OneTrust

We use the Consent Management Tool "OneTrust" to fulfill legal obligations (Art. 6 (1) (c) GDPR). The operator is OneTrust Technology Limited, 82 St John St, London EC1M 4JN, United Kingdom.

With the help of OneTrust, we can manage your data protection consent to the use of technically unnecessary cookies. For this purpose, you will be shown a so-called "cookie banner" when you access our website for the first time and you will be asked which cookies you would like to allow. Only after you have given your consent will the selected cookies be set. In order to remember your cookie selection and not to show you a cookie banner again on every subpage of our website, OneTrust itself also uses cookies.

The following data categories in particular are processed by OneTrust for this purpose:

·      IP address,

·      Date and time of consent,

·      Browser ID,

·      URL of our subpage from which you gave your consent,

·      The consent status, which serves as proof of consent,

·      Type of terminal device,

·      Browser type.

Cookie consents granted using OneTrust are stored for a period of 12 months.

The legal basis for data processing is the fulfillment of legal obligations Art. 6 (1) (c) GDPR.

For more information, please see OneTrust's privacy policy at: https://www.onetrust.com/privacy/

 

Adobe Analytics

a) Type and scope of data processing

We use the tracking tool Adobe Analytics from Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus Dublin 24, Ireland, on our website.

Adobe Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. This serves the statistical evaluation of website usage and the optimization of our website.

In particular, the following data may be processed by Adobe Analytics:

·      IP address,

·      URL of the accessed website and subpages,

·      URL of the website from which you were redirected to our website (referrer),

·      The time spent on the website,

·      Type of terminal device,

·      Browser type,

·      Actions on our website (so-called conversions, e.g. registration for the newsletter, download of information material),

·      Click path, scrolling behavior.

We use Adobe Analytics with the "Before Geo-Lookup: Replace visitor's last IP octet with 0" and "Obfuscate IP-Removed" functions enabled. This shortens the IP addresses by the last octet (e.g. 192.168.79.***; so-called IP masking). An assignment of the shortened IP address to the calling computer or terminal device of the user is no longer possible. In addition, before the tracking package is stored, the IP address is replaced by a single fixed IP address (so-called generic IP address), so that the IP address is no longer contained in a stored data record.

For more information, please see Adobe’s privacy policy at: https://www.adobe.com/privacy.html

 

b) Purpose and legal basis

The Adobe Analytics service is used to analyze the usage behavior of our website. The legal basis is your consent according to Art. 6 (1) (a) GDPR.

Adobe is contractually obligated, based on so-called EU standard contractual clauses, to comply with a data protection standard comparable to the European standard when transferring data to recipients outside the European Union (e.g. Adobe Inc. in the USA). Please note, however, that we cannot guarantee that Adobe actually complies with the required data protection standard.

 

Google Tag Manager

We use the Google Tag Manager tool on our website. Google Tag Manager is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

With the help of Google Tag Manager, we can manage the Javascript and HTML tags set on our site. Tags are small code elements that allow us to measure traffic and visitor behavior on our site, evaluate the effectiveness of our advertising, set up remarketing and targeting, and test and optimize our website. Google Tag Manager does not use its own cookies and does not collect any personal data itself. It triggers other tags, which in turn may collect personal data. However, the Google Tag Manager does not access this data.

The legal basis for the processing of your personal data is your consent according to Art. 6 (1) (a) GDPR.

You can find more information about data protection at Google here:
https://policies.google.com/privacy?hl=en

 

Marketo

a) Type and scope of data processing

We use the "Marketo" tool from Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland on our website for the purpose of collecting statistical data about user behavior on our website. In this way, we aim to align and optimize our range of services accordingly. In addition, Marketo is used to provide an appropriate range of case studies, publications, market studies, and similar materials, as well as for optimized e-mail marketing.

For this purpose, we store one or more cookies on your terminal device, with the help of which we collect the information for marketing and optimization, which in turn is stored and processed on the Marketo servers. The collected information can be combined with your other information that you voluntarily leave on our website to create a profile.

Your personal data may be stored and processed in any country where Marketo has facilities or where service providers are contracted.

Marketo is contractually obligated, based on so-called EU standard contractual clauses, to comply with a data protection standard comparable to the European standard when transferring data to recipients outside the European Union. Please note, however, that we cannot guarantee that Marketo actually complies with the required data protection standard.

For more information, please see Adobe’s privacy policy at: https://www.adobe.com/privacy.html

b) Purpose and legal basis

Marketo is used to analyze the usage behavior of our website. The legal basis is your consent according to Art. 6 (1) (a) GDPR.

 

Google Ads Conversion Tracking

We use Google Ads to show you advertising on Google and other third party websites. Conversion tracking allows us to determine how successful the individual advertising measures are. Our purpose is to show you advertising that is of interest to you and to make our website more interesting for you. The legal basis for the processing of your data is your consent according to Art. 6 (1) (a) GDPR.

The advertising is delivered by Google via so-called "ad servers". For this purpose, we use cookies that can be used to measure certain parameters for measuring success, such as display of the ads or clicks by users. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognize your internet browser. If a user visits certain pages of the website of an Ads customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked across Ads customers' websites. We ourselves do not collect or process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google servers. We have no influence on the scope and further use of the data collected by Google and inform you according to our state of knowledge: Through the integration of ads conversion tracking, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider learns your IP address and stores it.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:

http://www.google.com/settings/ads/plugin 

The provider Google has its headquarters in the USA (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Processing of personal data may therefore also take place in a third country (a country outside the European Union or the signatory states to the Agreement on the European Economic Area). Google undertakes to conclude so-called EU standard data protection clauses within the meaning of Art. 46 GDPR. Based on this contractual set of rules, recipients in third countries are also obligated to comply with a data protection standard which essentially corresponds to the European standard.

You can find more information about data protection at Google here: www.google.com/intl/de/policies/privacy 

https://services.google.com/sitestats/de.html 

 

Google Ads Remarketing

We use Google Ads Remarketing. Through this application, you can be shown advertising from us on other websites after visiting our website. This is done by means of cookies stored in your browser, via which your usage behavior when visiting various websites is recorded and evaluated by Google. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be stored by Google. In particular, according to Google, pseudonymization is used in remarketing.

 

Hotjar

This website uses Hotjar, an analysis software by Hotjar (Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta). With Hotjar, the usage behavior on our website can be recorded and evaluated. This concerns, for example, information on how much time users spend on which sub-pages, which links they follow or which click and scroll behavior is registered on our site. The information collected by Hotjar is transmitted to Hotjar servers and processed there.

·      The following information is processed:

·      IP address of your device (anonymized)

·      Screen size of your device

·      Device and browser type

·      Geographical information (country)

·      Preferred language settings

This serves the purpose of constantly improving the user-friendliness of our website based on an evaluation of user behavior. The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

Hotjar's privacy policy is available at: https://www.hotjar.com/legal/policies/privacy

 

Leadinfo

We use the lead generation service of Leadinfo B.V., Rotterdam, Netherlands. This recognizes visits of companies to our website based on IP addresses, matches them with Leadinfo's database and shows us publicly available information for this purpose, such as company names, addresses, company information, phone numbers, email addresses or LinkedIn profiles. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g. “leadinfo.com”) to correlate IP addresses with companies and improve the services. Each website visitor is thereby evaluated by a so-called lead score, which is based on certain parameters, such as the total time of the website visit.

The legal basis for data processing is your consent pursuant to Art. 6 (1) (a) GDPR.

For more information, please visit www.leadinfo.com. On this page: www.leadinfo.com/en/opt-out you have an opt-out option. In case of an opt-out, your data will no longer be collected by Leadinfo.

 

Walls.io

We use a plugin from the internet service walls.io on our website. The operator is walls.io GmbH, Schönbrunner Straße 213/215, 1120 Vienna, Austria.

With the social media wall, we can display various social media content from different networks (Instagram, Facebook, X, YouTube, etc.) on our website. When you access the social wall on our website, your IP address is transmitted to walls.io.

Further information on data protection at walls.io can be found at: https://walls.io/privacy

 

Vimeo videos

a) Type and scope of data processing

Our website uses plugins of the video portal Vimeo. The provider is Vimeo Inc, 330 West 34th Street, New York, New York 10001, USA.

When you visit our website, a connection to the servers of Vimeo is established, provided that you have given your consent. In the process, the Vimeo server is informed which of our pages you have visited. In addition, Vimeo collects your IP address. This also applies if you are not logged in to Vimeo or do not have an account with Vimeo. The information collected by Vimeo is transmitted to the Vimeo server in the USA.

If you are logged into your Vimeo account, you enable Vimeo to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your Vimeo account.

For more information on the handling of user data, please see Vimeo's privacy policy at: https://vimeo.com/privacy

b) Purpose and legal basis

We use Vimeo to be able to show you videos on our websites. The legal basis for the processing is your consent according to Art. 6 (1) (a) GDPR.

 

YouTube videos

a) Type and scope of data processing

We integrate YouTube videos into our online offer, which are stored at https://www.youtube.com and can be played directly from our website. YouTube is a service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

YouTube collects your IP address, the date and time as well as information about the website you visited and the video you viewed. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. In addition, a connection to the Google advertising network is established.

As long as you only call up one of our websites with an embedded YouTube video without playing the video, no data is transmitted to YouTube due to YouTube's "Enhanced Privacy Mode" function. A transmission only takes place when you actually start a video.

In order to save your desired settings regarding the playback of videos and the data transfer to YouTube, we set a cookie. These cookies do not contain any personal data, they only contain anonymized data for browser customization.

If you are logged into YouTube at the same time, YouTube can assign the connection information to your YouTube account and use it for the purpose of personalized advertising.

For more information, please see Google's privacy policy: https://policies.google.com/privacy?hl=en

b) Purpose and legal basis

We use YouTube to be able to show you videos on our websites. The legal basis for the processing is your consent according to Art. 6 (1) (a) GDPR.

 

Social networks

We link on this website to our presences in the social networks or set social plugins such as "share" or "like" buttons. When you access our website, no data is transmitted to the operator of the respective social network, but only when you actively follow the link to our profile on the respective social network or click on the social plugin.

The following categories of data are processed by the respective social network:

·      IP address

·      Date, time

·      Visited website

If you are logged into your user account of the respective network when you call up our profile page on a social network, the operator of the social network may be able to assign the collected information of the specific visit to your personal account.

If you interact via a "share" or "like" button of the respective network, this information can also be assigned to the user's personal account and may be published.

If you want to prevent the collected information from being directly assigned to your user account, you must log out of the respective social network before accessing our profile page or using the social plugin.

You can also configure the user account at the respective social network accordingly.

When you access our profile page on a social network, the operator of the social network may also set cookies on your end device, regardless of whether you have an account with the network or whether you are logged in there. Cookies are data packets that mark the user's terminal equipment with a specific identifier. Cookies are primarily set in order to be able to display personalized advertising to visitors to the social networks, including our profile pages. This is done, for example, by displaying ads on the social network pages to the user from advertising partners of the social network whose websites the user has previously visited. In addition, cookies enable us to compile statistics on the use of our profile page (e.g. number of page views, user categories). If we receive such statistical analyses from the operator of the social network, the data is anonymized by the operator beforehand, i.e. it is not possible for us to assign usage data to an individual user.

The purpose pursued by us in processing your data on our profile page on the respective social network is to provide information about our offers and services and to respond to any inquiries on our profile page. The legal basis for the processing is Art. 6 (1) (f) GDPR. To this extent, public relations work is covered by our legitimate interests within the meaning of the provision. If you use a social plugin integrated by us, the legal basis is your consent in accordance with Art. 6 (1) (a) GDPR.

We delete private messages that you send to us via social networks after 2 years have passed since the last communication with you. Public posts from you (e.g. in our timeline) we keep published permanently until you explicitly request their deletion.

We have no influence on which data is collected and transmitted by the operator of the social network, to which third-party recipients a transmission by the operator of the social network takes place and how long the data is stored by the operator of the social network. In this regard, we refer to the privacy policy of the respective social network.

We reserve the right to delete illegal content published by users on our profile page on the respective social network, e.g. copyright infringements or criminally relevant statements.

According to the case law of the European Court of Justice, we are jointly responsible with the operator of the respective social network for the operation of our profile page or the social plugin with regard to compliance with data protection regulations. In this context, the operator of the social network provides the associated IT infrastructure as well as the website of the social network and is basically the primary contact when it comes to the processing of your data on the pages of the social network (e.g. information or deletion). However, you can also assert your legal rights against us. In this case, we will forward your requests to the operator of the social network.

In the case of US providers (Facebook, Twitter, YouTube, Instagram, LinkedIn), data is transferred to the USA. By concluding so-called EU standard contractual clauses, these providers have undertaken to comply with a level of data protection that essentially corresponds to the European level. TikTok may also transfer personal data outside the European Economic Area (EEA) on the basis of EU standard contractual clauses.

Please note, however, that the existence of an appropriate data protection standard for providers outside the EU / EEA - even in the event that EU standard contractual clauses are concluded - cannot be guaranteed in every case.

We include the following social networks on our website by linking:

Facebook:

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin D04 X2K5, Ireland

https://www.facebook.com/about/privacy/

Twitter:

Provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland

https://twitter.com/en/privacy

Instagram:

Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin D04 X2K5, Ireland

https://help.instagram.com/519522125107875

TikTok:

Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, c/o WeWork, 125 Kingsway, London, WC2B 6NH, London, England.

https://www.tiktok.com/legal/page/eea/privacy-policy/en

YouTube:

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 D04 E5W5, Ireland

https://policies.google.com/privacy?hl=en

LinkedIn:

Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2 D02 AD98, Ireland

https://www.linkedin.com/legal/privacy-policy/

Xing:

Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

https://privacy.xing.com/en/privacy-policy

 

Facebook Fan Pages

As the operator of a fan page, in addition to Meta Platforms Ireland Limited, Merrion Road, Dublin D04 X2K5, Ireland, Serviceplan is also responsible for data processing on this Facebook fan page in accordance with Art. 26 GDPR. This means that Serviceplan must also be responsible for ensuring that your data is processed lawfully via the respective fan page and that you can also exercise your rights regarding your data against Serviceplan. Serviceplan and Meta Platforms Ireland have concluded a joint responsibility agreement pursuant to Art. 26 GDPR (https://www.facebook.com/legal/terms/page_controller_addendum) has been concluded.

See also the information on page insights data (https://www.facebook.com/business/help/144825579583746?id=939256796236247). This describes which Page Insights are processed on a Facebook Fan Page. Page insights are aggregate statistics created based on certain events that are logged by Facebook servers when people interact with pages and the content associated with them.

When you visit a Facebook fan page, Facebook may set cookies on your end device, regardless of whether you have a Facebook account and whether you are logged in to Facebook as a user. Cookies are data packets that mark the user's end devices with a specific identifier.

Cookies are set primarily in order to be able to display personalized advertising to visitors to Facebook websites, including a fan page. This is done by showing the user on Facebook (i.e. also on the fan page) ads from Facebook's advertising partners whose websites the user has previously visited. In addition, cookies make it possible to create statistics about the use of a fan page.

The collection of your data through cookies in the context of using the Fanpage is neither legally nor contractually required. This is also not necessary for the conclusion of a contract. Cookies that are not technically necessary therefore require your consent. Whether and how Facebook obtains your consent is up to Facebook.

Facebook alone decides on the use of cookies. Serviceplan has no influence on this, which cookies are used for which purpose by Facebook, which information Facebook thereby receives, where and how these are used, how long they are stored, to which third party recipients they are transmitted and how you can control and adjust Facebook web ads is described by Facebook in its cookie policy. This is available at: https://www.facebook.com/privacy/policies/cookies

For further information, in particular on the transfer of data to Facebook, Inc., 1601 Willow Road, Menlo Park, California, USA, please refer to Facebook's data policy (https://www.facebook.com/privacy/policy).

By concluding so-called EU standard contractual clauses, Facebook has undertaken to comply with a level of data protection that essentially corresponds to the European level.

Please note, however, that the existence of an adequate data protection standard for providers outside the EU / EEA - even in the event that EU standard contractual clauses are concluded - cannot be guaranteed in every case.

In principle, Facebook Ireland assumes the fulfillment of your legal rights for Serviceplan. However, you may also contact Serviceplan regarding your rights listed below:

·      Right to revoke consent pursuant to Art. 7 (3) GDPR

·      Right to information according to Art. 15 GDPR

·      Right to rectification and completion according to Art. 16 GDPR

·      Right to erasure and to "being forgotten" according to Art. 17 GDPR

·      Right to restriction of processing according to Art. 18 GDPR

·      Right to data portability according to Art. 20 GDPR

·      Right of objection according to Art. 21 GDPR

·      Right not to be subject to a decision based solely on automated processing - including profiling - pursuant to Art. 22 GDPR

·      Complaint to a data protection supervisory authority pursuant to Art. 77 GDPR

Competent supervisory authority:

Bavarian State Office for Data Protection Supervision
Promenade 18
91522 Ansbach
Germany

Phone: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
E-mail: poststelle@lda.bayern.de

For Facebook, the Irish Data Protection Commission is the competent supervisory authority:

Data Protection Commission
21 Fitzwilliam Square South
Dublin 2
D02 RD28
Ireland

Phone: +353 (0)761 104 800 / +353 (0)57 868 4800