Data protection information according to Art. 13 and 21 GDPR for the website of d.velop AG

I. General information

1. Controller

We, d.velop AG, take your privacy and our legal obligations to protect your personal data very seriously. Legal regulations require us to be completely transparent in how we process your personal data. In order for you, as a data subject, to be sufficiently informed about the purpose and scope of our data processing, you need to be able to understand how we handle your data. Our privacy policy therefore explains in detail which personal data we process when you use the www.d-velop.de website and all its sub-pages, as well as our online presence in social networks.

This policy also provides information about how we use the personal data of our customers and suppliers and those who participate in our events.

This policy also provides information about how we use the personal data of our customers and suppliers and those who participate in our events.

The “controller” within the meaning of the General Data Protection Regulation (GDPR), the Federal Data Protection Act (BDSG) and other data protection regulations is

d.velop AG
Schildarpstrasse 6-8, 48712 Gescher, Germany
+49 (0) 2542 9307-0
info@d-velop.de
www.d-velop.de

hereinafter referred to as “we,” “us” or the “controller.”

You can contact the data protection officer at:
Sascha Kremer
Disch-Haus, Brückenstraße 21, 50667 Cologne, Germany (city center)
Phone: +49 (221) 27141874
datenschutz@d-velop.de

Please note that links may take you to websites that are not operated by us, but rather by third parties. Such links are either clearly marked by us or can be identified by a change in the address line of your browser. We are not responsible for compliance with data protection regulations or the safe handling of your personal data on these third-party websites.

2. Definitions

2.1 From the GDPR

This data protection declaration uses the terms defined in the legal text of the GDPR. These definitions (Art. 4 GDPR) can be found at https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32016R0679.

2.2 Cookies

Cookies are text files that are stored or read by a website on your end device. They contain combinations of letters and numbers and are used to recognize the user and their settings when they reconnect to the website that set the cookie, to enable the user to remain logged in to a customer account, or to statistically analyze a specific user behavior.

2.3 Categories of data

When we specify in this privacy policy which categories of data we process, we are referring in particular to the following data: Master data (e.g. names, addresses, dates of birth), contact details (e.g. e-mail addresses, telephone numbers, messenger services), content data (e.g. text entries, photographs, videos, contents of documents/files), contract data (e.g. subject of the agreement, terms, customer category), payment data (e.g. bank details, payment history, use of other payment service providers), usage data (e.g. history on our website, use of certain content, access times) and connection data. (e.g. device information, IP addresses, URL referrer).

3. Information about data processing

We process personal data only to the extent permitted by law. Personal data will be passed on to third parties only in the cases described below. Personal data is protected by appropriate technical and organizational measures (e.g. pseudonymization, encryption).

Unless we are legally obliged to store or pass on personal data to third parties (in particular law enforcement agencies), the decision as to which personal data we process, how long we process it for and the extent to which we disclose it to others depends on which functions of the website you use in each individual case.

4. Duration of storage

Personal data shall be deleted as soon as the purpose for which it was processed no longer exits or a prescribed retention period expires, unless we need to continue storing the personal data in order to conclude or fulfill a contract. If we use cookies that are not absolutely necessary to provide the service you requested, we inform you about the functional duration of these cookies at the end of this privacy policy.

5. Automated individual decision-making including profiling

We do not use automated individual decision-making including profiling to reach decisions pursuant to Art. 22 Para. 1, 4 GDPR.

6. Rights of the data subject

As the data subject, you have the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restrict processing pursuant to Art. 18 GDPR and the right to data portability pursuant to Art. 20 GDPR. The restrictions from Sections 34, 35 BDSG apply to the right of access and the right to erasure. You have the right to lodge a complaint with a supervisory authority for data protection matters (Article 77 GDPR in conjunction with Section 19 BDSG). The supervisory authority to which we are subject is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestrasse 2-4, 40213 Düsseldorf, Germany. However, you are free to lodge a complaint with any supervisory authority for data protection matters of your choosing.

7. Notification obligations of the controller

We will notify all recipients to whom your personal data has been disclosed of any rectification or deletion of your personal data or any restriction of processing pursuant to Art. 16, Art. 17 Para. 1 and Art. 18 of the GDPR, unless such notification is impossible or involves disproportionate effort. Upon your request, we will inform you of who received this notification.

8. Obligation to provide information

Unless otherwise explained below in the legal bases under II or III, you are not obliged to provide personal data. However, in the cases described in Art. 6 Para. 1 Lit. b) of the GDPR, the personal data is necessary for the performance or conclusion of a contract. If you do not provide this personal data, it is not possible to fulfill or conclude the contract. If you do not provide personal data in the cases described in Art. 6 Para. 1 Lit. a) and f) of the GDPR, it is not possible to use the parts of our website in question.

You have the right to object at any time, on grounds relating to your particular situation, to processing of personal data concerning you which is based on Art. 6 Para. 1 Lit. f) of the GDPR. Where personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing.

Pursuant to Art. 7 Para. 3 Clause 4 of the GDPR, you also have the right to revoke your consent to future processing at any time. Such a revocation does not affect the lawfulness of processing carried out before the revocation. You can revoke your consent by mail or e-mail without the need for a specific form. If you object, we will cease to process your personal data unless another (legal) basis permits the processing. If, however, you revoke your consent and there is no other basis that permits the processing, the personal data must be deleted immediately pursuant to Art. 17 Para. 2 Lit. b) of the GDPR.

No specific form is required to lodge an objection or revoke consent. Such communications should be addressed to:

d.velop AG
Schildarpstrasse 6-8, 48712 Gescher, Germany
+49 (0) 2542 9307-0
info@d-velop.de

II. Data processing in connection with use of the website

[borlabs-cookie type=”btn-cookie-preference” title=”Adjust privacy settings”/]

Your use of the website and its functions requires us to process certain personal data. We use a technical solution (“Shariff”) on our website that integrates the Facebook, LinkedIn, Twitter and Xing share functions while replacing the buttons for these social networks. This solution prevents your data from being sent directly to these social networks, thus preventing the providers from reading and storing information on your device. A connection to the servers of the respective provider is only established when you click one of the buttons. Only then does the operator of the social network become aware that our website was accessed from your IP address. The provider can also store and read cookies on your device, unless you have prohibited the use of cookies in your browser.

1. Using the website for informational purposes

Purpose of processing: If you access our website and use it purely for informational purposes, i.e. without using additional functions such as contact forms or social media plugins, we automatically collect personal data for the purpose of optimizing and ensuring the proper functioning of our website, as well as to ensure the security of our information technology systems.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Categories of data: Usage data, connection data

Recipient of the data: IT service providers

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No

2. Google Fonts

Purpose of processing: Personalizing the design of our website using fonts loaded from Google servers.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Categories of data: Usage data, connection data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”).

Does providing your consent mean that we store or read personal information on your device? No

3. Google Maps

Purpose of processing: Integrating interactive maps and map functions of Google Maps.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Categories of data: Usage data, connection data, location data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”).

Does providing your consent mean that we store or read personal information on your device? No

4. Facebook Custom Audiences (“Facebook Pixel”)

Purpose of processing: Displaying personalized advertisements in the Facebook advertising network (Facebook Ads) based on your pseudonymously recorded surfing behavior.

Legal bases: Art. 6, Para. 1, Lit. a) GDPR

Categories of data: Usage data, connection data

Recipient of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint controller, Art. 26 GDPR

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”).

Does providing your consent mean that we store or read personal information on your device? Yes, see the list at the end of this privacy policy.

We use the “Custom Audiences” remarketing function of Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). Custom Audiences allows us to target users of our website with advertising by displaying personalized and interest-based Facebook ads (https://de-de.facebook.com/business/products/ads) when they visit the Facebook social network.

We use the “Facebook Custom Audiences from Website” version of Facebook Custom Audiences (Facebook Pixel). This involves integrating an invisible pixel on our website. When a potential customer looks at certain products on our website, places them in the shopping cart and perhaps cancels the order, this invisible pixel forwards the data to Facebook. The next time this potential customer logs in to Facebook, the integrated pixel means that he or she will receive targeted advertising for the product he or she previously viewed but may not have purchased.

This personal data is processed for the purpose of optimizing our products and services and offering individualized advertising. This constitutes a legitimate interest that permits the processing of your data according to Art. 6 Para. 1 Lit. f) of the GDPR. The transfer of data to the USA is carried out in accordance with Commission Implementing Decision (EU) 2016/1250 (EU-US Privacy Shield). If you do not want Facebook to associate the collected information directly with your Facebook user account, you can disable the “Custom Audiences” remarketing feature in your Facebook user account settings. You must be logged in to Facebook to do this.

More information about how Facebook collects and uses your data and about your rights and options for protecting your privacy can be found in Facebook’s privacy policy (https://www.facebook.com/about/privacy/).

5. Google Analytics

Purpose of processing: Statistical evaluation of how you use the website. We collect your IP address before it is anonymized by Google through truncation before being permanently stored on their servers.

Legal basis: Art. 6, Para. 1, Lit. a) GDPR

Categories of data: Usage data, connection data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”).

Does providing your consent mean that we store or read information on your device? Yes, see the list at the end of this privacy policy.

6. Google Ads Conversion Tracking

Purpose of processing: Measuring the success of our Google Ads campaigns.

Legal basis: Art. 6, Para. 1, Lit. a) GDPR

Categories of data: Usage data, connection data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”).

Does providing your consent mean that we store or read personal information on your device? Yes, see the list at the end of this privacy policy.

7. LinkedIn Conversion Tracking

Purpose of processing: Measuring the effectiveness of our advertisements and displaying interest-based advertising.

Legal basis: Art. 6, Para. 1, Lit. a) GDPR.

Categories of data: Usage data, connection data (this data is deleted within seven days).

Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”).

Does providing your consent mean that we store or read personal information on your device? Yes, see the list at the end of this privacy policy.

8. Hotjar

Purpose of processing: Analyzing your surfing and clicking behavior on our website, creating “heat maps” based on this analysis, and optimizing and designing our website according to your needs.

Legal basis: Art. 6, Para. 1, Lit. a) GDPR

Categories of data: Usage data, connection data

Recipient of the data: Hotjar Ltd., Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta

Intended transfer to third countries: None

Does providing your consent mean that we store or read personal information on your device? Yes, see the list at the end of this privacy policy.

9. HubSpot

Purpose of processing: E-mail marketing, in particular newsletters, and evaluating click and usage behavior for optimizing and improving the design of our website and for advertising purposes.

Legal basis: Art. 6, Para. 1, Lit. a) GDPR

Categories of data: Master data, contact details, content data, usage data, connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland / HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”).

Does providing your consent mean that we store or read personal information on your device?  Yes, see the list at the end of this privacy policy.

10. SurveyMonkey

Purpose of processing: Integrating the SurveyMonkey survey service on our website.

Legal basis: Art. 6, Para. 1, Lit. a) GDPR

Data categories: master data (if applicable), contact details (if applicable), usage data, connection data

Recipient of the data: SurveyMonkey Europe UC 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”).

Does providing your consent mean that we store or read personal information on your device? Yes, see the list at the end of this privacy policy.

11. YouTube

Purpose of processing: Integrating videos with the YouTube video plugin to personalize our website.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Categories of data: Usage data, connection data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”)

Does providing your consent mean that we store or read information on your device? No.

12. Contacting us (e-mail, telephone, contact form)

Purpose of processing: Replying to your inquiry in the contact form on our website, your e-mail or your callback request.

Legal basis: Art. 6 Para. 1 Lit. f) GDPR; Art. 6 Para. 1 Lit. b) GDPR (if your inquiry concerns the conclusion of a contract or an existing contract); Art. 88 Para. 1 GDPR in conjunction with Section 26 Para. 1 BDSG (if you send us documents in connection with an application)

Categories of data: Master data, contact details, content data, usage data (if applicable), connection data, contract data (if applicable)

Recipient of the data: Affiliated companies within the d.velop group in individual cases.

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No

13. Customer account

Purpose of processing: Use of a customer account (also a prerequisite for orders in our online shop), ensuring the security of our information technology systems.

Legal basis: Art. 6, Para. 1, Lit. a), b) and f) GDPR

Categories of data: Master data, contact details, usage data, connection data, contract data, payment data

Recipient of the data: None

Intended transfer to third countries: None

Does providing your consent mean that we store or read personal information on your device? No

14. Online shop

Purpose of processing: Processing and delivering your orders, ensuring the security of our information technology systems.

Legal basis: Art. 6, Para. 1, Lit. b) and f) GDPR

Categories of data: Master data, contact details, usage data, connection data, contract data, payment data

Recipient of the data: None

Intended transfer to third countries: None

Does providing your consent mean that we store or read personal information on your device?: No

15. Career portal, applications by mail

Purpose of processing: Processing your application and carrying out the application procedure, considering your application for future positions with us or our subsidiaries (at your request), ensuring the security of our information technology systems. Applications received by mail are forwarded to the HR department, where they are digitized.

Legal basis: Art. 88 Para. 1 GDPR in conjunction with Section 26, Para. 1 Clause 1 BDSG, for applications to subsidiaries and storage for future positions Art. 6 Para. 1 Lit. a) GDPR in conjunction with Art. 7 GDPR, Section 26, Para. 2 BDSG; Art. 6 Para. 1 Lit. f) GDPR

Categories of data: Master data, contact details, content data, usage data (not for applications received by mail), connection data (not for applications received by mail), contract data

Recipient of the data: Our subsidiaries (only with your express consent)

Intended transfer to third countries: None

Does providing your consent mean that we store or read personal information on your device? No

16. Registering for training courses/seminars/webinars and other events

Purpose of processing: Registering for training courses, seminars, webinars or other events via our website, documenting your registration, ensuring the security of our information technology systems.

Legal basis: Art. 6, Para. 1, Lit. b) and f) GDPR.

Categories of data: Master data, contact details, usage data, connection data, contract data, payment data (if applicable)

Recipient of the data: Partners (e.g. conference hotels, IT service providers such as HubSpot)

Intended transfer to third countries: None

Does providing your consent mean that we store or read personal information on your device? No

17. Blog with comment function

Purpose of processing: Implementing a blog and a comment function, direct exchange with you, ability to comment on our services, ensuring the security of our information technology systems.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Categories of data: Master data (if you comment), contact details (if you comment), content data (if you comment), usage data, connection data

Recipient of the data: None

Intended transfer to third countries: None

Does providing your consent mean that we store or read personal information on your device? No

18. Requesting advertising materials or quotations

Purpose of processing: Sending advertising materials you requested and generating and sending quotations you requested.

Legal basis: Art. 6 Para. 1 Lit. f) GDPR; Art. 6 Para. 1 Lit. b) GDPR (if your inquiry concerns the conclusion of a contract or an existing contract)

Categories of data: Master data, contact details, connection data, contract data (if applicable)

Recipient of the data: Affiliated companies within the d.velop group in individual cases; postal service providers.

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No

19. E-mail newsletter

Purpose of processing: Managing our distribution list and sending the newsletter you requested, personalizing our newsletter based on your usage behavior and documenting your consent to receive the newsletter.

Legal basis: Art. 6, Para. 1, Lit. a) GDPR

Categories of data: Contact details, master data, usage data, connection data

Recipient of the data: HubSpot European Office, Ground Floor, Two Dockland Central Guild Street, Dublin 1, Ireland / HubSpot Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA

Intended transfer to third countries: To the USA in individual cases (according to Decision (EU) 2016/1250 – “EU-US Data Protection Shield”).

Does providing your consent mean that we store or read personal information on your device? Yes, see the list at the end of this privacy policy.

III. Notes on d.velop’s external pages

Facebook page / Page Insights data
Purpose of processing: We operate a page about our company (“Facebook page”) at https://de-de.facebook.com/d.velop.ag/. When you visit and use our Facebook page, Facebook may evaluate your usage behavior and provide us with information obtained from this (“Insights”). These Page Insights are used to help us optimize our website from a business standpoint and refine its design to meet our customers’ needs.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Data categories: master data (if applicable), contact details (if applicable), content data, usage data, connection data

Recipient of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint controller – the most important information about the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum)

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No

Rights of data subjects: Facebook is responsible for observing your rights as a data subject. Facebook informs you about your rights as a data subject at https://www.facebook.com/legal/terms/information_about_page_insights_data. You can also assert your rights to us, in which case we will immediately forward your request to Facebook.

Instagram page
Purpose of processing: We operate a page about our company (“Instagram page”) at https://www.instagram.com/dvelopag. When you visit and use our Instagram page, Facebook may evaluate your usage behavior and provide us with information obtained from this (“Insights”). These Page Insights are used to help us optimize our website from a business standpoint and refine its design to meet our customers’ needs.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Data categories: master data (if applicable), contact details (if applicable), content data, usage data, connection data

Recipient of the data: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (as joint controller – the most important information about the agreement can be found at https://www.facebook.com/legal/terms/page_controller_addendum)

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No

Rights of data subjects: Facebook is responsible for observing your rights as a data subject. Facebook informs you about your rights as a data subject at https://www.facebook.com/legal/terms/information_about_page_insights_data. You can also assert your rights to us, in which case we will immediately forward your request to Facebook.

LinkedIn page
Purpose of processing: We operate a page about our company (“LinkedIn page”) at https://www.linkedin.com/company/d.velop-ag. When you visit and use our LinkedIn page, LinkedIn may evaluate your usage behavior and provide us with information obtained from this. This information is used to help us optimize our website from a business standpoint and refine its design to meet our customers’ needs.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Data categories: master data (if applicable), contact details (if applicable), content data, usage data, connection data

Recipient of the data: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No

Kununu profile
Purpose of processing: We operate a page about our company (“Kununu profile”) at https://www.kununu.com/de/dvelop. When you visit and use our Kununu profile, Kununu may evaluate your usage behavior and provide us with information obtained from this. This information is used to help us optimize our website from a business standpoint and refine its design to meet our customers’ needs.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Data categories: master data (if applicable), contact details (if applicable), content data, usage data, connection data

Recipient of the data: kununu GmbH, Neutorgasse 4-8, Top 3.02, A-1010 Vienna, Austria

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No

Twitter account
Purpose of processing: We operate a page about our company (“Twitter account”) at https://twitter.com/d_velop. When you visit and use our Twitter account, Twitter may evaluate your usage behavior and provide us with information obtained from this. This information is used to help us optimize our website from a business standpoint and refine its design to meet our customers’ needs.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Data categories: master data (if applicable), contact details (if applicable), content data, usage data, connection data

Recipient of the data: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No

Xing page
Purpose of processing: We operate a page about our company (“Xing page”) at https://www.xing.com/companies/d.velopag. When you visit and use our Xing page, New Work SE (“Xing”) may evaluate your usage behavior and provide us with information obtained from this. This information is used to help us optimize our website from a business standpoint and refine its design to meet our customers’ needs.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Categories of data: Master data, contact details, content data, usage data, connection data

Recipient of the data: New Work SE, Dammtorstrasse 30, 20354 Hamburg, Germany (as joint controller)

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No


YouTube channel
Purpose of processing: We operate a page about our company (“YouTube channel”) at https://www.youtube.com/channel/UCQCNrrvjzZUYwfkNayoKtmA. When you visit and use our YouTube channel, Google may evaluate your usage behavior and provide us with information obtained from this. This information is used to help us optimize our website from a business standpoint and refine its design to meet our customers’ needs.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Data categories: master data (if applicable), contact details (if applicable), content data (if applicable), usage data, connection data

Recipient of the data: Google Ireland Ltd., Gordon House, Barrow Street Dublin 4 Ireland

Intended transfer to third countries: None

Does providing your consent mean that we store or read information on your device? No

IV. Information about the cookies we use

Below is a list of the names and functional durations of the cookies used by the above mentioned plugins and services – provided you consent to their use – with the following pattern: [name of the service]: [name of the cookie] ([functional duration]).
A cookie can only be accessed from the Internet address at which the cookie was set. This means that we have no access to the cookies used by the providers (above). They also have no access to our cookies. Third parties have access neither to our cookies nor to those of the providers. Third parties can only access these cookies by means of technical attacks, which we cannot control and for which we are not responsible.

Google Analytics:  (2 years)
Hotjar:  (1 year)
HubSpot (13 months)
SurveyMonkey: (1 year)
YouTube: (6 months)
LinkedIn: (2 years)

V. Processing of customer and supplier data

Purpose of processing: Identification as contact person, making professional contact, especially when executing contracts with your company; if necessary, use as test data for software development (in this case, exclusively in a specially secured IT environment and only for the duration of the software test).

Legal basis: Art. 6, Para. 1, Lit. b) and f) GDPR

Categories of data: Master data, contact details, content data, contract data, payment data

Recipient of the data: Our subsidiaries (if applicable), IT service providers

Intended transfer to third countries: None

VI. Processing the data of participants at our events

Purpose of processing: Carrying out our events, taking photos during the events (if applicable), using the photos for internal reporting and for presenting the event for informational purposes, as well as for documentation and public relations purposes.

Legal basis: Art. 6, Para. 1, Lit. f) GDPR

Categories of data: Master data, contact details, content data (in particular still images, videos and audio recordings)

Recipient of the data: Our subsidiaries, operators of our social media sites, contractual partners in individual cases

Intended transfer to third countries: None