Thank you for the interest you have shown in our website and the services we offer. We attach great importance to protecting your personal details. We would like to provide detailed information below on the data we collect when you visit our website and use our services and how we subsequently process and use these, as well as the accompanying technical and organizational measures we adopt to protect your privacy.
(1) This Privacy Notice provides information about the nature, scope and purpose of the processing of personal data in connection with our online services and the affiliated web pages, functions and content.
(2) As regards the terms used, e. g. “personal data” or their “processing”, please refer to the definitions in Art. 4 of the General Data Protection Regulation (GDPR).
(3) The term “user” includes all categories of persons affected by data processing. This includes our business partners, (potential) customers, and other visitors of our websites. The terms used, such as “user”, are used in a gender-neutral manner.
(4) The term “user” includes all categories of persons affected by data processing. This includes our business partners, (potential) customers, and other visitors of our websites. The terms used, such as “user”, are used in a gender-neutral manner.
(5) The personal data of users are processed for the following purposes in particular:
(6) We only process personal data of the users in strict compliance with the relevant data protection provisions. This means that the data of users are only processed if a statutory permission applies. In particular, this is the case where data processing is necessary or mandatory by law to provide our contractual services (e.g. to process contracts and orders) and for our online services, where the users granted permission or where processing is based on our legitimate interest. Legitimate interests can be the analysis, optimisation, security and the economic operation of our website.
(7) We point out that the legal basis for consents is Art. 6(1) point (a) and Art. 7 GDPR, the legal basis for the processing for performance of our services and execution of contractual measures Art. 6(1) point (b) GDPR, the legal basis for the processing for compliance with our legal obligation Art. 6(1) point (c) GDPR and the legal basis for the processing in order to safeguard our legitimate interests Art. 6(1) point (f) GDPR.
(1) In accordance with Art. 32 of the GDPR, taking into account the state of the art, the cost of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons, we implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk. This is to protect the data processed by us especially against accidental or deliberate manipulation, loss, deletion or unauthorised third-party access. The safety measures also include the encrypted transfer of data between your browser and our server.
(2) In addition, we have put procedures in place that ensure compliance with the rights of data subjects, the erasure of data and a reaction to hazards to data security.
(1) Where in the context of processing we do disclose or transmit your data to other persons and companies (processors or third parties) or otherwise give third parties access to the data, this will only be on the basis of a legal permission. This apples, for example, to a transmission of data to third parties pursuant to Art. 6(1) point (b) GDPR, if this is necessary for contract fulfilment, if you have granted consent (Art. 6(1) point (a), and Art. 7 GDPR), if a legal obligation so provides (Art. 6(1) point (c) GDPR) or based on our legitimate interests pursuant to Art. 6(1) point (f) GDPR (e.g. when using vicarious agents, web hosts, etc.).
(2) ) Where we process data in a third country (i.e. outside the European Union or the European Economic Area) or where we do so using third-party services or where such processing takes place subject to disclosure or transmission of data to third parties, this only takes place if the special conditions set out in Art. 44 et seqq. GDPR are met in addition. That means the processing is based on special safeguards, such as an official decision that the level of data protection corresponds to that of the EU, or in compliance with officially recognised special contractual commitments (so-called ‘standard contractual clauses’).
(3) If we commission third parties with the processing of data in terms of a so-called ‘data-processing contract’, this will be on the basis of Art. 28 of the GDPR.
(1) We will collect data on each access to the server where the service is hosted (referred to as server log files) based on our legitimate interests as defined by Art. 6(1) point (f) GDPR. These data are required for technical reasons to display our website for you and to ensure its stability and security. Access data in particular include the name of the web page visited, the file, the date and time of access, the volume of data transferred, a notification of successful access, the browser type and version used, the user’s operating system, the previously visited web page, and the IP address.
(2) Log file information shall be saved for a maximum of seven days for security reasons (e. g. clarification of acts of misuse or fraud) and shall be erased afterwards. Data which must be retained for longer periods for the purpose of evidence are exempted from erasure until the respective incident has been cleared up definitively.
(1) We process inventory, contact, contract, and content data in order to comply with our contractual obligations and services pursuant to Art. 6(1) point (b) GDPR. The entries which are marked as mandatory in online forms are required to conclude the contract.
(2) User data can be saved in our customer relationship management system (“CRM system”). We use the CRM System Pipedrive of Pipedrive OÜ, Paldiski mnt 80, Tallinn 10617, Estonia, based on our legitimate interests (efficient and quick processing of customer enquiries and customer relationships) as well as on a contract for contract data processing pursuant to Art. 28 GDPR.
(3) Users that utilise our software service have to register and to create a user account from which they can, amongst others, access the license booked by them and their invoices. As part of the further registration process, your consent to our general terms and conditions and the perusal of our data protection declaration will be obtained. The data we collect is used exclusively to provide our products and services. The processing of the required mandatory information takes place for the purpose of providing our product for the fulfillment of the contract or for the execution of pre-contractual actions in accordance with Art. 6 (1) point b GDPR.
(4) As part of the use of our functions of registration and re-registration as well as the use of our online services, we save the IP address and the time of the respective user action. The storage takes place on the basis of our legitimate interests in accordance with Art. Art. 6 (1) point (f) GDPR, as well as that of users to protect against misuse and other unauthorized use. This data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so. The data will be automatically deleted after 7 days.
(5) The registration data collected will be deleted as soon as processing is no longer necessary. This usually happens when you stop (terminate) using our offered product. However, we must observe tax and commercial retention periods. The erasure of data to provide contractually agreed services shall take place after expiry of statutory and comparable obligations. If statutory archiving obligations apply, the data shall be erased when these obligations expire (end of retention requirement acc. to commercial (6 years) or tax law (10 years)). Entries in any customer account remain there until they are deleted.
If you contact us by email, the user information is processed for the purpose of handling the contact request in accordance with Art. 6(1) point (b) GDPR. We delete the data collected in this context after their storage is no longer required, or limit processing if there are statutory retention obligations.
If you contact us using our contact forms, your e-mail address, your IP address and the date and time of contact will be collected. This data is stored and used for the purpose of answering your request or for contacting and the associated technical administration as well as for tracking in the event of misuse of our contact form.
In addition, we process your data voluntarily provided in the free text field. This can be, for example, your master data (names, addresses), contact details (email, telephone numbers) or other content data (text entries). The processing takes place to answer your inquiries and to communicate with you.
We process your data to fulfill the contract or to carry out pre-contractual measures in accordance with Art. 6 (1) point (b) GDPR, or based on our legitimate interest in accordance with Art. 6(1) point (f) GDPR to answer your request.
Your data will be deleted after your request has been processed, provided there are no statutory retention requirements.
When making an appointment, you have the option of registering for a meeting with one of our employees by selecting the meetings metadata (date, time, duration). We will inform you of the correct mandatory information when registering. We will confirm your first name, last name and email address. You have the option of entering further data e.g. of your organization, position, your own product interests or other content data.
The data is used for the purpose of answering our decisions and to meet the meeting with our employees. We have your data for the fulfillment of the contract or for the processing of pre-contractual handicapped Art. b) GDPR. 6 (1) sentence 1, point (f) GDPR to answer your questions.
We use HubSpot from the service provider HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA to send the invitation by e-mail; Website: https://www.hubspot.de; Data protection declaration: https://legal.hubspot.com/de/privacy-policy. We have concluded an agreement with the service providers on order processing in accordance with Art. 28 GDPR and the standard data protection clauses in accordance with Art. 46 para. 2 lit. d GDPR.
We process and store your data as long as it belongs to the fulfillment of purposes as for the contractor and the legislator. If the data is no longer required to fulfill these purposes, they will be deleted regularly unless it is necessary to continue processing it for a limited period (statutory retention requirements).
In the login area of our software service, certain users (e.g. consultants, vets) with access to the business of a user can leave corresponding comments. In this case, also the name of the commenting user is listed, but not published, since the comment is only intended for the specific user. When collecting log file information, also the IP address of the commenting user will be stored for 7 days; see section 4 of this privacy policy.
(1) On our site you have the option to register for our topic-related newsletters and mailings. To register, it is generally sufficient to provide your email address. To enable a personal address, we ask you to optionally give your first and / or last name. Which personal data will continue to be transmitted to us depends on the input mask used for this. If the content of a registration is specifically described, it is decisive for the consent of the user. By subscribing to our newsletter, you agree to the receipt and the procedures described.
(2) The newsletter and e-mails are sent on the basis of your consent in accordance with Art. 6 (1) point (a) GDPR (possibly in conjunction with § 7 (2) No. 3 UWG) or, if consent is not required, on the basis of our legitimate interests in direct marketing in accordance with Art. 6 (1) point (f) GDPR in conjunction with Section 7 (3) UWG, if and insofar as this is legal, e.g. in the case of existing customer advertising, is allowed.
(3) We use HubSpot from the service provider HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA for sending the emails; Website: https://www.hubspot.de; Data protection declaration: https://legal.hubspot.com/de/privacy-policy. We have concluded an agreement with the service providers on order processing in accordance with Art. 28 GDPR and the standard data protection clauses in accordance with Art. 46 para. 2 lit. d GDPR.
(4) The registration for our newsletter basically takes place in a so-called double opt-in procedure. This means that after the registration you will receive an email asking you to confirm your registration. This confirmation is necessary so that nobody can register with someone else´s email address. The registrations for the newsletter are logged in order to be able to demonstrate the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as the IP address. Changes to your data stored by the shipping service provider are also logged.
The registration process is based on our legitimate interests in accordance with Art. 6 (1) point (f) GDPR recorded to demonstrate that it was carried out in accordance with the law. The logging of the registration process is done for the purpose of demonstrating its proper process.
(5) You can revoke your consent to receiving our newsletter or emails at any time with future effect by confirming the unsubscribe link at the end of each email.
(6) Based on our legitimate interests, we can save the e-mail addresses we have withdrawn for up to three years before we delete them in order to be able to prove a previously given consent. The processing of this data is limited to the purpose of a possible defense against claims. An individual request for cancellation is possible at any time, provided that the previous consent is confirmed. In the event of obligations to permanently observe contradictions, we reserve the right to save the email address for this purpose only in a blacklist.
(1) Our newsletters and mailings contain a so-called “web beacon”, that means a pixel-sized file that is retrieved when the email is opened by the server of our shipping service provider. As part of this retrieval, technical information such as information about the browser and Your system, as well as your IP address and the time of access.
(2) ) This information is used for the technical improvement of our newsletter and our mailing based on the technical data or the target groups and their reading behavior based on their location (which can be determined using the IP address) or the access times. This analysis also includes determining whether the emails are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual recipients. However, it is neither our aim nor, if used, that of the shipping service provider to observe individual users. The evaluations rather serve us to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.
(3) For the analysis we use HubSpot from the service provider HubSpot, Inc., 25 First St., 2nd floor, Cambridge, Massachusetts 02141, USA; Website: https://www.hubspot.de; Data protection declaration: https://legal.hubspot.com/de/privacy-policy. We have concluded an agreement with the service providers on order processing in accordance with Art. 28 GDPR and the standard data protection clauses in accordance with Art. 46 para. 2 lit. d GDPR.
(4) The evaluation of the newsletter and the measurement of success take place, subject to an express consent of the users following Art. 6 (1) point (a) GDPR, based on our legitimate interests in accordance with Art. 6 (1) point (f) GDPR for the purpose of using a user-friendly and secure newsletter system that serves both our business interests and the expectations of the users.
(5) A separate revocation of the success measurement is unfortunately not possible, in this case the entire subscription to the newsletter must be canceled or objected to.
Click here to update the cookie settings:
[borlabs-cookie type=”btn-cookie-preference” title=”Change cookie settings”/]
(1) We use cookie technology for our website. Cookies are small text files that are stored on your end device, as assigned accordingly by the browser that you use, which allow the entity that places the cookie (in this case, us) to then receive certain information. Cookies cannot run programs or transmit viruses to your computer. Their purpose is to make the overall web offering more user-friendly and effective.
(2) We use transient and persistent cookies. Transient cookies are automatically erased when you close your browser. These include, in particular, session cookies. These store what is referred to as the “session ID”, by which various requests from your browser can be assigned to the shared session. This will allow your end device to be recognised if you return to our website. Session cookies will be erased as soon as you close your browser. Persistent cookies are stored by your end device between browser sessions so that your interest or actions can be saved across the use of several websites. Persistent cookies are deleted automatically after a set period. We do not utilise our own persistent cookies; this is handled by our technology partners to measure coverage and for marketing purposes and the users will be given information on this separately in this privacy policy.
(3) You can erase the cookies in the security settings of your browser at any time. Furthermore, you can configure your browser setting according to your requirements and can, for example, decline the acceptance of third party cookies or any cookies at all. Please note that in this case, you may not be able to use all of the functions of our website.
(4) You can object to the use of cookies for coverage measurement and marketing purposes via the deactivation page of the network advertising initiative (http://optout.networkadvertising.org/) and also the US web page (http://www.aboutads.info/choices) or the European web page (http://www.youronlinechoices.com/uk/your-ad-choices/).
(1) With your consent pursuant to Art. 6 para. 1 lit. a) GDPR, we use Google Analytics, a web analysis service of Google Ireland Limited (“Google”). Google uses cookies.
(2) Google Analytics uses cookies or comparable technologies to process usage data (e.g. visited websites, access times) and communication data (e.g. IP addresses, device information) on our behalf in order to evaluate the use of our online service, compile reports on activities within our online service and provide other services associated with the use of our online service. It is also possible to create pseudonymous user profiles.
(3) Google Analytics is used exclusively by means of IP anonymisation. All processed personal data is deleted or completely anonymised after 14 months. We have concluded an agreement with Google for order processing in accordance with Art. 28 GDPR. Further information on the use of data by Google, setting and objection options, can be found in the Google data protection declaration and in the settings for the display of advertising by Google.
(4) We use Google Analytics in order to display the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offer or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) which we transmit to Google (so-called “remarketing” or “Google Analytics Audiences”). With the help of remarketing audiences, we also want to ensure that our advertisements correspond to the potential interest of the users and are not annoying.
(5) The Service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Website: https://fonts.google.com/; Privacy Policy: https://policies.google.com/privacy
(6) Your consent covers the transfer of data to the USA in accordance with Art. 49 para. 1 lit a in conjunction with Art. 6 para. 1 lit a GDPR, which does not have a level of data protection equivalent to the standards of the EU. If the service provider supports this, we will work towards the conclusion of standard data protection clauses in accordance with Art. 46 Para. 2 lit. d GDPR.
(1) We use the marketing and remarketing services (in short “Google Marketing Services”) of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland, parent company, on the basis of your consent pursuant to Art. 6 (1) lit. a.) GDPR: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
(2) The Google Marketing Services allow us to display ads for and on our website in a more targeted manner to present only ads to users which potentially correspond to their interests. If e. g. ads are displayed for products in which a user has shown interest on other webpages, this is called “remarketing”. For this purpose, a Google code is executed directly by Google when our web pages and other web pages on which Google Marketing Services are active are accessed and so-called (re)marketing tags (invisible graphics or code, also referred to as “web beacons”) are embedded. With the help of these tags, an individual cookie, i.e. a small file, is saved on the user’s device (instead of cookies other comparable technologies may also be used). Cookies can be set by various domains including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. The web pages visited by the user, the content they are interested in, the offers they clicked on as well as technical information on browser and operating system, referring web sites, duration of the visit and other information regarding the usage of the online services are stored in this file. In addition, the user’s IP address is recorded. In this regard, we inform you within the scope of Google Analytics that the IP address is abbreviated in EU member states or other states in the European Economic Area and is only transmitted as a whole to a Google server in the USA and abbreviated there in exceptional cases. The IP address will not be matched with data of the user within other services provided by Google. Google may connect the above information to corresponding information from other sources. If the user subsequently visits other web pages, ads which are adjusted to their interests can be displayed.
(3) The data of the users will be processed pseudonymously within the scope of Google Marketing Services. This means that Google saves and processes e. g. not the user’s name or email address, but the relevant data based on cookies in pseudonymous user profiles. This means that from Google’s point of view, the ads are not managed and displayed for an actually identified person but for cookie owners independent of the identity of the cookie owner. This does not apply if a user has expressly allowed Google to process data without pseudonymisation. The information which Google Marketing Services has collected on the user are transmitted to Google and saved on Google servers in the USA.
(4) Google Marketing Services we use include the online advertising program “Google AdWords” and others. In case of Google AdWords, each AdWords customer receives a different “conversion cookie”. Cookies can therefore not be tracked via the websites of AdWords customers. The information which was obtained with the help of the cookie is used to create conversion statistics for AdWords customers who opted for conversion tracking. AdWords customers receive information on the total number of users who clicked on their advertisement and were referred to a page with a conversion tracking tag. They do not, however, receive any information which can be used for the personal identification of users.
(5) Based on the Google Marketing Service “AdSense”, we are able to embed ads by third parties. AdSense uses cookies which help Google and their partner websites to place ads based on the visits of users to this website or other websites on the internet.
(6) For further information on data use for marketing purposes by Google, please refer to the overview page: https://policies.google.com/technologies/ads; ; Google’s Privacy Notice is available under https://policies.google.com/privacy. If you would like to object to the interest-related advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google, please refer to https://adssettings.google.com/authenticated.
(7) Further information on Google’s use of data for marketing purposes can be found on the overview page: https://policies.google.com/technologies/ads; Google’s data protection declaration can be found at https://policies.google.com/privacy. If you wish to object to interest-based advertising by Google marketing services, you can use the setting and opt-out options provided by Google, see https://adssettings.google.com/authenticated.
(1) We currently use the following social media plug-ins: Facebook, Google+, and Twitter. We use what is referred to as the so-called “double click solution”. This means that when you visit our website, categorically no personal data will initially be forwarded to the providers of the plug-ins. You can recognise the provider of the plug-in by the first letters of its name being marked on the box or the logo. We provide you with the possibility to communicate directly with the plug-in provider by using the button. Only when you click the highlighted box, thereby enabling it, does the plug-in provider receive the information that you have accessed the corresponding page on our website. The data stated under section 4 of this Policy will also be transmitted. By activating the plug-in, your personal data will be transferred to the respective plug-in provider and stored there (in the case of the American (USA) providers, in the USA). As the plug-in provider mainly carries out the data collection using cookies, we recommend erasing all cookies with the use of the security settings of your browser before clicking on the greyed out box.
(2) We have no influence on the collected data or the data processing procedures, nor are we aware of the full extent of the data that is collected, the purposes of the processing or the retention periods. Further, we do not have any information on the erasure of the data that is collected by the providers of the plug-ins.
(3) The plug-in provider will store the data collected about you as a user profile and use it for the purposes of advertising, market research and/or the custom configuration of their website. Data (including data of users who are not logged in) are for example evaluated in this way to provide custom advertising and to inform other users of the social network about your use of our website. You have the right to object to the creation of such user profiles; if you intend to exercise this right, you must contact the respective plug-in provider. Via the plug-ins we offer you the possibility to interact with social networks and other users, so that we can improve our offer and make it more interesting for you as a user. The legal basis for the use of the plug-ins is your consent in accordance with Art. 6 Paragraph 1 lit. a.) GDPR.
(4) The forwarding of data takes place regardless of whether you have an account with the plug-in provider and are logged in or not. If you are logged in with the plug-in provider, the data collected by us about you will directly be assigned to your existing account with the plug-in provider. If you press the activated button and link to the page e.g., the plug-in provider will also store this information in your user account and share it publicly with your contacts. We recommend that you regularly log out after using a social network, especially before activating the button, as this will allow you to prevent the plug-in provider assigning something to your profile.
(5) Further information on the purpose and scope of data collection and processing by the plug-in provider is available in the following privacy policies of these providers. There, you will also find further information about your rights regarding this topic and your settings options for the protection of your private sphere.
(6) Your consent covers the transfer of data to the USA in accordance with Art. 49 para. 1 letter a in conjunction with Art. 6 para. 1 letter a GDPR, which does not have a level of data protection equivalent to that of the EU. If the service provider supports this, we will work towards the conclusion of standard data protection clauses in accordance with Art. 46 Para. 2 lit. d GDPR.
Addresses of the respective plug-in providers and URL with their data protection notices:
(1) On the basis of a justified interest in accordance with Art. 6 Para. 1 letter f) GDPR, we integrate the contents of our video platform into our online offering in order to present our activities in an attractive manner. The videos are stored at https://www.YouTube.com and can be played directly from our website. They are all integrated in the “extended data protection mode”, i.e. no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data referred to in paragraph 2 be transmitted. We have no influence on this data transfer.
(2) When you visit the website, YouTube receives information that you have accessed the relevant sub-page of our website. The data stated under section 4 of this Policy will also be transmitted. This will take place regardless of whether YouTube provides a user account into which you are logged in or if no user account exists. If you are logged into Google, your data will be associated directly with your account. If you do not want the data to be assigned to your YouTube profile, you must log out before activating the button. YouTube will store your data as user profiles and use them for the purposes of advertising, market research and/or the needs-based configuration of its website. In particular, this evaluation takes place (including for users who are not logged in) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of such user profiles; if you intend to exercise this right, please contact YouTube.
(3) Service provider of the YouTube video platform The purpose is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Website: https://fonts.google.com/; Privacy Policy: https://policies.google.com/privacy and the scope of Google’s data processing and your rights and privacy preferences are set out in the Google Privacy Policy.
(1) ) Users have the right to obtain information about the personal data that we process in relation to them free of charge and upon their request.
(2) In addition, users are entitled to rectification of inaccurate data, restriction of processing and erasure of their personal data, where applicable, the right to data portability and, if unlawful data processing is assumed, the right to lodge a complaint with the competent supervisory authority.
(3) Moreover, users can, with effect for the future, withdraw consents.
(4) The contact person is our data protection officer:
Alexander Weidenhammer
DID Dresdner Institut für Datenschutz | Stiftung bürgerlichen Rechts
datenschutz@fodjan.de.
(1) The data we have saved will be erased as soon as they are no longer required for their purpose and the erasure does not conflict with any statutory retention obligations. If the data of the users are not erased, since they are required for other purposes which are permitted by law, their processing will be restricted. This means that the data will be blocked and not processed for any other purposes. This applies e. g. to data which has to be preserved due to commercial law or tax law.
(2) In accordance with legal requirements, data are stored for 6 years pursuant to section 257 clause 1 Commercial Code (e.g. commercial and business correspondence) and for 10 years pursuant to section 147 clause 1 Fiscal Code (e.g. account books and booking confirmations).
Users can object to the future processing of their personal data according to the legal requirements at any time. The right to object applies, in particular, to the processing for direct marketing purposes.
We kindly request the user to refer to the content of our privacy policy on a regular basis. We will modify the privacy policy whenever this is required due to changes in our data processing methods or amended legal requirements. We will inform you if we need your cooperation (e.g. consent) to implement the modifications or if any other individual notification becomes necessary.
