We would like to take this opportunity to inform you about which of your personal data we collect when you visit our website and for what purposes it is used.
This privacy policy applies to the website of Ninox Software GmbH, which can be accessed at the domain ninox.com and its various subdomains ("our website").
Who is responsible and how can I contact them?
Responsible
for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR)
Ninox Software GmbH
Monbijoustraße 5
10117 Berlin, Germany
Email: support@ninox.de
Further information can be found in our legal notice.
Data Protection Officer
DataSolution LUD GmbH
Isarstr. 13
14974 Ludwigsfelde
Berit Schubert
Email: dpo@ninox.com
What is this about?
This privacy policy meets the legal requirements for transparency in the processing of personal data. This includes all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, email address, IP address or user behaviour when visiting a website. Information that we cannot link to your person (or only with disproportionate effort), e.g. through anonymisation, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose.
Stored personal data is deleted as soon as the purpose of processing has been achieved and there are no legitimate reasons for further storage of the data. We will inform you of the specific storage periods or criteria for storage in the individual processing operations. Irrespective of this, we store your personal data in individual cases for the assertion, exercise or defence of legal claims and in the event of statutory retention obligations.
Who receives my data?
We only pass on your personal data that we process on our website and on our platform to third parties if this is necessary for the fulfilment of the purposes and is covered by the legal basis (e.g. consent or protection of legitimate interests) in individual cases. In addition, we pass on personal data to third parties in individual cases if this serves to assert, exercise or defend legal claims. Possible recipients may then be, for example, law enforcement authorities, solicitors, auditors, courts, etc.
If we use service providers to operate our website who process personal data on our behalf within the scope of order processing in accordance with Art. 28 GDPR, these may be recipients of your personal data. You can find more detailed information on the use of order processors and web services in the overview of the individual processing operations.
Are cookies used?
Cookies are small text files that we send to the browser of your end device and store there when you visit our website. As an alternative to using cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, enable us to perform various analyses so that, for example, we are able to recognise the browser you are using when you visit our website again and transmit various information to us (non-necessary cookies). Cookies enable us, among other things, to make our website more user-friendly and effective for you by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot execute programmes or contain viruses.
We provide information about the respective services for which we use cookies in the individual processing operations. Detailed information about the cookies used can be found in the cookie settings or in the Consent Manager of this website.
What are my rights?
Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you as the data subject have the following rights:
- Information pursuant to Art. 15 GDPR about the data stored about you in the form of meaningful information about the details of the processing and a copy of your data;
- Rectification pursuant to Art. 16 GDPR of inaccurate or incomplete data stored by us;
- Erasure pursuant to Art. 17 GDPR of the data stored by us, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- Restriction of processing pursuant to Art. 18 GDPR, insofar as the accuracy of the data is disputed, the processing is unlawful, we no longer need the data and you refuse to have it deleted because you need it to assert, exercise or defend legal claims or you have lodged an objection to the processing pursuant to Art. 21 GDPR.
- Data portability pursuant to Art. 20 GDPR, insofar as you have provided us with personal data within the scope of consent pursuant to Art. 6 (1) lit. a GDPR or on the basis of a contract pursuant to Art. 6 (1) lit. b GDPR and this has been processed by us using automated procedures. You will receive your data in a structured, commonly used and machine-readable format, or we will transfer the data directly to another controller, if this is technically feasible.
- Objection pursuant to Art. 21 GDPR to the processing of your personal data, insofar as this is based on Art. 6 para. 1 lit. e, f GDPR and there are reasons for this arising from your particular situation or the objection is directed against direct marketing. The right to object does not apply if there are compelling legitimate grounds for the processing or if the processing is for the establishment, exercise or defence of legal claims. If the right to object does not apply to individual processing operations, this is indicated there.
- Revocation pursuant to Art. 7 (3) GDPR of your consent with effect for the future.
- Complaint pursuant to Art. 77 GDPR to a supervisory authority if you believe that the processing of your personal data violates the GDPR. As a rule, you can contact the supervisory authority of your usual place of residence, your place of work or our company headquarters.
How is my data processed in detail?
Below, we provide information about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data and the respective storage period. There is no automated decision-making in individual cases, including profiling.
Provision of the website
Type and scope of processing
When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:
- IP address of the requesting computer
- Date and time of access
- Name and URL of the file accessed
- Website from which access is made (referrer URL)
- Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider
We host our website with Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter: Webflow). When you visit our website, Webflow collects various log files, including your IP addresses.
Webflow is a tool for creating and hosting websites. Webflow stores cookies or other recognition technologies that are necessary for displaying the page, providing certain website functions and ensuring security (necessary cookies).
For details, please refer to Webflow's privacy policy: EU & Swiss Privacy Policy | Webflow 22.
Purpose and legal basis
The processing is carried out to protect our overriding legitimate interest in displaying our website and ensuring security and stability on the basis of Art. 6 para. lit. f GDPR. The collection of data and storage in log files is essential for the operation of the website. There is no right to object to the processing due to the exception under Art. 21(1) GDPR. Insofar as further storage of the log files is required by law, processing is carried out on the basis of Art. 6(1)(c) GDPR. There is no legal or contractual obligation to provide the data, but it is technically impossible to access our website without providing the data.
Storage period
The aforementioned data is stored for the duration of the website display and, for technical reasons, for a maximum of 7 days beyond that.
Contact form / Contact
Type and scope of processing
When you contact us by e-mail, telephone or via a contact form, the data you provide (e.g. e-mail address, name, telephone number or content of the enquiry) will be processed by us in order to answer your questions and/or process your request.
We use the Hubspot service from HubSpot Inc, 25 First Street, 2nd Floor, MA 02141 Cambridge, USA for the form on our website. Cookies are set by the service provider in order to display the form. In addition, your data is stored in Hubspot as our CRM system when you communicate with us via the form, by email or by telephone. This is a service provider from a third country. Standard contractual clauses have been agreed with the service provider and Hubspot is certified in the Data Privacy Framework. Hubspot's privacy policy can be found here: https://legal.hubspot.com/privacy-policy
To use the contact form in the forum, we use the service of the provider Forumbee LLC, 1 Harbor Dr Ste 300, Sausalito, USA. Please note that the provider is a US company.
Forumbee's privacy policy can be found here: https://forumbee.com/privacy
Purpose and legal basis
Your data is processed for the purpose of communicating with you and processing your enquiry on the basis of your consent in accordance with Art. 6(1)(a) GDPR. If your enquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of fulfilling the contract on the basis of Art. 6 (1) lit. b GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to process your enquiry without providing the information.
Storage period
We store the data collected from each enquiry for a period of three years, starting from the completion of your enquiry or until you withdraw your consent.
If you use the contact form within the framework of a contractual relationship, we store the data collected for each enquiry for a period of three years from the end of the contractual relationship.
Newsletter
Type and scope of processing
We send emails and other electronic notifications with promotional information (hereinafter "newsletter") only with your consent or legal permission. The newsletters contain information about our products, offers, promotions and our company. By subscribing to our newsletter, you agree to receive it.
We use Hubspot, a service provided by HubSpot Inc., 25 First Street, 2nd Floor, MA 02141 Cambridge, USA, to send the newsletter. This is a service provider from a third country. Standard contractual clauses have been agreed with the service provider and Hubspot is certified in the Data Privacy Framework. Hubspot's privacy policy can be found here: https://legal.hubspot.com/privacy-policy
Purpose and legal basis
We process your data for the purpose of sending newsletters on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. The use of a mailing service provider, the performance of statistical surveys and analyses, and the logging of the registration process are based on our legitimate interests pursuant to Art. 6 (1) (f) GDPR. Our interest is in using a user-friendly and secure newsletter system that serves both our business interests and meets your expectations.
By unsubscribing from the newsletter, you can declare your revocation at any time with effect for the future in accordance with Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to send the newsletter without providing your data.
Storage period
After you subscribe to the newsletter, we store your data for a maximum of 24 hours until your subscription is confirmed. After successful confirmation, we store your data until you revoke your consent (unsubscribe from the newsletter) and, for technical reasons, for a maximum of 7 days beyond that.
Registration of a customer account
Type and scope of processing
As part of the order process, we collect your personal data to register a customer account. When registering the user account, we also collect a password that you have set yourself. In addition, you can voluntarily provide additional information that you consider necessary for processing the order.
The registration data is stored in the Atlas system of MongoDB, Building 2 Number OneBallsbridge, Shelbourne Rd, Dublin, Ireland. Appropriate agreements for order processing have been concluded with the service provider. Further information can be found in the MongoDB privacy policy.
In the business customer area, information about the company that is necessary for further contract processing is also requested. If you register as a business customer, we store your data in our CRM system. We use the CRM system of HubSpot Inc., 25 First Street, 2nd Floor, MA 02141 Cambridge, USA, to process your data in connection with the performance of contractual services and marketing activities. Appropriate agreements for order processing have been concluded with the service provider. HubSpot has undertaken to treat the data you provide in accordance with data protection regulations. The service provider uses organisational and technical security measures to protect your data. We would like to point out that the provider is a US company. The standard contractual clauses have been concluded with the service provider and Hubspot is certified in the Data Privacy Framework.
HubSpot's privacy policy can be found here: https://legal.hubspot.com/privacy-policy
Purpose and legal basis
We process your personal data for the purpose of registering a customer account to fulfil a contract with you in accordance with Art. 6 (1) (b) GDPR. There is a contractual obligation to provide your data insofar as it relates to the mandatory fields, as this information is necessary for us to fulfil the contract. There is no legal obligation to provide the data. Without the provision of this information, registration and thus the conclusion of a contract is not possible. There is no obligation to provide the additional information provided voluntarily.
The additional processing of your password for the registration of the user account is carried out for the purpose of providing a customer account. By deleting your customer account, you can declare your revocation in accordance with Art. 7 (3) GDPR at any time with effect for the future.
Storage period
When you register a permanent customer account, we store the purchase-related data beyond the end of the contract until you revoke your consent (deletion of the customer account). In both cases, your data will only be stored further if there are legal storage obligations (e.g. tax and commercial law).
Use of the Ninox platform
With Ninox's no-code/low-code platform, customers can create their own business applications. As part of the further development of the platform, there will be two parallel versions of the platform. These are referred to here as Ninox 3 (previous version) and Ninox 4 (new version).
Type and scope of processing
When using our product, personal data is sometimes entered and stored by the customer themselves in the database applications created by the customer. We have no knowledge of the type of data processed in the applications. This is the responsibility of the customer. In the event of support, support staff may, with the customer's consent, gain knowledge of the stored data.
Your personal data will only be passed on to third parties and processors in accordance with Art. 28 GDPR if this is necessary for the provision of services.
The following service providers are used to host the platform:
Public Cloud Ninox 3:
Hetzner: https://www.hosteurope.de/AGB/Datenschutzerklaerung/
Amazon AWS: https://aws.amazon.com/de/compliance/germany-data-protection/
Redis: https://redis.com/legal/privacy-policy/
Private Cloud Ninox 3:
Amazon AWS: https://aws.amazon.com/de/compliance/germany-data-protection/
Hetzner: https://www.hetzner.com/de/privacy-policy-notice
Ninox 4:
Amazon AWS: https://aws.amazon.com/de/compliance/germany-data-protection/
Ninox 4 is hosted at the AWS data centre in Frankfurt.
Use of artificial intelligence (AI) – Ninox 4
The creation of applications using the Ninox platform is supported by AI in Ninox 4. Users can choose to use AI support or opt out of it. We use Anthropic as our service provider for the provision of AI. More information about the service can be found here: https://www.anthropic.com
Purpose and legal basis
We process your personal data for the purpose of hosting and using the platform, registrations and deregistrations, and backups, i.e. to fulfil the contract with you in accordance with Art. 6 (1) (b) GDPR.
The additional processing of your password for the registration of the user account is carried out for the purpose of providing a customer account. Furthermore, we send emails with information and product updates as part of our product information based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR.
Storage period
You can delete the applications created on the platform, including personal data, yourself. When you register a permanent customer account, we store the purchase-related data beyond the end of the contract until you revoke your consent (deletion of the customer account). In both cases, your data will only be stored further if there are legal storage obligations (e.g. tax and commercial law).
Comment function / forum
Type and scope of processing
If you use the comment function in the forum on our website, we collect your username and comment/message and store this data together with your IP address and the date. If you post comments as a registered user, we also assign them to your user account.
To use the comment function in the forum, we use the service provided by Forumbee LLC, 1 Harbor Dr Ste 300, Sausalito, USA. The standard contractual clauses have been agreed with the service provider.
Forumbee's privacy policy can be found here: https://forumbee.com/privacy
Purpose and legal basis
Your personal data is processed for the purpose of commenting on content on our website on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. By sending an informal message [Delete your comments], you can declare your revocation at any time with effect for the future in accordance with Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data, but it is not possible to use the comment function without disclosing your data.
Storage period
We store your personal data until you withdraw your consent and, for technical reasons, for a maximum of 7 days beyond that.
Ninox documentation
Type and scope of processing
For Ninox documentation at https://docs.ninox.com/de, we use the Forumbee service provided by Forumbee LLC, 1 Harbor Dr Ste 300 Sausalito, Sausalito, USA. A DPA and standard contractual clauses have been concluded with the service provider.
Forumbee's privacy policy can be found here: https://forumbee.com/privacy
Purpose and legal basis
Your personal data is processed for the purpose of providing documentation for Ninox products on the basis of our legitimate interest pursuant to Art. 6 (1) lit. f GDPR.
Storage period
For technical reasons, we store your personal data for a maximum of 7 days.
Registration and participation in webinars
Type and scope of processing
On our website and in our LinkedIn ads, you have the opportunity to register for and participate in webinars. We use the Zoom service provided by Zoom Video Communications, Inc, 55 Almaden Boulevard, 6th Floor, San Jose, USA, to register and conduct the webinars. Please note that the provider is a US company. The standard contractual clauses have been concluded with the service provider.
Zoom's privacy policy can be found here: https://explore.zoom.us/de/privacy/
We also use HubSpot Inc, 25 First Street, 2nd Floor, MA02141 Cambridge, USA, for organisation and invitations. Your personal data is processed on our behalf in accordance with Art. 28 GDPR. Please note that the provider is a US company. Standard contractual clauses have been agreed with the service provider and Hubspot is certified under the Data Privacy Framework.
Hubspot's privacy policy can be found here: https://legal.hubspot.com/privacy-policy
We use the following services to create videos and clips from the webinars. These services are AI agents that use artificial intelligence to create summaries and videos. Please note that the provider is a US company. The service providers are certified in the Data Privacy Framework. In addition, we have concluded data processing agreements:
Descript Inc 375 ALABAMA ST STE 300 SAN FRANCISCO, California 94110, USA: https://www.descript.com/privacy
HeyGen, 12130 Millennium Drive Suite 300, CA 90094, Los Angeles, USA: https://www.heygen.com/privacy
Purpose and legal basis
The processing of your data for the purpose of registering for, conducting and following up on webinars is based on your consent in accordance with Art. 6 (1) lit. a GDPR. There is no legal or contractual obligation to provide your data, but participation in the webinars is not possible without providing the data.
Storage period
We store the registration data collected for the webinars for a period of one year, beginning with the registration or until you revoke your consent.
Applications
It is possible to apply for advertised positions via internet portals such as LinkedIn or directly. If you take advantage of this option as an applicant, the data transmitted to us will be processed electronically. This data includes:
- First name, surname
- Contact details (e-mail address, telephone number)
- Cover letter
- File attachments with your detailed application
We use Personio, a service provided by Persiono GmbH, Munich, to process your application. All further correspondence regarding your application will be conducted via this service. An agreement has been concluded with the service provider in accordance with Art. 28 GDPR.
Purpose and legal basis for data processing
The data transmitted to us will be used exclusively for the processing of the application by the specialist department and for communication. The legal basis for the processing of the data is the contract initiation relationship or the conclusion of a contract in accordance with Art. 6 (1) lit. b GDPR.
Duration of storage
The data will be deleted as soon as it is no longer required for the purpose for which it was collected, at the latest 6 months after rejection. In the case of a contractual relationship, we will delete the data received as soon as national, commercial law, statutory or contractual retention requirements have been fulfilled.
Right to object
You have the right to object to the processing of your data at any time. To do so, please send an email to the department to which you sent your application (advertising department).
Presence on social media platforms
We maintain fan pages, accounts or channels on the networks listed below in order to provide you with information and offers within social networks and to offer you additional ways to contact us and find out about our offers. Below, we provide information about what data we or the respective social network process about you in connection with your access to and use of our fan pages/accounts.
Data that we process about you
If you wish to contact us via Messenger or direct message on the respective social network, we generally process your user name that you use to contact us and, if necessary, store other data you provide to the extent necessary to process/respond to your request.
The legal basis for this is Art. 6 (1) sentence 1 f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).
(Static) usage data that we receive from social networks
We receive statistics about our accounts that are automatically provided via Insights functions. The statistics include the total number of page views, likes, information about page activity and post interactions, reach, video views, and information about the proportion of men/women among our fans/followers.
The statistics only contain aggregated data that cannot be traced back to individual persons. They are not identifiable to us.
What data social networks process about you
You do not need to be a member of the respective social network to view the content of our fan pages or accounts, and no user account for the respective social network is required.
Please note, however, that when you visit the respective social network, social networks also collect and store data from website visitors without a user account (e.g. technical data to display the website to you) and use cookies and similar technologies, over which we have no influence. Details can be found in the privacy policy of the respective social network (see the corresponding links above).
If you wish to interact with the content on our fan pages/accounts, e.g. comment on, share or like our posts/contributions and/or contact us via messenger functions, you must first register with the respective social network and provide personal data.
We have no influence on the data processing by social networks in the context of your use. To the best of our knowledge, your data is stored and processed in particular in connection with the provision of the services of the respective social network and, furthermore, for the analysis of usage behaviour (using cookies, pixels/web beacons and similar technologies) on the basis of which advertising based on your interests is displayed both within and outside the respective social network. It cannot be ruled out that your data may also be stored by social networks outside the EU/EEA and passed on to third parties.
Information on, among other things, the exact scope and purposes of the processing of your personal data, the storage period/deletion, and guidelines on the use of cookies and similar technologies in the context of registration and use of social networks can be found in the privacy policies/cookie guidelines of the social networks. There you will also find information about your rights and options for objection.
LinkedIn is a social network owned by LinkedIn Inc. based in Sunnyvale, California, USA, which enables the creation of private and professional profiles. Users can maintain their existing contacts and make new ones. Companies can create profiles where photos and other company information can be uploaded. Other LinkedIn users have access to this information and can write their own articles and share this content with others.
The focus is on professional exchange on specialist topics with people who have the same professional interests. In addition, LinkedIn is often used by companies and other organisations to recruit employees and present themselves as attractive employers.
For more information about LinkedIn, visit: https://about.linkedin.com/
Further information on data protection at LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy
We do not collect or process any personal data via our LinkedIn company page.
When you visit our Instagram page, Instagram collects your IP address and other information stored on your computer in the form of cookies. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Instagram provides more detailed information on this at the following link: https://facebook.com/help/pages/insights.
We cannot draw any conclusions about individual users from the statistical information transmitted. We only use this information to respond to the interests of our users and to continuously improve and ensure the quality of our online presence.
We collect your data via our fan page solely for the purpose of enabling communication and interaction with us. This collection generally includes your name, message content, comment content and the profile information you have made "publicly" available.
The processing of your personal data for the above-mentioned purposes is based on our legitimate business and communication interests in offering an information and communication channel in accordance with Art. 6 (1) f) GDPR. If you, as a user, have given your consent to data processing to the respective social network provider, the legal basis for processing extends to Art. 6 (1) a), Art. 7 GDPR.
Due to the fact that the actual data processing is carried out by the social network provider, our access to your data is limited. Only the social network provider is authorised to access your data in full. For this reason, only the provider can directly take and implement appropriate measures to fulfil your user rights (request for information, request for deletion, objection, etc.). The most effective way to assert your rights is therefore directly with the respective provider.
We are jointly responsible with Instagram for the personal content of the fan page. Data subject rights can be asserted with Facebook Ireland and with us.
The primary responsibility for processing Insights data lies with Instagram in accordance with the GDPR, and Instagram fulfils all obligations under the GDPR with regard to the processing of Insights data. Facebook Ireland provides the essence of the Page Insights supplement to the data subjects.
We do not make any decisions regarding the processing of Insights data and all other information arising from Art. 13 GDPR, including the legal basis, identity of the controller and storage period of cookies on user devices.
Further information can be found directly on Instagram (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum.
AWS S3
Type and scope of processing
We use AWS S3 to properly provide the content of our website and our platform. AWS S3 is a service provided by Amazon Web Services, Inc., which acts as a content delivery network (CDN) on our website.
A CDN helps to deliver content from our online offering, in particular files such as graphics or scripts, more quickly with the aid of regionally or internationally distributed servers. When you access this content, you establish a connection to Amazon Web Services, Inc. servers, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of AWS S3.
Purpose and legal basis
The use of the Content Delivery Network is based on our legitimate interests, i.e. our interest in the secure and efficient provision and optimisation of our online offering in accordance with Art. 6 (1) lit. f. GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Amazon Web Services, Inc. Further information can be found in the privacy policy for AWS S3: https://aws.amazon.com/de/privacy/.
Bing Ads
Type and scope of processing
We have integrated Bing Ads into our website. Bing Ads is a service provided by Microsoft Corporation to display targeted advertising to users. Bing Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users.
Bing Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of the advertising. Furthermore, Bing Ads delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider.
In this case, your data is transferred to the operator of Bing Ads, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.
Purpose and legal basis
We process your data with the help of Bing Ads for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Microsoft Corporation. Further information can be found in the privacy policy for Bing Ads: https://privacy.microsoft.com/de-de/privacystatement.
Bing Pixel
Type and scope of processing
We use Bing Pixel from Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States, to create so-called custom audiences, i.e. to segment groups of visitors to our online offering, determine conversion rates and then optimise them. This happens in particular when you interact with advertisements that we have placed with Microsoft Corporation.
Purpose and legal basis
We process your data with the help of Bing Pixel for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Microsoft Corporation. Further information can be found in the privacy policy for Bing Pixel: https://privacy.microsoft.com/en-us/privacystatement.
Clarity
Type and scope of processing
We have integrated Clarity into our website. Clarity is a service provided by Microsoft Corporation and offers optimisation tools that analyse the behaviour and feedback of users of our website through analysis and feedback tools.
Clarity uses cookies and other browser technologies to evaluate user behaviour and recognise users.
This information is used, among other things, to compile reports on website activity and to statistically evaluate visitor data. Clarity also records clicks, mouse movements and scroll heights to create so-called heat maps and session replays.
In this case, your data is transferred to the operator of Clarity, Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States.
Purpose and legal basis
We process your data with the help of Clarity for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Microsoft Corporation. Further information can be found in the privacy policy for Clarity: https://privacy.microsoft.com/en-us/privacystatement.
Cookiebot
Type and scope of processing
We have integrated Cookiebot into our website. Cookiebot is a consent solution from Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, which can be used to obtain and document consent to the storage of cookies. Cookiebot uses cookies or other web technologies to recognise users and store the consent given or revoked.
Purpose and legal basis
The service is used on the basis of obtaining the legally required consent to the use of cookies in accordance with Art. 6(1)(c) GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Cybot A/S. Further information can be found in the privacy policy for Cookiebot: https://www.cookiebot.com/de/privacy-policy/.
Cookiebot CDN
Type and scope of processing
We use Cookiebot CDN to ensure the proper provision of content on our website. Cookiebot CDN is a service provided by Cybot A/S, which acts as a content delivery network (CDN) on our website to ensure the functionality of other Cybot A/S services. These services are covered in a separate section of this privacy policy. This section deals solely with the use of the CDN.
A CDN helps to deliver content from our online offering, in particular files such as graphics or scripts, more quickly with the help of regionally or internationally distributed servers. When you access this content, you connect to servers belonging to Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Cookiebot CDN.
Purpose and legal basis
The use of the content delivery network is based on our legitimate interests, i.e. our interest in the secure and efficient provision and optimisation of our online offering in accordance with Art. 6(1)(f) GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Cybot A/S. Further information can be found in the privacy policy for Cookiebot CDN: https://www.cookiebot.com/de/privacy-policy/.
Google Ads
Type and scope of processing
We have integrated Google Ads into our website. Google Ads is a service provided by Google Ireland Limited to display targeted advertising to users. Google Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users.
Google Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of the advertising. Furthermore, Google Ads delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider.
If you are registered with a Google Ireland Limited service, Google Ads can assign the visit to your account. Even if you are not registered with Google Ireland Limited or have not logged in, it is possible that the provider will find out and store your IP address and other identifying features.
In this case, your data will be passed on to the operator of Google Ads, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
In addition, we have integrated Google's enhanced conversions. Here, the conversion data is supplemented by data collected by us (from website tags or imported offline events), which is sent to Google as hash values in a privacy-friendly manner. For this purpose, the secure one-way hash algorithm SHA256 is applied to the customer data we collect ourselves (e.g. email addresses) before it is sent to Google.
Purpose and legal basis
We process your data with the help of Google Ads for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy.
Google Analytics
Type and scope of processing
Our website uses Google Analytics 4, a web analytics service provided by Google LLC. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building GordonHouse, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.
We use the User ID function. With the help of the User ID, we can assign a unique, permanent ID to one or more sessions (and the activities within these sessions) and analyse user behaviour across devices.
We also use Google Signals. This allows Google Analytics to collect additional information about users who have enabled personalised ads (interests and demographic data), and ads can be delivered to these users in cross-device remarketing campaigns.
In Google Analytics 4, IP address anonymisation is enabled by default. Due to IP anonymisation, your IP address is truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics is not merged with other Google data.
During your visit to the website, your user behaviour is recorded in the form of "events". Events can be:
- Page views
- First visit to the website
- Start of session
- Your "click path", interaction with the website
- Scrolls (whenever a user scrolls to the bottom of the page (90%))
- Clicks on external links
- Internal search queries
- Interaction with videos
- File downloads
- Ads viewed/clicked
- Language settings
The following is also recorded:
- Your approximate location (region)
- Your IP address (in abbreviated form)
- Technical information about your browser and the devices you use (e.g. language setting, screen resolution)
- Your internet service provider
- the referrer URL (which website/advertising medium you used to access this website)
Purpose and legal basis
We process data using Google Analytics for the purpose of optimising our website, creating reports, data analysis and marketing purposes on the basis of your consent in accordance with Art. 6 (1) lit. a. GDPR.
You can revoke your consent at any time with future effect by accessing the cookie settings and changing your selection there. The lawfulness of the processing carried out on the basis of your consent until revocation remains unaffected.
You can also prevent cookies from being stored in the first place by adjusting your browser software settings accordingly. However, if you set your browser to reject all cookies, this may lead to functional restrictions on this and other websites. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by
a. refusing to give your consent to the setting of the cookie, or
b. downloading and installing the browser add-on to deactivate Google Analytics here.
Third country transfer
If data is processed outside the EU/EEA and there is no level of data protection that meets European standards, we have concluded EU standard contractual clauses with the service provider to ensure an adequate level of data protection. The parent company of Google Ireland, Google LLC, is based in California, USA. The transfer of data to the USA and access by US authorities to data stored by Google cannot be ruled out. From a data protection perspective, the USA is currently considered a third country. You do not have the same rights there as you do within the EU/EEA. You may have no legal recourse against access by authorities.
Storage period
We have no influence on the specific storage period for the processed data; this is determined by Google Ireland Limited. Further information on the terms of use of Google Analytics and Google's privacy policy can be found at https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en.
Google DoubleClick
Type and scope of processing
We have integrated components from DoubleClick by Google into our website. DoubleClick is a Google brand under which special online marketing solutions are primarily marketed to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with every impression, click or other activity.
Each of these data transfers triggers a cookie request to the browser of the person concerned. If the browser accepts this request, DoubleClick sets a cookie in your browser.
DoubleClick uses a cookie ID that is necessary for the technical process. The cookie ID is required, for example, to display an advertisement in a browser. DoubleClick can also use the cookie ID to track which advertisements have already been displayed in a browser in order to avoid duplicate impressions. Furthermore, the cookie ID enables DoubleClick to track conversions. Conversions are tracked, for example, when a user has previously seen a DoubleClick advertisement and subsequently makes a purchase on the advertiser's website using the same internet browser.
A DoubleClick cookie does not contain any personal data, but may contain additional campaign identifiers. A campaign identifier is used to identify the campaigns you have already been exposed to on other websites. As part of this service, Google obtains data that Google also uses to generate commission statements. Among other things, Google can track that you have clicked on certain links on our website. In this case, your data is passed on to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable data protection regulations of DoubleClick by Google can be found at https://policies.google.com/privacy.
Purpose and legal basis
We process your data with the help of the DoubleClick cookie for the purpose of optimising and displaying advertising on the basis of your consent in accordance with Art. 6 (1) (a) GDPR. You give your consent by setting the use of cookies (cookie banner/consent manager), which you can also revoke at any time with future effect in accordance with Art. 7(3) GDPR. Among other things, the cookie is used to place and display user-relevant advertisements and to create or improve reports on advertising campaigns. Furthermore, the cookie serves to prevent the same advertisement from being displayed multiple times. Each time you visit one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and commission billing. There is no legal or contractual obligation to provide your data. If you do not give us your consent, you can still visit our website without restriction, but not all functions may be fully available.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google DoubleClick: https://policies.google.com/privacy.
Legal basis and revocation
We process your data with the help of Google Analytics 4 on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR in conjunction with § 25 TTDSG. Your consent. You give your consent by setting the use of cookies (cookie banner/consent manager), with which you can also declare your revocation at any time with effect for the future in accordance with Art. 7 (3) GDPR.
You can also prevent the storage of cookies from the outset by adjusting your browser software settings accordingly. However, if you configure your browser to reject all cookies, this may result in restrictions on the functionality of this and other websites. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by (I) not giving your consent to the setting of the cookie or (II) downloading and installing the browser add-on to deactivate Google Analytics HERE .
For more information, please refer to Google's Terms of Use and Privacy Policy.
Google Tag Manager
Type and scope of processing
We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags via an interface and enables us to control the precise integration of services on our website.
This allows us to flexibly integrate additional services in order to evaluate user access to our website.
Purpose and legal basis
The use of Google Tag Manager is based on our legitimate interests, i.e. interest in optimising our services in accordance with Art. 6 para. 1 lit. f. GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/.
Google reCAPTCHA
Type and scope of processing
We have integrated components from Google reCAPTCHA into our website. Google reCAPTCHA is a service provided by Google Ireland Limited that enables us to distinguish whether a contact request originates from a natural person or is automated by a programme. When you access this content at , you establish a connection to the servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted. Furthermore, Google reCAPTCHA records the user's dwell time and mouse movements in order to distinguish automated requests from human ones. This data is processed exclusively for the above-mentioned purposes and to maintain the security and functionality of Google reCAPTCHA.
Purpose and legal basis
The use of the service is based on our legitimate interests, i.e. for protection during the transmission of forms in accordance with Art. 6 (1) lit. f. GDPR.
Storage period
We have no influence over the specific storage period for the processed data; this is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US.
LinkedIn Ads
Type and scope of processing
We have integrated LinkedIn Ads into our website. LinkedIn Ads is a service provided by LinkedIn Corporation that displays targeted advertising to users. LinkedIn Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users. LinkedIn Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of the advertising. Furthermore, LinkedIn Ads delivers targeted advertising based on behavioural profiles and geographical location. Your IP address and other identification features such as your user agent are transmitted to the provider. In this case, your data is transferred to the operator of LinkedIn Ads, LinkedIn Corporation, Sunnyvale, California, US.
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.
Purpose and legal basis
We process data with the help of LinkedIn Ads for the purpose of optimising our advertising campaigns and for marketing purposes on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by LinkedIn Corporation. Further information can be found in the privacy policy for LinkedIn Ads: https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy.
LinkedIn Insight Tag
Type and scope of processing
We use LinkedIn Insight Tag from LinkedIn Corporation, Sunnyvale, California, US, to create target groups, segment visitor groups to our online offering, determine conversion rates and then optimise them. This happens in particular when you interact with advertisements that we have placed with LinkedIn Corporation. To this end, LinkedIn Corporation offers retargeting for website visitors in order to display targeted advertising outside our website.
LinkedIn Insight Tag collects data about visits to our website, including URL, referrer URL, IP address, device and browser characteristics (user agent) and timestamp. This data is used to generate anonymised reports about the website audience and ad performance.
Purpose and legal basis
We process your data using LinkedIn Insight Tag for the purpose of optimising our website and for marketing purposes on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by LinkedIn Corporation. Further information can be found in the privacy policy for LinkedIn Insight Tag: https://www.linkedin.com/legal/privacy-policy.
Mixpanel
Type and scope of processing
We use the web analysis tool Mixpanel from Mixpanel Inc., One Front Street, Floor 28, San Francisco, CA 94111, USA ("Mixpanel") on our websites. Mixpanel enables us to perform quantitative product analyses in order to optimise the quality of our services. Only pseudonymous data is processed; there is no tracking of user activities that can be traced back to the user.
Purpose and legal basis
The legal basis for the processing of personal data is our legitimate interest pursuant to Art. 6 (1) (f) GDPR.
The recipient of the data is Mixpanel Inc., One Front Street, Floor 28, San Francisco, CA 94111, USA. In principle, the data processed by Mixpanel is stored in data centres within the European Union. However, due to the corporate structure of Mixpanel Inc., it cannot be completely ruled out that personal data may be transferred to third countries, in particular the USA.
Storage period
The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In addition, the data will be deleted if you revoke your consent or request the deletion of your personal data.
You can object to the collection, processing and recording of data generated by Mixpanel at any time. Mixpanel Inc.'s privacy policy can be found at https://mixpanel.com/legal/privacy-policy/.
YouTube
Type and scope of processing
We have integrated YouTube Video into our website. YouTube Video is a component of the video platform of YouTube, LLC, where users can upload content, share it via the Internet and receive detailed statistics.
YouTube video enables us to integrate content from the platform into our website.
YouTube Video uses cookies and other browser technologies to evaluate user behaviour, recognise users and create user profiles. This information is used, among other things, to analyse the activity of the content listened to and to create reports. If a user is registered with YouTube, LLC, YouTube Video can assign the videos played to the profile.
When you access this content, you connect to servers belonging to YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, whereby your IP address and, if applicable, browser data such as your user agent are transmitted.
Purpose and legal basis
The use of the service is based on your consent in accordance with Art. 6 (1) (a) GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy.
Reddit Ads
Type and scope of processing
We have integrated Reddit Ads into our website. Reddit Ads is a service provided by Reddit, Inc. that displays targeted advertising to users. Reddit Ads uses cookies and other browser technologies to evaluate user behaviour and recognise users. Reddit Ads collects information about visitor behaviour on various websites. This information is used to optimise the relevance of the advertising. Furthermore, Reddit Ads delivers targeted advertising based on behavioural profiles and demographic data. Your IP address and other identifying features such as your user agent are transmitted to the provider. In this case, your data is transferred to the operator of Reddit Ads, Reddit, Inc., San Francisco, California, US.
Web tracking technologies are used to create pseudonymised user profiles. These profiles cannot be linked to you as a natural person, but are used, for example, for segmentation when displaying advertisements.
Purpose and legal basis
We process data with the help of Reddit Ads for the purpose of optimising our advertising campaigns and for marketing purposes on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR.
Storage period
We have no influence on the specific storage period of the processed data; this is determined by Reddit, Inc. Further information can be found in the privacy policy for Reddit Ads: https://www.reddit.com/policies/privacy-policy.