Privacy Policy
Table of Contents
III. Data Protection Officer of the Controller
VII. Consent Management COMPLIANZ
XIII. Contact form and email contact
XXI. Applications via Softgarden
XXIII. Event and webinar registrations
XXIV. Moodle – learning platform
XXV. Our social media presence and channels
Thank you for visiting our website and for your interest in our company.
The protection of your personal data is very important to us. The use of our website is generally possible without providing personal data. However, if you use certain offers or functions on our website or contact us, the processing of personal data may be necessary. Unless there is another legal basis for this, processing takes place exclusively on the basis of your consent.
The processing of personal data is always carried out in accordance with the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG).
With this Privacy Policy we inform you about the type, scope and purpose of the processing of personal data as well as about the rights to which you are entitled.
We have taken technical and organizational measures to protect your personal data in the best possible way. However, internet-based data transmissions can have security gaps, so that complete protection against access by third parties cannot always be guaranteed.
I. Definitions
Our company’s Privacy Policy is based on the GDPR. Our Privacy Policy should be easy to read and understand. To ensure this, we explain the terms used in advance:
- Personal data is all information that identifies or makes identifiable a natural person (data subject). A person is considered identifiable if they can be recognized directly or indirectly through characteristics such as name, identification number, location data, online identifier or special characteristics. These characteristics can relate to physical, genetic, psychological, economic, cultural or social identity (Art. 4 Para. 1 GDPR).
- Data subject is any identified or identifiable natural person whose personal data is processed by the data controller.
- Processing refers to all processes involving the handling of personal data – whether automated or not. This includes collecting, storing, organizing, adapting, reading, using, transmitting, disseminating, comparing, restricting, deleting or destroying.
- Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.
- Profiling is the automated processing of personal data to evaluate personal characteristics of a natural person. Aspects such as work performance, financial situation, health, preferences, interests, behavior or whereabouts are analyzed or predicted.
- Pseudonymization means that personal data is processed in such a way that it can no longer be assigned to a specific person without additional information. This additional information is stored separately and protected by technical and organizational measures to prevent attribution.
- Controller means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.
- Processor is a natural or legal person, authority, institution or other body that processes personal data on behalf of the controller.
- Recipient is a natural or legal person, public authority, agency or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, public authorities which may receive personal data in the context of a specific investigative task under Union or Member State law shall not be considered as recipients.
- Third party is a natural or legal person, public authority, agency or other body other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
- Consent is any voluntary, informed and unambiguous expression of wishes given by the data subject for a specific case, in the form of a statement or other unambiguous confirmatory act, by which the data subject indicates that he or she agrees to the processing of personal data concerning him or her.
II. Name and Contact Details of the Controller
The controller within the meaning of the General Data Protection Regulation, other national data protection laws of the Member States and other applicable data protection provisions is:
Viamedici Software GmbH
Hertzstrasse 14
76275 Ettlingen
Represented by the managing director:
Jürgen Müller
Telephone: +49 7243 9498-0
Email: d.fischer-van-sickle@viamedici.de
Website: https://viamedici.com
III. Data Protection Officer of the Controller
If you have any questions or comments about data protection, our data protection officer can be reached as follows:
The data protection officer
Hertzstrasse 14-22,
76275 Ettlingen
Telephone: +49 7243 9498 0
Email: data-privacy@viamedici.com
IV. General information on data processing
Scope of processing of personal data
We only process personal data if this is necessary to provide our website, content or services. This usually only happens with the consent of the user, unless prior consent is not possible for practical reasons and is permitted by law.
Legal basis for processing personal data
To the extent that we obtain the consent of the data subject for processing personal data, Art. 6 Para. 1 lit. a GDPR serves as the legal basis.
The processing of personal data to fulfill a contract with the data subject is based on Article 6 (1) (b) GDPR. This also applies to data processing that is necessary to carry out pre-contractual measures.
To the extent that processing of personal data is necessary to fulfill a legal obligation to which our company is subject, Art. 6 Para. 1 lit. c GDPR serves as the legal basis.
In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 (1) (d) GDPR serves as the legal basis.
If the processing is necessary to protect the legitimate interests of our company or third parties and the interests, rights and freedoms of the data subject do not outweigh this, it is based on Article 6 (1) (f) GDPR.
Erasure of Data and Storage Period
Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Longer storage is only permitted if this has been provided for by European or national legislators in EU regulations, laws or other regulations to which the controller is subject. The data will also be deleted after the statutory deadlines set there have expired, unless they are still needed to conclude or fulfill a contract.
V. Provision of the website and creation of log files
Description and Scope of Processing
A so-called hosting service provider is used to operate this website, on whose European servers the content of the website is stored.
The hosting service provider was carefully selected; In addition, all necessary measures have been taken to ensure data processing that is permissible under data protection law (e.g. the conclusion of a data processing agreement, DPA). Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.
The following data is collected:
– The user’s operating system
– The user’s Internet service provider
– The user’s IP address
– Date and time of access
– Websites from which the user’s system accesses our website
– Websites that are accessed by the user’s system via our website
– retrieved file
– Amount of data sent
The data is also stored in the log files of our system. This data is not stored together with other personal data of the user.
Legal Basis for Processing
The legal basis for the processing of personal data using technically necessary cookies within the meaning of Section 25 Paragraph 2 TDDDG is Article 6 Paragraph 1 Letter f GDPR.
Purpose of Processing
The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
The data is stored in log files to ensure the functionality of the website. The data also serves us to technically optimize the website and to ensure the security of our information technology systems. The data will not be evaluated for marketing purposes in this context.
Our legitimate interest lies in these purposes in accordance with Article 6 Paragraph 1 Letter f of the GDPR.
Storage Period
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the users’ IP addresses are deleted or altered so that it is no longer possible to assign the calling client.
Right to Object and Erasure
The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility for the user to object.
VI. Cookies
Description and Scope of Processing
Our website uses cookies and similar technologies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie can be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.
We use cookies to make our website work. Some elements of our website require that the accessing browser can be identified even after a page change.
The following data is stored and transmitted in the cookies:
- Language settings
- Log in information
When accessing our website, the user is informed about the use of cookies for analysis and marketing purposes and their consent is obtained for the processing of the personal data used in this context. In this context, a reference is also made to this Privacy Policy.
VII. Consent Management COMPLIANZ
Description and Scope of Processing
When you first visit our website, you will be shown a pop-up window with information about our use of cookies and similar technologies. There you can choose which categories of cookies and plug-ins you would like to agree to. If you agree to the use of optional cookies, only the categories you selected will be activated. If you reject this, only technically necessary services will be used, for example to store your consent decision.
For this consent management we use the WordPress cookie consent plugin Complianz from Complianz B.V., Kalmarweg 14-5, 9723 JG Groningen, Netherlands.
Further information on data protection at Complianz can be found at:
https://complianz.io/privacy-statement/
Legal Basis for Processing
The legal basis for the processing of personal data as part of consent management is Article 6 Paragraph 1 Letter c GDPR in conjunction with Section 25 Paragraph 2 No. 2 TDDDG.
Purpose of Processing
The purpose of data processing is to obtain your consent for the use of cookies and comparable technologies that require consent, to document this and to give you the opportunity to change or revoke your consent at any time with effect for the future.
Storage Period, Withdrawal and Erasure
The cookies set as part of consent management are generally stored for 365 days unless they are deleted beforehand.
You can access your cookie settings again at any time using the corresponding button on our website and change or revoke your consent with effect for the future.
Alternatively, you can delete the cookies set by Complianz at any time via your browser settings. When you visit our website again, you will be asked again for your consent.
VIII. Google Fonts
Description and Scope of Processing
We use Google Fonts, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) on our website.
Google Fonts allows us to use external fonts to ensure a uniform and attractive presentation of our website on different devices and browsers. For this purpose, the required font is loaded from Google’s servers when our website is accessed. Among other things, your IP address is transmitted to Google because it is technically necessary to provide the fonts. Depending on the configuration, the transmission can also take place to Google servers in the USA.
We have no influence on the extent and further processing of the data by Google.
Information from the provider:
Google Ireland Limited
Google Building Gordon House
Barrow Street
Dublin 4
Ireland
Further information about data protection at Google can be found at:
Legal Basis for Processing
The legal basis for the processing of personal data in connection with the integration of Google Fonts is your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
Purpose of Processing
The processing takes place to ensure a uniform and attractive presentation of our website on different devices and browsers.
Storage Period, Withdrawal and Erasure
We do not store any personal data in connection with the integration of Google Fonts. The storage period of the data processed by Google depends on Google’s privacy policies.
You can revoke your consent at any time with future effect by accessing our consent management settings again.
Further information on how we handle personal data can be found in Google’s privacy policy at:
Google also offers information about your data protection and advertising settings at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en
IX. Google Tag Manager
Description and Scope of Processing
We use Google Tag Manager on our website to implement and manage tracking codes and other scripts via an interface. Google Tag Manager is a solution from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The Google Tag Manager itself does not set cookies and does not collect any personal data. It simply ensures that other tags that may collect data are running properly on our website.
Legal Basis for Processing
The legal basis for the processing of personal data is your consent in accordance with Article 6 Paragraph 1 Letter a GDPR, which you have given on our website.
Purpose of Processing
We use Google Tag Manager for optimization purposes, in particular to improve your use of our website and to improve the effectiveness of our marketing measures.
Erasure of Data and Storage Period
You can disable the use of Google Tag Manager by disabling JavaScript in your browser or using a tool such as the Ghostery browser add-on. Please note, however, that this may prevent our website from functioning properly.
Further information on data protection can be found on the following Google websites:
- Privacy Policy: https://policies.google.com/privacy?hl=en&gl=en and https://business.safety.google/privacy/
- FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html
- Google Tag Manager Terms of Use: https://www.google.com/intl/de/tagmanager/use-policy.htm
X. Google Ads
We use Google Ads to draw attention to our offers with advertisements. If you reach our website via a Google ad, Google Ads stores a cookie on your device. This only takes place with your consent, so the legal basis is Art. 6 Para. 1 lit. a GDPR.
The advertising materials are provided via so-called ad servers, which use cookies to measure the success of advertising campaigns (e.g. ad displays, clicks). The cookie ID, ad impressions, last impression (for post-view conversions) and opt-out information are stored. These cookies are not used for personal identification.
Google can recognize your browser. If you visit the pages of an Ads customer and the cookie is still active, Google recognizes that you clicked on the ad and were redirected.
Each Ads customer is assigned an individual cookie so that tracking across other customer sites is not possible. Google can collect data about your website visit and, if you are registered with Google, link it to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.
A direct connection to Google’s servers is established via the marketing tools. We do not collect any personal data ourselves, but only receive statistical evaluations from Google, e.g. which ads were clicked, how often and at what price. User identification is not possible for us.
Revocation of your consent: This is possible at any time without affecting the processing until then. You can revoke cookies in the “privacy settings” on this site or:
- a) Make settings in your browser software, g. Block third-party cookies;
- b) Block cookies from “www.googleadservices.com” via www.google.de/settings/ads (note: these settings will be reset when the cookies are deleted);
- c) deactivate interest-based ads at www.aboutads.info/choices (here too, settings are reset when cookies are deleted);
- d) Permanently deactivate ads in browsers such as Firefox, Chrome or Internet Explorer at www.google.com/settings/ads/plugin. Please note that not all functions may then be available.
Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found at: www.google.com/intl/de/policies/privacy and services.google.com/sitestats/de.html.
XI. Embedded YouTube videos
Description and Scope of Processing
YouTube videos are embedded on our website and will only be loaded with your consent. With your consent, YouTube’s “extended data protection mode” (Google/YouTube: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) will be activated.
When loading YouTube videos, data such as your IP address, possibly location data and technical device information are transmitted to Google. When using the Google service on our website, Google may transmit and process information from other Google services in order to provide background services for the display and data processing of the services provided by Google. For this purpose, data may also be transferred to the Google services Google Apis, Doubleclick, Google Cloud, and Google Ads and Google Fonts in accordance with the Google Privacy Policy.
This data can also be transmitted to Google servers in the USA. For these cases, Google has joined the EU-U. S. Privacy Framework subject. We have also agreed on so-called standard contractual clauses with Google, the purpose of which is to maintain an appropriate level of data protection in third countries.
When you load an embedded video through your consent, a connection is established to YouTube and the Google DoubleClick network. According to YouTube, “extended data protection mode” only sends data, such as the pages visited, to the YouTube server when you actually play the video. If you are logged in to YouTube, this information can be assigned to your account and your usage behavior can be analyzed. This data can be linked to information from other Google services, such as Google Analytics. In addition, YouTube may use DoubleClick cookies to display personalized advertising on YouTube. Personal data can also be collected and processed. To avoid this, you should log out of your YouTube account before visiting our website. We have no influence on the data collection and use by YouTube or Google.
When you play a video, YouTube stores cookies on your device in enhanced data protection mode. These do not contain any personally identifiable information unless you are logged in to a Google service. You can prevent these cookies from being stored using appropriate settings or extensions in your browser.
Privacy Policy: https://policies.google.com/privacy
Opt-Out: https://adssettings.google.com/authenticated
Data protection settings: https://www.youtube.com/intl/de_be/howyoutubeworks/user-settings/privacy
Further information about Google Web Fonts can be found at https://fonts.google.com/, https://developers.google.com/fonts/faq?hl=en-DE&csw=1 and https://www.google.com/fonts#AboutPlace:about
XII. Vimeo player
Description and Scope of Processing
We use the Vimeo service (Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001) to broadcast live events via an embedded video player on our website. When you access a page with the Vimeo player, data such as your IP address, information about your browser and your device are transmitted to Vimeo. Vimeo can link this data with further information, especially if you are logged in to Vimeo. Interactions with other users during events such as live streams or webinars (e.g. comments, likes, survey responses) may be visible to others.
You can find more information about live chat at https://help.vimeo.com/hc/de/articles/12426085683985
Legal Basis for Processing
The legal basis for data processing is Article 6 Paragraph 1 Letter a GDPR in conjunction with Section 25 Paragraph 1 TDDDG. You can revoke your consent at any time with future effect by deactivating this service in the “data protection settings” on this page.
Storage Period, Right to Object and Erasure
The data collected by Vimeo is processed and stored in accordance with Vimeo’s privacy policy. We have no influence on how long this data is stored. Further information can be found at: https://vimeo.com/privacy or by contacting Vimeo’s European Data Protection Office using the online application form at https://edpo.com/gdpr-data-request
XIII. Contact form and email contact
Description and Scope of Processing
There is a contact form on our website that can be used to contact us electronically. If a user takes advantage of this option, the data entered in the input mask will be transmitted to us and stored.
The following data is processed when using the contact form:
- First name (required)
- Last name (required)
- Email address (required)
- Telephone number (voluntary information)
- Message (voluntary information)
In addition, confirmation of knowledge of this Privacy Policy is required. To protect against improper entries, we also use Google reCAPTCHA. Further information on this can be found under Section XIV.
At the time the message is sent, the following data is also stored:
- The user’s IP address
- Date and time of transmission
For the processing of the data, reference is made to this Privacy Policy as part of the sending process.
Alternatively, you can contact us using the email address provided. In this case, the user’s personal data transmitted with the email will be stored.
In this context, the data will not be passed on to third parties. The data will only be used to process your request and the associated correspondence.
Legal Basis for Processing
The legal basis for processing the data is Article 6 Paragraph 1 Letter f GDPR. If the purpose of contacting you is to conclude a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR.
Storage Period, Right to Object and Erasure
The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be seen from the circumstances that the matter in question has been finally clarified.
The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.
The user has the opportunity to object to the storage of their personal data at any time. In such a case, the conversation cannot continue. In this case, all personal data that was stored in the course of contacting you will be deleted.
XIV. Google Recaptcha
Description and Scope of Processing
To protect our contact form from misuse and automated entries (spam), we use Google reCAPTCHA, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
The use of Google reCAPTCHA checks whether the data was entered by a human or improperly by automated processing. For this purpose, Google processes various information, such as the IP address, information about the browser used and the operating system, referrer URL, date and time of the visit and user behavior on the website (e.g. mouse movements or keyboard entries). This data is transmitted to Google and processed there. A transmission of personal data to Google LLC servers in the USA cannot be ruled out.
Further information about data protection at Google can be found at:
https://policies.google.com/privacy
For more information about Google reCAPTCHA, see:
https://developers.google.com/recaptcha
Legal Basis for Processing
The legal basis for the processing of personal data in connection with the use of Google reCAPTCHA is your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
Purpose of Processing
The use of Google reCAPTCHA serves to protect our website and in particular our contact forms from misuse, automated entries and spam. This is intended to ensure that entries are actually made by a natural person.
Storage Period, Withdrawal and Erasure
The storage period for personal data processed by Google as part of Google reCAPTCHA is determined by Google’s privacy policies.
You can revoke your consent at any time with future effect by accessing our consent management settings again.
Further information on how we handle personal data can be found in Google’s privacy policy at:
Google also offers information about your data protection and advertising settings at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155451?hl=en
XV. Google Translator
Description and Scope of Processing
On our website we use a translation function from Google in order to be able to make the content of our website available to you in other languages. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).
If you activate the translation function, content on our website will be transmitted to Google and processed there to carry out the translation. As part of using the service, technical information, in particular your IP address as well as information about the browser used and the device, may also be transmitted to Google.
Processing of data by Google LLC in the USA cannot be ruled out.
Further information about data protection at Google can be found at:
Legal Basis for Processing
If personal data is processed or information is stored or read on your device through the use of the translation function, this is done on the basis of your consent in accordance with Article 6 Paragraph 1 Letter a of the GDPR in conjunction with Section 25 Paragraph 1 TDDDG.
Purpose of Processing
The use of the translation function serves to automatically translate the content of our website into different languages and thereby also enable foreign language users to access our website content as easily as possible.
Storage Period, Withdrawal and Erasure
In principle, we have no influence on the length of time data is stored that is processed by Google as part of the translation function. Further information on how Google processes and stores personal data can be found in Google’s privacy notice.
You can revoke your consent at any time with future effect by accessing our consent management settings again.
XVI. Cloudflare
Description and Scope of Processing
We use services from Cloudflare, a provider of security and performance services for websites, on our website. The provider is Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA.
In particular, Cloudflare provides a content delivery network (CDN) and security functions. The data traffic between your device and our website is routed via Cloudflare’s infrastructure. This serves in particular to improve the loading times and stability of our website and to protect the website from attacks and abusive access.
As part of the provision of these services, Cloudflare may process the following data in particular:
- IP address,
- Date and time of access,
- pages or files accessed,
- Information about the browser and operating system used,
- Referrer URL as well
- technical information about data traffic.
Cloudflare also processes some data outside the European Economic Area, particularly in the USA. Cloudflare is certified under the EU-U.S. Data Privacy Framework certified. In addition, Cloudflare stipulates, among other things, the use of standard contractual clauses for international data transfers.
For more information about data protection at Cloudflare, see:
https://www.cloudflare.com/privacypolicy/
Legal Basis for Processing
The legal basis for the processing of personal data is Article 6 (1) (f) GDPR. Our legitimate interest lies in the secure, stable and efficient provision of our website as well as in protecting our website from attacks and other abusive access.
Purpose of Processing
The processing serves in particular to provide our website securely and reliably, to improve loading speed and performance, and to detect and prevent attacks and other threats to our website and IT systems.
Storage Period, Right to Object and Erasure
As a general rule, we do not store the personal data processed by Cloudflare in the context of providing the services ourselves. The duration of any storage by Cloudflare depends on the type and purpose of the respective processing as well as the contractual agreements with Cloudflare.
Since the processing is necessary for the secure and reliable provision of our website, there is generally no possibility of objecting to the processing when using our website.
For more information about Cloudflare’s processing of personal data, please see Cloudflare’s privacy policy.
XVII. Font Awesome
Description and Scope of Processing
On our website we use Font Awesome, a service for the uniform display of symbols and icons. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, MA 02140, USA.
When you access our website, the icons required for display are loaded from the provider’s servers. This involves establishing a connection to the Font Awesome servers. As part of this connection, in particular your IP address as well as technical information about the browser used and the device can be transmitted to Font Awesome and processed there.
Processing of personal data in the USA cannot be ruled out.
Further information about data protection at Font Awesome can be found at:
https://fontawesome.com/privacy
Legal Basis for Processing
The legal basis for the processing of personal data in connection with the external integration of Font Awesome is your consent in accordance with Article 6 Paragraph 1 Letter a GDPR in conjunction with Section 25 Paragraph 1 TDDDG.
Purpose of Processing
The use of Font Awesome serves to display symbols and icons on our website in a uniform and appealing manner.
Storage Period, Withdrawal and Erasure
We do not store any personal data in connection with the integration of Font Awesome. The storage period of the data processed by Font Awesome depends on the privacy policies of the provider.
You can revoke your consent at any time with future effect by accessing our consent management settings again.
For more information on how Font Awesome processes personal data, please visit:
https://fontawesome.com/privacy
XVIII. jQuery CDN
Description and Scope of Processing
On our website we use jQuery, a JavaScript library that supports various functions on our website. We use the jQuery Content Delivery Network (CDN) to provide the required files.
When you visit our website, the required jQuery files are loaded from the CDN servers. This involves establishing a connection to the provider’s servers. As part of this connection, in particular your IP address as well as technical information about the browser and device used can be transmitted and processed.
Legal Basis for Processing
Insofar as personal data is processed or information is stored or read on your device in connection with the external integration of the jQuery CDN, the processing takes place on the basis of your consent in accordance with Article 6 Paragraph 1 Letter a GDPR in conjunction with Section 25 Paragraph 1 TDDDG.
Purpose of Processing
The use of the jQuery CDN serves to provide the JavaScript libraries required for the functionality of our website as well as to deliver the corresponding files quickly and reliably.
Storage Period, Withdrawal and Erasure
We do not store any personal data in connection with the integration of the jQuery CDN. We have no direct influence on the duration of any storage of the data processed by the CDN provider.
You can revoke your consent at any time with future effect by accessing our consent management settings again.
For more information about jQuery, see:
XIX. Mixpanel
Description and Scope of Processing
We use Mixpanel, a web analysis service from Mixpanel, Inc., One Front Street, Floor 28, San Francisco, CA 94111, USA, on our website.
Mixpanel allows us to analyze the use of our website and better understand how visitors interact with our content and features. For this purpose, information about page views, functions used, interactions with the website as well as technical information about the device and browser used can be processed.
Depending on the specific use and configuration, the following data in particular can be processed:
- IP address,
- Device and browser information,
- Date and time of access,
- pages and content accessed,
- interactions with the website,
- Referrer URL as well
- technical usage and event data.
The data collected is processed by Mixpanel on our behalf and is used for statistical evaluation and improvement of our online offering.
Mixpanel offers the possibility to process and store data within the European Union. However, processing of personal data outside the European Economic Area cannot be completely ruled out, depending on the specific configuration and the subcontractors used.
For data transfers to the USA, Mixpanel relies, among other things, on the EU-U.S. Data Privacy Framework. In addition, Mixpanel provides for the conclusion of the European Commission’s standard contractual clauses for corresponding international data transfers.
Further information about data protection at Mixpanel can be found at:
https://mixpanel.com/legal/privacy-policy/
Legal Basis for Processing
The processing of personal data in connection with the use of Mixpanel is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR. As far as information is stored on your device or read from it, this is also done on the basis of your consent in accordance with Section 25 Paragraph 1 TDDDG.
Purpose of Processing
The processing serves to analyze usage behavior on our website. We use the knowledge gained in particular to better understand the use of our website and its functions and to continually improve our online offering and user-friendliness.
Storage Period, Withdrawal and Erasure
The storage period for the data processed by Mixpanel depends on the respective configuration and the settings we have specified.
You can revoke your consent at any time with future effect by accessing our consent management settings again.
For more information on how Mixpanel processes personal data, please visit:
https://mixpanel.com/legal/privacy-policy/
XX. Amazon Web Services (AWS)
Description and Scope of Processing
We use services from Amazon Web Services (AWS) to provide and deliver content on our website. The provider for customers based in the European Economic Area is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg.
AWS provides various cloud infrastructure and hosting services that can be used in particular to provide secure, reliable and high-performance website content.
When using AWS services, the following data in particular may be processed:
- IP address,
- Date and time of access,
- accessed content or files,
- Information about the browser and operating system used,
- Referrer URL as well
- technical connection and protocol data.
Depending on the AWS services used and their configuration, processing of personal data outside the European Economic Area, particularly in the USA, cannot be completely ruled out.
Amazon Web Services is certified under the EU-U.S. Data Privacy Framework. In addition, the Standard Contractual Clauses approved by the European Commission may be used for international data transfers.
For more information about data protection at AWS, see:
https://aws.amazon.com/privacy/
Legal Basis for Processing
The legal basis for the processing of personal data as part of the provision of AWS services is Article 6 (1) (f) GDPR.
Our legitimate interest lies in the secure, reliable and efficient provision of our website and its content.
Purpose of Processing
The processing serves the technical provision and delivery of our website or individual website content as well as to ensure secure, stable and efficient use of our online offering.
Storage Period, Right to Object and Erasure
The duration of storage of personal data depends on the AWS service used, its configuration and the respective processing purpose. To the extent that we can influence the storage period, personal data will only be processed for as long as is necessary for the stated purposes.
If the processing is necessary for the technical provision of our website, there is generally no possibility of objecting to this processing when using our website.
For more information about how AWS processes personal data, see Amazon Web Services’ privacy information.
XXI. Applications via Softgarden
Description and Scope of Processing
To carry out our application and recruiting processes, we use the softgarden applicant management system from softgarden e-recruiting GmbH, Tauentzienstraße 14, 10789 Berlin.
If you apply for an advertised position via our career portal, the personal data you provide and transmit as part of the application process will be processed via softgarden.
In particular, the following personal data may be processed:
- Contact details, in particular name, address, email address and telephone number,
- Information on training, qualifications and professional career,
- information from your CV,
- Profiles in professional or social networks,
- Application documents, in particular cover letters, CV, certificates and work samples as well
- other information provided by you as part of your application.
softgarden processes the personal data generated as part of applicant management as a processor on our behalf. A data processing agreement was concluded with softgarden in accordance with Art. 28 GDPR.
Legal Basis for Processing
The processing of your personal data as part of the application process is based on Section 26 Paragraph 1 BDSG in conjunction with Article 6 Paragraph 1 Letter b GDPR, insofar as the processing is necessary for the decision to establish an employment relationship.
If further voluntary functions that require consent are used as part of the application process, the processing is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR.
Purpose of Processing
The processing of your personal data serves to carry out the application process and in particular to examine your application, communicate with you and decide on the establishment of an employment relationship.
Storage Period, Withdrawal and Erasure
Your personal data will be stored for the duration of the application process. In the event of a rejection, the applicant data will be stored for four months and then completely anonymized.
If you have voluntarily consented to be included in the talent pool, further processing will take place on the basis of your consent. After twelve months you will be asked whether you would like to continue to be part of the talent pool. You can revoke your consent at any time with future effect.
The privacy notice for applicants provided there also applies to the career portal and the applicant management system, in which you will receive detailed information about the individual processing operations and services used.
XXII. Prize Draws
Description and Scope of Processing
It is occasionally possible to take part in prize draws on our website.
As part of your participation, we process the personal data required to carry out the respective competition. This may include in particular the following data:
- First and Last Name,
- E-mail address,
- companies as well
- further information required for the implementation of the respective competition.
Which data is processed in individual cases depends on the respective competition or the associated conditions of participation.
Legal Basis for Processing
The processing of your personal data for the purpose of carrying out the competition is based on Article 6 Paragraph 1 Letter b GDPR.
If you have given us your consent, for example for further use of your data, the processing will be carried out on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with future effect.
Purpose of Processing
The processing of personal data serves to carry out and process the respective competition, in particular to check eligibility to participate, to determine and notify the winners and, if necessary, to provide the prize.
Storage Period
The personal data will be deleted after the competition has ended as soon as it is no longer required for its implementation and processing and there are no legal retention obligations to the contrary.
Storage beyond this can occur if this is necessary to assert, exercise or defend legal claims. The legal basis for this is Article 6 Paragraph 1 Letter f GDPR.
XXIII. Event and webinar registrations
Description and Scope of Processing
On our website it is sometimes possible to register for events, webinars, workshops or similar events.
As part of the registration process, we process the personal data required for the organization and implementation of the respective event. This may include in particular the following data:
- First and Last Name,
- E-mail address,
- Company,
- telephone number,
- country as well
- further information required for the respective event.
Which personal data is processed in individual cases can be found in the respective registration form.
For paid events, data that is necessary for payment processing may also be processed.
Legal Basis for Processing
The processing of your personal data for the purpose of registering, organizing and carrying out the respective event is based on Art. 6 Para. 1 lit. b GDPR.
If you give us your consent for further processing when registering, the processing will be carried out on the basis of Art. 6 Para. 1 lit. a GDPR.
Purpose of Processing
The processing serves the registration, organization and implementation of the respective event as well as communication with the participants in connection with the event.
Storage Period
The personal data will be deleted as soon as they are no longer required for the organization and implementation of the event and there are no legal retention requirements.
Storage beyond this can occur if this is necessary to assert, exercise or defend legal claims. The legal basis for this is Article 6 Paragraph 1 Letter f GDPR.
XXIV. Moodle – learning platform
Description and Scope of Processing
We use the Moodle learning platform to carry out our training and further education offerings. In particular, the learning platform can be used to provide training and learning content, organize events and courses, and manage participation in training courses.
As part of the use of the learning platform, the personal data required to provide and carry out the respective training is processed. This may include, in particular, first and last name, email address, user and profile data, information about the company as well as data about participation in courses, learning activities and learning status.
Depending on the use of individual functions, content and communication data provided by users may also be processed.
Legal Basis for Processing
The processing of personal data within the framework of the learning platform takes place, to the extent that it is necessary for the implementation of an agreed training or further education measure, on the basis of Art. 6 Para. 1 lit. b GDPR.
If the use occurs within the framework of an employment relationship, the processing is based on the relevant privacy policies.
If processing is based on consent, the legal basis is Art. 6 Para. 1 lit. a GDPR.
Purpose of Processing
The processing serves to provide and manage the learning platform as well as to organize, carry out and document training and further education measures.
Storage Period
The personal data will be deleted as soon as they are no longer required for the implementation and processing of the respective training or for the use of the learning platform and there are no legal retention obligations or other legitimate reasons for further storage.
XXV. Our social media presence and channels
Description and Scope of Processing
We maintain publicly accessible company profiles on various social media platforms. We are currently present on LinkedIn, Facebook, Instagram, YouTube and X (formerly Twitter).
For these information and communication offers, we use the technical platforms and services of the respective providers. If you visit our social media sites, the respective platform operators may process personal data about you. This may include, in particular, your IP address, device and browser information as well as information about your use and interactions with the respective platform.
If you are logged in to the respective platform, the data collected can be assigned to your user account. The platform operators can use the data in particular to provide their services, for analysis and statistical purposes and to personalize content and advertising. In principle, we have no complete influence on the type and extent of data processing carried out by the respective platform operators under their own responsibility.
The platforms sometimes provide us with statistical information about the use of our social media presence (so-called insights). These may in particular contain information about views, reach and interactions with our posts.
If you interact with us via our social media sites, for example commenting on, sharing or liking our posts, sending us a message or mentioning us in a post, we also process the personal data that you provide or that is visible to us. This may include, in particular, your user name, your published content and the content of your communication with us.
We may share or republish (repost) publicly accessible posts in which we are mentioned or tagged using the functions provided by the respective platform.
Further information about the processing of personal data by the respective platform operators can be found in their Privacy Policys:
- Facebook and Instagram (Meta): https://www.facebook.com/privacy/policy/?locale=en_GB
- YouTube (Google): https://policies.google.com/privacy
Legal Basis for Processing
The legal basis for the processing of personal data carried out by us in connection with our social media presence is generally Article 6 (1) (f) GDPR. Our legitimate interest lies in public relations, the presentation of our company and our services as well as communication with interested parties, customers, business partners and other users of the respective platform.
If communication via a social media platform serves to initiate or implement a contractual relationship, processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR.
If processing is based on your consent, this is carried out on the basis of Art. 6 Para. 1 lit. a GDPR.
Data transfer to third countries
When using the social media platforms, personal data may be processed outside the European Union or the European Economic Area, particularly in the USA. If personal data is transferred to third countries, this is done in accordance with Art. 44 ff. GDPR. Further information on international data transfers and the guarantees used can be found in the Privacy Policys of the respective platform operators.
Storage Period, Right to Object and Erasure
The personal data we process directly will be deleted as soon as they are no longer required for the stated purposes and there are no legal retention obligations or other reasons for further storage.
In principle, we have no influence on the storage period of the data processed by the respective platform operators under their own responsibility. Information on the storage period as well as objection and deletion options can be found in the Privacy Policys of the respective platform operators.
To exercise your data subject rights, you can contact us or the respective platform operator. If your request relates to processing that is carried out exclusively by the platform operator, the platform operator is responsible for processing your request.
XXVI. Data Subject Rights
To the extent required by law, you have rights as a data subject when it comes to the processing of your data. We would like to inform you about what data subject rights you have and how you can exercise them:
Right of Access (Art. 15 GDPR): You have the right to request information from us about which personal data we process about you and for what purpose. If you request information that is not made in writing using a contact address already stored in our systems, we ask for your understanding that we may require evidence from you that proves that you are the person you say you are.
Right to rectification (Art. 16 GDPR) or deletion (Art. 17 GDPR): You have the right to have incorrect or incomplete personal data that we have stored about you corrected or deleted if it is no longer needed or the processing violates privacy policies
Right to restriction of processing (Art. 18 GDPR): You have the right to request that the processing of your personal data be restricted if you dispute the accuracy of the data, the processing is unlawful or you have objected to the processing.
Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
Right to data portability (Art. 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, common and machine-readable format and to transmit it to another controller.
We do not use automated processing with profiling.
Right to Lodge a Complaint (Art. 77 GDPR): You also have the right to complain to a data protection supervisory authority about our processing of your personal data, in particular in the member state of your usual place of residence, your place of work or the place of the alleged violation.
We expressly point out that you have the right
Objection
to object to the processing (Art. 21 GDPR) if the data processing was carried out on the basis of a legitimate interest and your particular situation gives rise to reasons against the data processing. We reserve the right to examine your particular situation and process data in this regard.
If data is processed based on our legitimate interest for the purpose of direct advertising, you can object to the processing at any time without giving reasons.
Procedure for Exercising Data Subject Rights
If you assert your rights against us, we will process the data you provide to us in order to fulfill your claim. Following the fulfillment of your claim, we will store the data you have transmitted to us and the data we have transmitted to you in return for the purpose of documentation until the expiry of the statute of limitations under administrative offense law (3 years).
