Data privacy statement

1. Data privacy at a glance

General information

The information provided below gives an easy overview of what happens with your personal data when you visit this Website. Personal data is all data that could be used to identify you personally. For detailed information on the topic of data privacy, please see the data privacy statement below this text.

Data collection on this Website

Who is responsible for data collection on this Website?

Data processing on this Website is performed by the Website operator. The contact data of the Website operator can be found in the section "Information about the data controller" in this data privacy statement.

How do we collect your data?

Some data is collected when you provide it to us. This might include data that you enter into a contact form, for example. Other data is collected automatically or following your consent by our IT systems when you visit our Website. This is mainly technical data (e.g. Internet browser, operating system or the time when our Website was called). This data is captured automatically once you call this Website.

What do we use your data for?

Some of your data is collected to ensure that the Website can be made available without errors. Other data can be used to analyze your user behaviour.

What rights do you have with regard to your data?

You are entitled to receive information about the origin, recipient and purpose of your saved personal data at any time without charge. You also have the right to demand the rectification or deletion of this data. If you have given your consent to data processing, you can revoke consent again at any time, effective for the future. You also have the right to demand that the processing of your personal data be restricted in certain circumstances. Moreover, you have the right to complain to the responsible supervisory authorities. You can contact us about these rights and about any other questions relating to data privacy at any time.

Analysis tools and tools provided by third parties

When you visit this Website, your surfing behaviour can be statistically evaluated. Primarily, this is done using analysis programs. For detailed information about these analysis programs, see the data privacy statement below.

2. Hosting

IONOS

Our Website is hosted by IONOS SE. The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany (hereinafter "IONOS"). When you visit our Website, IONOS logs various data including your IP address. For details, see the IONOS data privacy statement: https://www.ionos.de/terms-gtc/terms-privacy. IONOS is used on the basis of Art. 6 Para. 1 (f) GDPR. We have a legitimate interest in the reliable display of our Website. Where consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 (a) GDPR and on Art. 25 Para. 1 Teleservices Data Protection Act (TTDSG) if consent relates to the saving of cookies or accessing information on the end device of the user (e.g. device fingerprinting) as per the TTDSG. Consent can be revoked at any time.

3. General remarks and mandatory information

Data privacy

The operators of these Web pages take the protection of your personal data extremely seriously. We treat your personal data confidentially and in accordance with legal data privacy requirements and this data privacy statement. When you visit this Website, various items of personal data are collected. Personal data is data that can identify you as an individual. This data privacy statement explains which data we collect and what we use it for. It also states how we do this and for what purpose. Please note that data transfer over the internet (e.g. when communicating by e-mail) can be subject to security gaps. It is not possible to guarantee complete protection of your data from access by third parties.

Information about the data controller

The data controller with regard to data processing on this Website is: XE:DARIS GmbH i.G. Rainer Witzel Im Brückengarten 27 63322 Rödermark Germany Phone: +49 6074 69498-45 E-mail: rainer.witzel@xedaris.com The data controller is the natural or legal person who, alone or with other persons, decides about the purposes and means used for the processing of personal data (e.g. your name, e-mail address etc.).

Retention period

Unless a more specific retention period is mentioned in this data privacy statement, your personal data is stored until the purpose of the processing of the data no longer applies. If you assert a legitimate demand for the deletion of your personal data or if you revoke consent to the processing of your personal data and there is no other legally permissible reason to continue to store your personal data (e.g. statutory fiscal or commercial retention periods), your data will be deleted. If other legally permissible reasons to store your data exist, it will be deleted once these reasons no longer apply.

General information about the legal bases for data processing on this Website

If you have consented to data processing, we process your personal data on the basis of Art. 6 Para. 1 (a) and/or of Art. 9 Para. 2 (a) GDPR in cases where data categories as per Art. 9 Para. 1 GDPR are processed. If you have expressly consented to the transfer of your personal data to non-EU countries, data processing also takes place on the basis of Art. 49 Para. 1 (a) GDPR. If you have consented to the saving of cookies or to access to information on your end device (e.g. via device fingerprinting), data processing also takes place on the basis of Art. 25. Para. 1 TTDSG. Consent can be revoked at any time. If your data is required to fulfil a contract or to preform pre-contractual tasks, we process your data on the basis of Art. 6 Para. 1 (b) GDPR. Further, if the processing of your data is required in order for us to meet a legal obligation, we process your data on the basis of Art. 6 Para. 1 (c) GDPR. Data processing can also take place if it is necessary for the purposes of our legitimate interests as per Art. 6 Para. 1 (f) GDPR. The following paragraphs of this data privacy statement explain the various legal bases that apply in individual cases.

Data protection officer

We have commissioned a data protection officer for our company: PTS-Computerservice Dipl. Ing. W. Haluska Traminerstraße 16 63322 Rödermark, Germany Phone: +49 6074 861573 E-mail: w.haluska@pts-computer.de

Information on transmission of data to the US and other non-EU countries

We use tools provided by companies registered in the US or in other non-EU countries that are not considered secure from the point of view of data security law. If these tools are active, your personal data can be transmitted to these non-EU countries and processed there. Please note that in these countries, we cannot guarantee that the data privacy level is equivalent to that of the EU. For example, US companies are obliged to pass on personal data to security authorities without the data subject having any legal recourse to prevent this. This means that we cannot rule out US authorities (e.g. intelligence agencies) processing, evaluating and permanently saving personal data about you for surveillance purposes where this data is saved on US servers. We do not have any influence on such processing.

Revoking your consent to data processing

Many data processing operations are possible only if you have expressly given consent. You can revoke such consent at any time. The revocation of consent does not affect the legality of any data processing that has taken place prior to revocation.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

IF DATA PROCESSING TAKES PLACE ON THE BASIS OF ART. 6 PARA. 1 (E) or (F) GDPR, YOU HAVE THE RIGHT TO OBJECT, AT ANY TIME, TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THOSE PROVISIONS. FOR INFORMATION ON THE LEGAL BASIS ON WHICH PROCESSING TAKES PLACE, SEE THIS DATA PRIVACY STATEMENT. IF YOU OBJECT TO THE PROCESSING OF PERSONAL DATA, WE WILL NO LONGER PROCESS THE PERSONAL DATA IN QUESTION UNLESS WE ARE ABLE TO DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR UNLESS THE DATA IS PROCESSED FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (RIGHT TO OBJECT AS PER ART. 21 PARA. 1 GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH PURPOSES; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR DIRECT MARKETING PURPOSES (RIGHT TO OBJECT AS PER ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with the responsible supervisory bodies

If violations of the provisions of the GDPR occur, data subjects have the right to complain to a supervisory body, particularly one in the Member State where they reside, where they work or where the alleged violation took place. This right applies without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to receive your personal data that we process automatically on the basis of your consent or in order to fulfil a contract in a commonly used, machine-readable format. You also have the right to transmit your data to a third party without hindrance. If you wish your data to be transmitted directly to another processor, this shall take place only where technically feasible.

Information, deletion and rectification

As provided for in the applicable legal regulations, you have the right at any time to receive free-of-charge information about the personal data we have saved about you, its origin, its recipients and the purpose of data processing. You also have the right to the rectification and deletion of this data where applicable. You can contact us about these rights and about any other questions relating to personal data at any time.

Right to restriction of processing

You have the right to demand the restriction of the processing of your personal data. You can contact us at any time for this. The right to restriction of processing applies in the following cases:

• If you question the accuracy of the personal data that we have saved about you, we generally need time to check this. You have the right to demand the restriction of the processing of your personal data while we perform this check.
• If the processing of your personal data was or is unlawful, you can request that processing be restricted rather than the data being deleted.
• If we no longer need your personal data but you require it to establish, exercise or defend legal claims, you have the right to demand that the processing of your personal data be restricted rather than being deleted.
• If you have lodged an objection as per Art. 21 Para. 1 GDPR, your interests must be weighed up against our own. Until it has been decided whose interests take precedence, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data, with the exception of storage, shall be processed only with your consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or of a Member State.

Objection to e-mail advertising

We hereby object to the use of the contact data published in this mandatory site notice to send advertising and information material that has not been expressly requested. The operators of these Web pages expressly reserve the right to take legal steps in the case of the unsolicited sending of advertising information in spam e-mails, for example.

4. Data collection on this Website

Cookies

Our Web pages use cookies. Cookies are small text files. They do not cause any damage on your end device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your end device. Session cookies are deleted automatically when your visit to our Website ends. Permanent cookies remain saved on your end device until you delete them or they are deleted automatically by your Web browser. In some cases, cookies from third-party companies can be saved on your end device when you visit our Website (third-party cookies). These allow us or them to use certain services provided by third-party companies (e.g. cookies for handling payment services). Cookies have different functions. Many cookies are required for technical reasons, since certain Website functions cannot work without them (e.g. the shopping cart function or video playback). Other cookies are for analyzing user behaviour or advertising. Cookies that are required to enable electronic communication, to provide certain functions you want to use (e.g. for the shopping card function) or to optimize the Website (e.g. cookies for measuring the Web audience) are saved on the basis of Art. 6 Para. 1 (f) GDPR if no other legal basis is specified. The Website operator has a legitimate interest in the saving of required cookies in order to provide services without technical errors and in an optimum way. If consent to the saving of cookies and equivalent recognition technologies has been granted, processing takes place exclusively on the basis of this consent (Art. 6 Para. 1 (a) GDPR and Art. 25 Para. 1 TTDSG). Consent can be revoked at any time. You can set up your browser so that you are informed about the saving of cookies and can choose whether to allow cookies on a case-by-case basis, whether to accept cookies in certain circumstances, or whether to generally prevent the saving of cookies. You can also activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functions of this Website can be restricted. If third-party cookies or cookies for analytics are used, we will tell you about this specifically in this data privacy statement and, if necessary, will ask for your consent.

Server log files

The provider of these Web pages automatically collects and saves information that is automatically transmitted to us by your browser in server log files. This includes the following:

• Browser type and version
• Used operating system
• Referrer URL
• Host name of the computer accessing our Website
• Time of the server request
• IP address

This data is not associated with other data sources. The data is collected on the basis of Art. 6 Para 1 (f) GDPR. The Website operator has a legitimate interest in the technically error-free display and optimization of this Website, and the server log file data is required for this.

Contact form

If you send inquiries to us using the contact form, the information you provide on the form including all of the contact data you specify there will be saved by us so that we can process your inquiry and in case there are any follow-on questions. This data is not passed on without your consent. The processing of this data takes place on the basis of Art. 6 Para. 1 (b) GDPR if your inquiry is related to the fulfilment of a contract or in order to perform pre-contractual tasks. In all other cases, processing is based on our legitimate interests in the effective handling of inquiries sent to us (Art. 6 Para. 1 (f) GDPR) or on your consent (Art. 6 Para. 1 (a) GDPR) if consent was granted. Consent can be revoked at any time. The data that you enter on our contact form remains saved until you request its deletion, revoke your consent to it being saved or the purpose for saving it no longer applies (e.g. because your inquiry has been dealt with in full). Binding legal provisions such as retention periods remain unaffected by this.

Inquiries by e-mail, phone or fax

If you contact us by e-mail, phone or fax, your inquiry including all associated personal data (name, question) will be saved and processed in order to deal with the matter at hand. This data is not passed on without your consent. The processing of this data takes place on the basis of Art. 6 Para. 1 (b) GDPR if your inquiry is related to the fulfilment of a contract or in order to perform pre-contractual tasks. In all other cases, processing is based on our legitimate interests in the effective handling of inquiries sent to us (Art. 6 Para. 1 (f) GDPR) or on your consent (Art. 6 Para. 1 (a) GDPR) if consent was granted. Consent can be revoked at any time. The data that you send on our contact form remains saved until you request its deletion, revoke your consent to it being saved or the purpose for saving it no longer applies (e.g. because your inquiry has been dealt with in full). Binding legal provisions such as statutory retention periods remain unaffected by this.

Jotform

We have integrated Jotform into this Website. The provider is Jotform Inc., 111 Pine St. Suite, 1815 San Francisco, California 94111, US (hereinafter "Jotform"). Jotform allows us to create online forms in order to receive messages, inquiries and other information from visitors to our Website. All of the information you enter is processed on Jotform's servers. The use of Jotform takes place on the basis of our legitimate interest in finding out how we can help you in as user-friendly a way as possible (Art. 6 Para. 1 (f) GDPR). Where consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 (a) GDPR and on Art. 25 Para. 1 Teleservices Data Protection Act (TTDSG) if consent relates to the saving of cookies or accessing information on the end device of the user (e.g. device fingerprinting) as per the TTDSG. Consent can be revoked at any time. The data that you enter on our form remains saved until you request its deletion, revoke your consent to it being saved or the purpose for saving it no longer applies (e.g. because your inquiry has been dealt with in full). Binding legal provisions such as retention periods remain unaffected by this. Data transfer to the US is secured by means of standard EU contractual clauses that we have agreed with Jotform. For details, see: https://www.jotform.com/gdpr-compliance/dpa/.

Salesforce Sales Cloud

We use Salesforce Sales Cloud to manage customer data. The provider is salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich (hereinafter "Salesforce"). Salesforce Sales Cloud is a CRM system and, among other things, allows us to manage existing and potential customers and customer contacts and to organize sales and communication processes. The use of CRM systems also allows us to analyze our customer-related processes. The customer data is saved on Salesforce's servers. Personal data might also be transmitted to the parent company of salesforce.com Germany GmbH, salesforce.com inc., Salesforce Tower, 415 Mission Street, San Francisco, CA 94105, US. For further details on the functions of Salesforce Sales Cloud, see: https://www.salesforce.com/uk/. The use of Salesforce Sales Cloud takes place on the basis of Art. 6 Para. 1 (f) GDPR. The Website operator has a legitimate interest in ensuring that customer management and communication is as efficient as possible. Where consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 (a) GDPR and on Art. 25 Para. 1 Teleservices Data Protection Act (TTDSG) if consent relates to the saving of cookies or accessing information on the end device of the user (e.g. device fingerprinting) as per the TTDSG. Consent can be revoked at any time. Salesforce has binding corporate rules (BCRs) that have been approved by the French data privacy authorities. These are binding company-internal rules that legitimize company-internal data transfer to non-EU/EEC countries. For details, see: https://compliance.salesforce.com/en/salesforce-bcrs. For further information, see the Salesforce data privacy statement: https://www.salesforce.com/company/privacy/.

Registering with this Website

You can register with this Website in order to use additional functions. The data you enter to do this is used only to enable use of the offering or service for which you are registering. The mandatory entries requested during registration must be provided in full. Otherwise, your registration will be declined. We will use the e-mail address you provide when you register to inform you about important changes to our offering or changes that are required for technical reasons. Processing of the data provided upon registration takes place in order to bring about the user relationship triggered through the registration and, if applicable, to initiate further contracts (Art. 6 Para. 1 (b) GDPR). The data entered during registration is saved for as long as you are registered with this Website. It is then deleted. This does not affect statutory retention periods.

5. Analysis tools and advertising

Google Analytics

This Website uses functions of the Web analysis service Google Analytics. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics allows Website operators to analyze the behaviour of visitors to their Website. The Website operator receives various usage data such as page calls, duration of visit, used operating systems and the origin of the user. This data is grouped together in a user ID and is assigned to the end device of the Website visitor. In addition, Google Analytics can be used to record your mouse and scrolling actions and clicks, for example. Google Analytics also uses various modelling methods to enhance the collected data records, and uses machine learning technologies to analyze data. Google Analytics uses technologies that enable the recognition of users in order to analyze user behaviour (e.g. cookies and device fingerprinting). The information collected by Google about the use of this Website is generally transmitted to a Google server in the US and saved there. This service is used on the basis of your consent as per Art. 6 Para. 1 (a) GDPR and Art. 25 Para. 1 TTDSG. Consent can be revoked at any time. The transmission of data to the US is based on standard EU contractual clauses. For details, see: https://privacy.google.com/businesses/controllerterms/mccs/.

IP anonymization

We have activated IP anonymization on this Website. This means that your IP address is truncated by Google within the Member States of the European Union and other signatories of Agreement on the European Economic Area before being transmitted to the US. Only in exceptional cases will your full IP address be transmitted to a Google server in the US and truncated there. On behalf of the operator of this Website, Google will use this information to analyze your use of the Website, compile reports about Website activities and render further services for the Website operator in relation to Website and Internet usage. The IP address transmitted by your browser for the purpose of Google Analytics will not be associated with other Google data.

Browser plug-in

You can prevent the collection and processing of your data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. For more information about how user data is treated by Google, see Google's data privacy statement: https://support.google.com/analytics/answer/6004245?hl=en.

Demographics at Google Analytics

This Website uses Google Analytics Demographics to allow us to display appropriate ads to Website visitors within the Google advertising network. This feature allows reports containing information about the age, gender and interests of Website users to be compiled. This data comes from interest-based Google advertising and the visitor data of third-party providers. This data cannot be associated with any specific individual. You can deactivate this feature at any point using the ad settings in your Google account or can generally prevent the collection of data by Google Analytics as described in the section "Objection to data collection".

IONOS WebAnalytics

This Website uses the analysis services of IONOS WebAnalytics (hereinafter "IONOS"). The provider is 1&1 IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. IONOS enables the analysis of visitor figures and behaviour (e.g. number of page calls, duration of Website visit, bounce rate), visitor sources (so the page from which visitors reach us), visitor locations and technical data (browser and operating system versions). In particular, IONOS saves the following data for this purpose:

• Referrer (Website visited immediately beforehand)
• Requested Web page or file
• Browser type and version
• Used operating system
• Used device type
• Time of the access
• IP in anonymized form (used only to determine the location of the access)

IONOS data collection is completely anonymized, which means that the data cannot be traced back to individuals. Cookies are not set by IONOS WebAnalytics. The saving and analysis of data takes place in accordance with Art. 6 Para. 1 (f) GDPR. The Website operator has a legitimate interest in the statistical analysis of user behaviour in order to optimize the Website and the company's advertising. Where consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 (a) GDPR and on Art. 25 Para. 1 Teleservices Data Protection Act (TTDSG) if consent relates to the saving of cookies or accessing information on the end device of the user (e.g. device fingerprinting) as per the TTDSG. Consent can be revoked at any time. For more information on data collection and processing by IONOS WebAnalytics, see the IONOS data privacy statement at the following link: https://www.ionos.de/terms-gtc/index.php?id=6

6. Newsletter

Newsletter data

If you want to subscribe to the newsletter offered on our Website, we need your e-mail address and information that allows us to check that you are the owner of the specified e-mail address and really want to receive our newsletter. Other data is not collected or is collected on a voluntary basis only. We use the newsletter service provider detailed below.

MailPoet

This Website uses MailPoet to send newsletters. The provider is Aut O’Mattic A8C Ireland Ltd., Business Centre, No.1 Lower Mayor Street, International Financial Services Centre, Dublin 1, Ireland (hereinafter "MailPoet"), whose parent company is registered in the US. MailPoet is a service that allows us to organize and analyze the sending of newsletters. The data you enter in order to subscribe to our newsletter is saved on our servers but is sent via the MailPoet servers, which means that MailPoet processes your newsletter-related data (MailPoet sending service). For details, see: https://account.mailpoet.com/.

Data analysis by MailPoet

MailPoet allows us to analyze our newsletter campaigns. For example, we can see whether a newsletter e-mail has been opened and which links have been clicked. In this way, we can identify which links are popular with subscribers. We are also able to tell whether certain predefined actions were carried out after opening our newsletter/clicking a link (conversion rate). This means that we can see, for example, whether you made a purchase after opening our newsletter. MailPoet also allows us to cluster newsletter recipients into various categories. This means that we can categorize recipients by age, gender or residence. This allows us to better modify our newsletter in line with the target groups. If you do not wish to be included in MailPoet analyses, you must unsubscribe from our newsletter. Each newsletter e-mail contains an unsubscribe link. For detailed information about MailPoet functions, see the following links: https://account.mailpoet.com/ and https://www.mailpoet.com/mailpoet-features/. For the MailPoet data privacy statement, see: https://www.mailpoet.com/privacy-notice/.

Legal basis

Data processing takes place on the basis of your consent (Art. 6 Para. 1 (a) GDPR). You can revoke your consent at any point, effective for the future. The transmission of data to the US is based on standard EU contractual clauses. For details, see: https://automattic.com/de/privacy/.

Retention period

The data that you send us in order to subscribe to our newsletter is saved until you unsubscribe from the newsletter and is deleted once you remove yourself from the newsletter distribution list or once the data is no longer required. We reserve the right to delete or block e-mail addresses on our newsletter subscription list of our own accord if it is in our legitimate interest to do so as per Art. 6 Para. 1 (f) GDPR. Data saved by us for other purposes remains unaffected by this. Once you have been removed from our newsletter subscriber list, your e-mail address may be entered onto a blocklist if this is required in order to prevent you from receiving e-mails in future. The data on our blocklist is used for this purpose only and is not associated with other data. This serves your interests and our own interest in complying with legal requirements when sending newsletters (legitimate interest as per Art. 6 Para. 1 (f) GDPR). The saving of data on the blocklist is not time-limited. You can object to your data being saved there if your interests outweigh our own legitimate interests.

7. Plug-ins and tools

Google Fonts

This page uses Web fonts provided by Google to ensure the uniform display of fonts. When a page is called, your browser loads the required Web fonts into your browser cache in order to display texts and fonts correctly. The browser you use must establish a connection with the Google servers for this purpose. When this occurs, Google acquires the information that your IP address was used to call this Website. The use of Google Fonts takes place on the basis of Art. 6 Para. 1 (f) GDPR. The Website operator has a legitimate interest in the uniform display of characters on this Website. Where consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 (a) GDPR and on Art. 25 Para. 1 Teleservices Data Protection Act (TTDSG) if consent relates to the saving of cookies or accessing information on the end device of the user (e.g. device fingerprinting) as per the TTDSG. Consent can be revoked at any time. If your browser does not support Web fonts, a standard font will be used by your computer. For more information about Google Web fonts, see https://developers.google.com/fonts/faq and Google's data privacy statement: https://policies.google.com/privacy?hl=en.

Font Awesome

This Website uses Font Awesome to enable the uniform display of fonts and symbols. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, US. When a page is called, your browser loads the required fonts into your browser cache in order to display texts, fonts and symbols correctly. The browser you use must establish a connection with the Font Awesome servers for this purpose. When this occurs, Font Awesome acquires the information that your IP address was used to call this Website. The use of Font Awesome takes place on the basis of Art. 6 Para. 1 (f) GDPR. We have a legitimate interest in the uniform display of characters on our Website. Where consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 (a) GDPR and on Art. 25 Para. 1 Teleservices Data Protection Act (TTDSG) if consent relates to the saving of cookies or accessing information on the end device of the user (e.g. device fingerprinting) as per the TTDSG. Consent can be revoked at any time. If your browser does not support Font Awesome, a standard font will be used by your computer. For more information about Font Awesome, see the Font Awesome data privacy statement at: https://fontawesome.com/privacy.

Google reCAPTCHA

We use Google reCAPTCHA (hereinafter "reCAPTCHA") on this Website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. The aim of reCAPTCHA is to check whether data entry on this Website (e.g. on a contact form) is performed by a human or by an automated program. To determine this, reCAPTCHA analyzes the behaviour of Website visitors on the basis of various features. This analysis starts automatically when a Website visitor accesses our Website. For the analysis, reCAPTCHA evaluates various pieces of information (e.g. IP address, duration of Website visit and mouse movements made by the user). The collected data is forwarded to Google during the analysis process. reCAPTCHA analyses take place fully in the background. Website users are not made aware of the fact that an analysis is taking place. The saving and analysis of data takes place in accordance with Art. 6 Para. 1 (f) GDPR. The Website operator has a legitimate interest in protecting the Website from malicious automated spying and SPAM. Where consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 (a) GDPR and on Art. 25 Para. 1 Teleservices Data Protection Act (TTDSG) if consent relates to the saving of cookies or accessing information on the end device of the user (e.g. device fingerprinting) as per the TTDSG. Consent can be revoked at any time. For more information about Google reCAPTCHA, see Google's data privacy provisions and the Google usage conditions at the following links: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

8. eCommerce and payment providers

Processing of data (customer and contract data)

We collect, process and use personal data only when required in order to establish a legal relationship, compile the content of a legal relationship or change a legal relationship (inventory data). This takes place on the basis of Art. 6 Para. 1 (b) GDPR, which permits the processing of data in order to fulfil a contract or perform pre-contractual tasks. We collect, process and use personal data relating to the use of this Website (usage data) only when required in order to enable the use of the service by the user or to invoice the user. The collected customer data is deleted following the completion of the order or the end of the business relationship. This does not affect statutory retention periods.

9. Audio and video conferences

Data processing

We use online conferencing tools to communicate with our customers. The tools we use are listed in detail below. When you communicate with us by means of a video or audio conference via the Internet, your personal data is collected and processed by us and the provider of the conferencing tool in question. These conferencing tools collect all of the data that you provide/use in order to use the tools in question (e-mail address and/or telephone number, for example). In addition, the conferencing tools process the duration of the conference, start and end times of conference participation, number of participants and other contextual information relating to the communication process (metadata). Moreover, the tool provider processes all of the technical data required for the realization of online communication. In particular, this includes IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone/loudspeaker and connection type. If content is exchanged, uploaded or provided by other means in the tool, this content is also saved on the servers of the tool provider. Such content includes cloud recordings, chat/instant messages, voicemail, uploaded photos and videos, files, whiteboards and other information shared during the use of the service. Please note that we do not have full control over the data processing actions of the used tools. Our possibilities are largely determined by the corporate policy of the provider in question. For more information on data processing by conferencing tools, see the data privacy statements of the various tools, which are listed below this text.

Purpose and legal bases

The conferencing tools are used to communicate with potential or existing contract partners or to offer certain services to our customers (Art. 6 Para. 1 (b) GDPR). In addition, the use of tools aims to simplify and accelerate communication between customers and us/our company (legitimate interest as per Art. 6 Para. 1 (f) GDPR). Where consent has been requested, the use of the tools in question takes place on the basis of this consent. Consent can be revoked at any time, effective for the future.

Retention period

The data collected directly by us using video and conferencing tools is deleted from our systems once you request its deletion or revoke your consent to your data being saved or once the purpose for saving the data no longer applies. Saved cookies remain on your end device until you delete them. This does not affect binding statutory retention periods. We do not have any influence on the retention period of data saved by the operators of the conferencing tools for their own purposes. For more information, please contact the operators of the conferencing tools directly.

Used conference tools

We use the following conferencing tools:

Zoom

We use Zoom. The provider of this service is Zoom Communications Inc., San Jose, 55 Almaden Boulevard, 6th Floor, San Jose, CA 95113, US. For information on data processing, see the data privacy statement of Zoom: https://explore.zoom.us/en/privacy/. The transmission of data to the US is based on standard EU contractual clauses. For details, see: https://explore.zoom.us/en/privacy/.

TeamViewer

We use TeamViewer. The provider is TeamViewer Germany GmbH, Jahnstr. 30, 73037 Göppingen, Germany. For information on data processing, see the data privacy statement of TeamViewer: https://www.teamviewer.com/en/privacy-notice/?t=1653390044388.

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, US. For information on data processing, see the data privacy statement of Microsoft Teams: https://privacy.microsoft.com/en-gb/privacystatement.

10. Own services

OneDrive

We have integrated OneDrive into this Website. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, US (hereinafter "OneDrive"). OneDrive allows us to integrate an upload area to which you can upload content on our Website. Uploaded content is saved on the OneDrive servers. When you access our Website, a connection to OneDrive is also established so that OneDrive can tell that you have visited our Website. OneDrive is used on the basis of Art. 6 Para. 1 (f) GDPR. The Website operator has a legitimate interest in providing a reliable upload area on the Website. If consent has been requested, processing takes place exclusively on the basis of Art. 6 Para. 1 (a) GDPR. Consent can be revoked at any time.