+49 (0) 38309 22 0

Privacy policy

Status 01.07.2024

Name and address of the person responsible

The controller within the meaning of the General Data Protection Regulation (GDPR) and other data protection regulations is

HRG Hotels GmbH

Main street 66
12159 Berlin
Germany
Phone: +49 (0)30 / 773 27 80-0
E-mail: info@hrg-hotels.com

Contact details of the data protection officer

The data protection officer of the controller is

Intersoft consulting services AG
At the straw house 17
20097 Hamburg
Germany
E-mail: dataprivacy@hrg-hotels.com

 

 

General information on data processing

1. Scope of the processing of personal data

We only process our users' personal data insofar as this is necessary to provide a functional website and our content and services. The processing of our users' personal data only takes place regularly with the user's consent. An exception applies in cases where prior consent cannot be obtained for factual reasons and the processing of the data is required by law.

2. Legal basis for the processing of personal data

  • Consent: Art. 6 para. 1 sentence 1 lit. a GDPR - if the data subject has given consent.
  • Performance of a contract: Art. 6 para. 1 sentence 1 lit. b GDPR - if the processing is necessary for the performance of a contract.
  • Legal obligation: Art. 6 para. 1 sentence 1 lit. c GDPR - if the processing is necessary to fulfill a legal obligation.
  • Vital interests: Art. 6 para. 1 sentence 1 lit. d GDPR - if processing is necessary to protect vital interests.
  • Legitimate interest: Art. 6 para. 1 sentence 1 lit. f GDPR - if processing is necessary for the purposes of a legitimate interest, except where such interests are overridden by the interests or fundamental rights of the data subject.

3. Data deletion and storage duration

Personal data will be deleted or blocked as soon as the purpose of storage no longer applies. Data will only be stored beyond this point if this is required by European or national law. The data will also be deleted if a legally prescribed storage period expires, unless further storage is necessary to fulfill a contract.

Rights of the data subject

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis the controller:

1. The right to information (Art. 15 GDPR)

You have the right to request confirmation from us as to whether personal data concerning you is being processed. If this is the case, you have a right to information about this data and to the following information:

  • Processing purposes
  • Categories of personal data
  • Recipients or categories of recipients
  • Planned storage duration or the criteria for determining this duration
  • The existence of the rights to rectification, erasure, restriction or objection
  • Right to lodge a complaint with the competent supervisory authority
  • Origin of the data (if collected from a third party)
  • the existence of automated decision-making including profiling with meaningful information about the logic involved, the scope and the expected effects
  • Transfer of personal data to a third country or international organization

2. Right to rectification (Art. 16 GDPR)

If your personal data is incorrect or incomplete, you have the right to request immediate correction or completion of the personal data.

3. Right to restriction of processing (Art. 18 GDPR)

If one of the following conditions is met, you have the right to request that the processing of your personal data be restricted:

  • You contest the accuracy of your personal data for a period enabling us to verify the accuracy of the personal data.
  • The processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead.
  • We no longer need your personal data for the purposes of processing, but you need your personal data to assert, exercise or defend your legal claims.
  • You have objected to the processing and it is not yet clear whether our legitimate grounds override your grounds.

4. Right to erasure ("right to be forgotten") (Art. 17 GDPR)

If one of the following reasons applies, you have the right to demand that your personal data be deleted immediately:

  • Your data are no longer necessary for the processing purposes for which they were originally collected.
  • You withdraw your consent and there is no other legal basis for the processing.
  • You object to the processing and there are no overriding legitimate grounds for the processing or you object pursuant to Art. 21 (2) GDPR.
  • Your personal data is being processed unlawfully.
  • The deletion is necessary to fulfill a legal obligation under Union law or the law of the Member State.
  • The personal data was collected in relation to information society services offered in accordance with Article 8 (1) GDPR.

Please note that the above reasons do not apply if the processing is necessary:

  • To exercise the right to freedom of expression and information.
  • For compliance with a legal obligation or for the performance of a task carried out in the public interest.
  • For reasons of public interest in the area of public health.
  • For archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes.
  • For the assertion, exercise or defense of legal claims.

5. Right to data portability (Art. 20 GDPR)

You have the right to receive your personal data in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.

6. Right to object to certain data processing (Art. 21 GDPR)

You have the right to object, on grounds relating to your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) GDPR. This also applies to profiling based on these provisions.

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is associated with such direct marketing.

7. Right to lodge a complaint with a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR.

The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR.

Newsletter

Description and scope of data processing

You can subscribe to a free newsletter on our website. Your e-mail address will be transmitted to us when you register. Your e-mail address will be used exclusively for sending the newsletter.

Your consent is obtained for the processing of the data as part of the registration process and reference is made to this privacy policy.

Purpose of data processing

The purpose of collecting your e-mail address is to send you the newsletter.

Legal basis for data processing

The legal basis for the processing of data after registration for the newsletter is your consent (Art. 6 para. 1 lit. a GDPR).

Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. The e-mail address will be stored for as long as the subscription to the newsletter is active. If you do not confirm your registration, your data will be deleted within 24 hours.

Right of revocation and removal

You have the right to withdraw your consent at any time. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected. To unsubscribe from the newsletter, use the corresponding link in the footer of the email or revoke your consent by sending an email to dataprivacy@hrg-hotels.com

E-mail contact

Description and scope of data processing

It is possible to contact us via the e-mail address provided on our website. In this case, the personal data transmitted with the e-mail will be stored. The data is used exclusively for processing the conversation.

Purpose of data processing

The processing of the data serves to process the contact and the associated communication.

Legal basis for data processing

The legal basis for the processing of the data transmitted in the course of sending an email is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to process and respond to your request. If the e-mail contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR.

Duration of storage

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For personal data sent by email, this is the case when the respective conversation has ended and the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

Possibility of objection

If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

Hosting

The website is hosted on servers of a service provider commissioned by us.

Our service provider is:

HubSpot Inc.

2nd Floor 25 First Street

Cambridge

02141 Massachusetts

USA

 

The servers automatically collect and store information in so-called server log files, which your browser automatically transmits when you visit the website. The information stored is

  • Browser type and browser version
  • Operating system used
  • Referrer URL
  • Host name of the accessing computer
  • Date and time of the server request
  • IP address

This data is not merged with other data sources. This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website - the server log files must be recorded for this purpose.

The website server is geographically located in the USA. Your data is transferred to HubSpot servers in the USA. HubSpot has joined the Trans-Atlantic Data Privacy Framework (TDPF; data protection agreement between the EU and the USA), so that an appropriate level of data protection is guaranteed for data processing.

Further information on the processing of data by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy

Applications

On our website, you have the opportunity to apply for vacancies via the job portal. Information on the processing of personal data in connection with your application can be found in the privacy policy for applications and .

Use of company presences in social and professional networks

We use the possibility of company appearances on social and professional networks for communication and the exchange of information with (potential) customers.

We maintain a company presence on the following social/professional networks:

  • LinkedIn: Ireland Unlimited Company - Dublin, Ireland
  • YouTube: Google Ireland Limited - Dublin, Ireland
  • Facebook and Instagram: Meta Platforms Ireland Limited - Dublin, Ireland
  • TikTok: TikTok Technology Limited - Dublin, Ireland
  • Xing: New Work SE - Hamburg, Germany
  • Pinterest: Pinterest Inc - San Francisco, USA

If you carry out an action on one of our company websites (e.g. comments, posts, likes, etc.), you may make personal data (e.g. real name or photo of your user profile) public. However, as we generally or to a large extent have no influence on the processing of your personal data by the companies jointly responsible for the corporate presence, we cannot provide any binding information on the purpose and scope of the processing of your data. Further information on objection and removal options vis-à-vis the providers of the social/professional networks can be found here:

 

Plugins used

Use of Hubspot

Scope of the processing of personal data:

We use functions of the HubSpot CMS from HubSpot Inc, 2nd Floor, 25 First Street, Cambridge, MA 02141, USA (hereinafter referred to as HubSpot). This is an integrated software solution that we use to cover various aspects of our online marketing. These include, among others: Email marketing (newsletters as well as automated mailings, e.g. to provide downloads), social media publishing & reporting, reporting (in particular traffic sources, access etc.), contact management (in particular user segmentation & CRM), landing pages and contact forms. HubSpot places a cookie on your computer. This allows personal data to be stored and evaluated, in particular the user's activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them) and also data from advertising partners (in particular pseudonymized user IDs).

Other recipients of the data processed by HubSpot are:

  • Amazon Web Services Inc.
  • Google Inc.
  • Cloudflare Inc.
  • Twilio Inc.
  • Message Systems Inc.
  • SendGrid Inc.
  • Snowflake Inc.
  • HubSpot Inc.
  • HubSpot Ireland Ltd.
  • HubSpot Germany GmbH
  • HubSpot Australia Pty Ltd.
  • HubSpot Asia Pte. ltd.
  • HubSpot Japan KK
  • HubSpot Latin America S.A.S.
  • HubSpot Sweden

Further information on the processing of data by HubSpot can be found here: https://legal.hubspot.com/de/privacy-policy

Purpose of data processing:

We use the HubSpot plug-in to optimize our website and marketing activities.

Legal basis for the processing of personal data:

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Right of revocation and removal:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by HubSpot by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on objection and removal options vis-à-vis HubSpot can be found at: https://legal.hubspot.com/de/privacy-policy

Use of Google Analytics

Scope of the processing of personal data:

We use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). Google Analytics analyzes, among other things, the origin of visitors, the time they spend on individual pages and the use of search engines, thus enabling better monitoring of the success of advertising campaigns. Google places a cookie on your computer. This allows personal data to be stored and evaluated, in particular the user's activity (in particular which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and operating system), data about the advertisements displayed (in particular which advertisements have been displayed and whether the user has clicked on them) and also data from advertising partners (in particular pseudonymized user IDs).

We use Google Analytics (Universal Analytics) to evaluate your use of our online presence, to compile reports on your activities and to use other Google services associated with the use of our online presence and the Internet. We have requested the anonymization of IP addresses, whereby Google shortens your IP address as soon as technically possible. However, it cannot be ruled out that your data will be transmitted to the servers of Google LLC based in the USA. On behalf of the operator of this online presence, Google will use this information to evaluate your use of the online presence, to compile reports on the activities of the online presence and to provide other services related to the use of the online presence and internet usage to the operator of the online presence.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Purpose of data processing:

We use Google Analytics (Universal Analytics) to analyze the use of our online presence and to display targeted advertising to people who have already shown an initial interest by visiting our website.

Legal basis for the processing of personal data:

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or until you exercise your right of withdrawal.

Possibility of revocation:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google AdSense

Scope of the processing of personal data:

Our website uses Google AdSense, a service for integrating advertisements from the provider Google Ireland Ltd, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland (hereinafter "Google"). Google AdSense allows us to integrate advertising on our website. So-called "cookies" and web beacons are used to collect data about your use of this website and thus enable us to show you advertisements that match your interests.

The following data can be processed:

  • Demographic data (age, gender, location)
  • Interest data (interests and preferences, search history, interactions with ads)
  • Device and browser data (device type, operating system, browser type, screen resolution)
  • Website and app data (websites and apps visited, length of stay, interactions with content)
  • Ad data (ad impressions, ad clicks, ad interactions, conversion data)
  • Technical data (IP address, cookie data, location data, unique device identifiers)
  • Publisher data (website URL, categories and content of the web pages, website traffic)

Google is registered in the EU-US Data Privacy Framework. This means that there is an appropriate level of data protection for data transfer to the USA. Further information on data processing by Google can be found here: https://policies.google.com/privacy

Purpose of the processing:

Data processing by Google AdSense is carried out for the purpose of displaying advertisements on our website and adapting these advertisements to the respective user interests.

Legal basis for data processing:

The legal basis for the processing of users' personal data is the user's consent in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Possibility of revocation:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of DoubleClick

Description and scope of data processing:

We use DoubleClick from the provider Google Ireland Ltd, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland on our website. DoubleClick enables better planning, implementation, management and evaluation of campaigns and advertisements. As a result, personalized advertising that reflects the interests of our users as closely as possible is displayed to individual users.

Among other things, the following data is processed:

  • Number of page views
  • Surfing behavior of the users
  • IP address
  • Previously visited pages
  • Search terms

Google is registered in the EU-US Data Privacy Framework. This means that there is an appropriate level of data protection for data transfer to the USA. Further information on data processing by Google can be found here: https://policies.google.com/privacy

Purpose of data processing:

The purpose of data processing is to better adapt the monetization of our website and our marketing to individual users.

Legal basis for data processing:

The legal basis for the processing of users' personal data is the user's consent in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Possibility of revocation:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google AdWords Conversion

Scope of the processing of personal data:

We use Google AdWords Conversion from the provider Google Ireland Ltd, 4 Barrow St, Grand Canal Dock, Dublin 4, D04 V4X7, Ireland on our website. Google AdWords Conversion makes it possible to better display user interactions after clicking on an advertising field. This includes, for example, purchasing a product, installing an app or subscribing to an email list.

Among other things, the following data is processed:

  • IP address
  • Interactions of users who came to the website via an advertisement

Google is registered in the EU-US Data Privacy Framework. This means that there is an appropriate level of data protection for data transfer to the USA. Further information on data processing by Google can be found here: https://policies.google.com/privacy

Purpose of data processing:

Data processing is carried out for the purpose of better evaluating our marketing campaigns and proving the effectiveness of advertising.

Legal basis for data processing:

The legal basis for the processing of users' personal data is the user's consent in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Possibility of revocation:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of the Google Tag Manager

Scope of data processing:

We use the Google Tag Manager of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: Google). With Google Tag Manager, tags from Google and third-party services can be managed and bundled and embedded on an online presence. Tags are small code elements on an online presence that are used, among other things, to measure visitor numbers and behaviour, to record the impact of online advertising and social channels, to use remarketing and targeting and to test and optimize online presences. When a user visits the online presence, the current tag configuration is sent to the user's browser. It contains instructions on which tags should be triggered. Google Tag Manager triggers other tags, which in turn may collect data. Information on this can be found in the sections on the use of the corresponding services in this privacy policy. Google Tag Manager does not access this data.

Further information on Google Tag Manager can be found at: https://www.google.com/intl/de/tagmanager/faq.html and in Google's privacy policy: https://policies.google.com/privacy?hl=de

Purpose of data processing:

The purpose of processing personal data is to collect and clearly manage and efficiently integrate the services of third-party providers.

Legal basis for data processing:

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this privacy policy or as required by law. Advertising data in server logs is anonymized by Google deleting parts of the IP address and cookie information after 9 and 18 months respectively.

Possibility of revocation:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the online presence (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Maps

Scope of the processing of personal data:

We use the online map service Google Maps of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). We use the Google Maps plugin to visually display geographical data and embed it on our online presence. By using Google Maps on our online presence, information about the use of our online presence, your IP address and addresses entered in the route planning function are transmitted to a Google server and stored there.

Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Purpose of data processing:

The use of the Google Maps plugin serves to improve user-friendliness and an appealing presentation of our online presence.

Legal basis for the processing of personal data:

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.

Possibility of revocation:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Google Web Fonts

Scope of the processing of personal data:

We use Google Web Fonts from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and the representative in the Union Google Ireland Ltd, Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as: Google). The web fonts are transferred to the browser's cache when the page is called up in order to be able to use them for the visually improved display of various information. If the browser does not support Google web fonts or prevents access, the text is displayed in a standard font. No cookies are stored on the visitor's computer when the page is accessed. Data that is transmitted in connection with the page view is sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com. This allows personal data to be stored and analyzed, in particular the user's activity (in particular which pages have been visited and which elements have been clicked on) and device and browser information (in particular the IP address and operating system).

The data will not be associated with data that may be collected or used in connection with the parallel use of authenticated Google services such as Gmail. Further information on the processing of data by Google can be found here: https://policies.google.com/privacy?gl=DE&hl=de

Purpose of data processing:

The use of Google Web Fonts serves the purpose of an appealing presentation of our texts. If your browser does not support this function, a standard font will be used by your computer for display.

Legal basis for the processing of personal data:

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Possibility of objection and removal:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Google by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can deactivate the use of your personal data by Google using the following link: https://adssettings.google.de

Further information on objection and removal options vis-à-vis Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

Use of Taboola

Scope of the processing of personal data:

We use Taboola from the provider Taboola Inc, 1115 Broadway, 7th Floor, New York, NY 10010, USA (hereinafter "Taboola") on our website. The use of Taboola allows us to display content recommendations as native content based on data analysis and reports on user behavior and interests of individual target groups. This enables us to provide our users with targeted recommendations and personalized content that is likely to meet with a positive response.

The following personal data may be processed:

  • IP address
  • Browser type and version
  • Operating system
  • Device type
  • Click behavior
  • Dwell time
  • Page views
  • Referrer URL
  • Interactions with ads
  • Geographical location data
  • Input data
  • Timestamp
  • Unique device identifiers
  • Demographic information

In order to make the third country transfer as data protection-friendly as possible, standard contractual clauses have been concluded with Taboola . You are welcome to request a copy of the standard data protection clauses from us .

Further information on the processing of data by Taboola can be found here: https://www.taboola.com/de/policies/datenschutzerklaerung

Purpose of data processing:

The purpose of using Taboola is to display personalized content and advertising, to improve the user experience and to analyze and optimize the performance of advertising campaigns.

 

 

Legal basis for the processing of personal data:

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Possibility of revocation:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by Taboola by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can find further information on objection and removal options vis-à-vis Taboola at: https://www.taboola.com/de/policies/datenschutzerklaerung

Use of LinkedIn

Scope of the processing of personal data:

We use functions of the LinkedIn network, including the functions of LinkedIn Ads and LinkedIn Analytics. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as "LinkedIn"). Each time one of our pages containing LinkedIn functions is accessed, a connection to LinkedIn servers is established. LinkedIn is informed that you have visited our website with your IP address. If you click on the LinkedIn "Recommend" button and are logged into your LinkedIn account, LinkedIn is able to associate your visit to our website with you and your user account.

LinkedIn Ads aims to place and optimize advertising campaigns. It processes data to deliver targeted advertising to specific audiences and measure the effectiveness of that advertising. LinkedIn Analytics is used to analyze and optimize our content and pages. It provides insights into the performance of our posts, audience demographics and engagement to make better decisions about future content and strategies.

The following data may be processed:

  • Demographic data (age, gender, location)
  • Professional information (job title, professional experience, industries, company size, company names, educational qualifications and institutions)
  • Interests and activities (interests, membership in LinkedIn groups, participation in events, likes, comments and shared content)
  • Network data (connections, recommendations and endorsements)
  • Engagement data (interactions with LinkedIn content, website visits via LinkedIn ads, downloads of materials)
  • Technical data (device type, operating system, browser type)
  • Company-related data (company name, positions and roles within the company)
  • Ad-specific data (ad placements and frequency, campaign performance and results, A/B test data)

Further information on the processing of data by LinkedIn can be found here: https://www.linkedin.com/legal/privacy-policy

Purpose of data processing:

The use of the LinkedIn plugin serves the user-friendliness of our online presence as well as the evaluation and improvement of our advertising campaigns and content.

Legal basis for the processing of personal data:

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Possibility of revocation:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by LinkedIn by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser. Furthermore, you can prevent the transmission by logging out of your LinkedIn account before accessing our website.

You can use the following links to deactivate the use of your personal data by LinkedIn: https://www.linkedin.com/psettings/guest-controls

Further information on objection and removal options vis-à-vis LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy

Use of the Xing Share Button

Scope of the processing of personal data:

Our online presence uses the XING share button of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. When you access this website, your browser establishes a short-term connection to the servers of XING SE (hereinafter referred to as XING), which are used to provide the "XING Share Button" functions (in particular the calculation/display of the counter value). These servers are configured in a particularly data protection-friendly manner. For example, no data is stored about the access of visitors from which a direct personal reference could be derived. In particular, XING does not store any IP addresses of visitors to websites that contain the XING Share button. Further information on the processing of data by XING can be found here: https://www.xing.com/app/share?op=data_protection

Purpose of data processing:

The integration of the "XING share button" serves to improve the user-friendliness of our online presence. If you click on this button, you will be redirected to the XING homepage. If you are logged into your profile, you can recommend the link to our online presence.

Legal basis for the processing of personal data:

The legal basis for the processing of users' personal data is generally the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law (e.g. for tax and accounting purposes).

Possibility of revocation:

You have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your personal data by XING by preventing the storage of third-party cookies on your computer, using the "Do Not Track" function of a supporting browser, deactivating the execution of script code in your browser or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on objection and removal options vis-à-vis XING can be found at: https://www.xing.com/app/share?op=data_protection

 

Use of Sojern

Scope of the processing of personal data:

We use Sojern, an online marketing tool from Sojern Inc, 545 Market Street, 4th floor
San Francisco, CA 94105 USA (hereinafter: Sojern). Sojern uses cookies and similar tracking technologies to collect information about user behavior on our online presence. This data includes, in particular, IP addresses, browser and device information, websites visited, length of visit, click behavior and pseudonymized user IDs. In addition, information may be collected from partner websites and advertisements in order to create comprehensive user profiles. Further information on the processing of data by Sojern can be found here: https://www.sojern.com/de/privacy/privacy-policy

Purpose of data processing:

We use the data collected to carry out personalized advertising campaigns, analyse user behaviour and optimize the efficiency of advertising measures. Sojern enables us to place targeted advertising based on the interests and previous behavior of users, which increases the relevance of the ads. Sojern also helps us to analyze and report on the effectiveness of our online marketing activities.

Legal basis for the processing of personal data:

The legal basis for the processing of your personal data by Sojern is your consent in accordance with Art. 6 para. 1 lit. a GDPR. This consent is given by accepting the relevant cookies and tracking technologies when you visit our online presence.

Sojern is certified under the EU-U.S. Data Privacy Framework (DPF). This means that the European Commission has recognized an adequate level of data protection for the transfer of personal data to Sojern in the USA. Certification under the Data Privacy Framework ensures that Sojern is committed to complying with the data protection standards of the European Union and thus guarantees the protection of your personal data in accordance with the requirements of the GDPR.

Duration of storage:

Your personal data will only be stored by Sojern for as long as is necessary to fulfill the stated purposes or until you withdraw your consent. After expiry of these periods or after revocation, your data will be deleted, unless statutory retention obligations prevent this.

Possibility of revocation:

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. You can prevent the collection and processing of your data by Sojern by preventing the storage of cookies through appropriate settings in your browser, for example by activating the "Do Not Track" function.

 

Use of The Trade Desk

Scope of the processing of personal data:

We use The Trade Desk, a tool of The Trade Desk (The Trade Desk Ltd, 1 Bartholomew Close, London EC1A 7BL, United Kingdom, https://www.thetradedesk.com/), to carry out and optimize advertising campaigns. When using The Trade Desk, various personal data is collected and processed, including in particular pseudonymized identification data (e.g. cookie IDs and advertising IDs), IP addresses (in anonymized form if necessary), browser and device data (including operating system and device type), information on the use of our website (including pages visited and clicks made), as well as data on interaction with advertisements (e.g. which advertisements were viewed and clicked on). Data is collected primarily through the use of cookies and similar tracking technologies that are stored on your device. These technologies enable The Trade Desk to analyze user behavior and display targeted advertising. Further information on the processing of data by The Trade Desk can be found here: https://www.thetradedesk.com/de/privacy

Purpose of data processing:

The data collected is used to measure, analyze and optimize the effectiveness of our advertising campaigns. This includes, in particular, the targeted display of advertising based on user behaviour, the creation of target group profiles to personalize content and the implementation of retargeting measures. The Trade Desk helps us to focus the delivery of our advertising on relevant users and to continuously improve campaign performance.

Legal basis for the processing of personal data:

The processing of personal data by The Trade Desk is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR. You give this consent by agreeing to the use of cookies and similar technologies on our website.

Duration of storage:

The personal data collected by The Trade Desk will be stored for as long as necessary to fulfill the above purposes or until you withdraw your consent. The specific retention period may vary depending on the type of data.

Possibility of revocation:

You have the right to withdraw your consent to the processing of your personal data at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Further information on data protection at The Trade Desk and your rights of objection can be found at https://www.thetradedesk.com/de/privacy.

Service provider deployment:

When using The Trade Desk, an external service provider supports us in the area of marketing. Your personal data is then processed by the commissioned service provider within the scope of order processing in accordance with Art. 28 GDPR, i.e. the service provider works for us exclusively on our instructions.

Our service provider only has access to personal information that is necessary for the performance of the respective activity. In this case, the service provider only has access to pseudonymized data so that it is not possible to draw any direct conclusions about you. The service providers are not permitted to pass on your personal information or use it for other purposes, in particular for their own advertising purposes.

 

 

Content Delivery Networks Bootstrap CDN

Description and scope of data processing:

We integrate certain plugins on our website via external service providers in the form of content delivery networks. When you visit our website, a connection is established to the servers of the providers we use in order to retrieve content and store it in the cache of the user's browser. As a result, personal data may be stored and analyzed in server log files, in particular device and browser information (especially the IP address and operating system). We use the following services:

Bootstrap CDN

Purpose of data processing:

The use of the functions of these services serves to deliver and accelerate online applications and content.

Legal basis for data processing:

This data is collected on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website.

Duration of storage:

Your personal information will be stored for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by law.

Possibility of objection:

For the processing of your personal data in third countries, we have provided suitable guarantees in the form of standard data protection clauses in accordance with Art. 46 para. 2 lit. c GDPR. We have concluded these standard data protection clauses with the above-mentioned providers. A copy of the standard data protection clauses can be requested from us.