Privacy Policy

Any collection, use, storage, deletion or other use (hereinafter “processing”) of data is solely for the purpose of providing our services. Our services have been designed with the aim of using as little personal data as possible. In this context, “personal data” (hereinafter also referred to as “data”) is understood to mean all individual information about personal or factual circumstances of an identified or identifiable natural person (so-called “data subject”).

The following statements on data protection describe what types of personal data are processed when you access our website, what happens to this personal data and how you can object to data processing if necessary.

1 General information on data processing on this website
1.1 Person responsible
The responsible party in the sense of the EU General Data Protection Regulation (DSGVO) is:

Studio2B GmbH

Address: Lietzenburger Str. 77, 10719 Berlin, Germany
Phone: + 49 (0) 30 634 998 714
E-mail: info@studio2b.de
Homepage: https://www.deinerstertag.de/

1.2 Protection of your data
We have taken technical and organizational measures to ensure that the provisions of the GDPR are observed both by us and by external service providers working for us.

If we work with other companies, such as email and server providers, to provide our services, this is only done after an extensive selection process. In this selection process, each individual service provider is carefully selected for its suitability in connection with technical and organizational capabilities in data protection. This selection procedure is documented in writing and a contract pursuant to Art. 28 (3) DSGVO on the processing of personal data on behalf (AV contract) is only concluded if it meets the requirements of Art. 28 DSGVO.

Your data will be stored on specially protected servers. Access to it is only possible for a few specially authorized persons.

Our website is SSL/TLS encrypted, which you can recognize by the “https://” at the beginning of the URL. If personal data is involved in e-mail communication, e-mails are sent from our site in encrypted form. We also use the integrated TLS certificate for this purpose.

1.3 Deletion of personal data
We only process personal data for as long as it is necessary. As soon as the purpose of the data processing is fulfilled, a blocking and deletion takes place according to the standards of the deletion concept here, unless legal regulations oppose a deletion.

2 Data processing on this website and creation of log files
2.1 Description and scope of data processing
When you visit our website, our web servers temporarily store each access in a log file. In the process, the following personal data is collected and stored until automated deletion:

– IP address of the requesting computer
– Date and time of access
– Name and URL of the accessed file
– Amount of data transmitted
– Message as to whether the retrieval was successful
– Recognition data of the browser and operating system used
– Website from which the access was made

We use the services of Hetzner Online GmbH as a web hosting provider. The data processing is carried out by: Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany.

Your data is stored by Hetzner exclusively in Germany. IT security, data protection and availability are confirmed annually by an independent TÜV certification (ISO 27001). For more information on data protection at Hetzner: https://www.hetzner.de/rechtliches/datenschutz/. Explanations of the scope of possible data processing within the scope of web hosting can be found via https://www.hetzner.de/rechtliches/webhosting/.

2.2 Legal basis for data processing
The processing of this data is based on Art. 6 para. 1 p.1 lit. f) DSGVO. Our legitimate interest is based on making our website accessible to you.

2.3 Purpose of the data processing
Data processing is carried out for the purpose of enabling the use of the website (connection establishment). It is used for system security, technical administration of the network infrastructure and optimization of the Internet offer. The IP address is only evaluated in the event of attacks on our network infrastructure or the network infrastructure of our Internet provider.

2.4 Duration of data storage
The personal data will be deleted as soon as they are no longer required for the above-mentioned purposes. This is the case when you close the website. Our hosting provider may use the data for statistical surveys. However, the data will be anonymized for this purpose.

2.5 Possibility of elimination by the data subject
The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. If you wish to assert your legal rights or have general questions, please contact Hetzner’s company data protection officer by e-mail at data-protection@hetzner.com.

3 Use of cookies
3.1 Description and scope of data processing
Our website uses cookies. These are stored on your computer when you use our website. Cookies are small text files that are stored on your hard drive, assigned to the browser you are using, and through which certain information flows to us or to the body that sets the cookie. Cookies cannot execute programs or transmit viruses to your computer. They are used by us to analyze the use of our website in anonymous or pseudonymous form and to present you with interesting offers on this website. In this way, various data can be transmitted

– Frequency of website visits
– Which functions of the website you use
– Your cookie setting
– Your language setting

When you call up the website, a cookie banner informs you about the use of cookies and refers you to the privacy policy.

Notice regarding data processing in the USA by Facebook, Instagram, YouTube, Google, LinkedIn:

By clicking on “Agree to all”, you consent in accordance with Art. 6 para. 1 p. 1 lit. a) DSGVO that your data is processed in the USA. According to the ECJ, the data protection standard in the USA is insufficient and there is a risk that your data will be processed by the US authorities for control and monitoring purposes, possibly also without any legal remedy. If you only consent to the setting of essential cookies, the transfer will not take place. Any consent given can be revoked at any time.

3.2 Legal basis for data processing
The legal basis for the processing of data through cookies that do not solely serve the functionality of our website is Art. 6 (1) p. 1 lit. a) DSGVO.

The legal basis for data processing for cookies that solely serve the functionality of this website is Art. 6 para. 1 S.1 lit. f) DSGVO.

3.3 Purpose of data processing
Our legitimate interest results from the guarantee of a smooth connection setup and a comfortable use of our website as well as for reasons of evaluation of system security and stability. The data processing also takes place in order to enable a statistical evaluation of the website usage.

3.4 Duration of data storage
There are two types of cookies. Both are used on this website:

– Transient cookies (for this purpose a)
– Persistent cookies (see b)

a) Transient cookies, they are automatically deleted when you close the browser. These include, in particular, session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

b) Persistent cookies, these are deleted automatically after a specified duration, which may differ depending on the cookie.

3.5 Possibility of elimination by the data subject.
You have the option at any time to revoke your consent to data processing by cookies that are not solely used for the functionality of the website. In addition, we set cookies only after you have consented to the setting of cookies when accessing the site. In this way, you can prevent data processing via cookies on our website.

You can also delete the cookies in the security settings of your browser at any time. We would like to point out that you may not be able to use all the functions of this website. You can also prevent cookies from being set at any time by making the appropriate settings in your Internet browser.

4 Contact
4.1 Description and scope of data processing
Through our website, it is possible to contact us via e-mail to info@studio2b.de or a contact form. For this purpose, various data are required to answer the inquiry, which are automatically stored for processing.

The following data is collected as a minimum (marked as mandatory field) within the contact form:

– E-mail address
– First name
– Last name
– Telephone number
– School address
– Address of school
– Place of residence

The data will not be passed on to third parties.

4.2 Legal basis for data processing
The legal basis used here is Art. 6 para. 1 p.1 lit. b) DSGVO.

4.3 Purpose of data processing
We process your data exclusively in order to process your contact request.

4.4 Duration of data storage
Your data will be deleted by us as soon as the purpose of the data processing has been fulfilled, predominantly immediately after the request has been answered. In rare cases, however, we may retain your data for a longer period of time. This may result from legal, regulatory or contractual obligations.

4.5 Possibility of elimination by the data subject
You can contact us at any time and object to further processing of your data. For this purpose, please contact us. In this case, we will unfortunately not be able to continue communication with you. All personal data processed by us in the course of contacting you will be deleted in this case, unless this deletion conflicts with legal obligations to retain your data.

4.6 Calendly
4.6.1 Description and scope of data processing
You can make appointments with us via our website. For this purpose, we use the tool Calendly. The data processing is carried out by: Calendly LLC, 271 17th St NW, 10th Floor, Atlanta, Georgia 30363, USA.

When booking an appointment, the following data is processed:

Date and time
Name
E-mail address
Possibly indication of additional appointment participants
Telephone number
You can also enter information about the subject of the meeting.

The entered data will be processed for the planning, execution and, if necessary, for the follow-up of the appointment. All connections from the browser to the Calendly platform are encrypted during transmission using TLS SHA-256 with RSA encryption. The appointment data is stored on Calendly’s servers. Data transfer to the USA is based on standard contractual clauses of the EU Commission: https://calendly.com/pages/dpa.

Notice regarding data processing in the USA:

By using Calendly, there is a possibility that your data will be processed in the USA. According to the ECJ, the data protection standard in the USA is insufficient and there is a risk that your data will be processed by the US authorities for control and monitoring purposes, possibly also without any legal remedy. If you contact us through other means, no such transfer will take place through Calendly.

Calendly’s privacy policy can be found at: https://calendly.com/de/pages/privacy.

4.6.2 Legal basis for data processing
The legal basis for data processing is based on Art. 6 para. 1 p. 1 lit. b) DSGVO.

4.6.3 Purpose of data processing
Data processing is carried out for the purpose of providing you with an easy way to make an appointment with us.

4.6.4 Duration of data storage
The data will be deleted as soon as the purpose of the data processing has been achieved and no legal, official or contractual regulations prevent deletion.

4.6.5 Possibility of elimination by the data subject
You have the option to object to further data processing at any time. For this purpose, please contact our data protection officer.

5 Product e-mails
5.1 Description and scope of data processing
We send e-mails to existing customers. In doing so, the following data is processed:

– First name
– Last name
– E-mail address

In principle, the data will not be passed on to third parties.

5.2 Legal basis for data processing
Existing customers may receive product emails from us who have not given explicit consent. However, this is only done within the narrow limits of Section 7 (3) of the German Unfair Competition Act (UWG), which in light of Article 95 DSGVO is to be understood as a mirror image of Article 6 (1) p.1 lit. f) DSGVO. Our legitimate interest is to inform our existing customers about our products through promotional e-mails and thus to maintain contact with these customers.

It is also possible that we send product recommendations to our existing customers by post. For this purpose, we process your address data in accordance with Art. 6 (1) p. 1 lit. f) DSGVO on the basis of our legitimate interest in informing you about our products. As a customer, you will also be informed by post about the processing of the data and have the option to object to the sending of postal product recommendations at any time.

5.3 Purpose of data processing
The product e-mails are intended to inform you at regular intervals about offers from us.

5.4 Duration of data storage
We will only process your data for as long as is necessary to fulfill the purpose for which it was collected and for as long as no legal or official retention obligations prevent its deletion.

5.5 Possibility of elimination by the data subject
You have the option to object to data processing at any time. To do so, please click the unsubscribe link contained in every e-mail.

5.6 Shipping service provider Campaign Monitor
5.6.1 Description and scope of data processing
Emails are sent using “Campaign Monitor”, an online marketing platform. The data processing is carried out by: Campaign Monitor Pty Ltd,123 Mission Street, 26th Floor, San Francisco, CA 94105, USA.

The e-mail addresses of our existing customers, as well as their other data described in this notice, are stored on Campain Monitor’s servers in the USA. Campaign Monitor uses this information to send and evaluate product e-mails on our behalf. Furthermore, Campaign Monitor may, according to its own information, use this data to optimize or improve its own services, e.g. to technically optimize the dispatch and display of the newsletters or for economic purposes to determine from which countries the recipients come. However, Campaign Monitor does not use the data of our recipients to write to them ourselves or to pass it on to third parties. The e-mails contain a so-called “web-beacon”, i.e. a pixel-sized file that is retrieved from Campaign Monitor’s server when it is opened. In the course of this retrieval, technical information such as information about the browser and your system, as well as your IP address and the time of the retrieval are collected. The statistical collection also includes the determination of whether the emails are opened, when they are opened and which links are clicked. While this information can be attributed to individual recipients for technical reasons, it is neither our nor Campaign Monitor’s intention to monitor individual users.

We trust in the reliability and IT and data security of Campaign Monitor. You can view Campaign Monitor’s privacy policy here https://www.campaignmonitor.com/policies/.

5.6.2 Legal basis for data processing
Data processing by Campaign Monitor is carried out on the basis of a legitimate interest on our part in effective and secure transmission to you, Art. 6 para. 1 p. 1 lit. f) DSGVO.

5.6.3 Purpose of data processing
We use Campaign Monitor as our dispatch service provider to ensure effective address management and to keep in touch with you via the newsletter.

5.6.4 Duration of data storage
According to Campaign Monitor, Campaign Monitor only stores your personal data for as long as we use your personal data for mailing purposes. Campaign Monitor will delete your data when we delete you from our mailing list.

5.6.5 Possibility of elimination by the data subject
You can object to the processing of your data by Campaign Monitor with us. We will then review your justified objection and inform you whether and why we will continue the data processing. In addition, you are always free to use the “opt-out” link at the end of each email, which will result in us deleting your email address from our address file, which is why Campaign Monitor will then also not process your personal data.

6 Package deliveries
6.1 Description and scope of data processing
When you arrange a delivery with us, we process name, address, telephone number. In the case of package deliveries, we also pass on the data to our contractually bound order processors and service providers.

6.2 Legal basis for data processing
The legal basis for the data processing associated with this is Art. 6 para. 1 p. 1 lit. b) DSGVO, i.e. the processing of your data is necessary for the performance of the contracts and delivery agreements.

6.3 Purpose of data processing
We process your data in order to conclude the contract including delivery agreement with you, including processing invoicing by e-mail or post and receipt of payment, to ensure punctual delivery and to inform you about delivery dates and/or changes to the delivery.

We share your data with our service providers so that they can process the delivery and communicate with you, if necessary, to announce and coordinate the delivery of your ordered goods.

6.4 Duration of data storage
Your data will only be stored for as long as is necessary to fulfill the purpose and for as long as we are obligated to store your data by legal, contractual or official obligations.

6.5 Possibility of elimination by the data subject
The data processing is mandatory in order to be able to process your contract, which is why it cannot be dispensed with.

6.6 PayPal
6.6.1 Description and scope of data processing
We offer PayPal as a possible payment service. PayPal is a virtual account model and means of payment. In order to use the payment service by means of PayPals, prior registration with PayPal is required. The data processing is carried out by: PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you use PayPal as a means of payment, your personal data will be transmitted to PayPal. The personal data are

– Name,
– surname,
– address,
– e-mail address,
– IP address,
– telephone number,
– mobile number, if any, and
– other data required for final payment processing.

In addition to passing on the data to credit agencies, it is also possible that PayPal may pass on the personal data to affiliated companies, including subcontractors, insofar as this becomes necessary for the fulfillment of contractual obligations. The same applies to commissioned processing. PayPal uses binding internal data protection rules (Binding Corporate Rules): https://www.paypal.com/de/webapps/mpp/ua/bcr to safeguard data processing. Regarding PayPal’s data protection information, please refer to the following link: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

6.6.2 Legal basis for data processing
The legal basis is based on Art. 6 para. 1 p. 1 lit. b) DSGVO.

6.6.3 Purpose of data processing
The transmission of the data is necessary to prevent any misuse. We inform that PayPal may transmit the personal data to credit agencies. This is because PayPal reserves the right to check your identity and creditworthiness.

6.6.4 Duration of data storage
Your data will only be stored for as long as is necessary for the processing of the contract and invoicing, unless legal or contractual storage periods prevent the deletion of your data.

6.6.5 Possibility of elimination by the data subject
Data processing is mandatory in order to process your payment via PayPal, which is why it cannot be dispensed with if you have chosen this payment method. There is therefore no possibility of elimination.

7 Social media links
We have integrated social media platforms on our services via links that may result in the social media providers receiving data from you. If you click on the social media link, the website of the respective social media provider is called up. By calling up the website of the respective social media provider via our services, the respective reference data is transmitted to the respective social media provider. The social media provider thereby receives the information that you have visited us.

Note on data processing in the USA:

If you click on a social media link, data about you may be processed by the respective provider in the USA. According to the ECJ, the data protection standard in the USA is inadequate and there is a risk that your data will be processed by the US authorities for control and monitoring purposes, possibly also without any legal remedy. Unless you click on the links of the social media providers, no data transfer takes place.

Further information on data processing by the social media providers can be found here:

Meta Page Insights: https://de-de.facebook.com/help/pages/insights
Meta Data Policy: https://de-de.facebook.com/about/privacy
Meta Full Data Use Policy: https://de-de.facebook.com/full_data_use_policy
LinkedIn: https://www.linkedin.com/legal/privacy-policy
Twitter: https://twitter.com/privacy?lang=de
Xing: https://www.xing.com/privacy
YouTube: https://www.google.de/intl/de/policies/privacy/
Instagram: https://help.instagram.com/155833707900388 https://www.instagram.com/about/legal/privacy/
TikTok: https://www.tiktok.com/legal/privacy-policy-eea?lang=de

7.1.1 YouTube Video
We use the provider YouTube for the integration of videos on our website. Jointly responsible for data processing with us is: YouTube LLC, 901 Cherry Avenue, San Bruno, CA 94066, USA, represented by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Data processing for the European Economic Area and for Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Normally, when you call up some pages of our website with embedded videos, your IP address is already sent to YouTube and cookies are installed on your computer. However, we have embedded YouTube videos with the extended data protection mode. In this case, YouTube still contacts the Google Ad Manager service – formerly Double Click – from Google, but according to Google’s privacy policy, personal data is not evaluated in the process. As a result, YouTube no longer stores information about visitors unless they watch the video. If you click on the video, your IP address is transmitted to YouTube and YouTube learns that you have watched the video. If you are logged in to YouTube, this information is also assigned to your user account. Of the then possible collection and use of your data by YouTube, we have no knowledge and no influence on it. For further information on the subject of data protection, we refer to the following data policy of YouTube and Google: https://www.google.de/intl/de/policies/privacy/

7.1.1.1 Legal basis for data processing
The legal basis for data processing is your consent pursuant to Art. 6 para. 1 p.1 lit. a) DSGVO.

7.1.1.2 Purpose of data processing
We use social media to make our company better known. In addition, we would like to offer you the opportunity to interact with social media via our website.

7.1.1.3 Duration of data storage
The data collected by YouTube (Google) via plugins and advertising are deleted by the responsible party after a fixed storage period. According to Google, this time is 9 or 18 months.

7.1.1.4 Possibility of elimination by the data subject.
You have the option to revoke your granted consent to data processing at any time. Please contact our data protection officer for this purpose. To prevent data processing by YouTube, you have the option of logging out of YouTube before accessing our website and deleting all cookies from your browser history. Further settings and objections to the use of data for advertising purposes, are possible within the YouTube profile settings. The settings are platform-independent, i.e. they are applied to all devices, such as desktop computers or mobile devices.

8 Trackers and analysis tools
We use the following analysis tools to continuously improve our website offering. Which data is processed in each case and how you can reach the respective service providers is explained below:

8.1 Facebook Custom Audience / Facebook Pixel
8.1.1 Description and scope of data processing
Our website uses the visitor action pixel from Meta (“Facebook Pixel”) for conversion measurement. The data processing is carried out by: Meta Platforms Ireland Limited, 1 Hacker Way, Menlo Park, CA 94025, USA.

With the help of the Facebook pixel, the behavior of site visitors can be tracked after they visit our website. This allows us to evaluate the effectiveness of Meta ads for statistical and market research purposes and to optimize future advertising efforts. Meta receives the following categories of data: the forwarding URL, browser information and the Facebook user ID of the person if he or she has a Facebook account and is logged in on Facebook.

The data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes, in accordance with the Meta Data Usage Policy. This allows Meta to enable the placement of advertisements on pages of Meta as well as outside of Meta. This use of the data cannot be influenced by us as site operator.

The data we receive we use for: Statistics. We cannot establish a personal reference.

You can find Meta’s data protection information at https://www.facebook.com/about/privacy/.

8.1.2 Legal basis for data processing
The legal basis for the use of the application is your consent, according to Art. 6 para. 1 p. 1 lit. a) DSGVO.

8.1.3 Purpose of data processing
We process your data for the purpose of demand-oriented and ongoing optimization of our website. This also results in our legitimate interest in data processing.

8.1.4 Duration of data storage
The data will be deleted as soon as it is no longer required for our recording purposes and no legal, official or contractual regulations prevent deletion.

8.1.5 Possibility of elimination by the data subject
You have the option to revoke your granted consent to data processing at any time. For this purpose, please contact us. You can deactivate the “Custom Audiences” remarketing function in the Advertising Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen, provided you have a Facebook account. If you do not have a Facebook account, you can deactivate Meta’s usage-based advertising on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/

8.2 Google Analytics
8.2.1 Description and scope of data processing
Our website uses Google Analytics. This is a service for analyzing access to websites of Google LLC. (“Google”) and enables us to improve our Internet offer. The data processing for the European Economic Area and for Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Cookies enable us to analyze your use of our website. The information collected by means of a cookie are:

– IP address,
– time of access,
– access duration

and is transferred to a Google server in the USA and stored there. The evaluation of your activities on our website is transmitted to us in the form of reports. Google may pass on the information collected to third parties if this is required by law or if third parties process this data on behalf of Google. The Google tracking codes on our website use the “_anonymizeIp()” function, which means that IP addresses are only processed in abbreviated form in order to exclude any possible direct personal connection with you.

At https://www.google.de/intl/de/policies/ and at http://www.google.com/analytics/terms/de.html you will find more detailed information on the terms of use and data protection of Google Analytics.

8.2.2 Legal basis for data processing
The legal basis for the processing of personal data is your consent pursuant to Art. 6 para. 1 p.1 lit. a) DSGVO.

8.2.3 Purpose of the data processing
The processing of your personal data enables us to analyze your surfing behavior. By evaluating the data obtained, we are able to compile information about the use of the individual components of our website. This helps us to continuously improve our website and its user-friendliness.

8.2.4 Duration of data storage
The data will be deleted 60 months after your [last] visit to our website.

8.2.5 Possibility of elimination by the data subject
You have the possibility at any time to revoke a given consent to data processing with effect for the future. For this purpose, please contact us. You can also prevent the installation of cookies from Google Analytics yourself by setting your browser software accordingly. In this case, however, you may not be able to use all the functions of our website to their full extent. Google Analytics can also be deactivated and controlled by browser extensions, e.g. http://tools.google.com/dlpage/gaoptout?hl=de.

8.3 Google Tag Manager
8.3.1 Description and scope of data processing
Google Tag Manager is a solution with which we can manage so-called website tags via an interface (and thus, for example, integrate Google marketing services into our online offering). The Tag Manager serves as a “manager” of the implemented tags. This allows us to centrally manage integrated Google products or other analysis tools on our website. The tags embedded on the website are referred to as sections of code that make it possible to track your activities on our website. By using our website, Google Tag Manager is downloaded, which automatically results in the user’s IP address being forwarded to Google. With regard to the processing of personal data, please refer to the information on Google services. The data processing for the European Economic Area and for Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

You can access the usage guidelines of the Google Tag Manager here: https://www.google.com/intl/de/tagmanager/use-policy.html

8.3.2 Legal basis for data processing
The legal basis for the processing of personal data is your consent pursuant to Art. 6 (1) p. 1 lit. a) DSGVO.

8.3.3 Purpose of data processing
Google Tag Manger simplifies the management and organization of the analysis tools used for the website. In order to integrate an analysis tool, JavaScript codes must be integrated into the website. By using Google Tag Manger, it is possible for us to manage these embedded codes from one place.

8.3.4 Duration of data storage
Since data storage is not carried out directly by Google Tag Manager, but the data is forwarded to the tracking tools, it is necessary to check with the individual embedded tracking tools how long the data is stored.

8.3.5 Possibility of elimination by the data subject.
You have the option at any time to revoke a given consent to data processing with effect for the future. For this purpose, please contact us. Further information, regarding the management of your data, can be found in the privacy statements of the tools used.

9 Advertising and marketing tools
Furthermore, tools are integrated on our website that ensure that our website is displayed to you in an Internet search, as a relevant search result or marked as advertising. In the following, we have broken down the programs used in connection with our website for you:

9.1 LinkedIn Ads and Conversion Tracking
9.1.1 Description and scope of data processing.
We place advertisements on LinkedIn. We also use the analytics and conversion tracking technology of the LinkedIn platform to test the effectiveness of these ads. The data processing is carried out by: LinkedIn Ireland, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

LinkedIn places a cookie on your computer, from which information is obtained for the playout of advertisements. The cookie text files contain information about your visits to our website, in particular the pages you have viewed, in order to be able to make specific product recommendations on subsequent visits to our website or third-party websites. The cookie contains a randomly assigned alias. If you visit our website or LinkedIn’s website again within a certain period of time, LinkedIn will recognize you through this alias. However, this information cannot be linked to your person. Neither we nor LinkedIn merge this information with your personal data and do not pass on any personal data to third parties.

9.1.2 Legal basis for data processing
Data processing is based on your consent pursuant to Art. 6 para. 1 p.1 lit. a) DSGVO.

9.1.3 Purpose of data processing
It is in our interest to inform you about our offer and to make it clear and user-friendly for you. This also represents the purpose of the data processing.

9.1.4 Duration of data storage
The data will be deleted as soon as they are no longer required for our recording purposes and no legal, contractual or official regulations prevent deletion.

9.1.5 Possibility of elimination by the data subject
You have the option to revoke your granted consent to data processing at any time. For this purpose, please contact us. You can prevent the storage and use of data in a cookie by LinkedIn by accessing the link https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out and selecting “Decline”.If you select this option, a new cookie (opt-out cookie) will be set in your browser, which informs LinkedIn that no data about your browsing behavior may be stored. Please note that the setting must be made for all browsers you use. If all your cookies in a browser are deleted, this will also affect LinkedIn’s opt-out cookie.

10 Other third-party tools
Furthermore, we use third-party providers that help us with page display and website functionality. These are listed below:

10.1 Google Maps
10.1.1 Description and scope of data processing
This website uses the Google Maps product from Google LLC. Data processing for the European Economic Area and for Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

When you call up a page, your browser loads the required geo-information into its browser cache in order to display the map correctly. For this purpose, the browser you use must connect to Google’s servers. This gives Google knowledge that our website was called up via your IP address and which map was displayed. The terms of use of Google Maps can be found at https://www.google.com/intl/de_de/help/terms_maps.html.

10.1.2 Legal basis for data processing
The legal basis is your consent in accordance with Art. 6 para. 1 p. 1 lit. a) DSGVO.

10.1.3 Purpose of data processing
The use of Google Maps makes it easier for you to find our location, and to interact with it in various ways, e.g. by route planning.

10.1.4 Duration of data storage
The data is deleted as soon as it is no longer required for the purpose of data processing, unless legal, official or contractual regulations prevent deletion.

10.1.5 Possibility of elimination by the data subject
You have the option to revoke a granted consent to data processing at any time. For this purpose, please contact us.

If you choose not to use Google Maps, parts of our website cannot be used.

10.2 Self-hosted Google Web Fonts
10.2.1 Description and scope of data processing
We use so-called web fonts on the website for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. We have integrated the web fonts locally on our own website so that Google does not know that our website has been accessed via your IP address. If your browser does not support web fonts, a standard font will be used by your computer.

10.2.2 Legal basis for data processing
The legal basis is based on our legitimate interest pursuant to Art. 6 (1) p. 1 lit. f) DSGVO.

10.2.3 Purpose of data processing
The purpose of the data processing is the uniform presentation of fonts on this website in order to offer a visually interesting and at the same time user-friendly website.

10.2.4 Duration of data storage
No data will be stored.

10.2.5 Possibility of elimination by the data subject.
You can set your browser so that it does not support web fonts. In this case, a standard font will be used by your computer.

10.3 Typeform
10.3.1 Description and scope of data processing
We use the service provider Typeform for internal evaluation. The data processing is carried out by: TYPEFORM SL, c/ Bac de Roda, 163 (local), 08018 Barcelona – Spain.

For this purpose, the following data are processed:

IP address
Optionally, the following data will also be processed:

Request
Name
E-mail address
Message
We have concluded an order processing contract (AV contract) with Typeform for the use of your data in accordance with data protection regulations. Typeform is ISO27001 and SOC2 certified. You can view the AV contract and privacy policy provided by Typeform here: https://admin.typeform.com/to/dwk6gt/?typeform-source=www.typeform.com

10.3.2 Legal basis for data processing
The processing of this data is based on Art. 6 para. 1 p.1 lit. f) DSGVO. Our legitimate interest is based on guaranteeing stability, functionality and security through a secure service provider.

10.3.3 Purpose of data processing
We use the forms hosted by Typeform to provide our users with comprehensive and clear information on their questions regarding data protection.

10.3.4 Duration of data storage
Your data will be deleted by us as soon as the purpose of the data processing has been fulfilled and no legal, official or contractual obligations prevent deletion. All data will be deleted no later than five years after the termination of our contract with Typeform.

10.3.5 Possibility of elimination by the data subject
The rights of data subjects affected by the handling of data at Typeform, in particular to object, correct, delete and block data, must be asserted against us.

10.4 Zenkit
10.4.1 Description and scope of data processing
We have integrated forms from the form generator Zenkit (product: Zenforms) on our website. The data processing is carried out by: Axonic Informationssysteme GmbH, Kaiserstraße 241, 76133 Karlsruhe, Germany.

We use the provider to be able to request data for new products from our corporate customers via form. In the process, the following personal data is collected and processed by Zenkit:

Cookies
Usage data
First name and last name
E-mail address
Telephone number
Company address
Profile photo
Audio recordings
The data is processed by the provider exclusively on a server in Germany. In addition, we have concluded an order processing agreement with Axonic. You can also find more information about data protection at Zenkit here: https://zenkit.com/de/internet-datenschutz/

10.4.2 Legal basis for data processing
The use of Zenkit forms on our website is based on the legal basis of Art. 6 (1) lit. f) DSGVO. Our legitimate interest is to include forms on our website that facilitate the retrieval of data.

However, the filling out of the forms is based on your consent according to Art. 6 para. 1 lit. a) DSGVO.

10.4.3 Purpose of data processing
The purpose of the data processing is to query our customers about new projects in order to be able to continuously optimize our offer.

10.4.4 Duration of data storage
Your data will be deleted as soon as the purpose of data processing has been fulfilled and no legal, official or contractual obligations prevent deletion.

10.4.5 Possibility of elimination by the data subject
The rights of data subjects affected by data handling at Zenkit, in particular to object, correct, delete and block data, must be asserted against us. In addition, you have the possibility to revoke your given consent at any time.

If you have any questions about data protection at Zenkit, you can also contact the provider directly: privacy@zenkit.de.

11 Data protection notice for our appearances in social media
We operate the following own presences in social media:

– Meta: https://www.facebook.com/deinerstertag.de/
– Instagram: http://www.instagram.com/deinerstertag/
– TikTok: https://www.tiktok.com/@yourfirstday
– Youtube: https://www.youtube.com/channel/UC6iDIGrFrXIOav7rc98zhHA
– LinkedIn: https://www.linkedin.com/legal/privacy-policy

Here we access the services of

– Meta, Inc, 1 Hacker Way, Menlo Park, CA 94025, USA and Meta Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland (“Meta”) respectively.
– GitHub, Inc., 88 Colin P. Kelly Street, San Francisco, CA 94107, USA (“GitHub”)
– Instagram LLC, 1 Hacker Way, Building 14 First Floor, Menlo Park, CA, USA. (“Instagram”), Facebook Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland.
– YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”) presented by: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, Data processing within the European Economic Area and Switzerland is carried out by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
– LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

Back.

Based on the judgment of the European Court of Justice of 05.06.2018 (available at http://curia.europa.eu/juris/document/document.jsf?text=&docid=202543&pageIndex=0&doclang=DE&mode=req&dir=&occ=first&part=1&cid=298398 ), operators of presences in social media and the operators of the social media themselves are considered joint data controllers.

We would like to point out that you use our appearances in social media and their functions on your own responsibility. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating). Alternatively, you can also access the information that we make available on social media on our own website.

You can reach the data protection officers of the respective social media via the respective social media.

You can reach the data protection officer of TikTok via the following linked contact form: https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE.

You can reach the data protection officer of Meta and Instagram via the following linked contact form: https://www.facebook.com/help/contact/540977946302970

You can reach the data protection officer of Google and YouTube via the following linked contact form: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp

You can reach the data protection officer of LinkedIn via the following linked contact form:
https://www.linkedin.com/help/linkedin/ask/TSO-DPO

11.1 Data processed by social media
When you visit our appearances on social media, the operators of the social media collect, among other things, your IP address as well as other information that is present on your PC in the form of cookies. This information is used to provide us, as the operator of the presence, with statistical information about the use of the site. The data collected about you in this context will be processed by the operators of the social media and, if necessary, transferred to countries outside the European Union. What information the operator of the respective social network receives and how it is used is described in the privacy statements of the respective social networks. There you will also find information on the contact options.

You can find more detailed information on this under the following links:

TikTok: https://www.tiktok.com/legal/privacy-policy-eea?lang=de
Meta Page Insights: https://de-de.facebook.com/help/pages/insights
Meta Data Policy: https://de-de.facebook.com/about/privacy
Meta Full Data Use Policy: https://de-de.facebook.com/full_data_use_policy
YouTube: https://www.google.de/intl/de/policies/privacy/
Instagram Help: https://help.instagram.com/155833707900388
Instagram Data Policy: https://www.instagram.com/about/legal/privacy/

In what way the operators of the social media use data from the visit of our appearance in the social media for their own purposes, to what extent activities on the appearances in social media are assigned to individual users, how long the operators store this data and whether data from a visit to the appearances in social media are passed on to third parties, is not conclusively and clearly stated by the operators of the social media and is not known to us.

When accessing our appearances in social media, the IP address assigned to your end device is transmitted to the operator of the respective social network. The social networks also store information about the end devices of the users (e.g. as part of the “login notification” function); if necessary, the operators of the social media are thus able to assign IP addresses to individual users.

If you are currently logged in to the respective social network as a user, a cookie with your individual identification in this social network is located on your end device. This allows the operator of the social network to track that you have visited a certain page and how you have used it. Based on this data, content or advertising can be tailored to your previous website visits.

If you want to avoid this, you should log out of the respective social network or deactivate the “stay logged in” function, delete the cookies present on your device, and exit and restart your browser. In this way, login information via which you can be directly identified will be deleted. This allows you to use our social media appearances without revealing your user ID. When you access interactive features of the site (like, comment, share, news, etc.), a login screen will appear. After any login, you will again be identifiable as a specific user for the social network used.

Information on how you can manage or delete existing information within the social network can be found on the above-mentioned support pages of the respective social network.

11.2 Data processed by us
11.2.1 Type and scope of data processing
The data you enter on social networks, in particular your username and the, under your account published content, are processed by us insofar as we respond to your messages, if necessary. In addition, your published posts, ratings and comments refer to your account on the respective social network. If you mention us via an @ or a # or similar, this mention will be published under your username on our site, if applicable. The data freely published and disseminated by you on the respective social network may thus be included by us in our offer and made accessible to other users of the respective social network. If you mark our appearance in the social media with “Like” or “Follow” or a similar interaction, this will be communicated to us by the respective social network with your user name and link to your account.

11.2.2 Legal basis of processing
Data processing on our part is based on Art. 6 (1) p. 1 lit. f) DSGVO. Our legitimate interest results from the advertising function of social media. We use these to increase awareness of our company.

11.2.3 Purpose of the processing
The data you provide in this context and which may be accessible to us (e.g. user name, pictures, interests if applicable, contact data) are processed by us exclusively for the purpose of customer and prospect communication. Our legitimate interest is to provide you with a platform on which we can display up-to-date information and with the help of which you can address your request to us and we can respond to your request as quickly as possible.

11.2.4 Duration of storage
As far as we are able, your data will be deleted when our presence on social media is discontinued.

12 Data transfer to a third country
In order to be able to provide our services, we use the support of service providers from the European area as well as from third countries. In order to ensure the protection of your personal data even in the event of data transfer to a third country, we conclude special order processing agreements with each of the carefully selected service providers. All of the service providers we use have sufficient evidence that they ensure data security through appropriate technical and organizational measures. Our service providers from third countries are either located in countries that have an adequate level of data protection recognized by the EU Commission (Art. 45 GDPR) or have provided appropriate safeguards (Art. 46 GDPR).

Adequate level of protection: The provider originates from a country whose adequate level of data protection has been recognized by the EU Commission. You can find more information at: https://ec.europa.eu/info/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en

EU standard contractual clauses: Our provider has submitted to the EU standard contractual clauses to ensure secure data transfer. You can find more information on this at: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?uri=CELEX%3A32021D0914&locale=en

Binding Corporate Rules: Article 47 of the GDPR provides for the possibility of ensuring data protection when transferring data to a third country via binding internal data protection rules. These are reviewed and approved by the competent supervisory authorities as part of the consistency procedure under Art. 63 GDPR.

Consent: In addition, a data transfer to a third country without an adequate level of protection will only take place if you have given us your consent for this pursuant to Art. 49 (1) a) DSGVO or if another exception pursuant to Art. 49 DSGVO is relevant for the data transfer.

13 Your rights
You have the following rights vis-à-vis us with regard to the personal data concerning you:

13.1 Right to withdraw consent (cf. Art. 7 DSGVO).
If you have given your consent to the processing of your data, you may revoke it at any time. Such revocation affects the permissibility of the processing of your personal data for the future after you have expressed it to us. It can be made (remotely) verbally or in writing by mail or e-mail to us.

13.2 Right to information (cf. Art. 15 DSGVO).
In the event of a request for information, you must provide sufficient information about your identity and proof that the information is yours. The information concerns the following information:

– The purposes for which the personal data are processed;
– the categories of personal data which are processed;
– the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;
– the planned duration of the storage of the personal data concerning you or, if concrete information on this is not possible, criteria for determining the storage period;
– the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;
– the existence of a right of appeal to a supervisory authority;
– any available information about the origin of the data, if the personal data are not collected from the data subject;
– the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

13.3 Right to rectification or erasure (cf. Art. 16, 17 GDPR).
You have a right to rectification and/or completion vis-à-vis us as the controller if the processed personal data concerning you are inaccurate or incomplete. The controller shall make the correction without undue delay.

In addition, you may request the erasure of the personal data concerning you, provided that one of the following reasons applies to you:

– The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.
– You revoke your consent on which the processing was based pursuant to Art. 6 (1) sentence 1 a) or Art. 9 (2) a) DSGVO and there is no other legal basis for the processing.
– You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.
– The personal data concerning you has been processed unlawfully.
– The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the controller is subject.
– The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) of the GDPR.

If we have made the personal data concerning you public and we are obliged to erase it pursuant to Art. 17 (1) DSGVO, we shall also take all reasonable measures to inform other data controllers that you have requested the erasure of all links to this personal data or of copies or replications of this personal data.

The right to erasure does not exist to the extent that the processing is necessary:

– For the exercise of the right to freedom of expression and information;
– for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
– for reasons of public interest in the area of public health pursuant to Art. 9(2)(h) and (i) and Art. 9(3) DSGVO;
– for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes pursuant to Art. 89(1) DSGVO, insofar as the aforementioned right is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or
– for the assertion, exercise or defense of legal claims.

13.4 Right to restriction of processing (cf. Art. 18 DSGVO).
Under the following conditions, you may request the restriction of the processing of personal data concerning you from us:

– if you dispute the accuracy, of the personal data concerning you for a period that allows us to verify the accuracy of your personal data;
– the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;
– we no longer need the personal data for the purposes of processing, but you need them for the assertion, exercise or defense of legal claims; or
– if you have objected to the processing pursuant to Article 21 (1) DSGVO and it has not yet been determined whether our legitimate grounds override your grounds.

If the processing of personal data concerning you has been restricted, this data may – apart from being stored – only be processed with your consent or for the assertion, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by us before the restriction is lifted.

13.5 Right to information (cf. Art. 19 DSGVO).
If you have asserted your right to rectification, erasure or restriction of data processing to us, we are obliged to inform all recipients of your personal data of the rectification, erasure or restriction of data processing. This applies only to the extent that such notification does not prove impossible or would involve a disproportionate effort.

You have the right to know which recipients have received your data.

13.6 Right to data portability (cf. Art. 20 DSGVO).
You have the right to receive your personal data from us in a common, machine-readable format in order to have it transferred to another controller, if necessary, provided that

– the processing is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a) DSGVO or Art. 9 para. 2 lit. a) DSGVO or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b) DSGVO and
– the processing is carried out with the help of automated procedures.

When exercising your right to data portability, you have the right to obtain that the personal data be transferred directly from us to another controller, insofar as this is technically feasible.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

13.7 Right to object to processing (cf. Art. 21 DSGVO).
Insofar as we base the processing of your personal data on a legitimate interest (pursuant to Art. 6 (1) sentence 1 lit. f) DSGVO) on our part, you may object to the processing. The same applies should we base the data processing on Art. 6 (1) p. 1 lit. e) DSGVO.

When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the merits of the case and either discontinue or adapt the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

13.8 Right to complain to the competent supervisory authority (cf. Art. 77 DSGVO).
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged will inform you of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.

14 How to exercise these rights and subject to change.
To exercise these rights, please contact us using our contact details above.

We reserve the right to amend this privacy policy in compliance with the legal provisions.

Status October 2022