Privacy Policy

1.   The content of this privacy statement and definitions

Thank you for your interest in our website. The protection of your privacy is very important to us. In the following document we will inform you in detail about how we handle your data and which personal data we collect, process and use when you visit our website. Additionally, this data protection declaration will inform you about the options and objections you have with regard to your data.

For the purposes of the basic data protection regulation (DSGVO), the following definitions apply

• "personal data" shall mean any information relating to an identified or identifiable natural person (hereinafter referred to as "data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
• “processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, arranging, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
• “profiling” means any automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular with a view to analysing or predicting aspects relating to the performance of work, economic situation, health, personal preferences, interests, reliability, conduct, location or movement of that natural person.

Further official definitions are explained in Art. 4 DSGVO.

2.   Rights of data subjects

You can exercise the following rights at any time by contacting our data protection officer:

• Information about your data stored with us and their processing (Art. 15 DSGVO),
• Correcting incorrect personal data (Art. 16 DPA),
• Deletion of your data stored with us (Art. 17 DSGVO),
• Restriction of data processing, insofar as we are not yet allowed to delete your data due to legal obligations (Art. 18 DSGVO),
• Objection to the processing of your data by us (Art. 21 DSGVO) and
• Data transferability, provided you have consented to data processing or have concluded a contract with us (Art. 20 DSGVO).

If you have given us your consent, you can revoke it at any time with effect for the future.

You also have the right to complain to a supervisory authority (Art. 77 DSGVO). As a rule, you can contact the supervisory authority at your usual place of residence or workplace or at our registered office for this purpose. The following supervisory authority is responsible for us:

Landesamt für Datenschutzaufsicht
Promenade 27 (Schloss)
91522 Ansbach
http://www.lda.bayern.de

Right of objection

Insofar as we process personal data as explained in this data protection declaration in order to safeguard our legitimate interests which outweigh any other interests, you can object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If processing is carried out for other purposes, you only have the right to object if there are reasons arising from your particular situation.

After exercising your right of objection, we will not further process your personal data for these purposes, unless we can prove compelling reasons for processing worthy of protection that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

This does not apply if the processing is for direct marketing purposes. In this case we will not process your personal data further for this purpose.

If you wish to exercise your right of objection, please inform us by e-mail.

Profiling (automated decision making)

According to Art. 22 DSGVO, you have the right not to be subjected to a decision based solely on automated processing - including profiling - which has legal effect on you, or which significantly affects you in a similar way. As a matter of principle, we do not carry out automated decision making unless this serves to comply with overriding legal provisions (e.g. prevention of money laundering and terrorist financing).

3.   Visit of our website

Our website uses HubSpot, a software of HubSpot Inc, USA. This software is used in the so-called area of inbound marketing and helps us, among other things, by means of statistical analyses and evaluation of logged user behavior, to better coordinate and optimize our marketing strategy. The data collected by HubSpot may be stored on US servers. Cookies (see below) are used. You can prevent the storage of cookies at any time by setting your browser software accordingly or delete the cookies already stored. Please note that if cookies are blocked, you may not be able to use the full range of services provided on our website. For more information, please refer to the Terms of Use and Privacy Policy of HubSpot Inc. accordingly at http://www.hubspot.com/terms-of-service,  http://www.hubspot.com/privacy-policy,  https://legal.hubspot.com/de/dpa,  https://www.hubspot.de/data-privacy/privacy-shield and https://legal.hubspot.com/de/privacy-policy.

If you do not want the information about your visit to be used for the purposes described, you are also welcome to notify us by email or by mail at any time. All information we collect is subject to this Privacy Policy. HubSpot is subject to TRUSTe 's Privacy Seal and the U.S. - EU Safe Harbor Framework and the U.S. - Swiss Safe Harbor Framework.

Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500.

The following data is stored:
This software is used in the so-called area of inbound marketing and helps us, among other things, by means of statistical analysis and evaluation of logged user behavior (reporting by traffic sources, accesses, etc. ...) to better coordinate and optimize our marketing strategy. Furthermore, HubSpot covers various aspects of our inbound marketing:

• email marketing (newsletters as well as automated mailings, e.g. to provide downloads);
• contact management (e.g. user segmentation & CRM);
• landing pages and contact forms

Furthermore, we collect personal data that you voluntarily provide to us. This includes, but is not limited to, contact information such as your name, email address, business name, address and phone number, and other data about you or your business. For more information about HubSpot's privacy policy, please click here: https://legal.hubspot.com/de/privacy-policy.

Storage Period / Data Deletion:
We retain personal data that you provide to us for as long as there is a legitimate business interest on our part (such as to comply with our legal obligations, resolve disputes, and enforce our contractual claims). If we do not have a legitimate business interest in processing your personal data, we will securely delete or anonymize it. If neither is possible, we will store your personal data in a secure manner and exclude it from any further data processing until erasure is possible.

Legal basis for processing
The legal basis for the use of Hubspot's services is Art. 6 I f DS-GVO - legitimate interest. Our legitimate interest in using this service is to optimize our marketing measures and improve our service quality on the website. HubSpot processes personal data to the extent necessary to provide the subscription services in accordance with the contract, the information provided in the order form and the instructions of the customer in the context of his use of the subscription services. If you generally do not want HubSpot to collect your personal data, you can prevent the storage of cookies at any time by changing your browser settings accordingly or by using the following opt-out link:

Remove HubSpot cookies

4.   E-mail advertising and newsletter subscription

Nature and purpose of the processing

If you subscribe to our newsletter, we will use the data required for this purpose or provided separately by you to regularly send you our e-mail newsletter.

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. You can do this either by sending a message to the contact option described above or via a link provided for this purpose in the newsletter. After cancellation we will delete your e-mail address, unless you have expressly agreed to a further use of your data or we reserve the right to use your data for other purposes which are legally permitted and about which we inform you in this declaration.

Legal basis

On the basis of your expressly given consent (Art. 6 para. 1 lit. a DSGVO), we will send you our newsletter or comparable information regularly by e-mail to the e-mail address you have provided.

Storage duration

The data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards they will be deleted.

Provision prescribed or necessary

The provision of your personal data is voluntary, solely based on your consent. Unfortunately, we cannot send you our newsletter without existing consent.

5.   Cookies

Nature and purpose of the processing

To make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages. This serves to protect our legitimate interests, which outweigh any other interests, in an optimised presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO. Cookies are small text files that are automatically stored on your end device. They are not able to execute programs or transmit viruses.

Legal basis

The use of cookies serves to safeguard our predominantly legitimate interests in an optimised presentation of our offer in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO.

Storage duration of the cookies used

This website uses the following types of cookies, the scope and function of which are explained below:

• Transient cookies
• Persistent cookies

Transient cookies are automatically deleted when you close the browser. This includes in particular the session cookies. These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. This allows your computer to be recognised when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie. You can delete the cookies in the security settings of your browser at any time.

You can see the duration of the storage in the cookie settings of your web browser.

You can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings.

You will find these for the respective browsers under the following links:

Internet Explorer™: https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
Safari™: https://support.apple.com/en-gb/guide/safari/sfri11471/12.0/mac/10.14
Chrome™: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en
Firefox™: https://support.mozilla.org/en-US/kb/enhanced-tracking-protection-firefox-desktop
Opera™: https://help.opera.com/en/latest/web-preferences/

If cookies are not accepted, the functionality of our website may be limited.

6.   Social Media Plugins

Nature and Purpose of the Processing

Our presence on social networks and platforms serves a better, active communication with our customers and interested parties. There we inform about our products and current special offers.

When you visit our online presence in social media, your data may be automatically collected and stored for market research and advertising purposes. So-called user profiles are created from this data using pseudonyms. These can be used, for example, to place advertisements inside and outside the platforms that presumably correspond to your interests. For this purpose, cookies are usually used on your end device. The visitor behaviour and interests of the users are stored in these cookies.

Legal Basis

The use of your personal data is in accordance with Art. 6 para. 1 lit. f. DSGVO, the use of your personal data serves to safeguard our predominantly legitimate interests in an optimised presentation of our offer and effective communication with customers and interested parties. If you are asked by the respective social media platform operators for consent (permission) to data processing, e.g. by means of a checkbox, the legal basis for data processing is Art. 6 para. 1 lit. a DSGVO.

Data Processor

The data processing is based on an agreement between jointly responsible parties in accordance with Art. 26 DSGVO, which you can view here:

Facebook: https://www.facebook.com/legal/terms/page_controller_addendum
Instagram: https://help.instagram.com/519522125107875
LinkedIn: https://www.linkedin.com/legal/privacy-policy

Storage Duration

For detailed information on the processing and use of data by the providers on their sites as well as a contact option and your rights and settings options for the protection of your privacy, in particular opt-out options, please refer to the linked data protection information of the providers. Should you nevertheless require assistance in this regard, please contact us.

Transfer to Third Countries

Insofar as the aforementioned social media platforms have their headquarters in the USA, a third country transfer of your data to the USA may occur. By using the respective social media platform, you have given your consent for the respective data transfer.

Provision Required or Necessary

The provision of your personal data is voluntary, solely based on your consent. If you prevent access, this may result in functional restrictions on the website.

Revocation of Consent

Opt-Out possibilities:
Facebook: https://www.facebook.com/settings?tab=ads
Instagram: https://help.instagram.com/519522125107875
LinkedIn: https://www.linkedin.com/legal/cookie-policy

7. Use of third-party provider tools

In order to provide and continuously improve our services, we are using the services of the following third-party providers which may also process personal data. These third-party providers have been selected diligently and in line with the requirements of the GDPR.

Google

Unless otherwise stated in the data privacy policy, the operator of all Google services mentioned here is Google Ireland Limited,Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Google Tag Manager

This website uses the service “Google Tag Manager”. The tag manager is a tool for managing so-called tags that are used during tracking in online marketing. In doing so, the tag manager does not process any personal data, since it merely serves to manage other services – e.g., Google Analytics, etc.

You can find further information on the tag manager at: https://www.google.com/intl/de/tagmanager/use-policy.html

Google Analytics

This website uses the service “Google Analytics”. The operator of this service is the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Google Analytics is a web analysis service, and, by placement of cookies and the information acquired by this, it enables us to make inferences about user behavior on our website.  The information generated by the cookies is sent to a Google server in the USA and stored there. Our website uses the service Google Analytics on an exclusively pseudonymous basis. Your IP address is only recorded in abbreviated form and is hence anonymized.

The following data is collected and processed:

• IP-Addresses (anonymized)
• Usage data
• Click path
• App updates
• Browser information
• Device information
• JavaScript support
• Pages visited
• Referrer URL
• Downloads
• Flash-version
• Location information
• Purchase activity
• Widget interactions
• Date and time of visit

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR.. If you do not want Google Analytics to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

• Google LLC.
• Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Analytics. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

Google Audiences / Remarketing

This website uses the service “Google Audiences/Remarketing”. The operator of this service is the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The purpose of this service is to display advertising to users based on their interests. This requires conducting an analysis of website use, which is carried out using cookies. In this process, the cookies store anonymized or pseudonymized data regarding the use of the website.  If you visit additional websites that also use these services, then you will be shown advertising that matches your previous interests. You can find more information at https://www.google.com/privacy/ads/

The following data is collected and processed:

• Pages visited
• IP Addresses
• Duration of visit
• Other data on use of websites
• Content user is interested in

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Google Audiences to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

• Google LLC.
• Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Audiences. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

Google Ads and Google Ads Conversion Tracking

This website uses the service “Google AdWords”. The operator of this service is the company Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. The purpose of this service is so-called conversion tracking, i.e., we can detect what happened after you clicked on our advertisements. Cookies are placed for this purpose, but they are only valid for a limited time.

The following data is collected and processed:

• Cookie-ID
• Visited Pages
• IP Addresses
• Duration of visit
• Usage data
• Content user is interested in
• Clicked Ads
• Web requests
• Cookie information
• Referrer URL
• Browser language
• Browser type

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Google Ads to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

• Google LLC.
• Alphabet Inc.

Data may be transferred to the USA as part of processing by Google Ads. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

YouTube

This website uses the service “YouTube” to insert videos into the page. The operator of the software necessary for this purpose is the company Google Ireland Limited Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

The integration of YouTube content is carried out in “extended privacy mode”. This ensures that YouTube does not initially store cookies on your device. As a result, YouTube no longer stores any information about visitors until you watch the video.

When you click on the video, your IP address is sent to YouTube, which tells YouTube that you have watched the video. If you are logged in to YouTube, this information is also associated with your account. This can be prevented by logging out of YouTube before viewing the video.

Accordingly, the following data can be collected and processed:

• IP Addresses
• Referrer URL
• Device Information
• Watched videos

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want YouTube to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Google Ireland Limited:

• Google LLC.
• Alphabet Inc.

Data may be transferred to the USA as part of processing by YouTube. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

Google Web Fonts

On this website the service Google Web Fonts is used. The service is provided by Google Ireland Limited Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.  Google Web Fonts enables us to load and display external fonts, so-called Google Fonts, on our website. Google Web Fonts is locally integrated on our website. This means that the fonts are not loaded from Google servers.

In the context of processing via Google Web Fonts, the following personal data is collected and processed:

• IP address

The legal basis for this processing is Art. 6 (1)(f) GDPR — a legitimate interest. Our legitimate interest in the processing is to present the website in an attractive and user-friendly manner. Local hosting ensures that no data is transferred to Google, and no data transfer takes place.

Personal data is stored for as long as it is necessary to fulfill the purpose of processing. The data is deleted as soon as it is no longer required for the purpose.

Facebook Custom Audiences and Facebook Pixel

This website uses the service “Facebook Custom Audiences”. For this service Facebook-Pixel is used. Operator of this service is Facebook Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin, D02, Ireland. This service enables us to show the user advertising related to their interests on the social network – Facebook.

For this purpose we have implemented the Facebook Remarketing Tag on our website. When you visit the website, this tag creates a direct link with Facebook’s servers. This gives Facebook information on the pages that you have visited our website. Facebook then compares this with your Facebook user account. The next time that you visit Facebook, you will be shown customized advertisements – Facebook Ads – related with your interests. You can find further information in Facebook’s data privacy instructions: https://www.facebook.com/about/privacy/.

The following data is collected and processed:

• Facebook-User-ID
• IP Addresses
• Browser information
• Non-sensitive custom data
• Facebook cookie information
• Referrer URL
• Pixel specific data
• Pixel ID
• Social media friend network
• Usage Data
• Views and interactions with content and ads
• Viewed content
• Device information
• Success of marketing campaigns
• transaction information
• Hardware/software type
• Browser type
• Device operating system
• Location
• Cookie ID
• Information from third party sources
• User agent
• Conversion

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Facebook to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

As part of the processing, the data may be transferred to the following recipients besides Facebook Ireland Limited :

• Facebook Inc.

Data may be transferred to the USA as part of processing by Facebook. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

BingAds

This website uses the service “BingAds”. BingAds is a conversion and tracking service of the Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft places cookies in the users’ devices that analyze the user behavior on our website. This presupposes that the user has reached our website through a BingAds advertisement. This only serves to provide use with information on the total number of users who have clicked on this type of advertisement. In this process, no IP addresses are stored, and no personal information on our users’ identity is shared. You can find further information in Microsoft’s data privacy statement in: https://privacy.microsoft.com/de-de/privacystatement.

The following data is collected and processed:

• Engagement metrics
• Number of visits
• Bounce rates
• Microsoft Click ID
• Digital signature
• UET ID tag
• URLs
• Referrer URL
• Page title
• Conversions
• Screen height
• Screen width
• Browser language setting
• Duration of visit
• Screen color depth
• Page response times
• Clicked Advertisement

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want Microsoft to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

Data may be transferred to the USA as part of processing by Microsoft. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

Zendesk

On this website we are using the Customer Relationship Management (CRM)  “Zendesk”. Operator of this service is the company Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA. Zendesk is used to integrate contact forms and forward your requests to us. The use of Zendesk is optional. If you do not agree to Zendesk collecting your information, we offer alternative ways to contact you to submit service requests by phone or mail. To use Zendesk, you must provide at least one correct e-mail address. The service can also be used pseudonymously. Your data will not be passed on to any additional third parties. More information about the data processing of Zendesk can be found here.

In addition, Zendesk sets cookies. These cookies are cookies that are technically necessary to ensure the technical functionality of the website and to protect the website from bot-driven attacks.

Regarding the contact forms the following data can be collected and processed:

• E-mail addresses
• Names
• Addresses

Regarding the cookies the following data can be collected and processed:

• IP Adresses

If the data collected via contac forms is used to provide contractual services to data subjects, the legal basis for processing is Art. 6 (1)(b) GDPR . Furthermore, Art. 6 (1)(a) GDPR serves as legal basis, provided that you have consented to the data processing.

The data processing that takes place via the cookies is based on art. 6 (1)(f) GDPR — a legitimate interest. Our legitimate interest is that we must ensure the functionality and security of our website.

The personal data will be stored for as long as they are required to fulfil the purpose of processing. The data will be deleted as soon as they are no longer required for the purpose.

Data may be transferred to the USA as part of processing by Zendesk. The security of the transmission of data is secured via so-called standard contractual clauses and binding corporate rules. If these standard contractual clauses and binding corporate rules are not sufficient to establish an adequate level of security, Art. 49 (1)(a) GDPR can serve as a legal basis. Please note the reference to the risk of data transfer to an unsafe country under sub-item “7. Forms”.

LinkedIn

We use the retargeting tool and the conversion tracking of LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”). For this purpose the LinkedIn Insight Tag is incorporated into our webpage. LinkedIn uses it to collect statistical, pseudonymized data from your visit and use of our website and to provide us with the corresponding aggregated statistics based on these. In addition, this information serves to be able to show you relevant offers and recommendations specific to your interests, after you have inquired on the website about certain services, information and offers. The information in this regard is stored in a cookie. More information about Data Privacy of LinkedIn can be found here.

In this process this data will be collected and processed:

• IP Address
• Device information
• Browser information
• Referrer URL
• Timestamp

The legal basis of the processing is your consent according to Art. 6 (1)(a) GDPR. If you do not want LinkedIn to collect and process the aforementioned data, you can refuse your consent or withdraw it at any time with effect for the future.

The data will be stored for as long as it is necessary for the purpose of the procession. The data will be deleted as soon as it is no longer needed for the processing purposes.

Data may be transferred to the USA as part of processing by LinkedIn. The security of the transmission is ensured by so-called standard contractual clauses, which guarantee that the processing of personal data is subject to a security level that corresponds to that of the GDPR. If the standard contractual clauses are not sufficient to ensure an adequate level of security, we will obtain your consent in accordance with Art. 49 (1)(a) GDPR prior to the data processing.

8. Processors Used

In some cases we use external service providers to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are checked regularly. We have concluded an order processing contract with all the companies we have commissioned to collect, process, analyse and delete your data and fully implement the requirements of the data protection authorities.

9. Changes to our Data Protection Regulations

We reserve the right to adapt this data protection declaration so that it always meets the current legal requirements or to implement changes to our services in the data protection declaration, e.g. when introducing new services. The new data protection declaration then applies to your next visit.

10. Questions to the Data Protection Officer

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, restriction or deletion of data as well as revocation of any consents granted or objection to a specific use of data, please contact our company data protection officer.

Data Protection Officer:

XPAY Holding AG
Stuntzstraße 16
81677 Munich
+49 89 46 13 44 22 44
datenschutz@xpay.de

‍