Data protection ALTEN Technology
OVERVIEW
Thank you for your interest in ALTEN. We are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to take this opportunity to inform you which of your personal data we collect when you visit our website and for what purposes it is used.
This privacy policy applies to the website of ALTEN Technology GmbH and ALTEN GmbH which can be accessed under the domain http://www.alten-germany.de and the various subdomains (‘our website’).
NAME AND ADDRESS OF THE PERSON RESPONSIBLE
The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is:
ALTEN Technology GmbH
Managing Director: Dr. Marcel Klehr, Pierre Marcel
Gasstraße 18/House 4
22761 Hamburg
E-mail: datenschutz@alten.com
COMPETENT SUPERVISORY AUTHORITY
Der Hamburgische Beauftragte für Datenschutz und Informationsfreiheit (HmbBfDI)
Ludwig-Erhard-Straße 22
20459 Hamburg
NAME AND ADDRESS OF THE DATA PROTECTION OFFICER
The data protection officer of the controller is:
Jörg Hermann
Freibadstr. 30
81543 Munich
E-mail: datenschutz@alten.com
GENERAL INFORMATION ON DATA PROCESSING
LeLegal basis for the processing of personal data
In accordance with Art. 13 GDPR, we inform you of the legal basis of our data processing. If you have consented to data processing, we process your personal data on the basis of Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR, insofar as special categories of data are processed in accordance with Art. 9 para. 1 GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49 para. 1 lit. a GDPR. If you have consented to the storage of cookies or access to information in your end device (e.g. via device fingerprinting), the data processing is also carried out on the basis of Section 25 (1) TDDDG. Consent can be revoked at any time. If your data is required for the fulfilment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 para. 1 lit. b GDPR. Furthermore, we process your data if this is necessary to fulfil a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR.
Description of the groups of people affected
In principle, only the data required to fulfil the purpose of the company and the contractual agreements is collected. Essentially, personal data is collected, processed and used for the following groups of people:
* Customer data: The processing of personal identification and communication data is carried out for communication with customers and the execution of our respective business with the customer and thus for the fulfilment of the business purpose. Furthermore, for the initiation of business contacts and the information of customers.
* Supplier data: The processing of personal identification, communication and performance data, economic and financial information, payment and bank details and, if applicable, performance data is carried out for communication with the supplier and the execution of our respective business and thus for the fulfilment of the business purpose.
* Employee data: The processing of personal identification and performance data (certificates etc.), contract master data, insurance data, downtimes, payment and bank details, tax and social security data, log-in data, communication data, travel booking data and vehicle booking data is carried out for the performance and processing of the respective employment relationship, fulfilment of legal obligations and in our legitimate corporate interest in the management, organisation and performance of our business activities.
* Applicant data: The processing of personal identification data, performance data (certificates etc.), payment and bank details and travel booking data (when booked through ALTEN) is carried out to initiate employment relationships, fulfil legal obligations, in our legitimate business interests of management, the organisation and implementation of our business activities, and for the further development of our internal systems.
* Interested parties: The processing of personal identification data, communication data and, if applicable, economic and financial information of interested parties to ALTEN is carried out to fulfil the business purpose.
*Competition participants: The processing of personal identification data, communication data and, if applicable, qualification data of participants in competitions (e.g. at trade fairs) is based on the consent of the data subject in accordance with Art. 6 para. 1 lit. a, 7 GDPR. When participating in the competition, the personal data is processed for the purpose of organising and running the competition. ALTEN also reserves the right to use this data for direct marketing purposes. The data will not be transferred to third parties. Participants can object to the processing of their data at any time.
* other personal data: The processing of personal data of other business partners (e.g. system partners, chambers, associations, banks and authorities) takes place within the framework of the respective cooperation and in order to fulfil our business purpose.
Further information on the processing of the data of the above-mentioned groups of data subjects by ALTEN Technology GmbH can be found in the information flyers for applicants, employees, customers and suppliers linked at the end of this privacy policy. The following explanations relate to the processing of your data on our website.
Recipients or categories of recipients of data
The ALTEN Group is an engineering service provider operating throughout Germany. As a consultant, innovation driver and supporter, we are a competent development partner for national and international companies. We accompany the entire process from brainstorming to series production. Data processing by ALTEN is carried out to fulfil consulting and development activities at or for ALTEN’s customers and their affiliated companies as well as all related ancillary business.
This personal data will only be used for advertising/market research purposes and for the design of our services if you have given us your express consent to do so.
In principle, only the data necessary to fulfil the purpose of the company and the contractual agreements are passed on. These are essentially the following recipients:
* Service Providers who are engaged for the proper conduct of business (e.g. service providers for the provision of the website and marketing, suppliers to support administrative processes, including travel service providers for the organisation of business trips for employees, landlords for employee accommodation, VBG and company doctor for occupational health and safety, insurance for damages in the context of the employment relationship). The legal basis for this is either Art. 28 GDPR in the case of order processing or, if applicable, Section 26 BDSG (in conjunction with Art. 88 GDPR) for the purposes of initiating or implementing an employment relationship with you.
* External Bodies for the fulfilment of the purposes mentioned under 2 (e.g. customers or affiliated companies of ALTEN within the meaning of §§ 15 ff. AktG, such as the parent company ALTEN SA, 40 Avenue André Morizet, 92100 Boulogne Billancourt, France and ALTEN Consulting Services GmbH, Elsenheimer Straße 55, 80687 Munich, where the employee is employed or the employee or applicant is to be employed within the scope of the employment relationship, customers and suppliers for the handling of projects, credit institutions for salary payments, tax consultants and auditors). The legal basis is regularly Section 26 BDSG (in conjunction with Art. 88 GDPR) for the establishment or implementation of an employment relationship with the employees or Art. 6 (1) lit. f GDPR with regard to general operational obligations such as tax returns, audits, etc.
* Public Authorities in the event of overriding legal provisions (e.g. social insurance institutions, tax authorities). The legal basis for this is Art. 6 (1) lit. c GDPR in conjunction with the respective legal requirements, in particular labour and social security law.
Furthermore, this personal data is processed for the purpose of complying with legal provisions and regulations, such as labour law, tax and social security law, money laundering law and international sanctions regulations (e.g. EU Anti-Terrorism Directive). The legal basis for this is Art. 6 para. 1 lit. c GDPR in conjunction with the respective provision of national law.
Data erasure and storage duration
We adhere to the principles of data minimisation in accordance with Art. 5 para. 1 lit. c GDPR and storage limitation in accordance with Art. 5 para. 1 lit. e GDPR. We only store your personal data for as long as is necessary to achieve the purposes stated here or as provided for by the retention periods stipulated by law. After the respective purpose no longer applies or after these retention periods have expired, the corresponding data will be deleted as quickly as possible.
External links
This website may contain links to third-party websites or to other websites under our responsibility. If you follow a link to a website outside our responsibility, please note that these websites have their own data protection information. We accept no responsibility or liability for these third-party websites and their data protection notices. Therefore, before using these websites, please check whether you agree with their data protection declarations.
You can recognise external links either by the fact that they are displayed in a different colour from the rest of the text or underlined. Your cursor will show you external links when you move it over such a link. Only when you click on an external link will your personal data be transferred to the destination of the link. In particular, the operator of the other website receives your IP address, the time at which you clicked on the link, the page on which you clicked on the link and other information that you can find in the data protection information of the respective provider.
Please also note that individual links may lead to a data transfer outside the European Economic Area. This could give foreign authorities access to your data. You may not have any legal remedies against this data access. If you do not want your personal data to be transferred to the link destination or even exposed to unwanted access by foreign authorities, please do not click on any links.
Rights of the data subject
As a data subject within the meaning of the GDPR, you have the opportunity to assert various rights. The data subject rights arising from the GDPR are the right of acces (Article 15), the right to rectification (Article 16), the right to erasure (Article 17), the right to restriction of processing (Article 18), the right to object to the processing of your personal data (Article 21), the right to complain to a supervisory authority and the right to data portability (Article 20)
- Right to revocation:
Some data processing can only take place with your express consent. You have the option to withdraw your consent at any time. However, this does not affect the legality of data processing up to the point of revocation.
- Right of objection:
If the processing is based on Art. 6 para. 1 lit. e or f GDPR, you as the data subject can object to the processing of your personal data at any time for reasons arising from your particular situation. You also have this right in the case of profiling based on these provisions within the meaning of Art. 4(4) GDPR. If we cannot demonstrate a legitimate interest in the processing that outweighs your interests, rights and freedoms or if processing serves the assertion, exercise or defence of legal claims, we will refrain from processing your data after the objection has been made.
If the processing of personal data serves the purpose of direct marketing, you also have the right to object to this at any time. The same applies to profiling in connection with direct advertising. Here too, we will no longer process personal data as soon as you object.
- Right to lodge a complaint with a supervisory authority:
If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, without prejudice to any other administrative or judicial remedy.
- Right to data portability:
If your data is processed automatically on the basis of consent or fulfilment of a contract, you have the right to receive this data in a structured, commonly used and machine-readable format. You also have the right to request the transfer and provision of the data to another controller, insofar as this is technically feasible.
- Right of information, correction and erasure:
You have the right to obtain information about your processed personal data with regard to the purpose of the data processing, the categories, the recipients and the duration of storage. If you have any questions on this topic or other topics relating to personal data, you can of course contact us using the contact details provided in the legal notice.
- Right to restriction of processing:
You can request the restriction of the processing of your personal data at any time. To do so, you must fulfil one of the following requirements:
- You contest the accuracy of the personal data. You have the right to request a restriction of processing for the duration of the verification of accuracy.
- If the processing is unlawful, you can request the restriction of the use of the data as an alternative to erasure.
- If we no longer need your personal data for the purposes of processing, but you need the data for the assertion, exercise or defence of legal claims, you can request the restriction of processing as an alternative to erasure.
- If you object to the processing pursuant to Art. 21 (1) GDPR, your interests and ours will be weighed up. Until this balancing has taken place, you have the right to request the restriction of processing.
Restriction of processing means that, with the exception of storage, personal data may only be processed with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
PROVISION OF THE WEBSITE (WEBHOSTER)
The servers of our website https://www.alten-germany.de/ are operated by an external provider. We have concluded an order processing contract with the provider in accordance with Art. 28 GDPR. The legal basis for the use of external hosting is the fulfillment of a contract with our potential and existing customers in accordance with Art. 6 para. 1 lit. b GDPR and our legitimate interest in the secure and high-performance provision of our website in accordance with Art. 6 para. 1 lit. f GDPR.
Each time our website is accessed, our system’s web server collects information from the end device used. We collect the following data:
- Information about the browser type
- Operating system of the user’s device
- Date and time of access
- The previous website from which the user accessed our websites (referrer)
We only collect IP addresses anonymously, so we do not store any personal data in our log files within the meaning of the GDPR.
Data processing in the context of the contact form
You can contact us by email, telephone, contact form, or letter, which may involve the processing of personal data. We process your data for the purpose of handling and processing your request. We will not disclose your data to third parties without your consent.
The legal basis for processing is our legitimate interest in the effective processing of your request in accordance with Art. 6 (1) lit. f GDPR.
When you contact us by email, we store your email address and the information contained in the email. If you use the contact form, your IP address will also be pseudonymized in addition to the information provided in the contact form. If you contact us by letter, your sender address and the content of the letter will be stored. If you contact us by telephone, we will collect personal data depending on the individual case.
We store your data until you request us to delete it or until the purpose of processing (the processing of your request) has been fulfilled.
Data processing in the context of the contact form for applicants
On our website, we offer you the opportunity to submit an application to us using a form provided. The information collected via mandatory fields is required in order to process the enquiry. You can also voluntarily provide additional information that you believe is necessary to process the contact enquiry.
ALTEN collects and stores the data itself. Your data will neither be sold nor made available to other unauthorised third parties. ALTEN ensures that the data will only be forwarded within the ALTEN Group and to customers, in each case limited to the extent necessary to fulfil the purpose.
Your personal data will be transferred to customers or companies of the ALTEN Group that are affiliated with us within the meaning of §§ 15 ff. AktG, insofar as this is necessary, in particular in the context of hiring out employees for the acquisition of jobs. Applications in the back office and business management areas are not affected by this.
Insofar as it is necessary for the purpose of implementing your employment relationship with ALTEN, your personal data will be transferred to the third parties necessarily involved in the execution of the contract (customers, suppliers, companies of the ALTEN Group that are affiliated with us within the meaning of §§ 15 ff. AktG).
In order to process the personal data of applicants as part of the application process and of employees as part of the employment relationship, we sometimes use the services of companies based inside or outside the EU (order processing in accordance with Art. 28 GDPR) for the provision of services, outsourcing of data processing, etc. The transfer takes place on the basis of appropriate guarantees by way of the standard contractual clauses approved by the EU Commission (pursuant to Art. 46 para. 2 lit. c GDPR). However, even in this case, the data will be processed in accordance with our high data protection standards and stored exclusively on servers in Germany.
The processing of your data based on the use of the application form is carried out for the purpose of processing your application and deciding on the establishment of an employment relationship on the basis of Section 26 BDSG. There is no legal or contractual obligation to provide your data, but it is not possible to process your application without providing the information in the mandatory fields. If you do not wish to provide this data, please use other ways of applying to us.
We store the data collected for the duration of the application process and, in the event of non-employment, for a period of six months from the date of rejection.
If you give us your consent to include your data in our applicant pool (so-called “pool candidates”) in order to offer you a position suitable for your profile at a later date, we will store your data for up to 24 months.
USE OF EXTERNAL SERVICE PROVIDERS
Social media profiles
We maintain online profiles on the following social networks (hereinafter referred to as “social media”) in order to communicate with customers, interested parties, and the public and to draw attention to our services:
- Facebook (Meta Platforms, Inc.)
- X (formerly Twitter; X Corp.)
- LinkedIn (LinkedIn Ireland Unlimited Company)
- Xing (New Work SE)
For information on the scope and purpose of data processing, please refer to the applicable privacy policies of the respective networks:
- Facebook: (https://www.facebook.com/privacy/policy/?entry_point=facebook_page_footer)
- X (Twitter): (https://x.com/de/privacy)
- LinkedIn: (https://de.linkedin.com/legal/privacy-policy?)
- Xing: (https://privacy.xing.com/de/datenschutzerklaerung)
Processing is carried out on the basis of Art. 6 (1) lit. f GDPR, as we have a legitimate interest in contemporary public relations work. If consent is required, processing is carried out on the basis of Art. 6 (1) lit. a GDPR.
If you provide additional data (e.g., personal messages) to the services, your consent is generally required. Please note that we have no influence on data processing by social media providers. If you have any questions or wish to exercise your rights as a data subject (e.g., information, deletion), please contact the respective platform operator directly.
You can subscribe to or unsubscribe from our social media profiles at any time. If you do not want social media service providers to collect data about your visit to our profiles, please use the deactivation options (e.g., log out, advertising tracker blocking) in your user account or install appropriate browser add-ons.
CloudFlare
We use the ‘Cloudflare’ service on our website to enhance security, performance, and reliability. The provider is Cloudflare, Inc. (“Cloudflare”),101 Townsend St., San Francisco, CA 94107, USA.
The legal basis for the use of Cloudflare is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR to improve website performance, enhance security, and protect our website from malicious attacks.
The data processed by Cloudflare includes your IP address, system configuration information, device information, log data, and may include cookies to enhance security and performance.
The purpose of data processing is to enhance website security, performance optimization, and protection against malicious traffic.
Cloudflare states that logs are typically retained for up to 7 days by default. You can find this information in Cloudflare’s official privacy policy under the section ‘Data retention’: https://www.cloudflare.com/privacypolicy/
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Cloudflare is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with Cloudflare that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.
Further information on the privacy policy of Cloudflare can be found at: https://www.cloudflare.com/privacypolicy/
Information about the cookies used can be found at: https://www.cloudflare.com/cookie-policy/
Google Tag Manager
We use the ‘Google Tag Manager’ service on our website to manage website tags efficiently. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Tag Manager includes your IP address, browser and device information, and information on website interaction; Google Tag Manager itself does not set cookies but may trigger other services that do.
The purpose of data processing is the simplified integration and management of website tags and tracking codes to analyze user interactions.
Further information on the privacy policy of Google Tag Manager can be found at: https://policies.google.com/privacy
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking on this link: https://tools.google.com/dlpage/gaoptout
Google Analytics
We use the ‘Google Analytics’ service on our website to evaluate user behavior. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of Google Analytics is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Analytics includes your IP address, browser and device information, location data, time of visit, information on website interaction, and it sets cookies.
If you are logged into a Google account, this data can be linked to a user profile.
The purpose of data processing is the statistical analysis of website usage and user interactions to optimize website performance and user experience.
The default data retention period for Google Analytics is 14 months.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.
Further information on the privacy policy of Google Analytics can be found at: https://support.google.com/analytics/topic/2919631?hl=en&ref_topic=1008008,3544742,2986333,&sjid=1881441919987619365-EU
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking on this link: https://tools.google.com/dlpage/gaoptout
Google Adsense
We use the ‘Google AdSense’ service on our website to display advertisements and monetize our content. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of AdSense is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google AdSense includes your IP address, device information, browser type, visited pages, interaction with advertisements, and cookies set by Google.
Google Adsense may collect user data to create personalized advertising profiles.
The purpose of data processing is to display personalized advertisements and analyze user interactions with ads.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.
Further information on the privacy policy of AdSense can be found at: https://policies.google.com/privacy
Google Adsense for Youtube
We use the “Google AdSense for YouTube” service on our website as part of the “YouTube” service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of Google Adsense for Youtube is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google AdSense for YouTube includes your IP address, device information, viewing behavior, interaction data, and cookies are set to provide personalized advertising.
If you are logged into a Google account, Google Adsense for YouTube may link data collected to your user profile in order to display personalized advertising.
Google processes this data to display personalized advertising and analyze user interactions with advertisements.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have concluded a Data Processing Addendum with Google, which guarantees that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.
Further information on the privacy policy of Google Adsense for Youtube can be found at: https://policies.google.com/privacy
Google Ads
We use the ‘Google Ads’ service on our website to promote our products and services online. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of Google Ads is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Ads includes your IP address, browser and device information, location data, search queries, interactions with advertisements and websites, and it sets cookies.
If you are logged into a Google account, Google Ads may link collected data to your user profile for personalized advertising purposes.
The purpose of data processing is to display personalized advertisements and measure advertising effectiveness.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.
Further information on the privacy policy of Google Ads can be found at: https://business.safety.google/adsprocessorterms/
Google Ads Conversion Tracking
We use the ‘Google Ads Conversion Tracking’ service on our website to measure the effectiveness of our advertising campaigns. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of Google Ads Conversion Tracking is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Ads Conversion Tracking includes your IP address, browser and device information, details about ad interactions, and sets cookies to track conversions.
If you are logged into a Google account, Google Ads Conversion Tracking data can be linked to a user profile.
The purpose of data processing is to measure the effectiveness of advertising campaigns and to track user interactions after clicking on advertisements.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.
Further information on the privacy policy of Google Ads Conversion Tracking can be found at: https://policies.google.com/privacy
Google Ads Remarketing
We use the ‘Google Analytics Remarketing’ service on our website to display targeted advertisements to users based on their previous interactions with our site. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of Google Analytics Remarketing is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Analytics Remarketing includes your IP address, device information, browser details, pages visited, time and duration of visit, and it sets cookies to track website interaction for remarketing purposes.
Google Analytics Remarketing collects data to build user profiles for targeted advertising purposes.
The purpose of data processing is the analysis of user behavior and the delivery of personalized advertising based on previous website interactions.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.
Further information on the privacy policy of Google Analytics Remarketing can be found at: https://business.safety.google/adsprocessorterms/
Google Fonts
We use the ‘Google Fonts’ service on our website to integrate external fonts for improved visual presentation. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of Google Fonts is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Fonts includes your IP address, browser and device information, and the time of the request.
The purpose of data processing is the optimized and uniform presentation of fonts on the website.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.
Further information on the privacy policy of Google Fonts can be found at: https://policies.google.com/privacy
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking on this link: https://policies.google.com/privacy#infochoices
Google Maps
We use the ‘Google Maps’ service on our website to visually display geographic information and provide directions. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of Google Maps is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google Maps includes your IP address, location data, device information, browser details, usage data, and it may set cookies.
If you are logged into a Google account, Google Maps data can be linked to a user profile.
The purpose of data processing is to display interactive maps and provide location-based services to users.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.
Further information on the privacy policy of Google Maps can be found at: https://policies.google.com/privacy#infocollect
Google Recaptcha
We use the ‘Google reCAPTCHA’ service on our website to protect against spam and automated abuse. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of reCAPTCHA is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Google reCAPTCHA includes your IP address, browser information, operating system, cookies set by Google, and user interactions necessary to distinguish humans from bots.
The purpose of data processing is to verify user interactions and protect the website from spam and abuse.
Further information on the privacy policy of reCAPTCHA can be found at: https://policies.google.com/privacy#infocollect
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies
YouTube
We use the video service “Youtube” on our website. The provider of the service is the company Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Irland.
The legal basis for the use of Youtube is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
Google collects and processes your IP address, browser and operating system information, and location data. Actions such as watching videos or creating playlists are also processed. Cookies are also set during this process. YouTube integrates other Google services, such as Google Fonts, Google Photos, and Google Ads (formerly Doubleclick).
If you are logged into a Google account, this data can be linked to a user profile. Your user behavior is recorded and analyzed for advertising purposes.
The purpose of data processing is to provide video content and integrate it on our website.
According to Google’s privacy policy, the retention period for data processed by YouTube varies depending on the type of data and user settings. By default, activity data (such as watched videos, search history, etc.) is automatically deleted after 36 months (3 years) for new accounts or users who have not previously set a retention period. Users can manually adjust this retention period to 3 months, 18 months, or choose to retain data indefinitely. Detailed information can be found at: https://policies.google.com/privacy#inforetaining
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with Google that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.
Further information on the privacy policy of Youtube can be found at: https://policies.google.com/privacy
Information about the cookies used can be found at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking on this link: https://myaccount.google.com/data-and-privacy
Vimeo
We use the ‘Vimeo’ service on our website to embed and display video content. The provider is Vimeo.com, Inc. (“Vimeo”), 555 West 18th Street, New York, New York 10011, USA.
The legal basis for the use of Vimeo is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Vimeo includes your IP address, browser and device information, referring website, video viewing activity, and Vimeo sets cookies.
If you are logged into your Vimeo account, Vimeo may link this data to your user profile.
The purpose of data processing is to embed video content, analyze user interactions with videos, and improve user experience.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. We have entered into a data processing agreement (DPA) with Vimeo that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR. Vimeo is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US.
Further information on the privacy policy of Vimeo can be found at: https://vimeo.com/privacy
Information about the cookies used can be found at: https://vimeo.com/cookie_policy
LinkedIn Insight Tag
We use the ‘LinkedIn Insight Tag’ service on our website to analyze user behavior and measure the effectiveness of our advertising activities. The provider is LinkedIn Ireland Unlimited Company (“LinkedIn”), Wilton Plaza, Wilton Place, Dublin 2, Ireland.
The legal basis for the use of LinkedIn Insight Tag is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by LinkedIn Insight Tag includes your IP address, device and browser information, page events, and information on website interaction; the service also sets cookies.
LinkedIn Insight Tag collects data that can be used to build user profiles for targeted advertising purposes.
The purpose of data processing is the analysis of advertising effectiveness, tracking of conversions, and creation of anonymous user profiles for targeted marketing.
LinkedIn Insight Tag data is retained by LinkedIn for 180 days by default.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. LinkedIn is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have entered into a data processing agreement (DPA) with LinkedIn that ensures that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.
Further information on the privacy policy of LinkedIn Insight Tag can be found at: https://www.linkedin.com/legal/privacy-policy
Information about the cookies used can be found at: https://www.linkedin.com/legal/cookie-policy
Meta Pixel
We use the ‘Meta Pixel’ service (also known as ‘Facebook Pixel’) on our website to analyze user behavior and measure the effectiveness of our advertising campaigns. The provider is Meta Platforms Ireland Limited 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Irland.
The legal basis for the use of Meta Pixel is your consent pursuant to Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time with effect for the future.
The data processed by Meta Pixel include IP address, browser information, operating system, device information, location data, referrer URL, interactions on the website, Facebook user ID (if users are logged in to Facebook), and it sets cookies.
Meta Pixel collects user data that can be used to create user profiles for targeted advertising purposes.
The purpose of data processing is analysis of user behavior, measurement of advertising effectiveness, creation of target groups and personalized advertising.
It cannot be ruled out that personal data may be transferred to unsafe third countries (United States) where the level of data protection is lower than in the EU. Meta is certified under the EU-US Data Privacy Framework, which regulates the secure processing of EU citizens data in the US. We have concluded a Data Processing Addendum with Meta, which guarantees that personal data will only be processed in accordance with our instructions and in compliance with the GDPR.
Further information on the privacy policy of Meta Pixel can be found at: https://www.facebook.com/privacy/policy
Information about the cookies used can be found at: https://www.facebook.com/policies/cookies/
You can prevent the processing of your data by clicking on this link: https://www.facebook.com/settings?tab=ads
HOW WE PROTECT YOUR PERSONAL DATA
We implement physical, technical and administrative security measures to adequately protect your personal data from loss, misuse, unauthorised access, disclosure and alteration. These security measures include firewalls, data encryption, physical access restrictions for our data centres and authorisation controls for access to data.
CHANGES TO OUR PRIVACY POLICY
We reserve the right to amend this privacy policy so that it always complies with current legal requirements or to implement changes to our services in the privacy policy, e.g. when introducing new services. The new privacy policy will then apply to your next visit.