Data Processing Controller
CEO: Rolf Zimmer, Heiko Schwarz
Data Collection Practices
Data Protection Officer
When using the website for informational purposes only, we only collect the personal data that your browser transmits to our server. When you view our website, we collect the below data, which are technically necessary for us to display our website to you and to guarantee stability and security (the legal basis for this processing is legitimate interest pursuant to Art. 6 Para. 1 S. 1 lit. f) GDPR).
Pursuant to Art. 6 para. 1 lit. f) GDPR, we have weighed our interest in the provision of your personal data and your interest in processing your personal data in conformity with data protection regulations. Since the following data may be technically necessary to provide our service, display our website and to guarantee stability and security, in particular with respect to protection against misuse, we have come to the conclusion that these data can be processed – with a state-of-the-art guarantee of data security – taking your interest in data-protection-compliant processing into due consideration.
- Operating system of the user: To analyze devices to ensure optimized presentation of the website
- Information on browser type and version: To analyze the used browser in order to optimize our website
- Internet Service Provider of the user: To analyze the usage of Internet Service Providers
- IP address: To display the website on the respective device
- Date and time of the page view: To ensure the proper operation of the website
- Manufacturer and type of smartphone, tablet or other terminal device: To analyze device manufacturers and types of mobile devices for statistical purposes
- Log files: To ensure the adequate functioning of the website
The data will be deleted when the respective session is terminated. IP addresses will be deleted after 7 days at the most.
The collection of data to provide our website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility of objection on the part of the user.
General information on the Legal Basis for Processing, Deletion and Deactivation of Cookies
According to Art. 13 para. 1 lit. c) GDPR, the following legal basis applies – if not explicitly mentioned in this data protection declaration:
- In the event of consent, Article 6 para. 1 lit. a) GDPR and Article 7 GDPR apply.
- If a contract is fulfilled or pre-contractual measures are taken and inquiries are answered, Art. 6 Para. 1 lit. b) GDPR applies.
- If a legal obligation is fulfilled, Art. 6 para. 1 lit. c) GDPR applies.
- Art. 6 para. 1 lit. f) GDPR applies for the protection of legitimate interests.
As a matter of principle, tracking options are used within the scope of Art 6 para. 1 lit. a) (consent) and/or f) (legitimate interest) of the GDPR.
Our legitimate interest is in marketing and in the improvement of our content and our web appearance. If we base the processing on legitimate interest, personal data is anonymized on principle
In principle, it is also possible to deactivate cookies in general or to object to their use. For example, http://www.youronlinechoices.com/ can be used. You can also deactivate cookies via your browser settings.
Cookies – General Information
Cookies – Differentiation by Type of Cookies
a) Technically Necessary Cookies
Technically necessary cookies are not absolutely necessary to display the website. However, some functions of the website, such as the contact form, cannot be used properly without these cookies. Consequently, there is no possibility for the user to object; these cookies can be deactivated in the settings of the respective browser.
The processing of your personal data is based on Art. 6 para. 1 f) GDPR. Technically necessary cookies are required to provide you with our service and are therefore limited to the absolutely necessary. Your and our interests are the same if you want to use our service. Cookies are therefore retained for up to one year.
b) Cookies for Reach Measurement
Reach measurement cookies collect information about the use of our website. These cookies do not store any information that allows the user to be identified. The information collected is exclusively aggregated and thus evaluated anonymously.
(1) Google Analytics
This website uses Google Analytics, a web analysis service of Google Inc, (1600 Amphitheatre Parkway Mountain View, CA 94043, USA; "Google").
c) Cookies for Marketing Purposes
Cookies are generally used for marketing purposes within the scope of Art. 6 para. 1 lit. a) (consent) and/or f) (legitimate interest) of the GDPR.
(1) Google DoubleClick
If you don't want to receive user-based advertising, you can disable ads using Google's ad settings.
(2) Platforms for Marketing Automation
These cookies are stored for different periods of time. More information about Pardot cookies: https://help.salesforce.com/articleView?id=pardot_basics_cookies.htm&type=5
More information about SalesLoft cookies: https://support.salesloft.com/hc/en-us/articles/115005958843-About-Live-Website-Tracking-
Google Tag Manager
For reasons of transparency, we would like to state that we use Google Tag Manager. Google Tag Manager itself does not collect any personal data. Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements used, among other things, to measure traffic and visitor behavior, to measure the impact of online advertising and social channels, to set up remarketing and targeting and to test and optimize websites. We use Tag Manager for Google services. If you have deactivated cookies, this deactivation will be honored by Google Tag Manager. For more information about Google Tag Manager see: https://www.google.com/analytics/tag-manager/use-policy/.
When you subscribe to our newsletter, you will receive a newsletter with news and current information about our products and services.
For people in Europe who are subscribing to our newsletter, we use the double opt-in procedure. This means that we will send a confirmation e-mail to the specified e-mail address in which we ask you to confirm that you would like the newsletter to be sent. If you do not confirm this within 24 hours, your registration will be automatically deleted. If you confirm your wish to receive the newsletter, we will store your e-mail address until you unsubscribe from the newsletter. This data is stored solely for the purpose of sending you the newsletter. Furthermore, we store your IP addresses and the times of registration and confirmation to prevent misuse of your personal data.
You can revoke your consent to receive the newsletter at any time. You can revoke by clicking on the link provided in each newsletter e-mail or by sending a message to the data protection officer. Your data will not be passed on to third parties.
Processing in the context of our newsletter is based on your consent (Art. 6 para. 1 lit. a) GDPR). We base the double opt-in procedure on a legitimate interest pursuant to Art. 6 para. 1 sentence 1 lit. f) GDPR, as we must prove your consent (Art. 7 para. 1 GDPR).
We evaluate your clicks in newsletters with the help of tracking pixels, i.e., invisible image files, as well as personalized links. They are assigned to your e-mail address and are linked with an individual ID in order to uniquely assign clicks in the newsletter to you. The user profile serves to match the newsletter content to your interests.
Download of Media Content and Registration for Webinars and Events
We provide you with media content such as white papers, brochures or checklists, and you can participate in webinars and events.
Mandatory information is limited to name, title, company, e-mail address, telephone number and country. The provision of further, separately-marked information is voluntary.
The processing is based on Art. 6 para. 1 sentence 1 lit. b) and/or Art. 6 para. 1 sentence 1 lit. a) GDPR.
Integration of Third-Party Content
Third-party content, such as videos from YouTube or Vimeo or graphics from other websites, is integrated into our online content on the basis of Art. 6 para. 1 sentence 1 lit. f) GDPR. This always presupposes that the providers of this content (hereinafter referred to as "third-party providers") are aware of the IP address of the users; without the IP address, they could not send the content to the browser of the respective user. The IP address is therefore required for the display of this content. We make every effort to use only that content whose respective providers use the IP address only for the delivery of the content. However, we have no influence on this if the third-party providers store the IP address, e.g., for statistical purposes. We inform users about this, as far as we are aware of those third party activities.
However, the content of third parties is not directly integrated on our website. In particular, this is intended to prevent user profiling by the third-party provider. In order to be able to view third-party content, users must first click on the preview image (two-click solution). Content can only be viewed after clicking away the resulting notification or by logging in. Data is not transmitted until this moment.
You can contact us via our e-mail address or the contact form. The personal data transmitted to us in this way will only be used for the purpose for which you made them available to us when contacting us.
If we use our contact form to request information that is not required to establish contact, we have always marked it as optional. These details allow us to categorize your inquiry and to improve the processing of your request. Communication of this information takes place expressly on a voluntary basis and with your consent. If this involves information about communication channels (e.g., e-mail address, telephone number), you also agree that we may contact you via this communication channel in order to respond to your request.
You can of course revoke this consent at any time in the future. Please contact our data protection officer for this purpose.
The processing of your personal data takes place for the processing of contact inquiries and can also be based on Art. 6 para. 1 sentence 1 lit. b) GDPR. The data will be deleted after contact has been made if it is no longer necessary or if there are no legal storage obligations.
You can apply to our company electronically. We will use your details exclusively for processing your application and will not pass them on to third parties (§ 26 German Federal Data Protection Act).
Please note that unencrypted e-mails are not transmitted with access protection. Unfortunately, we currently do not offer the option of sending us your e-mail application in encrypted form. It is therefore always possible for third parties to intercept your application documents without authorization during transmission. Please send us your application by e-mail only if you are aware of the risk.
Furthermore, you can also apply online using our application portal Workable. Your online application will be forwarded to the HR department via an encrypted connection and will be kept confidential.
Your personal data will be deleted immediately after completion of the application process or after a maximum of 6 months, unless you have expressly given us your consent for longer storage of your data.
Your personal data will not be passed on to third parties for purposes other than those listed below.
We will only pass on your personal data to third parties if:
- you have given your express consent,
- the disclosure is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding interest worthy of protection in not disclosing your data,
- a legal obligation exists for the transfer, and
- it is legally permissible and necessary for the execution of contractual relationships with you.
When data is transferred outside the European Union, in principle, the strict European level of data protection does not exist. In the case of a transmission, there might be no current adequacy resolution of the EU Commission within the meaning of Art. 45 para. 1, 3 GDPR. This means that the EU Commission has not yet positively determined that the country-specific data protection level corresponds to the data protection level of the European Union under the GDPR, which is why we have taken the above-mentioned measures..
Possible risks that may not be completely excluded in connection with data transmission are in particular:
- Your personal data could possibly be processed beyond the actual purpose.
- In addition, you may not be able to assert and enforce your rights under data protection law, such as your right to information, correction, erasure and data portability.
- There may also be a higher probability that incorrect data processing may occur and that the protection of personal data does not fully comply quantitatively and qualitatively with the requirements of the GDPR.
Information on the Rights of the Data Subject
Any data subject has the right of access under Article 15 GDPR, the right to correction under Article 16 GDPR, the right to erasure under Article 17 GDPR, the right to limitation of processing under Article 18 GDPR, the right to object under Article 21 GDPR and the right to data portability under Article 20 GDPR. The restrictions according to §§ 34 and 35 German Federal Data Protection Act (BDSG) apply to the right to information and the right to erasure.
Instructions on the Possibility of Appeal
You also have the right to lodge a complaint with the competent data protection supervisory authority about our processing of your personal data.
Instruction for Revocation in Case of Consent
You can revoke your consent to the processing of personal data at any time. This also applies to declarations of consent that were given to us prior to the validity of the GDPR before May 25, 2018. Please note that the revocation will only take effect in the future. Processing that took place before the revocation is not affected by this.
Right in the Event of Data Processing for the Purpose of Direct Marketing
You have the right to object to the processing of your personal data at any time in accordance with Art. 21 para. 2 GDPR. In the event of your objection to processing for direct marketing purposes, we will no longer process your personal data for these purposes. Please note that the objection is only effective for the future. Processing prior to the objection is not affected.
Reference to the Right of Objection When Weighing Interests
If we base the processing of your personal data on a weighing of interests, you may object to the processing. When exercising such objection, we ask you to explain the reasons why we should not process your personal data as described by us. In the event of your justified objection, we will examine the situation and either stop or adjust data processing, or explain our compelling reasons for processing.
Links to Other Websites
Our website may contain links to websites of other providers. This data protection declaration applies exclusively to our company's websites. We have no influence on and do not control whether other providers comply with the applicable data protection regulations.