Data protection

Data protection information ReachCon

We – ReachCon GmbH (“ReachCon” or “we”) – would like to inform you about our processing of your personal data in accordance with the General Data Protection Regulation (“GDPR”).

Our data protection notices have a modular structure. They consist of general information for all processing of personal data and processing situations (I.) and special information, the content of which relates only to the processing situation specified there (II. ff.). To find the parts relevant to you, please refer to the following structure:

  1. General information 2
  2. Controller under data protection law 2
  3. Legal basis for the processing of personal data 2
  4. a) Consent of the data subject 2
  5. b) Fulfillment of contractual obligations 2
  6. c) Legal requirements and obligations 2
  7. d) Safeguarding legitimate interests 3
  8. Storage period and deletion of personal data 3
  9. Recipients of personal data 3
  10. Data processing in third countries 3
  11. Rights of data subjects 3
  12. a) Right to information 3
  13. b) Right to rectification 4
  14. c) Right to restriction of processing 4
  15. d) Right to erasure 4
  16. e) Right to information 4
  17. f) Right to data portability 5
  18. g) Right of objection 5
  19. h) Right to revoke the declaration of consent under data protection law 5
  20. i) Right to lodge a complaint with a supervisory authority 5
  21. Supplementary information for the website 5
  22. Provision of the website and creation of log files 5
  23. Use of mandatory cookies 6
  24. Google services 7
  25. Meta pixel 10
  26. TikTok Pixel 11
  27. YouTube 12
  28. Vimeo 13
  29. hCaptcha 13

III. Supplementary information for our social media presences 14

  1. Supplementary information for communication with us 14
  2. Telephone 14
  3. e-mail 15
  4. Video telephony 15
  5. Supplementary information for contractual partners 16
  6. Additional information for applicants 17


  • General information

  • Controller under data protection law

The controller within the meaning of the GDPR and other national data protection laws of the member states as well as other data protection regulations is

ReachCon GmbH

Schlüterstraße 2, 20146 Hamburg

E-mail: info@reachcon.de

  • Legal basis for the processing of personal data

We process some of your personal data on the basis of the following legal bases:

  • Consent of the data subject

Insofar as we obtain the consent of the data subject for certain purposes, Art. 6 para. 1 sentence 1 lit. a GDPR is the legal basis.

  • Fulfillment of contractual obligations

Insofar as the processing is necessary for the performance of a contract to which you are a party, Art. 6 para. 1 sentence 1 lit. b GDPR is the legal basis. This also applies to processing operations that are necessary to carry out pre-contractual measures.

  • Legal requirements and obligations

Insofar as processing is necessary for compliance with a legal obligation to which we are subject, Art. 6 para. 1 sentence 1 lit. c GDPR is the legal basis.

  • Safeguarding legitimate interests

Insofar as processing is necessary to safeguard our legitimate interests or those of a third party and your interests, fundamental rights and freedoms do not outweigh the former interest, Art. 6 para. 1 sentence 1 lit. f GDPR is the legal basis.

  • Storage period and deletion of personal data

The personal data will be deleted or blocked as soon as there is no longer a legal basis for the processing.

  • Recipients of personal data

Internally, only those departments process personal data that need it to fulfill their processing purposes. This also applies to the processors, service providers and vicarious agents we use. All departments and persons who work with personal data are obliged to maintain data secrecy and are made aware of the sensitive handling of such data.

Personal data will only be passed on to third parties if this is in accordance with data protection regulations. In particular, persons employed to carry out our business operations (e.g. banks, payment service providers, tax consultants, service providers for EDP and IT services) as well as government agencies/authorities may receive your personal data if this is necessary to fulfill a legal obligation.

  • Data processing in third countries

In some cases, our services require the processing of personal data in countries outside the EU/EEA (“third countries”) by our processors. Insofar as personal data is processed and there is no level of data protection corresponding to the European standard in the country that has been approved by an adequacy decision in accordance with Art. Art. 45 para. 3 GDPR by the EU Commission, we have concluded EU standard contractual clauses with the processors concerned in order to establish suitable guarantees within the meaning of Art. 46 GDPR. You can find a copy of the EU standard contractual clauses here: https://eur-lex.europa.eu/legal-content/DE/TXT/PDF/?uri=CELEX:32021D0914&from=DE.

Insofar as processing takes place in a third country, we point this out below.

  • Rights of data subjects

If your personal data is processed, you are a data subject within the meaning of the GDPR and you have the following rights vis-à-vis us as the controller:

  • Right to information

In accordance with Art. 15 GDPR, you have the right to request information about the personal data processed by us. In particular, you can

  • Information about the purposes of processing,
  • the category of the data,
  • the categories of recipients to whom your data has been or will be disclosed and information as to whether the personal data will be transferred to a third country or to an international organization (in this context, you may request to be informed of the appropriate safeguards pursuant to Art. 46 GDPR),
  • the planned storage period,
  • the existence of a right to rectification, erasure, restriction of processing or objection,
  • the existence of a right of appeal,
  • the origin of your data if it was not collected by us,
  • the existence of automated decision-making, including profiling, referred to in Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for the data subject.

  • Right to rectification

In accordance with Art. 16 GDPR, you have the right to rectification and/or completion of your personal data if it is incorrect or incomplete. We must make the correction without delay.

  • Right to restriction of processing

In accordance with Art. 18 GDPR, you have the right to demand the restriction of the processing of your data if the accuracy of the data is disputed by you or the processing is unlawful.

If the restriction of processing has been restricted, you will be informed by us before the restriction is lifted.

  • Right to erasure

In accordance with Art. 17 GDPR, you have the right to erasure of your personal data, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.

  • Right to information

If you have asserted the right to rectification, erasure or restriction of processing against us, we are obliged to notify all recipients to whom the personal data have been disclosed of the rectification, erasure of the personal data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

  • Right to data portability

In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transferred to another controller.

  • Right of objection

In accordance with Art. 21 GDPR, you have the right to object to the processing if the processing is based on Art. 6 para. 1 sentence 1 lit. e or lit. f GDPR takes place.

  • Right to revoke the declaration of consent under data protection law

In accordance with Art. 7 para. 3 GDPR, you have the right to withdraw your declaration of consent under data protection law at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

  • Right to lodge a complaint with a supervisory authority

In accordance with Art. 77 GDPR, you have the right to complain to a data protection supervisory authority about our processing of your personal data.

  • Additional information for the website

We are responsible for our website www.reachcon.de and its subpages (“website”). Personal data is processed through the use of our website. Below we provide detailed information about the data processing that takes place.

  • Provision of the website and creation of log files

When our website is accessed, we automatically collect data and information from the user’s end device (so-called log files).

Processor

To provide our website, we use the processor […] with whom we have concluded an order processing contract and who processes the personal data exclusively on our behalf. It does not process personal data in third countries.

Processed information & duration of processing

The following information is processed:

  • Information about the browser type and version used
  • The operating system of the end device
  • The user’s internet service provider
  • The IP address of the end device
  • Date and time of access

The log files are deleted within 14 days at the latest.

Purpose of processing & legal basis

The data is required to display the website on the user’s device, to ensure its functionality and to analyze any malfunctions. We also use the data to optimize the website and to ensure the security of our information technology systems.

The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR. The collection of log files is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

  • Use of mandatory cookies

We use cookies on our website. These are text files that are stored in or by the internet browser on the system of the user’s end device when visiting a website.

Processed information & duration of processing

Each cookie contains a characteristic character string that makes it possible to uniquely identify the browser the next time the website is accessed and thus the respective user device.

Information on which necessary cookies are used for which specific purposes, the recipients of the associated data and the duration of processing can be found in our Consent Manager.

Purpose & legal basis

Some functions of our website cannot be performed without the use of cookies. For example, it may be necessary to use so-called counting cookies to prevent the website from being overloaded. Session cookies may also be required to retain the selected language setting of the website for future visits. In addition, mandatory cookies also serve to enable our system to recognize whether the user has consented to the placement of cookies in their browser or has restricted them (so-called opt-out cookies). These technically necessary cookies are not used to determine the identity of the user or to create user profiles.

The legal basis for the storage of mandatory cookies is Section 25 para. 2 No. 2 TTDSG.

The legal basis for the processing of the resulting personal data is Art. 6 para. 1 sentence 1 lit. f GDPR.

The use of these cookies is absolutely necessary for the operation of the website. Consequently, the user has no option to object.

Processor

To provide the Consent Manager for the purpose of managing your consents, we use the processor CookieYes Ltd, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom (“CookieYes”), with whom we have concluded a data processing agreement and who processes the user settings exclusively on our behalf. Insofar as CookieYes processes data outside the EU/EEA, the transfer of data to the United Kingdom is based on an adequacy decision of the EU, in the case of transfer to the USA on the basis of the EU standard contractual clauses.

  • Google services

We use several Google services on our website. Our data processor is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Recipients of your data may be

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA,

Insofar as Google processes data outside the EU/EEA, Google Ireland Limited has to provide appropriate guarantees in accordance with Art. 46 GDPR. Art. 46 GDPR with its group company Google LLC, which has its registered office in California, USA, EU standard contractual clauses concluded. Data is also transferred to the USA on the basis of the EU/US Data Privacy Framework, with which Google’s US companies are registered.

a) Google Tag Manager

If you have given your consent, Google Tag Manager is used on this website.

The Google Tag Manager is basically used to play other tools. Instead of loading a tool directly, it is loaded by the Google Tag Manager. The Google Tag Manager uses administrator cookies and transmits cookies associated with the Tag Manager to Google. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

Due to the server connections between your Internet connection and Google’s servers, your IP address and network data such as the following will also be processed:

  • approximate location (region)
  • technical information about the browser and the end devices used (e.g. language setting, screen resolution)
  • Internet provider
  • the referrer URL (via which website/advertising medium users came to this website)


The legal basis for data processing by Google Tag Manager is your consent pursuant to Art. § 25 Abs. 1 TTDSG i.V.m. Art. 6 para. 1 sentence 1 lit. a GDPR.

You can revoke your consent at any time with effect for the future by changing the settings in our Consent Manager and change your selection there. There you will also find information on the cookies processed. This does not affect the lawfulness of the processing carried out on the basis of your consent until you withdraw it. The data collected via the Tag Manager will continue to be processed until you withdraw your consent.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit the functionality of this and other websites. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by not giving your consent to the setting of the cookie.

You can find more information on the terms of use of Google Tag Manager and data protection at Google at https://marketingplatform.google.com/about/tag-manager/ and at https://policies.google.com/?hl=de.

b) Google Analytics

If you have given your consent, the web analysis service Google Analytics 4 is used on this website.

Google Analytics uses cookies to help the website analyze how users use the site. The information collected by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

In Google Analytics 4, the anonymization of IP addresses is activated by default. Due to IP anonymization, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. According to Google, the IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

During your visit to the website, your user behavior is recorded in the form of “events”. Events can be

  • Page views
  • Scrolls (whenever a user scrolls to the end of the page (90%))
  • Clicks on external links
  • internal search queries
  • Interaction with form
  • First visit to the website
  • Start of the session
  • Click path
  • Your approximate location (region)
  • Your IP address (in abbreviated form)
  • Technical information about your browser and the end devices you have used (e.g. language settings, screen resolution)
  • Your Internet provider
  • The Refferer URL (via which website / advertising medium you came to this website)

Google will use this information on our behalf to evaluate your pseudonymous use of the website and to compile reports on website activity. The reports provided by Google Analytics are used to analyze the performance of our website.


Data that has reached the end of its retention period is automatically deleted once a month.

The legal basis for this data processing is your consent in accordance with. § 25 Abs. 1 TTDSG i.V.m. Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by changing the cookie settings in our Consent Manager and change your selection there. There you will also find information on the cookies processed. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.

You can also prevent the storage of cookies from the outset by setting your browser software accordingly. However, if you configure your browser to reject all cookies, this may limit the functionality of this and other websites. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by clicking

You can find more information on the terms of use of Google Analytics and data protection at Google at https://marketingplatform.google.com/about/analytics/terms/de/ and at https://policies.google.com/?hl=de.

c) Google Ads

If you have given your consent, we use the remarketing function within the Google Ads service. With the remarketing function, we can present users of our website with advertisements based on their interests on other websites within the Google advertising network (in Google Search or on YouTube, so-called “Google Ads” or on other websites). For this purpose, the interaction of users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to display targeted advertising to users on other sites even after they have visited our website. For this purpose, Google stores cookies on the end devices of users who visit certain Google services or websites in the Google Display Network. These cookies are used to record the visits of these users. The cookies are used to uniquely identify a web browser on a specific end device and not to identify a person.

The legal basis for this data processing is your consent in accordance with. § 25 Abs. 1 TTDSG i.V.m. Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by changing the cookie settings in our Consent Manager and change your selection there. There you will also find information on the cookies processed. The legality of the processing carried out on the basis of the consent until the revocation remains unaffected.

You can also prevent participation in this remarketing process by installing the plug-in provided by Google at the following link: https://www.google.com/settings/ads/plugin.

You can find more detailed information on data protection from Google here: https://policies.google.com/privacy?hl=d.

  • Meta pixel

If you have given your consent, this website uses the Facebook/Meta visitor action pixel to measure conversions. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

The pixels can be used to track the behavior of site visitors after they have been redirected to the provider’s website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous for us as the operator of this website; we cannot draw any conclusions about the identity of the user. However, the data is processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy ( https://de-de.facebook.com/about/privacy/) can be used. This enables Facebook to place advertisements on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the site operator.

The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time in our Consent Manager.

We use the advanced matching function within the meta pixels.

Advanced matching enables us to transmit various types of data (e.g. place of residence, state, zip code, hashed email addresses, name, gender, date of birth or telephone number) of our customers and prospects that we collect via our website to Meta (Facebook). This activation allows us to tailor our advertising campaigns on Facebook even more precisely to people who are interested in our offers. In addition, the extended matching improves the allocation of website conversions and expands Custom Audiences.

Insofar as personal data is collected on our website with the help of the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing carried out by Facebook after forwarding is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. You can find the wording of the agreement at https://www.facebook.com/legal/controller_addendum. Laut dieser Vereinbarung sind wir für die Erteilung der Datenschutzinformationen beim Einsatz des Facebook-Tools und für die datenschutzrechtlich sichere Implementierung des Tools auf unserer Website verantwortlich. Für die Datensicherheit der Facebook-Produkte ist Facebook verantwortlich. Betroffenenrechte (z. B. Auskunftsersuchen) hinsichtlich der bei Facebook verarbeiteten Daten können Sie direkt bei Facebook geltend machen. Wenn Sie die Betroffenenrechte bei uns geltend machen, sind wir verpflichtet, diese an Facebook weiterzuleiten.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can find further information on protecting your privacy in Facebook’s privacy policy: https://de-de.facebook.com/about/privacy/.

You can also use the remarketing function “Custom Audiences” in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen deactivate it. You must be logged in to Facebook to do this.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/

  • TikTok Pixel

If you have given your consent, this website uses the visitor action pixel from TikTok for analysis purposes. The provider of this service is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). The following categories of data are processed: Data about the use of the website as well as the logging of clicks on individual elements.

The purposes of the processing are the investigation of user behavior, analysis of the effect of online marketing measures and selection of online advertising on other platforms, which are automatically selected by means of real-time bidding based on user behavior. For this purpose, the data collected on our website using the TikTok pixel is transmitted to TikTok. Some of this data is information that is stored on the device you are using. In addition, the TikTok pixel also uses cookies to store information on the device you are using .

Legal basis for processing: Your consent in accordance with Art. 6 (1) a GDPR. Data is transferred to the independent controller TikTok. The legal basis for the transfer of data to TikTok is your consent in accordance with Art. 6 (1) a GDPR. This may also involve the transfer of personal data to a country outside the European Union. The data is transferred on the basis of your consent in accordance with Art. 6 (1) (a) in conjunction with Art. 49 (1) (a) GDPR. Consent can be revoked at any time in our Consent Manager.

For more information on how TikTok processes personal data, including the legal basis on which TikTok relies and how to exercise your rights against TikTok, please see TikTok’s privacy policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE.

  • YouTube

We embed videos on our website via the provider YouTube, a brand of Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland (“YouTube”). This results – for technical reasons – in calls to the servers of YouTube. Für die damit verbundene Verwendung von Daten Ihres Browsers bzw. Endgerätes verweisen wir auf die Datenschutzhinweise von YouTube, da YouTube für die dortige Datenverarbeitung verantwortlich ist. Die Datenschutzhinweise von YouTube finden Sie hier: https://policies.google.com/privacy

The legal basis for the integration of YouTube videos and the associated transfer of personal data to YouTube is Art. 6 para. 1 lit. f GDPR. Our interest in the integration of videos via an external service provider outweighs the interest of the users of our website in the non-processing of personal data.

As a protective measure, we always embed videos on YouTube in the “Do Not Track” variant, so that personal data is only transmitted to YouTube as required.

Recipients of your data may be

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)
  • Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA,

Insofar as Google processes data outside the EU/EEA and there is no level of data protection corresponding to the European standard, Google Ireland Limited has to provide suitable guarantees in accordance with. Art. 46 GDPR with its group companies Google LLC and Alphabent Inc., which are based in California, USA, EU standard contractual clauses concluded. You can find a copy of the contractual clauses here: https://policies.google.com/privacy/frameworks?hl=de&gl=de. Eine Übermittlung von Daten in die USA erfolgt auch auf Basis des EU/US Data Privacy Frameworks, bei welchem die Google Unternehmen registriert sind.

  • Vimeo

We embed videos on our website via our processor Vimeo.com, Inc, 330 West 34th Street, 5th Floor New York, New York 10001, USA (“Vimeo”). For technical reasons, this results in access to the Vimeo servers in the USA. The following data is processed: IP address, technical information about the device (e.g. browser type, operating system, basic device information), the website visited and the date/time.

We have concluded an order processing contract with Vimeo, which includes the EU standard contractual clauses “Module 2: Transmission from controllers to processors” contains. This ensures an adequate level of data protection for the transfer of data to the USA within the meaning of Art. 46 GDPR. In addition, Vimeo.com, Inc. is certified under the Data Privacy Framework, which means that an adequacy decision of the EU pursuant to Art. Art. 45 GDPR applies.

The legal basis for data processing when integrating Vimeo videos is our overriding legitimate interest in a convenient and fast presentation of video content via an external service provider in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, which also forms the purpose of the data processing.

The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected.

  • hCaptcha

We have integrated the hCaptcha service on our website. The provider is Intuition Machines, Inc, 350 Alabama St 10, San Francisco, California 94110, USA (“hCaptcha”). hCaptcha enables us to distinguish whether a contact request comes from a natural person or whether this is done automatically by means of a program. So-called “captchas” are displayed by hCaptcha: These are small tasks that are easy for humans to solve but difficult for machines to master. These captchas help us to identify spam.

hCaptcha basically processes technical information about your use of our website, such as mouse movements, scroll positions, buttons pressed, touch events on touch displays and, if applicable, movements of your device (e.g. if you use our website with a smartphone). In addition, hCaptcha collects the answers to the small tasks you are asked. This data is processed by hCaptcha exclusively on our behalf in order to protect our website from bots and spam. Your (non-personal) answers to the small tasks you are asked (e.g. recognizing certain objects in images) are also used by hCaptcha to train algorithms.

The hCaptcha analysis in “invisible mode” can take place completely in the background. Website or app visitors are not informed that such an analysis is taking place if no challenge is displayed to the user.

The service is used to ensure the availability of the website, to protect against bots and thus on the basis of our overriding legitimate interests in accordance with Art. 6 (1) f GDPR. Any transfer of data to the USA takes place on the basis of the EU/US Data Privacy Framework, with which Intuition Machines, Inc. is registered.

For more information about hCaptcha and the Intuition Machines, Inc. privacy policy and terms of use, please visit the following links: https://hcaptcha.com/privacy/ and https://hcaptcha.com/terms.

  • Additional information for our social media presence

We maintain online presences within social networks and platforms in order to communicate with the customers, interested parties and users active there and to inform them about our services.

We have set a link to the websites of Facebook and Instagram, which are operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square Grand Canal Harbour Dublin 2, Ireland. There is no further data exchange with Meta on our website.

We have set a link to the website of X (formerly “Twitter”), which is operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland (“X”). There is no further data exchange with X on our website.

We have set a link to the “LinkedIn” website, which is operated by LinkedIn, Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). There is no further data exchange with LinkedIn on our website.

We have set a link to the website of “YouTube”, which is operated by Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“YouTube”). There is no further data exchange with YouTube on our website.

When accessing the respective networks and platforms, the terms and conditions and data processing guidelines of their respective operators apply. Unless otherwise stated in our data protection information, we process users’ data if they communicate with us within the social networks and platforms, e.g. write posts on our online presence or send us messages.


  • Additional information for communication with us

The following information applies to all communication with us.

If the communication takes place within a client relationship or another contractual relationship, the data processing is also governed by the supplementary information under IV. or V.

If the communication is aimed at an application to us, the data processing is also based on the supplementary information under VII.

  • Telephone

You can contact us by telephone.

Processed information & duration of processing

In addition to your telephone number, we process the personal data that you provide to us during the conversation.

The data will be deleted – unless there is another reason for processing – as soon as the matter has been clarified with you.

Purpose of processing & legal basis

The personal data will be processed exclusively for the purpose of processing the request and in the event of follow-up questions.

If the communication is aimed at the conclusion of a contract, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

In all other cases, Art. 6 para. 1 sentence 1 lit. f GDPR is the legal basis. Your interest does not outweigh our interest in responding to your request; since you are calling us, responding is also in your interest and you are aware that we must process your personal data in order to respond to your request.

  • e-mail

You can contact us by e-mail. We would like to point out that it is possible for third parties to gain insight into e-mail communication. If it is important to you that the information you provide is not exposed to the risk of illegal access by third parties, we therefore recommend that you use a different communication channel. However, if you contact us by e-mail, we assume that further communication via this channel is also in your interest.

Processed information & duration of processing

In addition to your e-mail address, we process the personal data that you provide to us in the course of e-mail communication.

The data will be deleted – unless there is another reason for processing – as soon as the matter has been clarified with you.

Purpose of processing & legal basis

The personal data will be processed exclusively for the purpose of processing the request and in the event of follow-up questions.

If the communication is aimed at the conclusion of a contract, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

In all other cases, Art. 6 para. 1 sentence 1 lit. f GDPR is the legal basis. Your interest does not outweigh our interest in responding to your request; since you are writing to us, it is also in your interest to respond and you are aware that we must process your personal data in order to respond to your request.

  • Video telephony

We also use video telephony for communication.

Processor

We use the “Google Meet” service of Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) and “Zoom” of Zoom Video Communications, Inc, 55 Almaden Blvd, San Jose, CA 95113, USA, as our processor to carry out video calls. We have concluded an order processing agreement with the processor. The processor may process personal data in a third country in order to ensure smooth video telephony. Google Ireland Ltd. has therefore concluded EU standard contractual clauses with the processor to establish appropriate safeguards within the meaning of Art. 46 GDPR. We have concluded the EU standard contractual clauses with Zoom Video Communications, Inc. In this respect, sufficient guarantees exist in accordance with Art. 46 GDPR.

Processed information & duration of processing

The following communication data is processed during video telephony:

  • Personal master data (if you provide this information yourself)
  • Content of the online meeting (if you appear in person with spoken and/or written contributions)
  • Authentication data
  • Log files, log data
  • Metadata (e.g. IP address, time of participation, etc.)
  • Profile data (e.g. your user name, if you provide this yourself)

The personal data will be deleted as soon as the matter with you has been clarified and provided there is no other reason for processing.

Purpose of processing & legal basis

The personal data will be processed exclusively for the purpose of processing the request and in the event of follow-up questions.

If the communication is aimed at the conclusion of a contract, the legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

In all other cases, Art. 6 para. 1 sentence 1 lit. f GDPR is the legal basis. Your interest does not outweigh our interest in responding to your request; since you are writing to us, it is also in your interest to respond and you are aware that we must process your personal data in order to respond to your request.

  • Supplementary information for contractual partners

In addition, the following information applies to you if we have a contractual relationship with each other.

Processed information & duration of processing

Which of your data is processed in detail depends on the tasks within the contractual relationship. We use the personal information exclusively for the purpose for which it was provided to us. This includes, for example, personal data (name, address and other contact details, date and place of birth). In addition, this may also include order data (e.g. payment order), data from the fulfillment of our contractual obligations (e.g. turnover data in payment transactions), information about your financial situation (e.g. creditworthiness data), advertising and sales data and other data comparable to the categories mentioned.

The personal data will be deleted as soon as the contractual relationship with you has ended and provided there is no other reason for the processing.

Purpose of processing & legal basis

The processing is mainly carried out for the purpose of establishing and implementing the contractual relationship; the legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR.

In addition, we also process your data in part on the basis of our legitimate interest, namely for the purpose of contact and communication management, profitability checks, contract and project management and to ensure the operation of information and telecommunications systems. The legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.

In addition, as a company we are bound by various legal obligations that must be complied with under applicable laws and regulations. The legal basis for processing to fulfill legal requirements and obligations is Art. 6 para. 1 sentence 1 lit. c GDPR. This includes, for example, retention obligations under tax law.

  • Additional information for applicants

In addition, the following information applies to you when you apply to us.

Processed information & duration of processing

We process the personal data that we receive from you through your application.

The personal data will be deleted after six months if no employment relationship is established. If an employment relationship is established, the data will continue to be processed for this purpose.

Purpose of processing & legal basis

We collect and process the personal data of applicants for the purpose of handling the application process.

The legal basis for the processing of personal data is Section 26 BDSG. If we conclude an employment contract with you, the transmitted data will be further processed for the purpose of handling the employment relationship; in this case, the legal basis remains in particular § 26 BDSG.

If no employment contract is concluded, the application documents will be deleted, provided that deletion does not conflict with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).