Data privacy statement

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

Viscotec Pumpen-u. Dosiertechnik GmbH
Amperstraße 13
84513 Töging a. Inn
Deutschland
08631/9274-0
mail@viscotec.de
www.viscotec.de

The data protection officer of the controller is

DataCo GmbH
Nymphenburger Str. 86
80636 München
Deutschland
+49 89 7400 45840
www.dataguard.de

On this page we inform you about the processing of your personal data on the website.
How we collect and use your personal data depends on how you interact with us or which services you use. We only collect, use or share your personal data if we have a legitimate purpose and a legal basis for doing so.

What do we mean by legal basis?

Consent (Art. 6 para. 1 sentence 1 lit. a GDPR) – You have given us your consent to process your personal data for the specific purpose that we have explained to you. You have the right to withdraw your consent at any time. For more information on how you can withdraw your consent, please refer to the subsections “Exercising your rights” in the following sections of this Privacy Policy.

Contract (Art. 6 para. 1 sentence 1 lit. b GDPR) – We need to use your data to fulfil a contract you have with us. Alternatively, it is necessary to use your data because we have asked you to do so or you have taken certain steps yourself before entering into this contract.

Legal obligation (Art. 6 para. 1 sentence 1 lit. c GDPR) – We must use your data to comply with the law.

Vital interests (Art. 6 para. 1 sentence 1 lit. d GDPR) – The processing of your data is necessary to protect your vital interests or those of another person. For example, to protect you from serious physical harm.

Public task (Art. 6 para. 1 sentence 1 lit. e GDPR) – The processing of your data is necessary for the performance of a task carried out in the public interest or because it is covered by a task defined by law, e.g. for a statutory function.

Legitimate interests (Art. 6 para. 1 sentence 1 lit. f GDPR) – The processing of your data is necessary to support a legitimate interest that we or another party have, only if your own interests do not prevail.

Please note that we may not be able to provide you with our website services if your data is processed to fulfil a contract or a legal obligation and you do not provide the requested data.

As explained in this Privacy Policy, we use various service providers to help us provide our services and ensure the security of your data. When we use these service providers, it is necessary for us to share your personal data with them.

We have concluded agreements with all service providers to whom we pass on your data, which oblige them to protect your data.

If your personal data is transferred outside the EU, we will ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an “adequate” standard of data protection according to the European Commission, or by applying another safeguard, such as an enhanced contractual arrangement, i.e. the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, when we use US service providers, we rely on either the SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have entered into with our service providers by sending an email to the email address provided in this Privacy Policy.

Right to rectification (Art. 16 GDPR) If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. The right to information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed; if this is the case, you have a right to information about this data and to the following information:

• Processing purposes
• Categories of personal data
• Recipients or categories of recipients
• Planned storage duration or the criteria for determining this duration
• the existence of the rights to rectification, erasure, restriction or objection
• Right to lodge a complaint with the competent supervisory authority
• If applicable, origin of the data (if collected from a third party)
• If applicable, the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the expected effects
• If applicable, transfer of personal data to a third country or international organisation

2. Right to rectification (Art. 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

3. Right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request that the processing of your personal data be restricted:

• You contest the accuracy of your personal data for a period enabling us to verify the accuracy of the personal data.
• In the event of unlawful processing, you object to the erasure of the personal data and instead request the restriction of the use of the personal data.
• We no longer need your personal data for the purposes of processing, but you need your personal data for the establishment, exercise or defence of legal claims or, after you have objected to processing, for the period necessary to verify whether our legitimate grounds override your grounds.

4. Right to erasure (“right to be forgotten”) (Art. 17 GDPR)

If one of the following reasons applies, you have the right to demand that your personal data be deleted immediately:

• Your data are no longer necessary for the processing purposes for which they were originally collected.
• You withdraw your consent and there is no other legal basis for the processing.
• You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) GDPR.
• Your personal data is processed unlawfully.
• The deletion is necessary to fulfil a legal obligation under Union law or the law of the member state to which we are subject.
• The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

Please note that the above reasons do not apply if the processing is necessary:

• To exercise the right to freedom of expression and information.
• For compliance with a legal obligation or for the performance of a task carried out in the public interest to which we are subject.
• For reasons of public interest in the area of public health.
• For archiving purposes in the public interest, scientific or historical research purposes or statistical purposes.
• For the establishment, exercise or defence of legal claims.

5. Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

6. Right to object to certain data processing (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

A list of the locally competent supervisory authorities in Germany can be found on the website of the Federal Commissioner for Data Protection at the following link: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

1. Description and scope of data processing

• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites that are accessed by the user’s system via our website

2. Purpose of data processing

3. Legal basis for data processing

4. Duration of storage

5. Exercising your rights

1. Description and scope of data processing

• Language settings
• Search terms entered
• Frequency of page views

• IP address
• Location of Internet users
• Tracking of surfing behaviour

2. Purpose of data processing

• Memorising search terms
• Functionality of the website

3. Legal basis for data processing

4. Exercising your rights

1. Description and scope of data processing

• Email address
• Last name
• First name
• Your address
• Salutation
• Industry

2. Purpose of data processing

3. Legal basis for data processing

4. Duration of storage

5. Exercising your rights

1. Description and scope of data processing

2. Purpose of data processing

3. Legal basis for data processing

4. Duration of storage

5. Exercising your rights

1. Description and scope of data processing

• Salutation
• Title of salutation
• Gender
• Last name
• First name
• Your address
• Phone/mobile number
• Email address
• Salary expectations
• Background to application
• Details of training and education
• Curriculum vitae
• Certificates
• Photo

2. Purpose of data processing

3. Legal basis for data processing

4. Duration of storage

5. Exercising your rights

• Information about products
• Information about services
• Advertising

• Information about products
• Information about services
• Advertising

1. Scope of data processing

The company website is used for applications, information/PR and active sourcing. We have no information on the processing of your personal data by the companies jointly responsible for the company website. Further information can be found in the privacy policy of:

• LinkedIn
• XING

We provide information on our website and offer users the opportunity to communicate.

The company website is used for applications, information/PR and active sourcing.

We have no information on the processing of your personal data by the companies jointly responsible for the company website. Further information can be found in the privacy policy of:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy

XING:

https://privacy.xing.com/de

If you carry out an action on our company website (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public.

2. Legal basis for data processing

The legal basis for the processing of personal data for the purpose of communicating with customers and interested parties is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest here is to respond to your inquiry in the best possible way or to be able to provide the requested information.

If the contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

3. Purpose of data processing

Our company website serves to inform users about our services. Every user is free to publish personal data through activities.

4. Duration of storage

The data generated by the company website is not stored in our own systems.

5. Exercising your rights

You can object to the processing of your personal data that we collect in the context of your use of our corporate presence at any time and assert your rights as a data subject as set out in the “Your rights” section of this privacy policy. To do so, please send us an informal email to the email address stated in this privacy policy.

Further information on exercising your rights can be found here:

LinkedIn:

https://www.linkedin.com/legal/privacy-policy

XING:

https://privacy.xing.com/en

The website is hosted on servers of a service provider commissioned by us.

Our service provider is:

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is

• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• Date and time of access
• Websites from which the user’s system accesses our website
• Websites that are accessed by the user’s system via our website

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest in processing this data is to display our website without errors and to optimize its functions.

The website server is geographically located in Germany.

We use the IP address and other information provided by the user (in particular the zip code during registration or ordering) to address regional target groups (so-called “geotargeting”).

Regional targeting is used, for example, to automatically display regional offers or advertising that are often more relevant to users. The legal basis for the use of the IP address and any other information provided by the user (in particular zip code) is Article 6(1)(f) GDPR, based on our interest in ensuring a more precise target group approach and thus providing offers and advertising that are more relevant to users.

Part of the IP address and the additional information provided by the user (in particular the zip code) is only read out and not stored separately.

You can prevent geotargeting by using a VPN or proxy server, for example, which prevent precise localization. In addition, depending on the browser you are using, you can also deactivate location localization in the corresponding browser settings (if supported by the respective browser).

We use geotargeting on our website for the following purposes:

• Geoblocking

We use various service providers to provide the services we offer on the Website.

In general, we have a legitimate interest in sharing your data with the relevant service providers if these services are essential for the provision of the basic service offered on the website in order to provide the relevant website service.

If such services are required for additional services, extended functions or additional purposes, your personal data will only be shared with service providers if you give your consent.

You can withdraw your consent to the use of integrated third-party services and manage your consent settings at any time here: https://www.viscotec.de/datenschutzerklaerung/

Use of Google Ads

1. Scope of the processing of personal data

We use Google Ads from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). We use this service to place adverts. Google places a cookie on your computer. This allows personal data to be stored and analysed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them) and also data from advertising partners (in particular pseudonymised user IDs).
Further information on the processing of data by Google can be found here:
https://policies.google.com/privacy?hl=en

2. Purpose of data processing

We only receive information about the total number of users who have responded to our advert. No information is passed on with which we could identify you. The use is not for tracking purposes.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can use the following link to deactivate the use of your personal data by Google:
https://adssettings.google.de
Further information on objection and removal options vis-à-vis Google can be found at
https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Analytics 4 (GA 4)

1. Scope of the processing of personal data

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google).

Among other things, Google Analytics analyses how website visitors use our website. Google places cookies on your end device. During the visit, user behaviour is recorded in the form of ‘events’. This allows personal data to be stored and analysed, including

• First visit to the website
• Interaction with the website, usage path
• Clicks on external links
• Video usage
• File downloads
• Advertising impressions and clicks
• Scrolling behaviour (if to the end of the page)
• Searches on the website
• Language selection
• Page visits
• Location (region)
• Your IP address (in truncated form)
• Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
• Your internet provider
• Referrer URL

IP address anonymisation is activated by default in GA 4. This means that your IP address will be truncated by Google within the member states of the European Union or other signatory states to the Agreement on the European Economic Area. As an exception, only in rare cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google states that the IP address transmitted by your browser will not be merged with other Google data in the context of Google Analytics.
Further information on the processing of data by Google can be found here:
https://policies.google.com/privacy

2. Purpose of data processing

We use GA 4 to analyse the use of our online presence and to generate reports on the activities on our website. The reports are used to analyse the performance of our website and to target advertising to people who have already shown an initial interest by visiting our website.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a) GDPR.

4. Duration of storage

Your personal data will be deleted after 2 months. This deletion takes place automatically once a month.

5. Exercising your rights

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent via our Cookie Consent Tool.

You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/technologies/partner-sites

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can use the following link to deactivate the use of your personal data by Google: https://adssettings.google.de

Use of Salesforce Pardot

1. Scope of the processing of personal data

We use functionalities of the B2B marketing automation and lead generation tool Salesforce Pardot from salesforce.com Germany GmbH, Erika-Mann-Str. 31-37, 80636, Munich, Bavaria, Germany (hereinafter referred to as: Salesforce).

Salesforce Pardot makes it possible to address landing pages, registration forms and email campaigns precisely to a target group and provide personalised content.

Cookies from Salesforce are stored on your end device.
The following personal data is processed by Salesforce:

• Device information
• Information about log files
• User data from social media
• IP address
• Contact information
• E-mail address
• Telephone number
• Data on user behaviour

Salesforce has adopted Binding Corporate Rules (BCR) to enable the transfer of personal data from the EU and EEA to Salesforce locations outside the EU and EEA. You can find Salesforce’s Binding Corporate Rules at: http://ec.europa.eu/transparencyregister/public/consultation/displaylobbyist.do?id=991195317279-06&locale=en&indexation=true
or can receive them by sending an informal enquiry to the e-mail address support@salesforce.com erhalten.
Further information on the processing of data by Salesforce can be found here: https://www.salesforce.com/de/company/privacy/

https://www.salesforce.com/company/privacy/full_privacy/

2. Purpose of data processing

We use Salesforce Pardot to automate the use of B2B marketing, identify customers more efficiently and optimise leads.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. Cancellation and removal option

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can prevent the collection and processing of your personal data by Salesforce by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Further information on cancellation and removal options vis-à-vis Salesforce can be found at
https://www.salesforce.com/de/company/privacy/
https://www.salesforce.com/company/privacy/full_privacy/

Use of Salesforce Web-to-Lead

1. Scope of the processing of personal data

We use Web-to-Lead, an add-on to the CRM platform Salesforce from salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany (hereinafter referred to as Salesforce). This enables users to make their contact data available to the company that maintains the online presence. The web-to-lead function in Salesforce can be used to generate lead information from website visitors. To do this, a form is created to record the first name, surname, email address, company, city and state/province. Furthermore, personal data such as device and browser information (in particular the IP address and operating system) of the user can be stored and analysed.
Further information on the processing of data by Salesforce can be found here:
https://www.salesforce.com/de/company/privacy/full_privacy/

2. Purpose of data processing

The contact form is used to acquire potential new customers and their contact details.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by Salesforce by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis Salesforce can be found at
https://www.salesforce.com/de/company/privacy/full_privacy/

Use of Polylang

1. Scope of the processing of personal data

We use Polylang, a multilingual plugin for WordPress, developed by WP SYNTEX, 28 Rue Jean Sébastien Bach, 38090 Villefontaine, France (hereinafter: ‘Polylang’). Polylang enables us to display our online presence in different languages. When you visit our website, Polylang can store a cookie on your end device to save your preferred language setting. Personal data may be processed and analysed, in particular information about your user activities (such as pages visited and elements clicked on) as well as device and browser information (such as IP address and operating system).

Further information on data processing by Polylang can be found in the Polylang Privacy Policy at
https://polylang.pro/privacy-policy/

2. Purpose of processing personal data

The use of Polylang serves the purpose of being able to present our online presence in several languages and thus offer our content in different languages.

3. Legal basis for the processing of personal data

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the provision of a multilingual website in order to address visitors to our online presence in their preferred language.

4. Duration of storage

Polylang stores cookies on your end device. Information on the storage duration of cookies can be found in the Polylang privacy policy at: https://polylang.pro/privacy-policy/

5. Exercising your rights

You can prevent the collection and processing of your personal data by Polylang by preventing the storage of third-party cookies on your computer, by using the ‘Do Not Track’ function of a supporting browser, by deactivating the execution of script code in your browser or by using a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can find further information on objection and removal options vis-à-vis Polylang at
https://polylang.pro/privacy-policy/

Use of WPML

1. Scope of the processing of personal data

We use WPML from OnTheGoSystems Limited, 22/F 3 Lockhart Road, Wanchai, Hong Kong (hereinafter referred to as: WPML). WPML is a multilingual plugin for WordPress. We use WPML to display our online presence in different languages. When you visit our online presence, WPML stores a cookie on your end device to save the language setting you have selected. This allows personal data to be stored and analysed, in particular the user’s activity (in particular which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular the IP address and operating system).
Further information on the processing of data by WPML can be found here
https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/

2. Purpose of data processing of personal data

The purpose of using WPML is to be able to display our online presence in multiple languages.

3. Legal basis for the processing of personal data

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in addressing visitors to our online presence in their native language.

4. Duration of storage

WPML stores cookies on your end device. Information on the storage duration of cookies can be found at https://wpml.org/documentation/privacy-policy-and-DSGVO-compliance

5. Exercising your rights

You can prevent the collection and processing of your personal data by WPML by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing
a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options in relation to WPML can be found at
https://wpml.org/de/documentation-3/privacy-policy-and-gdpr-compliance/

Use of Font Awesome

1. Scope of the processing of personal data

We use fonts from Font Awesome, a service provided by Fonticons, Inc, 6 Porter Road, Apartment 3R, Cambridge, MA 02140, USA (hereinafter referred to as Font Awesome). The fonts are transferred to the cache of the browser when the page is called up in order to be able to use them for the visually improved display of various information. This allows personal data to be stored, transferred and analysed, in particular device and browser information (especially the IP address and operating system).
If the browser does not support Font Awesome or prevents access, the text is displayed in a standard font.
When the page is called up, no cookies are stored on the visitor’s
Further information on the processing of data by Font Awesome can be found here:
https://origin.fontawesome.com/privacy

2. Purpose of data processing

The use of Fontawesome serves the purpose of an appealing presentation of our texts.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law.

5. Exercise your rights

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

You can prevent the collection and processing of your personal data by Font Awesome by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing
a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
Further information on objection and removal options vis-à-vis Font Awesome can be found at:
https://origin.fontawesome.com/privacy

Use of Google Tag Manager

1. Scope of the processing of personal data

of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). Google Tag Manager can be used to manage and bundle tags from Google and third-party services and embed them on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, to record the impact of online advertising and social channels, to use remarketing and targeting and to test and optimise online presences. When a user visits the online presence, the current tag configuration is sent to the user’s browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. Information on this can be found in the sections on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.
Further information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s privacy policy: https://policies.google.com/privacy?hl=de

2. Purpose of the data processing

The purpose of the processing of personal data is the collection and clear management and efficient integration of the services of third-party providers.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymised by Google deleting parts of the IP address and cookie information after 9 and 18 months respectively.

5. Exercising your rights

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.
You can also prevent the collection of data generated by the cookie and related to your use of the online presence (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
You can use the following link to deactivate the use of your personal data by Google:
https://adssettings.google.deWeitere
Further information on objection and removal options vis-à-vis Google can be found at:
https://policies.google.com/privacy?gl=DE&hl=de

Use of ClickCease

1. Scope of the processing of personal data

We use the ClickCease analytics service provided by ClickCease Ltd, HaArba’a St 18, Tel Aviv-Yafo, Israel (hereinafter referred to as ClickCease). ClickCease is an application that protects against click fraud by preventing advertising campaigns from being manipulated by blocking fraudulent IPs. The following data is processed
by ClickCease:

• Browser type and browser version
• Operating system used
• User data from social media
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address

Data is transmitted to ClickCease servers in Israel and processed there. The European Commission has decided that Israel offers an adequate level of protection in accordance with Art. 45 para. 1 GDPR. You can find the adequacy decision here:
https://eur-lex.europa.eu/legal-content/DE/TXT/?uri=CELEX%3A32011D0061
ClickCeasecurrently uses the following processors to process personal data: Intercom Inc (chat support), PayPal, Inc (payment processing), Stripe, Inc (payment processing), Icount.co.il (invoicing), Microsoft Azure (IT infrastructure), Google (email provider), SendGrid.com (email notifications and communication with customers), ProfitWell (payments and subscription monitoring, ChartMogul (payments and subscription monitoring), TapAffiliate (affiliate marketing management platform). International data transfers to and through ClickCease are protected by EU Commission certified standard data protection clauses. You can request a copy by sending an email to privacy@ClickCease.com.
Further information on the processing of data by ClickCease can be found here:
http://www.clickcease.de/privacy.html

2. Purpose of data processing

With the help of ClickCease, we are able to limit fake clicks by recognising in time the fake IPs that contribute to manipulating our advertising campaigns. The application allows us to maximise conversions and increase ROI by only allowing genuine and relevant users to click on the ads.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

ClickCease will not retain your personal data for longer than is necessary for the purposes for which the personal data is processed. The length of time ClickCease retains personal data will depend on the purposes for which it collects and uses it and/or the purposes necessary to comply with applicable laws and to establish, exercise or defend its legal rights.

5. Exercising your rights

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
You can object to the processing of your data or request the deletion of your data by sending an email to privacy@ClickCease.com.
Further information on objection and removal options vis-à-vis ClickCease can be found at
https://www.ClickCease.com/privacy.html

Use of Microsoft Teams

1. Scope of the processing of personal data

We use functionalities of the Microsoft Teams software from Microsoft, One Microsoft Way, 98052, Redmond, Washington, USA (and its representative in the Union Microsoft Ireland Operations Limited One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P52) (hereinafter referred to as: Microsoft).
Cookies from Microsoft are stored on your end device. For information on cookies and similar technologies, please refer to Microsoft’s privacy policy:

https://privacy.microsoft.com/de-de/privacystatement

Depending on the data you provide when using Microsoft Teams services and how you use Microsoft Teams, the following personal data may be processed by Microsoft:

• Name
• E-mail address
• Address
• Telephone number
• Registration information
• Age
• Gender
• Region
• Country
• Language
• Device location
• Information and files that you enter, upload, share or create while using Microsoft Teams
• Device and usage data (e.g. operating system, IP address, device ID)
• Information that you provide to Microsoft as part of support services (e.g. contact details, communication content)
• Information about your use or other interaction with Microsoft products
• Information about your licences for Microsoft products

Further information on the processing of data by Microsoft can be found here:
https://privacy.microsoft.com/de-de/privacystatement

2. Purpose of data processing

We use Microsoft Teams to conduct telephone calls and/or video conferences.

3. Legal basis for the processing of personal data

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest lies in the purposes of data processing mentioned under 2.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. Possibility of objection and removal

You can prevent the collection and processing of your personal data by Microsoft by preventing the storage of third-party cookies on your computer, using the “Do Not Track” function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

If you generally do not agree to the use of Microsoft Teams as a platform for telephone calls and/or video conferences, please inform the relevant organiser of the invitation.

Further information on objection and removal options vis-à-vis Microsoft can be found at
https://privacy.microsoft.com/de-de/privacystatement

Use of Borlabs Cookie

1. Scope of the processing of personal data

We use Borlabs Cookie, a cookie consent management tool provided by Borlabs GmbH, 22305 Hamburg, Germany. Borlabs Cookie helps us to manage and document the consents of website visitors for cookies and similar technologies. When visitors interact with the consent banner, Borlabs Cookie processes data including their cookie preferences, device and browser information, IP address and consent history. This data is essential for us to comply with legal requirements and to respect the privacy preferences of our visitors.

2. purpose of data processing

The main purpose of using Borlabs Cookie is to enable our website to comply with legal obligations under the GDPR and the TTDSG. By effectively managing cookie consents, we ensure that our website respects our visitors’ choices regarding privacy and the use of cookies and related technologies.

3. Legal basis for the processing of personal data

The processing of personal data by Borlabs Cookie is based on the legal requirement to obtain and document the consent of website visitors for the use of cookies and similar technologies in accordance with Art. 6 para. 1 (c) GDPR and § 25 TTDSG.

4. Duration of storage

The personal data collected by Borlabs Cookie is stored for as long as is necessary to document consent and fulfil legal obligations. The retention period is determined by legal requirements for the documentation of consent. The data is securely deleted as soon as it is no longer required for its intended purpose or when the legal retention periods expire.

5. Exercise your rights

For more information about how Borlabs Cookie processes personal data and about visitors’ rights, please refer to Borlabs Cookie’s privacy policy at: Borlabs Privacy Policy.

Use of GoToWebinar

1. Umfang der Verarbeitung personenbezogener Daten

We use functionalities of the webinar tool GoToWebinar from LogMeIn Ireland Limited, The Reflector, 10 Hanover Quay, Dublin 2, D02R73, Ireland (hereinafter referred to as: LogMeIn).

GoToWebinar enables us to plan and conduct webinars via our website.

The following personal data may be processed by LogMeIn as a result:

• Your name
• Session duration
• Established connections
• IP address
• Device location
• Language settings
• Operating system used
• Device identifier

Data is transferred to LogMeIn servers in the USA. To ensure suitable guarantees for the protection of the transfer and processing of personal data outside the EU, so-called standard data protection clauses (Art. 46 para. 2 sentence 1 lit. c GDPR) have been concluded with LogMeIn.

Further information on the processing of data by LogMeIn can be found here:
https://www.logmein.com/de/legal/privacy/international

2. Purpose of data processing

We use GoToWebinar to plan and conduct webinars as part of online events.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is generally the consent of the user in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.

4. Duration of storage

Your personal information will be stored for as long as necessary to fulfil the purposes described in this Privacy Policy or as required by law, e.g. for tax and accounting purposes.

5. Right of cancellation and removal

You have the right to revoke your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

We reserve the right to change or adapt this data protection declaration at any time, taking into account the applicable data protection regulations. The current status is 12.08.2024.