INVERS shared mobility technology header mobile

Data Privacy Statement

1. Scope

In this privacy policy, we inform you about the type, extent, purposes and legal basis for the collection and processing of your personal data when using our websites (including www.invers.com and subpages, hereinafter collectively referred to as “Website”) and social media presences, as well as in other (business) contacts with us (e.g. when participating in video conferences or using collaboration tools).

This privacy policy only applies to content on our Website and the server used by us and does not include such content and websites of third parties to which our offer merely links.

Below we also inform you about the rights to which you are entitled under the General Data Protection Regulation (“GDPR”). We process all personal data in accordance with the legal provisions of data protection and in compliance with the protection goals of information security.

2. Controller and Data Protection Officer

Responsible for the data processing when using this Website according to Art. 4 para. 7 GDPR is:

INVERS GmbH
Untere Industriestraße 20
57250 Netphen (Siegen)

E-Mail: info@invers.com
Phone: +49 (271) 23888-0

For information, questions, suggestions, or complaints regarding data protection, please contact our data protection officer

Lennart KriebelLawyer

BEITEN BURKHARDT Services GmbHGanghoferstraße 3380339 MünchenT: +49 69 756095-585F: +49 69 756095-512Lennart.Kriebel@bbservices.gmbh

3. Your rights

As a data subject, you have the following rights – in each case under the legal requirements and to the extent permitted by law.

You can request information about your data stored or processed by us at any time using the contact details given above.

You also have the right to demand the rectification of incorrect personal data or, if the legal requirements are met, the rectification, restriction, or erasure of your data.

You can object to the use of your personal data for the purposes of direct advertising at any time without special reasons being required. You also have the right to object at any time to data processing based on Art. 6 para. 1 lit. e or f GDPR for reasons arising from your particular situation, unless we can prove compelling reasons worthy of protection, which outweigh your interests, or the processing serves to assert, exercise or defend legal claims.

If you have given your consent to the processing of your personal data, you can withdraw your consent at any time freely and with effect for the future. A withdrawal can be declared informally, for example, using the contact details of the data protection officer given above or via the withdrawal links on the Website. This does not affect the lawfulness of processing based on the consent before its withdrawal.

On request, we will send you the data provided to us for processing in a structured, common, and machine-readable format, which you can use for further processing. Please address any inquiries in this regard to the contact address given above.

You have the right to contact our data protection officer at any time in the event of complaints regarding data protection under the contact details given above. You can also lodge a complaint with the data protection supervisory authority concerned:

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia; https://www.ldi.nrw.de/

4. Security of transmission

When transferring personal data, this Website offers by default the so-called TLS security system (Transport Layer Security) in connection with at least 128-bit encryption to protect the data against accidental or intentional manipulation, loss, destruction, or access by unauthorized persons. The security measures are continuously adapted in line with technological developments. You can recognize the encrypted data transmission by the display of a closed key or lock symbol in the lower status bar of your browser.

5. Collection of usage data when visiting this Website

When you visit our Website, the web server we use automatically logs information that your browser transmits to us. This even applies to purely informational use of the Website if you do not transmit information to us in any other way (e.g. via a contact form). When you visit our Website, we collect the following data, which is technically necessary for us to display our Website to you and to ensure the stability and security of the Website:

  • IP address
  • Date and time of the request
  • Content of the request (specific page)
  • Access status / https or http status code
  • Amount of data transferred in each case
  • Website, where the request originates
  • Used Browser
  • Operating system
  • Language and version of the browser software
  • Referrer URL

The legal basis for the data processing described above is Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interests are the above-mentioned purposes.

6. Contact via website form (contact, applications, information material, newsletter)

When using the following services offered on our Website, the personal data provided by you will be stored and processed for the purposes stated in each case – e.g. within the scope of a registration, a survey or for the execution of a contract. If there is no legal basis for such processing, we generally obtain the consent of the data subject.

We use the CRM system Hubspot to provide forms on our Website, to manage contact data and to process inquiries efficiently (including sending marketing or newsletter emails). Further information on Hubspot can be found below in this privacy policy.

Contact form
To get in contact with us, you can use the contact form

https://invers.com/en/contact-us/.

To process your request, your name including title (optional), a valid e-mail address, country if applicable, telephone number and company name as well as the content of your message (text request) or the time of the desired appointment (appointment request) will be collected. The data you enter is transmitted via a secure TLS connection.

The transmitted data will be forwarded to the responsible party for your request and will only be used to process your inquiry. Your data will be deleted immediately after processing, unless storage is required for reasons of verifiability, customer service or legal retention periods.

You can informally object to the storage of your personal data by using the contact data mentioned above. In this case, we will not process your data any further, unless there are overriding reasons for further storage, or the processing serves to pursue legal claims.

The legal basis of the processing is Art. 6 para. 1 lit. b GDPR, provided that the contact request is in connection with the initiation or execution of a contract with us. Otherwise, data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR, whereby our legitimate interest is the appropriate processing of your request.

Application form
We collect and process the personal data of applicants for the purpose of handling the application process. The processing may also be carried out by electronic means. This is particularly the case if an applicant submits the relevant application documents electronically, for example by e-mail or via a web form on the Website. If an employment contract is concluded with an applicant, the transmitted data is stored for the purpose of processing the employment contract in compliance with the statutory provisions.

Form on the web page

If you would like to apply for a position posted on our Website at

https://invers.com/en/jobs/

using one of the forms provided, you will be asked to provide an amount of personal data and information (name, surname, e-mail address, telephone number, as well as any attachments such as CV, cover letter, certificates or other documents and how you became aware of us). The data you provide is transmitted via a secure TLS connection.

Data that is necessary for the acceptance of your application is marked with an asterisk.

Your electronic application data will be received by the Human Resources Department and will only be made available to the department responsible for the respective position. All parties involved in the application process treat your application documents as confidential.

If the employer does not conclude an employment contract with the applicant, the application documents are automatically deleted six months after the rejection decision is announced, unless the data is included in the talent pool at the applicant’s request and deletion does not conflict with any other legitimate interests of the controller. Other legitimate interests in this sense include, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

Data is collected and processed as part of the application process in accordance with Art. 88 GDPR in conjunction with Section 26 (1) and (3) of the German Federal Data Protection Act (“BDSG”). If we continue to store your personal data in our applicant pool for a period of 180 days after completion of the application process, this is done in accordance with Art. 6 para. 1 lit. a GDPR on the basis of your voluntarily given consent, which we obtain separately in the application process, and which can be freely revoked at any time with effect for the future.

We use a database and the applicant management program of Recruitee B.V., Keizersgracht 313 1016 EE, Amsterdam, Netherlands (“Recruitee”) to carry out the application process. With the help of this service, we can make our application process more profitable for both us and the applicants. Recruitee enables us, among other things, to manage all information that is important for the process in one central location, to communicate with applicants and to make appointments easily. Recruitee only processes this data in accordance with our instructions for our purposes and at no time for its own purposes. We have concluded a corresponding data processing agreement with Recruitee.

Further information on the processing of personal data in the application process can be found here.

Request for information and marketing material
If you would like to receive information and marketing material from INVERS GmbH (e.g. INVERS Barometer), for example at

https://go.invers.com/en/resources/invers-mobility-barometer-station-based-2023

your valid e-mail address is required for sending the marketing e-mails and the download link. The provision of further data (e.g. name, company name) is optional. We process the data provided during registration in order to send you e-mails with download links for the relevant information and marketing material as well as relevant product and industry updates.

We use the so-called double opt-in procedure to subscribe to our marketing e-mails. This means that after you have registered, we will send you an email to the email address provided, in which we ask you to confirm that you are the owner of the email address provided and that you wish to receive the notifications. If you do not confirm your registration, your data will be automatically deleted after one month. In addition, we store the IP address of your device used at the time of registration and confirmation as well as the date and time of registration and confirmation. The collection of this data is necessary in order to prove your registration and to be able to trace the (possible) misuse of a data subject’s email address at a later date.

We evaluate the use of the marketing emails (e.g. opening rate, clicks) to improve the email content using so-called tracking pixels. Using the embedded tracking pixel, we can recognize whether and when an email has been opened and which links in the email have been accessed. This allows a statistical evaluation of the success or failure of online marketing campaigns to be carried out. You can find more information on this in the following section on newsletters under “Tracking of the newsletter usage”.

The legal basis for sending and evaluating marketing emails as described above is Art. 6 para. 1 lit. a GDPR. You can give your consent by clicking on a checkbox when requesting information and marketing material. The time and date of consent and the associated email address are archived by us for verification purposes.

You can revoke your consent at any time freely and with effect for the future, for example via the unsubscribe link in our marketing e-mails or by e-mail to marketing [at] invers [dot] com.

Press mailing list
If you subscribe to our press mailing list, your valid e-mail address will be required to send you the press material. With regard to data processing in connection with the sending of press e-mails, the above statements on requesting information and marketing material apply accordingly. The legal basis for sending and evaluating press emails as described above is Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time freely and with effect for the future, for example via the unsubscribe link in our press emails or via the contact details described above.

Newsletter
If you wish to receive the newsletter offered on this Website

https://invers.com/en/newsletter/

your valid e-mail address is required. The provision of further data (e.g. name, company name) is optional. We will only use the data provided during registration to send you the desired newsletter at regular intervals. You can find more information on the content of the newsletter in the declaration of consent or in the newsletter registration form.

To avoid newsletter subscriptions by unauthorized third parties, the so-called double opt-in procedure is used. This means that after you have registered, we will send you an email to the email address provided, in which we ask you to confirm that you are the owner of the email address provided and that you wish to receive the newsletter. If you do not confirm your registration, your data will be automatically deleted after one month.

When registering for the newsletter, we also store your IP address at the time of registration as well as the date and time of registration. The collection of this data is necessary to be able to trace the (possible) misuse of a data subject’s e-mail address at a later date and therefore serves to provide legal protection for the controller.

Tracking of the newsletter usage

Please note that we evaluate the use of the newsletter (e.g. opening rate, clicks) to improve and personalize the newsletter. For this purpose, the newsletters contain so-called tracking pixels.  A tracking pixel is a miniature graphic that is embedded in such e-mails that are sent in HTML format to enable log file recording and log file analysis. This enables a statistical evaluation of the success or failure of online marketing campaigns. By means of the embedded pixel-code, we can recognise whether and when an e-mail was opened by a data subject and which links in the e-mail were called up by the data subject. By analysing this data, we can draw conclusions about the recipients’ interest in our newsletter content and improve and develop the newsletter accordingly.

In the case of a newsletter you are asked for your consent to let the dispatch system recognise with each sending whether the delivery was successful, whether and when you opened the respective newsletter, whether you clicked on included links and whether you possibly sent a reply. This data is used, for example, to better align the automated sending of future newsletters with your interests and to estimate the success of the newsletter. The data will be processed exclusively for these purposes. It will not be passed on to third parties.

The legal basis for sending and analysing the newsletter as described above is Art. 6 para. 1 lit. a GDPR. You can give your consent by clicking on a checkbox when registering for the newsletter. The time and date of consent and the associated email address are archived by us for verification purposes.

You can revoke your consent at any time freely and with effect for the future. You can unsubscribe from the newsletter, for example, by clicking on the link contained in every newsletter or by sending an e-mail to marketing [at] invers [dot] com. Your e-mail address including historical data will be deleted 90 days after your unsubscribe.

7. Cookies

Functionality and types of cookies
Cookies are small text files that are stored on your computer by your browser. They contain various information, e.g. duration of the Website visit or user input. They may be set by us as the provider of the Website (so-called first-party cookies) or by third parties whose services are integrated on our Website (so-called third-party cookies). Cookies can be stored for different lengths of time (e.g. duration of page use, several weeks up to a maximum of two years).

Our Website uses cookies and similar technologies (hereinafter collectively referred to as “Cookies”) in several places. You can restrict or disable the storage and reading of cookies, but then you will no longer have access to the full functionality of the Website.

Purposes

We use Cookies for various purposes on our Website. With regard to the purpose of use, the Cookies used can be roughly differentiated as follows:

  • “Essential Cookies”: These Cookies are technically absolutely necessary to move around the Website, use basic functions and ensure the security of the Website; they do not collect information for marketing purposes or store which other websites you visit. The storage of Cookies on your end device and access to these Cookies are based on Section 25 para. 2 No. 2 of the Telecommunications Digital Services Data Protection Act (“TDDDG”).
  • “Optional Cookies” (statistics, marketing): These Cookies can, among other things, track your interactions on the Website and are used for analysis or marketing purposes. The use of these Cookies (i.e. their storage on your end device and access to these Cookies) takes place exclusively with your express, active and freely revocable consent in accordance with Section 25 para. 1 TDDDG. This consent is obtained in our cookie banner (also called “Privacy Settings”) and can also be withdrawn there.

Storage periods

Regarding the storage periods, the Cookies used on the Website can be roughly differentiated as follows:

  • “Session Cookies”: These Cookies are automatically deleted when the browser is closed. They contain a so-called session This allows various requests from your browser to be assigned to the shared session and your computer can be recognized when you return to our Website.
  • “Persistent Cookies”: These Cookies remain stored on your end device and are automatically deleted after a certain period of time (depending on the specific Cookie, from a few hours to two years) or at your request.

Further information on the Cookies used on the Website

Further information on the functions and storage periods of the Cookies used on our Website can be found in our cookie banner and in the following explanations of this privacy policy (in each case for the Website function or service that uses the Cookies).

Browser setting: do not track

You can usually delete Cookies stored by your browser yourself via your browser settings and also set your browser so that it informs you accordingly before storing a Cookie and asks for permission.

With the so-called “do not track” setting you can object to the tracking of your website visits. This setting is offered by several browsers. If you have activated the “do not track” option, your visits cannot be tracked:

8. Services of third-party providers

Google Fonts
We use so-called web fonts of Google Ltd. (“Google”, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to display fonts.

When you visit a page, your browser loads the necessary web fonts into your browser to display texts and fonts correctly. To do this, your browser connects to Google, which tells Google that our Website has been accessed via your IP address. Google processes the data collected as part of the server connection on its own responsibility, without us having any influence over this.

We would like to point out that the information collected may also be transferred to third countries outside the European Union or the European Economic Area where there is no equivalent level of data protection, in particular the USA, as the Google Group also has companies in the USA and operates server locations there. Insofar as data is transferred to the US company of Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google LLC”), this data transfer takes place on the basis of Art. 45 GDPR, as Google LLC is certified according to the so-called EU-US Data Privacy Framework.

You can find more information about Google Fonts and the Google privacy policy at the following Internet addresses:

https://fonts.google.com/

http://www.google.de/policies/privacy

The use of Google fonts is in the interest of a uniform and appealing presentation of our Website. If your browser does not support Google Fonts or web fonts, a standard font is used by your device.

The legal basis for the processing of personal data when using Google Fonts is Art. 6 para. 1 letter f GDPR (legitimate interest). Our legitimate interest lies in the above-mentioned purpose.

Use of analytics tools (including reach measurement)
We want to design our offers in the best possible way. To do this, we want to understand which of our subpages and services users are particularly interested in. To determine this, we use services to measure reach and record visitor behaviour (also known as “Analytics Tools”) on our Website. We use the Analytics Tools to collect the following information in particular:

  • Which links do users click on other websites to access our Website?
  • Which of our (sub)pages are visited when, how often and in what order? How are the web pages used (e.g. scroll depth, mouse movements)?
  • Which links or offers do users of our Website click on?
  • Which version of our Website is preferred by users (so-called “A/B testing”)?

We use the following Analytics Tools to measure reach and statistically analyse user behaviour:

  • Google Analytics
  • Matomo Analytics
  • Hotjar
  • Hubspot (see below for details)

The Analytics Tools generally collect this information in pseudonymous form and sometimes use it to create user profiles and statistical reports. These statistics help us understand which services are most attractive or interesting to our users and how we can further optimize and customize our Website and services to meet users’ needs.

In detail:

Google Analytics 4

With your consent, Google Analytics 4, a web analytics service provided by Google Ireland Limited (“Google”, a company incorporated and operated under Irish law (registration number: 368047) with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland), is used to optimize the Website for your needs, to measure reach, and to analyse the general usage behaviour of users of the Website.

Google Analytics uses Cookies (see above for details on Cookies), which contain an individual ID of the user, to record user interactions on our Website. In addition to user interactions on our Website, Google Analytics also collects technical data, in particular the IP address of the end device, in order to ensure the security of the service and to provide us, the Website operator, with information about the country, region or location from which the Website is used (so-called “IP location determination”). The Cookies are stored for a maximum period of 2 years and then automatically deleted.

The information generated by the Cookie (including your IP address) will be transmitted to and stored by Google on computers in third countries such as the USA.  Insofar as data is transmitted to Google’s US company (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google LLC”), this data transmission is based on Art. 45 GDPR, as Google LLC is certified under the EU-US Data Privacy Framework.

We have activated the IP anonymization offered by Google on this Website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area prior to use and further transmission. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google processes the information collected through the use of Cookies on our behalf to evaluate your use of the Website, to compile reports on Website activity and to provide us with other services relating to website activity and internet usage.

Google also processes the aforementioned data collected via Google Analytics for its own purposes in accordance with its own privacy policy. The data may be stored by Google in user profiles and processed, for example, to improve products, to develop new products, to measure the effectiveness of certain advertising and market research and to personalize content and advertisements. If you are logged in to Google, your data will be assigned directly to your user account. If you do not wish to be associated with your Google user account, you must log out before activating Google Analytics 4. We have no influence on the further processing of your data by Google. Further information on the use of data by Google, setting and revocation options can be found on Google’s websites:

The use of Cookies and further data processing by Google Analytics 4 is based on your consent in accordance with Section 25 para. 1 TDDDG and Art. 6 para. 1 lit. a GDPR. Any consent given can be freely revoked at any time with effect for the future. Consent is obtained in our cookie banner and can also be revoked there.

Matomo Analytics

With your consent, we use the web analytics tool “Matomo” to help us design and further optimize our Website for your needs. Matomo creates user profiles based on pseudonyms, which we can use to analyse the use of our Website. We can use the knowledge gained to improve our offer and make it more interesting for you as a user.

For these purposes, the service records, among other things, from which third-party website you came to our site (so-called referrer URL), information on the access time and the location from which an access originated, your language settings as well as which parts of our Website you access and how often and for how long you have viewed a particular part of our Website. We collect this information primarily with the help of Cookies set by Matomo. In addition, your IP address is recorded when Matomo is provided, but this is only processed further in abbreviated form. It is therefore no longer possible to identify you as a user from the IP address. The IP address transmitted by your browser via Matomo is not merged with other data collected by us; data is also not passed on to third parties.

We also use Matomo for an analysis of user behaviour based on (automated) user segmentation (so-called “A/B testing”). This involves dividing the users of our Website into different user groups based on a pseudonymous identification number, each of which is shown a slightly different version of our Website. The division of users is random and not based on personal data. With the help of Matomo, we can then determine which versions of our Website are better received. For this purpose, we evaluate how the individual user groups visit the Website, which clicks are made and which subpages or landing pages are visited. The insights gained in this way help us to further improve the Website based on user needs. However, we do not use Matomo for personalization purposes (for example, to provide individual website content to specific user groups).

The use of Cookies from Matomo and the further data processing are each based on your consent in accordance with Section 25 para. 1 TDDDG and Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. Please make the appropriate settings via our banner.

Further information on Matomo’s terms of use and data protection regulations can be found at: https://matomo.org/privacy/.

Hotjar

With your consent, our Website uses Hotjar, a web-analytics-service provided by Hotjar Limited, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta („Hotjar“). The tool allows us to track and evaluate your user interactions with our Website, which helps us to improve the Website and optimise the user experience.

Hotjar collects and stores a variety of data for this purpose. In particular, Hotjar tracks mouse movements and creates graphical representations of the parts of the Website that users scroll through most frequently (so-called heat maps). In addition, information about general user interactions and certain technical information about the device (IP address, information about the operating system and browser used, browser language, etc.) is sent to Hotjar’s servers. We use Hotjar’s anonymization feature on our Website. This truncates your IP address and ensures that you cannot be personally identified from the analytics data. We do not merge this data with any other personal data.

Hotjar collects the above information through the use of Cookies, which contain a unique user ID. Cookies are stored for a maximum of 365 days, after which they are automatically deleted.

Hotjar will only process data on behalf of INVERS. Hotjar and INVERS have entered into a data processing agreement pursuant to Art. 28 GDPR. Further information on data processing by Hotjar is available at https://www.hotjar.com/privacy.

We only use Hotjar and Hotjar Cookies on our Website with your consent. The legal basis for the use of Cookies and access to the data stored therein is Sect. 25 para. 1 TDDDG and for the subsequent processing of your personal data Art. 6 para. 1 lit. a GDPR. You have the right to withdraw your consent at any time with effect for the future. The lawfulness of the data processing until the withdrawal remains unaffected. The easiest way to withdraw your consent is to use our cookie banner.

Use of marketing tools
We want to show our users advertising content that is as interest-based and relevant to them as possible. To do this, we need to understand which offers on our Website are of interest to individual users and how successful our previous advertising measures have been. In order to determine this, we use so-called “Marketing Tools”, which enable us to

  • record visitor behaviour on the Website (e.g. clicks on certain links and products; access to certain subpages) and, if necessary, to evaluate it in advertising profiles (so-called “tracking”),
  • display targeted personalized advertising (e.g. previously viewed products) to users on other websites (so-called “remarketing” or “retargeting”),
  • track the user’s interactions with our advertising measures (e.g. click on the advertisement) and thereby measure the success of the advertising measures (so-called “conversion tracking”).

The Marketing Tools are therefore used to display personalized advertising and measure the effectiveness of our advertising measures. The advertising is displayed in the Google and LinkedIn advertising networks.

LinkedIn Ads (LinkedIn Insight Tag)

The Website uses the LinkedIn Insight Tag (or LinkedIn Pixel) of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The integration of this JavaScript tag enables us to display and measure personalized advertising as described above when users visit the LinkedIn social network or other websites that have also integrated the LinkedIn advertising network (“LinkedIn Ads”).

For this purpose, marketing Cookies are set on our Website, which are stored for a maximum of 6 months and then automatically deleted.

We also use LinkedIn’s retargeting function to show you personalized ads. For this purpose, LinkedIn analyses your user behaviour on our Website (e.g. click on certain products) in order to classify you into certain advertising target groups and then display suitable advertising messages to you when you visit LinkedIn or other websites that have integrated LinkedIn Ads. We can also evaluate your use of our LinkedIn advertising and interest in our offers using a conversion tracking function. In this way, we pursue the interest of improving the effectiveness of LinkedIn ads and making our Website more interesting for you.

The deactivation of the LinkedIn Insight tag and other advertising objections are possible in the settings for advertisements at www.linkedin.com/help/linkedin/answer/62931?trk=microsites-frontend_legal_privacy-policy&lang=en and additionally at www.linkedin.com/psettings/guest-controls/retargeting-opt-out .

We only use LinkedIn Ads if you have given your consent to do so. The legal basis for the use of the LinkedIn pixel described above is therefore Section 25 para. 1 TDDDG and for the subsequent data processing in this context Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future. Please make the appropriate settings via our cookie banner.

Google Ads

We use the Google Ads service to display personalized advertisements in search engines and on the pages of Google and its partners (“Google Advertising Network”). Google Ads is offered by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (“Google”).

The advertising material is delivered by Google via so-called “ad servers”. For this purpose, we and other websites use so-called ad server Cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. We can obtain information about the success of our advertising campaigns via the Google Ads Cookies stored on our Website. These Cookies are not intended to identify you personally. As a rule, a (pseudonymous) cookie ID, information on the advertisements played (so-called impressions) and opt-out information (marking that a user no longer wishes to be addressed) are stored for this Cookie.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We do not independently collect personal data in the aforementioned advertising measures, but only provide Google with the opportunity to collect the data. As part of this advertising service, Google independently selects which advertising is displayed to which user in the Google Advertising Network. We do not have any options for issuing instructions or any more precise influence on this selection. When ordering the advertisements, we can only make rough restrictions in advance as to where advertising may potentially be displayed by means of a few pre-setting options specified by Google. In this respect, we have no influence on Google’s data processing. We only receive statistical evaluations from Google that provide information about which ads were clicked on how often and at what prices. We do not receive any further data from the use of advertising media; in particular, we cannot identify users on the basis of this information.

We use the “Google Conversion Tracking” feature. This is a procedure with which we can check the success of our advertising campaigns. When using Google Ads, each Ads customer (i.e. each website operator like us) receives a different conversion Cookie, which we can use to determine how a user interacts after clicking on the advertisements and whether one of our services is actually used. The information collected with the help of the Cookie is used to create so-called conversion statistics for our Website. This refers to an evaluation of previously defined actions that a user has carried out on the Website. Google tells us the total number of users who clicked on your ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

We have also linked Google Ads with Google Analytics 4 so that the (aggregated) statistical data from Google Ads and Google Analytics 4 can be imported into the other tool. In particular, this enables us to carry out extended conversion tracking. For this purpose, the events recorded in Google Analytics 4 are linked to our advertising measures carried out via Google Ads and statistically evaluated as further conversions. From the statistical information obtained, we can draw (additional) conclusions about the success of our advertising measures, i.e. we can measure conversions even if the user has not (yet) been redirected to a page with a conversion tracking tag.

We use the “Google Remarketing” feature. This process enables us to address you again with our advertising when you continue to use the Internet. For this purpose, Google Remarketing analyses your user behaviour on our Website (e.g. clicks on certain products) in order to classify you into certain advertising target groups and then display suitable advertising messages to you when you visit other online offers. The advertising target groups created with Google Remarketing can also be linked to Google’s cross-device functions. In this way, interest-based, personalized advertising messages that have been adapted to you depending on your previous usage and surfing behaviour on one device (e.g. cell phone) can also be displayed on another of your devices (e.g. tablet or PC).

We only use Google Ads, Google Conversion Tracking and Google Remarketing if you have given your consent to this. The legal basis for the use of Cookies described above is therefore Section 25 para. 1 TDDDG and for the subsequent data processing in this context Art. 6 para. 1 lit. a GDPR.  You can withdraw your consent at any time with effect for the future. Please make the appropriate settings via our cookie banner.

Hubspot
Use of the CRM system and integration of forms on our Website

We use the CRM system Hubspot from the provider Hubspot, Inc, 25 First Street, 2nd Floor, Cambridge, MA 02141, USA (“Hubspot”) to process user and customer information and requests more quickly and efficiently. Hubspot is also used to provide contact forms on the Website.

When Hubspot integrates the forms on our Website, certain technical data about the end device (IP address, information about the operating system and browser used, browser language, etc.) and any entries in the respective form are transmitted to Hubspot’s servers. We use European server locations, so that the data is generally not transmitted to server locations in third countries outside the EU or the EEA. If Hubspot transfers data to the USA in individual cases, this data transfer takes place on the basis of Art. 45 GDPR, as Hubspot is certified according to the so-called EU-US Data Privacy Framework and is therefore subject to an adequacy decision of the EU Commission.

We have concluded a data processing agreement with Hubspot.  Hubspot only processes the data in accordance with our instructions and on our behalf. The transfer of data to Hubspot is therefore based on Art. 28 GDPR. Hubspot only uses the data received as part of the CRM system for the technical processing of inquiries and does not pass it on to third parties.

The above data processing is carried out to safeguard our legitimate interest in speeding up our customer service to ensure the greatest possible user satisfaction on the basis of Art. 6 para. 1 lit. f GDPR.

Tracking for analysis and marketing purposes

With your consent, Hubspot also uses Cookies to analyse your use of the Website and the newsletter for marketing purposes. The statistical analyses and evaluations of logged user behavior help us to optimize and coordinate our marketing strategy and to display personalized advertising (see the section on marketing tools above for details).

The Cookies are stored for a maximum period of 12 months and then automatically deleted. If this function is activated, the data collected with Hubspot (including technical information such as IP address, URL and language of the browser, approximate location, privacy settings, interactions on the Website) can be linked to the information you provide to us in the forms and evaluated together.

We receive the raw data collected and the statistical reports from Hubspot. Although this would theoretically be possible, we do not assign the raw data to you, i.e. individual users, but only use the data provided by Hubspot statistically to optimize the Website or to display and measure personalized advertising.

We only use these functions of Hubspot and the corresponding Cookies if you have given us your consent to the use of marketing Cookies on the Website or to the evaluation of the use of our newsletter (see the section on newsletters above) and the associated data processing.

The legal basis for the use of Cookies described above is therefore Section 25 para. 1 TDDDG and for the subsequent data processing in this context Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time and with effect for the future in our cookie banner. Your consent is not required to use the Hubspot forms on our Website.

Google Maps
On our Website we use the Google Maps (API) map service from Google Ltd (“Google”, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) to display our location. Google Maps allows us to show you interactive maps directly on the Website and enables you to use the map function conveniently.

When you enter the subpage where the Google Maps map is integrated, our Website sends various technical information including your IP address, time stamp and other log data to Google, possibly to the USA, where it is stored on servers. To the extent that data is transferred to Google’s US company (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google LLC”), this data transfer is based on Art. 45 GDPR, as Google LLC is certified under the EU-US Data Privacy Framework.

Google also processes the data collected via Google Maps for its own purposes and in accordance with its own privacy policy. The data may be stored by Google in user profiles and processed, for example, to improve products, to develop new products, to measure the effectiveness of certain advertising and market research and to personalize content and advertisements. If you have a user account with Google and are logged in at the time of your visit to our Website, the data is immediately assigned to your account. If you do not wish to be associated with your Google user account, you must log out before activating Google Maps. We have no influence on the further processing of your data by Google. You can find more information on this in Google’s privacy policy: https://policies.google.com/privacy.

We only provide Google Maps on our Website if you have consented to the processing of your data by Google. The legal basis for data processing is Art. 6 para. 1 lit. a GDPR.  You can freely withdraw your consent in our cookie banner at any time with effect for the future.

In addition, you can prevent the assignment of the data we transmit to your user account by logging out of Google before you visit our Website. In order to prevent data transmission to Google completely, you must switch off the JavaScript application in your browser. The map display can then no longer be used.

You can find more information about Google and the use of Google Maps here:

Terms of use for Google:

Nutzungsbedingungen von Google:
http://www.google.de/intl/de/policies/terms/regional.html

Nutzungsbedingungen für Google Maps:
https://www.google.com/intl/de_US/help/terms_maps.html

Datenschutzhinweise von Google (Google Privacy Policy):
http://www.google.de/intl/de/policies/privacy/

Youtube videos
Videos from the YouTube platform (“YouTube”) are integrated on our Website. This service is operated by Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (“Google”).

When you visit a part of our Website that contains YouTube content, a connection to the YouTube or Google servers is established. The fact that you have visited our Website, as well as your IP address, time stamp and other log data are communicated. Google processes the data collected via YouTube for its own purposes and in accordance with its own privacy policy. The data may be stored by Google in user profiles and processed, for example, to improve products, to develop new products, to measure the effectiveness of certain advertising and market research and to personalize content and advertisements. If you are logged into your YouTube account, your data will be assigned directly to your user account. If you do not wish to be associated with your YouTube or Google user account, you must log out before activating YouTube. We have no influence on the further processing of your data by Google. You can find more information on this in Google’s privacy policy: https://policies.google.com/privacy

YouTube also statistically evaluates the views of the videos and provides us with reports on these evaluations, which, however, only contain general information on the views, such as the total number of views. In this respect, we do not receive any more detailed information about the individual persons concerned. We embed the videos in such a way that no cookies are set by YouTube to analyse usage behaviour when you access the videos on our Website (so-called “privacy-enhanced mode”). We therefore assume that no more precise analysis of the behaviour of the data subjects is carried out as part of the analysis of video views by YouTube and that this cannot be assigned to individual persons. According to Google, the video view is also not used for further personalization of YouTube content.

In connection with the above-mentioned functions, YouTube may also transmit the processed data to servers outside the EU, in particular in the USA, insofar as this is necessary for the provision of these services. To the extent that data is transferred to the US company of Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, hereinafter “Google LLC”), this data transfer takes place on the basis of Art. 45 GDPR, as Google LLC is certified under the EU-US Data Privacy Framework.

We only make YouTube content available on our Website if you have consented to the processing of your data by YouTube and Google. The legal basis for the data processing associated with our use of YouTube content is therefore Art. 6 para. 1 lit. a GDPR. You can freely withdraw your consent in our cookie banner at any time with effect for the future.

Google Tag Manager
We use the “Google Tag Manager” on our Website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Tag Manager enables us to manage website tags via an interface. Google Tag Manager, which implements the tags, is a cookie-free domain and does not itself collect any personal data. Google Tag Manager triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager.

Further information on data protection can be found on the following Google websites:

Our social media presence
We have a social media presence (so-called “Fan Page”) on the following social networks and providers:

We use the technical platform and services of the providers to operate the respective Fan Page. We would like to point out that you use our Fan Pages on social networks and their functions on your own responsibility. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our Fan Pages, the social network providers collect certain technical data (including the IP address of your end device) and other information that is stored on your end device in the form of Cookies. This information is used to provide us, as the operator of the Fan Pages, with statistical information about the interaction with us.

We have no influence on and no precise knowledge of how the providers process the data from visits to our Fan Page and from interactions with our posts for their own purposes, how long this data is stored and whether the data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or whether you visit the page as a non-registered and/or non-logged-in user. When you access the Fan Page or a post, the IP address assigned to your end device is transmitted to the provider of the respective social network. If you are currently logged in to the social network, a Cookie on your device can be used to track how you have moved around the network. Buttons integrated into websites enable the platforms to record your visits to these websites and assign them to your respective profile. This data can be used to personalize content or advertising to you. If you wish to avoid this, you should log out or deactivate the “stay logged in” function, delete the Cookies on your device and restart your browser. Please also note that the data collected about you in this context may be transferred to countries outside the European Economic Area (EEA), in particular the USA, by the respective provider of the social network and processed there.

We operate our Fan Page in the respective social network in order to communicate with the users active there and to be able to provide the latest news. We process the data from your use of the Fan Page that you provide to us and that require interaction. For example, if you ask us a question via a Fan Page, we process your information in order to answer your query appropriately. When you visit our Fan Pages on Facebook and LinkedIn, the respective social network providers also process personal data in order to provide us with statistics and insights into the use of our Fan Pages. The statistics help us to adapt our Fan Pages according to user needs and thus to continuously optimize them, which can also be done for market research and advertising purposes. We only receive statistical reports that do not allow us to identify individual users of the social network or draw conclusions about them. The processing of data for statistical purposes is carried out by us and the providers of the social network under joint responsibility in accordance with Art. 26 GDPR. We have regulated the conditions and obligations as joint controllers with the providers in an agreement, which is available at https://www.facebook.com/legal/terms/page_controller_addendum (Facebook) or https://legal.linkedin.com/pages-joint-controller-addendum (LinkedIn).

The aforementioned data processing by us serves to safeguard our legitimate interests in the operation of a Fan Page on the respective social network, communication and interaction with the users of this social network and the evaluation of user interactions to improve the Fan Page. The data processing is therefore based in each case on Art. 6 para. 1 lit. f GDPR.

To exercise your rights as a data subject, you can contact us or the provider of the respective social network. If one party is not responsible for responding or must receive the information from the other party, we or the provider will then forward your request to the respective partner. Please contact the respective provider of the social network directly if you have any questions about the profiling and processing of your data when using the Fan Page. If you have any questions about the processing of your interaction with us on our Fan Page, please write to the contact details provided by us above.

9. Other communication (e.g. for collaborations, presentations, video conferences)

Information from communication by e-mail, post or telephone
If you are in contact with us as a prospect or business partner (collectively: “Business Contact”), for example by e-mail, letter, telephone or by using our collaboration tools, the following types of personal data may generally be collected from you:

  • Contact information: First and last name, address, telephone number, e-mail address, company affiliation and position and, if applicable, other data that may result from the signature (e.g. salutation, academic degree)
  • Communication content: All information that you communicate to us, for example the subject of your message, e-mail or letter content and other text or voice messages
  • Documents and files: All files, documents or other attachments exchanged, including the personal data contained therein (e.g. signature)
  • Date and time: Date and time of communication

Which information is collected in detail depends on the respective contact and the communication content.

We process your data for the initiation or performance of a contract with our Business Contact, insofar as the establishment of contact or business communication is related to this. If you are our (potential) contractual partner, the legal basis for this is Art. 6 para. 1 lit. b GDPR. If you are a contact person or an employee of our (potential) contractual partner, the legal basis for this is Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the initiation or performance of a contractual relationship with our Business Contact (i.e. your employer).

We may also process your data for direct marketing purposes. This may be done on the basis of your consent or to protect our legitimate interests. If you have provided us with your e-mail address in connection with the purchase of our products or services, we may inform you by e-mail about product-relevant information (e.g. product updates) and our other similar offers (e.g. product enhancements). If you do not wish to receive such information, you can object to this at any time (e.g. by clicking on the unsubscribe link contained in every e-mail). This objection is free of charge for you, with the exception of the usual transmission fees. The legal basis for this data processing is either Art. 6 para. 1 lit. a GDPR or Art. 6 para. 1 lit. f GDPR, in which case our legitimate interest is the advertising of our own similar products and services as part of an ongoing customer relationship.

Video conferences and webinars ( Microsoft Teams or Zoom)
If you participate in our webinars or video conference (collectively, an “Online Event“), the above-mentioned and the following additional information may be collected and processed:

  • Profile data: Display name, profile picture, team, role and any other publicly visible data in the respective profile
  • Log data: Technical data that is automatically transmitted to us when you access the online meeting, including data about the device you are using and your browser (e.g. IP address, date and time of access, referrer URL, operating system version, browser version) and technically necessary diagnostic data
  • Metadata: Date and time, meeting ID, file size, sharing authorization, activity history, usage time, set language and, if applicable, other information related to the online meeting, activities or files

In addition, we may record the Online Events in order to later link them to the participants or other persons as a source of information on our Website or other websites or to make them available for download. However, recordings will only be made with the consent of the persons recognisable in the vide on the basis of Art. 6 para. 1 lit. a GDPR. This consent can be freely withdrawn at any time with effect for the future. Other participants are anonymized in the published recordings by the following means:

  • Live events: No audio or video recordings of participants are permitted during live events in order to maintain anonymity.
  • Team meetings: In normal team meetings, audio and video recordings of the other (non-speaker) participants during the presentation are prevented by our settings. Only this part is recorded and later made available on our Website. The question and answer session following the presentation is not recorded by us in order to protect your anonymity.

Which of the aforementioned information is collected in detail may depend, among other things, on the video conferencing tool used and the settings made. We have concluded an order processing contract in accordance with Art. 28 GDPR with the providers of the video conferencing tools we use. As our technical service providers, they process the data in accordance with our instructions and on our behalf.

Participation in the online event may require a user account with the provider of the respective video conferencing tool. In this respect, the providers are independent controllers and process the customer data collected for their own business purposes. Under certain circumstances, the provider of the respective video conferencing tool may also collect and process further data, in some cases also through the use of cookies and similar technologies, in order to evaluate the use of the tool, improve it, correct errors or optimize the security of the tool. Please note that we have no influence on the data processing of the providers in this respect. We use the following video conferencing tools:

  • Microsoft Teams, which is operated by Microsoft Ireland Operations Limited, The Atrium Building, Block B, Carmanhall Road, Sandyford Business Estate, Dublin 18, Ireland (“Microsoft”). Further information on data processing can be found at https://privacy.microsoft.com/en-gb/privacystatement and https://docs.microsoft.com/en-gb/microsoftteams/teams-privacy
  • Zoom, which is operated by Zoom Video Communications, Inc, 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (“Zoom”). Further information on data processing can be found at https://explore.zoom.us/en/trust/privacy/

We cannot rule out the possibility that Microsoft and Zoom may also transfer certain data to third countries outside the European Union or the European Economic Area, in particular to the USA, and process it there. However, Microsoft Corporation and Zoom are each certified under the EU-U.S. Data Privacy Framework (DPF) and entered in the Data Privacy Framework list, so that an adequate level of data protection is ensured by the adequacy decision of the EU Commission pursuant to Art. 45 GDPR. The adequacy decision is available at here

The legal basis for our data processing when conducting Online Events is Art. 6 para. 1 lit. b GDPR, insofar as the video conference is conducted within the framework of contractual relationships or for the initiation of a contract. Otherwise, we carry out data processing on the basis of a legitimate interest in accordance with Art. 6 para. 1 f GDPR. Our legitimate interest in data processing lies in the organization of Online Events and information events, e.g. in connection with our products, tools or offers.

Use of the emlen application
We use the emlen application from emlen GmbH, Dudweilerstraße 71, 66111 Saarbrücken, Germany, to present, collect and exchange content in a digital “Dealroom”. The Dealroom offers a virtual working environment for collaboration and communication with (potential) contractual partners.

We involve emlen GmbH as a so-called processor with regard to the processing of your personal data and oblige it to comply with the applicable data protection regulations by means of an adequate order processing agreement in accordance with Art. 28 GDPR. emlen GmbH therefore processes your personal data for us and on our behalf. For more information on the emlen GmbH application and data protection issues, please refer to emlen GmbH’s privacy policy at https://www.emlen.io/emlen-datenschutz.

We use the Dealroom in particular in the context of contract negotiations. For this purpose, we send the (potential) contractual partner an individual link to access our virtual working environment. If you consent to and use the emlen GmbH dealroom application, the following data will be transmitted to emlen GmbH: IP address (anonymized) Browser, device and location information Pages viewed, content viewed and duration Referral URL The legal basis for the processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR. The processing is carried out for the purpose of improving our Dealrooms and the content we make available there. If you do not want emlen GmbH to collect and process the aforementioned data, you can refuse your consent or revoke it at any time with effect for the future.

Irrespective of this, the following data is always transmitted to emlen GmbH: Visitor UUIDs and IDs for (de)activation of tracking opt-in. In this respect, the legal basis for the processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to technically implement your decision regarding the use of Cookies and transmission of data in the context of our digital deal rooms and to ensure functionality.

Further information on the Cookies used can be found in emlen GmbH’s privacy policy above. The personal data is stored for as long as it is required to fulfill the purpose of processing. The data will be deleted as soon as it is no longer required to achieve the purpose.

10. Disclosure of personal data

Your personal data will only be shared with other third parties with your express consent. The only exceptions to this are transfers to our service providers listed above or technical service providers that we require to provide the offer or this Website and have commissioned accordingly (e.g. technical service providers or hosting services). The service providers process this data exclusively on our behalf in accordance with our instructions and we have concluded corresponding contracts with these service providers for order processing in accordance with Art. 28 GDPR. Of course, before passing on your personal data, we ensure that the service providers have taken the necessary technical and organizational measures to ensure an appropriate level of protection. The scope of the data transfer is limited to the minimum necessary in each case.

In individual cases, data may also be transmitted to the following recipients:

  • To our partners or third parties, insofar as the transmission of the data is necessary for the initiation or performance of a contract to be concluded or concluded with you in accordance with Art. 6 para. 1 lit. b GDPR.
  • To state institutions and authorities entitled to receive information, insofar as we are obliged to provide information within the scope of the statutory duty to provide information or by a court or official decision. In this case, the disclosure of your data is required by Art. 6 para. 1 lit. c GDPR to comply with a legal obligation to which we are subject.

To lawyers and/or external consultants, insofar as this is necessary for the assertion, exercise or defence of legal claims and there is no reason to assume that the data subject has an overriding interest worthy of protection in not disclosing their data. In this case, the data is transmitted on the basis of Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interest, which consists in the assertion, exercise or defence of legal claims.

11. Protection of your data and storage duration

We have taken appropriate technical and organizational measures to protect your personal data from unauthorized access, use or disclosure and ensure that any personal data is kept in a controlled, secure environment in which unauthorized access is prevented as far as possible.

We only process your personal data for as long as is necessary to achieve the purpose of the processing. As soon as the purpose of the processing no longer applies, we will delete your data immediately, unless there are legitimate reasons within the meaning of the applicable legal regulations (e.g. Art. 17 para. 3 GDPR), such as in particular legally prescribed retention periods, to prevent deletion. In this case, the data will be deleted immediately after the retention period has expired.

Data that we process on the basis of your consent will be deleted immediately after you withdraw your consent, unless statutory regulations prevent deletion.

12. Miscellaneous

We do not use automated decision-making in accordance with Art. 22 para. 1 and 4 GDPR, i.e. we do not use web-based systems to create user profiles and make automated decisions based on them with legal effect or similar detriment to you.

You are not contractually or legally obliged to provide personal data on the Website, Fan Pages and other communication services. However, without the provision of certain technical data (e.g. the IP address and other log data), our Website or Fan Page or the respective communication services can generally not be used.

We reserve the right to change the measures and specifications described here – within the framework of the existing legal regulations – insofar as this is indicated, e.g. due to new technical developments or changes in jurisdiction or our business operations. We therefore ask you to always observe the current version of this privacy policy.