio AG. It is used to optimize Scopevisio services, capacity planning, identify misuse, and potential errors in the Scopevisio software (bugs).

In addition to the above-mentioned data, all data entered directly by users of the Scopevisio software is stored on Scopevisio AG servers for the duration of the contractual relationship. This data is not used by Scopevisio AG.

Authorized users can request the deletion of all data entered by themselves in the Scopevisio software in writing to the addresses listed under 2). Scopevisio AG expressly states that in this case, the contractual performance by Scopevisio AG is no longer possible, and there is no entitlement to compensation or refund of any payments already made for the contractual performance.

7.7 Customer Database

Scopevisio AG maintains an internal customer database where all relevant customer-related events and notes are stored, including:

• Customer number,
• Company name,
• Company address,
• Email addresses of all active (i.e., not deleted) users,
• Names of all active (i.e., not deleted) users,
• Notes on phone calls,
• Billing information,
• Statistical information about usage.

This data is used to optimize customer support and sales services provided by Scopevisio AG. Additionally, statistical analysis of this data is used to optimize the scope of Scopevisio services. This data is not shared with third parties.

Users can request the deletion of this data in writing to the addresses listed under 2).

7.8 Cooperation Partners

Personal data collected by Scopevisio AG may be shared with cooperation partners for the purpose stated above with the declared consent of the user. A list of our cooperation partners can be found linked below. https://public.teamwork.scopevisio.com

These partners are not included in this privacy policy and may collect and use additional data beyond the control of Scopevisio AG.

7.9 Extended Data Usage

With the documented consent of the user for “extended data processing,” Scopevisio AG is authorized to collect, process, and use personal data as well as profile data and demographic data for the purpose of optimizing Scopevisio services. With the user’s consent, Scopevisio AG is not obliged to delete usage data as soon as possible, but is allowed to store it.

Furthermore, with the user’s consent, Scopevisio AG is authorized to share their personal data with cooperation partners for the purpose of advertising, market research, providing information about products and services, delivering offers for service contracts, and providing further information tailored to the user’s interests through a newsletter.

Consent is given by ticking the corresponding checkbox. The granted consent is logged and can only be revoked by a written request from the user to the address listed under 2).

Our website contains information that enables quick electronic contact with our company as well as direct communication with us, including a general email address (email address). If a data subject contacts the data controller via email or through a contact form, the personal data transmitted by the data subject is automatically stored. Such personal data voluntarily provided by a data subject to the data controller is stored for the purpose of processing or contacting the data subject. This personal data will not be disclosed to third parties.

9. Newsletter Tracking

Our newsletters contain tracking pixels, also known as web beacons. A tracking pixel is a miniature graphic embedded in such emails that are sent in HTML format to enable log file recording and log file analysis. This allows for statistical evaluation of the success or failure of online marketing campaigns. By means of the embedded tracking pixel, we can recognize whether and when an email was opened by a data subject, and which links contained in the email were accessed by the data subject.

Personal data collected via tracking pixels included in the newsletters is stored and analyzed by the data controller to optimize the newsletter delivery and better tailor the content of future newsletters to the interests of the data subject. This personal data is not disclosed to third parties. Data subjects have the right to revoke their separate consent given through the double opt-in procedure at any time. After revocation, the personal data collected via tracking pixels will be deleted by the data controller. Unsubscribing from the newsletter is automatically interpreted as a revocation.

11. Rights of the Data Subject

1. Right to Information

   You have the right to obtain from us at any time confirmation as to whether or not personal data concerning you is being processed, pursuant to Article 15 of the GDPR.

2. Right to Rectification

   You have the right to request the rectification of inaccurate personal data concerning you without undue delay, according to Article 16 of the GDPR.

3. Right to Restriction of Processing

   You have the right to obtain the restriction of processing if certain conditions are met, as stated in Article 18 of the GDPR.

4. Right to Erasure

   You have the right to request the erasure of personal data concerning you without undue delay if the data is no longer necessary for the purposes for which it was collected or processed, as outlined in Article 17 of the GDPR. However, this right may be limited by other legal obligations (e.g., retention obligations).

5. Right to Notification

   If you have exercised your right to erasure, rectification, or restriction of processing of your personal data, we are obliged to communicate any such rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort, as specified in Article 19 of the GDPR. You also have the right to be informed about these recipients.

6. Right to Data Portability

   You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance, as described in Article 20 of the GDPR, provided that certain conditions are met.

7. Right to Object

   You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you, including profiling based on these provisions, as outlined in Article 21 of the GDPR. We will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims. If personal data is processed for direct marketing purposes, you have the right to object to such processing at any time, as stated in Article 21(2) of the GDPR.

   You may exercise your right to object by contacting us directly. You also have the right to object to the use of automated decision-making processes.

8. Right to Withdraw Consent

   If the processing of personal data is based on your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

9. Right to Lodge a Complaint with a Supervisory Authority

   Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of personal data relating to you violates the GDPR.

14. Data protection regulations for the deployment and use of the Facebook Pixel, Facebook Custom Audiences and Facebook Conversion

Within our online offer, the so-called “Facebook pixel” of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland, a company of Meta Platforms Inc, 1 Meta Way, Menlo Park, California 94025-1453, USA (“Facebook”), is used.

With the help of the Facebook pixel, it is possible for Facebook, as a visitor to our online offer, to determine the target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the Facebook pixel to only display the Facebook ads we have placed to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which are based on the visited website). websites are determined), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and are not annoying. With the help of the Facebook pixel, we can further understand the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”). We only receive statistical data from Facebook without reference to a specific person. This allows us to measure the effectiveness of Facebook ads for statistical and market research purposes. In particular, if you are logged in to Facebook, we also refer to their data protection information https://www.facebook.com/about/privacy/. We only receive statistical data from Facebook without reference to a specific person. This allows us to measure the effectiveness of Facebook ads for statistical and market research purposes. In particular, if you are logged in to Facebook, we also refer to their data protection information https://www.facebook.com/about/privacy/. We only receive statistical data from Facebook without reference to a specific person. This allows us to measure the effectiveness of Facebook ads for statistical and market research purposes. In particular, if you are logged in to Facebook, we also refer to their data protection information https://www.facebook.com/about/privacy/.

Facebook’s privacy policy
The processing of data by Facebook takes place within the framework of Facebook’s data usage guidelines. Accordingly, general information on the display of Facebook ads in Facebook’s data usage guidelines . Specific information and details about the Facebook pixel and how it works can be found in the Facebook help area .

Legal basis for the processing of personal data
The storage of “Facebook pixel cookies” and the use of this tool are based on your consent as part of consent management. The processing takes place exclusively on the basis of Art. 6 (1) (a) GDPR. You can revoke or change your consent at any time in the consent management.

transfer
When you visit our website, it is conceivable that some of the information collected will also be processed outside the European Union by Facebook Inc. based in the USA. We would like to point out that the USA is rated by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. In this respect, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without the possibility of legal remedies. You decide yourself in the consent management of the Facebook page whether you want to agree to a transfer or not. In such a case, your data will be transmitted on the basis of your consent to the use of Facebook in accordance with Article 6(1)(a) in conjunction with Article 49(1)(a) GDPR,

Possibilities of objection
Facebook users can influence the extent to which their user behavior may be recorded under the settings for advertising preferences. The Facebook settings , the consent management on our homepage or the form for the right of objection offer further options . Processing of information using the cookies used by Facebook can also be prevented by not allowing cookies from third parties or those from Facebook in your own browser settings.

Order processing contract
For the processing of data for which Facebook acts as the processor, we have concluded an order processing contract with Facebook, in which we oblige Facebook to protect our customers’ data and not to pass it on to third parties.

15. Privacy Policy for the Use of Google Analytics 4

If you have given your consent, this website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Scope of Processing

Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by the cookies about your use of this website is generally transmitted to a Google server in the USA and stored there.

We use Google Signals, which collects additional information about users who have enabled personalized ads (interests and demographic data) in Google Analytics, and ads can be delivered to these users in cross-device remarketing campaigns.

In Google Analytics 4, IP addresses are anonymized by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. During your website visit, your user behavior is recorded in the form of “events.” Events can include:

• Page views
• First visit to the website
• Session start
• Your click path, interaction with the website
• Scrolls (every time a user scrolls to the end of a page (90%))
• Clicks on external links
• Internal search queries
• Interaction with videos
• File downloads
• Viewed/clicked ads
• Language settings

Additionally, the following information is collected:

• Your approximate location (region)
• Your IP address (in truncated form)
• Technical information about your browser and devices used (e.g., language settings, screen resolution)
• Your internet service provider
• The referrer URL (the website/advertisement through which you accessed this website)

Purposes of Processing

Purposes of Processing On behalf of the operator of this website, Google will use this information to evaluate your pseudonymous use of the website and compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.

Recipients

Recipients of the data may include

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a data processor under Article 28 of the GDPR)
• Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
• Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA

It cannot be ruled out that US authorities may access the data stored by Google.

Transfer to Third Countries

Insofar as data is processed outside the EU/EEA and there is no data protection level that corresponds to the European standard, we have entered into EU standard contractual clauses with the service provider to ensure an adequate level of data protection. The parent company of Google Ireland, Google LLC, is located in California, USA. The transfer of data to the USA and access by US authorities to the data stored by Google cannot be ruled out. The parent company of Google Ireland, Google LLC, is located in California, USA. Therefore, it cannot be excluded that Google also processes your personal data in the USA. We would like to inform you that the European Court of Justice has classified the USA as a country with an inadequate level of data protection according to EU standards. There is therefore a risk that your data may be processed by US authorities for control and surveillance purposes, possibly without any legal remedies on your part. By consenting to the use of Google Analytics 4 in the consent management, you also consent to such a transfer to the USA. In such a case, the transfer is based on your consent to the use of Google cookies pursuant to Art. 6(1)(a) in conjunction with Art. 49(1)(a) of the GDPR, as it cannot be ruled out that data transfer to the USA will occur when consenting to the use of Google cookies.

Data Retention

The data sent by us and associated with cookies will be automatically deleted after 14 months. Data whose retention period has expired will be automatically deleted once a month.

Legal Basis

The legal basis for this data processing is your consent in accordance with Art. 6(1)(a) of the General Data Protection Regulation (GDPR) in conjunction with Art. 49(1)(a) of the GDPR.

Revocation

You can revoke your consent at any time with effect for the future by accessing the cookie settings [https://www.scopevisio.com/cookies/] and changing your selection. The lawfulness of the processing carried out based on the consent until the revocation remains unaffected.

You can also prevent the storage of cookies in advance by adjusting your browser software settings accordingly. However, please note that if you configure your browser to reject all cookies, there may be limitations on functionality on this and other websites. You can also prevent the collection of data generated by the cookie related to your use of the website (including your IP address) and the processing of this data by Google by:

a. Not giving your consent to the setting of the cookie, or
b. Downloading and installing the browser add-on for disabling Google Analytics here.

For more information on the terms of use of Google Analytics and data privacy at Google, please visit https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en.

16. Google Ads (formerly Google AdWords)

16.1 Google Ads Conversion

This website uses Google AdWords, an online advertising program provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

As part of Google AdWords, we use the Conversion Tracking feature. We use Google Ads Conversion to display advertisements (known as Google Ads) on external websites to draw attention to our attractive offers. We track the interest in displaying advertising that is of interest to you, making our website more interesting to you, and achieving a fair calculation of advertising costs. When you click on an ad served by Google, a conversion tracking cookie is set. If the user visits certain pages of this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. The information obtained through the use of conversion cookies is used to create conversion statistics for AdWords customers who have opted for conversion tracking. We learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that personally identifies users.

We do not collect or process any personally identifiable information in the mentioned advertising measures.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and inform you according to our knowledge: By including Ads Conversion, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will obtain and store your IP address.

Google AdSense also uses so-called web beacons. A web beacon is a miniature graphic embedded in web pages to enable log file recording and analysis, allowing a statistical evaluation to be conducted. By using the embedded web beacon, Alphabet Inc. can recognize if and when a web page was opened by an affected person and which links were clicked on by the affected person. Web beacons are used, among other things, to evaluate visitor flow on a website.

Legal basis of processing:
The storage of “Google cookies” and the use of this tool are based on your consent within the consent management framework. The processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR.

Data transfer:
Google processes your personal data in the USA as well. We would like to point out that the USA has been assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. There is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without legal recourse on your part. In such a case, the transfer is based on your consent to the use of Google cookies in accordance with Art. 6(1)(a) in conjunction with Art. 49(1)(a) GDPR, as the use of Google cookies always involves the transfer of data to the USA.

Objection to data collection:
If you do not wish to participate in tracking, you can prevent this by easily deactivating the Google Conversion Tracking cookie via your internet browser ‘s user settings. You will then not be included in the Conversion Tracking statistics.
For more information on how Google AdWords and Google Conversion Tracking handle user data, please refer to Google’s privacy policy: https://www.google.com/policies/privacy/.
You can configure your browser to inform you about the placement of cookies and to allow cookies only in individual cases, to block the acceptance of cookies for specific cases or in general, and to activate the automatic deletion of cookies when closing your browser. If cookies are deactivated, the functionality of this website may be limited.

Data retention period:
These cookies expire after 30 days and do not serve to personally identify users.

16.2 Google Ads Remarketing

We use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with interest-based advertisements on other websites within the Google advertising network (in the Google search or on YouTube, so-called “Google Ads” or on other websites). For this purpose, the user’s interaction on our website is analyzed, e.g., which offers the user is interested in, to display targeted advertising to the user even after visiting our website. Google stores a number in the browsers of users who visit certain Google services or websites in the Google Display Network.

These cookies are used to record visits by these users. The cookies are used to uniquely identify a web browser on a particular device and do not identify individuals.

Legal basis of processing:
The storage of “Google remarketing cookies” and the use of this tool are based on your consent within the consent management framework. The processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR. You can revoke or change your consent at any time in the consent management.

Objection to data collection:
You can prevent participation in this tracking process in various ways:
a) by adjusting your browser software settings, in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;
b) by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin;
c) by deactivating interest-based ads from providers that are part of the self-regulatory campaign “About Ads” via the link https://www.aboutads.info/choices, with this setting being deleted if you delete your cookies;
d) by permanently deactivating it in your browsers Firefox, Internet Explorer, or Google Chrome using the link https://www.google.com/settings/ads/plugin;
e) through the corresponding cookie settings in the consent management of our website.
We would like to point out that in this case, you may not be able to use all functions of this website to their full extent.

Data retention period:
Up to 180 days (for cookies used through this website).

17. Google Consent Mode V2

Under the Digital Markets Act (DMA), companies such as Google – like other gatekeepers – are obliged to obtain user consent for data collection and processing and to provide evidence of this to the legislator. This consent is required before user data is processed for the purposes of personalised advertising. In this case, the obligation to obtain consent is based on Art. 5 para. 2 lit. b DMA.

Gatekeepers are companies that occupy a dominant market position with their platform service. Google holds such a dominant position in the online advertising market.

In the context of “classic” consent management, you as a user give your consent primarily to us as the website operator. The consents relate to the use of your data and cookies. These consents are obtained via the website’s consent management system. This does not change with the new consent mode of Google Analytics.

With the DMA, your consent must also be given to Google. Google makes this process simple and transfers the responsibility for obtaining consent directly to us as the website operator.

With Consent Mode, Google has created an interface between our opt-in procedure and Google Analytics so that your consent also applies to Google.

Google distinguishes between a simple and an extended implementation. The two variants differ in terms of tag behaviour. In the simple implementation, Google tags are blocked until you have consented to their use. In the extended implementation, Google tags are loaded before the dialogue for obtaining consent is displayed. The tags send pings without cookies if no cookie consent has been given. Google Analytics is executed in this case, sends reduced data, but does not set any cookies.

Google code is executed and sends a “ping” with a unique “ping ID” (a number generated only for the respective page request). Google also has access to automatically transmitted information such as IP address, browser details, system and the URL visited. With the extended implementation of the consent mode, it is not possible to analyse user behaviour in a coherent context. Without cookies, Google cannot track the activities of website visitors across multiple websites. In this case, visits to different pages appear to Google Analytics as the activities of different users (as a separate ping ID is created for each visit, which is used to track the visit to a website).

Nevertheless, it is possible for Google in extended mode, even without the user’s consent, to determine whether website visitors have reached the website via a Google advert (Google uses so-called “conversion IDs” for this purpose).

In order to rule out data protection problems in connection with a possible need for consent, we have decided to implement “server-side tracking”. This refers to the collection of user data without data being transmitted directly from the user’s browser to Google. This happens in the following steps:

• The website operator collects data that users send to the server. This includes IP address, referrer URL, URLs visited and time.
• The collected data is stored as a “digital fingerprint” and pseudonymised. It is important that the user ID, which is generated when a ping is sent to Google, is also removed, as it can enable a direct assignment to a user.
• Only the pseudonymised data is then transmitted to Google.

18. Google Fonts

To display our content correctly and graphically appealing across browsers, we use “Google Fonts” from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”) to display fonts on our website. We have locally integrated this script library on our web server so that no connection is made to Google and no “Google cookie” is set when our website is accessed.

Legal basis of processing:

The legal basis for the integration of Google Fonts is our legitimate interest in accordance with Art. 6(1)(f) GDPR in a correct and visually appealing presentation of the website. Since we have locally integrated the script library on our own web server, there is no data transfer to Google. Therefore, no explicit consent is required from you for the use of Google Fonts.

Data disclosure:

The local integration of the script library on our web server does not involve any data disclosure to third parties.

Data retention period:

By locally integrating the script library on our server, we do not collect any personal data.

19. LinkedIn Analytics (LinkedIn Ads)

We use “LinkedIn Ads” on our website, a service provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”). LinkedIn Analytics stores and processes information about your user behavior on our website, including the use of cookies.

We use LinkedIn Ads for marketing and optimization purposes, particularly to analyze the usage of our website and continuously improve individual features, offerings, and the user experience. By analyzing user behavior statistics, we can enhance our offerings and make them more interesting for you as a user.

You can prevent the installation of cookies by deleting existing cookies and disabling the storage of cookies in your web browser settings. Please note that in this case, you may not be able to fully utilize all features of our website. You can also prevent LinkedIn from collecting the aforementioned information by setting an opt-out cookie on one of the following linked websites:

Legal basis of processing:
The storage of “LinkedIn Analytics cookies” and the use of this tool are based on your consent as part of the consent management. The processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR. You can revoke or change your consent at any time in the consent management.
You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, reject cookies in certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.

Data disclosure:
When you visit our website, it is possible that some of the collected information may be processed outside the European Union by LinkedIn Corporation based in the USA. We would like to inform you that the USA has been assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without any legal remedies on your part. You can decide in the consent management whether you want to consent to such a transfer or not. The transmission of your data is based on your consent to the use of LinkedIn cookies pursuant to Art. 6(1)(a) in connection with Art. 49(1)(a) GDPR, as the use of LinkedIn cookies always involves a transfer of data to the USA.

We do not disclose personal data ourselves.

Objection options:
LinkedIn users can influence the extent to which their user behavior is recorded when visiting our LinkedIn page in the advertising preferences settings. LinkedIn provides further options in the settings within the LinkedIn account as well as through the consent management of the fan page. The processing of information through the use of LinkedIn’s cookies can also be prevented by not allowing third-party cookies or cookies from LinkedIn in your browser settings. Please note that in this case, you may not be able to fully utilize all features of our website. You can also prevent LinkedIn from collecting the aforementioned information by setting an opt-out cookie on one of the following linked websites:

• https://www.linkedin.com/
• https://optout.about ads.info
• https://www.youronlinechoices.com/

20. Privacy Policy for the Use of YouTube¹

We have embedded YouTube videos on our website in order to present interesting videos directly on our site. YouTube is a video portal that has been a subsidiary of Google LLC since 2006. The video portal is operated by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA.

These videos are all embedded in “privacy-enhanced mode,” which means that no data about you as a user is transmitted to YouTube unless you play the videos. Only when you play the videos, the data mentioned in the next paragraph is also transmitted in privacy-enhanced mode. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in Section 2 of this statement is transmitted. This happens regardless of whether YouTube provides a user account that you are logged into or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want this assignment to your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for purposes of advertising, market research, and/or personalized website design. Such evaluation takes place in particular (even for users who are not logged in) to provide customized advertising and to inform other users of the social network about your activities on our website. You have a right to object to the creation of these user profiles, although you must contact YouTube to exercise this right.

Legal basis of processing:
The storage of “YouTube cookies” and the use of this tool are based on your consent – by actively watching the video. The processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR. You can revoke or change your consent at any time in the consent management of the website.
You can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, reject cookies in certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.

Data disclosure:
It is possible that some of the information collected may be processed outside the European Union by YouTube Inc. or Google Inc. based in the USA. We would like to inform you that the USA has been assessed by the European Court of Justice as a country with an insufficient level of data protection according to EU standards. There is therefore a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without any legal remedies on your part. You can decide in the consent management whether you want to consent to such a transfer or not. The transmission of your data is based on your consent to the use of YouTube cookies pursuant to Art. 6(1)(a) in connection with Art. 49(1)(a) GDPR, as the consent to the use of Google cookies always involves a transfer of data to the USA.
We do not disclose personal data ourselves.

Objection options:
YouTube users can influence to what extent their user behavior is recorded when visiting our LinkedIn page in the advertising preference settings. For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and options for protecting your privacy: https://www.google.com/intl/en/policies/privacy.
The processing of information using the YouTube cookie can be prevented by not allowing third-party cookies or cookies from LinkedIn in your browser settings. Please note that in this case, you may not be able to use all the functions of our website to their full extent.
For more information on the purpose and scope of data collection and its processing by YouTube, please refer to the privacy policy. There you will also find further information on your rights and options for protecting your privacy: https://www.google.com/intl/en/policies/privacy.

^{1. This translation is provided for informational purposes only. In case of any discrepancies, the original German text prevails.}

21. HubSpot

We use the services of HubSpot Germany GmbH, Am Postbahnhof 17, 10243 Berlin, and its subcontractors HubSpot Inc., 2nd Floor, 30 Wall Quay, Dublin 1, Ireland, and HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA, on this website.
HubSpot is an integrated software solution that enables us to cover various aspects of our online marketing. This includes, among other things:

• Email marketing
• Social media publishing & reporting
• Reporting
• Contact management (e.g., user segmentation & CRM)
• Landing pages
• Contact forms

This software is used in the field of inbound marketing and helps us coordinate and optimize our marketing strategy by means of statistical analysis and evaluation of logged user behavior. We also use HubSpot to create websites and as a technology for sending newsletters. In this process, we collect personal data that you voluntarily provide to us, such as contact details. We use the information you enter solely for personalization and to adapt the content to the interests of the readers. This information also helps us improve our offering to provide you with a better customer experience. We do not disclose the data to third parties without your express consent.

Legal basis of processing:
The storage of “HubSpot cookies” and the use of this tool are based on your consent within the consent management framework. The processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR. You can revoke or change your consent at any time in the consent management.
In addition, you can configure your browser to inform you about the setting of cookies, allow cookies only in individual cases, reject cookies in certain cases or generally, and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.
For more information, please refer to the terms of use and privacy policy of HubSpot Inc. at www.hubspot.com/terms-of-service and www.hubspot.com/privacy-policy. If you do not wish the information about your visit to be used for the purposes described, you can inform us at any time by email or postal mail. All information collected by us is subject to this privacy policy.
The sending of newsletters via HubSpot is based solely on your consent within the framework of the so-called double opt-in (Art. 6(1)(a) GDPR).

Data disclosure:
Some of the information collected may also be processed by HubSpot Inc. located in the USA outside the European Union. We would like to inform you that, according to the European Court of Justice, the USA is considered a country with an insufficient level of data protection according to EU standards. Therefore, there is a risk that your data may be processed by US authorities for control and monitoring purposes, possibly without any legal remedies. You can decide within the consent management whether you want to consent to such a transfer or not. The transmission of your data is based on your consent to the use of HubSpot pursuant to Art. 6(1)(a) in connection with Art. 49(1)(a) GDPR, as the consent to the use of HubSpot always involves a transfer of data to the USA.
In addition, the processing of personal data and its security are ensured through the use of standard contractual clauses, which ensure that the processing meets a level of security equivalent to that of the GDPR.
We do not disclose personal data ourselves.

22. Legal basis of processing¹

Unless otherwise specified:

Article 6(1)(a) of the GDPR serves as the legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, such as processing operations necessary for the delivery of goods or the provision of services, the processing is based on Article 6(1)(b) of the GDPR. The same applies to processing operations that are necessary for carrying out pre-contractual measures, such as inquiries about our products or services. If our company is subject to a legal obligation that requires the processing of personal data, such as for fulfilling tax obligations, the processing is based on Article 6(1)(c) of the GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor to our premises were injured and his or her name, age, health insurance data, or other vital information would need to be passed on to a doctor, hospital, or other third party. In that case, the processing would be based on Article 6(1)(d) of the GDPR.

Finally, processing operations may be based on Article 6(1)(f) of the GDPR. This legal basis applies to processing operations that are not covered by any of the aforementioned legal bases if the processing is necessary to safeguard the legitimate interests pursued by our company or by a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not outweigh such interests. Such processing operations are permitted to us in particular because they have been specifically mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a customer of the data controller (Recital 47, sentence 2 of the GDPR).

23. Legitimate interests pursued by the controller or a third party

If the processing of personal data is based on Article 6(1)(f) of the GDPR, our legitimate interest is the conduct of our business activities for the benefit of the well-being of all our employees and shareholders.

25. Legal or contractual provisions for the provision of personal data; necessity for the conclusion of the contract; obligation of the data subject to provide personal data; possible consequences of non-provision¹

We inform you that the provision of personal data may be required by law (e.g., tax regulations) or may result from contractual obligations (e.g., information about the contractual partner). In some cases, it may be necessary for a data subject to provide us with personal data that must subsequently be processed by us. The data subject, for example, may be obligated to provide us with personal data when our company enters into a contract with them. Failure to provide the personal data would mean that the contract with the data subject could not be concluded. Before providing personal data, the data subject must contact one of our employees. Our employee will inform the data subject on a case-by-case basis whether the provision of personal data is legally or contractually required, whether there is an obligation to provide the personal data, and what the consequences would be if the personal data were not provided.