Privacy Policy
Thank you for visiting our website and for your interest in our services. Protecting your privacy is very important to us. We attach great importance to the protection of your personal data and your right to informational self-determination. We collect, process and use personal data exclusively in accordance with the General Data Protection Regulation (hereinafter “GDPR”) and the applicable country-specific data protection regulations.
In the following, we will inform you as a data subject and the public about the nature, scope and purpose of the personal data we collect, use and process. In addition, your legal rights as a data subject are explained to you on the basis of this privacy policy. If you do not agree to these terms, please do not access or otherwise use this website. If you have any questions or other concerns, please don’t hesitate to contact us.
General
As the operator of this website and as a company, we come into contact with your personal data — meaning all data that relates to you and by which you can be identified. In this privacy policy, we would like to explain in what manner, for what purpose and on what legal basis we process your data. The party responsible for data processing on this website and within our company is:
LabV Intelligent Solutions GmbH
Wittelsbacherstraße 42
95100 Selb
Germany
Email: kontakt@labv.io
General information
SSL/TLS encryption
Whenever you enter data on websites, place online orders or send emails over the internet, you must always be aware that unauthorised third parties may gain access to your data. Complete protection against such access is not possible. However, we do everything we can to protect your data as effectively as possible and to close security gaps to the extent we are able. One important protective mechanism is the SSL/TLS encryption of our website, which ensures that data you transmit to us cannot be read by third parties. You can recognise encryption by the padlock icon in your browser’s address bar and by the fact that our web address begins with https:// rather than http://.
How long do we store your data?
In some sections of this privacy policy, we inform you how long we — or companies processing your data on our behalf — retain your data. Where no such information is given, we store your data until the purpose of the data processing ceases to apply, you object to the processing, or you withdraw your consent.
In the event of an objection or withdrawal, we may continue to process your data if at least one of the following conditions applies: we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms (only in the case of an objection; if the objection relates to direct marketing, we cannot invoke legitimate grounds); the processing is necessary for the establishment, exercise or defence of legal claims (this exception does not apply where your objection concerns direct marketing); we are legally required to retain your data. In that case, we will delete your data as soon as the relevant condition(s) no longer apply.
Data transfers to the USA
We also use tools on our website from companies that transfer your data to the USA, where it is stored and may be further processed. The European Commission has adopted an adequacy decision for the EU-US Data Privacy Framework, establishing that the USA ensures an adequate level of protection for personal data transferred from the EU to US companies. This decision is based on new guarantees and measures introduced by the USA to meet data protection requirements. The adequacy decision includes, among other things, restrictions and safeguards regarding access by US intelligence services to the data. Binding guarantees have been introduced to limit such access to what is necessary and proportionate for national security purposes. Enhanced oversight of US intelligence service activities has been established, along with an independent redress mechanism for complaints by EU citizens regarding access to their data.
The EU-US Data Privacy Framework therefore enables European companies to transfer data to certified US companies without the need for additional data protection safeguards. A list of all certified companies is available at: Link
A change to the European Commission’s decision cannot be excluded.
Data Protection Officer
We have appointed a Data Protection Officer for our company.
legal data Schröder Rechtsanwaltsgesellschaft mbH
Dr. Georg Schröder, LL.M.
Prannerstr. 1
80333 Munich
Email: georg.schroeder@legaldata.law
Phone: +49-89 – 954 597 520
Your rights
Right to object to data processing
WHERE THIS PRIVACY POLICY STATES THAT WE HAVE LEGITIMATE INTERESTS FOR PROCESSING YOUR DATA AND ARE THEREFORE RELYING ON ART. 6(1)(1)(F) GDPR, YOU HAVE THE RIGHT UNDER ART. 21 GDPR TO OBJECT TO SUCH PROCESSING. THIS ALSO APPLIES TO PROFILING CARRIED OUT ON THE BASIS OF THAT PROVISION. A PREREQUISITE IS THAT YOU PROVIDE GROUNDS FOR THE OBJECTION BASED ON YOUR PARTICULAR SITUATION. NO GROUNDS ARE REQUIRED IF THE OBJECTION RELATES TO THE USE OF YOUR DATA FOR DIRECT MARKETING. THE CONSEQUENCE OF AN OBJECTION IS THAT WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY IF ONE OF THE FOLLOWING CONDITIONS IS MET: WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS; THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS. THESE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION RELATES TO DIRECT MARKETING OR PROFILING CONNECTED WITH IT.
Further rights
Withdrawal of consent to data processing
Many processing operations are based on your consent, which you grant, for example, by ticking a box in an online form before submitting it, or by accepting certain cookies when visiting our website. You may withdraw your consent at any time without giving reasons (Art. 7(3) GDPR). From the point of withdrawal, we may no longer process your data. The only exception is where we are legally required to retain it for a specified period — as is the case under tax and commercial law.
Right to lodge a complaint with the competent supervisory authority
If you believe that we have violated the GDPR, you have the right under Art. 77 GDPR to lodge a complaint with a supervisory authority — in the Member State of your habitual residence, place of work or the place of the alleged infringement. This right exists in addition to administrative or judicial remedies.
Right to data portability
Where we process your data automatically on the basis of your consent or in fulfilment of a contract, you or a third party of your choosing may request that we provide the data in a commonly used, machine-readable format. Transfer to another controller is only possible to the extent technically feasible.
Right of access, erasure and rectification
Under Art. 15 GDPR, you have the right to obtain free information about which personal data we hold about you, where the data originates, to whom we disclose it and for what purpose it is stored. If the data is inaccurate, you have the right to rectification (Art. 16 GDPR); subject to the conditions of Art. 17 GDPR, you may also request erasure.
Right to restriction of processing
In certain circumstances, you may request under Art. 18 GDPR that we restrict the processing of your data. In that case, the data may — apart from storage — only be processed in the following ways:
- with your consent
- for the establishment, exercise or defence of legal claims
- to protect the rights of another natural or legal person
- for reasons of important public interest of the EU or a Member State
The right to restriction applies in the following situations:
- You have contested the accuracy of your personal data held by us and we need time to verify this — the right applies for the duration of the verification.
- The processing of your data is unlawful or was unlawful in the past — the right applies as an alternative to erasure.
- We no longer need your data, but you require it for the establishment, exercise or defence of legal claims — the right applies as an alternative to erasure.
- You have lodged an objection under Art. 21(1) GDPR and our respective interests are being weighed against each other — the right applies pending the outcome of that assessment.
Hosting and Content Delivery Networks (CDN)
External hosting
Our website is hosted by the following internet service provider:
Webflow, Inc.
398 11th Street
2nd Floor
San Francisco, CA 94103, USA
Has a data processing agreement been concluded with the host, or are Standard Contractual Clauses (SCCs) in place?
Yes
How do we process your data?
The host stores all data associated with our website, including personal data collected automatically or through your input — in particular your IP address, pages accessed, names, contact details and enquiries, as well as meta and communication data. Our host processes data solely in accordance with our instructions and only to the extent necessary to fulfil its contractual obligations to us.
On what legal basis do we process your data?
Since we use our website to address prospective customers and maintain contact with existing ones, data processing by our host serves the purposes of contract initiation and performance, and is therefore based on Art. 6(1)(b) GDPR. In addition, it is our legitimate interest as a company to operate a professional online presence that meets the necessary requirements for security, speed and efficiency. To that extent, we also process your data on the basis of Art. 6(1)(f) GDPR.
Hosting and Content Delivery Networks (CDN)
Cloudflare
What is Cloudflare?
Content Delivery Network (CDN) with Domain Name System (DNS)
Who processes your data?
Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA
Has a data processing agreement been concluded with Cloudflare?
Yes
Where can you find more information about Cloudflare’s privacy practices?
On what basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.
How do we process your data?
We use Cloudflare’s services for our website. Its global content delivery network ensures that all content we provide online reaches you quickly, even when large volumes of data need to travel long distances. Cloudflare is positioned between our website and your browser, analyses traffic and filters out malicious data before it reaches our server. In doing so, Cloudflare also comes into contact with personal data collected via our website. The company may also use cookies or similar technologies to recognise internet users. Data processing by Cloudflare serves solely the purpose of enabling fast data transmission.
On what legal basis do we process your data?
We have a legitimate interest in providing our website visitors with the fastest and most efficient online experience possible. Data processing is therefore based on Art. 6(1)(f) GDPR.
Data collection on this website
Use of cookies
Our website places cookies on your device — small text files used for various purposes. Some cookies are technically necessary for the website to function at all (necessary cookies). Others are required to enable certain actions or features on the site (functional cookies). Without cookies, for example, a shopping cart in an online shop would not be possible. Further cookies serve to analyse user behaviour or to optimise advertising measures. Where we use third-party services on our website — for example to process payments — those companies may also place cookies on your device when you visit the site (third-party cookies).
How do we process your data?
Session cookies are stored on your device only for the duration of a session and disappear automatically when you close your browser. Persistent cookies remain on your device until you delete them, which can result, for example, in your user behaviour being analysed over an extended period. You can control how your browser handles cookies via its settings:
- Do you want to be notified when cookies are set?
- Do you want to block cookies generally or in specific cases?
- Do you want cookies to be deleted automatically when you close your browser?
Disabling or blocking cookies may limit the functionality of the website. Where we use cookies from third parties or for analytical purposes, we inform you of this within this privacy policy and request your consent when you visit our website.
On what legal basis do we process your data?
We have a legitimate interest in ensuring that our online services function without technical issues and that all desired features are available to visitors. The storage of necessary and functional cookies on your device is therefore based on Art. 6(1)(f) GDPR. All other cookies are used on the basis of Art. 6(1)(a) GDPR, provided you have given your consent — which you may withdraw at any time with effect for the future. If you consented to the placement of necessary and functional cookies when prompted, the storage of those cookies is also based solely on your consent.
Cookie consent via Cookiebot
What is Cookiebot?
Software for cookie consent, monitoring and control
Who processes your data?
Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark
Has a data processing agreement been concluded with Cookiebot?
Yes
Where can you find more information about Cookiebot’s privacy practices?
How do we process your data?
We use Cookiebot to obtain and document your consent to the storage of cookies on your device in a GDPR-compliant manner. When you visit our website and close the Cookiebot consent banner, the following data is transmitted to the company:
- Your IP address in anonymised form
- Date and time of consent
- Your browser’s user agent
- The URL from which the consent was submitted; an anonymous, random and encrypted key
- Your consent status, which serves as proof of consent
Cookiebot also stores a cookie in your browser to associate the consents given — or their withdrawal — with your browser. All collected data is stored until the cookies are no longer needed, you delete the Cookiebot cookie, or you request deletion of the data. This does not apply where we are legally required to retain the data.
On what legal basis do we process your data?
We are legally required to obtain consent from our website visitors for the use of certain cookies. We use Cookiebot to fulfil this obligation. The legal basis for data processing is therefore Art. 6(1)(c) GDPR.
Server log files
Server log files record all requests and accesses to our website and capture error messages. They also contain personal data — in particular your IP address — which is anonymised by the provider shortly after collection, so we are unable to attribute the data to your person. The data is transmitted automatically by your browser to our provider.
How do we process your data?
Our provider stores server log files in order to trace activity on our website and identify errors. The files contain the following data:
- Browser type and version
- Operating system used
- Referrer URL
- Hostname of the accessing device
- Time of the server request
- IP address (anonymised where applicable)
We do not merge this data with other data sources, but use it solely for statistical evaluation and to improve our website.
On what legal basis do we process your data?
We have a legitimate interest in our website running without errors and in obtaining an anonymised overview of traffic to our website. Data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR.
Contact form
You can send us a message via the contact form on this website.
How do we process your data?
We store your message and the information provided in the form in order to process your enquiry, including any follow-up questions. This also applies to the contact details you provide. We do not share this data with third parties without your consent.
How long do we store your data?
We delete your data as soon as one of the following applies:
- Your enquiry has been fully processed.
- You request deletion of the data.
- You withdraw your consent to storage.
This does not apply where we are legally obliged to retain the data.
On what legal basis do we process your data?
Where your enquiry relates to our contractual relationship or the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. In all other cases, it is our legitimate interest to process enquiries directed to us effectively. The legal basis is therefore Art. 6(1)(f) GDPR. Where you have consented to the storage of your data, Art. 6(1)(a) GDPR applies, and you may withdraw that consent at any time with effect for the future.
Enquiries by email, telephone or fax
You may contact us by email, fax or telephone.
How do we process your data?
We store your message and the contact details or telephone number you provide in order to process your enquiry, including any follow-up questions. We do not share this data with third parties without your consent.
How long do we store your data?
We delete your data as soon as one of the following applies:
- Your enquiry has been fully processed.
- You request deletion of the data.
- You withdraw your consent to storage.
This does not apply where we are legally obliged to retain the data.
On what legal basis do we process your data?
Where your enquiry relates to our contractual relationship or the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. In all other cases, it is our legitimate interest to process enquiries directed to us effectively. The legal basis is therefore Art. 6(1)(f) GDPR. Where you have consented to the storage of your data, Art. 6(1)(a) GDPR applies, and you may withdraw that consent at any time with effect for the future.
Slack
What is Slack?
Instant messaging service
Who processes your data?
Slack Technologies Limited, Salesforce Tower, 60 R801, North Dock, Dublin, Ireland
Has a data processing agreement been concluded with Slack?
Yes
Where can you find more information about Slack’s privacy practices?
On what basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.
How do we process your data?
We use the instant messaging service Slack to communicate with our customers and other parties outside our company.
How long do we store your data?
We delete your data as soon as one of the following applies:
- The purpose of the data processing has ceased.
- You request deletion of the data.
- You withdraw your consent to storage.
This does not apply where we are legally obliged to retain the data.
On what legal basis do we process your data?
Where our communication via Slack relates to our contractual relationship or the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. In all other cases, it is our legitimate interest to process enquiries effectively and maintain business contact with third parties. The legal basis is therefore Art. 6(1)(f) GDPR. Where you have consented to the storage of your data, Art. 6(1)(a) GDPR applies, and you may withdraw that consent at any time with effect for the future.
HubSpot
What is HubSpot?
Customer Relationship Management (CRM) platform covering marketing, sales and service
Who processes your data?
HubSpot Inc., 25 First Street, Cambridge, MA 02141, USA
Has a data processing agreement been concluded with HubSpot?
Yes
Where can you find more information about HubSpot’s privacy practices?
On what basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.
How do we process your data?
We use HubSpot CRM to capture, organise and analyse customer interactions across channels including email, social media and telephone. The personal data collected is used for communication with existing and prospective customers and for marketing activities such as newsletter campaigns. HubSpot also allows us to capture and analyse the behaviour of our website visitors.
On what legal basis do we process your data?
We have a legitimate interest in managing customer relationships and communications as efficiently as possible. Data processing is therefore based on Art. 6(1)(f) GDPR. Where you have consented to the storage of your data, Art. 6(1)(a) GDPR applies exclusively, and you may withdraw that consent at any time with effect for the future.
Analytics and advertising
We use the following tools to analyse the behaviour of our website visitors and to display advertising.
Google Tag Manager
What is Google Tag Manager?
Tag management system for integrating tracking codes and conversion pixels, provided by Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find more information about Google Tag Manager’s privacy practices?
On what basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.
How do we process your data?
We use Google Tag Manager to integrate, manage and deploy tracking codes and conversion pixels on our website. Google Tag Manager does not itself create user profiles, place cookies on your device or analyse your behaviour as a user. However, it does collect your IP address and transmit it to Google servers in the USA.
On what legal basis do we process your data?
We have a legitimate interest in integrating and managing various tools on our website quickly and straightforwardly. Use of Google Tag Manager is therefore lawful pursuant to Art. 6(1)(f) GDPR. Where you have consented to the transfer of your IP address, we process your data exclusively on the basis of Art. 6(1)(a) GDPR, which you may withdraw at any time with effect for the future.
Google Analytics
What is Google Analytics?
User behaviour analysis tool provided by Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Has a data processing agreement been concluded with Google Analytics?
Yes
Where can you find more information about Google Analytics’ privacy practices?
On what basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.
How can you prevent data collection?
Among other methods, via a browser plugin: Link
How do we process your data?
We use Google Analytics to optimise our website and advertising. The tool analyses user behaviour and provides us with the data needed to make improvements. It gives us information about the origin of our visitors, their page views, time spent on pages and the operating systems they use.
Standard processing
To collect data, Google Analytics uses cookies, device fingerprinting or other user-recognition technologies. Data is transmitted to Google servers in the USA and compiled into a profile — linked to your IP address — that can be attributed to you or your device. You can prevent Google from processing your data by installing a browser plugin provided by Google: Link
IP anonymisation
We have enabled the IP anonymisation feature within Google Analytics. This means Google truncates your IP address (from within the EU/EEA) before transmitting it to the USA. Only in exceptional cases does Google transmit the full IP address to US servers and truncate it there.
How long do we store your data?
According to Google, data stored at the user and event level and linked to cookies, user IDs or advertising IDs is deleted or anonymised after 14 months (see Link).
On what legal basis do we process your data?
As a website operator, we have a legitimate interest in analysing user behaviour in order to optimise our website and the advertising placed on it. Data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR. Where you have consented to the storage of cookies or otherwise agreed to processing by Google Analytics, Art. 6(1)(a) GDPR applies exclusively, and you may withdraw that consent at any time with effect for the future.
Google Ads
What is Google Ads?
Online advertising programme provided by Google Ireland Ltd.
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Has a data processing agreement been concluded with Google Ads?
Yes
Where can you find more information about Google Ads’ privacy practices?
On what basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.
How do we process your data?
We use Google Ads to display advertisements in Google Search or on third-party websites when visitors to our site enter certain search terms in Google (keyword targeting). We also place targeted ads based on user data available to Google, such as location data and interests (audience targeting). We evaluate collected data quantitatively — for example by analysing which search terms triggered our ads and how many ads led to clicks.
On what legal basis do we process your data?
As a website operator, we have a legitimate interest in placing and evaluating advertisements. Data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR. Where you have consented to the storage of cookies or otherwise agreed to processing by Google, Art. 6(1)(a) GDPR applies exclusively, and you may withdraw that consent at any time with effect for the future.
YouTube (with enhanced data protection mode)
What is YouTube?
Video platform
Who processes your data?
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Where can you find more information about YouTube’s privacy practices?
How do we process your data?
Our website includes embedded YouTube videos. When you watch one, Google — as YouTube’s provider — collects and stores certain information about you. Since we use YouTube in enhanced data protection mode, this only happens once you start a video. Specifically:
- Google’s servers are informed which of our pages were visited from your device. If you are logged into your YouTube account while browsing, Google can attribute your activity directly to your personal profile. To prevent this, log out of your YouTube account before browsing further.
- Google uses cookies, device fingerprinting or similar recognition technologies to gather information about our website visitors and uses it to generate video statistics, improve its services and prevent fraud.
- Additional data processing may occur beyond the above; the details are beyond our knowledge and control.
Even if you do not start a YouTube video on our website, Google establishes a connection to its DoubleClick network and potentially other partners. Enhanced data protection mode does not mean Google processes no data from you when you visit our website.
On what legal basis do we process your data?
We embed YouTube videos to make our website and our services more engaging. This constitutes our legitimate interest as a company and is therefore lawful pursuant to Art. 6(1)(f) GDPR. Where you have consented to the processing, Art. 6(1)(a) GDPR applies exclusively, and you may withdraw that consent at any time with effect for the future.
Vimeo (without tracking)
What is Vimeo?
Video platform
Who processes your data?
Vimeo Inc., 330 West 34th Street, 5th Floor, New York, NY 10001, USA
Where can you find more information about Vimeo’s privacy practices?
On what basis do we transfer your data to the USA?
On the basis of Standard Contractual Clauses issued by the European Commission and legitimate business interests (see Link).
How do we process your data?
Our website includes embedded Vimeo videos. When you access a page containing an embedded Vimeo video, this is communicated to Vimeo’s servers, including your IP address. However, due to settings we have configured within the Vimeo plugin, Vimeo will not place cookies on your device or track your browsing behaviour.
On what legal basis do we process your data?
We embed Vimeo videos to make our website more engaging. This constitutes our legitimate interest as a company and is therefore lawful pursuant to Art. 6(1)(f) GDPR. Where you have consented to the processing, Art. 6(1)(a) GDPR applies exclusively, and you may withdraw that consent at any time with effect for the future.
OneDrive
What is OneDrive?
Cloud storage service
Who processes your data?
Microsoft Corp., One Microsoft Way, Redmond, WA 98052-6399, USA
Has a data processing agreement been concluded with OneDrive?
Yes
Where can you find more information about OneDrive’s privacy practices?
On what basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.
How do we process your data?
Our website allows you to upload files using OneDrive cloud storage, which stores the files on servers operated by Microsoft. When you visit our website, a connection to OneDrive is also established, allowing OneDrive to register that our website was accessed via your IP address.
On what legal basis do we process your data?
We have a legitimate interest in providing a reliable upload facility on our website. Data processing is therefore based on Art. 6(1)(f) GDPR. Where you have consented to the processing, Art. 6(1)(a) GDPR applies exclusively, and you may withdraw that consent at any time with effect for the future.
eCommerce
Customer and contract data
How do we process your data?
When we enter into a contract with you, we require certain personal data. We collect, process and use this data only to the extent necessary to establish, define the content of or amend our legal relationship. Where our services can only be accessed via our website or are invoiced through it, we also collect usage data to the extent necessary to enable you to use our services or to bill for services rendered.
How long do we store your data?
We store your data until our legal relationship ends, unless we are legally required to retain it for longer.
On what legal basis do we process your data?
We store your data to perform the contract with you or to carry out pre-contractual measures. The legal basis is therefore Art. 6(1)(b) GDPR.
Data transfer in connection with goods delivery
How do we process your data?
When you place an order, we transmit your data to companies commissioned with delivery and/or payment processing. Only the data necessary for the commissioned company to carry out the specific task is transmitted. Where we wish to share data beyond this, we will obtain your consent. We do not share your data for advertising purposes.
On what legal basis do we process your data?
We share your data to fulfil the contract we have concluded with you. The legal basis is therefore Art. 6(1)(b) GDPR.
Data transfer in connection with services and digital content
How do we process your data?
For payment processing, we transmit your data to a payment service provider or the financial institution handling the transaction. Only data strictly necessary for the payment process is shared. Where we wish to share additional data, we will obtain your consent.
On what legal basis do we process your data?
We share your data to fulfil the contract we have concluded with you. The legal basis is therefore Art. 6(1)(b) GDPR. Where you have consented to the transfer of your data, Art. 6(1)(a) GDPR applies, and you may withdraw that consent at any time with effect for the future.
Audio and video conferencing
As a company, we are in regular contact with customers, business partners, service providers and others. Among other communication tools, we use online conferencing software. Privacy-relevant information about the providers we use is set out at the end of this section. When you communicate with us via such a tool, both we and the tool provider process your personal data.
How do we process your data?
Online conferencing tools capture and store various personal data to enable participation in and the smooth running of an online conference. In addition to registration, conference and technical data, this includes certain communication content.
- Registration data: your email address and/or telephone number and any other data you provide when registering for a conference.
- Conference data: start, end and duration of your participation, number of participants and other conference metadata.
- Technical data: IP address, MAC address, device ID, device type, operating system and version, client version, camera type, microphone or speaker, and type of connection.
- Communication content: cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared during use of the service.
For details of data processing, please refer to the privacy policies of the respective conferencing tool provider.
How long do we store your data?
We delete your data from our systems as soon as one of the following applies:
- The purpose of the data processing has ceased.
- You request deletion of the data.
- You withdraw your consent to storage.
This does not apply where we are legally obliged to retain the data. Cookies remain on your device until you delete them. Conferencing tool providers may also store your data for their own purposes; please enquire directly with the respective provider regarding retention periods.
On what legal basis do we process your data?
Where we are already in a contractual relationship or you wish to enter into one, we use conferencing tools to fulfil the contract or to inform you about our services. Data processing is therefore based on Art. 6(1)(b) GDPR. Otherwise, conferencing tools serve the purpose of simple and fast communication, without which we could not run our business efficiently. We therefore also have a legitimate interest in such processing pursuant to Art. 6(1)(f) GDPR. Where consent is the applicable basis, Art. 6(1)(a) GDPR applies and may be withdrawn at any time with effect for the future.
Which conferencing tools do we use?
Microsoft Teams
What is Microsoft Teams?
Collaboration and communication platform for teams
Who processes your data?
Microsoft Corp., One Microsoft Way, Redmond, WA 98052-6399, USA
Has a data processing agreement been concluded with Microsoft Teams?
Yes
Where can you find more information about Microsoft Teams’ privacy practices?
On what basis do we transfer your data to the USA?
On the basis of the European Commission’s adequacy decision and the company’s corresponding certification.
Own services / Other
Processing of applicant data
If you would like to work with us, we are happy to receive your application. All personal data submitted is treated in strict confidence, including data collected later in the course of the application process.
How do we process your data?
All data collected during the application process is stored and used to the extent necessary to decide on the establishment of an employment relationship. This includes contact and communication data, application documents and notes made during interviews. Within our company, your data is shared only with those involved in processing your application.
If your application is successful, we store the data required to manage the employment relationship in our data processing systems. If we are unable to offer you a suitable position at the current time, we would be happy — with your consent — to include your data in our applicant pool, so that we can contact you should a suitable vacancy arise.
How long do we store your data?
If we are unable to make you a job offer, you decline an offer or withdraw your application, we reserve the right to retain your documents and other application data for up to 6 months after the conclusion of the application process for potential evidentiary purposes in the event of a legal dispute. After that period, your data is deleted and documents destroyed. If a legal dispute is pending or imminent, data is deleted only once it is no longer required for evidentiary purposes.
Data in the applicant pool is deleted no later than 2 years after consent is granted, or earlier if you withdraw consent before that point. Deletion is always subject to the absence of any legal obligation to retain the data for longer.
On what legal basis do we process your data?
Applicant data is processed on the basis of § 26 BDSG (German Federal Data Protection Act — initiation of an employment relationship) and Art. 6(1)(b) GDPR (general contract initiation). The same applies if your application is successful. Where we are unable to offer you a position, you decline or withdraw, we have a legitimate interest in retaining your data for evidentiary purposes in a potential legal dispute; processing is therefore based on Art. 6(1)(f) GDPR. Where you have expressly consented, Art. 6(1)(a) GDPR applies, and you may withdraw that consent at any time with effect for the future.
Data processing on social media
What do we mean by social media?
We use the term social media to refer to the social networks on which we maintain publicly accessible profiles. The specific networks are listed below.
Who processes your data?
The respective operators of the social networks, as listed below.
How is your data processed?
Social network operators are generally able to collect and analyse extensive data on the behaviour of visitors and users of their networks. We are unable to track all processing operations carried out by the networks we use, meaning additional processing may be performed by the operators beyond what is listed here. Further information can be found in the terms of use and privacy policies of the respective networks. Processing of your data may be triggered by visiting the social network’s website or our profile page there. Even visiting a website that uses content from the network — such as Like or Share buttons — may result in data being transmitted to the network operators. If you are a registered user of the network and logged into your account, your visit to our profile page may be attributed to your account by the network operator. Even if you are not registered or logged in, the operator may still collect your personal data — for example by capturing your IP address or setting cookies — and may use this data to create interest-based user profiles and display targeted advertising inside and outside the network. If you are a registered user, such advertising may be shown across all devices on which you are or have been logged in.
On what legal basis is your data processed?
Our profiles on social networks are intended to maintain as broad an online presence as possible for our company, which constitutes our legitimate interest. Data processing is therefore lawful pursuant to Art. 6(1)(f) GDPR. Data processing operations carried out by the social network operators themselves may be based on different legal grounds, which must be disclosed by those operators.
Who is responsible for processing your data and how can you exercise your rights?
When you visit one of our social media profiles, we and the operator of the respective network are jointly responsible for the data processing triggered by that visit. You may generally exercise your rights vis-à-vis either us or the respective network operator. Despite joint responsibility, our influence over the network operator’s data processing is limited and governed primarily by the operator’s own policies.
How long is your data stored?
Data we collect via our social media profiles is deleted from our systems once the purpose for storage no longer applies, you request deletion, or you withdraw your consent. Cookies remain on your device until you delete them. Statutory retention obligations remain unaffected. We have no influence over how long social network operators retain data they collect for their own purposes; please contact the respective operator directly — for example via their privacy policy.
Which social media platforms do we use?
What is LinkedIn?
Professional social network
Who processes your data?
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Is your data transferred to third countries?
Yes
Where can you find more information about LinkedIn’s privacy practices?
Where can you adjust your privacy settings as a user?
Registered LinkedIn users can adjust their privacy settings in their user account. Click the following link and log in: Link
YouTube
What is YouTube?
Social network in the form of an online video platform
Who processes your data?
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Is your data transferred to third countries?
Yes
Where can you find more information about YouTube’s privacy practices?
Where can you adjust your privacy settings as a user?