General Information about the Processing of your Data

We are legally required to inform you about the processing of your personal data (hereinafter referred to as “Data”) when using our website. This Privacy Policy informs you about the details of the processing of your Data and your legal rights in this regard. For terms such as “Personal Data” or “Processing”, please see the legal definitions set forth in Art. 4 GDPR. We reserve the right to amend this Privacy Policy with future effect, in particular in the case of the further development of the website, the implementation of new features or changes in the law or applicable jurisprudence. We recommend that you review the Privacy Policy from time to time and include a printout or copy of it in your records.

 

Scope

This Privacy Policy applies to all webpages of dataforce.de. It does not extend to any linked websites or the internet presences of other providers.

 

Data Controller

The party responsible for the processing of personal information within the scope of this Privacy Policy is:
Dataforce Verlagsgesellschaft für Business Informationen mbH
Hamburger Allee 14
60486 Frankfurt am Main
Tel.: +49 69 95930-0
Fax: +49 69 95930-549
E-Mail: kontakt@dataforce.de

 

Data Security

We have taken comprehensive technical and organizational measures to protect your personal data from unauthorized access, misuse, loss, and other external threats. To this end, we regularly review our security measures and adapt them to industry standards.

 

Your Rights

You have the following rights with regard to your personal data, which you can assert to us:

• Right of Access: You can request information in accordance with Art. 15 GDPR with regard to your personal data that we process.
• Right to Rectification: If your personal data is no longer accurate, you can request for it to be corrected in accordance with Art. 16 GDPR. If your data is incomplete, you can request for it to be completed.
• Right to Erasure: In accordance with Art. 17 GDPR, you may request the deletion of your personal data.
• Right to Restriction of Processing: In accordance with Art. 18 GDPR, you have the right to demand that processing of your personal data be restricted.
• Right to Object to Processing:You have the right, on grounds relating to your particular situation, to object at any time to the processing of your personal data under Art. 6 para. 1 lit. e) and lit. f) GDPR, or submit an objection under Art. 21 para. 1 GDPR. In this case, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims (Art. 21 para. 1 GDPR) In addition, according to Art. 21 para. 2 GDPR you have the right to object at any time to the processing of your personal data for the purposes of direct advertising, this also applies to any profiling, insofar as this is conducted in association with direct advertising. We direct your attention to the right of objection in this Privacy Policy in connection with the particular type of data processing.
• Right to Withdraw your Consent: If you have given your consent to data processing, you are entitled to object to this processing pursuant to Art. 7 para. 3 GDPR.
• Right to Data Portability: You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format (“data portability”) and have the right to transmit those data to another data controller prerequisite on the fulfillment of the requirements of Art. 20 para. 1 lit. a) and lit. b) GDPR (Art. 20 GDPR).

You can assert your rights by sending a notification to the named contact in the “Data Controller” section or to our designated Data Protection Officer.

If you believe that the processing of your personal data violates data protection law, you additionally have the right, according to Art. 77 GDPR, to make a complaint to the data protection supervisory authority of your choice. This also includes the data protection supervisory authority responsible for the Data Controller: The Hessian Commissioner for Data Protection and Freedom of Information, Gustav-Stresemann-Ring 1, 65189 Wiesbaden, Tel: 0611-14080, Fax: 0611-1408 611, E-Mail: poststelle@datenschutz.hessen.de

I. Use of Our Website

 

1. Access Data

It is possible to use our website for purely informational purposes without disclosing your identity. When you access the individual pages of the website in this way, only access data is transmitted to our webspace provider, so that the website can be displayed to you. The following data will be processed:

• browser type / browser version,
• language and version of the browser software,
• operating system used,
• date and time of access,
• host name of the accessing device,
• IP address,
• content of the request (specific website),
• access status / HTTP status code,
• websites accessed via the website referrer URL (the previously visited website),
• notification that the access was successful and
• amount of data transferred.

The temporary processing of this data is necessary to conduct the technical aspects of a website visit and to deliver the website to your device. Access data is not used to identify individual users and is not merged with other data sources. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests lie in ensuring the functionality of the website as well as the integrity and security of the website. The access data will be deleted as soon as they are no longer necessary to achieve the purpose of their processing. In cases where data is collected for the purpose of delivering the website, this takes place once you leave the website.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

 

2. Cookies and Other Technologies

Our website uses cookies and other technologies which process device information and user’s personal data. Some of them are absolutely necessary (“essential cookies”), while others allow for the integration of external features, statistical analysis, company association or reach measurement.

 

2.1 Privacy Settings

We have implemented a consent management tool into our website to request user consent for the use of cookies or similar technologies. Using the “Privacy Settings” you have the ability to consent to or reject the use of particular features on our website, e.g., for integrating external content, statistical analysis and reach measurement. In the “Privacy Settings” you can consent to all cookies (“Accept All”) or withhold consent (“Accept only Essential Cookies) or consent to only specific uses or individual features. You can change your settings at any time. This tool is built into the website to allow our website’s users to decide whether to allow the use of cookies and similar technologies and to offer the ability to change settings that have already been set as they continue to use the website. While using the consent management tool, some personal data and device information will be processed.

The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests in processing this data lie in the storage of user settings and preferences with regard to the use of cookies and other technologies. User settings are stored by means of a cookie, which has a storage period of one year. After the storage period has lapsed, consent will be requested again. The new user settings will then be stored for a renewed period.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can prevent the processing of data based on cookies in the following ways: by deactivating, restricting or deleting cookies in the settings menu of your internet browser or by opening your browser in “private mode”.

 

2.2 Essential Cookies

Essential cookies are required for basic functioning of the website. Thus, they ensure that the website is able to work properly. Our website stores absolutely essential cookies for the following purposes:

• Cookie-Opt-In: Storage of selected privacy settings. Storage period: 1 year.

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests in this processing are based on our provision of the aforementioned special features and thereby making the website more attractive and user friendly.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can prevent the processing of data based on cookies in the following ways: by deactivating, restricting or deleting cookies in the settings menu of your internet browser or by opening your browser in “private mode”.

 

2.3 Marketing

Live-Chat tawk.to

On our website, we use the service “tawk.to” provided by tawk.to inc., 187 East Warn Springs Rd., SB298 Las Vegas, NV, 89119, USA to offer you a live-chat feature. Tawk.to uses “cookies” to implement the chat feature, to store user preferences and to further develop the chat feature. Further information on individual cookies can be found at: https://help.tawk.to/article/what-are-tawkto-cookies-and-what-do-they-do

The legal basis for this processing is Art. 6 para. 1 lit. a) GDPR. Data is partly processed by “tawk.to” in the USA. The EU Commission has not made an Adequacy Decision for data transfers into the USA. The legal basis is your consent pursuant to Art. 49 para. 1 lit. a) GDPR. In addition, “Standard Contractual Clauses” have been made with “tawk.to” in order to ensure compliance with adequate levels of data protection. Upon request, we will provide you with a copy of the Standard Contractual Clauses. Further information on the purpose and scope of data processing by the plug-in provider and the storage period at “tawk.to” can be found at https://www.tawk.to/privacy-policy/.

You may revoke your consent to the processing and the transfer of data to third countries at any time by deselecting the option in the „Privacy Settings“ section of the consent tool. Revocation of consent does not affect the lawfulness of data processing which occurred on the basis of consent prior to the revocation.

Google Analytics

In order to optimally tailor our website to user interests, we use “Google Analytics”, a web analysis service of “Google”(Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001). “Google Analytics” uses so-called “cookies” (see “Cookies” section above), which are stored on your device. Using cookies, “Google” processes the information generated about the use of our website by your device – e.g., that you have called up a certain webpage – and processes, among other things, the data mentioned in the “Use of our Website” section, in particular your IP¬ address, browser information, previously visited website and the date and time of the server request, for the purpose of statistical analysis of our website’s usage. For this purpose, it can also be determined whether different devices belong to you or to your household. This website uses “Google Analytics” with the extension “anonymizeIp()”. As a result, IP addresses are processed in abbreviated form in order to make it significantly more difficult to identify a specific person. According to “Google”, your IP address will be abbreviated within member states of the European Union. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and abbreviated there. “Google” will process this information in order to evaluate the website’s usage, report on activity on our website and – insofar as we expressly direct – to provide us with other services related to website usage. Insofar as users are registered with a Google service, Google may associate the visit with the user’s account to create and analyze user profiles across platforms. The legal basis for this data processing is your consent according to Art. 6 para. 1 lit. a) GDPR. “Google” also processes data in part in the USA. The EU Commission has not made an Adequacy Decision for data transfers into the USA; the legal basis for this data transfer into the USA is your consent pursuant to Art. 49 para. 1 lit. a) GDPR. The legal basis for this data transfer into the USA is your consent pursuant to Art. 49 para. 1 lit. a) GDPR. In addition, “Standard Contractual Clauses” have been made with “Google” in order to ensure compliance with adequate levels of data protection. Upon request, we will provide you with a copy of the Standard Contractual Clauses. Your data in relation to “Google Analytics” will be deleted after 24 months at the latest. Further information on data protection at “Google” can be found at: http://www.google.com/intl/en/policies/privacy.

You may revoke your consent to the processing and the transfer of data to third countries at any time by deselecting the option in the „Privacy Settings“ section of the consent tool. The lawfulness of the processing remains unaffected until revocation is exercised.

Nelio testing

On our website, we use the web analysis and optimization service, “Nelio testing” provided by Nelio Software, Parc Tecnolögic de Barcelona Activa, Marie Curie, 8-14, 08042 Barcelona, to improve the attractiveness, content and usability of our website. With the help of cookies, new features and content are displayed to our users in different variations and user behavior is statistically analyzed.

The legal basis for this data processing is your consent according to Art. 6 para. 1 lit. a) GDPR. Additionally, a data processing agreement was concluded with “Nelio Software” for the processing of data on our behalf (Art. 28 GDPR). Your data in connection with “Nelio testing” will be deleted after 24 months at the latest.

You may revoke your consent to the processing at any time by deselecting the option in the „Privacy Settings“ section of the consent tool. The lawfulness of the processing remains unaffected until revocation is exercised.

LinkedIn Ads (Retargeting)

Our website additionally uses the analysis and retargeting function, “LinkedIn Ads”, provided by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter: “LinkedIn”). “LinkedIn” processes information generated by cookies, tracking pixels and fingerprinting methods about the use of our website by your device in order to profile user behavior on our website. In doing so, information stored on user devices is stored, e.g., in particular IP addresses, browser information, login data, operating system, and other data described in the “Use of our Website” section. In this way we are able to offer users of our website and users of “LinkedIn” who belong to similar demographics with customized, interest-based advertisements when visiting the social network, “LinkedIn”. Using LinkedIn’s tracking technologies, your browser will automatically establish a direct connection with LinkedIn’s servers.¬ If you are registered with a service of “LinkedIn”, “LinkedIn” can associate the collected information with your user account. Even if you do not have a user account with “LinkedIn” or are not logged in, it is possible that “LinkedIn” will discover and process your IP address and other identifying features. Here, we do not undertake to personally identify any specific user. The possibility of retargeting by us exists for up to 90 days after your visit to our website. The legal basis for the processing of your data is Art. 6 para. 1 lit. a) GDPR. “LinkedIn” also processes data, in part, from servers located in the USA. The EU Commission has not made an Adequacy Decision for data transfers into the USA; the legal basis for this data transfer into the USA is your consent pursuant to Art. 49 para. 1 lit. a) GDPR. In addition, “Standard Contractual Clauses” have been made with “LinkedIn” in order to ensure compliance with adequate levels of data protection. Upon request, we will provide you with a copy of the Standard Contractual Clauses. Further information on data protection and the storage period at “LinkedIn” can be found at: https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/cookie_policy.

You may revoke your consent to the processing and the transfer of data to third countries at any time by deselecting the option in the „Privacy Settings“ section of the consent tool. Revocation of consent does not affect the lawfulness of data processing which occurred on the basis of consent prior to the revocation.

LinkedIn Ads (Conversion)

We use the service, “LinkedIn Ads”, provided by LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter: “LinkedIn”) on our website. If you access our website via an advertisement from “LinkedIn”, “LinkedIn” will install a cookie on your device or browser in order to measure the reach of our advertisements, to enable us to determine effectiveness of an advertising medium and to continuously improve our advertisements. Using cookies, “LinkedIn” processes the information generated by your device about your interaction with our advertisement media (e.g. visiting a particular internet site or clicking on an advertisement) as well as, in part, the information described in the section titled “Use of our Website” such as your IP address (abbreviated by “LinkedIn”), device and browser information, referring URL, and time stamp for the purposes of analyzing the reach and effectiveness of our advertisement media. By using LinkedIn’s conversion tracking features, we can determine extent to which our advertisements have prompted relevant actions on our website. For this purpose, your browser automatically establishes a direct connection to the “LinkedIn” server. If you are registered with a service of “LinkedIn”, “LinkedIn” can associate the collected information, in particular information about your visit to our website, with your user account. Direct identifiers of registered users processed in this context are deleted by “LinkedIn” within seven days, the remaining data is then deleted within 180 days. Even if you do not have a user account with “LinkedIn” or are not logged in, it is possible that “LinkedIn” will discover and process your IP address and other identifying features. “LinkedIn” does not share any personal data with us as part of this evaluation; instead, they only transmit to us statistical analyses with which to measure the success of our advertisements. In this way, we learn by way of statistical information to what extent our advertisements have been successful and have led to relevant actions on our website. In the process we also receive statistical analyses concerning which groups of people (e.g., specific job title, company, or industry) have been active. Based on this, we can specify our target audience and improve the focus of our advertising media. The legal basis for the processing of your data is Art. 6 para. 1 lit. a) GDPR. “LinkedIn” also processes data, in part, from servers located in the USA. The EU Commission has not made an Adequacy Decision for data transfers into the USA; the legal basis for this data transfer into the USA is your consent pursuant to Art. 49 para. 1 lit. a) GDPR. In addition, “Standard Contractual Clauses” have been made with “LinkedIn” in order to ensure compliance with adequate levels of data protection. Upon request, we will provide you with a copy of the Standard Contractual Clauses. Further information on data protection and the storage period at “LinkedIn” can be found at: https://www.linkedin.com/legal/privacy-policy and https://www.linkedin.com/legal/cookie_policy.

You may revoke your consent to the processing and the transfer of data to third countries at any time by deselecting the option in the „Privacy Settings“ section of the consent tool. Revocation of consent does not affect the lawfulness of data processing which occurred on the basis of consent prior to the revocation.

 

2.4. External Content

Google Maps

This website uses the service “Google Maps” provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA) for the purpose of displaying maps or map sections, thus enabling you to conveniently use the map feature on our website. By visiting the website, “Google” receives notice that you have accessed the corresponding subpage of our website. In addition, some of the data mentioned in the sections “Use of our Website” and “Cookies” are transmitted to “Google”. This occurs regardless of whether “Google” provides a user account to which you are logged in, and will occur even if no user account exists. If you are logged in to “Google”, your data will be associated directly with your Google account. If you do not want this data to be associated with your “Google” account, you must log out prior to activating the button. “Google” stores your data as a user profile and processes it independent of the existence of a “Google” user account for the purposes of advertising, market research and/or demand-oriented design of the website. The legal basis for this processing is Art. 6 para. 1 lit. a) GDPR. “Google” also processes data, in part, within the USA. The EU Commission has not made an Adequacy Decision for data transfers into the USA. The legal basis is your consent pursuant to Art. 49 para. 1 lit. a) GDPR. In addition, “Standard Contractual Clauses” have been made with “Google” in order to ensure compliance with adequate levels of data protection. Upon request, we will provide you with a copy of the Standard Contractual Clauses. Further information on the purpose and scope of the processing by the plug-in¬ provider and the storage period at “Google Maps” can be found at https://policies.google.com/privacy?hl=en.

You may revoke your consent to the processing and the transfer of data to third countries at any time by deselecting the option in the „Privacy Settings“ section of the consent tool. Revocation of consent does not affect the lawfulness of data processing which occurred on the basis of consent prior to the revocation.

YouTube Videos

On the website we use plug-ins from the video platform, “YouTube.de” or “YouTube.com”, a service of YouTube LLC (principal place of business at 901 Cherry Avenue, San Bruno, CA 94066, USA; hereinafter “YouTube”), for which “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001) is responsible with respect to data protection law. By processing data through the plug-ins, we pursue the purpose of displaying visual content (“videos”) on our website that we have published on “Youtube.de” or “Youtube.com”. The videos are all integrated using “extended data protection mode”, this means that no data about you as a user will be transmitted to “YouTube” if you do not play the videos. While playing videos on our website, “YouTube” receives notice that you have accessed the corresponding subpage of our website. In addition, data described in the section titled “Use of our Website” will, in part, be transmitted to “Google”. This occurs regardless of whether “YouTube” provides a user account to which you are logged in, and will occur even if no user account exists. If you are logged in to “Google”, your data will be associated directly with your account. If you do not want this data to be associated with your “YouTube” account, you must log out prior to activating the button. “YouTube” stores your data as a user profile and processes it independent of the existence of a “Google” user account for the purposes of advertising, market research and/or demand-oriented design of the website. The legal basis for this data processing is your consent according to Art.6 para. 1 lit. a) GDPR. “Google” also processes data, in part, in the USA. The EU Commission has not made an Adequacy Decision for data transfers into the USA. The legal basis for data transfer to the USA is your consent as according to Art. 49 para. 1 lit. a) GDPR. In addition, “Standard Contractual Clauses” have been made with “YouTube” in order to ensure compliance with adequate levels of data protection. Upon request, we will provide you with a copy of the Standard Contractual Clauses. Further information on the purpose and scope of data processing by “YouTube” and the storage period at “YouTube” can be found in their privacy policy at https://policies.google.com/privacy.

You may revoke your consent to the processing and the transfer of data to third countries at any time by deselecting the option for the respective third-party provider in the „Privacy Settings“ section of the consent tool. The lawfulness of the processing remains unaffected until revocation is exercised.

 

2.5 Google Tag Manager

On our website, we use “Google Tag Manager” provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 4361001). ¬”Google Tag Manager” is a solution through which website tags and other third-party elements can be managed through an interface.

Firstly, when the website is accessed with Google Tag Manager an http request is sent to google. As a result, device information and personal data such as your IP address and information about your browser settings are transmitted to Google. We use the Google Tag Manager for the purpose of facilitating electronic communication by transmitting certain information such as i.a. information concerning programming interfaces to third-party providers. With Google Tag Manager tracking cookies from third-party providers can be implemented without us having to painstakingly change the source code of the website ourselves. Instead, the integration is accomplished through a container that sets a so-called “placeholder” code into the source code. In addition, Google Tag Manager allows for the exchange of a user’s data parameters in a specific order, in particular by ordering and systematizing the data packets. Your data can also in some instances be transmitted to the USA. “Standard Contractual Clauses” have been made with “Google” in order to ensure compliance with adequate levels of data protection. Upon request, we will provide you with a copy of the Standard Contractual Clauses. The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests in this processing are to facilitate and carry out electronic communication through the identification of communication endpoints, control options, exchanging data elements in a specified order and to identify transmission errors. Google Tag Manager does not trigger any data storage. Further information on data protection at “Google” can be found at: http://www.google.com/intl/en/policies/privacy.

You can object to this processing if the processing is based on Art. 6 para. 1 lit. f) GDPR. Your right to object is based on grounds arising from your particular situation. You can prevent this processing by deleting your browser history and website data in the settings of your internet browser or by opening the browser in “private mode”.

Secondly, third-party tags such as, for example, tracking codes or counting pixels will be integrated on our website through Google Tag Manager. The tool triggers other tags, which in turn collect your data; we will explain these separately within the context of this Privacy Policy. Device information and users’ personal information collected by the tags are not evaluated within Google Tag Manager itself. Rather, your data will be forwarded to the respective third-party service for the purposes specified in our consent management tool. -We have implemented Google Tag Manager in our consent management tool in such a way that the triggering of particular third-party services in Google Tag Manager is made dependent on your selections in our consent management tool, such that only those third-party tags for which you have given consent trigger data processing. Consent to the use of Google Tag Manager is included with your consent to the respective third-party service. The legal basis for this data processing is your consent according to Art. 6 para. 1 lit. a) GDPR. “Google” also processes data in part within the USA. The EU Commission has not made an Adequacy Decision for data transfers into the USA; the legal basis for this data transfer into the USA is your consent pursuant to Art. 49 para. 1 lit. a) GDPR. In addition, “Standard Contractual Clauses” have been made with “Google” in order to ensure compliance with adequate levels of data protection. Upon request, we will provide you with a copy of the Standard Contractual Clauses. The storage period of your data can be found in the following descriptions of the individual third-party services. Further information on data protection at “Google” can be found at: http://www.google.com/intl/en/policies/privacy.

You may revoke your consent to the processing and the transfer of data to third countries at any time by deselecting the option for the respective third-party provider in the „Privacy Settings“ section of the consent tool. The lawfulness of the processing remains unaffected until revocation is exercised.

3. Contacting Our Company

When you contact our company, e.g., by email or via the contact form on the website, we will process the personal data you share will in order to answer your request. For the processing of inquiries via the contact form on the website, it is absolutely necessary to provide a subject, a salutation, a first and last name, a telephone number and a valid email address. At the time of sending the message to us, your IP address and the date and time of registration are also processed. The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR or, if the contact is aimed at concluding a contract, Art. 6 para. 1 lit. b) GDPR. If the request is aimed at concluding a contract, your personal information is necessary and required for concluding a contract. If this data is not provided, no contract can be concluded or executed by way of the contact, nor can any inquiries be processed. The processing of personal data from the input mask serves the sole purpose of processing the contact. In the case of contact by email, this also constitutes the necessary legitimate interest for the processing of data. Other data processed in the sending process serve the purpose of preventing the misuse of the contact form and to ensure the security of our information technology systems. Within this context, the data will not be passed on to third parties. We delete data arising from this context after the processing is no longer necessary or, if required, the processing is limited to the level necessary to comply with existing legally required storage obligations.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

4. Orders

If you wish to place an order on our website, it is necessary and required for the initiation and conclusion of the contract that you provide personal information such as your first and last name, your company and your contact details (billing address, email address, telephone number). Information that is required to make the order and process the contract is marked individually; any other information is shared voluntarily. We will process your data in order to complete your purchase. The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR. The provision of your data is necessary for the conclusion or execution of the contract and you are contractually required to provide your data. If your data is not provided, it is not possible to conclude/execute a contract. In order to prevent access to your personal data by unauthorized third parties, the purchasing process on the website is encrypted using SSL technology.

We delete data arising from this context after the processing is no longer necessary or, if required, the processing is limited to the level necessary to comply with existing legally required storage obligations. Due to mandatory commercial and tax regulations, we are required to store your address, payment information and order data for a period of up to ten years. Two years after termination of the contract, we restrict the processing and reduce data processing to the level required for compliance with existing legal obligations.

5. Participation in Digital Events

 

5.1. Registration

On our website, you have the opportunity to register yourself for one of our digital events. To do this, it is necessary and required for you provide personal data such as your first and last name, your company and your contact details (email address, telephone number). The information required for participation is marked individually, any other information is provided voluntarily. We process your data to carry out the digital event. The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR. The provision of your data is necessary for the conclusion or execution of the contract and you are contractually required to provide your data. If your data is not provided, it is not possible to conclude and/or execute a contract. In order to prevent access to your personal data by unauthorized third parties, the purchasing process on the website is encrypted using SSL technology.

After your registration, we will send you a registration confirmation by email, in which you will also find the link to the virtual webinar room.

We use an external email marketing service to register and send the emails. For more information about these service providers, please refer to the “Email Marketing Service” section (Section I.7).

 

5.2. Facilitation of Digital Events

To facilitate our digital events, we use the Microsoft Teams platform (browser or app), provided by Microsoft Ireland Operations Limited, One Microsoft Place, South Country Business Park, Leopardstown, Dublin 18, Ireland. On our behalf, Microsoft uses the data you provide to enable you to participate in our digital event. We have a contract with Microsoft for order processing in accordance with Art. 28 GDPR, according to which Microsoft acts exclusively according to our instructions and is required to comply with the data protection regulations.

For the protection of your personal information, data transmitted through the platform is encrypted without exception.

You can participate in our events by providing your name or a pseudonym. When you enter the virtual event room, your first and last name or pseudonym will be displayed in the list of participants. Your full name or pseudonym will also be displayed in the chat if you enter something there. The provision of this data is necessary for reasons of transparency for all participants who participate in the webinar.

Your camera and microphone are disabled from the system side during the event.

In addition, Microsoft collects other data during the event such as logging the entrance and exit from the event, session ID, roller (attendee) user agent (browser, operating system).

The legal basis is Art. 6 para. 1 lit. b) GDPR. The provision of your data is necessary for the conclusion or execution of the contract, and you are contractually required to provide your data. If your data is not provided, it is not possible to conclude and/or execute a contract.

We delete data arising from this context after the processing is no longer necessary or, if required, the processing is limited to the level necessary to comply with existing legally required storage obligations. Due to mandatory commercial and tax regulations, we are required to store your address, payment information and order data for a period of up to ten years. Two years after termination of the contract, we restrict the processing and reduce data processing to the level required for compliance with existing legal obligations.

6. Email Marketing

 

6.1 Advertising to Existing Customers

We reserve the right to use the email address you provide as part of an order or registration for a digital event in accordance with the statutory provisions to send you the following content by email during or after the order or participation, unless you have already objected to this processing of your email address:

• news about out products
• sales or rebates
• company information
• market updates

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests in the aforementioned processing lie in improving and optimizing our services, sending direct advertisements and ensuring customer satisfaction. We delete your data once you end the usage process.

We use an external email marketing service to send these emails. For more information about these service providers, please refer to the “Email Marketing Service” section (Section I.7).

We would like to indicate that you can object to the receipt of direct advertising as well as processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic tariffs. You have the right to object without giving a reason (Art. 21 para. 2 GDPR). To do this, click on the unsubscribe link in the respective email or send your objection to us via the contact details provided in the “Data Controller” section.

 

6.2. Fuhrpark-Newsletter and Automotive Insights

You have the opportunity to subscribe to our Fuhrpark-Newsletter and our Automotive Insights newsletter on our website. With our Fuhrpark-Newsletter, we inform you once a month about the latest fleet news, vehicle tests and market research topics. With our Automotive Insights you will receive short and informative market updates, which we will send you immediately after signing up.

To receive the Fuhrpark-Newsletter, you just need to provide a valid email address. In order to receive Automotive Insights, you must provide a valid email address, your salutation, your first and last name, and your company. We will process the email address for the purpose of sending our email newsletter and for as long as you remain subscribed to the newsletter.

We use an external email marketing service to send these emails. For more information about these service providers, please refer to the “Email Marketing Service” section (Section I.7).

The legal basis for this data processing is Art. 6 para. 1 lit. a) GDPR.

You can revoke your consent to the processing of your email address for the receipt of the newsletter at any time, either by clicking directly on the unsubscribe link in the newsletter or by sending us a message via the contact details provided in the “Data Controller” section. This has no influence on the lawfulness of processing occurring on the basis of the consent prior to the time of your revocation.

In order to document your newsletter registration and to prevent the misuse of your personal data, registration for our newsletters uses the so-called double opt-in procedure. After entering the data marked as required, we will send you an email to the email address you provided, in which we ask you to expressly confirm your subscription to the newsletter by clicking on a confirmation link. We will process your IP address, the date and time of registration for the newsletter and the time of your confirmation. In this way, we can confirm that you really want to receive our newsletter. We are legally required to prove your consent to the processing of your personal data in connection with the registration for the newsletter (Art. 7 para. 1 GDPR). On the basis of this legal obligation, data processing is carried out according to Art. 6 para. 1 lit. c) GDPR.

You are not required to provide your personal data during the registration process. However, if you do not provide necessary personal data, we may not be able to process your subscription or we be unable to process your subscription in full. If your newsletter subscription is not confirmed within 24 hours, we will lock the information transmitted to us and delete it automatically after one month at the latest. After your confirmation, your data will be processed for as long as you remain subscribed to the newsletter.

In the event of a cancellation through the exercise of a revocation of consent, we will continue to process your data, in particular your email address, to ensure that you do not receive any further newsletters from us. For this purpose, we will add your email address to a so-called „Blocked List“, which enables us to prevent you from receiving any further newsletters from us. The legal basis for this data processing is Art. 6 para. 1 lit. c) GDPR, to comply with our obligation to provide evidence, or alternatively Art. 6 para. 1 lit. f) GDPR. Our legitimate interests lie in this case in complying with our legal obligation to reliably no longer deliver you newsletters.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

In addition, we process the aforementioned data for the establishment, exercise or defense of legal claims. The legal basis for this processing is Art. 6 para. 1 lit. c) GDPR and Art. 6 para. 1 lit. f) GDPR. In these cases, our legitimate interest lies in the asserting or defending of legal claims.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

We also statistically evaluate the rates at which the newsletters are opened, the number of clicks on links contained therein, and the reading time, as well as measure the reach of our newsletters and adapt the offers and information contained within to your personal interests. To this end, usage behavior on our websites and within the newsletters we send is analyzed on the basis of device-specific information (e.g., email client used and software settings). For this analysis, the emails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files that are also embedded on our website.

In order to measure reach, we measure the number of visitors who have reached our websites by clicking on links and perform certain actions there, such as redeeming vouchers and purchasing products via the online shop. In connection with reading behavior, we also develop target demographics to whom we send newsletter content tailored to the user’s identified interests. In order to tailor our newsletter more closely to your interests, we associate your email address or your user profile with other user profiles within our database.

The legal basis for this data processing is Art. 6 para. 1 lit. a) GDPR. We delete your data once you cancel the newsletter subscription.

You may revoke your consent to the processing at any time, either by sending us a message to this effect (see our contact details in the “Data Controller” section) or by clicking on the “unsubscribe” link directly in the Newsletter. This has no influence on the lawfulness of processing occurring on the basis of the consent prior to the time of your revocation.

 

6.3. Press Releases

You can subscribe to our press releases in German or English on the website. With our press releases we provide you with monthly market analyses and white papers about the current market.

To receive the press releases, you must provide a valid email address, your salutation, your first and last name and your company. We process the email address for the purpose of sending our press releases and as long as you remain subscribed to our press releases.

We use an external email marketing service to send the emails. For more information about these service providers, please refer to the “Email Marketing Service” section (Section I.7).

The legal basis for this data processing is Art. 6 para. 1 lit. a) GDPR.

You can revoke your consent to the processing of your email address for the receipt of the press releases at any time, either by clicking directly on the unsubscribe link in the press release or by sending us a message via the contact details provided under “Data Controller”. This has no influence on the lawfulness of processing occurring on the basis of the consent prior to the time of your revocation.

In order to document your registration and to prevent the misuse of your personal data, registration for our press releases uses the so-called double opt-in procedure. After entering the data marked as required, we will send you an email to the email address you provided, in which we ask you to expressly confirm your subscription to our press releases by clicking on a confirmation link. During this, we process your IP address, the date and time of registration for the newsletter and the time of your confirmation. In this way, we can confirm that you really want to receive our press releases. We are legally required to prove your consent to the processing of your personal data in connection with the registration for the press releases (Art. 7 para. 1 GDPR). On the basis of this legal obligation, data processing is carried out according to Art. 6 para. 1 lit. c) GDPR.

You are not required to provide your personal data during the registration process. However, if you do not provide necessary personal data, we may not be able to process your subscription or we be unable to process your subscription in full. If your press release subscription is not confirmed within 24 hours, we will lock the information transmitted to us and delete it automatically after one month at the latest. After confirmation, your data will be processed for as long as you remain subscribed to our press releases.

In the event of a cancellation through the exercise of a revocation of consent, we will continue to process your data, in particular your e mail address, to ensure that you do not receive any further press releases from us. For this purpose, we will add your e-mail address to a so-called “Blocked List”, which enables us to prevent you from receiving any further press releases from us. The legal basis for this data processing is Art. 6 para. 1 lit. c) GDPR, to comply with our obligation to provide evidence, or alternatively Art. 6 para. 1 lit. f) GDPR. Our legitimate interests lie in this case in complying with our legal obligation to reliably no longer deliver you press releases.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

In addition, we process the aforementioned data for the establishment, exercise or defense of legal claims. The legal basis for this processing is Art. 6 para. 1 lit. c) GDPR and Art. 6 para. 1 lit. f) GDPR. In these cases, our legitimate interest lies in the asserting or defending of legal claims.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

We also statistically evaluate the rates at which the newsletters are opened, the number of clicks on links contained therein, and the reading time, as well as measure the reach of our press releases and adapt the offers and information contained within to your personal interests. To this end, usage behavior on our websites and within press releases we send is analyzed on the basis of device-specific information (e.g., email client used and software settings). For this analysis, the emails sent contain so-called web beacons or tracking pixels, which represent one-pixel image files that are also embedded on our website.

In order to measure reach, we measure the number of visitors who have reached our websites by clicking on links and perform certain actions there, such as ordering publications. In connection with reading behavior, we also develop target demographics to whom we send press release content tailored to the user’s identified interests. In order to tailor our press releases more closely to your interests, we associate your email address or your user profile with other user profiles within our database.

The legal basis for this data processing is Art. 6(1)(a) GDPR. We delete your data once you cancel the subscription.

You may revoke your consent to the processing at any time, either by sending us a message (see our contact details in the “Data Controller section above) or directly in the Newsletter by clicking on the “unsubscribe” link. This has no influence on the lawfulness of processing occurring on the basis of the consent prior to the time of your revocation.

7. Email Marketing Services

To facilitate the distribution of our newsletter and press releases, digital event registration, sending invitations to online surveys, and all types of customer communication we use the services of “MailChimp”, a newsletter distribution platform provided by The Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308 USA. “Mailchimp” processes personal data as necessary for the respective processing on our behalf and is contractually limited in its authority to use your personal data for purposes other than providing services to us in accordance with the applicable data processing agreement.

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests in the use of an external email marketing service lie in the optimization and more targeted control and monitoring of our email marketing. “Mailchimp” also processes data in part within the USA. The EU Commission has not made an Adequacy Decision for data transfers into the USA. As a legal basis for the transfer of data into the USA, “Standard Contractual Clauses” have been made with “Mailchimp” in order to ensure compliance with adequate levels of data protection. Upon request, we will provide you with a copy of the Standard Contractual Clauses. For more information, see the privacy policy of “Mailchimp” at: https://mailchimp.com/legal/privacy/.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

8. Processing for Contractual Purposes

We process your personal data to the extent necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The legal basis for this data processing arises from Art. 6 para. 1 lit. b) GDPR. The provision of your data is necessary for the conclusion of the contract, and you are contractually required to provide your data. If your data is not provided, it is not possible to conclude and/or execute a contract. Once the purpose has been achieved (e.g. by concluding a contract) the personal data will be blocked from further processing or deleted, insofar as we are not entitled to further process your data on account of your consent (e.g. consent to process an email address for the purpose of sending electronic advertisements), as part of a contractual agreement, a legal authorization (e.g. authorization to send direct advertisements) or on the basis of a legitimate interest (e.g. retention for the purpose of enforcing legal claims).

Your personal data will be passed on to third parties if

• it is necessary for the establishment, execution, or termination of legal transactions with our company (e.g., when passing on data to a payment service provider / shipping company to process a contract with your person), (Art. 6 para. 1 lit. b) GDPR) or
• a subcontractor or vicarious agent, whom we use exclusively in the context of the provision of offers or services requested by you, needs this data (such auxiliary persons are only entitled to process the data to the extent necessary for the provision of the offer or service, unless you are expressly informed otherwise), or
• an enforceable administrative order has been issued (Art. 6 para. 1 lit. c) GDPR) or
• an enforceable judicial order has been issued (Art. 6 para. 1 lit. c) GDPR) or
• we are required to do so by law (Art. 6 para. 1 lit. c) GDPR) or
• the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 para. 1 lit. d) GDPR) or
• it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 lit. e) GDPR) or
• we can rely on our overriding legitimate interests or those of a third-party for disclosure (Art. 6 para. 1 lit. f) GDPR).

Any further disclosure of your personal data to other persons, companies or bodies will not take place unless you have given valid consent for such disclosure. The legal basis for this data processing is Art. 6(1)(a) GDPR. Within the scope of this Privacy Policy, we refer you with respect to the relevant processing operations to the respective data recipients.

9. Hosting

We use external hosting services provided by Raidboxes GmbH, Hafenstraße 32, 48153 Münster, who provide the following services: infrastructure and platform services, computing capacity, storage capacity and database services, as well as security and technical maintenance services. For these purposes, all data required for the functioning and usability of our website will be processed – this includes i.a. Access Data which is described in the “Use of our Website” section. The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. By using external hosting services, we aim to provide an efficient and secure web experience.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

10. Website Support by Digital Agency

To support our website, we use the services of the digital agency, 360VIER GmbH, Curtigasse 6, 64823 Groß-Umstadt. In the context of this support, the digital agency may, depending on the circumstance (e.g., for backups) process Access Data – as defined in the section titled “Use of our Website” – as well as any data you enter on our website (e.g., when placing orders, subscribing to the newsletter or filling out contact forms).

The legal basis for this processing is Art. 6 para. 1 lit. f) GDPR. By using the services of our external digital agency, we aim to provide an efficient and secure web experience.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

11. Application Process

We have formulated a separate data protection information sheet for our job applicants in our Privacy Policy for Applicants.

II. Presence in Social Media

 

1. General

We maintain publicly accessible profiles on various social networks (hereinafter collectively: “our profiles”). Your visit to our profiles sets a variety of data processing operations in motion. Below we will give you an overview of what personal data we collect, use and store when you visit our profiles. You are not required to provide us with your personal data. However, this may be necessary for individual features of our profiles in social networks to operate properly. These features will not be available to you or be available only in a limited capacity if you do not provide us with your personal data.

When you visit our profiles, your personal data is not only collected, used and stored by us, but also by the operators of the respective social network. This happens even if you do not have a profile with the respective social network. The individual data processing operations and their scope differ depending on the respective social network operator and they are not necessarily attributable to us. For details about the collection and storage of your personal data as well as the nature, scope and purpose of their use by the respective social network operator, please refer to the privacy policies of the respective operator:

a) LinkedIn

The privacy policy for the social network, LinkedIn, which is operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, can be found at https://ch.linkedin.com/legal/privacy-policy.

b) Facebook

The privacy policy for the social network, Facebook, provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, can be found at https://www.facebook.com/about/privacy/update?ref=old_policy.

c) Instagram

The privacy policy for the social network, Instagram, operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA, can be found at https://help.instagram.com/155833707900388.

d) Twitter

The privacy policy for the social network, Twitter, provided by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland, can be found at https://twitter.com/en/privacy.

e) YouTube

The privacy policy for the social network, YouTube, which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, can be found at https://policies.google.com/privacy.

2. Product Promotion and Communication with Users

We use our profiles for the purpose of advertising our products and for communicating with and contacting customers. Within the scope of using our profiles, we process personal data such as your name, your profile picture and information that you have shared as part of the interactive features (e.g., commenting, sharing, and rating). The legal basis for the operation of our profiles and the processing of personal data is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in the promotion of our products via our profiles and communication with customers.

When visiting our profiles, data may be processed outside the European Union and in particular in the USA. The EU Commission has not made an Adequacy Decision for data transfers into the USA. You can find further information about possible data transfers to a third country and the relevant legal basis in the privacy policies of these social networks.

We have no influence on the storage period of the personal data that you have published on our profiles. We store your data until the purpose of the processing has been achieved or, if there are pertinent legal storage obligations, we restrict the processing. Further information on data protection and the storage period can be found in the above-linked privacy policies of the social networks.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

3. LinkedIn LeadGen Forms

We use the service of Product Marketing Solutions provided by the LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA, and its representatives in the Union LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Through this service, LinkedIn transmits personal data to us using a form (so-called “LinkedIn Lead Gen Forms”). Lead Gen Forms are pre-filled forms with LinkedIn profile data that allow members transmit their publicly visible data on the network to others with just a few clicks. The inquiries generated through the forms are transferred directly into our CRM. This information is generally:

first and last name

email address

Further information on the collection and storage of data by LinkedIn can be found at www.linkedin.com/legal/privacy-policy.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

4. Statistical Information and Shared Responsibility with Social Networks

The operators of social networks on which we maintain our profiles provide us with anonymous statistical analyses of interactions with our profiles. We use these data to improve user experience on our profiles. It is not possible for us to make any references about individual users or access individual user profiles in this way. Our legal basis for processing data from the statistical analysis is Art. 6 para. 4 GDPR in conjunction with Art. 6 para. 1 lit. f) GDPR. Our legitimate interest in this statistical analysis lies in the improvement and tailoring of our advertising campaigns based on information collected and to gain insight about user activity on our profiles.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

According to jurisprudence of the European Court of Justice, the use of statistical analyses can in some cases be classified as data processing under the joint responsibility of the operator of the social network and the profile owner. Against this background, we have concluded agreements with the following social network operators on joint responsibility pursuant to Art. 26 GDPR:

a) Facebook

The Agreement on Shared Responsibility for Facebook Page Insights can be found at https://www.facebook.com/legal/terms/page_controller_addendum.

b) LinkedIn

The Joint Responsibility Agreement for LinkedIn Page Insights can be found at https://legal.linkedin.com/pages-joint-controller-addendum.

III. Use of Our Portals

To use our portals in relation to a contractual relationship with us, you must register by providing your username and a password.

 

1. Log Files

With each access to the portal pages, usage data is transmitted by your internet browser and stored in log files, on the relevant databases or in the relevant files. The resulting logs contain the following data: date and time of access, name of the page accessed, IP address, referrer URL (origin URL from which you came to the website), the amount of data transferred, and type and version of browser used. User IP addresses are deleted after a certain period.

The legal basis is Art. 6 para. 1 lit. f) GDPR. The processing of this data serves the security as well as the improvement and optimization of our portals.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

2. Application-Specific Features

In our portals we use various technologies, which enable the described data collection in our portals, allow for the provision of the features offered in our portals, and ensure the security of our systems and data. The legal basis for this data collection is Art. 6 para. 1 lit. b) GDPR.

In order to prevent unauthorized access by third parties to your personal data, connection to our portals is encrypted using TLS technology.

As soon as you are logged in, the following personal data will be processed in the portals:

 

2.1 FleetBase^®

In our portal, FleetBase^®, we collect, in addition to the above information, other user-specific data, such as the dates and times of logins, session duration, FleetBase® Profile openings, applied and saved filters, date and time of document exports including the format and number of affected records. Furthermore, we use cookies on our portal (cf. Section 2). These are essential cookies that allow us to store information about your preferences (such as your preferred calendar view).

 

2.2 IRIS^®

In our portal IRIS^®, the most important system-related events (login and log-out, report calls, etc.) are logged. Finally, we use cookies on our portal (vgl. Section 2). These cookies play an essential role and allow our users to move around our website and perform certain actions. Without these essential cookies, certain data sets cannot be retrieved (such as session ID, security level) and thus the applications will not be functional. In addition, we use other essential cookies to offer personalized features and settings chosen by the user.

 

2.3 IRIS VIEWS

In our IRIS VIEWS portal, we record certain user events (such as opened reports).

IV. Data Processing in the Context of Market Surveys

 

1. Telephone Market Surveys

As part of our telephone market surveys, we first collect the name of our respondent for quality assurance purposes. In addition, we ask you for the names of the persons responsible for your company’s fleet. We pass these on to our customers for the purpose of sales support.

The legal basis for this data processing is Art. 6 para. 1 lit. f) GDPR. This serves the legitimate interest of our customers to carry out direct marketing.

Of course, you are free not to share the names of contacts or to later object to the processing of this data. All contacts named by you will be informed by post about the corresponding data collection. If we cannot verify the names of the contacts in our subsequent telephone interviews (e.g., because you no longer wish to participate in our telephone interviews), we will delete the names of the contacts 48 months after collection. If you do not name a contact in your company or subsequently object to data processing, your profile will be supplemented by the name of the managing director via an address supplier. The data subjects will be informed of the corresponding data processing by post.

We would like to indicate that you can object to the receipt of direct advertising as well as processing for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic tariffs. You have the right to object without giving a reason (Art. 21 para. 2 GDPR). You can send us your objection via the contact details provided in the “Data Controller” section.

In addition, all data subjects who are informed by post about the data processing have the opportunity to declare their objection via our objection portal. For this purpose, the data subject needs only to enter the PIN contained in the letter into the portal at https://widerspruch.dataforce.de/. Based on the individualized PIN, we can clearly identify the data subject. Please note that you will not receive a separate confirmation in the event of an objection via our objection portal. However, you can confirm the status of the processing at any time by re-entering the PIN.

In the event of an objection, we will block your personal data (name, personal contact data) from being used within our systems in the future. In this way, we ensure that you will not be contacted again in the future. The legal basis for this data processing is Art. 6 para. 1 lit. c) GDPR to comply with our obligation to provide evidence, or alternatively Art. 6 para. 1 lit. f) GDPR. In this case our legitimate interests lie in complying with our legal obligation to reliably implement your objection. If you nevertheless wish to have your data completely deleted, we will of course be happy to do so. In this case, however, please understand that we cannot guarantee that you will not be contacted again.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

As part of our telephone market surveys, you can also subscribe to our newsletter (see Section I.6.2) or participation in online surveys (Section IV.2). In this case, we will send an email to the address provided, asking you to confirm your registration for the newsletter and/or participation in online surveys. Only when you confirm your registration by clicking on a corresponding link will you be included in the corresponding mailing list and will only from that point onward receive our newsletter and/or invitations to online surveys. If your registration is not confirmed within 72 hours, we will lock your information and delete it after one month.

To avoid typing errors when entering email addresses, we use the Kickbox service, an offer from Kickbox, Inc., 2556 Elm Street Dallas, TX 75214, US. Kickbox checks in real-time that the entered email address actually exists. In the process, your data will be stored on Kickbox’s servers in the USA. We have signed a data processing agreement with Kickbox which includes Standard Contractual Clauses.¬ Further information on the purpose and scope of data processing by Kickbox can be found at https://docs.kickbox.com/v2.0/docs/privacy-policy.

In the event registration is confirmed for the newsletter or participation in online surveys, we will store your email address and, if applicable, your other voluntary information in accordance with Art. 6 para. 1 lit. a) GDPR for the purpose of sending you our newsletter or invitations to online surveys.

We use an external email marketing service to send these emails. For more information about these service providers, please refer to the “Email Marketing Service” section (Section I.7).

 

2. Online Surveys

If you have agreed to participate in our online surveys, we will regularly send you invitations to our online surveys.

We use an external email marketing service to send these emails. For more information about these service providers, please refer to the “Email Marketing Service” section (Section I.7).

If you click on the link contained in the invitation, you will be redirected to our online survey. For the creation and analysis of our online surveys, we use “Exavo” (Exavo GmbH, Feuchter Str. 26, 905030 Wendelstein, Germany). When you participate in the survey, “Exavo” processes data about survey participation (opening/closing rates of the surveys, activities and behavior of respondents in answering the surveys), contact information (e.g. email address), whether you ask “Exavo” questions about the survey, aggregated or anonymized survey results/usage data (e.g. survey type, number of participants, answers), device and browser data (IP address, location information based on IP address), protocol data (IP address to determine whether a respondent has previously participated in a survey), metadata (usage patterns), and referral data (information about the source through which the respondent accesses surveys).

The legal basis is Art. 6 para. 1 lit. f) GDPR. Our legitimate interests lie in the creation of an attractive opinion and market research surveys in order to obtain helpful insights into the purchasing process, customer satisfaction and the possible need for optimization of products and internal processes.

You can submit an objection to this data processing. Your right to object is based on grounds arising from your particular situation. You can send us your objection via the contact details provided in the “Data Controller” section.

Copyright by Diana Ettig in Kooperation mit Spirit Legal