When you visit our website, so-called usage data is temporarily stored as a log on our web server for statistical purposes, in order to improve the quality of our websites. This data set consists of
- the page from which the file was requested,
- the name of the file,
- the date and time of the request,
- the amount of data transferred,
- the access status (file transferred, file not found),
- a description of the type of web browser used, and the IP address of the requesting computer, which is shortened such that it can no longer be linked to a specific person.
The log data mentioned is stored only in anonymized form.
- Purpose: Display of personalized or contextual advertising on the website, and/or monetization of YouTube content.
- Types of data: IP address, online identifiers, cookie IDs, device and usage data, information on ads viewed/clicked; for YouTube, also video usage and profile information for logged-in users.
- Legal basis: Generally consent under Art. 6(1)(a) GDPR in conjunction with the German Telecommunications-Digital-Services-Data-Protection Act (TDDDG), since tracking/marketing cookies are set.
- Third country: Processing by Google LLC (USA); reference is made to the EU-US Data Privacy Framework and Standard Contractual Clauses.
- Purpose: Uniform display of fonts via Google’s servers.
- Types of data: IP address, browser/device information when fonts are retrieved from Google’s servers.
- Legal basis: Disputed depending on implementation; for external loading, consent (Art. 6(1)(a) GDPR) is generally recommended; alternatively, local hosting without data transfer to Google is noted, if implemented.
- Third country: Retrieval via Google servers (including in the USA); reference is made to the EU-US Data Privacy Framework/SCCs in the privacy policy.
- Purpose: Display of interactive maps, directions.
- Types of data: IP address, potentially location data, browser/device information; for logged-in Google users, association with the account is possible.
- Legal basis: Consent via cookie banner/content blocker (Art. 6(1)(a) GDPR), since external content and potentially cookies/tracking are used.
- Third country: Use of Google servers, including possible transfer to the USA (see EU-US Data Privacy Framework/SCCs).
- Purpose: Usage analysis, session recordings, heatmaps for usability optimization.
- Types of data: IP address, access times, mouse and scroll movements, technical device/browser information; form content is masked according to Microsoft.
- Legal basis: Consent via cookie banner (Art. 6(1)(a) GDPR) for Clarity cookies and tracking; where applicable, additionally legitimate interest (Art. 6(1)(f)) for pure security logs.
- Data processing/third country: Used as a data processor of Microsoft under a data processing agreement; data transfer to Microsoft servers, including in third countries (USA), based on the EU-US Data Privacy Framework/SCCs.
- Purpose: Hosting/server infrastructure, potentially email services.
- Types of data: Server log files (IP, time, requested resources), content and account data that you store on the OVH infrastructure.
- Legal basis: Art. 6(1)(f) GDPR (secure, efficient operation of the website), or (b) where necessary for contract performance.
- Data processing: OVHcloud acts as a data processor; a data processing agreement pursuant to Art. 28 GDPR is in place.
- Purpose: Obtaining and documenting consent for cookies and third-party services, controlling script loading.
- Types of data: Cookie/local storage entries with consent status, timestamp, potentially anonymous or pseudonymous identifiers, technical metadata (e.g., browser type, OS, IP address in server logs).
- Legal basis: Art. 6(1)(c) GDPR (legal obligation to demonstrate consent) and (f) (legitimate interest in documented consent management).
- Note: Consent data remains on our own server; the plugin itself does not transfer any data to third-party providers.
- Purpose: Embedding and playback of videos.
- Types of data: IP address, device and usage data, potentially cookie IDs; for logged-in Google/YouTube accounts, association with the profile is possible; fonts are loaded in the player via Google Fonts.
- Legal basis: Consent via consent tool (Art. 6(1)(a) GDPR), in particular due to cookies and tracking for marketing and statistical purposes.
- Third country: Processing by Google/YouTube in the USA; reference is made to the EU-US Data Privacy Framework and SCCs.
Nature and Purpose of Processing
We use the Content Delivery Network (CDN) of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA, to improve the loading speed and security of our website. A CDN is a network of servers distributed around the world that caches our website’s content and delivers it from a server near you. This significantly speeds up page loading.
Legal Basis
Processing takes place on the basis of Art. 6(1)(f) GDPR (legitimate interest). Our legitimate interest lies in optimizing loading times, increasing availability, and improving the security of our website.
Recipient
Cloudflare, Inc., headquartered in the USA. Cloudflare is certified under the EU-US Data Privacy Framework and thereby offers an adequate level of data protection.
Data Processed
- IP address (anonymized)
- Timestamp of access
- Page accessed (URL)
- HTTP status code
- Amount of data transferred
- Browser type and version
- Operating system
- Referrer URL (previously visited page)
Retention Period
Cloudflare stores log data for a maximum of 30 days and then deletes it.
Transfer to Third Countries
Data processing takes place partly on servers in the USA. Cloudflare is certified under the EU-US Data Privacy Framework. The European Commission has issued an adequacy decision for the Data Privacy Framework.
Your Rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection under Art. 15-21 GDPR. You may withdraw your consent at any time with effect for the future.
Right to Object
You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you that takes place on the basis of Art. 6(1)(f) GDPR.
Further Information
Further information on data protection at Cloudflare can be found in Cloudflare’s privacy policy: https://www.cloudflare.com/privacypolicy/
Data Processing Agreement: A data processing agreement pursuant to Art. 28 GDPR has been concluded with Cloudflare.
We use cookies on our website. Cookies are small text files that can be stored on and read from your device. A distinction is made between session cookies, which are deleted once you close your browser, and persistent cookies, which are stored beyond the individual session. Cookies can contain data that make it possible to recognize the device being used. In some cases, however, cookies only contain information about certain settings that cannot be linked to a specific person.
We use both session cookies and persistent cookies on our website. Processing takes place on the basis of Art. 6(1)(f) GDPR and in the interest of optimizing or enabling user navigation and adapting the presentation of our website.
You can set your browser so that it informs you about the placement of cookies. This way, the use of cookies becomes transparent to you. You can also delete cookies at any time via the relevant browser setting and prevent new cookies from being set. Please note that our website may then not be displayed optimally and some functions may no longer be technically available.
- Purpose: Hosting/backend infrastructure, provision of the website, potentially CDN and database operation.
- Types of data: Server log files (IP address, timestamp, request, user agent), content and metadata of the application hosted on AWS.
- Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure, high-performing hosting), or (b) where necessary for contract performance.
- Data processing/third country: AWS is a data processor; an AWS GDPR Data Processing Addendum is in place, including Standard Contractual Clauses and reference to the EU-US Data Privacy Framework for transfers to the USA.
- Purpose: Operation of hosted WordPress.com pages and/or certain features (e.g., Jetpack Stats, embedded WordPress.com content).
- Types of data: IP address, browser information, usage data, potentially comment/account data depending on usage.
- Legal basis: Art. 6(1)(f) GDPR (technical operation, security, statistics) or (b) where used for contract performance.
- Data processing/third country: Automattic provides a data processing agreement including Standard Contractual Clauses; data is transferred to the USA on the basis of SCCs and the EU-US Data Privacy Framework.
To design our website according to demand, we create pseudonymous usage profiles with the help of Google Analytics. Google Analytics uses cookies, which are stored on your device and can be read by us. This allows us to recognize returning visitors and count them as such. Data processing takes place on the basis of Art. 6(1)(f) GDPR and in the interest of learning how frequently our website is accessed by different users.
The information generated by the cookie about your use of this website is generally transferred to and stored on a Google server in the USA. Since we have activated IP anonymization on this website, however, your IP address is shortened beforehand by Google within Member States of the European Union. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. We have also concluded a data processing agreement with Google Inc. (USA) pursuant to Art. 28 GDPR. Accordingly, Google may use all information strictly for the specific purpose of evaluating the use of our website on our behalf and compiling reports on website activity.
You can object to this processing at any time. Please use one of the following options:
- You can prevent the storage of cookies through an appropriate setting in your browser software; however, please note that in this case you may not be able to use all functions of this website to their full extent.
- You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, and the processing of this data by Google, by downloading and installing the browser plug-in available at the following link (http://tools.google.com/dlpage/gaoptout?hl=en).
- You can additionally prevent tracking by Google Analytics by clicking the following link. An opt-out cookie will be set, permanently preventing the future collection of your data when visiting this website:
Click here to object to the processing of your data by Google Analytics.
On this website, we use a technical process to track which advertisement, search term, or campaign led a visitor to our website, when that visitor subsequently fills out a contact or inquiry form.
Data collected: When the website is accessed via an advertisement, the following identifiers contained in the URL are read: the Google Click ID (gclid) as well as campaign parameters (source, medium, campaign name, ad content, search term, ad network) and the first page visited (landing page URL).
Storage: This data is stored in the local storage of the browser you are using – not on our servers. It is stored for a maximum of 60 days and is automatically deleted afterward. The first recorded advertising source is stored (first-touch attribution); if you visit our site again later via a different ad, the originally stored attribution is not overwritten.
Linking with Form Data: If you fill out one of our contact forms within this period, the stored advertising identifiers are automatically transmitted to us together with the personal data you provide in the form (e.g., name, email address, message) and stored in connection with your inquiry.
Purpose: This processing serves to measure the success of our Google Ads campaigns and to optimize our advertising activities (conversion tracking). It allows us to track which ads lead to contact inquiries.
Disclosure to Third Parties: The attribution of form submissions to advertising campaigns additionally takes place via Google Tag Manager to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and/or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as part of Google Ads and Google Analytics 4. This may result in data being transferred to the USA; Google has self-certified under the EU-U.S. Data Privacy Framework.
Legal Basis: Processing takes place exclusively on the basis of your consent (Art. 6(1)(a) GDPR), which you can grant via our cookie consent banner. Without your consent, no storage or transmission of these advertising identifiers takes place. You may withdraw your consent at any time with effect for the future via the cookie settings link [insert link].
Retention Period with Us: The advertising identifiers transmitted as part of a form submission are stored together with your inquiry in accordance with our general retention periods for contact inquiries.
The data controller has integrated Jetpack on this website. Jetpack is a WordPress plug-in that provides additional functions to the operator of a website built on WordPress. Among other things, Jetpack allows the website operator to get an overview of the site’s visitors. By displaying related posts and publications, or offering the ability to share content on the site, it can also help increase visitor numbers. Jetpack also includes security features, so that a website using Jetpack is better protected against brute-force attacks. Jetpack also optimizes and speeds up the loading of images embedded on the website.
The operating company of the Jetpack plug-in for WordPress is Automattic Inc., 132 Hawthorne Street, San Francisco, CA 94107, USA. The operating company uses the tracking technology of Quantcast Inc., 201 Third Street, San Francisco, CA 94103, USA.
Jetpack sets a cookie on the data subject’s information technology system. What cookies are has already been explained above. Each time one of the individual pages of this website, which is operated by the data controller and on which a Jetpack component has been integrated, is accessed, the internet browser on the data subject’s information technology system is automatically prompted by the respective Jetpack component to transmit data to Automattic for analysis purposes. As part of this technical process, Automattic obtains knowledge of data that is subsequently used to create an overview of website visits. The data obtained in this way is used to analyze the behavior of the data subject who has accessed the data controller’s website, and is evaluated with the aim of optimizing the website. The data collected via the Jetpack component is not used to identify the data subject without prior express consent from the data subject. The data is also disclosed to Quantcast. Quantcast uses the data for the same purposes as Automattic.
As described above, the data subject can prevent our website from setting cookies at any time by means of an appropriate setting of the internet browser used, and thereby permanently object to the setting of cookies. Such a setting of the internet browser used would also prevent Automattic/Quantcast from setting a cookie on the data subject’s information technology system. In addition, cookies already set by Automattic can be deleted at any time via the internet browser or other software programs.
Furthermore, the data subject has the option of objecting to and preventing the collection of data generated by the Jetpack cookie relating to the use of this website, as well as the processing of this data by Automattic/Quantcast. To do so, the data subject must click the opt-out button at the link https://www.quantcast.com/opt-out/, which sets an opt-out cookie. The opt-out cookie set by the objection is stored on the information technology system used by the data subject. If the cookies on the data subject’s system are deleted after an objection, the data subject must visit the link again and set a new opt-out cookie.
However, once the opt-out cookie is set, it is possible that the data controller’s websites may no longer be fully usable by the data subject.
Automattic’s applicable privacy policy is available at https://automattic.com/privacy/. Quantcast’s applicable privacy policy is available at https://www.quantcast.com/privacy/. Data processing takes place on the basis of Art. 6(1)(1)(f) GDPR (interest in increasing our reach and protection against brute-force attacks).
Source: The section on Jetpack for WordPress was created using the privacy policy generator of DGD Deutsche Gesellschaft für Datenschutz GmbH, which acts as an External Data Protection Officer in Landshut, in cooperation with IT and Data Protection Law Attorney Christian Solmecke.
We use the lead-generation service of Leadinfo B.V., Rotterdam, Netherlands. This service identifies visits from companies to our website based on IP addresses and shows us publicly available information about them, such as company names or addresses. In addition, Leadinfo sets two first-party cookies to evaluate user behavior on our website and processes domains from form entries (e.g., “leadinfo.com”) in order to correlate IP addresses with companies and improve its services. Further information can be found at www.leadinfo.com. You can opt out on this page: www.leadinfo.com/en/opt-out. If you opt out, your data will no longer be collected by Leadinfo.
LeadFeeder / Pressebox Tracking
Nature and Purpose of Processing
We use the tracking service LeadFeeder from LeadFeeder Oy, Mikonkatu 17 C, 00100 Helsinki, Finland, to analyze corporate visitors to our website. LeadFeeder allows us to identify which companies visit our website and which content they view. This serves to optimize our marketing and sales activities.
Legal Basis
Processing takes place on the basis of your consent under Art. 6(1)(a) GDPR and Section 25(1) of the German Telecommunications and Telemedia Data Protection Act (TTDSG).
Recipient
LeadFeeder Oy, Finland. LeadFeeder may use subcontractors who may process personal data outside the EU/EEA as well.
Data Processed
– IP address
– Pages visited (URLs)
– Time of visit
– Browser information
– Operating system
– Referrer URL
– Identification of the visiting company (via IP address)
Retention Period
Data is stored for a maximum of 12 months.
Transfer to Third Countries
LeadFeeder may process data in countries outside the EU/EEA. The transfer takes place on the basis of the European Commission’s Standard Contractual Clauses under Art. 46(2)(c) GDPR.
Your Rights
You have the right to access, rectification, erasure, restriction of processing, data portability, and objection under Art. 15-21 GDPR.
Withdrawal of Consent
You may withdraw your consent at any time with effect for the future by adjusting your cookie settings or disabling tracking via our cookie banner.
Further Information
Further information on data protection at LeadFeeder can be found in LeadFeeder’s privacy policy: https://www.leadfeeder.com/privacy/
When your personal data is processed, the GDPR grants you, as a website user, certain rights:
- Right of access (Art. 15 GDPR):
You have the right to obtain confirmation as to whether personal data concerning you is being processed; if so, you have the right to access that personal data and to the information set out in detail in Art. 15 GDPR. - Right to rectification and erasure (Art. 16 and 17 GDPR):
You have the right to request the immediate rectification of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
You also have the right to request that personal data concerning you be erased without delay, provided one of the grounds set out in detail in Art. 17 GDPR applies, for example if the data is no longer necessary for the purposes pursued. - Right to restriction of processing (Art. 18 GDPR):
You have the right to request the restriction of processing where one of the conditions set out in Art. 18 GDPR is met, for example if you have objected to processing, for the duration of any verification. - Right to data portability (Art. 20 GDPR):
In certain cases, set out in detail in Art. 20 GDPR, you have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format, or to request that this data be transmitted to a third party. - Right to object (Art. 21 GDPR):
Where data is collected on the basis of Art. 6(1)(f) (data processing to safeguard legitimate interests), you have the right, on grounds relating to your particular situation, to object at any time to the processing. We will then no longer process the personal data, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. - Right to lodge a complaint with a supervisory authority
You have the right, under Art. 77 GDPR, to lodge a complaint with a supervisory authority if you consider that the processing of data concerning you violates data protection law. This right may be asserted in particular with a supervisory authority in the Member State of your habitual residence, place of work, or the place of the alleged infringement.
