Privacy policy

Personal data is information that relates to an identified or identifiable person. This includes, in particular, information that allows conclusions to be drawn about your identity, for example your name, telephone number, postal address or email address. Statistical data that we collect, for example, when you visit our website and that cannot be linked to your person does not fall under the concept of personal data.

Contents of this data protection declaration

Contact
Data processing on our website
1. Visiting our website / access data
2. Contact
3. Newsletter
  1. Registering for the newsletter
  2. Newsletter tracking
4. Applications
Use of cookies and similar technologies
1. Legal basis and revocation
  1. Legal basis
  2. Obtaining your consent (Real Cookie Banner)
  3. Revocation of your consent or change of your selection
2. Necessary tools
  1. Our own tools
  2. Google Tag Manager
3. Analytical tools
  1. Google Analytics
4. Marketing tools
  1. Meta-Pixel
5. Social Media Plugins and External Media
  1. YouTube Videos
  2. Google Maps
Online presence on social networks
Transfer of data
Transfer of data to third countries
Storage duration
Your rights, in particular revocation and objection
Amendments to the privacy policy

1. Contact

The point of contact and so-called controller for the processing of your personal data when you visit this website within the meaning of the General Data Protection Regulation (GDPR) is

CLEVIS GmbH | soon: alliantis GmbH

Erika-Mann-Str. 53

80636 Munich

Telephone: +49 (0) 89 242 111 0

E-mail: info@alliantis.de

If you have any questions about data protection in connection with our services or the use of our website, you can also contact our data protection officer at any time. He can be reached at the above postal address and at the e-mail address provided above (keyword: “z. Hd. Datenschutzbeauftragter”). We expressly point out that when using this e-mail address, the contents are not exclusively taken note of by our data protection officer. If you wish to exchange confidential information, please therefore initially request direct contact via this email address.

2. Data processing on our website

2.1 Accessing our website/access data

Every time you use our website, we collect the access data that your browser automatically transmits to enable you to visit the website. The access data includes in particular:

IP address of the requesting device,
method (e.g. GET, POST), date and time of the request,
amount of data transferred,
address of the requested website and the path of the requested file;
the previously accessed website/file (HTTP referrer);
information about the browser and operating system used,
HTTP protocol version, HTTP status code, size of the file delivered;
request information such as language, type of content, content encoding, character sets;
cookies stored on the end device of the accessed domain.

The processing of this access data is necessary to enable you to visit the website and to ensure the long-term functionality and security of our systems. The access data are also stored temporarily in internal log files for the purposes described above in order to compile statistical information on the use of our website, to further develop our website with regard to the usage habits of our visitors (e.g. if the proportion of mobile devices used to access the pages increases) and to generally maintain our website for administrative purposes.

The legal basis for this is Art. 6 (1) (1) (b) GDPR if the page view occurs in the course of the initiation or execution of a contract, and otherwise Art. 6 (1) (1) (f) GDPR based on our legitimate interest in the long-term functionality and security of our systems.

2.2 Contact

You have various options for getting in touch with us. These include the contact form, live chat, registering for events or the call-back function. In this context, we process data solely for the purpose of communicating with you.

The legal basis is Art. 6 (1) 1 lit. b GDPR if your information is needed to answer your inquiry or to initiate or execute a contract, and otherwise Art. 6 (1) 1 lit. f GDPR based on our legitimate interest in you contacting us and our being able to process your inquiry. We only make unsolicited telephone calls if you have given your consent. If you are not an existing customer, we will only send you promotional e-mails on the basis of your consent. The legal basis in these cases is Art. 6 (1) (1) (a) GDPR in conjunction with Section 7 (2) no. 1 or 2 of the German Unfair Competition Act (UWG).

The data collected by us when using the contact form will be automatically deleted after your request has been processed in full, unless we still need your request to fulfill contractual or legal obligations (see section 7 “Storage period”).

We use Hubspot, a customer relationship management (“CRM”) solution that we use to provide optimal support to existing customers, e.g. through live chat and community software, and to optimize sales processes. The shared CRM platform enables us to optimally manage customer relationships and support a perfect customer experience. In addition, Hubspot enables tracking measures to collect statistical information (e.g. about the type, intensity and frequency of your website use, history of the pages, products and offers you have viewed). This enables us to optimize our operating processes based on the actual or perceived interests of our users.

According to Hubspot, the data collected in this context is only stored on servers within the EU. We have concluded a data processing agreement with Hubspot that guarantees the rights of the data subjects and in which Hubspot undertakes to process data only in accordance with the GDPR. In the event that personal data is transferred to the USA, we have concluded standard contractual clauses with Salesforce and Salesforce has integrated “Binding Corporate Rules”.

You can also find more information about data processing by Salesforce in Hubspot's privacy policy.

2.3 Newsletter

You have the option to subscribe to our newsletter, in which we regularly inform you about new developments regarding our products, events and promotions.

2.3.1 Newsletter registration

We use the so-called double opt-in procedure for ordering our newsletter, i.e. we will only send you the newsletter by email if you confirm in our notification email by clicking on a link that you are the owner of the email address provided. If you confirm your e-mail address, we will store your e-mail address, the time of registration and the IP address used for registration until you unsubscribe from the newsletter. The sole purpose of the storage is to send you the newsletter and to be able to prove your registration. In addition, we measure whether our newsletter can be delivered at all.

The legal basis for the processing is your consent in accordance with Art. 6 (1) point a GDPR. You can revoke this consent at any time with effect for the future by unsubscribing from the newsletter. You will find a corresponding unsubscribe link in every newsletter. Of course, a message to the contact details given above or in the newsletter (e.g. by e-mail or letter) is also sufficient for this.

2.3.2 Newsletter tracking

We want to share content that is as relevant as possible to our users and better understand what they are really interested in. That is why we use standard technologies in our newsletters to measure interactions with the newsletters (e.g. opening the email, clicking on links). We use this data in pseudonymous form for general statistical evaluations and to optimize and further develop our content and customer communication. This is done, on the one hand, with the help of small graphics embedded in the newsletter (so-called pixels) that establish a connection to the server of the images when the e-mail is opened. On the other hand, we use links for which we first register a click on this link and only then forward it to the desired target page.

The legal basis for this is your consent in accordance with Art. 6 (1) point a GDPR. Access to the information in the terminal device is then based on the implementing laws of the ePrivacy Directive of the EU member states, in Germany according to Section 25 (1) TDDDG. You can revoke your consent to the analysis of your usage behavior at any time with effect for the future by unsubscribing from the newsletter. You can also prevent the measurement of the opening of an e-mail by disabling graphics or the output of HTML content in your e-mail program by default.

2.4 Applications

You can apply for vacancies with us using our applicant management system from Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany (“Personio”). The purpose of data collection is to select applicants for possible employment. In particular, we collect the following data in order to receive and process your application: First and last name, email address, application documents (e.g. certificates, CV), date of earliest possible entry into employment and salary expectations. The legal basis for the processing of your application documents is Art. 6 para. 1 sentence 1 lit. b and Art. 88 para. 1 GDPR in conjunction with § 26 para. 1 sentence 1 BDSG.

3. Use of cookies and similar technologies

This website uses cookies and similar technologies (collectively “tools”) that are either offered by us or by third parties.

A cookie is a small text file that is stored by the browser on your device. Cookies are not used to execute programs or to load viruses onto your computer. Comparable technologies are, in particular, web storage (local/session storage), fingerprints, tags or pixels. Most browsers are set by default to accept cookies and comparable technologies. However, you can usually adjust your browser settings so that cookies or comparable technologies are rejected or only stored with your prior consent. If you reject cookies or comparable technologies, not all of our offers may work properly for you.

The tools we use are listed below by category, where we provide you with information in particular about the providers of the tools, the duration of storage of the cookies and the disclosure of the data to third parties. It also explains in which cases we obtain your voluntary consent to use the tools and how you can revoke it.

3.1 Legal basis and revocation

3.1.1 Legal basis

We use the tools necessary for the operation of the website on the basis of our legitimate interest in accordance with Art. 6 (1) 1 lit. f GDPR in order to provide you with the basic functions of our website. In certain cases, these tools may also be necessary for the performance of a contract or for the implementation of pre-contractual measures; in this case, the processing is carried out in accordance with Art. 6 (1) (1) (b) GDPR. Access to and storage of information in the terminal device is absolutely necessary in these cases and is carried out on the basis of the implementing laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 (2) TDDDG.

We use all other (non-essential) tools, in particular those for marketing purposes, on the basis of your consent in accordance with Art. 6 (1) (1) (a) GDPR. Access to and storage of information in the end device is then carried out on the basis of the transposition laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 (1) TDDDG. Data processing using these tools only takes place if we have received your prior consent.

Insofar as personal data is transferred to third countries, we refer you to Section 6 (“Data transfer to third countries”), also with regard to the risks that may arise. We will inform you if we have concluded standard contractual clauses or other guarantees with the providers of certain tools. If you have given your consent to the use of certain tools, we will transfer the data processed when using the tools to third countries (also) on the basis of this consent in accordance with Art. 49 (1) point a GDPR.

3.1.2 Obtaining your consent (Real Cookie Banner)

To obtain and manage your consent, we use the Real Cookie Banner tool from devowl.io GmbH, Tannet 12, 94539 Grafling, Germany (“Real Cookie Banner”). This generates a banner that informs you about the data processing on our website and gives you the opportunity to consent to all, some or none of the data processing by optional tools. This banner appears the first time you visit our website and when you access the selection of your settings again to change them or withdraw consent. The banner also appears on subsequent visits to our website if you have disabled the storage of cookies or the cookies or information in local storage have been deleted or have expired.

During your visit to our website, your consents or revocations, your IP address, information about your browser, your end device and the time of your visit are transmitted to Real Cookie Banner. In addition, necessary information is stored on your end device to document the consents and revocations you have given.

The data processing is necessary to provide you with the legally required consent management and to fulfill our documentation obligations. The legal basis is Art. 6 Para. 1 lit. f GDPR, justified by our interest in fulfilling the legal requirements for consent management. Access to and storage of information in the end device is absolutely necessary in these cases and is carried out on the basis of the implementation laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 Para. 2 TDDDG.

3.1.3 Withdrawal of consent or changes to your selection

You can withdraw your consent for certain tools here at any time. You can also change the selection of tools that you consent to use, as well as find additional information about the cookies and the respective storage duration. Alternatively, you can assert your withdrawal of consent for certain tools directly with the provider.

3.2 Necessary tools

We use certain tools to enable the basic functions of our website (“necessary tools”). Without these tools, we would not be able to provide our service. Therefore, necessary tools are used without consent on the basis of our legitimate interests in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR or for the fulfillment of a contract or for the implementation of pre-contractual measures in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. Access to and storage of information in the end device is absolutely necessary in these cases and is carried out on the basis of the implementing laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 2 TDDDG.

3.2.1 Google Tag Manager

Our website uses Google Tag Manager, a service offered to users from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and to all other users by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (collectively “Google”).

The tag manager is used to manage tracking tools and other services, known as website tags. A tag is an element that is stored in the source code of our website, for example to collect predefined usage data. The Google Tag Manager ensures that the usage data required by our partners is forwarded to them.

Google Tag Manager sets the following cookies for technical debugging purposes: “gtm”; “gtm_auth”; “gtm_debug”; “gtm_preview”; “gtm_mt”. If these are optional tools, Google Tag Manager will only integrate them with your consent.

Otherwise, the legal basis is Art. 6 (1) 1 lit. f GDPR, based on our legitimate interest in integrating and managing several tags on our website in an uncomplicated manner.

We have concluded a data processing agreement with Google. Some data is processed on a Google server in the United States. Google LLC has joined the EU-US Data Privacy Framework, which is why the transfer in this case is based on the adequacy decision for the United States in accordance with Art. 45 GDPR. In addition, we have concluded standard contractual clauses with Google in accordance with Art. 46 (2) point c GDPR. For more information, please refer to Section 6 (“Data transfer to third countries”).

You can find more information in the information provided by Google about Tag Manager.

3.3 Analysis tools

In order to improve our website, we use tools for the statistical recording and analysis of general usage behavior based on access data (“analysis tools”). We also use analysis services to evaluate the use of our various marketing channels.

Unless otherwise indicated, the legal basis for the analysis tools is your consent in accordance with Art. 6 (1) 1 lit. a GDPR. For information on how to withdraw your consent, see 3.1.2: ”

3.2 Analysis tools

To improve our website, we use tools for the statistical collection and analysis of general usage behavior based on access data (“analysis tools”). We also use analysis services to evaluate the use of our various marketing channels.

The legal basis for the analysis tools is your consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. To revoke your consent, see 3.1.2.

3.2.1 Google Analytics

Our website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), which is offered for people from Europe by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies and similar technologies to analyze and improve our website based on your user behavior. Google will process the information obtained in order to evaluate your use of the website, to compile reports on website activity for website operators and to provide other services relating to website activity and internet usage. As part of the evaluation, Google Analytics also uses artificial intelligence such as machine learning for the automated analysis and enrichment of data. You can find more information about this at: .

The data collected in this context may be transmitted by Google to a server in the United States for evaluation and stored there.

We have made the following data protection settings on Google Analytics:

IP anonymization (shortening of the IP address before evaluation, so that no conclusions can be drawn about your identity),
automatic deletion of old logs / limitation of storage duration,
deactivated advertising function (including target group remarketing by GA Audience),
deactivated personalized ads,
deactivated measurement protocol,
deactivated cross-page tracking (Google signals),
deactivated data sharing with other Google products and services.

The following data is processed by Google Analytics:

IP address;
referrer URL (previously visited page);
pages accessed (date, time, URL, title, duration of visit);
downloaded files;
links clicked on to other websites;
if applicable, achievement of certain goals (conversions);
technical information: operating system; browser type, version and language; device type, brand, model and resolution;
Approximate location (country and possibly city, based on anonymized IP address).

Google Analytics sets the following cookies for the specified purpose with the respective storage period:

“_ga” for 2 years and “_gid” for 24 hours (both to recognize and distinguish website visitors through a user ID);
“_gat” for 1 minute (to reduce requests to the Google server);
“_gid” for 1 day (registers a unique ID that is used to generate statistical data on how the visitor uses the website);
“_gat_gtag_ *” browser session (this cookie is used in conjunction with Google Universal Analytics to throttle the request rate and restrict the collection of data on high-traffic web pages);
if necessary, “IDE” for 13 months (third-party cookie to recognize and distinguish website visitors by means of a user ID, to record interaction with advertising and in the context of displaying personalized advertising).

We have entered into a data processing agreement with Google Ireland Limited for the use of Google Analytics. Your personal data may also be transferred by Google Ireland Limited to Google LLC in the United States. Google LLC has joined the EU-US Data Privacy Framework, which is why the transfer in this case is based on the adequacy decision for the United States pursuant to Art. 45 GDPR. In addition, Google Ireland Limited and Google LLC have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) in accordance with Art. 46 (2) point c GDPR.

For more information, please refer to Google's privacy policy: .

3.3 Marketing tools

We also use tools for advertising purposes (“marketing tools”). Some of the access data collected when you use our website is used for interest-based advertising. By analyzing and evaluating this access data, we are able to display personalized advertising to you, i.e. advertising that matches your actual interests and needs, on our website and on the websites of other providers.

The legal basis for the marketing tools is your consent in accordance with Art. 6 (1) 1 lit. a GDPR. Access to and storage of information in the terminal device is then carried out on the basis of the implementing laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 (1) TDDDG. For information on how to withdraw your consent, see 3.1.2: “Withdrawal of your consent or change of your selection”. In the event that personal data is transferred to third countries, we refer you to section 6 (“Data transfer to third countries”) in addition to the information provided below.

In the following section, we would like to explain these technologies and the providers used for them in more detail. The data collected may include, in particular:

the IP address of the device;

the information of a cookie and in local or session storage;

the device ID of mobile devices (e.g. device ID, advertising ID);
referrer URL (previously visited page);
pages viewed (date, time, URL, title, length of stay);
downloaded files;
links clicked on to other websites;
Achievement of certain goals (conversions);
Technical information: operating system; browser type, version and language; device type, brand, model and resolution;
approximate location (country and possibly city).

However, the collected data is stored exclusively under a pseudonym, so that no direct conclusions can be drawn about the persons.

3.3.1 Meta Pixel

For marketing purposes, our websites use the “Meta Pixel” service of the social network Facebook, a service offered by Meta Platforms Ireland Ltd, Serpentine Avenue, Block J, Dublin 4, Ireland for users outside the United States and Canada and by Facebook Inc., 1601 Willow Road, Menlo Park, California 94025, USA (collectively, “Meta Platforms”) for all other users.

We use meta pixels to analyze the general use of our websites and to track the effectiveness of advertising (“conversion tracking”). We also use meta pixels to provide you with individualized advertising messages in our social networks from Meta Platforms (such as Facebook and Instagram) based on your interest in our products (“retargeting”). This also involves target group remarketing through Custom Audience.

The data collected in this context may be transferred by Meta Platforms to a server in the United States for analysis and stored there.

Meta Platforms processes data that the service collects via JavaScript, cookies and other technologies on our websites. This includes, in particular:

HTTP header information such as information about the browser used (e.g. user agent, language);
information about events such as “page view”, other object properties, and buttons clicked by visitors to the website;
online identifiers such as IP addresses and, if provided, Facebook business-related identifiers or device IDs (such as advertising IDs for mobile operating systems) as well as information on the status of disabling/limiting ad tracking.

The following cookies are set and read by Meta-Pixel for the stated purpose with the respective storage period:

“_fbp” (90 days): usage analysis and retargeting;
“fr” (90 days): Displaying advertisements, usage analysis, conversion tracking.

The legal basis for this data processing is your consent in accordance with Art. 6 (1) point a GDPR. Access to and storage of information in the end device is then carried out on the basis of the implementing laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 (1) TDDDG.

Meta Platforms acts as our processor for matching, measurement and analysis services, in particular for analyzing the use of our website, matching the user ID and creating reports on our advertising campaigns. Therefore, we have concluded a data processing agreement.

In addition, we and Meta Platforms are joint controllers for the processing of event data for ad targeting (through audience creation and selection), delivery of commercial and transactional messages, improving ad delivery, and personalizing features and content in the context of using the meta pixel. The mutual obligations have been set out in a joint agreement, which can be accessed at the following address: .

In addition, Meta Platforms processes the event data for the protection and security of Meta Platforms products, for research and development purposes, and to maintain the integrity of the products and improve them.

Your personal data may also be transferred from Meta Platforms Ireland Ltd. to Meta Platforms Inc. in the United States. Meta Platforms Inc. has joined the EU-US Data Privacy Framework, which is why the transfer in this case is based on the adequacy decision for the USA in accordance with Art. 45 GDPR. In addition, Meta Platforms Ireland Limited and Meta Platforms Inc. have concluded standard contractual clauses (Implementing Decision (EU) 2021/914, Module 3) in accordance with Art. 46 (2) point c GDPR.

If you are a member of Facebook or Instagram and have allowed Meta Platforms to do so via your account's privacy settings, Facebook or Instagram may also link the information collected about your visit to us with your member account and use it for targeted advertising. You can view and change the privacy settings of your Facebook profile at any time: . You can prevent the linking of data collected outside of Instagram for the purpose of displaying personalized advertising in Instagram as follows: .

If you have not consented to the use of meta pixels, Meta Platforms will only display general advertising that is not selected based on the information collected about you on this website.

Further information, in particular on joint responsibility and contact details, can be found in the data protection information of Meta Platforms, in particular for the social networks Facebook and Instagram: .

3.5 Social media plugins and external media

We also use social networking tools that serve to log in to existing user accounts on the website or to share posts and content via these networks (“social media plugins”), as well as other external media, such as embedded videos or maps.

The legal basis for this is your consent in accordance with Art. 6 (1) 1 lit. a GDPR, which you give via the cookie banner or with the respective tool itself by allowing its use via an overlay. Access to and storage of information in the end device is then carried out on the basis of the implementing laws of the ePrivacy Directive of the EU member states, in Germany according to § 25 para. 1 TDDDG. For information on how to withdraw your consent, see 3.1.2: “Withdrawal of your consent or change of your selection”. In the event that personal data is transferred to third countries, we refer you to section 6 (“Data transfer to third countries”) in addition to the information provided below.

3.5.1 YouTube videos

We have embedded videos in our website that are stored on YouTube and can be played from our websites. YouTube is a multimedia service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA (“YouTube”), which is offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for persons from the European Economic Area and Switzerland and by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (collectively “Google”) for all other persons.

YouTube information such as cookies, local storage and session storage are stored on your end device and JavaScript, which accesses information on your end device, is executed.

The following cookies may be set by YouTube:

“PREF” (8 months): stores settings such as autoplay and video size;
“YSC” (session): prevents spam, fraud and misuse;
“NID” (180 days): records interactions with advertisements, personalizes advertising, stores settings and preferences;
“VISITOR_INFO1_LIVE” (180 days): usage analysis, advertising, personalized recommendations based on videos and search queries viewed, detection and prevention of video player problems.

The following information is stored in local storage:

“yt-remote-device-id”: Storage of the device ID;
“yt-player-headers-readable”: Storage of the option to read the player header information;
“yt.innertube::requests”: Storage of the user's requests;
“yt.innertube::nextId”: Storage of the ID of the next video;
“yt-remote-connected-devices”: Storage of the connected end devices;
“yt-player-bandwidth”: storage of the connection bandwidth;
“yt-player-volume”: storage of the video volume;
“yt-player-quality”: storage of the video resolution/quality;
“yt-player-performance-cap”: storage of a possible resolution cap due to the connection bandwidth;
“yt-html5-player-modules::subtitlesModuleData::module-enabled”: storage of whether subtitles are activated;
“ytidb::LAST_RESULT_ENTRY_KEY”: Storage of the last video searched for.

The following information is stored in the session storage:

“yt-remote-session-app”: Storage of the type of end device;
“yt-remote-cast-installed”: Storage of whether YouTube streaming is installed;
“yt-remote-session-name”: Storage of the type of end device;
“yt-remote-cast-available”: stores whether YouTube streaming is available;
“yt-remote-fast-check-period”: stores the bandwidth check of the connection;
“yt-player-volume”: stores the volume of the video;
“yt-player-caption-language-preferences”: stores the language of the subtitles.

Your personal data may also be transferred from Google Ireland Limited to Google LLC in the United States. Google LLC has joined the EU-US Data Privacy Framework, which is why the transfer in this case is based on the adequacy decision for the United States pursuant to Art. 45 GDPR.

When you visit our website, YouTube and Google receive the information that you have accessed the corresponding subpage of our website. This occurs regardless of whether you are logged in to YouTube or Google or not. YouTube and Google use this data for the purposes of advertising, market research and demand-oriented design of their websites. If you access YouTube on our website while you are logged in to your YouTube or Google profile, YouTube and Google can also link this event to the respective profiles. If you do not want this assignment to take place, you must log out of Google before accessing our website.

In addition to withdrawing your consent, you also have the option of disabling personalized advertising in the Google advertising settings. In this case, Google will only display non-personalized advertising.

For more information, please also refer to the Google privacy policy, which also applies to YouTube.

3.5.2 Google Maps

Our website uses the mapping service Google Maps, which is offered for users from the European Economic Area and Switzerland by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland and for all other users by Google LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA (collectively “Google”).

In order for the Google map material we use to be integrated and displayed in your web browser, your web browser must connect to a Google server when you visit our website, which may also be located in the United States. In addition, JavaScript is used by Google Maps to access information on your device to enable the map service to function.

The legal basis for this data processing is your consent in accordance with Art. 6 (1) point a GDPR. Access to and storage of information in the terminal device is then carried out on the basis of the implementing laws of the ePrivacy Directive of the EU member states, in Germany according to Section 25 (1) TDDDG.

By integrating the map material, Google receives the information that a page of our website has been accessed from the IP address of your device. If you access the Google Maps service on our website while you are logged into your Google profile, Google may also link this event to your Google profile. If you do not want this information to be linked to your Google profile, you must log out of Google before accessing our contact page. Google stores your data and uses it for advertising, market research and personalized Google Maps display purposes.

For more information, please refer to the Google privacy policy and the additional terms of service for Google Maps.

4. online presence in social networks

We maintain an online presence in social networks in order to communicate with customers and prospects and to provide information about our services.

The data of the users are processed by the relevant social networks, usually for market research and advertising purposes. This allows user profiles to be created based on the interests of the users. For this purpose, cookies and other identifiers are stored on the users' computers. Based on these user profiles, advertisements are then placed within the social networks, but also on third-party websites.

As part of the operation of our online presences, we may be able to access information such as statistics on the use of our online presences provided by the social networks. These statistics are aggregated and may include demographic information (e.g. age, gender, region, country) and data on interaction with our online presences (e.g. likes, subscriptions, shares, views of images and videos) and the posts and content distributed through them. Please refer to the list below for details and links to the social network data that we, as the operator of the online presences, can access.

The legal basis for the data processing is Art. 6 (1) 1 lit. f GDPR, based on our legitimate interest in effectively informing users and communicating with users, or Art. 6 (1) 1 lit. b GDPR for keeping in touch with our customers and informing them as well as for implementing pre-contractual measures with future customers and prospects.

Please refer to the data protection notices of the respective social network for the legal basis of the data processing carried out by the social networks on their own responsibility. You can also find further information on the respective data processing and the options for objecting to it at the following links.

We would like to point out that data protection queries can be most efficiently addressed to the respective social network provider, as only these providers have access to the data and can take appropriate action directly. Below is a list of information about the social networks on which we operate online presences:

Facebook (Meta Platforms Ireland Ltd., Serpentine Avenue, Block J, Dublin 4, Ireland)
- Operation of the Facebook fan page in joint responsibility on the basis of an agreement on joint processing of personal data (so-called page insights supplement regarding the person responsible)
- Information on the processed page insights data and how to contact us in the event of data protection queries:
- Privacy policy:
- Opt-Out: .
Instagram (Meta Platforms Ireland Ltd., Serpentine Avenue, Block J, Dublin 4, Ireland)
- Instagram business account based on an agreement on joint processing of personal data (so-called page insights supplement regarding the person responsible):
- Information on the processed Page Insights data and how to contact us with data protection queries:
- Privacy Policy:
- Opt-Out (explanation):
Google/ YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
- Privacy Policy: https://policies.google.com/privacy
- Opt-Out: https://www.google.com/settings/ads.
X (Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland)
- Privacy Policy:
- Opt-Out: .
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
- Operation of the LinkedIn company page in joint responsibility on the basis of an agreement on the joint processing of personal data (so-called Page Insights Joint Controller Addendum)
- Information on the processed Page Insights data and how to contact us in the event of data protection inquiries:
- Privacy policy:
- Opt-out: .
Xing/Kununu (XING SE, Dammtorstraße 30, 20354 Hamburg)
- Privacy policy/Opt-out: .

5. Disclosure of data

We will only disclose the data we have collected if:

you have given your express consent to do so in accordance with Art. 6 (1) sentence 1 a GDPR,
the disclosure is necessary in accordance with Art. 6 (1) sentence 1 f GDPR to safeguard our interests or to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
we are legally obliged to pass on the data in accordance with Art. 6 para. 1 sentence 1 lit. c DSGVO or
this is legally permissible and necessary in accordance with Art. 6 para. 1 sentence 1 lit. b DSGVO for the processing of contractual relationships with you or for the implementation of pre-contractual measures that take place at your request.

Some of the data processing may be carried out by our service providers. In addition to the service providers mentioned in this data protection declaration, this may include, in particular, computer centers that store our website and databases, software providers, IT service providers that maintain our systems, agencies, market research companies, group companies and consulting firms. If we pass on data to our service providers, they may use the data exclusively to fulfill their tasks. We carefully select and commission service providers. They are contractually bound by our instructions, have appropriate technical and organizational measures in place to protect the rights of the data subjects, and are regularly monitored by us.

In addition, data may be disclosed in connection with official inquiries, court orders, and legal proceedings if it is necessary for legal prosecution or enforcement.

6. data transfer to third countries

As explained in this data protection declaration, we use services whose providers are sometimes based in so-called third countries (outside the European Union or the European Economic Area) or process personal data there, i.e. countries whose level of data protection does not correspond to that of the European Union. If the European Commission has issued an adequacy decision (Art. 45 DSGVO) for these countries, we base the data transfer on this. This applies, for example, to transfers to Argentina, Israel, Japan, Canada, the Republic of Korea, New Zealand, Switzerland, Uruguay or the United Kingdom. In the case of the United States, this only applies if the US recipient has certified itself under the EU-US Data Privacy Framework.

Insofar as this is the case and the European Commission has not issued an adequacy decision for these countries, we have taken appropriate precautions to ensure an adequate level of data protection for any data transfers. These include, among other things, the standard contractual clauses of the European Union or binding internal data protection regulations (Art. 46 GDPR).

Where this is not possible, we base the data transfer on exceptions under Article 49 of the GDPR, in particular your explicit consent or the necessity of the transfer for the performance of a contract or in order to take steps prior to entering into a contract.

If a transfer to a third country is planned and no adequacy decision or appropriate safeguards are in place, it is possible and there is a risk that authorities in the respective third country (e.g. secret services) may gain access to the transferred data in order to collect and analyze it, and that the enforceability of your data subject rights cannot be guaranteed. If we obtain your consent, you will also be informed of this.

7. Storage period

In principle, we only store personal data for as long as is necessary to fulfill the contractual or legal obligations for which we collected the data. After that, we delete the data immediately, unless we still need the data until the end of the statutory limitation period for evidence purposes for civil claims or due to statutory retention requirements.

For evidence purposes, we must store contract data for three years from the end of the year in which the business relationship with you ends. Any claims become time-barred at the earliest at this point in time in accordance with the statutory limitation period.

Even after that, we still have to store some of your data for accounting reasons. We are obliged to do so due to statutory documentation obligations that may arise from the German Commercial Code, the German Fiscal Code, the German Banking Act, the German Money Laundering Act and the German Securities Trading Act. The periods for storing documents specified there are between two and ten years.

8. Your rights, in particular revocation and objection

You are entitled at all times to the rights of data subjects formulated in Art. 7 (para. 3), Art. 15 – 22, Art. 77 GDPR:

Right to revoke your consent (Art. 7 para. 3 GDPR;
Right to object to the processing of your personal data (Art. 21 GDPR);
right of access to your personal data processed by us (Art. 15 GDPR);
right to rectification of your personal data stored by us incorrectly (Art. 16 GDPR);
right to erasure of your personal data (Art. 17 GDPR);
right to restriction of processing of your personal data (Art. 18 GDPR);
right to data portability of your personal data (Art. 20 GDPR);
Right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects, including, where applicable, the right to obtain the intervention of a person by the controller, to express his or her point of view and to contest the decision (Art. 22 GDPR).
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR).

To assert your rights as described here, you can contact us at any time using the contact details provided above. This also applies if you wish to receive copies of guarantees to prove an adequate level of data protection. Provided that the respective legal requirements are met, we will comply with your data protection request.

Your requests to assert data protection rights and our responses to them will be stored for documentation purposes for a period of up to three years and, in individual cases, for the assertion, exercise or defense of legal claims, even beyond that. The legal basis is Art. 6 (1) 1 lit. f GDPR, based on our interest in defending against any civil claims under Art. 82 GDPR, avoiding fines under Art. 83 GDPR, and fulfilling our accountability obligations under Art. 5 (2) GDPR.

You have the right to revoke consent you have given us at any time. This means that we will no longer continue the data processing based on this consent in the future. The legality of the processing carried out on the basis of the consent up to the point of revocation is not affected by the revocation of the consent.

If we process your data on the basis of legitimate interests, you have the right to object to the processing of your data at any time for reasons arising from your particular situation. If you object to data processing for direct marketing purposes, you have a general right of objection, which we will implement without you having to state reasons.

If you wish to exercise your right of revocation or objection, simply send an informal message to the contact details given above.

Finally, you have the right to complain to a data protection supervisory authority. You can assert this right with a supervisory authority in the member state of your place of residence, your place of work or the place of the alleged infringement. In Bavaria, where our headquarters are located, the responsible supervisory authority is: Bayrisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach.

9. Changes to the privacy policy

We occasionally update this privacy policy, for example when we modify our website or when legal or regulatory requirements change.

Version: 1.0 / As of: November 2024