Legal Information

4. Overview of processing

The following overview summarises the types of data processed and the purposes of their processing and refers to the data subjects.

4.1. Types of data processed

• Inventory data
• Location
• Contact details
• Content data
• Usage
• Meta, communication and procedural data

4.2. Categories of data subjects

• Communication
• User

4.3. Purposes of processing

• Communication
• Direct marketing
• Reach measurement
• Organisational and administrative procedures
• Feedback

5. Relevant legal bases

Relevant legal bases under the GDPR: Below you will find an overview of the legal bases of the GDPR on the basis of which we process personal data. Please note that in addition to the regulations of the GDPR, national data protection regulations may apply in your or our country of residence or domicile. Furthermore, if more specific legal bases are relevant in individual cases, we will inform you of these in the privacy policy.

• Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR) - The data subject has given his or her consent to the processing of personal data concerning him or her for a specific purpose or purposes
• Performance of a contract and pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR) - Processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject prior to entering into a contract.
• Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR) - the processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, provided that the interests, fundamental rights and freedoms of the data subject which require the protection of personal data are not overridden.

National data protection regulations in Germany: In addition to the data protection regulations of the GDPR, national regulations on data protection apply in Germany. These include, in particular, the Act on Protection against Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). In particular, the BDSG contains special provisions on the right to information, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases, including profiling. In addition, state data protection laws of the individual federal states can be applied.

Note on the applicability of the GDPR and the Swiss Data Protection Act: This data protection notice serves to provide information in accordance with the Swiss Data Protection Act as well as the General Data Protection Regulation (GDPR). For this reason, we ask you to note that due to the broader spatial application and comprehensibility, the terms of the GDPR are used. In particular, instead of the terms "processing" of "personal data", "overriding interest" and "particularly sensitive personal data" used in the Swiss FADP, the terms "processing" of "personal data" as well as "legitimate interest" and "special categories of data" used in the GDPR are used. However, the legal meaning of the terms will continue to be determined in accordance with the Swiss FADP within the scope of the Swiss FADP.

6. Transfer of personal data

As part of our processing of personal data, it may be transmitted to or disclosed to other bodies, companies, legally independent organisational units or persons. The recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are integrated into a website. In such cases, we observe the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data that serve to protect your data.

Data transfers within the organization: We may transfer personal information to or provide access to other departments or entities within our organization. If the data is passed on for administrative purposes, it is based on our legitimate business and business interests or if it is necessary for the fulfilment of our contractual obligations or if the consent of the data subjects or a legal permission has been obtained.

7. International data transfers

Data processing in third countries: If we process data in a third country (i.e. outside the European Union (EU), the European Economic Area (EEA)) or if the processing takes place in the context of the use of third-party services or the disclosure or transfer of data to other persons, bodies or companies, this will only take place in accordance with the legal requirements. If the level of data protection in the third country has been recognised by means of an adequacy decision (Art. 45 GDPR), this serves as the basis for the data transfer. Otherwise, data transfers only take place if the level of data protection is otherwise ensured, in particular by means of standard contractual clauses (Art. 46 para. 2 lit. c) GDPR), explicit consent or in the case of contractual or legally required transfer (Art. 49 para. 1 GDPR). In addition, we will inform you of the basis of the third-country transfer for the individual providers from the third country, with the adequacy decisions taking precedence as the basis. Information on third-country transfers and existing adequacy decisions can be found in the EU Commission's information service: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en?prefLang=de. As part of the so-called "Data Privacy Framework" (DPF), the EU Commission has also recognized the level of data protection as secure for certain companies from the USA as part of the adequacy decision of 10.07.2023. The list of certified companies as well as further information about the DPF can be found on the website of the US Department of Commerce at https://www.dataprivacyframework.gov/. As part of the data protection notice, we will inform you which service providers we use are certified under the Data Privacy Framework.

8. Rights of data subjects

Rights of data subjects under the GDPR: As data subjects, you have various rights under the GDPR, which result in particular from Art. 15 to 21 GDPR:

• Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out on the basis of Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions. If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of the personal data concerning you for the purpose of such advertising; this also applies to profiling, insofar as it is related to such direct advertising.
• Right to withdraw consent: You have the right to revoke consent at any time.
• Right of access: You have the right to request confirmation as to whether the data in question is being processed and to access this data, as well as to obtain further information and a copy of the data in 
accordance with the legal requirements.
• Right to rectification: In accordance with the legal requirements, you have the right to request the 
completion of the data concerning you or the correction of the inaccurate data concerning you.
• Right to erasure and restriction of processing: In accordance with the legal requirements, you have the right to demand that data concerning you be deleted immediately, or alternatively to demand a 
restriction of the processing of the data in accordance with the legal requirements.
• Right to data portability: You have the right to receive data concerning you that you have provided to us in a structured, commonly used and machine-readable format in accordance with the legal requirements, 
or to request that it be transmitted to another controller.
• Complaint to supervisory authority: Without prejudice to any other administrative or judicial remedy, 
you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you believe that the processing of personal data concerning you violates the requirements of the GDPR.

9. Deletion, blocking, correction of personal data

We will retain your personal data for as long as it is necessary to fulfil our contractual or legal obligations. Your personal data will then be deleted as soon as we no longer need it and no law requires us to store it further. Personal data that we process on the basis of legitimate business interests will be stored until the purpose or task has been completed. Your personal data will not be deleted as long as it is needed to assert, exercise or defend legal claims, or as long as you have given your consent to do so.

10. Use of cookies

The term "cookies" refers to functions that store information on and read information from users' devices. Cookies can also be used in relation to various concerns, such as for the purposes of the functionality, security and convenience of online offers as well as the creation of analyses of visitor flows. We use cookies in accordance with the law. To do this, we obtain the consent of the users in advance, if necessary. If consent is not necessary, we rely on our legitimate interests. This applies if the storage and reading of information is essential in order to be able to provide explicitly requested content and functions. This includes, for example, the storage of settings and the assurance of the functionality and security of our online offer. Consent can be revoked at any time. We provide clear information about their scope and which cookies are used.

Information on data protection legal bases: Whether we process personal data using cookies depends on consent. If consent is given, it serves as the legal basis. Without consent, we rely on our legitimate interests, which are explained above in this section and in the context of the relevant services and procedures.

Storage period: With regard to the storage period, a distinction is made between the following types of cookies:

• Temporary cookies (also: session or session cookies): Temporary cookies are deleted at the latest after a user has left an online offer and closed their device (e.g. browser or mobile application).
• Persistent cookies: Persistent cookies remain stored even after the device is closed. For example, the log-in status can be saved and preferred content can be displayed directly when the user visits a website again. The user data collected with the help of cookies can also be used to measure reach. Unless we provide users with explicit information about the type and storage period of cookies (e.g. as part of obtaining consent), they should assume that they are permanent and that they can be stored for up to two years.

Information on the storage period of the respective cookies can be found in our Cookie Policy.

General information on revocation and objection (opt-out):Users can revoke the consent they have given at any time and also declare an objection to the processing in accordance with the legal requirements, also by means of the privacy settings of their browser.

• Types of data processed: Meta, communication and procedural data (e.g. IP addresses, times, identification numbers, persons involved).
• Data subjects: Users (e.g. website visitors, users of online services).
• Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

Further information on processing processes, procedures and services:

• Processing of cookie data on the basis of consent: We use a consent management solution in which the consent of the user is obtained for the use of cookies or for the procedures and providers specified in the consent management solution. This procedure serves to obtain, record, manage and revoke consent, in particular with regard to the use of cookies and similar technologies used to store, read and process information on users' end devices. As part of this process, users' consents are obtained for the use of cookies and the related processing of information, including the specific processing and providers mentioned in the consent management procedure. Users also have the option of managing and withdrawing their consents. The declarations of consent are stored in order to avoid a new query and to be able to provide proof of consent in accordance with the legal requirements. The storage takes place on the server side and/or in a cookie (so-called opt-in cookie) or by means of comparable technologies in order to be able to assign the consent to a specific user or his device. Unless specific information is available on the providers of consent management services, the following general information applies: The duration of the storage of consent is up to two years. This involves the creation of a pseudonymous user identifier that is stored together with the time of consent, information on the scope of consent (e.g. relevant categories of cookies and/or service providers), as well as information about the browser, the system and the device used; Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

11. Contact and request management

When contacting us (e.g. by post, contact form, e-mail, telephone or via social media) as well as in the context of existing user and business relationships, the information of the enquiring persons will be processed insofar as this is necessary to answer the contact requests and any requested measures.

• Types of data processed: inventory data (e.g. full name, residential address, contact information, customer number, etc.); Contact details (e.g. postal and email addresses or telephone numbers); Content data (e.g., textual or pictorial news and posts, and information about them, such as authorship or time of creation); Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and features). Metalogical, communication and procedural data (e.g. IP addresses, times, identification numbers, persons involved).
• Data subjects: Communication partners.
• Purposes of processing: communication; organisational and administrative procedures; Feedback (e.g. collecting feedback via online form). Provision of our online offer and user-friendliness.
• Retention and deletion: Deletion as specified in the section “Deletion, blocking, correction of personal 
data".
• Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR). Performance of a contract and 
pre-contractual enquiries (Art. 6 para. 1 sentence 1 lit. b) GDPR).

12. Newsletters and electronic notifications

We send newsletters, e-mails and other electronic notifications (hereinafter referred to as "newsletters") exclusively with the consent of the recipients or on a legal basis. If the content of the newsletter is mentioned as part of a registration, this content is decisive for the consent of the user. To subscribe to our newsletter, it is usually sufficient to enter your e-mail address. However, in order to be able to offer you a personalized service, we may ask you to provide your name for a personal address in the newsletter or for further information if this is necessary for the purpose of the newsletter.

Deletion and restriction of processing:If you unsubscribe from our newsletter, the data you provide will no longer be used/evaluated by us and you will not receive any further promotional e-mails from us. The processing of this data is limited to the purpose of a potential defence against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time. In the event of obligations to permanently observe contradictions, we reserve the right to store the e-mail address in a blacklist (so-called "blocklist") for this purpose alone.

The registration process is recorded on the basis of our legitimate interests for the purpose of proving that it is running properly. If we commission a service provider to send e-mails, this is done on the basis of our legitimate interests in an efficient and secure mailing system.

Contents:

With the newsletter we inform you about us and our products.

• Types of data processed: inventory data (first and last name); Contact details (e-mail address); Metalogical, communication and procedural data (e.g. IP addresses, times, identification numbers, persons involved). Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and features).
• Data subjects: Communication partners.
• Purposes of processing: Direct marketing (e.g. by email).
• Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).
• Opt-out: You can unsubscribe from receiving our newsletter at any time, i.e. Withdraw your consent or 
object to further receipt. You will find a link to unsubscribe from the newsletter either at the end of each newsletter or you can use one of the contact options listed above, preferably e-mail, for this purpose.

Further information on processing processes, procedures and services:

• Measurement of opening and click rates: The newsletters contain a so-called "web beacons", i.e. a pixel-sized file that is retrieved from our or its server when the newsletter is opened, if we use a shipping service provider. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and the time of the retrieval are initially collected. This information is used for the technical improvement of our newsletter on the basis of the technical data or the target groups and their reading behaviour on the basis of their access locations (which can be determined with the help of the IP address) or the access times. This analysis also includes determining whether and when the newsletters are opened and which links are clicked. Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR).

13. Web analysis, monitoring and optimization

Web analysis (also referred to as "reach measurement") is used to evaluate the flow of visitors to our online offer and can include behaviour, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of the reach analysis, we can, for example, see at what time our online offer or its functions or content are used most often, or invite them to reuse. It is also possible for us to understand which areas need optimization.

In addition to web analysis, we may also use test procedures to test and optimize different versions of our online offer or its components. Unless otherwise stated below, profiles, i.e. data combined into a usage process, may be created for these purposes and information may be stored in a browser or in an end device and then read. The information collected includes, in particular, websites visited and elements used there, as well as technical information such as the browser used, the computer system used and information on times of use. If users have consented to the collection of their location data vis-à-vis us or the providers of the services we use, the processing of location data is also possible.

In addition, the IP addresses of the users are stored. However, we use an IP masking process (i.e. pseudonymization by shortening the IP address) to protect users. In general, in the context of web analysis, A/B testing and optimization, no clear data of the users (such as e-mail addresses or names) is stored, but pseudonyms. This means that we, as well as the providers of the software used, do not know the actual identity of the users, but only the information stored in their profiles for the purpose of the respective procedures.

Information on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, the user data will be processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.

• Types of data processed: Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and features). Metalogical, communication and procedural data (e.g. IP addresses, times, identification numbers, persons involved).
• Data subjects: Users (e.g. website visitors, users of online services).
• Purposes of processing: Reach measurement (e.g. access statistics, recognition of returning visitors); Profiles with user-related information (creating user profiles). Provision of our online offer and user- friendliness.
• Retention and deletion: Deletion as indicated in the section "Deletion, blocking, rectification of personal data. Storing cookies for up to 2 years (Unless otherwise specified, cookies and similar storage methods may be stored on users' devices for a period of two years).
• Security measures: IP masking (pseudonymization of the IP address).
• Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Legitimate interests (Art. 6 para. 1 sentence 
1 lit. f) GDPR).

Further information on processing processes, procedures and services:

• Google Analytics: We use Google Analytics to measure and analyse the use of our online offer on the basis of a pseudonymous user identification number. This identification number does not contain any unique data, such as names or email addresses. It is used to assign analysis information to a terminal device in order to identify which content users have accessed within one or more usage processes, which search terms they have used, accessed again or interacted with our online offering. The time of use and its duration are also stored, as well as the sources of the users who refer to our online offer and technical aspects of their devices and browsers. Google Analytics does not log or store individual IP addresses for EU users. However, Analytics provides rough geographic location data by deriving the following metadata from IP addresses: city (and the city's inferred latitude and longitude), continent, country, region, subcontinent (and ID-based counterparts). In the case of EU data traffic, the IP address data is used exclusively for this derivation of geolocation data before it is immediately deleted. They are not logged, are not accessible and are not used for other purposes. When Google Analytics collects metrics, all IP queries are performed on EU-based servers before the traffic is routed to Analytics servers for processing
  Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irleand
  Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR)
  Website: https://marketingplatform.google.com/intl/de/about/analytics/
  Security measures: IP masking (pseudonymization of the IP address)
  Privacy Policy: https://policies.google.com/privacy
  Data Processing Agreement: https://business.safety.google/adsprocessorterms/
  Basis for third-country transfers: Data Privacy Framework (DPF)
  Opt-out: Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=de, settings for the display of advertisements: https://myadcenter.google.com/personalizationoff
  Further information: https://business.safety.google/adsservices/ (types of processing and data processed)
• Google Tag Manager: We use Google Tag Manager, a software from Google that allows us to manage so-called website tags centrally via a user interface. Tags are small pieces of code on our website that are used to record and analyse visitor activity. This technology helps us to improve our website and the content offered on it. The Google Tag Manager itself does not create user profiles, does not store cookies with user profiles and does not perform independent analyses. Its function is limited to simplifying and making it more efficient to integrate and manage the tools and services we use on our website. Nevertheless, when using Google Tag Manager, the IP address of the users is transmitted to Google, which is necessary for technical reasons to implement the services we use. Cookies can also be set. However, this data processing only takes place if services are integrated via the Tag Manager. For more detailed information on these services and their data processing, please refer to the further sections of this privacy policy
  Service Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland;
  Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR)
  Website: https://marketingplatform.google.com
  Privacy Policy: https://policies.google.com/privacy
  Data Processing Agreement: https://business.safety.google/adsprocessorterms
  Basis for third-country transfers: Data Privacy Framework (DPF)

14. Presence in social networks (social media)

We maintain online presences within social networks and process user data in this context in order to communicate with the users active there or to offer information about us. We would like to point out that user data may be processed outside the area of the European Union. This can result in risks for users, for example, because it could make it more difficult to enforce user rights. Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on the user behaviour and the resulting interests of the users. The latter may in turn be used, for example, to place advertisements inside and outside the networks that presumably correspond to the interests of the users. Therefore, cookies are usually stored on the users' computers, in which the user's usage behaviour and interests are stored. In addition, data can also be stored in the user profiles regardless of the devices used by the users (in particular if they are members of the respective platforms and logged in there). For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the privacy policies and information provided by the operators of the respective networks. In the case of requests for information and the assertion of data subject rights, we would also like to point out that these can be asserted most effectively with the providers. Only the latter have access to the user data and can directly take appropriate measures and provide information. If you still need help, you can contact us.

• Types of data processed: contact details (e.g. email addresses or telephone numbers); Content data (e.g., textual or pictorial messages and posts, and information about them, such as authorship or time of creation). Usage data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and features).
• Data subjects: Users (e.g. website visitors, users of online services).
• Purposes of processing: communication; Feedback (e.g. collecting feedback via online form). Public 
relations.
• Retention and deletion: Deletion as indicated in the section "Deletion, blocking, rectification of personal 
data".
• Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).

Further information on processing processes, procedures and services:

• LinkedIn: Social Network - We are jointly responsible with LinkedIn Ireland Unlimited Company for the collection (but not the further processing) of visitor data, which is used to create the "page insights" (statistics) of our LinkedIn profiles. This data includes information about the types of content users view or interact with, as well as the actions they take. It also collects details about the devices used, such as IP addresses, operating system, browser type, language settings, and cookie data, as well as information from user profiles, such as job function, country, industry, hierarchical level, company size, and employment status. Data protection information on the processing of user data by LinkedIn can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy. 
We have entered into a special agreement with LinkedIn Ireland ("Page Insights Joint Controller Addendum”, https://legal.linkedin.com/pages-joint-controller-addendum), which regulates in particular what security measures LinkedIn must observe and in which LinkedIn has agreed to comply with the rights of the data subjects (i.e. users can, for example, direct requests for information or deletion to LinkedIn). The rights of users (in particular the right to information, deletion, objection and complaint to the competent supervisory authority) are not restricted by the agreements with LinkedIn. Joint responsibility is limited to the collection and transfer of the data to LinkedIn Ireland Unlimited Company, a company based in the EU. The further processing of the data is the sole responsibility of LinkedIn Ireland Unlimited Company, in particular with regard to the transmission of the data to the parent company LinkedIn Corporation in the USA:
  Service Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
  Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR)
  Website: https://www.linkedin.com
  Privacy Policy: https://www.linkedin.com/legal/privacy-policy
  Basis for third-country transfers: Data Privacy Framework (DPF)
  Opt-out: https://www.linkedin.com/psettings/guest-controls/retargetingopt-out
• Vimeo Video Player: Integrating a Video Player
  Service Provider: Vimeo Inc., Attention: Legal Department, 555 West 18th Street New York, New York 10011, USA
  Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR)
  Website: https://vimeo.com
  Privacy Policy: https://vimeo.com/privacy
  Data Processing Agreement: https://vimeo.com/enterpriseterms/dpa
  Basis for third-country transfers: Standard Contractual Clauses: (https://vimeo.com/enterpriseterms/dpa)
• Xing: Social Network
  Service Provider: New Work SE, Am Strandkai 1, 20457 Hamburg, Germany
  Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR)
  Website: https://www.xing.com/
  Privacy Policy: https://privacy.xing.com/de/datenschutzerklaerung
• YouTube: Social network and video platform
  Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
  Legal basis: Legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR)
  Privacy Policy: https://policies.google.com/privacy
  Basis for third-country transfers: Data Privacy Framework (DPF)
  Opt-out: https://myadcenter.google.com/personalizationoff

15. Plug-ins and embedded functions and content

We integrate functional and content elements into our online offer that are obtained from the servers of their respective providers (hereinafter referred to as "third-party providers"). This can be, for example, graphics, videos or city maps (hereinafter referred to uniformly as "content"). The integration always requires that the third-party providers of this content process the IP address of the users, as they would not be able to send the content to their browser without an IP address. The IP address is therefore required for the display of these contents or functions. We make every effort to use only content whose respective providers use the IP address only for the delivery of the content. Third-party service providers may also use pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. The "pixel tags" can be used to evaluate information, such as visitor traffic to the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information on the browser and operating system, referring websites, the time of visit and other information on the use of our online offer, but may also be combined with such information from other sources.

Information on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for data processing is permission. Otherwise, the user data will be processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to draw your attention to the information on the use of cookies in this privacy policy.

• Types of Data Processed: Usage Data (e.g., page views and dwell time, click paths, usage intensity and frequency, device types and operating systems used, interactions with content and features); Metalogical, communication and procedural data (e.g. IP addresses, time details, identification numbers, persons involved); Location data (information about the geographical location of a device or person); Contact details (e.g. postal and email addresses or telephone numbers). Content data (e.g., textual or pictorial messages and posts, and information about them, such as authorship or time of creation).
• Data subjects: Users (e.g. website visitors, users of online services).
• Purposes of processing: Provision of our online offer and user-friendliness.
• Retention and deletion: Deletion as indicated in the section "Deletion, blocking, rectification of personal 
data". Storing cookies for up to 2 years (Unless otherwise specified, cookies and similar storage methods 
may be stored on users' devices for a period of two years).
• Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR). Legitimate interests (Art. 6 para. 1 sentence 
1 lit. f) GDPR).

Further information on processing processes, procedures and services:

• Google Maps: We integrate the maps of the "Google Maps" service of the provider Google. The data processed may include, in particular, IP addresses and location data of users
  Service Provider: Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland
  Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR)
  Website: https://mapsplatform.google.com/
  Privacy Policy: https://policies.google.com/privacy
  Basis for third-country transfers: Data Privacy Framework (DPF)
• Hotjar Heat Maps: Hotjar is a session recording and heat mapping service. We use Hotjar to better understand the needs of our users and to optimize the offer and experience on this website. With the help of Hotjar's technology, we get a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click, what they like and dislike, etc.) and this helps us to align our offer with our users' feedback. Hotjar works with cookies and other technologies to collect data about the behaviour of our users and about their devices, in particular IP address of the device (collected and stored during your website use only in anonymized form), screen size, device type (unique device identifiers), information about the browser used, location (country only), preferred language for viewing our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf
  Service Provider: Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta
  Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR)
  Recipients / categories of recipients: The recipients / categories of recipients of the collected data can be found in our cookie management tool.
  Daten können Sie unserem Cookie Management Tool entnehmen.
  Duration of data storage: You can find out how long the cookies are stored on your device in our cookie policy.
• LinkedIn Insight Tag: LinkedIn Conversion Tracking is a retargeting and analysis tool powered by the LinkedIn Insight Tag. The LinkedIn Insight tag allows us to collect data about visits to our website, including URL, referrer URL, IP address, device and browser properties, and timestamps. This data is encrypted, IP addresses are shortened, and members' unique IDs are removed within seven days to pseudonymise the data. LinkedIn does not share any personal data with us, but only provides aggregated reports on website audience and ad performance. LinkedIn also offers retargeting for website visitors, so that we can use this data to display targeted advertising outside of our website without identifying the member.
  
Service provider: LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
  Legal basis: Consent (Art. 6 para. 1 sentence 1 lit. a) GDPR); You can find more information about data protection at LinkedIn here.
  Recipients / categories of recipients: The recipients / categories of recipients can be found in our cookie management tool.
  Duration of data storage: You can find out how long the cookies are stored on your device in our Cookie Policy entnehmen.
  Objection options: You can object to LinkedIn conversion tracking specifically by setting an opt-out cookie that will remain on your device until you delete cookies. You can deactivate the LinkedIn cookie at this link LinkedIn members can control the use of their personal information for advertising purposes in your account settings.
  
  This Privacy Policy is valid in its current version. Changes in legal or regulatory requirements may make it necessary to adapt this information.