Privacy Policy

Updated: 09.2020
Please note that only the German version of the privacy policy is legally binding

§ 1 Information on the collection of personal data

(1) General information

Thank you for your interest in our website. The protection of your personal data while visiting our website is very important to the management of United Planet GmbH. The following information provides you with an overview of how we process your personal data and your rights under data protection law. Personal data refers to all data that can be related to your person, e.g. name, address, email addresses, user behavior.

If a data subject wishes to make use of special services offered by our company via our website, such as our contact form, it may be necessary to process personal data. If it is necessary to process personal data and there is no legal basis for such processing, we generally obtain the consent of the data subject. Processing is always carried out in accordance with the EU General Data Protection Regulation (GDPR) and in compliance with the country-specific data protection regulations applicable to United Planet GmbH.

As the data controller, United Planet GmbH has implemented technical and organizational measures to ensure that the personal data processed via this website is protected as effectively as possible against loss, destruction, access, modification or distribution by unauthorized persons. This also includes your personal data being securely transmitted through encryption. We use the coding system TLS (Transport Layer Security). You can recognize an encrypted connection when the URL in the address bar in your browser starts with “https://” instead of “http://” and when the lock symbol appears next to it.

Nevertheless, absolute security cannot be guaranteed due to fundamental vulnerabilities in Internet-based data transmissions.

(2) Responsible body for data processing

The responsible body according to Art. 4 (7) EU General Data Protection Regulation (GDPR) and the applicable country-specific data protection regulations is:

United Planet GmbH

Schnewlinstraße 2

79098 Freiburg

+49 761 20703 - 0

info (at) unitedplanet.com

Please send general questions about data protection at United Planet GmbH to datenschutz (at) unitedplanet.com">datenschutz (at) unitedplanet.com.

You can contact our data protection officer with a letter to the address above with the words “Data protection officer” or with an email to: datenschutzbeauftragter (at) unitedplanet.com">datenschutzbeauftragter (at) unitedplanet.com.

(3) General information about data processing

We collect and use the personal data of our users only to the extent necessary to provide a functional website and to present our content and services. The collection and use of personal data of our users are only carried out with the consent of the user. An exception is made in those cases where prior consent cannot be obtained for factual reasons and the processing of the data is permitted by law.

The following legal bases for the processing of your personal data apply:

Processing based on your consent (Art. 6 (1) a GDPR)

Processing for the performance of a contract to which the data subject is a party. This also applies to process operations necessary for the performance of pre-contractual measures (Art. 6 (1) b GDPR)

Processing for the fulfillment of a legal obligation to which our company is subject (Art. 6 (1) c GDPR)

Processing in cases where vital interests of the data subject or of another natural person require the processing of personal data (Art. 6 (1) d GDPR)

Processing to safeguard a legitimate interest of our company or of a third party unless the interests, fundamental rights and freedoms of the data subject outweigh the former interest (Art. 6 (1) f GDPR). In particular, legitimate interests can be:

to provide correct content on our website;

to perform statistical evaluations to check and optimize the website;

to provide the law enforcement authorities with the information necessary for criminal prosecution in the event of a cyber-attack;

to answer inquiries and provide services and/or information intended for you;

to process and transfer personal data for internal or administrative purposes;

to detect and prevent fraud and criminal offenses;

to ensure the permanent functionality of our information technology systems and the technology of our website to increase data protection and data security in our company.

§ 2 Your rights

(1) Your rights as the data subject

You can request information about the data stored about you from the abovementioned address (Art. 15 GDPR). In addition, you can request a correction if we have stored incorrect data about you (Art. 16 GDPR). Furthermore, under certain circumstances, you can request the deletion of your data (Art. 17 GDPR) or exercise your right to object (Art. 21 GDPR). You also have the right to restrict the processing of your personal data (Art. 18 GDPR) and the right to demand the release of the data you have provided (Art. 20 GDPR). In the case of the right of information and the right of deletion, the restrictions according to §§ 34 and 35 BDSG apply.

If you believe that the processing of your personal data is contrary to the provisions of the General Data Protection Regulation, you have the right to contact your respective responsible authority for data protection (Art. 77 GDPR in conjunction with § 19 BDSG). In Baden-Württemberg, this is the State Commissioner for Data Protection and Freedom of Information, Königstrasse 10 a, 70173 Stuttgart.

If the processing of data is based on your consent, you are entitled to revoke your consent to the use of your personal data at any time in accordance with Art. 7 GDPR. Please note that revocation is only effective for the future. Processing that took place before the revocation is not affected. Please also note that we may have to store certain data for a certain period to comply with legal requirements.

(2) Information about your right of objection according to article 21 GDPR

1. RIGHT OF OBJECTION IN INDIVIDUAL CASES

At any time, you have the right to object, for reasons arising from your particular situation, to the processing of your personal data that is carried out on the basis of art 6 (1) e GDPR (data processing in the public interest) and Art. 6 (1) f GDPR (data processing based on a balancing of interests); this also applies to profiling based on this provision within the meaning of Art. 4 (4) GDPR.

If you object, we will no longer process your personal data unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims (objection according to Art. 21 (1) GDPR).

2. RIGHT TO OBJECT TO THE PROCESSING OF DATA FOR DIRECT MARKETING PURPOSES

In some cases, we process your personal data for direct marketing purposes. At any time, you have the right to object to the processing of your personal data for such advertising. If you object to the processing for direct marketing purposes, we will no longer process your personal data for these purposes. The objection can be made without a form and should be sent, if possible, to the contact details stated under §1 no. (2) (objection according to Art. 21 (2) GDPR).

(3) Who receives my data?

Unless otherwise specified in the detailed descriptions of the offers, certain positions within our company will be given access to your data that need it to fulfill our contractual and legal obligations or to implement our legitimate interests. We will only pass on information about you to third parties if this is permitted or required by law or official notification obligations, if the passing on is necessary for processing and therefore for the fulfillment of the contract or at your request for the implementation of pre-contractual measures, if we have your consent or if we are authorized to provide information.

If we use contracted service providers for individual functions of our offer, they have been carefully selected and commissioned by us, are bound by our guidelines, and are regularly checked. Your personal data will then be processed on the basis of data processing contracts in accordance with Art. 28 GDPR and we will ensure that the processing of personal data is carried out in accordance with the provisions of the GDPR. The receiving providers are in the following categories: website management, online marketing.

If we would like to use your data for advertising purposes, we will inform you in detail about the respective processes below.

(4) How long is my data saved?

Unless otherwise specified in the detailed descriptions of the offers, we process and store your personal data for as long as it is necessary to fulfill our contractual and legal obligations.

Your personal data is routinely deleted or locked if it is no longer required for the fulfillment of contractual or legal obligations if you have exercised your right to deletion, if all mutual claims have been fulfilled and if there are no other legal storage obligations or legal justifications for storage.

§ 3 Collection of personal data when visiting our website

(1) Use of server logfiles

Every time a data subject or automated system accesses the website, some general data and information is recorded in log files. This includes an Internet protocol address (IP address), which browser and version were used, the website from which an accessing system arrives at our website (the so-called referrer), the sub-websites that are accessed via an accessing system on our website, the date and time of access and other similar data and information that serves as an active defense in the event of attacks on our information technology systems.

The legal basis for the temporary storage of data and log files is based on Art. 6 (1) f GDPR with the abovementioned legitimate interests.

Temporarily storing the IP address is necessary to ensure that the website is delivered to the user's computer. As a result, the user's IP address must be stored for the duration of the session.

This data is stored in log files to ensure the functionality of the website. In addition, the data helps us to optimize the website and to ensure the security of our information technology systems. This is also based on our legitimate interest in data processing in accordance with Art. 6 (1) f GDPR. The data will be deleted as soon as it is no longer required for the purpose it was collected for. When the data is collected to provide the website, this is the case when the respective session has ended. Collecting the data and storing it in log files are required for the operation of the website. Another way of checking the logfiles is if, based on tangible evidence, there is a justified suspicion of illegal use or a definite attack on our website. Our legitimate interest in the processing is for clarification and criminal prosecution of such attacks and illegal use.

(2) Use of cookies

“Cookies” are small files that are stored on users' devices. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or until they are automatically deleted by your web browser. Cookies can be used to store different information. The information can include, for example, the language settings on a website or where a video was viewed.

As a rule, cookies are also used when the interests of a user or his/her behavior (e.g. viewing certain content, using functions, etc.) are stored on individual web pages in a user profile. Such profiles are used, for example, to show users content that corresponds to their potential interests. This process is also referred to as “tracking”, i.e. tracking the potential interests of users. The term “cookies” also includes other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers also known as “user IDs”).

If we use cookies or “tracking” technologies, we will inform you separately in our privacy policy.

Information on the legal basis: The legal basis for processing your personal data using cookies depends on whether we ask you for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is the declared consent (Art. 6 (1) a GDPR). Otherwise, the data processed using cookies will be processed on the basis of our legitimate interests ((Art. 6 (1) f GDPR), e.g. in a commercial operation of our online offer and its improvement) or if the use of cookies is necessary to fulfill our contractual obligations (Art. 6 (1) b GDPR).

General information on revocation and objection (opt-out): Regardless of whether the processing is based on consent or legal permission, at any time, you can revoke any consent you have given or to object to or revoke the processing of your data by cookie technologies (collectively referred to as “opt-out”).

You can initially declare your objection using the settings of your browser, e.g. by deactivating the use of cookies (although this may also limit the functionality of our online service).

Processing cookie data based on consent: Before we process or allow data to be processed in the context of cookies, we ask users for their consent; this can be revoked at any time. Before this consent is given, cookies are only used if they are necessary for the operation of our online offer. Their use is based on our interest and the interest of the users in the expected functionality of our online offer.

Cookie settings/objection options:

Cookie settings

Block cookies

You can prevent cookies from being installed by deleting existing cookies and deactivating cookie storage in your web browser settings. We would like to point out that in this case, you may not be able to use all functions of our website to their full extent. You can also prevent cookies from being collected by setting an opt-out cookie on one of the websites linked below. These are external providers that we have no influence over:

https://optout.networkadvertis...

https://optout.aboutads.info/?...

https://www.youronlinechoices....

We would like to point out that this setting will be deleted if you delete your cookies. You can object to your personal data being collected and forwarded or prevent such data from being processed by deactivating JavaScript execution in your browser. You can also prevent JavaScript execution overall by installing a JavaScript blocker (e.g. https://noscript.net/ or https://www.ghostery.com). We would like to point out that in this case, you may not be able to use all functions of our website to their full extent.

(3) Google Web Fonts

Google Fonts are used on this website to display content correctly and attractively irrespective of the browser used. This is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

Web Fonts are integrated via an external server call from Google. The server is informed of which of the internet pages you have visited. Furthermore, the IP address of the browser on the visitor’s end device that accesses the web pages can be saved by Google. If your browser does not support Web Fonts, a standard font from your computer will be used.

Purpose of data processing | Legal basis | More information

The fonts are integrated on the basis of Art. 6 (1) f GDPR. The legitimate interest is to ensure a demand-oriented as well as appealing, cross-device and uniform presentation and the continuous optimization of our website, search engine optimization and to save users long loading times.

Information on Google Web Fonts: https://developers.google.com/...

(4) Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on our websites. This is a service provided by Google Ireland Limited, a company incorporated and operated under the laws of Ireland (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

reCAPTCHA is used to check whether the data inputted on our websites (e.g. in a contact form) is done by a human being or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website is visited. For analysis purposes, reCAPTCHA evaluates various information (e.g. IP address, time spent on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.

Purpose of data processing | Legal basis | More information

The data is processed on the basis of Art. 6 (1) f GDPR. As website operators, we have a legitimate interest in protecting our web offers from abusive automated spying and from spam.

Information on reCAPTCHA: https://www.google.com/recaptc....

§ 4 Other functions and offers of our website

In addition to our purely informative offer on our website, we offer various services that you can use if you are interested. To use these, you will generally have to provide additional personal data that we use to provide the respective service and to which the aforementioned data processing principles apply.

(1) Request by email, phone or fax

We allow to contact us by e-mail, telephone or fax. When using this service, the personal data of the user (e.g. name, inquiry) transmitted will be stored and processed. The data is used exclusively for further conversation and for processing your inquiry and will not be passed on to third parties without your consent. Our justified interest to process the data, which is transmitted to establish contact, for handling inquiries is therefore based on Art. 6 (1) f GDPR.

If contact is made to conclude a contract, the execution of pre-contractual measures and any subsequent processing for the fulfillment of a contract must also include the legal basis for processing according to Art. 6 (1) b GDPR.

Personal data which is processed by us in the context of a general contact inquiry by email, telephone or fax is only stored until the respective correspondence is completed. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified. Mandatory legal provisions – in particular retention periods – remain unaffected.

If you contact us by e-mail, you can of course object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

(2) Use of contact forms

Our website also provides a contact form that can be used to contact us electronically. The data entered by the user will be transmitted to us and stored. This includes your last name and your business email address as mandatory fields; all other information is voluntary. The legal basis for the processing of data when using the contact form is therefore Art. 6 (1) f GDPR. Our legitimate interest is to effectively process user inquiries received via the contact form.

Personal data which is processed by us in the context of a general contact inquiry through a contact form is only stored until the respective correspondence is completed. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified. Mandatory legal provisions – in particular retention periods – remain unaffected.

If you contact us through a form, you can of course object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

(3) Use of the callback service

Another way of contacting us is to use our callback service. The data entered by the user will be transmitted to us and stored. This includes your last name and your business email address as mandatory fields; all other information is voluntary. The data is only intended to make contact by phone and will not be passed on to third parties Our justified interest to process the data, which is transmitted to establish contact, for handling callback inquiries is therefore based on Art. 6 (1) f GDPR.

Personal data which is processed by us in the context of a general contact inquiry through a callback request is only stored until the respective correspondence is completed. The conversation is finished when it can be concluded from the circumstances that the matter in question has been finally clarified. Mandatory legal provisions – in particular retention periods – remain unaffected.

If you contact us, you can of course object to the storage of your personal data at any time. In such a case, the conversation cannot be continued.

(4) Collection and use of personal data in the application process

During the application process, the highest possible protection of your personal data must be ensured. For this reason, all personal data collected and processed by us in the context of an application is protected against unauthorized access and manipulation by technical and organizational measures.

We process personal applicant data such as name, contact data, curriculum vitae, etc. for the selection or hiring process in the applicant process to fill positions in the company.

The legal basis for processing your personal data is the establishment, execution and termination of a contractual relationship according to Art. 6 (1) b GDPR, the fulfillment of a legal obligation according to Art. 6 (1) c GDPR, as well as on the basis of your consent through the voluntary provision of data that are not absolutely necessary for the purpose (e.g. hobbies in the CV).

In addition, processing is carried out on the basis of legitimate interests in accordance with Art. 6 (1) f GDPR:

to optimize our application processes,

to ensure compliance regulations, industry standards and contractual obligations,

to assert, exercise or defend legal claims,

and to avoid damage and/or liability of our company by taking appropriate measures.

After the respective purpose has been achieved, your data will be deleted but before that, it will be kept as long as it is necessary for the defense of legal claims or against possible AGG (General Act on Equal Treatment) accusations according to § 15 AGG “Compensation and damages in case of violation of the prohibition of discrimination”. This is usually 6 months. Particularly interesting applicants, who cannot be considered at present, are asked to give their consent to longer-term storage (usually one year). The legal basis for this is Art. 6 (1) a GDPR. If data has been processed that is relevant for accounting purposes, such as the reimbursement of travel expenses, the data required for this purpose will be deleted in compliance with the statutory retention periods, which are usually 6 or 10 years.

If the application was successful and we can welcome you to our company on the basis of a contractual agreement, we will transfer the data collected during the application process to our personnel file.

(5) Download whitepaper & case studies

We provide whitepapers and case studies for download on our website. We use the double-opt-in procedure to provide the download. This means that after your request, we will send you an email to the email address provided asking you to confirm your request. The purpose of this procedure is to prove your registration and to prevent possible misuse of your personal data. Mandatory information for sending the whitepaper is your name, business email address and your country. The provision of further data is voluntary and will be used to address you personally.

The legal basis for the processing of the data when using the download form is the implementation of pre-contractual measures and any subsequent processing for the fulfillment of a contract in accordance with Art. 6 (1) b GDPR.

We also use your email address, which we have received in connection with the whitepaper or case study download, to inform you about our products. The legal basis is Art. 6 (1) f GDPR in conjunction with § 7 (3) UWG (Unfair Competition Act). You may prohibit this promotional use at any time without incurring any costs other than the transmission costs according to the basic tariffs.

(6) Test myIntrexx

On our website, we provide you with an option to test myIntrexx on-premises or alternatively our myIntrexx cloud solution for 30 days without obligation. We use the double-opt-in procedure to provide the download. This means that after your request, we will send you an email to the email address provided asking you to confirm your request. The purpose of this procedure is to prove your registration and to prevent possible misuse of your personal data. Mandatory information for sending the whitepaper is your name, business email address and your country. The provision of further data is voluntary and will be used to address you personally.

We also use your email address, which we have received in connection with the trial period, to inform you about our products. The legal basis is Art. 6 (1) f GDPR in conjunction with § 7 (3) UWG (Unfair Competition Act). You may prohibit this promotional use at any time without incurring any costs other than the transmission costs according to the basic tariffs.

(7) Subscribe to our newsletter

With your consent, you can subscribe to our newsletter that informs you about our current interesting offers. We use the double-opt-in procedure to subscribe to our newsletter. This means that after your registration we will send you an email to the given email address in which we ask you to confirm that you wish to receive the newsletter. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify a possible misuse of your personal data.

Your email address is the only mandatory information for sending the newsletter. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will save your email address to send the newsletter. The legal basis is Art. 6 (1) a GDPR.

You can revoke your consent to receive the newsletter at any time and unsubscribe. You can revoke your consent HERE or by clicking on the link provided in every newsletter email.

The data you provide us to subscribe to the newsletter will be stored by us until you unsubscribe from the newsletter and will be removed from the newsletter distribution list when you cancel your subscription. Data that has been stored for other purposes remains unaffected by this.

After you have been removed from the newsletter distribution list, your email address may be saved in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in compliance with legal requirements when sending out newsletters (legitimate interest within the meaning of Art. 6 (1) f GDPR). The inclusion in the blacklist is not limited by time. You can object to the inclusion if your interests outweigh our legitimate interests.

We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. To perform the analysis, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. With the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on and deduce your personal interests. We link this data to the actions you take on our website.

You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact channel. The information is stored as long as you have subscribed to the newsletter. After you unsubscribe, we store the data purely statistically and anonymously.

(8) Subscribe to our press releases

Another service is the ability to subscribe to press releases. We use the double-opt-in procedure to send the press releases. This means that after your registration, we will send you an email to the email address you provided in which we ask you to confirm that you wish to receive the press releases. The purpose of this procedure is to provide proof of your registration and, if necessary, to clarify or prevent possible misuse of your personal data in advance.

Your email address is the only mandatory information for sending press releases. After your confirmation, we will save your email address to send the press releases. The legal basis is Art. 6 (1) a GDPR.

You can revoke your consent to receive the press releases at any time and unsubscribe from the press releases. You can revoke your consent HERE, by clicking on the unsubscribe link provided in each press release, by sending an email to webmaster (at) unitedplanet.com or by sending a message to the contact data provided in the imprint.

The data you provide us with for the purpose of receiving press releases will be stored by us until you unsubscribe and will be deleted from the press release distribution list after you cancel your subscription. Data that has been stored for other purposes remains unaffected by this.

(9) Registration for our company events

You can register for our company events such as Portal Visions online. We use the double-opt-in procedure for registration. This means that after you have registered, we will send you an email to the email address you have provided in which we ask you to confirm that you wish to register for one of our company events. The purpose of this procedure is to provide proof of your registration and, if necessary, to clarify or prevent possible misuse of your personal data in advance. Mandatory information for registering is your last name and business email address.

The legal basis for the data processing in this case is Art. 6 (1) a GDPR in conjunction with your consent. You can revoke your consent at any time by clicking on the following link https://info.intrexx.com/hs/ma... or by sending a message to info (at) unitedplanet.com.

Voluntary surveys for company events and activities

After company events, we would like to know how we can improve in the future. We do this by using Google Forms to send out questionnaires about the events we run. This service is provided by Google Ireland Limited, a company incorporated and operated under the laws of Ireland (registration number 368047) with registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

United Planet will evaluate all information provided in this survey anonymously and process the results internally to be able to tailor our events even better to our customers and interested parties in the future.

We have no influence on the scope of the data collected by Google. Google collects personal data and may combine it with existing data. Please note that when your data is transferred, it is also transferred to third countries outside the EU and EEA, in this case to the United States of America. According to the ECJ, the level of data protection in this country is not adequate and no suitable guarantees for the protection of your data can be given (lack of enforceability of data subject rights and possible disproportionate access to your data by state institutions). If you do not agree with this and still want to give us feedback, simply write us an informal email to info (at) unitedplanet.com.

The legal basis for processing your data is Art. 6 (1) f GDPR, which permits the processing of data for the purpose of safeguarding the legitimate interests of the data controller, provided that the interests or fundamental rights and freedoms of the data subject do not take precedence. We have a legitimate interest in controlling the quality of our services and products and in educating or training our employees and sales partners to maintain our consistently high standard and improve this standard. It is our goal to provide our customers with the best possible advice and support by designing products and developing our services to meet their needs. To protect your legitimate interests, we process your data only strictly for the intended purpose and take reasonable care to limit the use of the data to a minimum.

(10) Registration for webinars

To facilitate knowledge transfer, you can register for one of our webinars. We use the double-opt-in procedure for registration. This means that after you have registered, we will send you an email to the email address you have provided in which we ask you to confirm that you wish to register for one of our webinars. The purpose of this procedure is to provide proof of your registration and, if necessary, to clarify or prevent possible misuse of your personal data in advance.

Your last name and business email address are required for registration. After your confirmation, we will save your email address for the purpose of conducting the webinar. The legal basis is Art. 6 (1) a GDPR.

(11) Registering for and using our online shop

You can create a customer account for the United Planet GmbH website. You can add your personal information to your customer account that will allow you to use our website to its full extent, as well as shop in the United Planet online shop.

To create your personal customer account, we need your first and last name, your email address and telephone number for possible queries about orders, as well as your company address and country. In addition, we need a password of your choice to create your customer account. The email address you enter also serves as the login name for the customer account. The consent for registering is ensured by the double-opt-in procedure. After your registration, our system will send you an email with an activation link, which confirms the creation of your customer account. This is to ensure that you are the actual owner of the email address you provided and that you agree to the creation of the customer account. Your customer account is only activated once you have confirmed registration by clicking on the activation link.

In the personal area of your customer account, you can update your personal data at any time and add further, voluntary information.

The data entered during registration is processed to implement the user relationship established by the registration and, if necessary, for initiating further contracts (Art. 6 (1) b GDPR).

The data collected during registration is stored by us for as long as you are registered on this website and is then deleted. Legal retention periods remain unaffected.

We also use your email addresses, which we have received in connection with the creation of the customer account, to inform you about our products. The legal basis here is Art. 6 (1) f GDPR in conjunction with § 7 (3) UWG (Unfair Competition Act). You can prohibit this promotional use at any time without incurring any costs other than the transmission costs according to the standard tariffs.

(12) Automatic credit assessment/scoring

If we allow advance payments, we reserve the right to obtain automatic credit information based on mathematical-statistical procedures from the following company to protect our legitimate interests. We receive information from the following service provider about the statistical probability of a payment default. The credit rating information may include probability values (score values), which are calculated on the basis of scientifically recognized mathematical-statistical procedures. In doing so, a large number of characteristics, such as income, address data, occupation, marital status and previous payment history, are used to draw conclusions about the customer's future risk of non-payment. The result is expressed in the form of a payment value (so-called score). The information obtained in this way forms the basis for our decision on the establishment, execution or termination of a contractual relationship. However, the choice of one of the offered payment methods is not dependent on such information.

The options for objection and deletion are based on the general regulations on the right of objection and deletion under data protection law described in this privacy policy.

Verband der Vereine Creditreform e.V.:

Our company regularly checks your credit rating when concluding contracts and, in certain cases where there is a legitimate interest, also for existing customers. For this purpose, we work together with the Verband der Vereine Creditreform e.V., Hellersbergstraße 12, 41460 Neuss (www.creditreform.de), from whom we receive the necessary data. On behalf of the Verband der Vereine Creditreform e.V. we will provide you with the following information in advance in accordance with Art. 14 GDPR:

The Verband der Vereine Creditreform e.V. is a consumer credit agency. It operates a database in which credit rating information on private individuals is stored.

On this basis, the Verband der Vereine Creditreform e.V. issues credit rating information to its customers. The customers include, for example, credit institutions, leasing companies, insurance companies, telecommunications companies, companies in the claims management sector, shipping, wholesale and retail companies and other companies that supply goods or services. Within the scope of legal regulations, part of the data available in the information database is also used to supply other company databases, including for address trading purposes.

In the database of the Verband der Vereine Creditreform e.V., information is stored in particular on the name, address, date of birth, email address, if applicable, payment history and shareholding relationships of individuals. The purpose of processing the stored data is to provide information about the credit rating of the person in question. The legal basis for the processing is Art. 6 (1) f GDPR. According to this article, information about this data may only be provided if a customer credibly demonstrates a legitimate interest in knowing this information. If data is transferred to countries outside the EU, this is done on the basis of the so-called “standard contractual clauses”, which you can find under the following link: http://eur-lex.europa.eu/legal... or can be sent from there.

The data will be stored as long as their knowledge is necessary to fulfill the purpose of the storage. As a rule, knowledge is necessary for an initial storage period of three years. After this period, a check is made to see whether storage is still necessary, otherwise the data is deleted exactly to the day. In the case of the settlement of a matter, the data will be deleted three years after the day of the settlement. Entries in the debtors' register are deleted after the expiry of three years from the date of the registration order in accordance with Section 882e of the German Code of Civil Procedure.

Legitimate interests within the meaning of Art. 6 (1) f GDPR can be: credit decisions, business initiations, shareholding, claims, credit assessments, insurance contracts, enforcement information. You have the right to request information from the Verband der Vereine Creditreform e.V. about your personal data stored there. If the data stored about you is incorrect, you have the right to have it corrected or deleted. If it cannot be determined immediately whether the data is wrong or correct, you have the right to block the respective data until clarification. If your data is incomplete, you can demand its completion. If you have given your consent to the processing of data stored by Verband der Vereine Creditreform e.V., you have the right to revoke this consent at any time. This revocation does not affect the legality of the processing of your data, which has been carried out on the basis of your consent until a possible revocation.

If you have any objections, requests or complaints regarding data protection, you can contact the data protection officer of the Verband der Vereine Creditreform e.V. at any time. He/she will help you quickly and confidentially in all questions concerning data protection. You can also complain about the processing of data by the Verband der Vereine Creditreform e.V. to the state commissioner for data protection responsible for your federal state.

The data that the Verband der Vereine Creditreform e.V. has stored about you comes from publicly accessible sources, from debt collection agencies and their customers.

To describe your credit rating, the Verband der Vereine Creditreform e.V. creates a score value for your data. Data on age and gender, address data and, in some cases, payment experience data are incorporated into the score. This data is included in the score calculation with different weightings. The customers of the Verband der Vereine Creditreform e.V. use the score values as an aid when making their own credit decisions.

Right to objection of the Verband der Vereine Creditreform e.V.:

The processing of the data stored by the Verband der Vereine Creditreform e.V. is carried out for compelling reasons of protecting the creditor and credit, which outweigh your interests, rights and freedoms, or serve to assert, exercise or defend legal claims. You can only object to the processing of your data for reasons that arise from a special situation in your company and that must be proven. If such special reasons can be proven, the data will no longer be processed. If you object to the processing of your data for advertising and marketing purposes, the data will no longer be processed for these purposes.

The Verband der Vereine Creditreform e.V., Hellersbergstraße 12, 41460 Neuss (www.creditreform.de) is responsible in the sense of art 4 (7) GDPR. You can contact us with any questions using the following contact details Tel.: +49 2131 109-0, +49 2131 109-8000, email: creditreform (at) verband.creditreform.de

You can reach the responsible data protection officer using the following contact details: Verband der Vereine Creditreform e.V., Data Protection Officer, Hellersbergstraße 12, 41460 Neuss, Datenschutz (at) verband.creditreform.de.

§ 5 Web analysis

(1) Use of Google Analytics

This website uses Google Analytics for web analysis. This is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

Google Analytics uses technologies that enable the recognition of the user to analyze his or her user behavior, such as cookies or device fingerprinting. These enable the website operator to analyze the behavior of the website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. This data may be summarized by Google in a profile that is assigned to the respective user or his end device.

The information thus generated about the use of this website is usually transferred to a Google server in the USA and stored there.

IP anonymization

However, by activating IP anonymization on this website, your IP address will be shortened by Google within member states of the European Union or in other states which are party to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not combined with other data from Google.

Demographic characteristics in Google Analytics

This website uses the “demographic characteristics” feature of Google Analytics to help the website visitors view appropriate ads within the Google advertising network. This allows reports to be generated that contain statements about the age, gender and interests of the site visitors. This data is derived from Google's interest-based advertising and third-party visitor data. This data cannot be associated with any particular person. You can disable this feature at any time in the ad settings in your Google account or generally prohibit the collection of your data by Google Analytics as described in the “Opting out of data collection” section.

Browser plugin

You may object to the use of cookies by selecting the appropriate settings on your browser, however, please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available from the following link: http://tools.google.com/dlpage....

Purpose of data processing | Legal basis | More information

We use Google Analytics to analyze the use of our website and to improve it regularly. We can use the statistics obtained to improve our offer and make it more interesting for you as a user.

The legal basis for the data processing associated with this is Art. 6 (1) a GDPR in conjunction with your consent. You can revoke your consent at any time by using our Cookie Consent Tool.

The user and event-level data stored by Google, which is linked to cookies, user recognition (e.g. user ID) or advertising IDs (e.g. DoubleClick cookies, Android advertising ID, etc.), are anonymized or deleted after 26 months. Details can be found at the following link: https://support.google.com/ana....

Of course, we have concluded a contract with Google for data processing and fully implement the strict guidelines for the use of Google Analytics.

(2) GA Audience

Our website also uses GA Audience. This is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

GA Audience uses, among other things, cookies that are stored on your computer and mobile devices (e.g., smartphones, tablets, etc.) to help analyze how those devices are used. The data is sometimes analyzed across devices. Google Audience receives access to the cookies created in the context of the use of Google AdWords and Google Analytics. Within the scope of use, data, such as in particular the IP address and activities of the user, can be transmitted to a server of Google Inc. and stored there. Google Inc. may transfer this information to third parties where required to do so by law, or where such information is processed by third parties.

Purpose of data processing | Legal basis | More information

The legal basis for the data processing associated with this is Art. 6 (1) a GDPR in conjunction with your consent. You can revoke your consent at any time by using our Cookie Consent Tool.

You can prevent the collection of data generated by the Google cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available from the following link: http://tools.google.com/dlpage....

GA Audience: https://support.google.com/ana...

(3) LinkedIn Analytics

This website uses LinkedIn Analytics for web analysis. This is a service provided by LinkedIn Ireland Unlimited Company, a company incorporated and operated under the laws of Ireland (registration number: 477441) with its registered office at Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”).

LinkedIn Analytics stores and processes information about your user behavior on our website. LinkedIn Analytics uses cookies, which are small text files that are stored locally on your end device in the cache of your web browser and which enable an analysis of your use of our website.

Purpose of data processing | Legal basis | More information

We use LinkedIn Analytics for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. By statistically evaluating user behavior, we can improve our offer and make it more interesting to you as a user.

The legal basis for the data processing associated with this is Art. 6 (1) a GDPR in conjunction with your consent. You can revoke your consent at any time by using our Cookie Consent Tool.

You can also opt-out of LinkedIn's collection of the above-mentioned information by visiting the following LinkedIn page: https://www.linkedin.com/psett...

§ 6 Use of social media

(1) Social media pages

We currently use the following social media links: Facebook, Xing, Linkedin, YouTube, Instagram and Twitter. We use the so-called two-click concept. This means that when you visit our site, no personal data is initially passed on to the above-mentioned social media provider. You can recognize the provider of the link by the mark on the box by its initial letter or logo. We allow you to communicate directly with the provider of the plugin via the button. The provider will receive the information that you have accessed the corresponding website of our online offer only if you click on the marked box and thereby activate it. In addition, the data mentioned under § 3 of this declaration will be transmitted. In the case of Facebook and Xing, according to the respective providers in Germany, the IP address is anonymized immediately after it is collected. By activating the link, your personal data is transmitted to the respective provider and stored there.

We have no influence on the collected data and data processing procedures, nor are we aware of the full scope of data collection, the purposes of processing, the storage periods. We also have no information about the deletion of the collected data by the provider.

The provider stores the data collected about you in user profiles and uses them for advertising, market research and/or demand-oriented design of their website. Such an evaluation is carried out in particular (also for users who are not logged in) to present needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, you must contact the respective provider to exercise this right. Through the links, we provide you with the opportunity to interact with the social networks and other users so that we can improve our offer and make it more interesting to you as a user. The legal basis for the use of the social media link is Art. 6 (1) f GDPR.

The data is passed on regardless of whether you have an account with the provider and are logged in there. If you are logged in with the provider, your data collected by us will be directly assigned to your existing account with the provider. If you click on the activated button and, for example, link the page, the provider will also store this information in your user account and publicly share it with your contacts. We recommend that you log out regularly after using a social network but especially before activating the button to avoid an assignment to your profile with the provider.

More information on the purpose and scope of data collection and its processing by the provider can be found in the data protection declarations of these providers; these are provided below. There, you will also find further information on your rights and settings to protect your privacy.

Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland; http://www.facebook.com/policy...; More information about data collection: http://www.facebook.com/help/1..., http://www.facebook.com/about/... and http://www.facebook.com/about/....

Xing AG, Gänsemarkt 43, 20354 Hamburg, DE; http://www.xing.com/privacy.

LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland; http://www.linkedin.com/legal/....

“YouTube”, a social media platform from Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland; https://www.google.com/policie....

Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA. Die Instagram LLC is a subsidiary of Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; http://www.facebook.com/policy...; More information about data collection: http://www.facebook.com/help/1..., http://www.facebook.com/about/... and http://www.facebook.com/about/....

Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland; https://twitter.com/privacy.

(2) Integration of Google Maps

This website displays map material from the Google Maps map service. This is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

When you visit one of our pages with Google Maps, your browser connects directly to Google's servers and retrieves a map to display. To use the functions of Google Maps, it is necessary to process your IP address and information about your possible use of the map. This information is transferred from your internet browser to a Google server in the USA and processed there by Google.

Purpose of data processing | Legal basis | More information

The legal basis for the data processing associated with this is Art. 6 (1) f GDPR. The weighting of interests is based on our legitimate and predominant interest in providing you with potentially required directions and making it easier to find our partners.

(3) Integration of YouTube videos

We are interested in providing you with a wide range of multimedia information. Therefore we integrate videos from YouTube. This is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with registered office at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

The integration is in the extended data protection mode or the no-cookie solution, i.e. cookies and pixel tags are set by YouTube to personalize advertising and search results only after the video is played. However, the extended data protection mode does not necessarily exclude the transfer of data to YouTube partners. In this way, YouTube establishes a connection to the Google DoubleClick network - regardless of whether you are watching a video.

When the YouTube video is played, data is transferred to Google as the YouTube operator. This includes, for example, IP address, the specific address of the page loaded on our site, the transferred browser identification and the system date and time of loading. In addition, already existing cookies, which allow your browser to be clearly identified, are transmitted. If you are logged in to your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account.

It is possible that after the start of a YouTube video, further data processing operations may be triggered over which we have no influence. Google as the operator of YouTube is solely responsible for this data processing.

Purpose of data processing | Legal basis | More information

YouTube is used in the interest of an attractive presentation of our online offers. This therefore represents a legitimate interest within the meaning of Art. 6 (1) f GDPR.

§ 7 Public relations

(1) Integration of Google Tag Manager

For reasons of transparency we would like to point out that we use the Google Tag Manager. This is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as “Google”).

The Google Tag Manager itself does not collect any personal information. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small pieces of code that are used to measure traffic and visitor behavior, measure the impact of online advertising and social channels, set up remarketing and targeting, and test and optimize websites, among other things.

Purpose of data processing | Legal basis | More information

We have activated the anonymization of the IP address before forwarding it to Google. The legal basis for the data processing associated with this is Art. 6 (1) a GDPR. A revocation can be made at any time by using our Cookie Consent Tool.

We use the Tag Manager for the Google services Google Analytics and GA Audience. If you have deactivated these services, the Google Tag Manager will take this deactivation into account.

Information on the Google Tag Manager: https://www.google.com/intl/en....

(2) Google Remarketing

We use the Google Remarketing function on our website. This is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

The function serves to present interest-related advertisements to website visitors within the Google advertising network. A so-called “cookie” is stored in the visitor's browser, which makes it possible to recognize visitors when they visit websites that belong to the Google advertising network. On these pages, the visitor may be presented with advertisements relating to content that the visitor has previously viewed on websites that use the Google Remarketing function.

Purpose of data processing | Legal basis | More information

We use the functions of Google Remarketing to provide you with advertising offers that correspond to your interests.

The legal basis for the data processing associated with this is Art. 6 (1) a GDPR. You can revoke your consent at any time by using our Cookie Consent Tool.

(3) Campaign Manager by Google (previously DoubleClick)

This website uses the online marketing tool, Campaign Manager. This is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

If you consent, Campaign Manager uses cookies to serve ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to help identify which ads are shown in which browser and to prevent them from being shown more than once.

In addition, the Campaign Manager can use cookie IDs to track ad requests. This is, for example, when a user sees a Campaign Manager ad and later uses the same browser to visit the advertiser's website and make a purchase. According to Google, Campaign Manager cookies do not contain any personal information.

Because of the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our current knowledge. Because we have integrated Campaign Manager, Google receives the information that you have loaded the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider can know this and save your IP address.

In addition, the Campaign Manager (DoubleClick Floodlight) cookies enable us to understand whether you perform certain actions on our website after you have accessed or clicked on one of our (video) ads on Google or another platform via Campaign Manager (conversion tracking). Campaign Manager uses this cookie to understand the content on our sites, which you have interacted with so that we can send you targeted advertisements later.

Purpose of data processing | Legal basis | More information

We use the features of Campaign Manager to deliver ads that are relevant to visitors, to improve campaign performance reports or to prevent a user from receiving the same ads multiple times.

The legal basis for the data processing associated with this is Art. 6 (1) a GDPR. You can revoke your consent at any time by using our Cookie Consent Tool.

You can opt-out of this tracking by disabling cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com” (https://www.google.com/setting...), but this setting will be removed when you clear your cookies. Another option is to disable cookies permanently in your Firefox, Internet Explorer or Google Chrome browsers by clicking on the link http://www.google.com/settings.... We would like to point out that you may not be able to use all functions of this offer to their full extent if you do this. In addition, you can prevent Google from collecting the data generated by the cookies about your website use and from processing this data by downloading and installing the browser plugin available at https://support.google.com/ads... under "Display settings", “Extension for Campaign Manager deactivation”.

More information about the Campaign Manager: https://support.google.com/dcm...

(4) Facebook Pixel, Facebook Custom Audiences und Facebook-Conversion

Furthermore, our website uses so-called "Facebook pixels". This is a service provided by Facebook Ireland Ltd., a company incorporated and operated under Irish law (registration number: 368047) with its registered office at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as “Facebook”).

With the help of Facebook pixels, Facebook can identify you, when you visit our site, as a target group for ads (so-called “Facebook ads”). Accordingly, we use the Facebook pixel in order to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. The Facebook pixel also allows us to track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users have been redirected to our website after clicking on a Facebook ad (aka “conversion”).

Purpose of data processing | Legal basis | More information

We use the functions of Facebook Pixel to better understand your actions on our website, to identify optimizations of our campaigns and to be able to offer you advertising that matches your interests.

The legal basis for the data processing associated with this is Art. 6 (1) a GDPR. You can revoke your consent at any time by using our Cookie Consent Tool.

Logged-in users can deactivate the “Facebook Custom Audiences” here: https://www.facebook.com/setti....

Facebook privacy policy: https://www.facebook.com/about....

(5) LinkedIn Marketing Solutions (previously LinkedIn Ads)

We use “Marketing Solutions” (previously “LinkedIn Ads”) on our website. This is a service provided by LinkedIn Ireland Unlimited Company, a company incorporated and operated under Irish law (registration number: 477441) with its registered office at Wilton Plaza, Wilton Place, Dublin 2, Ireland (hereinafter referred to as “LinkedIn”).

This service stores and processes information about your user behavior on our website. Marketing Solutions uses cookies to do this, among other things, which are stored locally in your web browser cache on your end device and which enable us to analyze how you use our website.

We use Marketing Solutions for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. By statistically evaluating user behavior, we can improve our offer and make it more interesting to you as a user.

Purpose of data processing | Legal basis | More information

We use Marketing Solutions for marketing and optimization purposes to improve our offer and make it more interesting to you as a user.

The legal basis for the data processing associated with this is Art. 6 (1) a GDPR in conjunction with your consent. You can revoke your consent at any time by using our Cookie Consent Tool.

You can also opt-out of LinkedIn's collection of the above-mentioned information by visiting the following LinkedIn page: https://www.linkedin.com/psett...

§ 8 Contact management

(1) HubSpot

We use HubSpot as a contact management tool. This is a service provided by HubSpot, a company incorporated and operated under Irish law (registration number: 477441) with its registered office at 2nd Floor 30 North Wall Quay, Dublin 1, Ireland (hereinafter referred to as “HubSpot”).

The HubSpot services used include:

Parts of the content management (website)

Email marketing (newsletters and automated mailings, e.g. to provide downloads)

Social media publishing & reporting

Web analysis or reporting (e.g. traffic sources, accesses, etc.)

Contact management (e.g. user segmentation & CRM)

The moderation of some landing pages and contact forms

Contact forms and other contact tools allow our website visitors to learn more about our company, download content and provide their contact information and other demographic information.

This information as well as the contents of our website are partly stored on servers of our software partner HubSpot. We may use this information to contact our website visitors and to determine which of our company services are of interest to them. The storage on HubSpot servers is in accordance with data protection requirements.

Purpose of data processing | Legal basis | More information

We use HubSpot as an integrated software solution to cover different aspects of our online marketing.

The legal basis for the data processing associated with this is Art. 6 (1) a GDPR in conjunction with your consent. You can revoke your consent at any time by using our Cookie Consent Tool.

HubSpot privacy policy: https://legal.hubspot.com/priv...

Overview of HubSpot cookies: https://knowledge.hubspot.com/...

Security and privacy policy for HubSpot cookies: https://knowledge.hubspot.com/...

§ 9 Changes to our privacy policy

We reserve the right to adjust our privacy policy so that it always meets the current legal requirements or to add changes to our services to the privacy policy, e.g. when new services are introduced. The new privacy policy then applies when you visit our website again.