Information about the processing of your data

Pursuant to Art. 12 of the General Data Protection Regulation (hereinafter referred to as GDPR), we are obliged to inform you about the processing of your data when using our website. We take the protection of your personal data very seriously and this data protection declaration informs you about the details of the processing of your data as well as about your legal rights in this regard. We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or corresponding jurisdiction. We recommend that you read the data protection declaration from time to time and include a print out or copy with your documents.

Definitions

  • “Website” or “Internet presence” in all the following means of the responsible person on http://www.gapless-app.com/http://www.gapless.app and https://jobs.gapless-app.com.
  • “Personal data” means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more specific characteristics that express the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person. Personal data is therefore, for example, the name, e-mail address and telephone number of a person, but may also include data on preferences, hobbies and memberships.
  • Processing means operations or series of operations relating to personal data carried out with or without the aid of automated processes, such as collection, recording, organisation, filing, recording, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison, integration, limitation, erasure or destruction.
  • Pseudonymisation means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the involvement of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures ensuring that the personal data are not attributed to an identified or identifiable natural person.
  • Consent is subsequently given in the form of any voluntary, specific, informed and unambiguous expression of will, in the form of a statement or other unambiguous affirmative act, by which the data subject indicates his or her consent to the processing of personal data concerning him or her.
  • Google also refers to Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Scope of application

The privacy policy applies to all pages of http://www.gapless-app.com/http://web.gapless-app.com/ and https://jobs.gapless-app.com. It does not extend to any linked websites or Internet presences of other providers.

Responsible provider

We are responsible for the processing of personal data within the scope of this privacy policy:

New Horizon GmbH
Neue Schönhauser Str. 2
10178 Berlin

contact@gapless-app.com

Questions on data protection

If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:

Spirit Legal LLP Attorneys at Law
Attorney at Law and Data Protection Officer
Peter Hense

Postal address:

Data Protection Officer
New Horizon GmbH
Neue Schönhauser Str. 2
10178 Berlin

Contact us via email:

datenschutzbeauftragter@gapless-app.com 

Safety and security

We have taken comprehensive technical and organizational precautions to protect your personal data from unauthorized access, misuse, loss and other external disturbances. To this end, we regularly review our security measures and adapt them to the state of the art.

Your rights

You have the following rights with regard to the personal data concerning you which you may assert against us:

  • Right of access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR) or deletion (Art. 17 GDPR)
  • Right to limitation of processing (Art. 18 GDPR)
  • Right to object to the processing (Art. 21 GDPR)
  • Right to revoke your consent (Art. 7 para. 3 GDPR)
  • Right to receive the data in a structured, common, machine-readable format (“data transferability”) and right to forward the data to another responsible party if the conditions of Art. 20 para. 1 lit. a, b GDPR are met (Art. 20 GDPR).

You can assert your rights by notifying the contact details listed in the “Responsible provider” section or by contacting the data protection officer appointed by us. You also have the right to complain to a data protection supervisory authority about the processing of your personal data carried out by us (Art. 77 GDPR).   

Use of the website, access data

In principle, you can use our website for purely informational purposes without disclosing your identity. When calling up the individual pages of the website in this sense, only access data is transmitted to our web space provider so that the website can be displayed to you. This is the following data:
– Browser type/ browser version
– used operating system
– Language and version of the browser software
– Host name of the accessing mobile device
– IP address
– Website from which the request originates
– Contents of the request (concrete page)
– Date and time of the server request
– Access status/HTTP status code
– Referrer URL (the previously visited page)
– Transferred amount of data
– Time zone difference to Greenwich Mean Time (GMT)

The temporary processing of the IP address by the system is necessary in order to technically enable delivery of the website to your computer. A processing of your IP address for the duration of the session is necessary. The legal basis for this processing is Art. 6 Para. 1 S. 1 lit. f) GDPR. The access data will not be used to identify individual users and will not be merged with other data sources. The access data are deleted when they are no longer required for the purpose of their processing. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website. IP addresses are stored in log files to ensure the functionality of the website. The data is also used to optimise the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context either. The data is generally deleted after seven days at the latest; further processing is possible in individual cases. In this case, the IP address is deleted or altered in such a way that it is no longer possible to assign the calling client. The collection of the data for the provision of the website and the processing of the data in log files is mandatory for the operation of the website. You have the right to object to the processing. Your right of objection exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 GDPR). In the event of your justified objection, we will examine the facts and either discontinue or adapt the data processing or point out to you our compelling defensible reasons on the basis of which we will continue the processing.

Cookies

In addition to the aforementioned access data, so-called cookies are stored in the Internet browser of the end device you are using when you use the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies are not part of the PC system and cannot execute any programs. They serve to make our website user-friendly. The use of cookies may be technically necessary or for other purposes (e.g. analysis/evaluation of website use).

  1. a) Technically necessary cookies

Some elements of our website require that the calling browser can be identified even after a page change. The following data is processed in the cookies:

– Language settings

– Log-in information.

The user data collected by technically necessary cookies are not processed for the creation of user profiles. We also use so-called “session cookies”, which store a session ID with which various requests from your browser can be allocated to the joint session. Session cookies are necessary for the use of the website. In particular, they enable us to recognise the terminal used when you return to the website. We use this cookie to recognize you on subsequent visits to the website if you have an account with us; otherwise you would have to log in again each time you visit. The legal basis for this processing is Art. 6 Para. 1 S. 1 lit. f) GDPR. We use session cookies to make the use of the website more attractive and effective. The session cookies are deleted as soon as you log out or close your browser. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 GDPR). In the event of your justified objection, we will examine the facts and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.  You can deactivate or restrict the transmission of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it is possible that all functions of the website can no longer be used to their full extent.

  1. b) Cookies that are not technically necessary

We also use cookies on the website, which enable us to analyse the surfing behaviour of users. For example, the following data is stored and processed in the cookies:

– Frequency of page views

– Use of website functions.

These cookies are used to make the use of the website more efficient and attractive. The legal basis for this processing is Art. 6 Para. 1 S. 1 lit. f) GDPR. Cookies that are not technically necessary are automatically deleted after a specified period of time, which may differ depending on the cookie. You can object to the processing of your data by cookies. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 GDPR). If you do not wish to use cookies, you have the option of changing your browser settings to block cookies generally or selectively or to remove cookies that have already been saved. You can also have the corresponding information displayed before setting a cookie. If you change the browser settings for the use of cookies or deactivate cookies, the functionality of this website may be restricted. Insofar as we integrate third-party cookies into our website, we will point this out to you separately below.

Contact Establishment

If you contact our company, e.g. by e-mail, the personal data you provide will be processed by us in order to answer your enquiry. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) GDPR or Art. 6 Para. 1 S. 1 lit. b) GDPR if the purpose of the contact is to conclude a contract. In the case of contact by e-mail, the processing of the contact also constitutes the necessary legitimate interest in the processing of the data.  

In this context, the data will not be passed on to third parties. The data are processed exclusively for the processing of the conversation. We delete the data arising in this connection after the processing is no longer necessary or restrict the processing to compliance with the existing legally mandatory storage obligations. You have the possibility at any time to object to the processing of your personal data for contact enquiries. Your right of objection exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 GDPR). A right of objection is given in particular if the processing is not necessary for the fulfilment of a contract with you, which is described by us in the previous description of the functions. In such a case, the processing of the request may not be continued. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing.

Processing and disclosure of personal data for contractual purposes

We process your personal data if and to the extent necessary for the initiation, justification, execution and/or termination of a legal transaction with our company. The legal basis for this arises from Art. 6 Para. 1 S. 1 lit. b) GDPR.  

After the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or deleted unless we are entitled to further storage and processing as required in the respective context on the basis of a consent given by you (e.g. consent to the processing of the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorization (e.g. authorization to send direct mail) or on the basis of legitimate interests (e.g. storage for the enforcement of claims).  

Your personal data will be passed on insofar as it is necessary for the establishment, execution or termination of legal transactions with our company (e.g. in the case of passing on data to a payment service provider / a mail order company for the purpose of processing a contract with your person), (Art. 6 Para. 1 S. 1 lit. b) GDPR), or

– a subcontractor or vicarious agent, whom we use exclusively in the context of providing the offers or services requested by you, requires this data (such auxiliary persons are only entitled to process the data to the extent necessary for the provision of the offer or service, unless you are expressly informed otherwise), or
– there is an enforceable administrative order (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
– there is an enforceable court order (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
– we are legally obliged to do so (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
– the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 para. 1 sentence 1 lit. d) GDPR), or
– it is necessary for the performance of a task which is in the public interest or is carried out in the exercise of official authority (Art. 6 para. 1 sentence 1 lit. e), or
– we are authorised or even obliged to pursue overriding legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Any further transfer of your personal data to other persons, companies or bodies will not take place unless you have given your effective consent to such a transfer. The legal basis for the processing is then Art. 6 Para. 1 S. 1 lit. a) GDPR.

Application procedure

We process the data necessary for the online application process (name, e-mail address and location) as well as data you have sent us in connection with your application in order to check your suitability for the position (or any other open positions in our company) and to carry out the application process.

Legal basis for the processing of your personal data in this application procedure is primarily § 26 BDSG in the version valid from 25.05.2018. Accordingly, the processing of the data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be necessary for legal prosecution after completion of the application procedure, it may be processed on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 para. 1 lit. f) DSGVO. Our interest then lies in the assertion or defence of claims.

Candidate data will be deleted after 6 months in the event of rejection. In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There the data will be deleted after two years. If you have been awarded a position as part of the application process, the data will be transferred from the applicant data system to our personnel information system.

We use a specialized software provider for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing is carried out in a permissible manner.

Your applicant data will be viewed by the personnel department after receipt of your application. Suitable applications will then be forwarded internally to the department managers responsible for the respective open position. The rest of the process is then coordinated. In the company only those persons have access to your data who need it for the proper course of our application procedure.

You have the possibility to object to the processing of your data at any time. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO).

A right of objection exists in particular if the processing is not necessary for the fulfilment of a contract with you, which is described by us in the previous description of the functions. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing.

Vehicle transfer function

If you transfer a digital asset of a sold car to another profile as part of the export function in our app, any personal data contained therein will be transferred to the authorized user (buyer) of the app and processed by this user. Processing by other parties does not take place. The purpose of the processing is to make all relevant car content as easily accessible as possible for the buyer, to fulfil the contractual obligations according to our terms of use and to save the buyer the effort of creating a new asset. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. b) DSGVO. Data processing is necessary for the fulfilment of contractual obligations. In accordance with our terms of use, users are obliged to grant the purchaser of a car rights of use to the digital assets, including any personal data contained therein. In the event that the data is not made available, the granting of rights of use and thus the execution of the contract is not possible. Insofar as the processing goes beyond the contractual purpose in accordance with the terms of use, the legal basis is Art. 6 Para. 1 S. 1 lit. f) DSGVO. The legitimate interest on our part is to offer our users a platform that is as attractive as possible with the highest possible range of services. Processing ends as soon as the user relationship has ended and there are no other legal storage obligations. If the data processing is based on Art. 6 Para. 1 S. 1 lit. f) DSGVO, you may object to the processing at any time. Your right to object exists for reasons arising from your particular situation. In the event of an objection, we will cease processing unless we can prove compelling reasons worthy of protection which outweigh your interests, freedoms and rights or the processing is necessary for asserting or exercising or defending against legal claims.

Procurement of vehicle birth certificates

As part of the procurement of vehicle birth certificates, we process the personal data relevant to the request for birth certificates and forward this to the respective manufacturer of your vehicle. The purpose of the processing is to conclude an order with the manufacturer to issue the requested vehicle birth certificate for you in accordance with our brokerage agreement concluded with you, thus saving you the effort of independently requesting the birth certificate. Your data relevant for the order will be forwarded to the corresponding manufacturer, in particular your name, your contact data, your payment data and – if required by the manufacturer – the data stored in the app for your vehicle (e.g. pictures, model, year of manufacture). The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. b) DSGVO. The processing is necessary and obligatory for the execution of the mediation contract. If your data is not provided, it is impossible for us to carry out the procurement to the manufacturer. We stop processing as soon as it is no longer necessary to achieve the purpose of the contract, unless we are obliged to continue data processing due to other legal obligations. Due to mandatory tax regulations, we are obliged to keep your address and payment data for a period of ten years. Two years after termination of the contract, we will restrict data processing and reduce it to compliance with existing statutory provisions.

Offers for dealers and service providers

If you have consented to be contacted by us via our app offers for the creation of exposés relating to the trade, procurement and service of vehicles, your data will be processed for direct advertising on the basis of Art. 6 Para. 1 S. 1 lit. a) DSGVO. If the processing serves the fulfilment of contractual services or is based on a request from dealers and service providers, the processing is carried out on the basis of Art. 6 Para. 1 S. 1 lit. b) DSGVO. The purpose of the processing is to establish contact with you as a trader in order to submit offers for the preparation of exposés and, if necessary, to fulfil the contract for this service. The provision of relevant personal data is necessary and obligatory for the preparation of the exposés and, in the case of a present request, for the execution of the contract. If the relevant data is not made available, such a contract cannot be carried out for the creation of exposés. Your data will not be processed outside the European Union. Your data will be deleted at the latest two years after termination of the contract. Insofar as legal storage obligations exist, we restrict the processing. A revocation of your consent is possible at any time. You can assert your right of revocation against the contact data mentioned under “Responsible”. The lawfulness of the processing of your data until the time of revocation is not affected in accordance with Art. 13 para. 2 lit. c) DSGVO.

Dealers’ and service providers’ offers

If you have consented via our app to be contacted by authorised dealers and service providers in our app and to receive offers from dealers and service providers on all topics relating to cars, in particular on the trade, procurement and service of vehicles, as well as to receive platform and car-specific advertising by Gapless, your data will be processed on the basis of Art. 6 Para. 1 S. 1 lit. a) DSGVO. Insofar as the processing serves the fulfilment of contractual services, the processing takes place on the basis of Art. 6 Para. 1 S. 1 lit. b) DSGVO. In this case the provision of your data is necessary and obligatory for the execution of the contract. If your data is not provided, it cannot be processed for the execution of the contract. Processing is carried out for the purpose of establishing contact between you and the dealers and service providers and for purposes of direct advertising and thus for the more attractive design of our app. The passing on of the appropriate data for the establishment of contact takes place only to all entitled dealers and service providers in our App. If you provide further data in the course of contacting the retailer, the respective retailer is solely responsible for further processing. The processing of your data takes place exclusively within the European Union. The dealers and service providers registered with us are all obliged to process all data in accordance with applicable data protection laws. We delete the data obtained in this context at the latest two years after termination of the contract, or restrict the processing if there are legal storage obligations. You can revoke your consent at any time. You can assert your right of revocation against the contact data mentioned under “Responsible”. The lawfulness of the processing of your data until the time of revocation is not affected in accordance with Art. 13 para. 2 lit. c) DSGVO.

Email marketing

SendGrid

We use the e-mail marketing service SendGrid (SendGrid Inc., 1801 California Street, Suite 500, Denver, CO 80202) to send you e-mails and messages within our app for various administrative purposes, such as resetting your password. The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. b) DSGVO, insofar as the processing is necessary for the purpose of fulfilling the contract. Otherwise, processing will be based on Art. 6 para. 1 sentence 1 lit. f) DSGVO. Our legitimate interests are to make the use of our app as simple and attractive as possible for you and to inform you about technical changes to our app. Your data will be deleted as soon as it is no longer required for data processing for the purposes described here, or processing will be discontinued if there are legal storage obligations. SendGrid also processes data outside the European Union. However, SendGrid has submitted to the EU-US Privacy Shield and is thus committed to compliance with the European Data Protection Standards (https://www.privacyshield.gov/participant?id=a2zt0000000TRktAAG&status=Active). You can find further provisions on data protection at SendGrid at: https://sendgrid.com/policies/privacy/services-privacy-policy/If the data processing is based on Art. 6 Para. 1 S. 1 lit. f) DSGVO, you may object to the processing at any time. Your right to object exists for reasons arising from your particular situation. In the event of an objection, we will cease processing unless we can prove compelling reasons worthy of protection which outweigh your interests, freedoms and rights, or the processing is necessary for the assertion or exercise of or for the defence against legal claims.

Newsletter

You have the option of subscribing to our e-mail newsletter on our website, which informs you regularly about the following contents:
– Offers from our portfolio,
– New articles/collections,
– Special offer/ temporary offers.

The following personal data must be provided in order to receive the newsletter:
– Recipient (name or pseudonym),
– valid e-mail address.

Registration for our e-mail newsletter is carried out using the double opt-in procedure. After you have entered the data marked as mandatory, we will send you an e-mail to the e-mail address you have specified, in which we will ask you to expressly confirm your subscription to the newsletter (by clicking on a confirm link). In this way, we ensure that you actually wish to receive our e-mail newsletter. If the confirmation is not received within 24 hours, we block the information sent to us and automatically delete it after one month at the latest.

Furthermore, the following data will be processed at the time of the subscription:
– IP address. Date/time of registration,
– Date/time of registration for the newsletter,
– Time of your confirmation of the confirm link.

We process your IP address, the time of registration for the newsletter and the time of your confirmation in order to document your newsletter registration and to prevent the misuse of your personal data. The legal basis for the processing is Art. 6Abs. 1 S. 1 lit. f) GDPR. We process this data for a period of two years after termination of the contract. If the newsletter registration takes place outside of a contract conclusion, we process these data up to the expiration of two years after termination of the use process. We delete this data when the newsletter subscription ends.

After your confirmation, we process the e-mail address and name of the recipient concerned for the purpose of sending you our e-mail newsletter. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. a) GDPR. We delete this data when you cancel your newsletter subscription. You can revoke your consent to the processing of your e-mail address to receive the newsletter at any time, either by sending us a message (cf. the contact details in the section “Responsible provider/representative of the provider in the European Union”) or by directly clicking on the unsubscribe link contained in the newsletter. The legality of the processing carried out on the basis of the consent up to the revocation is not affected by the revocation. In the event of a revocation of your consent, we will process your data, in particular your e-mail address, to ensure that you do not receive any further newsletters from us. For this purpose, we put your e-mail address on a so-called blacklist, which we can use to carry out a comparison to ensure that you do not receive any further newsletters from us. The legal basis for the processing is Art. 6 Para. 1 S.1 lit. c) DSGVO in order to comply with our obligation to retain data, otherwise Art. 6 Para. 1 S.1 lit. f) DSGVO. Our legitimate interests are to comply with our legal obligation not to send you any further newsletters after exercising your right of revocation.

Advertising to existing customers

We reserve the right to use the e-mail address provided by you during registration in accordance with the statutory provisions to send you the following content by e-mail during or after registration, unless you have already objected to this use of your e-mail address:

– technical information and product updates,
– Information about new functions of the App,
– new offers from our portfolio,
– new offers for services of our products and services,
– individual customer advice,
– Inquiries regarding customer feedback as well as
– Invitations to company events.

Insofar as the sending of electronic information is not necessary for the execution of the contract (e.g. e-mail in informational form) and the legal basis from Art. 6 Para. 1 S. 1 lit. b) GDPR is relevant, the processing is based on the legal basis according to Art. 6 Para. 1 S. 1 lit. f) GDPR. Our legitimate interests in the aforementioned processing lie in increasing and optimizing our services, sending direct mail and ensuring customer satisfaction. We delete your data when you terminate your user contract, at the latest, however, three years after termination of the contract. We draw your attention to the fact that you can object at any time to the receipt of direct advertising as well as data processing for the purpose of direct advertising without incurring any costs other than the transmission costs according to the basic tariffs. You are entitled to a general right of objection without giving reasons (Art. 21 para. 2 GDPR). After exercising your right of objection, we will delete your data in connection with the acquisition of existing customers. Click on the unsubscribe link in the respective e-mail or send us your objection to the contact details listed in the “Responsible provider” section. In the event of an objection, we will process your data, in particular your e-mail address, to ensure that you do not receive any further direct mail from us. For this purpose, we put your e-mail address on a so-called blacklist, which we can use to carry out a comparison to ensure that you do not receive any further newsletters from us. The legal basis for data processing is Art. 6 Para. 1 S.1 lit. c) DSGVO in order to comply with our obligation to retain data, otherwise Art. 6 Para. 1 S.1 lit. f) DSGVO. Our legitimate interests are to comply with our legal obligation not to send you any further newsletters after exercising your right of objection.

MailChimp

We use the e-mail marketing service “MailChimp” of the provider Rocket Science Group, LLC (675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, Web: https://mailchimp.com/; hereinafter: “MailChimp”). If you have subscribed to the newsletter, the data provided during registration will be stored and processed on MailChimp’s servers in the USA. Mailchimp has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the Rocket Science Group certification at https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG. MailChimp processes this information to send and evaluate the newsletter on our behalf. The MailChimp. Newsletters contain so-called “web-beacon”, which are pixel-sized files that are retrieved from the MailChimp server when the newsletter is opened. Technical information, such as the browser used, time of the page call and IP address, is collected as part of the retrieval process. This information is processed for the evaluation and technical improvement of the services. Furthermore, it is evaluated whether newsletters are opened, when they are opened and which links are clicked by the reader. This information can theoretically be assigned to individual newsletter recipients. Neither we nor MailChimp intend, however, to observe individual recipients; the evaluation of the information mentioned serves rather to recognize the reading habits of the recipients in order to better adapt, optimize and distribute our newsletter contents accordingly. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) GDPR. We have no knowledge of the storage period at MailChimp and have no possibility of influencing it. You have a general right of objection against data processing for the purpose of direct advertising without stating reasons (Art. 21 para. 2 GDPR). You can object to the processing at any time with effect for the future by clicking on the unsubscribe link at the end of the newsletter or by sending us the objection via the contact data mentioned in the section “Responsible provider”. This ends the processing for receiving the newsletter and for statistical analyses at the same time. A separate objection of the dispatch via MailChimp or the statistical evaluation is not possible. Alternatively, you can object at http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/ (for the area of the European Union).

Hubspot

We use HubSpot for our online marketing activities. HubSpot is a software company based in the USA with an office in Ireland. Contact us: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Telephone: +353 1 5187500. This is an integrated software solution that covers various aspects of our online marketing. These include, among other things:

E-mail marketing (newsletters and automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (e.g. traffic sources, accesses, etc.), contact management (e.g. user segmentation & CRM), landing pages and contact forms.

Our registration service allows visitors to our website to learn more about our company, download content and provide their contact information and other demographic information. This information about the use of our website and the content of our website is processed on servers of our software partner HubSpot in the USA. HubSpot has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of “HubSpot” at https://www.privacyshield.gov/participant?id=a2zt0000000TN8pAAG.

The data collected may be used by us to contact visitors to our website and to determine which services of our company are of interest to them. All information we collect is subject to this Privacy Policy. The legal basis for the processing t is Art. 6 Para. 1 S. 1 lit. f) DSGVO Our legitimate interest in using this service lies in optimising our marketing measures and improving our service quality on the website.

More information about HubSpot’s Privacy Policy », More information about HubSpot’s EU Privacy Policy », More information about HubSpot’s cookies can be found here & here »

We draw your attention to the fact that you can object at any time to the receipt of direct advertising and data processing for the purpose of direct advertising without incurring any costs other than the transmission costs according to the basic tariffs. You are entitled to a general right of objection without giving reasons (Art. 21 para. 2 DSGVO). Click on the unsubscribe link in the respective e-mail or send us your objection to the contact details listed in the “Responsible provider” section.

Irrespective of this, you have the right to object to the remaining processing. You can object to the processing. Your right of objection exists for reasons arising from your particular situation. We will not further process your data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can also prevent HubSpot from collecting the data generated by the cookie and related to your use of the website (including your IP address) and from processing this data by HubSpot by using the following opt-out link: Hubspot Opt-Out Link. In addition, you can also prevent processing by opening the browser used in “private mode”.

Hosting

We use external hosting services from Amazon Web Services (Amazon Web Services Inc., 410 Terry Avenue North, Seattle WA 98109, United States) to provide you with the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security and technical maintenance services. It processes all data necessary to operate and use our app. We use external hosting services to operate this app offering. Amazon processes your data exclusively within the European Union. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) DSGVO. Our legitimate interests in the use of external hosting services are the efficient and secure provision of our app offering. You can object to the processing. Your right of objection exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). In the event of your justified objection, we will examine the facts and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

Stability testing and monitoring

We use the “Sentry” service of Functional Software, Inc. (132 Hawthorne Street, San Francisco, California 94107, USA, e-mail) on our website: compliance@sentry.io). The purpose of the processing is to optimize and ensure the user-friendly operation of our website. For this purpose, your usage and metadata (e.g. device ID, IP address) are processed by “Sentry” in the USA by monitoring system stability and identifying code errors. Sentry” does not process any data for advertising purposes. “Sentry” has submitted to the EU-US Privacy Shield and is committed to comply with the European Privacy Standard https://www.privacyshield.gov/participant?id=a2zt0000000TNDzAAO&status=Active=a2zt0000000TNDzAAO&status=Active). The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) DSGVO. Our legitimate interests in the integration of “Sentry” lie in ensuring and improving the technical stability of our services. Further information on data protection and the storage period at Sentry can be found at https://sentry.io/privacy/You have the right to object to the processing of your data. Your right of objection exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can exercise your right of objection by sending a message to the above-mentioned contact data.

Integration of third-party content

The Website incorporates third-party content such as videos, maps, RSS feeds or graphics from other websites. This integration always presupposes that the providers of this content (“third-party providers”) perceive the IP addresses of the users. Without the IP address, they cannot send the content to the browser of the respective user. The IP address is therefore required for the presentation of this content. We make every effort to only use content from third parties who process the IP address solely for the purpose of delivering the content. However, we have no influence on this if the third-party providers process the IP addresses, e.g. for statistical purposes. As far as we know, we will inform you about this in the following. Some of the third party providers may process data outside the European Union. You can object by installing a JavaScript blocker such as the browser plug-in ‘NoScript’ (www.noscript.net) or by deactivating JavaScript in your browser. Your right of objection exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 GDPR). However, this may result in functional restrictions on the website.

Google Web Fonts

We use so-called web fonts, which are provided by Google, for the uniform display of fonts. When you access a page, your browser loads the web fonts you need into its browser cache to display text and fonts correctly. For this purpose, the browser you are using must connect to Google’s servers. This enables Google to know that your IP address has been used to access our website. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of Google at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The use of Google Web Fonts is in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 S. 1 lit. f) GDPR. We have no knowledge of the storage period at Google and have no possibility of influencing it. You can object to the processing by changing the browser settings so that the browser does not support web fonts – in this case, however, a standard font is used by your computer. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves the assertion and exercise of or defence against legal claims (Art. 21 para. 1 GDPR). In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out our compelling reasons worthy of protection on the basis of which we will continue the processing. Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faqand in Google’s privacy policy: https://www.google.com/policies/privacy/.

Cloudfront

We also offer Cloudfront as Content Delivery Network (CDN). The provider is Amazon Web Services Inc, 440 Terry Ave N, Seattle, WA 98109, USA. When you visit our website, requests are forwarded to the CDN server. Your IP address will be transmitted and processed. Data processing does not take place exclusively within the European Union. However, AWS has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active). We have no knowledge of the storage period of the corresponding data at AWS and have no possibility of influencing it. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) GDPR. We use Cloudfront to make our website more attractive and to optimise the loading times of the website. You have the right to object to the processing of your data. Your right of objection exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 GDPR). You can exercise your right of objection by sending a message to the contact details given under “Responsible provider”.

Typeform

In order to ask your opinions and design our app according to the wishes of the users, we integrate the Typeform user survey tool (postal address: Carrer de Bac de Roda, 163, 08018 Barcelona, Spain). The data provided by you in the course of the survey will be processed by Typeform. In addition, when using the survey section on our website, a cookie is stored on your computer, whereby the data mentioned under “Access data” can be transmitted to Typeform. The purpose of this data processing is to record user interests and to adapt our app to the user’s needs in order to ensure customer satisfaction. The legal basis for this is Art. 6 Para. 1 S. 1 lit. f) DSGVO. Our legitimate interests are, in particular, the design of our app in line with requirements and wishes as well as increasing the attractiveness of our offer. Typeform uses servers from Amazon AWS for data processing, which are primarily operated in the USA. However, Amazon has subjected itself to the EU-US Privacy Shield and thus committed itself to compliance with the European data protection standards. You can view the certification at https://www.privacyshield.gov/participant?id=a2zt0000000TOWQAA4&status=Active. We have no knowledge of the storage period of the data at Typeform and have no possibility of influencing it. You can find further information on data protection at Typeform under the following link: https://www.typeform.com/help/what-happens-to-my-data/.

We would like to point out that you can object to data processing at any time. You can exercise your right of objection under the contact data given under “Responsible”. You can exercise your right of objection without giving reasons. After exercising your right of objection, we will stop or restrict data processing (if there are other storage obligations), unless we can prove that our interests worthy of protection outweigh your rights, freedoms and interests or the processing serves to assert, exercise or defend legal claims. In addition, you can block the cookies set by Typeform in your browser settings or open your browser in “private mode”.

Maze

We use the user research tool “Maze”, a service provided by “Maze.design Limited” (22 Albany Road, Brentford, London, UK, TW8 0NF). For the purpose of testing and testing new applications on our website, we recruit test users to use Maze to analyse the usability of our website, in particular which interfaces, click paths and designs are attractive and intuitive for our users and which need to be improved. The tool is also used to test the use of our website for the purpose of analysing user behaviour. This enables us to find out which click paths and designs can be improved. In the course of the test, data, in particular access data, will be processed by Maze. With the help of “Maze” we record movements on our websites in so-called heat maps and process data for analysis purposes. All data is processed in such a way that we cannot assign it to any particular user. We can only track how long a particular area of our website is viewed, how the mouse moves, where it is clicked and how far it has scrolled. To analyze your usage behavior, the “Maze” uses so-called “cookies” (see the “Cookies” section before), which are stored on your terminal device and processes your IP address and information about the use of our website by your terminal device. The legal basis is Art. 6 Para. 1 S. 1 lit. f) DSGVO. Our legitimate interests in the processing lie in the statistical analysis of website use, range measurement and the optimisation and improvement of our website. Further information on data protection and the storage period at Maze can be found at: https://maze.design/security/.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not process your data further unless we can prove compelling reasons worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims. You can object to the processing in various ways: by notifying us of your objection under the contact details listed under “Responsible provider”, by deactivating cookies in the settings of your browser software or by opening the browser used in “private mode” to prevent the use of cookies.

Usability Hub

We also use the Usability Hub tool from Usability Hub Pty Ltd, Level 1 242 Victoria Street, Brunswick, VIC 3056, Australia. The tool allows us to test the effectiveness of our links and design (first click tests), collect and evaluate user feedback (design surveys), measure our users’ response to visual content (preference test) and measure our users’ first impressions (five seconds tests). Usability Hub processes user data, in particular access data, for the purpose of carrying out the tests, analyzing user reactions and feedback surveys, and evaluates this data for the aforementioned purposes.  With the help of “Usability Hub” we record movements on our websites in so-called heat maps and process data for analysis purposes. All data is processed in such a way that we cannot assign it to any particular user. We can only track how long a particular area of our website is viewed, how the mouse moves, where it is clicked and how far it has scrolled. This enables us to find out which click paths and designs can be improved. To analyze your usage behavior, the “Usability Hub” uses so-called “cookies” (see the “Cookies” section above), which are stored on your terminal device and process your IP address and information about the use of our website by your terminal device.  The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) DSGVO. Our justified interests in the processing lie in the statistical analysis of the website use, the range measurement as well as the optimization and improvement of our web offer. Usability Hub also processes your data outside the European Union in Australia. In order to oblige Usability Hub to comply with European data protection standards, we have agreed so-called standard contract clauses with the company. We can provide you with a copy of these on request. Further information on data protection and the storage period at Usability Hub can be found at: https://app.usabilityhub.com/privacy.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not process your data further unless we can prove compelling reasons worthy of protection which outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims. You can object to the processing in various ways: by notifying us of your objection under the contact details listed under “Responsible provider”, by deactivating cookies in the settings of your browser software or by opening the browser used in “private mode” to prevent the use of cookies.

Google Sign in

You have the opportunity to register on our website using Google’s “Login” solution. You can use Google Sign in to log in to our site using your Google Account. The purpose of this option is to save you from having to create another account and to save you time during the registration process. When you log in with your Google Account, Google will send us your relevant information, including your name, email address, profile picture, and language preferences. Google, on the other hand, is given the opportunity to collect and process information about your user behaviour on our website. If you are logged in via your Google account, it is possible that Google receives data on your user activity, page views and other short-term data. In exceptional cases, in which Google processes your data within the USA, Google has submitted to the EU-US Privacy Shield and thus committed itself to compliance with the European data protection standards. You can view the certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The legal basis for this data processing is Art. 6 Para. 1 S. 1 lit. f) DSGVO. With the “Google Sign in” option, we pursue the legitimate interest of making it easier for you to use our website by not having to create an additional account and by saving time by using your Google Account in the registration process. Google will delete all data at the latest when you delete your Google Account (https://policies.google.com/technologies/retention?hl=de=en). For more information about Google’s privacy practices, please visit https://policies.google.com/privacy?hl=de=en. You have the right of revocation against the processing of your data in this context at any time. Your right of objection exists for reasons arising from your particular situation. We will not process your data further, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, moreover, if the processing serves the assertion and exercise of or defence against legal claims (Art. 21 para. 1 DSGVO). You can exercise your right of objection by sending a message to the contact data listed under “Responsible provider”.

Facebook Sign up

In order to enable you to register via your Facebook account in our app, we have implemented a Facebook login function using programming interfaces from Facebook (Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com; hereinafter: “Facebook”). If you use the login function offered by our app, you can log in to our app via Facebook. The purpose of this integration is to make the registration process easier for you, to optimize our registrations and to make Facebook campaigns easier to convert. When you use the Facebook login feature, Facebook provides us with personal information about you, including your name, first name, email address and Facebook user ID. Facebook in turn processes information from you about app events (in particular app installations, SDK downloads, SDK performance and app starts), configuration data, error messages and other short-term data such as your user activity after you have logged in. If Facebook processes data in the USA as part of this processing, Facebook has submitted to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and thus guarantees compliance with the European data protection standards. The certification of Facebook can be viewed at https://www.privacyshield.gov/participant?id=a2zt0000000GnywAAC&status=Active. The legal basis for this data processing is your declaration of consent Art. 6 Para. 1 S. 1 lit. f) DSGVO. With the Facebook login function, we pursue the legitimate interest of saving you the trouble of registering on our platform and of optimising our offer or of customising it for you. According to Facebook, it stops data processing as soon as the data is no longer needed to provide services and Facebook products. More information about the retention period and other information about Facebook’s privacy practices can be found in the related privacy policy at https://de-de.facebook.com/about/privacy/entnommen . For more information about Facebook’s programming interfaces, please visit: https://developers.facebook.com/docs/ios and https://developers.facebook.com/docs/android.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You may exercise your right to object by sending notice to the above New Horizon contact details.

Statistical, analytical and marketing services

We use third-party services for statistical, analytical and marketing purposes. In this way, we are able to provide you with a user-friendly, optimized use of the website. The third-party providers use cookies to control their services (see the “Cookies” section above). Personal data will not be processed unless explained otherwise below. Some of the third-party providers offer the possibility of declaring a direct objection to the use of the respective service, e.g. by setting an opt-out cookie. If you activate a corresponding opt-out cookie, the external provider will no longer process any data on your usage behaviour in the future. A mere selective contradiction against an individual selection of external services is also possible. If you change your browser or the end device used or delete all cookies, you must set the opt-out cookie again.  In addition, you can also refuse the use of cookies via the opt-out platform of the Bundesverband Digitale Wirtschaft e.V. (BVDW). (BVDW) at http://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/directly. Your right to object exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves the assertion and exercise of or defence against legal claims (Art. 21 para. 1 GDPR). Further information on use-based advertising and opt-out options can also be found at the following link: http://www.youronlinechoices.com/de/. In the following, we will inform you about the services of external providers currently used on our website as well as the purpose and scope of the respective processing in each individual case and about your existing possibilities to object.

Google Tag Manager

We use the Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tag Manager tool itself (which implements the tags) is a cookie-free domain and does not collect personally identifiable information. The tool triggers other tags that may themselves collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will persist for all tracking tags implemented with Google Tag Manager.

Google Analytics und Optimize

In order to optimally tailor our website to your interests, we use Google Analytics, a web analysis service from Google. Google Analytics uses so-called “cookies” (see the “Cookies” section before), which are stored on your computer and enable an analysis of the use of the website by you. The information generated about your use of this website is transferred to a Google server in the USA and processed there.

If IP anonymization is enabled on this website, Google will previously truncate your IP address within member states of the European Union or other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to and truncated by Google on servers in the United States. Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity for us and provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

This website uses Google Analytics with the extension “anonymizeIP”. This means that IP addresses are shortened for further processing, which excludes the possibility of personal references. If the data collected about you is related to a person, this is excluded immediately and the personal data is deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics allow us to improve our services and make them more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google’s certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

We also use the “Google Optimize” service to optimize our website/app components. For this purpose, we carry out A/B tests and other tests, among other things, in order to optimize the offer for our users on the basis of the results. Different versions of our website can be displayed and user behavior can be analyzed in response to the various Web App components. With the help of these analyses we can regularly improve our offer and make it more interesting. We also use Google Optimize to optimize our Google ads on landing pages. The legal basis for the processing of Google Analytics, including the processing of “Google Optimize”, is Art. 6 Para. 1 S. 1 lit. f) DSGVO. Our legitimate interests lie in particular in the improvement of our web presence by evaluating the usage behaviour and adapting our web app to the results. The Analytics data will be deleted after 14 months at the latest. Further information from the third party provider Google can be found at: http://www.google.com/analytics/terms/de.htmlhttp://www.google.com/intl/de/analytics/learn/privacy.htmlhttp://www.google.de/intl/de/policies/privacy.

You have the right to object. You may object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en. You can also prevent the use of cookies by opening the browser in “private mode”.

Landingi

In order to design, publish and test our landing pages, we use the services of Landingi (Landingi Sp. z o.o., 44-100 Gliwice, ul. Witkiewicza 6, info@landingi.com). Landingi offers the design and publication of landing pages as well as the testing and evaluation of user reactions to the respective landing pages. In order to test user behaviour and reactions to different landing pages, Landingi processes, among other things, personal data for analysis purposes.  The legal basis for processing your data for these purposes is Art. 6 Para. 1 S. 1 lit. f) DSGVO. Our legitimate interests lie in testing the user reaction to different landing pages in order to adapt our landing pages as best as possible to the user behaviour and to make the landing pages as attractive as possible and adapted to our target group. Data processing takes place exclusively within the European Union. Landingi will delete the personal data at the latest 3 months after expiry of our contract with you. Further information on data protection at Landingi can be found at https://landingi.com/privacy-policyYou have the right to object. You may object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO). You can exercise your right of objection by sending a message to the above-mentioned contact data.

Hotjar

We also use the analysis service Hotjar to make our website better and more user-friendly. The analysis service is provided by Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, +1 (855) 464-6788, david@hotjar.com)

This tool records movements on the observed web pages in so-called heat maps.  All data is collected without us being able to assign it to specific users. We can only understand how the mouse moves, where it clicks and how far it scrolls. This allows us to make our website better and more customer friendly. The screen size of the device, the device type, information about the browser, the country from which it was accessed and the preferred language are also recorded. When a website displays personal information, Hotjar automatically hides it. They are therefore not comprehensible to us.

To analyse your usage behaviour, so-called “cookies” (see the “Cookies” section above) are used, which are stored on your computer and enable an analysis of your use of the website. The information generated by the “Tracking Code” and “Cookie” about your visit to our website is transmitted to the Hotjar servers and stored there. The tracking code collects the following information about your device such as IP address, device type and browser information, geographic location (country only), preferred language to display our website, pages visited, date and time when the website was accessed. Hotjar shortens your IP address before it is further processed. If the data collected about you has a personal reference, this is immediately excluded and the personal data is deleted immediately.

Hotjar will use this information for the purpose of evaluating your use of our website, compiling reports on such use and providing other services relating to website use and internet evaluation of the website. Hotjar also uses third-party services such as Google Analytics and Optimizely to provide services. These third party companies may store information that your browser sends when you visit the website, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy statements.

The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) DSGVO. The cookies that Hotjar uses have different storage periods. Some remain valid for up to 365 days, some remain valid only during the current visit. You can find an overview of the storage period at: https://www.hotjar.com/legal/policies/cookie-information. Further information about hotjar Ltd. and about the hotjar tool can be found at: https://www.hotjar.com/legal/policies/privacy.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, or if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 DSGVO).

You can object to the processing in various ways:

  • by setting your browser software accordingly, in particular by suppressing third party cookies, you will not receive advertisements from third parties, or
  • by opening the used browser in “private mode” to prevent the tracking of your usage process.

Usage-based online advertising

Google DoubleClick

We continue to use Google’s DoubleClick online marketing tool on the site. DoubleClick uses cookies to serve ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID – a pseudonymous identification number assigned to your browser – to identify which ads are displayed in which browser, thereby preventing them from being displayed more than once. This pseudonym is assigned information about user activities on the website. This allows Google and its partner sites to serve ads based on previous visits to websites. In addition, DoubleClick may use the cookie ID to collect conversions related to ad requests. For example, when a user sees a double-click ad and later uses the same browser to visit the advertiser’s website and make a purchase.

Google transmits the information generated by the DoubleClick cookies to a server in the USA and stores it there. Google complies with the privacy provisions of the EU-US Privacy Shield Agreement and is certified for the “Privacy Shield”, https://www.privacyshield.gov/EU-US-Framework. You can view Google’s certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The data will only be transferred to third parties within the scope of legal regulations or order processing. According to Google, DoubleClick cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the extent and the further processing of the data, which are raised by the use of this tool by Google and inform you therefore according to our state of knowledge: By the integration of DoubleClick Google receives the information that you called the appropriate part of our Internet appearance or clicked an announcement of us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) GDPR. The DoubleClick cookies are deleted at the latest after six months. By using DoubleClick, we pursue the interest of displaying advertising to you that could be of interest to you in order to make our website more interesting for you. For more information about DoubleClick, please visit: https://www.google.de/doubleclickhttp://support.google.comhttps://policies.google.com/privacy?hl=en (Google’s privacy policy in general). You have the right to object. Your right of objection exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 GDPR).  You can object to participation in this tracking procedure in various ways:

– by setting your browser software accordingly, in particular by suppressing third party cookies, you will not receive any advertisements from third parties;
– by deactivating the cookies for conversion tracking by setting your browser to block cookies from the domain “www.googleadservices.com“, https://www.google.de/settings/ads, whereby this setting is deleted if you delete your cookies;
– by disabling the interest-based ads of the providers that are part of the About Ads self-regulatory campaign through the link http://www.aboutads.info/choices, which setting will be deleted if you delete your cookies;
– by permanently disabling it in your Firefox, Internet Explorer or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin.

Facebook Lookalike Audiences

The Website also uses Facebook’s “Lookalike Audiences” feature (provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter “Facebook”). Web beacons such as the “Facebook pixel” collect statistical information about you that is processed by Facebook. Using the “Facebook pixel”, your browser automatically establishes a direct connection with the Facebook server. We have no influence on the extent and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: By integrating the “Facebook pixels”, Facebook receives the information that you have called the corresponding website of our Internet presence or clicked on an advertisement from us. Facebook receives the information that you have visited certain parts of our website. Facebook uses tracking technologies such as web beacons to set a cookie on your computer for this purpose. Among other things, the data specified in the “Access data” section is transmitted. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may find out and store your IP address and other identification features.

The legal basis for processing your data is Art. 6 Para. 1 S. 1 lit. f) GDPR. We pursue the interest to show you advertising which is of interest to you and to make our website more interesting for you. In this case, we do not store any personal data about you. We have no knowledge of the storage period on Facebook and have no possibility of influencing it. Further information on processing by Facebook can be found at https://www.facebook.com/about/privacy.

You have the right to object to the processing. Your right to object exists for reasons arising from your particular situation. We will not process your data further, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, moreover, if the processing serves the assertion and exercise of or defence against legal claims (Art. 21 para. 1 GDPR). The deactivation of the function “Facebook Custom Audiences” is possible for logged in users under https://www.facebook.com/settings/?tab=ads#_.

You can prevent the “Facebook Custom Audiences” function in various ways:
– By setting your browser software accordingly, in particular by suppressing third party cookies, you will not receive any ads from third parties;
– by disabling the interest-based ads of the providers that are part of the “About Ads” self-regulatory campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies.

Facebook Analytics

We continue to use Facebook’s “Facebook Analytics” tool (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com, privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: “Facebook”). For the use of Facebook Analytics, we use the so-called “Facebook pixel” to measure the reach of our advertisements. Facebook uses tracking technologies such as web beacons to set a cookie on your computer for this purpose. Among other things, the data mentioned in the section “Access data” is transmitted.

The information obtained with the “Facebook Cookies” serve us solely for statistical purposes, are transmitted to us anonymously by Facebook and do not provide any information about the person of the user. They are processed by Facebook with your Facebook account in accordance with Facebook’s privacy policy. Even if you are not registered with Facebook or have not logged in, the provider may collect and store your IP address and other identifiers.

Your data is processed on the basis of Art. 6 Para. 1 S. 1 lit. f) DS-GVO. By using Facebook Analytics, we pursue the interest of being able to better evaluate our website and our advertisements and improve our service offering. In this case, we do not store any personal data about you. We have no knowledge of the storage period on Facebook and have no influence on it. For more information about Facebook’s privacy policy, please see the related privacy policy at https://de-de.facebook.com/about/privacy/.

You have the right to object to the processing. Your right to object exists for reasons arising from your particular situation. We will not process your data further, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, moreover, if the processing serves the assertion and exercise of or defence against legal claims (Art. 21 para. 1 GDPR). The deactivation of the function “Facebook Analytics” is possible for logged in users under https://www.facebook.com/settings/?tab=ads#_.

You can prevent the “Facebook Analytics” function in various ways:
– by setting your browser software accordingly, in particular by suppressing third party cookies, you will not receive any ads from third parties;
– by disabling the interest-based ads of the providers that are part of the “About Ads” self-regulatory campaign via the link http://www.aboutads.info/choices, this setting being deleted when you delete your cookies.
– You can also prevent the tracking of your usage process by opening your browser in “private mode”.

Google AdWords Conversion

We use the Google Adwords offer from Google to draw attention to our attractive offers with the help of advertising media (so-called Google AdWords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. These advertising media are delivered by Google via so-called “ad servers”. We use ad server cookies for this purpose, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, Google AdWords stores a cookie on your terminal device. As a rule, these cookies lose their validity after 30 days and are not intended to identify you. For this cookie, the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values. These cookies enable Google to recognize your Internet browser. If a user visits certain pages of an AdWords customer’s website and the cookie stored on their computer has not expired, Google and the customer may recognize that the user clicked on the ad and was directed to that page. Each AdWords customer is assigned a different cookie. Google only provides us with statistical evaluations to measure the success of our advertising media.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the extent and further processing of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: By integrating AdWords Conversion, Google receives the information that you have called up the relevant part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address. Google processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google’s certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. The legal basis for the processing of your data is Art. 6 Para. 1 S. 1 lit. f) GDPR. We pursue the interest to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs. The maximum storage period at Google is eighteen months. For more information about Google’s privacy practices, please visit http://www.google.com/intl/de/policies/privacyand https://services.google.com/sitestats/de.html.

You have the right to object to the processing. Your right of objection exists for reasons arising from your particular situation, unless we can prove compelling grounds for processing worthy of protection which outweigh your interests, rights and freedoms, and also if the processing serves to assert and exercise or defend against legal claims (Art. 21 para. 1 GDPR). In the event of your justified objection, we will examine the facts and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

You can prevent the processing in various ways:
– by setting your browser software accordingly, in particular the suppression of third party cookies means that you will not receive any advertisements from third parties;
– by disabling conversion tracking cookies by setting your browser to block cookies from the “www.googleadservices.com” domain, https://www.google.de/settings/ads, which is deleted when you delete your cookies;
– by permanent deactivation in your browsers Firefox, Internet Explorer or Google Chrome under the link http://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent;
– by opening the browser used in “private mode”;
– by deactivating the interest-related advertisements of the providers that are part of the self-regulation campaign “About Ads” via the link http://www.aboutads.info/choices, whereby this setting is deleted if you delete your cookies.

Back to Top