Data Protection

In some instances, our website and its pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. The purpose of cookies is to make our website more user friendly, effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser. Most of the cookies we use are so-called „session cookies.“ They are automatically deleted after your leave our site. Other cookies will remain archived on your device until you delete them. These cookies enable us to recognise your browser the next time you visit our website. You can adjust the settings of your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functions of this website may be limited. Cookies that are required for the performance of the electronic communications transaction or to provide certain functions you want to use (e.g. the shopping cart function), are stored on the basis of Art. 6 Sect. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimised provision of the operator’s services. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time. If other cookies (e.g. cookies for the analysis of your browsing patterns) should be stored, they are addressed separately in this Data Protection Declaration.

This website uses the cookie consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your device or for the use of specific technologies, and to document the former in a data protection compliant manner. The party offering this technology is Usercentrics GmbH, Rosental 4, 80331 München, Germany, website: https://usercentrics.com/ (hereinafter referred to as “Usercentrics”). Whenever you visit our website, the following personal data will be transferred to Usercentrics: - Your declaration(s) of consent or your revocation of your declaration(s) of consent - Your IP address - Information about your browser - Information about your device - The date and time you visited our website Moreover, Usercentrics shall store a cookie in your browser to be able to allocate your declaration(s) of consent or any revocations of the former. The data that are recorded in this manner shall be stored until you ask us to eradicate them, delete the Usercentrics cookie or until the purpose for archiving the data no longer exists. This shall be without prejudice to any mandatory legal retention periods. Usercentrics uses cookies to obtain the declarations of consent mandated by law. The legal basis for the use of specific technologies is Art. 6 Sect. 1 Sentence 1 lit. c GDPR. Contract data processing agreement Our company has executed a Contract Data Processing Agreement with Usercentrics. This is an Agreement mandated by data privacy protection legislation that warrants that Usercentrics processes all personal data of our website visitors exclusively in compliance with our instructions and in compliance with the GDPR.

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be utilized to analyze the use of websites. When using Google Analytics 4, so-called "cookies" are used. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, of which the last digits are shortened, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, a company based in the U.S., where the information is further processed. When using Google Analytics 4, the IP address transmitted by your terminal device during your use of the website is always collected and processed automatically and by default only in a shortened form, so that a direct reference of the collected information to your person is excluded. This automatic anonymization is carried out by Google shortening the IP address transmitted by your terminal device within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits. On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports about your website activities and usage behavior, and to provide us with other services related to your website and internet usage. In this context, the shortened IP address transmitted by your terminal device in the context of Google Analytics 4 will not be merged with other data from Google. The data collected during the use of Google Analytics 4 will be retained for 2 months and then deleted. All processing described above, in particular the placement of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your visit to the website. As an extension of Google Analytics 4, the "UserIDs" function is also used for this website. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "cross-device tracking"). This means that your usage behavior can also be analyzed across devices if you have given your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, if you have set up a personal account by registering on this website and are logged into your personal account on different end devices with your relevant login data. The data collected in this way shows, among other things, which end device was used to click on an ad for the first time and which end device was used for conversion. We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to pass it on to third parties. Since a transfer of personal data by Google to affiliates and sub-processors to countries outside the EU and EEA is possible, further appropriate safeguards are required to ensure the level of data protection under the GDPR. For the U.S., there is an adequacy decision of the EU Commission pursuant to Art. 45 (1) GDPR regarding companies with certification under the EU-U.S. Data Privacy Framework. Google LLC is certified under the EU-U.S. Data Privacy Framework and is therefore committed to compliance with adequate data protection standards, which can be verified via the following link: https://www.dataprivacyframework.gov/s/participant-search. For potential transfers to other countries outside the EU and the EEA, for which no adequacy decision of the EU Commission exists, we have concluded standard contractual clauses with the provider in accordance with Art. 46 (2) lit. c GDPR. These oblige the recipient of the data in the country outside the EU to process the data in accordance with the level of protection in Europe. Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy. Details on the processing triggered by Google Analytics 4 and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

The website operator uses Google Ads. Google Ads is an online promotional program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads enables us to display ads in the Google search engine or on third-party websites, if the user enters certain search terms into Google (keyword targeting). It is also possible to place targeted ads based on the user data Google has in its possession (e.g. location data and interests; target group targeting). As the website operator, we can analyze these data quantitatively, for instance by analyzing which search terms resulted in the display of our ads and how many ads led to respective clicks. The use of Google Ads is based on Art. 6 Sect. 1 lit. et seq. GDPR. The website operator has a legitimate interest in marketing the operator’s services and products as effectively as possible. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

This website uses the functions of Google Analytics Remarketing. The provider of these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. Google Remarketing analyzes your user patterns on our website (e.g. clicks on specific products), to allocate a certain advertising target groups to you and to subsequently display matching online offers to you when you visit other online offers (remarketing or retargeting). Moreover, it is possible to link the advertising target groups generated with Google Remarketing to device encompassing functions of Google. This makes it possible to display interest-based customized advertising messages, depending on your prior usage and browsing patterns on a device (e.g. cell phone) in a manner tailored to you as well as on any of your devices (e.g. tablet or PC). If you have a Google account, you have the option to object to personalized advertising under the following link: https://www.google.com/settings/ads/onweb/. The use of Google Remarketing is based on Art. 6 1 lit. et seq. GDPR. The website operator has a legitimate interest in the marketing of the operator’s products that is as effective as possible. If a respective declaration of consent was requested, processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time. For further information and the pertinent data protection regulations, please consult the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.

This website uses Google Conversion Tracking. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. With the assistance of Google Conversion Tracking we are in a position to recognize whether the user has completed certain actions. For instance, we can analyze the how frequently which buttons on our website have been clicked and which products are reviewed or purchased with particular frequency. The purpose of this information is to compile conversion statistics. We learn how many users have clicked on our ads and which actions they have completed. We do not receive any information that would allow us to personally identify the users. Google as such uses cookies or comparable recognition technologies for identification purposes. We use Google Conversion Tracking on the basis of Art. 6 Sect. 1 lit. et seq. GDPR. The operator of the website has a legitimate interest in the analysis of the user patterns with the aim of optimizing both, the operator’s web presentation and advertising. If a respective declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given consent may be revoked at any time. For more information about Google Conversion Tracking, please review Google’s data protection policy at: https://policies.google.com/privacy?hl=en

To measure conversion rates, this website uses the visitor activity pixel of Facebook. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. According to Facebook’s statement the collected data will be transferred to the USA and other third-party countries too. This tool allows the tracking of page visitors after they have been linked to the website of the provider after clicking on a Facebook ad. This makes it possible to analyze the effectiveness of Facebook ads for statistical and market research purposes and to optimize future advertising campaigns. For us as the operators of this website, the collected data is anonymous. We are not in a position to arrive at any conclusions as to the identity of users. However, Facebook archives the information and processes it, so that it is possible to make a connection to the respective user profile and Facebook is in a position to use the data for its own promotional purposes in compliance with the Facebook Data Usage Policy. This enables Facebook to display ads on Facebook pages as well as in locations outside of Facebook. We as the operator of this website have no control over the use of such data. The use of Facebook Pixel is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the website has a legitimate interest in effective advertising campaigns, which also include social media. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked at any time. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum und https://de-de.facebook.com/help/566994660333381. In Facebook’s Data Privacy Policies, you will find additional information about the protection of your privacy at: https://www.facebook.com/about/privacy/. You also have the option to deactivate the remarketing function “Custom Audiences” in the ad settings section under https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you first have to log into Facebook. 14 / 20 If you do not have a Facebook account, you can deactivate any user based advertising by Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

This website uses the Insight tag from LinkedIn. This service is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. Data processing by LinkedIn Insight tag We use the LinkedIn Insight tag to obtain information about visitors to our website. Once a website visitor is registered with LinkedIn, we can analyze the key occupational data (e.g., career level, company size, country, location, industry, job title) of our website visitors to help us better target our site to the relevant audience. We can also use LinkedIn Insight tags to measure whether visitors to our websites make a purchase or perform other actions (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also features a retargeting function that allows us to display targeted advertising to visitors to our website outside of the website. According to LinkedIn, no identification of the advertising addressee takes place. LinkedIn itself also collects log files (URL, referrer URL, IP address, device and browser characteristics and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data will then be deleted within 180 days. The data collected by LinkedIn cannot be assigned by us as a website operator to specific individuals. LinkedIn will store the personal data collected from website visitors on its servers in the USA and use it for its own promotional activities. For details, please see LinkedIn’s privacy policy at https://www.linkedin.com/legal/privacy-policy#choices-oblig. Legal basis The use of LinkedIn Insight is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in effective advertising measures, including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; the consent can be revoked at any time. Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa und https://www.linkedin.com/legal/l/eu-sccs. Objection to the use of LinkedIn Insight Tag You can object to LinkedIn’s analysis of user behavior and targeted advertising at the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. In addition, LinkedIn members can control the use of their personal information for promotional purposes in the account settings. To prevent LinkedIn from linking information collected on our site to your LinkedIn account, you must log out of your LinkedIn account before you visit our site. Execution of a contract data processing agreement We have entered into a contract data processing agreement with LinkedIn.

This website uses the Microsoft Dynamics 365 marketing automation system for marketing purposes. The provider is Microsoft Ireland Operations Limited ("Microsoft"), Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Microsoft Dynamics 365 is a tool for performing marketing promotions that is also used for analytics purposes, as well as for target-group-specific addressing of both existing and potential customers. The data processing is performed within the European Union. Microsoft Dynamics 365 uses cookies to identify the visitors of our website. These are stored on the computer of the respective users and allow us to analyse usage of the website. In particular, the following information is recorded: the duration of the visit, as well as which pages were called up, which links were clicked and which forms were submitted. This information can be assigned to the individual website visitors. The evaluations help us recognise the reading habits of our users and adapt our content to them or send various content based on their interests. You can find further information on the use of cookies in the context of this system at https://docs.microsoft.com/en-us/dynamics365/marketing/cookies . This analytics tool is used on the basis of Art. 6 (1) lit. f of the GDPR. The website operator has a legitimate interest in analysing user behaviour as a way of optimising its online offering, as well as its communication and effective marketing of its products. Insofar as a corresponding request for consent was issued (for example consent to store cookies), the processing is performed exclusively on the basis of Art. 6 (1) lit. a of the GDPR. This consent can also be revoked at any time. Compliance with the stipulations of the EU General Data Protection Regulation (GDPR) by Microsoft is secured. You can find more information at: https://privacy.microsoft.com/en-gb/privacystatement

Purpose and function: This website uses GA Connector, 32 Lev Tolstoy Street, 65020 Odessa, Ukraine. The product GA-to-CRM v.1.0 (cookie-based integration) makes it possible to trace the source of web leads. This is performed by linking Google Analytics with the CRM system. If a user submits an inquiry via a contact form on the website, GA Connector specifically forwards the following information from Google Analytics to MS Dynamics CRM via hidden form fields: Campaign, channel, medium, source, reference, Google Click Identifier, Google Analytics CID. With the cookie-based integration of GA Connector, no personal data is saved on the GA Connector server. Instead, the information is saved in the user's browser (cookies) and then deleted again after closing the browser. Legal basis: Use of this analytics tools takes place on the basis of Art. 6 (1) lit. f of the GDPR. The website operator has a legitimate interest in analysing user behaviour as a way of optimising both its website and its advertising. Insofar as a corresponding request for consent was issued (for example consent to store cookies), the processing is performed exclusively on the basis of Art. 6 (1) lit. a of the GDPR. This consent can also be revoked at any time. Compliance with the stipulations of the EU General Data Protection Regulation (GDPR) is secured by GA Connector. You can find more information at: https://gaconnector.com/docs/gdpr-and-gaconnector/

This website uses the affiliate marketing platform of FinanceAds GmbH & Co. KG, Karlstraße 9, 90403 Nürnberg, Germany ("FinanceAds"). The FinanceAds cookies are only set with your consent. With the help of these cookies, it can then be traced that a user has previously clicked on an affiliate partner link on a website that participates in the FinanceAds affiliate network and has placed an advertisement from us via which the user has reached our website.  The following information is stored in the cookie: Tracking ID (s_id), OrderID, Product Category, Program ID. If a user submits an enquiry via a contact form on our website, the Tracking ID and OrderID are passed on to our MS Dynamics 365 CRM system with the specified form fields.  The Tracking IDs and OrderIDs are transmitted to FinanceAds independently of us for the purpose of billing the respective advertising campaign via which the user reached our site and, if applicable, left their contact details there.   Legal basis: This form of affiliate marketing and the associated processing of personal data is carried out on the basis of Art. 6 para. 1 p. 1 lit. f) DSGVO. As website operator, we have a legitimate interest in making our website better known through the reach of the affiliate network, in evaluating the success of such campaigns and in checking the invoices received from Impact for accuracy in order to be able to remunerate Impact in accordance with the contract. The setting of FinanceAds cookies, on the other hand, is based on your consent (Section 25 (1) sentence 1 TTDSG in conjunction with Article 6 (1) sentence 1 a) DSGVO), provided that you actively consent to the setting of marketing cookies by selecting the appropriate category and do not individually refuse the setting of FinanceAds cookies. Your consent can be revoked free of charge at any time with effect for the future by deselecting the FinanceAds cookie or the marketing cookies altogether under "Privacy settings" and confirming your choice.   Additional information on the processing of personal data by FinanceAds can also be found at: https://www.financeads.net/datenschutz/.

For the analysis of the usage of parts of our websites (currently: Onboarding-Process), we use the Amplitude Analytics service provided by Amplitude, Inc. ("Amplitude"), based in the USA. Upon successful registration, we generate a hashed User ID and collect relevant information about event-based user actions (User Drop Rate, average time spent on respective subpages, and information about how many users have completed the onboarding process). We transmit this information along with a Device ID created by Amplitude to Amplitude.  Through the Amplitude service, we can gain insights into the usage of our dashboard based on the information obtained, and better understand how it is used by our users. The purpose of processing is therefore the optimization of our dashboard. The personal data is stored exclusively on servers provided by Amplitude within the Federal Republic of Germany and is generally encrypted for a period of 365 days even when at rest.  Furthermore, there is an adequacy decision of the European Commission pursuant to Art. 45 para. 1 GDPR for companies certified under the EU-U.S. Data Privacy Framework for the USA. Amplitude is certified accordingly and is thus committed to complying with appropriate data protection standards.  Amplitude, with whom we have concluded an agreement on the processing of personal data including the standard contractual clauses of the European Commission to establish an adequate level of data protection, can generally only lift this encryption in the case of our corresponding instruction for support purposes, which is why access by Amplitude to the data subject to processing cannot be completely ruled out. However, such access always and exclusively takes place in accordance with the provisions of the data protection agreement concluded with Amplitude.  The processing involves the setting of Amplitude cookies and is based on consent obtained from the dashboard users via our Cookie Consent Manager pursuant to Art. 6 para. 1 sentence 1 lit. a) GDPR, § 25 para. 1 TTDSG. This consent can be refused via our Cookie Consent Manager and revoked free of charge at any time thereafter. 

We offer website visitors the opportunity to submit job applications to us (e.g. via e-mail, via postal services on by submitting the online job application form). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

If you submit a job application to us, we will process any affiliated personal data (e.g. contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 New GDPR according to German Law (Negotiation of an Employment Relationship), Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application. If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 New GDPR and Art. 6 Sect. 1 lit. b GDPR for the purpose of implementing the employment relationship in our data processing system.

If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6 para. 1 lit. f DSGVO) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies. Longer storage may also take place if you have given your agreement (Article 6 (1) (a) GDPR) or if statutory data retention requirements preclude the deletion.

If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies. Admission to the applicant pool is based exclusively on your express agreement (Art. 6 para. 1 lit. a GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. The affected person can revoke his agreement at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage. The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.

We have a profile on Facebook. The provider is Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified under the EU-US Privacy Shield. You can customise your advertising settings independently in your user account. Click on the following link and log in:https://www.facebook.com/settings?tab=ads. Details can be found in the Facebook privacy policy: https://www.facebook.com/about/privacy/.

We use the short message service Twitter. The provider is Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, United States. Twitter is certified under the EU-US Privacy Shield. You can customise your Twitter privacy settings in your user account. Click on the following link and log in:https://twitter.com/personalization. For details, see the Twitter Privacy Policy: https://twitter.com/privacy.

We have a profile on XING. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Details on their handling of your personal data can be found in the XING Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung.

We have a LinkedIn profile. The provider is the LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn is certified under the EU-US Privacy Shield. LinkedIn uses advertising cookies. If you want to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. For details on how they handle your personal information, please refer to LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.