Data Privacy Statement

As of May 2018

I. Name and address of controller

The controller as per the Basic Data Protection Regulation and other national data protection laws of the Member States, as well as other provisions of data protection law, is:

youknow GmbH
St.-Martin-Str. 57
81669 Munich
Germany
Phone: +49 (0)89 – 30 66 88 00
Fax: +49 (0)89 – 30 66 88 029
E-Mail: info@you-know.de

II. Name and address of processor

The controller’s processor is:

DataCo GmbH
Stephanie Emrich
Siegfriedstraße 8
80803 Munich
Germany
Phone: +49 (0)89 – 30 66 88 00
datenschutz@dataguard.de
www.dataguard.de

III. Rights of the data subject

If your personal data is being processed, you are the data subject as per General Data Protection Regulation (GDPR) and your rights with respect to the controller are as follows:

1. Right to information

You can request confirmation from the controller as to whether personal data concerning you is being processed by us. If your data has been processed, you are entitled to request the following information from the controller:

(1) The purpose for which the personal data is processed

(2) The categories of personal data concerned

(3) The recipients or categories of recipients to whom the personal information about you has been or will be disclosed

(4) The envisaged period for which your personal data will be stored, and should such information not be available, the criteria used to determine that period.

(5) The right to rectification or erasure of your personal data, the right to restrict processing of your data by the controller or object to such processing.

(6) The right to lodge a complaint to a supervisory authority

(7) All available information in relation to the origin of the data if the personal data are not collected from the data subject

(8) the existence of automated decision-making, including profiling, in accordance with Article 22 (1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the data subject.

You have the right to request information as to whether your personal data will be transferred to a third country or international organization. In this context, you may request to be informed of the appropriate safeguards pursuant to Article 46 GDPR relating to the transfer.

2. Right to rectification

You have the right to obtain from the controller rectification and/or completion of inaccurate/incomplete personal data concerning you. The controller is obligated to rectify inaccurate data without undue delay.

3. Right to restriction of processing

Under the following conditions, you may request that the processing of your personal data be restricted:

(1) if you contest the accuracy of the personal data relating to you for a period enabling the controller to verify the accuracy of the personal data.

(2) the processing is unlawful and you oppose the erasure of the personal data and instead request the restriction of their use

(3) the controller no longer needs the personal data for processing purposes, but you require it for the establishment, exercise or defense of legal claims, or

(4) if you objected to the processing pursuant to Art. 21 (1) GDPR pending the verification whether the legitimate grounds of the controller override yours.

Where the processing of personal data concerning you has been restricted, such personal data shall, with the exception of storage, only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

4. Right to erasure

a) Obligation to erase

You may request the data controller to erase the personal data concerning you without undue delay and the data controller is obliged to erase this data without undue delay where one of the following grounds applies:

(1) The personal data concerning you are no longer necessary in relation to the purposes for which they were collected or otherwise processed.

(2) You withdraw the consent on which the processing was based pursuant to Point (a) of Article 6 (1), or Point (a) of Article 9 (2), GDPR, and where there is no other legal ground for the processing.

(3) You object to the processing pursuant to Article 2 (1) GDPR and there are no overriding legitimate grounds for the processing or you object to the processing pursuant to Article 21 (2) GDPR.

(4) The personal data concerning you have been processed unlawfully.

(5) The personal data concerning you have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject.

(6) The personal data concerning you have been collected in relation to the offer of information society services referred to in Article 8 (1).

b) Information to third parties

Where the controller has made the personal data concerning you public and is obliged pursuant to Article 17 (1) GDPR to erase them, he shall take reasonable steps, including technical measures, to inform controllers who are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.

c) Exceptions

The right to erasure does not apply to the extent that processing is necessary

(1) for exercising the right of freedom of expression and information;

(2) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;

(3) for reasons of public interest in the area of public health in accordance with Points (h) and (i) of Article 9 (2) as well as Article 9 (3), GDPR;

(4) for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes pursuant to Article 89 (1), GDPR, in so far as the right referred to in paragraph a is likely to render impossible or seriously impair the achievement of the objectives of that processing; or

(5) for the establishment, exercise or defense of legal claims.

5. Right to notification

When you exercise your right obliging the controller to rectify, erase or restrict the processing of your personal data, the controller shall communicate any rectification or erasure of personal data, or restriction of processing, to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about those recipients by the controller.

6. Right to data portability

You have the right to receive the personal data concerning you which you have provided to the controller in a structured, commonly used and machine-readable format. In addition, you have the right to transmit those data to another controller without hindrance from the controller to whom the personal data have been provided, where

(1) the processing is based on consent pursuant to Point (a) of Article 6 (1) GDPR, or Point (a) of Article 9 (2) GDPR, or on a contract pursuant to Point (b) of Article 6 (1) GDPR; and

(2) the processing is carried out by automated means.

In exercising this right, you also have the right to request that the personal data concerning you be transmitted directly by one controller to another, insofar as this is technically feasible. This shall not adversely affect the rights and freedoms of others. The right to data portability does not apply to the processing of personal data required for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

7. Right to object

You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Point (e) or (f) of Article 6 (1) GDPR, including profiling based on those provisions. The controller shall no longer process your personal data unless the controller demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims If the personal data concerning you are processed for the purpose of direct advertising, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling to the extent that it is connected with such direct advertising. If you object to the processing for direct marketing purposes, the personal data concerning you shall no longer be processed for such purposes. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, you may exercise your right to object by automated means using technical specifications.

8. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.

9. Automated individual decision making including profiling

You have the right not to be subject to any decision based solely on automated processing, including profiling, that has any legal effect on you or similarly significantly affects you. This does not apply if the decision

(1) is necessary for entering into, or performance of, a contract between you and the controller.

(2) is authorized by Union or Member State law to which the controller is subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests; or

(3) is based on your explicit consent. 7 However, such decisions shall not be based on special categories of personal data referred to in Article 9 (1) GDPR, unless Point (a) or (g) of Article 9 (2) GDPR applies and suitable measures to safeguard your rights and freedoms and legitimate interests are in place.

In the cases referred to in (1) and (3), the controller shall implement suitable measures to safeguard your rights and freedoms and legitimate interests, at least the right to obtain human intervention on the part of the controller, to express his or her point of view and to contest the decision

10. Right to lodge a complaint to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of alleged infringement, if you consider that the processing of your personal data infringes GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78 GDPR.

IV. General information on data processing

1. Scope of the processing of personal data

We process our users’ personal data only to the extent necessary to provide a functional website and as required with respect to our content and services. We generally only process our users’ personal data on a regular basis after obtaining their consent. Exceptions are cases where it is not possible to obtain the data subject’s prior consent but data processing is legally permitted.

2. Legal basis for the processing of personal data

Where consent has been obtained by the data subject, the legal basis for processing personal data is Point a, Article 6 (1) of the EU General Data Protection Regulation (GDPR). Point b, Article 6 (1) GDPR serves as the legal basis for the processing of personal data required for the performance of a contract to which the data subject is a party. This shall also apply to processing required to implement measures prior to entering into a contract. Point c of Article 6 (1) GDPR serves as the legal basis where processing of personal data is necessary for compliance with legal obligation to which our company is subject. In the event that vital interests of the data subject or another natural person necessitate the processing of personal data, Point d of Article 6 (1) GDPR serves as the legal basis. If the processing is necessary for the purposes of the legitimate interests pursued by our company or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the first-mentioned interest, Point f of Article 6 (1) GDPR serves as the legal basis for the processing.

3. Data erasure and duration of storage period

The personal data of the data subject will be erased or blocked as soon as the purpose of storage no longer applies. Storage may also take place if the European or national legislator has provided for this in Union regulations, laws or other provisions to which the controller is subject. The data shall also be blocked or erased if a retention period prescribed by the aforementioned standards expires, unless it is necessary to retain the data for fulfillment or performance of a contract.

V. Provision of the website and creation of log files

1. Description and scope of data processing

Bei jedEvery time our Internet page is accessed, our system automatically collects data and information from the computer system that accessed the web page. The following data is collected:

(1) Information on browser type and version used

(2) user’s operating system

(3) user’s Internet service provider

(4) user’s IP address

(5) date and time of access

(6) websites from which the user’s system accesses our Internet page

(7) websites the user accesses from our website. The data is also stored in our system’s log files.

These data are not stored with the user’s other personal data.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Point f, Article 6 (1) GDPR.

3. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. To this end, the user’s IP address must be stored for the duration of the visit. Log files are stored to ensure the functionality of the website. The data is also used to optimize the website and safeguard the security of our information technology systems. The data are not used for marketing purposes. Said purpose is in accordance with our legitimate interest in data processing pursuant to Point f of Article 6 (1) GDPR.

4. Storage period

The data are erased as soon as the purpose for which they were collected no longer applies. Data collected for the purposes of operating the website are erased when the respective session ends. Data stored in log files are erased after a maximum of seven days. Storage beyond this retention period is possible. In this case, the user’s IP address is erased or pseudonymized so that the client in question cannot be identified.

5. Option to object and erase

Collecting data for the functionality of the website and storing the data in log files is imperative for operating the website. Consequently, the user has no objection options.

VI. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. We use cookies to make our web page more user friendly. Some elements of our website require that the browser accessing the site can be identified even after the user has left the page. The following data is stored and transmitted in the cookies:

Language settings

We also use cookies on our website that make it possible to analyze the user’s surfing behavior. The following data can be collected in this way:

(1) search key words

(2) use of website functions

The user data collected in this way are pseudonymized by technical measures. Therefore, it is no longer possible to allocate the data to the user in question. The data are not stored together with the user’s other personal data. On opening our website, users are informed that we use cookies for the purposes of analysis and are referred to this Data Privacy Statement. In this context, information is provided on how the storage of cookies can be prevented in the browser settings.

2. Legal basis for data processing

The legal basis for the temporary storage of data and log files is Point f, Article 6 (1) GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some of our website functions cannot be offered without using cookies. These functions require being able to identify the browser after the user has left the page. We need cookies for the following applications:

(1) enabling language settings

(2) improving the quality and content of our website

Said purpose is in accordance with our legitimate interest in processing personal data pursuant to Point f of Article 6 (1) GDPR.

4. Storage period, objection and erasure options:

Cookies are stored on the user’s computer and transferred to our page. The user consequently has full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the sending of cookies. Cookies that have been stored can be erased at any time. This can also be done automatically. If the cookies for our website are deactivated, it may not be possible to use the full range of our website’s functions.

VII. Newsletter

1. Description and scope of data processing

Our website offers a free subscription to our newsletter. The following data from the input mask is sent to us when a subscription is registered:

(1) e-mail address

(2) first name

(3) IP address of the computer that accessed the site

(4) date and time of registration

Data processed for the purposes of sending newsletters is not disclosed to third parties. This data is used exclusively for sending newsletters.

2. Legal basis for data processing

The legal basis for processing data after the user has subscribed to the newsletter is Point a of Article 6 (1) GDPR provided the user’s consent has been obtained.

3. Purpose of data processing

The user’s e-mail address is collected in order to deliver the newsletter. The collection of other personal data as part of the registration process serves to prevent misuse of the services or the e-mail address used.

4. Storage period

The data are erased as soon as the purpose for which they were collected no longer applies. The user’s e-mail address is stored as long as the newsletter subscription is active.

5. Option to object and erase

The user can cancel the newsletter subscription at any time. There is a link for this purpose in each newsletter.

VIII. Contact form and e-mail contact

1. Description and scope of data processing

The contact form on our web page is used for making contact electronically. If the user fills out the form, the data entered is sent to us and stored. These data comprise:
e-mail address

Your consent is obtained for the processing of the data as part of the sending process and reference is made to this Data Privacy Declaration. The alternative is to make contact by using the e-mail address provided. In this case, the user’s personal data sent with the e-mail is stored. No data obtained for this purpose is disclosed to third parties. This data is used exclusively for processing the conversation.

2. Legal basis for data processing

The legal basis for processing the data is Point a of Article 6 (1) GDPR provided the user’s consent has been obtained. The legal basis for processing the data that was obtained by sending the e-mail is Point f of Article 6 (1) GDPR, provided the user’s consent has been obtained. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Point b of Article 6 (1) GDPR.

3. Purpose of data processing

The sole purpose for which we use the personal data from the input mask is to process the contact registration. If contact is made via e-mail, the necessary legitimate interest in the processing of the data also applies. The other personal data processed during the sending process serve to prevent misuse of the contact form and to safeguard the security of our information technology systems.

4. Storage period

The data are erased as soon as the purpose for which they were collected no longer applies. Personal data obtained from the input mask of the contact form and those sent by e-mails are erased when the respective conversation with the user has ended. The conversation ends when it can be inferred from the circumstances that the facts in question have been conclusively clarified. The additional personal data collected during the sending process will be erased after a period of seven days at the latest.

5. Option to object and erase

The user can withdraw consent to the processing of their personal data at any time. If the user contacts us by e-mail, they can object to storage of personal data at any time. If this is the case, the conversation cannot be continued and all personal data stored in the course of establishing contact are erased.

IX. Plugins used

Use of Facebook

1. Scope of the processing of personal data

We use the so-called “Facebook Pixel” of the social network Facebook, Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025 United States or, if you are resident in the EU, Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook can use this analysis tool to target our website users for displaying advertisements.

2. Legal basis for the processing of personal data

The legal basis for the processing of personal data is Point f of Article 6 (1) GDPR.

3. Purpose of data processing

The use of Facebook Pixel serves to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes. Thus future advertising measures can be optimized.

4. Storage period

We have no information regarding the storage period.

5. Option to object and erase

The data collected is anonymous for us. They are stored and processed by Facebook. A link to your Facebook profile may be established. Facebook can use these data for its own advertising purposes in accordance with the Facebook data usage guideline (www.facebook.com/about/privacy/). If you do not want Facebook to be able to assign visits to our pages to your Facebook user account, please log out of your Facebook account. You can object to Facebook collecting your data via Facebook Pixel and using your data for targeted Facebook advertisements by clicking on this link: www.facebook.com/settings/

You can also object to the use of Facebook Pixel by clicking our opt-out link.

Use of Facebook plugin

1. Scope of the processing of personal data

We use the plugin from Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025 United States or, if you are resident in the EU, Facebook Ireland Ltd. 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. By activating this plugin, your browser establishes a connection to Facebook’s servers. Facebook receives the information that you are visiting our site with your IP address. Facebook also receives information on the date, time, type and version of browser, operating system and version, as well as the previously stored Facebook cookies. This allows Facebook to recognize which websites with Facebook content you have visited. The plugin is part of Facebook and is merely shown on our website. All plugin-related activity occurs at Facebook.com. If you have a Facebook account, your Facebook registration number is transmitted when the plugin is activated. Visiting our website can be linked to your Facebook account. Depending on your Facebook account settings, clicking the plugin will be published on Facebook.

You can avoid this by logging out of your Facebook account before activating the plug-in and deleting all Facebook cookies after visiting websites with Facebook plug-ins.

2. Legal basis for the processing of personal data

The legal basis for the processing is Point a of Article 6 (1) GDPR.

3. Purpose of data processing

Facebook processes this data to find errors in its own system, to improve its own products and adapt them to user behavior, to control, place and individualize advertising. In addition, the processing is also used for localization, recording the way websites with Facebook content are used and market research purposes.

4. Storage period

Facebook states that it stores data for up to 90 days. Thereafter the data are only used in an anonymized form.

5. Option to object and erase

For more information about data usage and collection, please see Facebook’s privacy statement at: Facebook.com/about/privacy .

Use of the Google + plugin

1. Scope of the processing of personal data

We use the Google+ Plug-In from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. Your browser establishes a direct connection to the Google servers when you visit our website. Information about your visit is transmitted to Google. We have no influence over the content of the plugin. If you are logged into a Google+ or a Google user account during your visit, Google can assign your website visit to this account. Through interaction with this plug-in, this corresponding information is transmitted directly to Google and stored there. If you do not wish this data transmission, you must log out of your Google+ or Google account before visiting our website. We have no influence over the scope and content of the data Google collects with the plugin.

2. Legal basis for the processing of personal data

The legal basis for the processing is Point a of Article 6 (1) GDPR.

3. Purpose of data processing

The data is used to improve and personalize Google offers for you.

4. Storage period

Advertising data in server logs is anonymized by Google deleting parts of the IP address and cookie information after 9 and 18 months, respectively.

5. Option to object and erase

More information about the purpose and scope of Google+ data collection can be found at www.google.com/intl/en/policies/privacy/.

Use of Google Analytics

1. Scope of the processing of personal data

We use Google Analytics on our website, the web analysis service provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. (“Google”). Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website will be transmitted to and stored by Google on servers in the United States. However, if IP anonymization is enabled on this website, Google will previously truncate your IP address within member states of the European Union or other signatory states to the Agreement in the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there. IP anonymization is active on this website. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services to website operators in connection with website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. You may prevent the use of cookies by selecting the appropriate settings on your browser. However, please note that if you do so, you may not be able to use the full functionality of our website.

2. Legal basis for the processing of personal data

The legal basis for the processing is Point f of Article 6 (1) GDPR.

3. Purpose of data processing

The purpose of processing personal data is to specifically address a target group that has already expressed an initial interest by visiting the site.

4. Storage period

Google states that advertising data in server logs is anonymized by Google deleting parts of the IP address and cookie information after 9 and 18 months, respectively.

5. Option to object and erase

You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en You will find more information at www.google.com/intl/en/policies/privacy/ .

Use of Google Analytics Remarketing

1. Scope of the processing of personal data

We use the remarketing function on our website provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. Together with Google we offer you suitable and interest-related advertisements. Google Analytics Remarketing uses cookies which are stored on your computer. According to Google, no personal data is collected. According to Google, there is no link to other Google services.

2. Legal basis for the processing of personal data

The legal basis for the processing is Point f of Article 6 (1) GDPR.

3. Purpose of data processing

The purpose of processing personal data is to specifically address a target group. The cookies stored on your computer recognize you when you visit a website and can therefore display advertisements that reflect your interests.

4. Storage period

Google states that advertising data in server logs is anonymized by Google deleting parts of the IP address and cookie information after 9 and 18 months, respectively.

5. Option to object and erase

You can prevent the use of the remarketing function by setting the following link: http//www.google.en/settings/ads. You will find more information at www.google.com/intl/en/policies/privacy/ .

Use of the Google Maps plugin

1. Scope of the processing of personal data

We use Google Maps on our website, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States. By using Google Maps on our website, information about the use of our website, your IP address and addresses entered with the route-plan function are transmitted to a Google server in the USA and stored there. By using our website, you consent to the processing of data collected by Google Maps.

2. Legal basis for the processing of personal data

The legal basis for the processing is Point f of Article 6 (1) GDPR.

3. Purpose of data processing

We have neither knowledge about the purpose of the data collection, nor about the use of the data by Google.

4. Storage period

We have no information regarding the storage period.

5. Option to object and erase

You will find more information at www.google.com/intl/en/policies/privacy/ .

Use of the Twitter plugin

1. Scope of the processing of personal data

We use social plugins from twitter.com for our website. This service is provided by Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. By using Twitter and the “retweet” function, the websites you visit are linked to your Twitter account and are disclosed to third parties. We do not receive any information about the content of the transmitted data and its use by Twitter. Please refer to Twitter’s Privacy Policy for details on how Twitter uses your data and your rights and settings to protect your personal information: twitter.com/privacy. If you do not want Twitter to associate the data collected via our website directly with your Twitter account, you must log out of Twitter before visiting our website.

2. Legal basis for the processing of personal data

The legal basis for the processing is Point a of Article 6 (1) GDPR.

3. Purpose of data processing

Information about what data is processed by Twitter and for what purposes it is used can be found in Twitter’s privacy policy: twitter.com/en/privacy .

4. Storage period

Please refer to Twitter’s Privacy Policy for information on the storage period: twitter.com/en/privacy

5. Option to object and erase

More information about the Twitter service can be found at the following link: twitter.com/privacy

Use of the XING plugin

1. Scope of the processing of personal data

Our website uses the XING share button provided by XING SE, Dammtorstraße 29-32, 20354 Hamburg, Germany. When you visit this website, your browser will establish a short-term connection to servers of XING SE (XING) that provide the XING share button functions (in particular, the calculation/display of the meter value).

2. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is Point a of Article 6 (1) GDPR.

3. Purpose of data processing

The XING share button is included for ease of use. If you click on this button, you are directed to the XING homepage. If you are logged into your profile, you can recommend the link to our website.

4. Storage period

XING does not store any personal data about you when you access this website. XING does not store any IP addresses. Your usage behavior is not evaluated by cookies used with the XING “share” button. 5. The latest data protection information on the XING share button and additional information can be found on the following website: www.xing.com/app/share. This Data Privacy Statement was drawn up with the help of DataGuard.

Use of the Mouseflow Tracking plugin

1. Scope of the processing of personal data

Our website uses functions provided by Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark / Mouseflow Deutschland, Neuer Wall 63, 20354 Hamburg, Germany (hereafter referred to as: Mouseflow). The Mouseflow plugin records random visits (only with anonymized IP addresses). This creates a log of mouse movements and clicks with the intention of randomly replaying individual website visits and deriving potential improvements for the website. The information is not personal and is not disclosed to third parties.

2. Legal basis for the processing of personal data

The legal basis for the data processing is Point f of Article 6 (1) GDPR.

3. Purpose of data processing

The use of the Mouseflow plug-in serves to improve the user friendliness of our website and service.

4. Storage period

We have no information regarding the storage period.

5. Option to object and erase

If you object to a recording, you can deactivate it on all websites that use Mouseflow by clicking on the following link: www.mouseflow.de/opt-out/

Use of Pardot Marketing Automation System (“Pardot MAS”)

1. Scope of the processing of personal data

We use functionalities of the B2B marketing automation and lead generation tool Pardot MAS from Pardot LLC, 950 E. Paces Ferry Rd., Suite 300, Atlanta, Georgia 30326, United States (hereafter referred to as: Pardot) and Salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Bavaria, Germany (hereafter referred to as: Salesforce). Pardot enables landing pages, registration forms and e-mail campaigns to be addressed to a precise target group and personalized content to be provided. Cookies from Salesforce are stored on your device as part of its use.
The following personal data is processed by Pardot MAS:

  • Device information
  • Information on log files, user data
  • IP address

Data may be transmitted to Salesforce servers in the United States. Salesforce is subject to and certified under the Privacy Shield Framework concluded between the European Union and the United States. As a result, Salesforce undertakes to comply with the standards and regulations defined under European data protection law. You can find more details at: https://www.privacyshield.gov/participant?id=a2zt0000000KzLyAAK&status=Active

Salesforce has adopted Binding Corporate Rules (BCRs) to enable transmission of personal data from the EU and the European Economic Area (EEA) to Salesforce locations outside the EU and EEA. You can find Salesforce’s Binding Corporate Rules at: http://ec.europa.eu/transparencyregister/public/consultation/displaylobbyist.do?id=991195317279-06&locale=en&indexation=true
or obtain them by sending an e-mail, without the need for any special form, to support@Salesforce.com.

You can find more information of how Salesforce processes data at: https://www.salesforce.com/de/company/privacy/

2. Purpose of data processing

Pardot MAS is used to automate B2B marketing, identify customers more efficiently, and optimize leads.

3. Legal basis for the processing of personal data

The legal basis for processing the user’s personal data is generally the user’s consent pursuant to Point a of Article 6 (1) GDPR.

4. Storage period

Your personal information is stored for as long as necessary to fulfill the purposes defined in this Data Privacy Statement and as prescribed by law, such as for tax and accounting purposes.

5. Withdrawing consent and means of deactivation

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation. You can prevent Salesforce from recording and processing your personal data by not permitting third-party cookies to be stored on your computer, using the Do Not Track function of a browser that supports it, disabling execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can find more information on how you can withdraw your consent from Salesforce and deactivate recording and processing of your personal data by it at: https://www.salesforce.com/de/company/privacy/