Data protection declaration

1. Data Protection at a Glance

General Information

The following information provides an overview of how your personal data is processed when you visit this website. Personal data means any data by which you can be personally identified.

Data Collection on This Website

Who is responsible for data collection on this website?
The processing of data on this website is carried out by the website operator. The operator’s contact details can be found in the section "General Information".
How do we collect your data?
On the one hand, your data is collected when you provide it to us. This may include, for example, data that you enter into a contact form. Other data is collected automatically or, where applicable, based on your consent when you visit the website through our IT systems. This data primarily includes technical data (e.g., internet browser, operating system, or time of page access). The collection of this data occurs automatically as soon as you access this website.
What do we use your data for?
Some of the data is collected to ensure the error-free provision of the website. Other data may be used to analyze your user behavior.
What rights do you have with regard to your data?
You have the right at any time to obtain information, free of charge, about the origin, recipients, and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given your consent to data processing, you may revoke this consent at any time with effect for the future. Furthermore, under certain circumstances, you have the right to request restriction of the processing of your personal data. You also have the right to lodge a complaint with the competent supervisory authority. For this purpose, as well as for further questions regarding data protection, you may contact us at any time.

2. Hosting

This website is hosted externally. Our website is hosted by gridscale GmbH, Oskar-Jäger-Straße 173, 50825 Cologne, Germany, team@gridscale.io. The personal data collected on this website is stored on the servers of the hosting provider. This may include, in particular, IP addresses, contact inquiries, metadata and communication data, contract data, contact details, names, website access data, and other data generated through a website.

External hosting is carried out for the purpose of fulfilling contractual obligations toward our prospective and existing customers (Art. 6(1)(b) GDPR) and in the interest of secure, fast, and efficient provision of our online services by a professional provider (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications Digital Services Data Protection Act (TDDDG), insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

Our hosting provider processes your data only to the extent necessary to fulfill its performance obligations and in accordance with our instructions regarding such data.

Data Processing Agreement
We have concluded a data processing agreement (DPA) with the above-mentioned provider. This is a contract required under data protection law, which ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General Information and Mandatory Disclosures

Data Protection

The Controller takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations as well as this Privacy Policy.

When you use this website, various personal data is collected. Personal data is data by which you can be personally identified. This Privacy Policy explains which data we collect and for what purpose we use it. It also explains how and for what purpose this occurs.

Please note that data transmission over the Internet (e.g., communication by email) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

Information on the Controller

The Controller responsible for data processing on this website is:

T.CON GmbH & Co. KG
Straubinger Straße 2
94447 Plattling
Germany

Email: info@tcon.com
Phone: +49 (0) 9931 981 100
Website: www.tcon.com

The Controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

Data Retention Period

Unless a more specific retention period is stated within this Privacy Policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for erasure or revoke your consent to data processing, your data will be erased unless we have other legally permissible reasons for storing your personal data (e.g., statutory retention periods under tax or commercial law). In the latter case, erasure will take place after such reasons cease to apply.

Data Protection Officer

We have appointed a Data Protection Officer in accordance with Art. 37 et seq. GDPR:

Carolin Bauer
aigner business solutions GmbH
Goldener Steig 42
94116 Hutthurm
Germany

Phone: +49 (0) 8505 919270
Email: datenschutz@team-con.de
Website: www.aigner-business-solutions.com

Recipients of Personal Data

In the course of our business activities, we cooperate with various external parties. In some cases, this requires the transfer of personal data to such external parties. We disclose personal data to external parties only if this is necessary for the performance of a contract, if we are legally obligated to do so (e.g., disclosure to tax authorities), if we have a legitimate interest pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the transfer of data. Where we engage processors, we disclose personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint controller agreement is concluded.

Transfer of Data to the United States

Our website integrates tools from companies based in the United States, among others. When these tools are active, your personal data may be transferred to the US servers of the respective providers. Please note that the United States is not considered a safe third country within the meaning of EU data protection law. US companies are obliged to disclose personal data to security authorities without affected individuals having effective legal remedies. Therefore, it cannot be ruled out that US authorities (e.g., intelligence agencies) may process, analyze, and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

Some companies participate in the EU-US Data Privacy Framework (DPF). These companies commit to providing a level of data protection comparable to that of the EU. If a data transfer is made to a DPF-certified company, this will be indicated in the relevant section of this Privacy Policy. Data transfers to such companies are not considered transfers to a third country within the scope of the certification.

Links to Third-Party Websites

Our website contains links to third-party websites. If you click on these links, data will be transmitted to the respective website operator. This Privacy Policy does not govern the collection, disclosure, or handling of personal data by third parties. Please review the privacy policy of the respective controller.

Consent pursuant to Section 25(1) TDDDG

Depending on your consent, we use various tools on our website that process your data. Where data processing is based on your consent pursuant to Art. 6(1)(a) GDPR and you are informed in this Privacy Policy about the purpose and scope of such consent, your consent also applies within the meaning of Section 25(1) TDDDG.

Information on which cookies, plug-ins, and other data-processing tools are used can be found in this Privacy Policy.

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this website uses SSL/TLS encryption. You can recognize an encrypted connection by the change in the browser address line from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

4. Rights of Data Subjects

Below, we inform you about your rights under the GDPR:

Right of Access

You have the right to request confirmation from the Controller as to whether personal data concerning you is being processed.

For this purpose, the Controller shall provide information pursuant to Art. 15 GDPR regarding the purposes of processing, the categories of personal data processed, and the respective recipients or categories of recipients.

Right to Rectification, Erasure, and Restriction of Processing

Pursuant to Art. 16 GDPR, you have the right to request without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data.

Pursuant to Art. 17 GDPR, you have the right to request that the Controller erase personal data concerning you without undue delay, provided that no other legal obligation prevents such erasure.

Pursuant to Art. 18 GDPR, you have the right to request restriction of processing if:

the accuracy of the personal data is contested;
the processing is unlawful and you oppose the erasure of the personal data and request restriction of use instead;
the Controller no longer needs the personal data for the purposes of processing, but you require it for the establishment, exercise, or defense of legal claims or
you have objected to processing pursuant to Art. 21 GDPR.

Right of Withdrawal

You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

Right to Object

Pursuant to Art. 21 GDPR, you have the right to object at any time to the processing of personal data concerning you. The Controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject.

Where personal data is processed for direct marketing purposes, you have the right to object at any time to processing of personal data concerning you for such marketing. This also applies to profiling insofar as it is related to direct marketing. If you object, your personal data will no longer be processed for direct marketing purposes (Art. 21(2) GDPR).

Right to Data Portability

You have the right to receive personal data concerning you, which you have provided to the Controller, in a structured, commonly used, and machine-readable format, and you have the right to transmit those data to another controller without hindrance, where processing is based on consent or on a contract and carried out by automated means. Where technically feasible, you have the right to have the personal data transmitted directly from one controller to another.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

5. Data Collection on This Website

Cookies

Our websites use so-called “cookies.” Cookies are small data packets and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (persistent cookies). Session cookies are automatically deleted at the end of your visit. Persistent cookies remain stored on your device until you delete them or automatic deletion is carried out by your web browser.

Cookies may be set by us (first-party cookies) or by third-party companies (third-party cookies). Third-party cookies enable the integration of certain services of third-party companies within websites (e.g., cookies for processing payment services).

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g., shopping cart function or video display). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies that are necessary to carry out electronic communications, to provide certain functions requested by you (e.g., shopping cart function), or to optimize the website (e.g., cookies for measuring web audience) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is stated.

The website operator has a legitimate interest in storing necessary cookies to ensure the technically error-free and optimized provision of its services. Where consent for the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of such consent (Art. 6(1)(a) GDPR and Section 25(1) TDDDG). Consent may be withdrawn at any time.

You can configure your browser to inform you about the setting of cookies and allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or generally, and activate the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Information on which cookies and services are used on this website can be found in this Privacy Policy.

set cookies

Server Log Files

The provider of the website automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These include:

browser type and browser version
operating system used
referrer URL
host name of the accessing computer
time of the server request
IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of the website; for this purpose, server log files must be collected.

Requests by Email or Telephone

If you contact us by email, telephone, or fax, your inquiry including all resulting personal data (name, inquiry) will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

Processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary to carry out pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR).

The data you send to us via inquiries remains with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies. Mandatory statutory provisions, in particular statutory retention periods, remain unaffected.

Contact Form

If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide therein, will be stored and processed by us for the purpose of handling the inquiry. We do not pass on this data without your consent.

The data you provide remains with us until the purpose for data storage no longer applies or you request deletion. Statutory provisions, in particular retention obligations, remain unaffected.

6. Plugins and Tools

Facebook

This website integrates elements of the social network Facebook. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. According to Meta, the collected data is also transferred to the United States and other third countries.

An overview of the Facebook social media plug-ins can be found at:
https://developers.facebook.com/docs/plugins/.

When the social media element is active, a direct connection is established between your device and the Facebook server. Facebook thereby receives the information that you have visited this website with your IP address. If you click the Facebook “Like” button while logged into your Facebook account, you can link the contents of this website to your Facebook profile. This allows Facebook to associate the visit to this website with your user account. We point out that, as the provider of this website, we have no knowledge of the content of the transmitted data or its use by Facebook. Further information can be found in Facebook’s privacy policy at: https://www.facebook.com/privacy/explanation.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Where personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers for this data processing pursuant to Art. 26 GDPR. Joint controllership is limited exclusively to the collection of the data and its transfer to Facebook. Subsequent processing by Facebook is not part of the joint controllership. The obligations jointly incumbent upon us have been set out in a joint controller agreement. The wording of this agreement can be found at: www.facebook.com/legal/controller_addendum. Under this agreement, we are responsible for providing the privacy information when using the Facebook tool and for the data protection–compliant implementation of the tool on our website. Facebook is responsible for the data security of the Facebook products. Data subject rights (e.g., requests for access) regarding data processed by Facebook can be asserted directly with Facebook. If you assert your rights with us, we are obliged to forward them to Facebook.

Data transfers to the United States are based on the Standard Contractual Clauses of the European Commission. Details can be found at:
https://www.facebook.com/legal/EU_data_transfer_addendum, https://www.facebook.com/help/566994660333381, and https://www.facebook.com/policy.php.

Meta is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to complying with these data protection standards. Further information can be found at: https://www.dataprivacyframework.gov/participant/4452.

Instagram

This website integrates functions of the Instagram service. These functions are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.

If you are logged into your Instagram account, you can link the contents of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate the visit to this website with your user account. We point out that, as the provider of this website, we have no knowledge of the content of the transmitted data or its use by Instagram.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

Where personal data is collected on our website using the tool described here and forwarded to Facebook or Instagram, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers pursuant to Art. 26 GDPR. Joint controllership is limited exclusively to the collection of the data and its transfer. Subsequent processing by Meta is not part of the joint controllership. The obligations jointly incumbent upon us have been set out in a joint controller agreement, available at:
www.facebook.com/legal/controller_addendum. Pursuant to this agreement, we are responsible for providing the data protection information when using the Facebook and/or Instagram tools and for the data protection–compliant implementation of the tools on our website. Facebook is responsible for the data security of the Facebook and Instagram products. Data subject rights (e.g., requests for access) with regard to data processed by Facebook and/or Instagram may be asserted directly with Facebook. If you assert your data subject rights with us, we are obliged to forward such requests to Facebook.

Data transfers to the United States are based on the Standard Contractual Clauses of the European Commission. Details can be found at:
https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/, and https://www.facebook.com/help/566994660333381.

Further information can be found in Instagram’s privacy policy at: https://privacycenter.instagram.com/policy/.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link:
https://www.dataprivacyframework.gov/participant/4452.

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time a page of this website is accessed that contains LinkedIn elements, a connection to LinkedIn servers is established. LinkedIn is thereby informed that you have visited this website with your IP address. If you click the LinkedIn “Recommend” button and are logged into your LinkedIn account, LinkedIn can associate your visit to this website with your user account. We note that, as the provider of this website, we have no knowledge of the content of the transmitted data or of how such data is used by LinkedIn.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
Data transfers to the United States are based on the Standard Contractual Clauses of the European Commission. Details can be found at:
https://www.linkedin.com/help/linkedin/answer/a1343190/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de

Further information can be found in LinkedIn’s privacy policy at: https://www.linkedin.com/legal/privacy-policy.

The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5448.

XING

This website uses elements of the XING network. The provider is New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

Each time one of our pages containing XING elements is accessed, a connection to XING servers is established. To our knowledge, no personal data is stored in this process. In particular, IP addresses are not stored and user behavior is not evaluated.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.
Further information on data protection and the XING Share button can be found in XING’s privacy policy at:
https://privacy.xing.com/de/datenschutzerklaerung.

7. Analytics Tools and Advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that allows us to integrate tracking or analytics tools and other technologies into our website. Google Tag Manager itself does not create user profiles, does not store cookies, and does not perform independent analyses. It merely manages and deploys the tools integrated through it. However, Google Tag Manager records your IP address, which may also be transmitted to Google’s parent company in the United States.

The use of Google Tag Manager is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time with effect for the future.

Google is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: www.dataprivacyframework.gov/participant/5780.

Google Analytics

This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In this context, the website operator receives various usage data, such as page views, length of stay, operating systems used, and the origin of users. These data are assigned to the respective end device of the user. No assignment to a user ID takes place.

In addition, Google Analytics allows us to record your mouse movements, scrolling behavior, and clicks. Google Analytics also uses various modeling approaches to supplement the collected data sets and uses machine-learning technologies for data analysis.

Google Analytics uses technologies that enable recognition of the user for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). The information collected by Google regarding your use of this website is generally transmitted to a Google server in the United States and stored there.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time with effect for the future.

Data transfers to the United States are based on the Standard Contractual Clauses of the European Commission. Details can be found at:
privacy.google.com/businesses/controllerterms/mccs/.

Google Analytics is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: www.dataprivacyframework.gov/participant/5780.

IP Anonymization

IP anonymization is activated for Google Analytics. This means that your IP address is truncated by Google within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area prior to transmission to the United States. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.

Browser Plugin

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: tools.google.com/dlpage/gaoptout.

Further information on Google’s handling of user data can be found in Google’s privacy policy at: support.google.com/analytics/answer/6004245.

Data Processing Agreement
We have concluded a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when users enter certain search terms on Google (keyword targeting). In addition, targeted advertisements can be displayed based on user data available to Google (e.g., location data and interests) (audience targeting).

As the website operator, we can quantitatively evaluate these data by analyzing, for example, which search terms led to the display of our advertisements and how many advertisements resulted in corresponding clicks.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time with effect for the future.

Data transfers to the United States are based on the Standard Contractual Clauses of the European Commission. Details can be found at:
policies.google.com/privacy/frameworks and business.safety.google/controllerterms/.

Meta Pixel (formerly Facebook Pixel)

This website uses the Meta Pixel for conversion measurement. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Meta, the collected data is also transferred to the United States and other third countries.

This allows the behavior of website visitors to be tracked after they have been redirected to the website of the provider by clicking on a Meta advertisement. This enables evaluation of the effectiveness of Meta advertisements for statistical and market research purposes and optimization of future advertising measures.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Meta, enabling a connection to the respective user profile on Facebook or Instagram, and allowing Meta to use the data for its own advertising purposes in accordance with Meta’s Data Usage Policy: www.facebook.com/about/privacy/.

This use of the data cannot be influenced by us as the website operator.

The use of this service is based on your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time with effect for the future.

We use the advanced matching function within the Meta Pixel.

Advanced matching allows us to transmit various types of data (e.g., place of residence, state, postal code, hashed email addresses, names, gender, date of birth, or telephone numbers) of our customers and prospective customers collected via our website to Meta. This enables us to tailor our advertising campaigns on Facebook and Instagram more precisely to persons interested in our offerings. In addition, advanced matching improves attribution of website conversions and expands Custom Audiences.

Where personal data is collected on our website using the Meta Pixel and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are joint controllers pursuant to Art. 26 GDPR. Joint controllership is limited exclusively to the collection of the data and its transfer to Meta. Subsequent processing by Meta is not part of the joint controllership.

The obligations jointly incumbent upon us have been set out in a joint controller agreement. The wording of this agreement can be found at:
www.facebook.com/legal/controller_addendum.

Meta is responsible for the data security of its products. Data subject rights regarding data processed by Meta can be asserted directly with Meta. If you assert your rights with us, we are obliged to forward them to Meta.

Data transfers to the United States are based on the Standard Contractual Clauses of the European Commission. Details can be found at:
www.facebook.com/legal/EU_data_transfer_addendum and www.facebook.com/help/566994660333381.

Further information on privacy protection can be found in Meta’s privacy notices at: www.facebook.com/about/privacy/.

You can deactivate the “Custom Audiences” remarketing function in the advertisement settings at:
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged into Facebook to do so.

If you do not have a Facebook or Instagram account, you can opt out of usage-based advertising by Meta on the website of the European Interactive Digital Advertising Alliance: www.youronlinechoices.com/de/praferenzmanagement/.

Meta is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards for data processing in the United States. Each company certified under the DPF commits to complying with these data protection standards. Further information can be obtained from the provider at the following link: www.dataprivacyframework.gov/participant/5780.

Data Processing Agreement
We have concluded a data processing agreement (DPA) for the use of the service mentioned above. This is a contract required under data protection law, which ensures that the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

LinkedIn Insight Tag

This website uses the LinkedIn Insight Tag. The provider of this service is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data Processing by the LinkedIn Insight Tag
With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we are able, among other things, to analyze professional key data of our website visitors (e.g., career level, company size, country, location, industry, and job title) and thus better tailor our website to the respective target groups.

Furthermore, the LinkedIn Insight Tag enables us to measure whether visitors to our website perform a purchase or another action (conversion tracking). Conversion tracking may also be carried out across devices (e.g., from PC to tablet).

In addition, the LinkedIn Insight Tag provides a retargeting function that allows us to display targeted advertisements to visitors of our website outside of this website. According to LinkedIn, no identification of the advertising recipient takes place.

LinkedIn also independently collects so-called log files (URL, referrer URL, IP address, device and browser characteristics, and time of access). IP addresses are truncated or, if used to reach LinkedIn members across devices, hashed (pseudonymized). Direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is deleted within 180 days.

The data collected by LinkedIn cannot be assigned by us, as the website operator, to specific individuals. LinkedIn stores the collected personal data of website visitors on its servers in the United States and uses it for its own advertising purposes. Further details can be found in LinkedIn’s privacy policy at:
www.linkedin.com/legal/privacy-policy

Legal Basis
Where consent has been obtained, the use of the above-mentioned service is based exclusively on Art. 6(1)(a) GDPR and Section 25 TDDDG. Consent may be withdrawn at any time.

Where no consent has been obtained, the use of this service is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures, including the use of social media.

Data Transfers to the United States
Data transfers to the United States are based on the Standard Contractual Clauses of the European Commission. Details can be found at:
https://www.linkedin.com/legal/l/dpa, https://www.linkedin.com/legal/l/eu-sccs

Objection to the Use of the LinkedIn Insight Tag
You may object to the analysis of usage behavior and targeted advertising by LinkedIn at the following link:
www.linkedin.com/psettings/guest-controls/retargeting-opt-out

In addition, LinkedIn members can manage the use of their personal data for advertising purposes in their account settings. To prevent LinkedIn from associating data collected on our website with your LinkedIn account, you must log out of your LinkedIn account before visiting our website.

Outbrain

We have integrated Outbrain on this website. The provider is Outbrain Inc., 39 West 13th Street, 3rd Floor, New York, NY 10011, USA (hereinafter “Outbrain”).
When you access a website on which Outbrain is integrated, Outbrain creates a pseudonymous user profile (user ID) in which it stores which content you have viewed or read. Based on this information, additional interest-based content or advertisements may be recommended to you on our website or on other websites that also use Outbrain.

For this purpose, information such as your device type, IP address, browser type, visited websites, articles read, time of access, and device ID is stored and aggregated in your user ID.

We also use the Outbrain Pixel. When you visit our website, this pixel allows us to determine whether you already have an Outbrain user ID. This enables advertisers within the Outbrain advertising network to measure the effectiveness of their campaigns.
Where consent has been obtained, the use of the above-mentioned service is based exclusively on Art. 6(1)(a) GDPR and Section 25 TDDDG. Consent may be withdrawn at any time.

Where no consent has been obtained, the use of this service is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

Further information can be found in Outbrain’s privacy policy at: www.outbrain.com/legal/privacy

A list of all cookies used by Outbrain can be found at: https://www.outbrain.com/privacy/cookies/

You can view or adjust your interest profile with Outbrain at the following link: my.outbrain.com/recommendations-settings/home
Outbrain is certified under the EU-US Data Privacy Framework (DPF). Further information can be found at:
www.dataprivacyframework.gov/participant/6439

Newsletter Data
If you would like to subscribe to the newsletter offered on this website, we require an email address from you as well as information that allows us to verify that you are the owner of the email address provided and that you consent to receiving the newsletter. No further data is collected, or only on a voluntary basis.
For the distribution of the newsletter, we use newsletter service providers, which are described below.

8. Data Protection Information for Social Media

We maintain business profiles on LinkedIn and XING. When you visit our social media profiles, you have the opportunity to react to our posts, comment on them, and send us messages. Your visit to our social media profiles triggers multiple data processing operations involving your personal data.

You are not obliged to provide us with your personal data. However, certain functionalities of our social media profiles may not be available without doing so. We process your data for the purpose of company presentation, public relations, and communication with users of our social media profiles. Such data transfers and processing are carried out on the basis of your voluntary use of the platforms pursuant to Art. 6(1)(a) GDPR and Art. 49(1)(a) GDPR.

If you contact us via one of our social media channels, the data you provide will be processed solely for the purpose of responding to your inquiry. The legal basis for this form of data processing is Art. 6(1)(a) GDPR, namely your consent to be contacted via the respective social media channel, and, where applicable, Art. 6(1)(b) GDPR in the case of the initiation or performance of contractual relationships, Art. 88 GDPR for employment-related communications, and Art. 6(1)(f) GDPR where there is an overriding legitimate interest in effective public relations.

Please note that social media platform providers use web tracking, profiling systems, and other technologies to create comprehensive user profiles. We have no influence over these processing activities. Even if you do not have a profile on the respective social media platform, your personal data may still be collected, processed, and stored by the platform operators. For details on the collection and storage of your personal data as well as on the nature, scope, and purpose of their use by the social media providers, please refer to their respective privacy policies:
LinkedIn: www.linkedin.com/legal/privacy-policy
XING: https://privacy.xing.com/de/datenschutzerklaerung

Information on Data Transfers to Third Countries

LinkedIn is headquartered outside the scope of application of the GDPR. This means that your data may be transferred to an insecure third country in which a level of protection for your personal data comparable to the standards within the European Union is not guaranteed.
LinkedIn maintains a presence within the European Union. However, according to the provider, it cannot be ruled out that data may be transferred to other locations. A possible transfer of data to the United States and other third countries cannot be completely excluded.
According to XING, no data transfer to the United States takes place; however, such a transfer cannot be excluded with absolute certainty.
Any potential transfer of data to the United States is carried out on the basis of consent pursuant to Art. 6(1)(a) GDPR and Art. 49(1)(a) GDPR, provided that the respective provider is not certified under the EU-US Data Privacy Framework.

Secure Communication on the Internet

Communication via the Internet can never be fully and comprehensively secured. Therefore, please do not transmit any particularly sensitive data or personal information to us, in particular applications, via our social media presences. You may also contact us at any time regarding your request via our other communication channels listed in the legal notice.

9. Data Protection Information for Applicants

Further information on the processing of applications submitted to us can be found in our separate privacy notice for applicants, which is available for download on our website.

10. Customer Survey

We send invitations to customer surveys to our existing customers at regular intervals. The purpose of the related data processing is our legitimate interest pursuant to Art. 6(1)(f) GDPR in the continuous improvement of the quality of our services and offerings. The distribution of the customer survey constitutes a non-binding invitation to participate; you are not obligated to take part in the customer survey.

If you decide to participate, we process your information and evaluations on the basis of your explicit and voluntary consent pursuant to Art. 6(1)(a) GDPR. This data processing includes the analysis of your information and evaluations in relation to our services.

For the conduct of the customer survey, we use a service provider that acts on our behalf as a processor within the meaning of Art. 28 GDPR.
The evaluation of the customer survey is generally carried out on an anonymous basis. In individual cases, anonymization may not be possible due to a small number of participants.

Information on which data we store and use, at what time, and for what purpose can be found in our privacy information for participants in our customer survey. (The download of the privacy information starts automatically in your browser after clicking on the link.)

11. Trade Fair and Event Attendance

Information on how and for what purposes we process personal data in connection with your attendance at trade fairs or events can be found in our separate privacy notice for trade fair and event participants, available for download on our website.

12. Data Protection Provisions for Webinars

On our website, you have the opportunity to register for various webinars. For this purpose, we process the data you provide in the registration form in order to register you as a participant in the webinar and to provide you with related services.

The information provided in the designated mandatory fields is required in order to provide you with the requested service.
Processing is carried out on the basis of Art. 6(1)(b) GDPR and serves to make the requested online offering available to you.

Data Protection Provisions Regarding the Use of GoToMeeting

As part of our webinar offerings, we use GoToMeeting. The provider is GoTo Technologies Ireland Unlimited Company (“GoTo”), 10 Hanover Quay, Dublin 2, D02R573, Ireland.

GoTo is headquartered in the United States. We point out that the United States is not considered a safe third country within the meaning of EU data protection law. U.S. companies are obliged to disclose personal data to security authorities without affected individuals having effective judicial remedies against such disclosures.

If you register for one of our webinars, you will be redirected to the GoToMeeting website in order to complete your registration there. The data you provide on that website will be processed by the service provider.

Further details on data processing can be found in GoToMeeting’s privacy policy at:
https://www.logmeininc.com/legal/privacy

Data transfers to the United States are based on the Standard Contractual Clauses of the European Commission. Details can be found at:
logmeincdn.azureedge.net/legal/lmi-customer-dpa-2020v1-de.pdf

13. Updates

We reserve the right to amend this Privacy Policy at any time in order to adapt it to legal requirements or changes to our services. The current version of this Privacy Policy can be found at the end of this document.

Status: March 2025