PCG logo

Privacy Policy

I. Introduction and terms

1. GENERAL

By operating our website with the URL pcg.io (hereinafter referred to as "website"), we process personal data. We treat this data confidentially and process it in accordance with the applicable laws - in particular the German Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG) and the Telecommunications Telemedia Data Protection Act (TTDSG). With these data protection regulations, we want to inform you about what personal data we collect from you, for what purposes and on what legal basis we use it and, if applicable, to whom we disclose it. Furthermore, we will explain to you which rights you are entitled to in order to protect and enforce your data protection.

2. NOTES

Our data protection regulations contain technical terms that are in the GDPR and the BDSG. For your better understanding, we would like to explain these terms in simple terms in advance:

2.1 Personal data
“Personal data” is any information relating to an identified or identifiable person (Art. 4 No. 1 GDPR). Information of an identified person can be, for example, the name or the e-mail address. However, personal data is also data where the identity is not immediately apparent, but can be determined by combining one's own information or that of others and thus finding out who it is. A person can be identified, for example, by providing your address or bank details, your date of birth or user name, your IP addresses and/or location data. Relevant here is all information that in any way allows a conclusion to be drawn about a person.

2.2 Processing
Article 4 No. 2 of the GDPR defines "processing" as any operation related to personal data. This relates in particular to the collection, recording, organisation, arrangement, storage, adaptation or alteration, retrieval, consultation, use, disclosure, transfer, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction of personal data.

II. Data controller and data protection officer

3. DATA CONTROLLER

The entity overseeing data processing is:

  • Company: Public Cloud Group GmbH ("we")
  • Legal representatives: Oliver Schallhorn, Stephan Pawlowski, Thorsten Raquet
  • Address: Lise-Meitner Straße 3-1, 89081 Ulm
  • Phone: +49-731-7255-7400
  • E-mail: hello@pcg.io

4. DATA PROTECTION OFFICER

We have appointed an external data protection officer for our company. Contact details as follows:

  • Company: HABEWI GmbH & Co KG
  • Legal representative: General partner HABEWI Beteiligungs GmbH, represented by Arne Platzbecker (Managing Director)
  • Address: Palmaille 96, 22767 Hamburg Phone: 040/ 46008966
  • Fax: 040/ 46008977
  • E-mail: datenschutz@habewi.de

III. Processing framework

5. PROCESSING FRAMEWORK: WEBSITE

Within the framework of the website, we process the personal data of yours that is listed in detail below in section IV. We only process data from you that you actively provide on the website (e.g. by filling out forms) or that you automatically provide when using our offer.

Your data will be processed exclusively by us and will not be sold, lent or passed on to third parties. If we use the help of external service providers to process your personal data, this is done within the framework of so-called commissioned processing, in which we, as the client, are authorised to issue instructions to our contractors. We use external service providers for the hosting of our website. We host our website with the external provider Amazon Web Services AWS (Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA). If further external service providers are used for individual processing operations listed in section IV, they will be named there.

As a matter of principle, we do not transfer data to third countries and do not plan to do so. We will provide information about exceptions to this principle in the processing operations described below. Any data transfer to third countries will then take place on the basis of the so-called EU standard contractual clauses.

IV. The processing in detail

6. PROVISION OF THE WEBSITE AND SERVER LOGFILES

6.1 Description of processing
Each time you access the website, we automatically collect information that your browser transmits to our server. This involves the following data:

  • IP address
  • Browser software used, as well as its version and language
  • Operating system
  • the website from which visitors came to the website (so-called referrer)
  • the sub-pages accessed on the website
  • the date and time the website was accessed
  • Internet service provider
  • Country and location from which a user visited the website

These are also stored in the so-called log files of our system. The temporary storage of your IP address by the system is necessary in order to be able to deliver our website to a user's terminal device. For this purpose, the user's IP address must remain stored for the duration of the session. However, your IP address is not stored in the log files.

6.2 Purpose
The processing is carried out to enable the website to be called up and to ensure its stability and security. Furthermore, the processing serves the statistical evaluation and improvement of our online offer.

6.3 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 6.2 named purpose.

6.4 Storage period
The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended. Deletion of the log files takes place after never, as it is a serverless website days.

7. COOKIES AND OTHER TRACKING TECHNOLOGIES

7.1 Description of the processing
Our website uses cookies. Cookies are small text files that are stored on the user's terminal device when visiting a website. Cookies contain information that enables the recognition of a terminal device and possibly certain functions of a website. We distinguish between our own cookies and external, so-called third-party cookies. So-called "session cookies" and "persistent cookies" are used on our site. "Session cookies" are automatically deleted when you end your internet session and close the browser. Persistent cookies remain stored on your terminal device for a longer period of time. In addition to cookies, we also use other tracking technologies, such as pixels or so-called fingerprinting. If cookies are technically necessary for the operation of our site, your consent is not required for this. All other cookies and tracking technologies that are not technically necessary are only set after you have actively consented to the use of cookies/tracking technologies via our Consent Tool. We use the "Hubspot" service to obtain and document consent. The Consent Tool itself saves your selection in a cookie on your end device. This means that you do not need to make a decision about cookies again on a subsequent visit to our website.

You can find out which cookies are used on our website for which purpose, how long they are stored on your end device, and which consents you may have already declared in the settings of the Consent tool. Further details at: https://legal.hubspot.com/privacy-policyExternal Link

7.2 Purpose
We use cookies to make our website more user-friendly and to enable us to provide the services described in para. 7.1 described in section 7.1.

7.3 Legal basis
The processing is necessary with regard to technically required cookies, as well as the use of the Consent Tool for the protection of the overriding legitimate interests of the responsible party (Art. 6 para. 1 lit. f GDPR in conjunction with § 25 para. 2 TTDSG). Our justified interest lies in the data protection described in para. 7.2 named purpose. With regard to the processing of all other cookies/tracking technologies - i.e. those that are not technically necessary - the legal basis is consent (Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TTDSG). Such consent is voluntary.

7.4 Storage period, revocation of consent
Cookies are automatically deleted at the end of a session or at the end of the specified storage period. Since cookies are stored on your terminal device, you as a user have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Cookies that have already been stored can be deleted. This can also be done automatically. If cookies for our website are deactivated, deleted or restricted, it may be that individual functions of our website cannot be used or can only be used to a limited extent. You can revoke any consent you may have given for the use of cookies at any time in the settings of the consent tool https://legal.hubspot.com/de/privacy-policy with effect for the future.

7.5 Recipients
When using third-party cookies, data may be transmitted to the corresponding providers of these third-party services. Under certain circumstances, data may also be transferred to third countries outside the European Union or the European Economic Area. We provide information about the recipients of data and the transmission to third countries in the settings of the Consent Tool or in the corresponding passage for the third-party service in these data protection provisions.

8. CONTACT FORM AND CONTACT BY E-MAIL

8.1 Description of the processing
To contact us, we have provided a contact form on our website. In this form, you are asked to enter your e-mail address, your name and a message to us. When you press the "Send" button, the data is encrypted using SSL encryption (see para. 23.) is transmitted to us. The contact form can only be transmitted if you confirm that you have taken note of these data protection provisions by clicking on the corresponding checkbox. You can also contact us via the e-mail addresses provided on the website. In this case, the personal data transmitted with the e-mail will be processed by us.

8.2 Purpose
By providing a contact form on our website, our intention is to offer you a convenient way to get in touch with us. The data transmitted with and in the contact form or your e-mail will be used exclusively for the purpose of processing and responding to your request.

8.3 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 8.2 named purpose. If the e-mail contact is aimed at the conclusion or fulfilment of a contract, the data processing is carried out for the fulfilment of the contract (Art. 6 para. 1 lit. b GDPR).

8.4 Storage period
The data is deleted by us as soon as it is no longer required to achieve the purpose for which it was collected. This is usually the case when the respective communication with you has ended. The communication is deemed to have ended when it is clear from the circumstances that your concern has been conclusively clarified. If legal retention periods prevent deletion, the data will be deleted immediately after the legal retention period has expired.

9. NEWSLETTER

9.1 Description of the processing
We send out a newsletter at irregular intervals. With the newsletter we inform you about descriptions of new solutions, invitations to events, updates about the company. You will only receive our newsletter if you actively subscribe to our mailing list. You can subscribe to it by filling in and submitting a newsletter registration form on our website.

For the newsletter registration, only your e-mail address is required. All other details (such as your first name and surname) are voluntary and serve solely to personalise the e-mails. We use the so-called double opt-in procedure to carry out and verify newsletter registrations. Registration takes place in several steps. First, you register for the newsletter on our website. You will then receive an e-mail from us at the e-mail address you have provided. In this e-mail, we ask you to confirm that you have actually registered for the newsletter and wish to receive it. Confirmation takes place by clicking on a confirmation link in the e-mail. Only after successful confirmation will we add you to our newsletter distribution list and send you future e-mails. As part of the double opt-in process, we save the date, time and your IP addresses both during registration and confirmation.

9.2 Purpose
The processing takes place in order to offer the newsletter function and to be able to send newsletter emails to subscribers. The collection and storage of date, time and IP addresses when subscribing to the newsletter serves to document consent given and to protect against the misuse of email addresses.

9.3 Legal basis
In the case of our subscriber newsletter, processing is based on consent pursuant to Art. 6 (1) lit. a GDPR. You can access the declaration of consent on our website at any time at https://legal.hubspot.com/de/privacy-policy. Your consent is voluntary. The collection and storage of date, time and IP addresses during newsletter registration is necessary to protect the overriding legitimate interests of the responsible party (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 9.2 named purpose.

9.4 Storage period and revocation of consent
If you do not confirm your subscription to our newsletter within 24 hours of receiving the corresponding registration e-mail, your data will be automatically deleted. We process your personal data for the duration of your newsletter subscription. You can cancel your subscription to our newsletter at any time by revoking your consent. A simple declaration is sufficient for this (by e-mail to hello@pcg.io or by post to Public Cloud Group GmbH, Lise-Meitner Straße 3-1, 89081 Ulm). It is also possible to unsubscribe from the newsletter by clicking on the unsubscribe link in every newsletter email or here https://legal.hubspot.com/de/privacy-policy . Upon revocation of your consent, you will no longer be sent newsletters and your personal data will be removed from our active distribution list. In order to enforce your revocation, we will add your e-mail address to our so-called “black list” in a restricted manner. In this way, we can ensure that you will not receive any newsletters from us in the future and that your email address will not be misused by third parties.

9.5 Recipients and transfer to third countries:

We use the services of the newsletter provider Hubspot to manage our newsletter distribution list and to send the emails. This takes place within the framework of order processing. Hubspot is a service provided by Hubspot Inc. 25 Street, Cambridge, MA 02141, USA. Further information on data protection at Hubspot can be found at Hubspot Inc. 25 Street, Cambridge, MA 02141, USA.

10. SOCIAL NETWORKS

10.1 Description of processing
Our website does not use so-called social media plugins. The Facebook, Instagram, LinkedIn and YouTube logos displayed on our website are merely linked to the corresponding profiles of our company on the social networks. A data transfer to the social networks does not take place with the integration of the logos. If you click on one of the logos, you will only be redirected to the external website of the respective social network.

However, our profiles within the social networks constitute data processing. If you are logged in to the respective social network when you visit such a profile, this information will be assigned to your user account there. If you interact with our profile, e.g. comment, "share", "like" or "retweet" a post, this information will also be stored in your user account. As a rule, your interactions with our profile can also be viewed by us.

On the social networks Facebook and Instagram, we have the possibility to obtain statistical data about the use of our Facebook page or our Instagram profile via the so-called "Insights" function. These statistics are provided by Facebook and Instagram. The "Insights" function cannot be disabled. We cannot decide to turn this feature on or off. It is available to all Facebook fan page operators and all Instagram business account operators, regardless of whether you use the Insights function or not.

We are provided with the following data via Facebook Insights for a selectable period of time in anonymised form with regard to fans, subscribers, people reached and people interacting: Total page views, likes including origin, page activity, post interactions, reach, post reach (broken down into organic, viral and paid interactions), comments, shared content, replies and demographic analysis, i.e. country of origin, gender and age. In the Insights statistics, it is not possible for us to identify subscribers and fans of our site and to view their profiles.

Furthermore, the Instagram insights provide us with anonymised data on the development and reach of our Instagram profiles, as well as the posts, stories and videos we post there. We also receive statistical information on the place of origin, gender and age of the subscribers to our Instagram profile in the Instagram insights.

On the social network LinkedIn, we have the possibility to obtain statistical data about the use of our LinkedIn profile via the so-called "Insights" function.

The social networks with which you communicate store your data using pseudonyms as usage profiles and use them for advertising purposes and market research. For example, you may be shown advertisements within the social network and on other third-party websites that match your presumed interests. Cookies are usually used for this purpose, which the social network stores on your end device. You have the right to object to the creation of these user profiles, for the exercise of which you must contact the social networks directly.

10.2 Purpose
We maintain profiles on the aforementioned social networks for the purpose of public relations and corporate communication with customers and interested parties. We use the "Insights" function of Facebook and Instagram to evaluate the reach of our posts on the social network and to make them more appealing to our visitors in the future.

10.3 Legal basis
The legal basis for data processing within the scope of our profiles on social networks is the protection of our overriding legitimate interests (Art. 6 para. 1 lit. f GDPR). Our justified interest lies in the data processing described in para. 10.3 named in section 10.3. If you are asked for consent by the respective operator of a social network, the legal basis is Art. 6 (1) a GDPR.Data processing with regard to our presence on Facebook, Instagram and LinkedIn is also carried out on the basis of joint responsibility in accordance with Art. 26 GDPR.

10.4 Recipients and transmission to third countries
The respective social networks are operated by the companies listed below. Further information on data protection with regard to our profile on the social networks can be found in the linked data protection provisions.

The social networks also process your personal data in the USA.

11. SOCIAL FEED

11.1 Description of the processing
On the homepage of our website you will find a section that we call "Social Feed". Individual posts selected by us that have been published on the social networks Instagram by us are displayed there. These posts are retrieved from the social networks on our website and integrated locally into our website. This may result in the transmission of personal data to the social networks.

11.2 Purpose
We include the social feed on our website in order to be able to inform you about our current posts on the social networks in an appealing and convenient way on our website.

11.3 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 111.2 named purpose.

11.4 Recipients and transmission to third countries
Through the integration of the Social Hub, data may be transmitted to the corresponding social networks. We refer to para. 11.5.

12. GOOGLE ANALYTICS

12.1 Description of processing
Our website uses "Google Analytics", a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). Google Analytics uses cookies (see para. 7.), which enable an analysis of your use of our offer.The information generated by the cookies is usually transferred to a Google server in the USA and stored there. However, we use Google Analytics exclusively with IP anonymisation. This means that your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The statistics generated by Google Analytics record, in particular, how many users visit our website, from which country or location the access takes place, which sub-pages are called up and via which links or search terms visitors reach our website.

You can find the Google Analytics user conditions at https://marketingplatform.google.com/about/analytics/terms/us/External Link. An overview of data protection at Google Analytics is available at www.google.com/intl/de/analytics/learn/privacy.htmlExternal Link. Google's privacy policy can be viewed at https://policies.google.com/privacyExternal Link.

12.2 Purpose
The processing takes place in order to be able to evaluate the use of our website. The information thus obtained is used to improve our online presence and to design it in line with requirements.

12.3 Legal basis
The processing is based on consent pursuant to Art. 6 (1) lit. a GDPR. This is provided by us via the Consent Tool (see para. 7.1). Such consent is voluntary.

12.4 Storage period and right of objection, revocation of consent
We have described the storage period and your control and setting options for cookies in para. 7.4 explained. You can revoke the consent you have given with regard to Google Analytics at any time in the settings of the consent tool with effect for the future. Alternatively, you can object to data processing by Google Analytics at any time by downloading and installing the browser add-on offered by Google at tools.google.com/dlpage/gaoptout?hl=enExternal Link. The analysis data processed and stored by Google Analytics will be automatically deleted by us after 14 months.

12.5 Recipients and transfer to third countries
Google Analytics is jointly responsible for data processing on our behalf according to the German data protection supervisory authorities (Data Protection Conference). Against this background, we have also concluded the "Google Measurement Controller Data Protection Terms" with Google. Google also processes your personal data in the USA.

13. GOOGLE WEBFONTS

13.1 Description of the processing
Our website uses "Google Web Fonts", a font substitution service of the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). With Google Webfonts, the standard fonts of your terminal device are replaced by fonts from Google's catalogue when our website is displayed. If your browser disables the integration of Google Web Fonts, the text of our website will be displayed in the standard fonts of your end device. The Google fonts are loaded directly from a Google server. For this to happen, your browser sends a request to a Google server. As a result, your IP address may also be transmitted to Google in connection with the address of our website. However, Google Webfonts does not store any cookies on your terminal device. According to Google, data processed as part of the Google Webfonts service is transferred to resource-specific domains such as fonts.googleapis.com or fonts.gstatic.com. They are not associated with data that may be related to the use of other Google services such as the search engine of the same name or Gmail.

Further information on data protection at Google Webfonts can be found at:

General information on data protection at Google can be found at:

13.2 Purpose
The processing is carried out in order to display the text of our website to you in a more readable and aesthetically pleasing manner.

13.3 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 13.2 named purpose.

13.4 Recipients and transmission to third countries
Through the use of Google Web Fonts, personal data may be transmitted to Google. Google also processes your personal data in the USA.

14. YOUTUBE

14.1 Description of processing
Our website uses services from "YouTube" a video platform operated by YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA (hereinafter referred to as "YouTube"). YouTube is represented by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We use YouTube by embedding individual videos from the platform on our website as a so-called “iFrame” so that they can be played directly on our website. The videos are embedded in the "extended data protection mode" offered on YouTube, i.e. no personal data will be transmitted from you to Google as long as you do not play the videos. Only when you play a video will data be transmitted to Google, over which we have no control. If you play a video embedded on a sub-page of our website, Google will be informed which sub-page you have visited and which video you have viewed. Your IP address may also be transmitted to Google. If you are logged in as a YouTube or Google user, Google will associate this information with your user account. Google stores your data as user profiles and uses them for advertising purposes, market research and/or to tailor Google's websites to your needs. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google directly.

Further information on data protection at Google can be found at:

14.2 Purpose
The processing is done in order to be able to show you videos on our website.

14.3 Legal basis
The processing is based on consent pursuant to Art. 6 (1) lit. a GDPR. This is provided by us via the "Other" consent tool (see para. 7.1) or in the context of a content blocker at the point on our website where a YouTube video is to be displayed. Such consent is voluntary.

14.4 Revocation of consent
You can revoke your consent to display YouTube videos on our website at any time in the settings of the consent tool https://legal.hubspot.com/de/privacy-policy with effect for the future.

14.5 Recipients and transmission to third countries
Through the integration of YouTube, personal data may be transmitted to YouTube LLC or Google. Google also processes your personal data in the USA.

15. VIMEO

15.1 Description of the processing
Our website uses services from "Vimeo", a video platform operated by
Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA (hereinafter referred to as "Vimeo"). We use Vimeo by embedding individual videos from the platform on our website as a so-called iFrame so that they can be played directly on our website. When you visit a subpage of our website on which a video is embedded, a connection is established to the Vimeo servers and the video is displayed within the website. This transmits to Vimeo which website you have visited. Your IP address may also be transmitted to Vimeo. If you play an embedded video, this information is also passed on to Vimeo. If you are logged in as a Vimeo user, Vimeo assigns this data to your user account.

You can find more information on data protection at Vimeo at:

15.2 Purpose
The processing is done in order to show you videos on our website.

15.3 Legal basis
Processing is carried out on the basis of consent pursuant to Art. 6 para. 1 lit. a GDPR. This is provided by us via the "Other" consent tool (see para. 15.2) or in the context of a content blocker at the point on our website where a Vimeo video is to be displayed. Such consent is voluntary.

15.4 Revocation of consent
You can revoke your consent to display Vimeo videos on our website at any time in the settings of the consent tool https://legal.hubspot.com/de/privacy-policy with effect for the future.

15.5 Recipients and transmission to third countries
Through the integration of Vimeo videos, personal data may be transmitted to Vimeo LCC. Vimeo also processes data in the USA.

16. GOOGLE MAPS

16.1 Description of processing
Our website uses "Google Maps", a map display service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as "Google"). We use Google Maps by embedding a map with our business address on our website. The map is loaded directly from a Google server. In order for this to happen, your browser sends a request to a Google server. This may also transmit your IP address in connection with the address of our website to Google. However, Google Maps does not store any cookies on your terminal device. If you are logged in to Google when you visit our site, Google Maps will associate this information with your Google user account. Google stores your data as user profiles and uses them for advertising purposes, for market research and/or for the needs-based design of Google websites. You have the right to object to the creation of these user profiles. To exercise this right, you must contact Google directly.

Further information on data protection at Google can be found at:

16.2 Purpose
The processing is carried out in order to be able to display an interactive map on our website.

16.3 Legal basis
The processing is based on consent pursuant to Art. 6 (1) lit. a GDPR. This is provided by us via the "Other" consent tool (see para. 7.1) or in the context of a content blocker at the point on our website where an interactive map is to be displayed. Such consent is voluntary.

16.4 Revocation of consent
You can revoke your consent to display Google Maps on our website at any time in the settings of the consent tool https://legal.hubspot.com/de/privacy-policy with effect for the future.

16.5 Recipients and transfer to third countries
Google also processes your personal data in the USA.

17. Meta PIXEL

17.1 Description of processing
Our website uses the remarketing service "Meta Pixel", which is operated by Meta Platforms, Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA or Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). The "Facebook Pixel" enables us to display advertisements on the social network that are targeted to those Facebook users who have shown interest in our offer - e.g. through an earlier visit to our website. With the help of the "Facebook Pixel", we can also track and evaluate the effectiveness and reach of our advertising on Facebook by recording whether Facebook users interact with our advertisements on the social network by clicking on the advertisements to be redirected to our website. When you visit our website, a connection is therefore established to the Facebook servers and the "Facebook pixel" is embedded in our website. In addition, it may be that Facebook places a cookie on your terminal device (see above para. 7.). If you are logged in to Facebook or log in to Facebook later, your visit to our website will be assigned to your user account. The data collected about you by means of the "Facebook Pixel" is anonymous for us. They do not provide us with any information about your person. However, it is possible for Facebook to establish a connection to your user profile.

Data processing by Facebook is carried out in accordance with the company's data policy, which can be found at:

17.2 Purpose
The processing takes place in order to carry out targeted online advertising for our own offers and to be able to evaluate its effectiveness and reach.

17.3 Legal basis
The processing is based on consent pursuant to Art. 6 (1) lit. a GDPR. This is provided by us via the "Other" consent tool (see para. 7.1). Such consent is voluntary.

17.4 Storage period and right to object, revocation of consent We have
explained the storage period and your control and setting options for cookies/tracking pixels in Section 7. explained. You can revoke your consent to the collection of data by the "Facebook Pixel" and the use of your data for the display of Facebook ads at any time in the settings of the Consent Tool with effect for the future. www.facebook.com/settings?tab=adsExternal Link You can also object to the collection of data by the "Facebook Pixel" and the use of your data for the display of Facebook ads at any time. Thus, you can decide within the settings of your Facebook account at www.facebook.com/settings?tab=adsExternal Link which types of advertisements are displayed to you on Facebook. This setting is applied across all devices. In addition, you have the option to declare your objection by clicking on the following opt-out link: [...].

17.5 Recipients and transmission to third countries
Through the integration of the "Facebook Pixel", personal data may be transmitted to Meta. Meta also processes your personal data in the USA.

18. TIKTOK PIXEL

18.1 Description of processing
Our website uses the remarketing service "TikTok Pixel", which is operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland and TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (together referred to as "TikTok"). The TikTok pixel enables us to display advertisements on the social network that are targeted to those TikTok users who have shown interest in our offer - e.g. through a previous visit to our website. The TikTok pixel also allows us to track and evaluate the effectiveness and reach of our advertising on TikTok by recording whether TikTok users interact with our ads on the social network by clicking on the ads to be redirected to our website. Therefore, when you visit our website, a connection to the TikTok servers is established and the TikTok pixel is embedded in our website. In addition, TikTok may place cookies on your terminal device (see above para. 7.). If you are logged in to TikTok or log in to TikTok later, your visit to our website will be assigned to your user account. The data collected about you by means of the TikTok pixel is anonymous for us. They do not allow us to draw any conclusions about your person. However, a connection to your user profile is possible on the part of TikTok.

Data processing by TikTok is carried out in accordance with the company's data protection declaration, which can be found at:

18.2 Purpose
The processing takes place in order to carry out
targeted online advertising for our own offers on TikTok and to be able to evaluate its effectiveness and reach.

18.3 Legal basis
The processing is based on consent pursuant to Art. 6 (1) lit. a GDPR. This is provided by us via the Consent Tool (see para. 7.1). Such consent is voluntary. Furthermore, data processing is carried out on the basis of joint responsibility in accordance with Art. 26 GDPR.

You can view the corresponding agreement at:

18.4 Storage period and right to object, revocation of consent We have
described the storage period and your control and setting options for cookies/tracking pixels in para. 7.4 explained. The consent you have given with regard to the data collection by the TikTok pixel and the use of your data for the display of TikTok advertisements can be revoked at any time in the settings of the Consent Tool with effect for the future.

18.5 Recipients and transfer to third countries
Through the integration of the TikTok pixel, personal data may be transferred to TikTok. TikTok also processes your personal data in third countries.

19. LINKEDIN ADS

19.1 Description of the processing
Our website uses the advertising and remarketing service "LinkedIn Ads", which is provided by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA ("LinkedIn"). Via the "LinkedIn Ads", it is possible for us to display advertisements on the social network LinkedIn that are targeted to those LinkedIn users who have shown interest in our offer - e.g. through an earlier visit to our website. For this purpose, we add the so-called "LinkedIn Insight Tag" to our website. This is a small JavaScript code snippet. With the help of the "LinkedIn Insight Tag", we can also track and evaluate the effectiveness and reach of our advertising on LinkedIn by recording whether LinkedIn users interact with our advertisements on the social network and are redirected to our website by clicking on the advertisements. When you visit our website, a connection is therefore established to the LinkedIn servers and the "LinkedIn Insight Tag" is embedded in our website. In addition, it may be that LinkedIn places a cookie on your terminal device (see above para. 7.1). If you are logged in to LinkedIn or log in to LinkedIn later, your visit to our website will be assigned to your user account. The data collected about you by means of the "LinkedIn Insight Tag" is anonymous for us. They do not provide us with any information about your person. However, a connection to your user profile is possible on the part of LinkedIn.

Data processing by LinkedIn is carried out in accordance with the company's data policy, which can be found at:

19.2 Purpose
The processing takes place in order to carry out targeted online advertising in the social network LinkedIn for our own offers and to be able to evaluate
their effectiveness and reach.

19.3 Legal basis
The processing is based on consent pursuant to Art. 6 (1) lit. a GDPR. This is provided by us via the Consent Tool (see para. 7.1). Such consent is voluntary.

19.4 Storage period and right to object, revocation of consent
We have explained the storage period, as well as your control and setting options for cookies and other tracking methods, including the "LinkedIn Insight Tag", in para. 7.4 explained. You can revoke your consent to the collection of data by the "LinkedIn Insight Tag" and the use of your data for the display of LinkedIn advertisements at any time in the settings of the consent tool with effect for the future.

You can also decide within the settings of your LinkedIn account at https://www.linkedin.com/mypreferences/d/categories/adsExternal Link which types of advertisements are displayed to you on LinkedIn and whether your visits to external websites may be used to display advertisements on LinkedIn.

19.5 Recipients and transmission to third countries
Through the integration of the "LinkedIn Insight Tag", personal data may be transmitted to LinkedIn. LinkedIn also processes your personal data in the USA. This data transfer to third countries takes place on the basis of the so-called EU standard contractual clauses. You can find more information at https://www.linkedin.com/legal/l/dpaExternal Link and https://www.linkedin.com/legal/l/eu-sccs.External Link

20. GOOGLE ADS CONVERSION AND GOOGLE REMARKETING

20.1 Description of the processing
Our website uses the advertising service "Google Ads Conversion", which is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4. Ireland (hereinafter referred to as "Google"). With the help of Google Ads Conversions, we can place advertisements on external websites in order to draw your attention to our offers there. In addition, the service enables us to determine the reach and success of individual advertising measures. Our advertisements are delivered by Google via so-called "ad servers". For this purpose, Google uses so-called "Ad Server" cookies, which are used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you access our website via a Google ad, a cookie will be stored by Google Ads in your end device (see section 7.1). 7.). According to Google, these cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie. The cookies enable Google to recognise your internet browser. If you visit websites of a Google Ads customer and the cookie stored on your end device has not yet expired, Google and the customer can recognise that you clicked on the ad and were redirected to our website. A different cookie is assigned to each Google Ads customer. Cookies can therefore not be tracked via the websites of Google Ads customers. We ourselves do not process any personal data with our Google Adwords advertising measures. Google only provides us with statistical evaluations. These evaluations enable us to see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information. When you visit our website, a connection is therefore established to the Google servers. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads Conversion and therefore inform you according to our state of knowledge: Through the integration of Google Ads Conversion, Google receives the information which subpage of our website you have called up or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is still possible for Google to obtain and store your IP address.

Our website also uses the "Google Remarketing" advertising service, which is also operated by Google. Google Remarketing enables us to address you again with advertisements for our offers on other websites that have joined the Google advertising network after you have visited our website. Google also uses cookies for this purpose, which are stored in your browser and through which your usage behaviour is recorded and evaluated by Google when you visit various websites. This enables Google to identify your previous visit to our website and to show you advertisements for our offers on other websites. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data that may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.

Further information on data protection at Google can be found here: policies.google.com/privacy?hl=enExternal Link and services.google.com/sitestats/en.htmlExternal Link

20.2 Purpose
The processing takes place in order to carry out targeted online advertising for our own offers and to be able to evaluate its effectiveness and reach.

20.3 Legal basis
The processing is based on consent pursuant to Art. 6 (1) lit. a GDPR. This is provided by us via the "Other" consent tool (see para. 7.1). Such consent is voluntary.

20.4 Storage period and right to object, revocation of consent

We have explained the storage period, as well as your control and setting options for cookies in section 7. explained. You can also object to data processing by Google Ads Conversion and Google Remarketing at any time via the following website: www.google.com/ads/preferences.External Link You can revoke your consent to data collection by Google Ads Conversion and Google Remarketing at any time in the settings of the Consent Tool with effect for the future.

20.5 Recipients and transmission to third countries
Through the integration of Google Ads Conversion and Google Remarketing, personal data may be transmitted to Google. Google also processes your personal data in the USA.

21. GOOGLE TAG MANAGER

Our website uses the "Google Tag Manager", a service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as "Google"). No personal data is collected via the Google Tag Manager and no cookies are set. This service only enables us to integrate and manage tags on our website. Tags are small code elements on our website that are helpful to build on with other tools, e.g. to measure traffic and visitor behaviour, to record the impact of online advertising and social channels, to use remarketing and targeting, to test and optimise the website.

For more information on Google Tag Manager, please visit:

22. CONTENT DELIVERY NETWORK (CDN)

22.1 Description of the processing
Our website uses so-called Content Delivery Networks (CDN). CDNs have the effect of shortening the loading time of common JavaScript and CSS libraries, as well as the files are transferred from fast, near-site or under-utilised servers of external service providers. Another advantage compared to storing the JavaScript and CSS libraries locally on our server is that the files are regularly checked for security and kept up-to-date by the external service providers. We have integrated JavaScript and CSS libraries from the external service provider Cloudflare for the implementation of some programming functions on our website. When you visit our website, a connection is established to the servers of the aforementioned external services and the JavaScript and CSS library is loaded into our website. This transmits to the external service providers which website you have visited. Your IP address may also be transmitted. To prevent the execution of JavaScript altogether, you can install a JavaScript blocker in your browser.

22.3 Purpose
The processing takes place in order to shorten the loading time of our website and to be able to integrate
JavaScript and CSS libraries quickly and securely.

22.4 Legal basis
The processing is necessary to protect the overriding legitimate interests of the controller (Art. 6 para. 1 lit. f GDPR). Our legitimate interest lies in the data protection described in para. 22.2 named purpose.

22.5 Recipients and transmission to third countries
Through the integration of the JavaScript and CSS libraries, your data is transmitted to one of the following CDNs: Cloudflare hosted by Cloudflare, Inc.

23 HUBSPOT

23.1 Description of the processing

On our website, we use HubSpot for our online marketing activities. HubSpot is a software company from the USA with a branch in Ireland. Contact: HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland, Phone: +353 1 5187500 This is an integrated software solution that we use to cover various aspects of our online marketing. These include: Email marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (e.g. traffic sources, hits, etc.), contact management (e.g. user segmentation & CRM), landing pages and contact forms. With regard to the individual functions of Hubspot, we refer to the processing operations explained in the data protection provisions.

23.2 Purpose
Our registration service allows visitors to our website to learn more about our association and its offerings, download content and provide their contact information. This information, as well as the content of our website, is stored on servers run by our software partner HubSpot. It can be used by us to contact visitors to our website and to determine which services are of interest to them. We use all collected information exclusively to optimise our marketing measures.

23.3 Legal basis
The legal basis of the data processing depends on the respective Hubspot function used. Insofar as Hubspot sends e-mails for us and insofar as we process statistical website analysis via Hubspot, the data processing is based on consent pursuant to Art. 6 (1) lit. a GDPR. The consent is voluntary. Insofar as Hubspot services are required in the context of concluding or fulfilling a contract between us and customers or members, the legal basis is Art. 6 (1) lit. b GDPR. For the use of Hubspot services, the legal basis is also Art. 6 para. 1 lit. f GDPR (legitimate interest). Our legitimate interest in the use of this service is the optimisation of our marketing measures and the improvement of our service quality on the website.

23.4 Storage period
The personal data collected by us will be deleted as soon as they are no longer required for the purpose of their processing. We have indicated the storage period and the possibility of revoking consent and objecting to processing in the individual processing operations.

23.5 Recipients of your data, transfer of data to third parties and transfer to third countries
Hubspot works for us as part of a commissioned processing. Through the use of Hubspot, personal data is transferred to HubSpot, 2nd Floor 30 North Wall Quay, Dublin 1, Ireland. Hubspot also processes your personal data in the USA, where applicable through its group company Hubspot Inc, 25 First Street, Cambridge, MA 02141 USA.

You can find more information on data protection at Hubspot at:

24. Security measures

To protect your personal data from unauthorised access, we have provided our website with an SSL or TLS certificate. SSL stands for "Secure Sockets Layer" and TLS for "Transport Layer Security" and encrypts the communication of data between a website and the user's end device. You can recognise active SSL or TLS encryption by a small lock logo that is displayed on the far left of the browser's address bar.

V. Your rights

25. Data subjects' rights

With regard to the data processing by our company described above, you are entitled to the following data subject rights:

25.1 Information (Art. 15 GDPR)
You have the right to request confirmation from us as to whether we are processing
personal data relating to you. If this is the case, you have the right to information about this personal data and the information listed in detail in Art. 15 of the GDPR under the conditions specified in Art. 15 of the GDPR.

25.2 Correction (Art. 16 GDPR)
You have the right to demand that we correct any inaccurate personal data concerning you and, if necessary, complete any incomplete personal data without delay.

25.3 Deletion (Art. 17 GDPR)
You have the right to demand that we delete personal data relating to you without delay if one of the reasons listed in detail in Art. 17 GDPR applies, e.g. if your data is no longer required for the purposes we are pursuing.

25.4 Restriction of data processing (Art. 18 GDPR)
You have the right to demand that we restrict processing if one of the conditions listed in Art. 18 GDPR applies, e.g. if you dispute the accuracy of your personal data, data processing will be restricted for the period of time that allows us to verify the accuracy of your data.

25.5 Data portability (Art. 20 GDPR)
You have the right, under the conditions listed in Art. 20 GDPR, to request that the data concerning you be handed over in a structured, common and machine-readable format.

25.6 Withdrawal of consent (Art. 7 (3) GDPR)
You have the right to withdraw your consent at any time in the case of processing based on consent. The revocation applies from the time it is asserted. In other words, it is effective for the future. The processing therefore does not become unlawful retroactively as a result of the withdrawal of consent.

25.7 Complaint (Art. 77 GDPR) If you believe that the processing of personal data concerning you infringes the GDPR, you have the right to lodge a complaint with a supervisory authority. You can assert this right with a supervisory authority in the EU member state of your place of residence, your place of work or the place of the alleged infringement.

25.8 Prohibition of automated decision-making/profiling (Art. 22 GDPR)
Decisions which have legal effects concerning you or which significantly affect you must not be based solely on automated processing of personal data, including profiling. We inform you that we do not use automated decision-making including profiling with regard to your personal data.

25.9 Right of objection (Art. 21 GDPR)
If we process your personal data on the basis of Art. 6 para. 1 lit. f GDPR (for the protection of overriding legitimate interests), you have the right to object to this under the conditions listed in Art. 21 GDPR. However, this only applies insofar as there are reasons arising from your particular situation. After an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms. We also do not have to stop processing if it serves the assertion, exercise or defence of legal claims. In any case - also irrespective of a specific situation - you have the right to object to the processing of your personal data for direct marketing at any time.

VI. Final provisions

The German version of this privacy policy shall be the governing and authoritative document.

Status: September 2023