Termin buchen
Book a call

Legal information

Privacy Policy

This is an English translation of our German privacy policy (Datenschutzerklärung), provided for your convenience. In the event of any discrepancy, the German version shall prevail.

Preamble

With the following privacy policy, we would like to inform you about which types of your personal data (hereinafter also referred to as “data”) we process, for what purposes and to what extent. This privacy policy applies to all processing of personal data carried out by us, both in the course of providing our services and in particular on our websites, in mobile applications and within external online presences, such as our social media profiles (hereinafter collectively referred to as “online services”).

The terms used are gender-neutral.

Last updated: 25 September 2026

Table of Contents

Controller

Britta Schauer
Lindenallee 19
22964 Steinburg
Germany

Email address: info@admindockhr.de

Legal notice (Impressum): www.admindockhr.de/Impressum

Overview of Processing Operations

The following overview summarises the types of data processed and the purposes of their processing, and refers to the data subjects concerned.

Types of Data Processed

  • Master data.
  • Payment data.
  • Contact data.
  • Content data.
  • Contract data.
  • Usage data.
  • Meta, communication and process data.
  • Log data.

Categories of Data Subjects

  • Service recipients and clients.
  • Prospective customers.
  • Communication partners.
  • Users.
  • Business and contractual partners.

Purposes of Processing

  • Provision of contractual services and fulfilment of contractual obligations.
  • Communication.
  • Security measures.
  • Direct marketing.
  • Reach measurement.
  • Office and organisational procedures.
  • Organisational and administrative procedures.
  • Feedback.
  • Marketing.
  • Profiles with user-related information.
  • Provision of our online services and user-friendliness.
  • Information technology infrastructure.
  • Public relations.
  • Sales promotion.
  • Business processes and business management procedures.

Relevant Legal Bases

Relevant legal bases under the GDPR: Below you will find an overview of the legal bases of the General Data Protection Regulation (GDPR) on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations may apply in your or our country of residence or establishment. Should more specific legal bases apply in individual cases, we will inform you of these in this privacy policy.

  • Consent (Art. 6(1)(a) GDPR) – The data subject has given consent to the processing of their personal data for one or more specific purposes.
  • Performance of a contract and pre-contractual requests (Art. 6(1)(b) GDPR) – Processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Legal obligation (Art. 6(1)(c) GDPR) – Processing is necessary for compliance with a legal obligation to which the controller is subject.
  • Legitimate interests (Art. 6(1)(f) GDPR) – Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data.

National data protection regulations in Germany: In addition to the data protection provisions of the GDPR, national data protection regulations apply in Germany. These include in particular the Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG). The BDSG contains in particular special provisions on the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes and transfers, as well as automated individual decision-making including profiling. In addition, the data protection laws of the individual German federal states may apply.

Note on the applicability of the GDPR and the Swiss FADP: This privacy notice serves to provide information under both the Swiss Federal Act on Data Protection (FADP) and the General Data Protection Regulation (GDPR). For this reason, please note that the terms of the GDPR are used because of their broader territorial application and comprehensibility. In particular, instead of the terms used in the Swiss FADP, such as “handling” of “personal data”, “overriding interest” and “particularly sensitive personal data”, the GDPR terms “processing” of “personal data”, “legitimate interest” and “special categories of data” are used. However, within the scope of the Swiss FADP, the legal meaning of these terms continues to be determined by the Swiss FADP.

Transfer of Personal Data

In the course of our processing of personal data, the data may be transferred or disclosed to other bodies, companies, legally independent organisational units or persons. Recipients of this data may include, for example, service providers commissioned with IT tasks or providers of services and content that are embedded in a website. In such cases, we comply with the legal requirements and, in particular, conclude appropriate contracts or agreements with the recipients of your data that serve to protect your data.

International Data Transfers

Data processing in third countries: If we transfer data to a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)), or if this occurs in the context of using third-party services or disclosing or transferring data to other persons, bodies or companies (which can be recognised from the postal address of the respective provider or where this privacy policy expressly refers to a transfer to third countries), this is always done in accordance with the legal requirements.

For data transfers to the USA, we rely primarily on the Data Privacy Framework (DPF), which was recognised as a secure legal framework by an adequacy decision of the European Commission dated 10 July 2023. In addition, we have concluded standard contractual clauses with the respective providers that comply with the requirements of the European Commission and set out contractual obligations to protect your data.

This twofold safeguard ensures comprehensive protection of your data: the DPF forms the primary level of protection, while the standard contractual clauses serve as additional security. Should there be changes to the DPF, the standard contractual clauses act as a reliable fallback. In this way, we ensure that your data remains adequately protected even in the event of political or legal changes.

For each service provider, we inform you whether it is certified under the DPF and whether standard contractual clauses are in place. Further information on the DPF and a list of certified companies can be found on the website of the U.S. Department of Commerce at https://www.dataprivacyframework.gov/.

For data transfers to other third countries, corresponding safeguards apply, in particular standard contractual clauses, explicit consent or transfers required by law. Information on third-country transfers and applicable adequacy decisions can be found on the information pages of the European Commission: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection_en.

General Information on Data Retention and Deletion

We delete the personal data we process in accordance with the legal provisions as soon as the underlying consent has been withdrawn or there is no further legal basis for the processing. This applies to cases where the original purpose of processing no longer applies or the data is no longer required. Exceptions to this rule exist where legal obligations or special interests require longer retention or archiving of the data.

In particular, data that must be retained for commercial or tax law reasons, or whose storage is necessary for the assertion of legal claims or for the protection of the rights of other natural or legal persons, must be archived accordingly.

Our privacy notices contain additional information on the retention and deletion of data that applies specifically to certain processing operations.

Where several retention periods or deletion deadlines apply to an item of data, the longest period always prevails. Data that is no longer retained for its original purpose but on the basis of legal requirements or other reasons is processed exclusively for the reasons that justify its retention.

Retention and deletion of data: The following general periods apply to retention and archiving under German law:

  • 10 years – Retention period for books and records, annual financial statements, inventories, management reports, opening balance sheets and the work instructions and other organisational documents required to understand them (Section 147(1) No. 1 in conjunction with (3) of the German Fiscal Code (AO), Section 14b(1) of the German VAT Act (UStG), Section 257(1) No. 1 in conjunction with (4) of the German Commercial Code (HGB)).
  • 8 years – Accounting vouchers, such as invoices and expense receipts (Section 147(1) Nos. 4 and 4a in conjunction with (3) sentence 1 AO and Section 257(1) No. 4 in conjunction with (4) HGB).
  • 6 years – Other business documents: commercial or business letters received, copies of commercial or business letters sent, and other documents insofar as they are relevant for taxation, e.g. hourly wage slips, operating accounting sheets, calculation documents, price tags, as well as payroll documents insofar as they are not already accounting vouchers, and till receipts (Section 147(1) Nos. 2, 3, 5 in conjunction with (3) AO, Section 257(1) Nos. 2 and 3 in conjunction with (4) HGB).
  • 3 years – Data required to take into account potential warranty and damage claims or similar contractual claims and rights, and to process related requests, is stored for the duration of the regular statutory limitation period of three years, based on previous business experience and customary industry practice (Sections 195, 199 of the German Civil Code (BGB)).

Rights of Data Subjects

As a data subject, you have various rights under the GDPR, arising in particular from Articles 15 to 21 GDPR:

  • Right to object: You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions. Where personal data concerning you is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing.
  • Right to withdraw consent: You have the right to withdraw any consent you have given at any time. This does not affect the lawfulness of processing carried out before the withdrawal.
  • Right of access: You have the right to obtain confirmation as to whether data concerning you is being processed, and to access this data, further information and a copy of the data in accordance with the legal requirements (Art. 15 GDPR).
  • Right to rectification: In accordance with the legal requirements, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you (Art. 16 GDPR).
  • Right to erasure and restriction of processing: In accordance with the legal requirements, you have the right to request that data concerning you be erased without undue delay or, alternatively, to request restriction of the processing of the data (Art. 17 and 18 GDPR).
  • Right to data portability: You have the right to receive data concerning you that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller, in accordance with the legal requirements (Art. 20 GDPR).
  • Right to lodge a complaint with a supervisory authority: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR (Art. 77 GDPR). The supervisory authority responsible for us is: Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD), Holstenstraße 98, 24103 Kiel, Germany, www.datenschutzzentrum.de.

To exercise your rights, an informal message to the controller at the address given above is sufficient, most easily by email.

Business Services

We process data of our contractual and business partners, e.g. customers and prospective customers (collectively referred to as “contractual partners”), in the context of contractual and comparable legal relationships and related measures, and with regard to communication with contractual partners (or pre-contractually), for example to respond to enquiries.

We use this data to fulfil our contractual obligations. These include in particular the obligations to provide the agreed services, any obligations to update and remedies in the event of warranty and other service disruptions. In addition, we use the data to safeguard our rights and for the administrative tasks associated with these obligations and for company organisation. We also process the data on the basis of our legitimate interests in proper and economical business management and in security measures to protect our contractual partners and our business operations against misuse and threats to their data, secrets, information and rights (e.g. for the involvement of telecommunications, transport and other support services as well as subcontractors, banks, tax and legal advisors, payment service providers or tax authorities). Within the scope of applicable law, we only disclose the data of contractual partners to third parties to the extent that this is necessary for the aforementioned purposes or to fulfil legal obligations. Contractual partners are informed about further forms of processing, for example for marketing purposes, within the scope of this privacy policy.

We inform contractual partners which data is required for the aforementioned purposes before or during data collection, e.g. in online forms, by special marking (e.g. colours) or symbols (e.g. asterisks or similar), or in person.

We delete the data after the expiry of statutory warranty and comparable obligations, i.e. generally after four years, unless the data is stored in a customer account, e.g. for as long as it must be retained for legal archiving reasons (for tax purposes, usually ten years). Data disclosed to us by the contractual partner in the course of an assignment is deleted in accordance with the specifications and generally after the end of the assignment.

  • Types of data processed: Master data (e.g. full name, residential address, contact information, customer number, etc.); payment data (e.g. bank details, invoices, payment history); contact data (e.g. postal and email addresses or telephone numbers); contract data (e.g. subject matter of the contract, term, customer category).
  • Data subjects: Service recipients and clients; prospective customers; business and contractual partners.
  • Purposes of processing: Provision of contractual services and fulfilment of contractual obligations; communication; office and organisational procedures; organisational and administrative procedures; business processes and business management procedures.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Retention and Deletion”.
  • Legal bases: Performance of a contract and pre-contractual requests (Art. 6(1)(b) GDPR); legal obligation (Art. 6(1)(c) GDPR); legitimate interests (Art. 6(1)(f) GDPR).

Further information on processing operations, procedures and services:

  • Project and development services: We process the data of our customers and clients (hereinafter uniformly referred to as “customers”) in order to enable them to select, acquire or commission the chosen services or works and related activities, as well as their payment and provision or performance.

    The required information is marked as such in the context of the order, purchase or comparable conclusion of contract and includes the information needed to provide and invoice the services, as well as contact information in order to be able to consult where necessary. Insofar as we gain access to information about end customers, employees or other persons, we process it in accordance with the legal and contractual requirements; Legal bases: Performance of a contract and pre-contractual requests (Art. 6(1)(b) GDPR).

Provision of Online Services and Web Hosting

We process users’ data in order to be able to provide our online services to them. For this purpose, we process the user’s IP address, which is necessary to transmit the content and functions of our online services to the user’s browser or device.

  • Types of data processed: Usage data (e.g. page views and time spent, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions); meta, communication and process data (e.g. IP addresses, timestamps, identification numbers, persons involved); log data (e.g. log files relating to logins, data retrieval or access times).
  • Data subjects: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Provision of our online services and user-friendliness; information technology infrastructure (operation and provision of information systems and technical equipment (computers, servers, etc.)); security measures.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Retention and Deletion”.
  • Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Further information on processing operations, procedures and services:

  • Collection of access data and log files: Access to our online services is logged in the form of so-called “server log files”. Server log files may include the address and name of the web pages and files accessed, the date and time of access, the volume of data transferred, notification of successful access, browser type and version, the user’s operating system, the referrer URL (the previously visited page) and, as a rule, IP addresses and the requesting provider. Server log files can be used for security purposes, e.g. to prevent server overload (particularly in the case of abusive attacks, so-called DDoS attacks), and to ensure server utilisation and stability; Legal bases: Legitimate interests (Art. 6(1)(f) GDPR). Deletion of data: Log file information is stored for a maximum of 30 days and then deleted or anonymised. Data whose further retention is required for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.
  • IONOS: Services relating to the provision of information technology infrastructure and related services (e.g. storage space, computing capacity, operation of the web server and database). When you visit our website, IONOS records log files including your IP address; Service provider: IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany; Legal bases: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://www.ionos.de; Privacy policy: https://www.ionos.de/terms-gtc/terms-privacy; Data processing agreement: Concluded with the service provider.

Use of Cookies

The term “cookies” refers to functions that store information on users’ devices and read it from them. Cookies can also be used for various purposes, such as the functionality, security and convenience of online services, and the analysis of visitor flows. We use cookies in accordance with the statutory provisions. Where necessary, we obtain users’ consent in advance. Where consent is not required, we rely on our legitimate interests. This applies where storing and reading information is essential in order to provide expressly requested content and functions. This includes, for example, saving settings and ensuring the functionality and security of our online services. Consent can be withdrawn at any time. We provide clear information about its scope and which cookies are used.

Information on legal bases under data protection law: Whether we process personal data using cookies depends on consent. Where consent has been given, it serves as the legal basis. Without consent, we rely on our legitimate interests, which are explained above in this section and in the context of the respective services and procedures.

Storage period: With regard to the storage period, the following types of cookies are distinguished:

  • Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after a user has left an online service and closed their device (e.g. browser or mobile application).
  • Permanent cookies: Permanent cookies remain stored even after the device has been closed. For example, the login status can be saved and preferred content displayed directly when the user visits a website again. Likewise, user data collected by means of cookies can be used for reach measurement. Unless we provide users with explicit information on the type and storage period of cookies (e.g. when obtaining consent), users should assume that cookies are permanent and that the storage period may be up to two years.

General information on withdrawal and objection (opt-out): Users can withdraw any consent they have given at any time and can also object to processing in accordance with the legal requirements, including via the privacy settings of their browser.

  • Types of data processed: Meta, communication and process data (e.g. IP addresses, timestamps, identification numbers, persons involved).
  • Data subjects: Users (e.g. website visitors, users of online services).
  • Legal bases: Legitimate interests (Art. 6(1)(f) GDPR); consent (Art. 6(1)(a) GDPR).

Further information on processing operations, procedures and services:

  • Processing of cookie data on the basis of consent: We use a consent management solution through which users’ consent to the use of cookies, or to the procedures and providers named within the consent management solution, is obtained. This procedure serves to obtain, record, manage and withdraw consent, in particular with regard to the use of cookies and comparable technologies used to store, read and process information on users’ devices. Within this procedure, users’ consent to the use of cookies and the associated processing of information, including the specific processing operations and providers named in the consent management procedure, is obtained. Users also have the option to manage and withdraw their consent. The declarations of consent are stored in order to avoid repeated requests and to be able to provide proof of consent in accordance with the legal requirements. Storage takes place on the server side and/or in a cookie (so-called opt-in cookie) or by means of comparable technologies in order to be able to assign the consent to a specific user or their device. Unless specific information on the providers of consent management services is available, the following general information applies: consent is stored for up to two years. A pseudonymous user identifier is created and stored together with the time of consent, information on the scope of consent (e.g. relevant categories of cookies and/or service providers) and information about the browser, system and device used; Legal bases: Consent (Art. 6(1)(a) GDPR).
  • Storage of language preference: Our website is available in several languages. To manage the language versions, we use the WordPress plugin Polylang. It sets a cookie (“pll_language”) that stores the language version you last accessed. The cookie contains only the language code and is deleted after one year. Storage is necessary to provide the language version you have requested (Section 25(2) No. 2 of the German Telecommunications Digital Services Data Protection Act, TDDDG); Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Contact and Enquiry Management

When you contact us (e.g. via contact form, email, telephone, online appointment booking or social media) and in the context of existing user and business relationships, the information provided by the enquiring persons is processed to the extent necessary to respond to the enquiries and any requested measures.

  • Types of data processed: Master data (e.g. full name, company); contact data (e.g. email addresses or telephone numbers); content data (e.g. text messages and related information); meta, communication and process data (e.g. IP addresses, timestamps).
  • Data subjects: Communication partners; prospective customers.
  • Purposes of processing: Communication; organisational and administrative procedures; provision of our online services and user-friendliness.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Retention and Deletion”. Enquiries that do not result in an assignment are deleted once they have been fully dealt with and no further communication is expected, but no later than after two years.
  • Legal bases: Performance of a contract and pre-contractual requests (Art. 6(1)(b) GDPR); legitimate interests (Art. 6(1)(f) GDPR).

Further information on processing operations, procedures and services:

  • Contact form: If you write to us using the contact form on our website, we process the data you enter (e.g. name, company, email address, information about your company and your message) in order to handle your enquiry. The form is operated with the WordPress plugin WPForms. The information is processed on our web server at IONOS, sent to us by email and may also be stored in our website’s database. We send an automatic confirmation of receipt to the email address you provide. Mandatory fields are marked in the form; Legal bases: Performance of a contract and pre-contractual requests (Art. 6(1)(b) GDPR); legitimate interests (Art. 6(1)(f) GDPR).

Blogs and Publication Media

We use blogs or comparable means of online communication and publication (hereinafter “publication medium”). Readers’ data is processed for the purposes of the publication medium only to the extent necessary for its presentation and for communication between authors and readers, or for security reasons. In all other respects, we refer to the information on the processing of visitors to our publication medium in this privacy notice.

  • Types of data processed: Master data (e.g. full name, residential address, contact information, customer number, etc.); contact data (e.g. postal and email addresses or telephone numbers); content data (e.g. text or image messages and posts, as well as related information such as authorship or time of creation); usage data (e.g. page views and time spent, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions); meta, communication and process data (e.g. IP addresses, timestamps, identification numbers, persons involved).
  • Data subjects: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Feedback (e.g. collecting feedback via an online form); provision of our online services and user-friendliness.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Retention and Deletion”.
  • Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Newsletters and Electronic Notifications

We send newsletters, emails and other electronic notifications (hereinafter “newsletters”) only with the consent of the recipients or on the basis of a legal basis. If the contents of the newsletter are specified when registering, these contents are decisive for the users’ consent. To register for our newsletter, providing your email address is normally sufficient. However, in order to offer you a personalised service, we may ask for your name so that we can address you personally in the newsletter, or for further information if this is necessary for the purpose of the newsletter.

Deletion and restriction of processing: We may store unsubscribed email addresses for up to three years on the basis of our legitimate interests before deleting them, in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of a possible defence against claims. An individual request for deletion is possible at any time, provided that the former existence of consent is confirmed at the same time. In the case of obligations to permanently observe objections, we reserve the right to store the email address solely for this purpose in a block list.

The registration process is logged on the basis of our legitimate interests for the purpose of proving that it was carried out properly. Where we commission a service provider to send emails, this is done on the basis of our legitimate interests in an efficient and secure mailing system.

Contents: Specialist information, information about us, our services, promotions and offers.

  • Types of data processed: Master data (e.g. full name, residential address, contact information, customer number, etc.); contact data (e.g. postal and email addresses or telephone numbers); meta, communication and process data (e.g. IP addresses, timestamps, identification numbers, persons involved).
  • Data subjects: Communication partners; users (e.g. website visitors, users of online services).
  • Purposes of processing: Direct marketing (e.g. by email or post); provision of contractual services and fulfilment of contractual obligations.
  • Legal bases: Consent (Art. 6(1)(a) GDPR).
  • Option to object (opt-out): You can cancel your subscription to our newsletter at any time, i.e. withdraw your consent or object to further receipt. You will find a link to unsubscribe at the end of each newsletter, or you can use any of the contact options given above, preferably email.

Further information on processing operations, procedures and services:

  • Prerequisite for the use of free services: Consent to receiving mailings may be made a prerequisite for the use of free services (e.g. access to certain content or participation in certain promotions). If users wish to use the free service without subscribing to the newsletter, please contact us.

Promotional Communication via Email, Post, Fax or Telephone

We process personal data for the purposes of promotional communication, which may take place via various channels, such as email, telephone, post or fax, in accordance with the legal requirements.

Recipients have the right to withdraw consent given at any time or to object to promotional communication at any time.

After withdrawal or objection, we store the data required to prove the previous authorisation to make contact or send communications for up to three years after the end of the year of the withdrawal or objection, on the basis of our legitimate interests. The processing of this data is limited to the purpose of a possible defence against claims. On the basis of our legitimate interest in permanently observing users’ withdrawal or objection, we also store the data required to avoid renewed contact (e.g. depending on the communication channel, the email address, telephone number, name).

  • Types of data processed: Master data (e.g. full name, residential address, contact information, customer number, etc.); contact data (e.g. postal and email addresses or telephone numbers); content data (e.g. text or image messages and posts, as well as related information such as authorship or time of creation).
  • Data subjects: Communication partners.
  • Purposes of processing: Direct marketing (e.g. by email or post); marketing; sales promotion.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Retention and Deletion”.
  • Legal bases: Consent (Art. 6(1)(a) GDPR); legitimate interests (Art. 6(1)(f) GDPR).

Web Analytics, Monitoring and Optimisation

Web analytics (also referred to as “reach measurement”) serves to evaluate the visitor flows of our online services and may include behaviour, interests or demographic information about visitors, such as age or gender, as pseudonymous values. With the help of reach analysis, we can, for example, identify at what times our online services or their functions or content are used most frequently, or invite users to return. It also enables us to understand which areas require optimisation.

In addition to web analytics, we may also use testing procedures, for example to test and optimise different versions of our online services or their components.

Unless otherwise stated below, profiles, i.e. data combined into a usage session, may be created for these purposes, and information may be stored in a browser or device and then read. The information collected includes in particular websites visited and elements used there, as well as technical information such as the browser used, the computer system used and information on times of use. If users have consented to the collection of their location data by us or by the providers of the services we use, location data may also be processed.

Users’ IP addresses are also stored. However, we use an IP masking procedure (i.e. pseudonymisation by shortening the IP address) to protect users. In general, no clear data of users (such as email addresses or names) is stored in the context of web analytics, A/B testing and optimisation, but only pseudonyms. This means that neither we nor the providers of the software used know the actual identity of users, only the information stored in their profiles for the purposes of the respective procedures.

Information on legal bases: If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, users’ data is processed on the basis of our legitimate interests (i.e. interest in efficient, economical and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.

  • Types of data processed: Usage data (e.g. page views and time spent, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions); meta, communication and process data (e.g. IP addresses, timestamps, identification numbers, persons involved).
  • Data subjects: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Reach measurement (e.g. access statistics, recognition of returning visitors); profiles with user-related information (creation of user profiles); provision of our online services and user-friendliness.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Retention and Deletion”. Storage of cookies for up to 2 years (unless otherwise stated, cookies and similar storage methods may be stored on users’ devices for a period of two years).
  • Security measures: IP masking (pseudonymisation of the IP address).
  • Legal bases: Consent (Art. 6(1)(a) GDPR); legitimate interests (Art. 6(1)(f) GDPR).

Further information on processing operations, procedures and services:

  • Google Analytics: We use Google Analytics to measure and analyse the use of our online services on the basis of a pseudonymous user identification number. This identification number does not contain any unique data such as names or email addresses. It is used to assign analytics information to a device in order to recognise which content users have accessed within one or more usage sessions, which search terms they have used, whether they have accessed content again or interacted with our online services. The time and duration of use are also stored, as well as the sources referring users to our online services and technical aspects of their devices and browsers.
    In doing so, pseudonymous user profiles are created with information from the use of various devices, and cookies may be used. Google Analytics does not log or store individual IP addresses for EU users. However, Analytics provides rough geographical location data by deriving the following metadata from IP addresses: city (and the derived latitude and longitude of the city), continent, country, region, subcontinent (and ID-based counterparts). For EU traffic, IP address data is used exclusively for this derivation of geolocation data before being deleted immediately. It is not logged, not accessible and not used for any further purposes. When Google Analytics collects measurement data, all IP lookups are performed on EU-based servers before traffic is forwarded to Analytics servers for processing; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; Legal bases: Consent (Art. 6(1)(a) GDPR); Website: https://marketingplatform.google.com/about/analytics/; Security measures: IP masking (pseudonymisation of the IP address); Privacy policy: https://policies.google.com/privacy; Data processing agreement: https://business.safety.google/adsprocessorterms/; Basis for third-country transfers: Data Privacy Framework (DPF), standard contractual clauses (https://business.safety.google/adsprocessorterms); Option to object (opt-out): Opt-out plugin: https://tools.google.com/dlpage/gaoptout?hl=en, settings for the display of advertisements: https://myadcenter.google.com/personalizationoff. Further information: https://business.safety.google/adsservices/ (types of processing and data processed).

Presence on Social Networks (Social Media)

We maintain online presences within social networks and process user data in this context in order to communicate with the users active there or to offer information about us.

Please note that user data may be processed outside the European Union. This may result in risks for users, for example because it could make it more difficult to enforce users’ rights.

Furthermore, users’ data within social networks is generally processed for market research and advertising purposes. For example, usage profiles can be created based on users’ usage behaviour and resulting interests. These profiles may in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to users’ interests. For this reason, cookies are generally stored on users’ computers in which their usage behaviour and interests are stored. In addition, data may also be stored in usage profiles independently of the devices used by users (in particular if they are members of the respective platforms and are logged in there).

For a detailed description of the respective forms of processing and the options to object (opt-out), please refer to the privacy policies and information provided by the operators of the respective networks.

With regard to requests for information and the assertion of data subject rights, please also note that these can be asserted most effectively with the providers. Only the providers have access to users’ data and can take appropriate measures and provide information directly. Should you nevertheless require assistance, you may contact us.

  • Types of data processed: Contact data (e.g. postal and email addresses or telephone numbers); content data (e.g. text or image messages and posts, as well as related information such as authorship or time of creation); usage data (e.g. page views and time spent, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions).
  • Data subjects: Users (e.g. website visitors, users of online services).
  • Purposes of processing: Communication; feedback (e.g. collecting feedback via an online form); public relations.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Retention and Deletion”.
  • Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Further information on processing operations, procedures and services:

  • LinkedIn: Social network – We are jointly responsible with LinkedIn Ireland Unlimited Company for the collection (but not the further processing) of visitor data used to create “Page Insights” (statistics) for our LinkedIn profiles. This data includes information about the types of content users view or interact with, and the actions they take. Details about the devices used are also collected, such as IP addresses, operating system, browser type, language settings and cookie data, as well as information from user profiles, such as job function, country, industry, seniority level, company size and employment status. Privacy information on the processing of user data by LinkedIn can be found in LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.
    We have concluded a specific agreement with LinkedIn Ireland (“Page Insights Joint Controller Addendum”, https://legal.linkedin.com/pages-joint-controller-addendum), which regulates in particular which security measures LinkedIn must observe and in which LinkedIn has agreed to fulfil the rights of data subjects (i.e. users can, for example, send requests for information or deletion directly to LinkedIn). The rights of users (in particular the right of access, erasure, objection and complaint to the competent supervisory authority) are not restricted by the agreements with LinkedIn. Joint responsibility is limited to the collection and transfer of data to LinkedIn Ireland Unlimited Company, a company based in the EU. Further processing of the data is the sole responsibility of LinkedIn Ireland Unlimited Company, in particular with regard to the transfer of data to its parent company, LinkedIn Corporation, in the USA; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland; Legal bases: Legitimate interests (Art. 6(1)(f) GDPR); Website: https://www.linkedin.com; Privacy policy: https://www.linkedin.com/legal/privacy-policy; Basis for third-country transfers: Data Privacy Framework (DPF), standard contractual clauses (https://legal.linkedin.com/dpa). Option to object (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Management, Organisation and Support Tools

We use services, platforms and software from other providers (hereinafter referred to as “third-party providers”) for the purposes of organising, administering, planning and providing our services. When selecting third-party providers and their services, we comply with the legal requirements.

In this context, personal data may be processed and stored on the servers of the third-party providers. This may concern various data that we process in accordance with this privacy policy. This data may include in particular users’ master data and contact data, data relating to transactions, contracts, other processes and their content.

If users are referred to the third-party providers or their software or platforms in the context of communication, business or other relationships with us, the third-party providers may process usage data and metadata for security purposes, service optimisation or marketing purposes. We therefore ask you to observe the privacy notices of the respective third-party providers.

  • Types of data processed: Content data (e.g. text or image messages and posts, as well as related information such as authorship or time of creation); usage data (e.g. page views and time spent, click paths, intensity and frequency of use, device types and operating systems used, interactions with content and functions); meta, communication and process data (e.g. IP addresses, timestamps, identification numbers, persons involved).
  • Data subjects: Communication partners; users (e.g. website visitors, users of online services).
  • Purposes of processing: Provision of contractual services and fulfilment of contractual obligations; office and organisational procedures.
  • Retention and deletion: Deletion in accordance with the information in the section “General Information on Data Retention and Deletion”.
  • Legal bases: Legitimate interests (Art. 6(1)(f) GDPR).

Further information on processing operations, procedures and services:

  • Microsoft 365: We use Microsoft 365 for email communication, calendars, file storage and collaboration (in particular Exchange Online/Outlook, Teams, SharePoint and OneDrive). Messages, appointments and documents you exchange with us are processed and stored on Microsoft servers. Microsoft also processes usage data and metadata in order to provide and secure the service; Service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; Legal bases: Performance of a contract and pre-contractual requests (Art. 6(1)(b) GDPR); legitimate interests (Art. 6(1)(f) GDPR); Website: https://www.microsoft.com/microsoft-365; Privacy policy: https://privacy.microsoft.com/privacystatement; Data processing agreement: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA; Basis for third-country transfers: Data Privacy Framework (DPF), standard contractual clauses (included in the data processing agreement).
  • Microsoft Bookings: You can book a call with us online via Microsoft Bookings. We process the data you enter (e.g. name, email address, telephone number, preferred appointment and any comments) in order to schedule the appointment, send you a confirmation and reminders, and hold the meeting, where applicable via Microsoft Teams. The booking page is provided by Microsoft; when you access it, Microsoft also processes technical data such as your IP address and browser information. We delete booking data once it is no longer required for handling the appointment and any resulting communication, unless statutory retention obligations apply; Service provider: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland; Legal bases: Performance of a contract and pre-contractual requests (Art. 6(1)(b) GDPR); Privacy policy: https://privacy.microsoft.com/privacystatement; Data processing agreement: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA; Basis for third-country transfers: Data Privacy Framework (DPF), standard contractual clauses (included in the data processing agreement).

Created with the free Datenschutz-Generator.de by Dr. Thomas Schwenke