The purpose of this privacy policy is to inform you about which personal data we collect via our website and for what purpose we process it. Insofar as links are made to other sites, we have no influence or control over the linked content and the privacy policies there. We recommend checking the privacy policies on the linked websites to determine whether and to what extent personal data is collected, processed, used, or made accessible to third parties.
For improved readability, we refrain from using gender-specific language. All personal designations apply equally to all genders (male/female/diverse).
2.Important Definitions and Terms
Below you will find a selection of legal definitions that may be helpful for understanding the privacy policy. The full text of the General Data Protection Regulation (GDPR), including further definitions and terms, can be found via the following link.
Personal data:
Any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Processing:
Any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Controller:
Means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law;
Recipient:
Means a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not. However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as recipients; the processing of those data by those public authorities shall be in compliance with the applicable data protection rules according to the purposes of the processing;
Third party:
This is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal data.
3.Controller Contact Details
NAS conception GmbH, Schiessstr. 62, 40549 Düsseldorf
4.Data Protection Officer Contact Details
5.Log Files / Hosting
When you visit our website, we collect so-called access data and store it in a log file. This access data also includes the IP address. In addition, the log file stores the name of the accessed website, the file accessed, the date and time of access, the amount of data transferred, a message about successful access, the browser type and version, the operating system, the referrer URL (the previously visited page), and the requesting provider.
Personal Data
IP address;
Purpose of Data Processing
We collect log file data, including the IP address, to ensure a smooth connection to the website and to enable comfortable use of our website by users. The log file also serves to evaluate system security and stability, as well as for administrative purposes.
Interest in data processing
The log file data, including the IP address, is used solely for the technical and design optimization of the website and for securing our systems (e.g., in the event of an attack on our IT or a security incident). We cannot establish a personal reference from the log file data, including the IP address, when our website is accessed.
The log files, including the IP address contained therein, are automatically deleted 7 days after collection.
Legal basis
Art. 6 para. 1 f) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of the website cannot be guaranteed or are limited.
6.Cookies
Cookies are small text files that allow us to make the use of our offers and our website more pleasant for users, for example, by determining whether you have already visited a single page of our website and thereby storing information about your preferred activities on the website, or by aligning our website with your individual interests. As soon as a user accesses our platform, a cookie is placed on the end device (laptop, tablet, smartphone, or PC) of the respective user. Cookies that are not necessary for the provision of our website are only set on your end device with your explicit consent (Art. 6 para. 1 lit. a) GDPR).
Essential:
These providers serve to operate the website or certain functions thereof, for example, to ensure security or to arrange an appointment with us. These providers are absolutely necessary and cannot be deselected.
Name
Domain
Purpose of Data Processing
Standard expiration time
Borlabs-cookie
nasconception.de
This cookie stores consent information for service groups and individual services.
60 days
_icl_visitor_lang_js
nasconception.de
Stores the redirected language. This cookie is enabled for all website visitors if you use the browser language redirection feature.
1 day
Wpml_browser_redirect_test
nasconception.de
Tests if cookies are enabled. This cookie is enabled for all website visitors if you use the browser language redirection feature.
Session
Wp-wpml_current_admin_language_
nasconception.de
Stores the current language.
1 day
Wp-wpml_current_language
nasconception.de
Stores the current language. This cookie is enabled by default on websites that use the language filtering function for AJAX operations.
1 day
External Media:
The providers in this category are used to embed external content into our website. Content from other services is integrated into this website to enable the use of certain functions (e.g., booking an appointment) or to improve the user experience (e.g., fonts and graphics).
Name
Domain
Purpose of Data Processing
Standard expiration time
Visitor_info1_live__default
Youtube.com
This cookie is used to detect and resolve service issues. It is also used for analytics and advertising and can enable personalized recommendations on YouTube based on past views and searches.
180 days
Visitor_info1_live
Youtube.com
This cookie is used to detect and resolve service issues. It is also used for analytics and advertising and can enable personalized recommendations on YouTube based on past views and searches.
180 days
Visitor_info1_live__k
Youtube.com
This cookie is used to detect and resolve service issues. It is also used for analytics and advertising and can enable personalized recommendations on YouTube based on past views and searches.
180 days
YSC
Youtube.com
The “YSC” cookie ensures that requests within a browser session are made by the user and not by other websites. This cookie prevents malicious websites from acting on behalf of the user without the user’s knowledge.
Session
NID
Youtube.com
Used to store your preferences and other information, such as your preferred language, how many results you want to see on a search results page (e.g., 10 or 20), and whether you want to enable Google’s SafeSearch filter. It is also used for analytics and to display Google ads on Google services for logged-out users.
6 months
ACLK_DATA
Youtube.com
This cookie is used for advertising purposes.
5 minutes
GED_Playlist_Activity
Nasconception.de
This cookie is used for YouTube integration and/or analysis and is also used for advertising purposes.
Session
Marketing/ Tracking:
We use these providers for our marketing, in particular for so-called “tracking” (monitoring registrations) and for measuring the success of our advertising campaigns. The associated reach measurement is the evaluation of visit actions by analyzing user behavior with regard to determining specific user actions and measuring the effectiveness of online advertising. This measures the number of visitors who, for example, have reached websites or apps by clicking on advertisements. In addition, the rate of users who perform a specific action (e.g., newsletter registration, ordering goods) can be measured.
Name
Domain
Purpose of Data Processing
Standard expiration time
_gac_gb_
Nasconception.de
This cookie is used for analytics and advertising purposes.
90 days
_dc_gtm
Nasconception.de
This cookie is set when Google Analytics is embedded via Google Tag Manager to throttle the request rate.
1 minute
RUL
Doubleclick.net
This cookie is used for advertising purposes.
1 year
NID
Google.com
This cookie is used for analytics, security, functionality, and advertising purposes.
6 months
FPAU
Nasconception.de
This cookie is used for analytics and advertising purposes.
90 days
FPGCLAW
Nasconception.de
This cookie is used for analytics and advertising purposes.
90 days
Pm_sess_nnn
Doubleclick.net
This cookie is used for security and functional purposes.
30 minutes
__gads
Nasconception.de
This cookie is used for advertising purposes.
13 months
Conversion
googleadservices.com
This cookie is used for advertising purposes.
90 days
_gcl_aw
Nasconception.de
This cookie is used for analytics and advertising purposes.
90 days
1P_JAR
Google.com
This cookie is used for advertising purposes.
30 days
_gcl_au
Nasconception.de
This cookie is used for analytics and advertising purposes.
90 days
Aboutads_sessNNN
Doubleclick.net
This cookie is used for security and functional purposes.
30 minutes
IDE
Doubleclick.net
This cookie is used for serving advertisements or retargeting.
1 year
_gcl_gb
Nasconception.de
This cookie is used for analytics and advertising purposes.
90 days
Pm_sess
Doubleclick.net
This cookie is used for security and functional purposes.
30 minutes
Anid
Google.com
This cookie is used for analytics and advertising purposes.
2 years
FPGCLGB
Nasconception.de
This cookie is used for analytics and advertising purposes.
90 days
TAID
googleadservices.com
This cookie is used for analytics and advertising purposes.
2 weeks
AID
googleadservices.com
This cookie is used for analytics and advertising purposes.
540 days
bcookie
linkedin.com
This browser identifier cookie uniquely identifies devices accessing LinkedIn to detect platform abuse and for diagnostic purposes.
1 year
Bscookie
linkedin.com
This cookie remembers that a logged-in user has been verified with two-factor authentication and has previously logged in.
1 year
JSESSIONID
linkedin.com
This cookie is used to protect against CSRF (Cross Site Request Forgery) and to validate URL signatures.
Session
lang
linkedin.com
This cookie stores a user’s language preference and ensures that LinkedIn.com is displayed in the language the user has selected in their settings.
Session
lidc
linkedin.com
This cookie ensures data center selection.
24 hours
sdsc
linkedin.com
This is a signed context cookie for the data service. It is used for database routing and is intended to ensure cross-database consistency during changes. It ensures that user input is immediately available to the submitting user after submission.
Session
Li_gc
linkedin.com
This cookie stores the consent of guests for the use of non-essential cookies.
6 months
Li_mc
linkedin.com
This cookie is used as a temporary cache to avoid database queries for a member’s consent to the use of non-essential cookies. It is also used to make consent information available on the client side to enforce consent on the client side.
6 months
UID
scorecardresearch.com
This cookie is used for market research and user research purposes.
720 days
UserMatchHistory
linkedin.com
This cookie synchronizes LinkedIn Ads IDs.
30 days
AnalyticsSyncHistory
linkedin.com
This cookie stores when a synchronization with the “lms_analytics cookie” took place.
30 days
lms_ads
linkedin.com
This cookie identifies logged-out LinkedIn members for LinkedIn advertisements.
30 days
lms_analytics
linkedin.com
This cookie identifies logged-out LinkedIn members for analytical purposes.
30 days
li_fat_id
Nasconception.de
This cookie is an indirect member identifier used for conversion tracking, retargeting, and analytics.
30 days
li_sugr
linkedin.com
This cookie is used to determine probabilistic matches of a user’s identity.
90 days
_guid
linkedin.com
This cookie identifies a LinkedIn member for advertising via Google Ads.
90 days
BizographicsOptOut
linkedin.com
This cookie is used to determine the opt-out status of non-members.
10 years
li_giant
Nasconception.de
Indirect identifier for groups of LinkedIn members used for conversion tracking.
7 days
oribi_cookie_test
Nasconception.de
This cookie determines whether tracking can be enabled in the current domain.
Session
oribili_user_guid
Nasconception.de
This cookie is used to count unique visitors to a website.
1 year
ln_or
Nasconception.de
Used to determine if Oribi analytics can be performed for a specific domain.
1 day
ar_debug
Nasconception.de
Supports the integration of Google’s Attribution Reporting API to mitigate signal loss.
Session
_fbp
Nasconception.de
These cookies identify the browsers of companies that use our Meta products for the purpose of providing advertising and website analysis services.
Session
_fbc
Nasconception.de
These cookies identify the browsers of companies that use our Meta products for the purpose of providing advertising and website analysis services.
90 days
7.Web and User Analysis
Our website uses so-called tracking and web analysis tools. This describes the collection of access data on our website and the evaluation of our visitors’ behavior for the purpose of optimizing our offerings. With the help of these tools, we can investigate how and from where visitors come to our site, which areas on a website are visited most frequently, and how often and for how long which subpages and categories are viewed. We can also determine which search terms and websites the user has entered and evaluate how many users visit our pages in total and which information or offers are most in demand. The goal is to use the insights gained to design our offers and our website in a user-friendly way. Statistical evaluation of usage profiles allows conclusions to be drawn about the functionality and success of our websites and functions, such as answers to questions like how often information pages for certain product groups were accessed or how many visitors clicked on certain offers. With the help of tracking tools, we can tailor our offerings more specifically to our customers, visitors, and interested parties.
Personal Data
IP address; User Agent (browser information); Time of website visit; Visited pages and interactions; Device information; Location data; Referrer URL
Purpose of Data Processing
With the help of tracking tools, the behavior of website visitors can be evaluated and their interests analyzed. For this purpose, we create a pseudonymous user profile.
Recipients
We do not pass on your data to third parties. However, in the area of web and user analysis, we work with professional service providers who create user statistics for us on our behalf. The basis of this contractual relationship includes the providers’ obligation to have taken special precautions to protect your data and to process all personal data only according to our instructions (Art. 28 GDPR).
Further details about the providers, the functioning of web tracking, and information about the technologies used in these tracking tools, the storage duration of the cookies used, and information can be found under Section 5 Cookies. You can also revoke your consent and change your cookie settings for our website at any time.
Legal basis
Art. 6(1)(a) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required.
8.Google Signals
In connection with this website, the Google Signals service is also used as an extension of Google Analytics. With Google Signals, we can have Google create cross-device reports (so-called “Cross Device Tracking”). If you have activated “personalized ads” in your Google account settings and linked your internet-enabled devices to your Google account, Google can analyze user behavior across devices and create database models based on this, provided you have consented to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR This takes into account the logins and device types of all website users who were logged into a Google account and performed a conversion. The data shows, among other things, on which device you first clicked on an ad and on which device the corresponding conversion occurred. We do not receive any personal data from Google, but only statistics generated based on Google Signals. You have the option to deactivate the “personalized ads” function in your Google account settings and thus stop cross-device analysis in connection with Google Signals. We have concluded a data processing agreement with Google for our use of Google Analytics, which obliges Google to protect the data of our website users and not to pass it on to third parties. To ensure compliance with the European data protection level, even in the event of data transfer from the EU or the EEA to the USA and possible further processing there, Google relies on the so-called Standard Contractual Clauses of the European Commission, which we have contractually agreed with Google.
9.LinkedIn Insight Tag
This website uses the Insight tag from LinkedIn. With the help of the LinkedIn Insight Tag, we receive information about visitors to our website. If a website visitor is registered with LinkedIn, we can, among other things, analyze the key professional data (e.g. career level, company size, country, location, industry and job title) of our website visitors and thus better align our site with the respective target groups. We can also use LinkedIn Insight Tags to measure whether visitors to our websites make a purchase or take another action (conversion measurement). Conversion measurement can also be carried out across devices (e.g. from PC to tablet). LinkedIn Insight Tag also offers a retargeting function that allows us to display targeted advertising to visitors to our website outside the website, whereby, according to LinkedIn, no identification of the advertising addressee takes place.
Personal Data
LinkedIn itself also records so-called log files (URL, referrer URL, IP address, device and browser properties and time of access). The IP addresses are shortened or (if they are used to reach LinkedIn members across devices) hashed (pseudonymized). The direct identifiers of LinkedIn members are deleted by LinkedIn after seven days.
Purpose of Data Processing
This allows us to identify which LinkedIn ad or interaction on LinkedIn brought you to our website. Using this data, we can statistically evaluate the use of our website and continuously optimize our website as well as better target our advertising.
Recipients
We do not pass on your data to third parties. However, in the area of web and user analysis, we work with professional service providers who create user statistics for us on our behalf. The basis of this contractual relationship includes the providers’ obligation to have taken special precautions to protect your data and to process all personal data only according to our instructions (Art. 28 GDPR).
Further details about the providers, the functioning of web tracking, and information about the technologies used in these tracking tools, the storage duration of the cookies used, and information can be found under Section 5 Cookies. You can also revoke your consent and change your cookie settings for our website at any time.
Legal basis
Art. 6(1)(a) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required.
10.Plugins and Embedded Functions
We integrate functional and content elements into our online offering that are obtained from the servers of their respective providers (hereinafter referred to as “third-party providers”). These can include, for example, graphics, videos, or social media buttons and posts (hereinafter uniformly referred to as “content”). The integration always requires that the third-party providers of this content process the users’ IP address, as they would not be able to send the content to their browser without the IP address. The IP address is therefore necessary for the display of this content or functions. We endeavor to use only content whose respective providers use the IP address solely for the delivery of the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Through the “pixel tags,” information such as visitor traffic on the pages of this website can be evaluated. The pseudonymous information can also be stored in cookies on the users’ device and may contain technical information about the browser and operating system, referring websites, visit time, and other details about the use of our online offering, as well as be combined with such information from other sources.
Please note that in the event of interaction via the aforementioned media, data may also be processed outside the European Union, whereby the providers have committed to complying with EU data protection standards. If applicable, further data processing operations may be triggered by the aforementioned providers after content has started, over which we have no influence.
Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created from user behavior and resulting interests. These usage profiles can in turn be used to display advertisements within and outside the platforms that presumably correspond to the users’ interests. For these purposes, cookies are generally stored on the users’ computers, in which the users’ usage behavior and interests are stored. Furthermore, data independent of the devices used by the users can also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them).
11.Contact Form
Personal Data
Name, first name, email address, phone number, and the corresponding message
Purpose of Data Processing
We use a contact form on our website to communicate with our customers and interested parties and to answer their concerns and inquiries. We process the inquiries and information addressed to us in this context exclusively for processing their inquiry and for contacting them.
Data Retention Period
Duration of processing and handling of the inquiry or until we are requested to delete it.
Legal basis
In principle, we do not require any personal data to answer inquiries. The legal basis is Art. 6 para. 1 lit. a) GDPR. If you are already a customer or contractual partner, data processing is based on Art. 6 para. 1 lit. b) GDPR.
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required. However, without this information, your inquiry cannot be processed.
12.Microsoft Booking
On our website, you have the option to book appointments with us. We use Microsoft Bookings for appointment booking. Data processing with Office 365 takes place on servers in data centers in Germany. Accordingly, we have agreed with Microsoft on extensive technical and organizational measures for Office 365 that correspond to the current state of the art in IT security, e.g., with regard to access authorization and end-to-end encryption concepts for data lines, databases, and servers.
For the purpose of booking an appointment, you enter the requested data and the desired appointment into the designated form. The entered data will be used for the planning, execution, and, if necessary, follow-up of the appointment. The appointment data is stored for us on Microsoft Bookings servers.
Recipients
We do not pass on your data to third parties. However, in the area of web and user analysis, we work with professional service providers who create user statistics for us on our behalf. The basis of this contractual relationship includes the providers’ obligation to have taken special precautions to protect your data and to process all personal data only according to our instructions (Art. 28 GDPR).
Your data is generally only stored for as long as it is necessary for the purpose of processing. Afterwards, your data will be deleted, unless there is a legal obligation or right to further retention (for example, until legal claims have expired). You can delete your data at any time via the Bookings page using the cancel function.
Legal basis
Art. 6(1)(a) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required. However, without it, the use of Microsoft Booking is not possible.
13.Google Tag Manager
We use Google Tag Manager, a service provided by Google, on our site. Google Tag Manager offers a technical platform to execute and centrally manage other web tools and web tracking programs using so-called “tags.” In this context, Google Tag Manager stores cookies on your computer and, insofar as web tracking tools are executed via Google Tag Manager, analyzes your browsing behavior (so-called “tracking”). The data generated by the “tags” is consolidated, stored, and processed by Google Tag Manager under a unified user interface. All integrated “tags” are listed separately again in this privacy policy. When you use our website with activated integration of “tags” from Google Tag Manager, data—particularly your IP address and your user activities—is transmitted to servers of Google. The tracking tools used in Google Tag Manager ensure through IP anonymization in the source code that the IP address is anonymized by Google Tag Manager before transmission.
Personal Data
For processing purposes, the service or we collect the following data: cookies, web tracking data, outgoing or incoming links, information generated during the integration and activation of JavaScript code on the website from Google Tag Manager and the web tools triggered by Google Tag Manager.
Purpose of Data Processing
Tag Manager allows us to link and evaluate metrics from various service providers (Google and third-party providers) based on so-called tag management. Google Tag Manager helps us compile reports on website activities and manage the web tools of our website.
Recipients
Google transmits and processes your data in the third country USA. Google has been certified under the Data Privacy Framework and is therefore subject to an adequacy decision by the EU Commission. The transmission of your data is based on Art. 45(1) GDPR. In addition, Google has committed to us in Standard Contractual Clauses to ensure European data protection law even in third countries, thereby providing an appropriate safeguard for the protection of personal data within the meaning of Art. 46(2)(c) GDPR.
Google Tag Manager does not store any personal data.
Legal basis
Art. 6(1)(a) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required.
14.Google Ads
The website operator uses Google Ads. Google Ads enables us to display advertisements in the Google search engine or on third-party websites when the user enters certain search terms in Google (keyword targeting). Furthermore, targeted advertisements can be displayed based on the user data available at Google (e.g. location data and interests) (target group targeting). As website operators, we can evaluate this data quantitatively, for example by analyzing which search terms led to the display of our advertisements and how many advertisements led to corresponding clicks.
Personal Data
IP addresses, location data, device information (browser, operating system), search queries, click behavior, and interactions on the website
Purpose of Data Processing
Data collection with Google Ads is performed to evaluate the effectiveness of advertising materials deployed in the Google network and to optimize our advertising measures. For these purposes, Google provides us with the collected data in the form of anonymized statistics.
Recipients
Google transmits and processes your data in the third country USA. Google has been certified under the Data Privacy Framework and is therefore subject to an adequacy decision by the EU Commission. The transmission of your data is based on Art. 45(1) GDPR. In addition, Google has committed to us in Standard Contractual Clauses to ensure European data protection law even in third countries, thereby providing an appropriate safeguard for the protection of personal data within the meaning of Art. 46(2)(c) GDPR.
Entries in the statistics provided by Google are deleted after 26 months. Deletion of data whose retention period has been reached occurs automatically once a month.
Legal basis
Art. 6(1)(a) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required.
15.Google Ads Conversion Tracking and Remarketing
This website uses Google Ads Conversion Tracking, a service for capturing so-called conversions, and links it with Google Analytics. Conversions can be described as the transformation of a person’s status into an intended status, e.g., the intended transformation of a prospective customer into an actual customer.
Personal Data
IP addresses, location data, device information (browser, operating system), search queries, click behavior, and interactions on the website
Purpose of Data Processing
We use the data collected through conversion tracking to understand, based on anonymized reports created by Google, which of our advertising measures are particularly effective and have led to the intended actions by users on our website. In addition, the conversion statistics help us optimize our website.
Recipients
Google transmits and processes your data in the third country USA. Google has been certified under the Data Privacy Framework and is therefore subject to an adequacy decision by the EU Commission. The transmission of your data is based on Art. 45(1) GDPR. In addition, Google has committed to us in Standard Contractual Clauses to ensure European data protection law even in third countries, thereby providing an appropriate safeguard for the protection of personal data within the meaning of Art. 46(2)(c) GDPR.
Entries in the statistics provided by Google are deleted after 14 months. Deletion of data whose retention period has been reached occurs automatically once a month.
Legal basis
Art. 6(1)(a) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required.
16.Google Syndication
We use Google Syndication, a service provided by Google, on our site.
Personal Data
The Google Syndication service is used to capture individual clicks within the Google advertising network. Google Syndication uses cookies as part of web tracking, which are stored on your computer and enable analysis of your use of our website and your browsing behavior (so-called tracking). We conduct this analysis based on the tracking service of Google Syndication in order to continuously optimize our online offering and make it more accessible. When you use our website, data—particularly your IP address and your user activities—is transmitted to servers of Google Syndication.
Purpose of Data Processing
We conduct this analysis based on the tracking service of Google Syndication in order to continuously optimize our online offering and make it more accessible.
Recipients
Google transmits and processes your data in the third country USA. Google has been certified under the Data Privacy Framework and is therefore subject to an adequacy decision by the EU Commission. The transmission of your data is based on Art. 45(1) GDPR. In addition, Google has committed to us in Standard Contractual Clauses to ensure European data protection law even in third countries, thereby providing an appropriate safeguard for the protection of personal data within the meaning of Art. 46(2)(c) GDPR.
Entries in the statistics provided by Google are deleted after 90 days. Deletion of data whose retention period has been reached occurs automatically once a month.
Legal basis
Art. 6(1)(a) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required.
17.Google Marketing Platforms
We use Google Marketing Platform products on our website. These include various marketing tools such as Data Studio, Surveys, Campaign Manager 360, Display & Video 360, or Search Ads 360.
Personal Data
Google uses a special cookie script. This records, among other things, the number of page views, users’ browsing behavior on the site, users’ IP addresses, previously visited pages, and keywords used for searches.
Purpose of Data Processing
Data collection is performed to evaluate the effectiveness of advertising materials deployed in the Google network and to optimize our advertising measures. For these purposes, Google provides us with the collected data in the form of anonymized statistics.
Recipients
In addition, Google uses so-called Standard Contractual Clauses (= Art. 46(2) and (3) GDPR). Standard Contractual Clauses (SCC) are template provisions provided by the EU Commission and are intended to ensure that your data complies with European data protection standards even when transferred to and stored in third countries (such as the USA).
Entries in the statistics provided by Google are deleted after 26 months. Deletion of data whose retention period has been reached occurs automatically once a month.
Legal basis
Art. 6(1)(a) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required.
18.Facebook Custom Audience
We use Meta Pixel on our websites, a service provided by Meta Platforms to enable personalized advertising.
Personal Data
If you have consented to the use of Meta Pixel and Custom Audiences, a connection to Meta servers is established when you visit our website in order to load the script required for Meta Pixel. Your IP address, the address of the visited page, and information about the browser and operating system used are transmitted. At the time Meta Pixel is initialized, cookies are stored that contain unique identifiers by which your browser can be recognized. The cookie is only valid for our site and cannot be used to track your activities on third-party sites. Each time you visit a page on our website where Meta Pixel is deployed, the following data is subsequently transmitted to and stored on a Meta server in the USA: address of the page from which you arrived at a page on our website, address of the visited page, date and time of the visit, browser and operating system, IP address, the pixel ID assigned by Meta for our website, identifier from the Meta cookie, “button-click data” (information about buttons the user has clicked and the page to which the user was redirected).
Purpose of Data Processing
We use Meta Pixel to advertise our offering in a targeted manner on Meta pages. By having Meta assign data subjects to a target group relevant to us, we can deploy our advertising materials effectively. By using Meta Pixel, we aim to ensure that our ads on Meta pages correspond to potential interest and do not appear intrusive.
Recipients
Insofar as Meta also processes your data in third countries, according to Meta this is done either on the basis of adequacy decisions by the EU Commission within the meaning of Art. 45(1) GDPR or on the basis of Standard Contractual Clauses with the recipient, which oblige them to ensure European data protection law even in third countries and thereby provide an appropriate safeguard for the protection of personal data within the meaning of Art. 46(2)(c) GDPR.
Data subjects who have been added to a Custom Audience are removed from the target group after 180 days, unless they have been re-added in the meantime through page visits. We do not store any personal data on our end. Otherwise, the storage of personal data is governed by Meta’s privacy policies. You can view the status of your consent via our Consent Manager and revoke any consent given at any time.
Legal basis
Art. 6(1)(a) GDPR
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required.
19.Social Networks
We maintain presences on multiple online platforms and social networks in order to interact with potential or existing customers, engage with interested parties and users, or promote offerings and services.
We operate our social media presences in so-called joint (data protection) responsibility with the providers. Data that you share or publish directly via the online platforms and networks (e.g., via comment and chat functions) is processed by us as the controller in order to interact with you or to communicate with you. Within the scope of this interaction, we may also receive statistical data from the platform operators regarding the use of our “channels and fan pages.” This includes, for example, information about interactions, likes, comments, or aggregated information and statistics (e.g., IP address; origin of followers) that help us learn about interactions with our page. The legal basis for data processing within our area of responsibility is Art. 6 (1) sentence 1 lit. f) GDPR.
However, the aforementioned providers also process data under their own responsibility. We have no influence over data processed by the provider under their own responsibility in accordance with their own terms of use and privacy policies. We point out that when accessing the aforementioned providers, additional data (e.g., from your usage and “surfing behavior”) may be collected and, if applicable, transmitted to the provider. Please also note that in the event of interaction via the aforementioned media, data may also be processed outside the European Union. Furthermore, user data is generally processed for market research and advertising purposes. For example, usage profiles can be created from user behavior and the resulting interests. These usage profiles can in turn be used, for example, to place advertisements within and outside the platforms that presumably correspond to the interests of the users. For more detailed information, please refer to the privacy information of the respective providers. If we have personal data from you in connection with the use of online platforms and networks, please direct your concerns to us. If you wish to assert rights against a specific provider, please contact the respective provider.
This site uses so-called web fonts to ensure uniform display of fonts. When a page is accessed, your browser loads the required web fonts into its browser cache to display texts and fonts correctly. For this purpose, the browser you are using must connect to the servers. We have configured the fonts so that no connection to Adobe servers is established. The use of web fonts is in the interest of a uniform and appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. If your browser does not support web fonts, a standard font from your computer will be used.
We maintain current technical measures to ensure data security, particularly to protect your personal data from risks during data transmission and from disclosure to third parties. These are continuously adapted and reviewed in accordance with the current state of technology. To maintain the confidentiality and integrity of the data you provide on our website, this data is transmitted via “https” and Transport Layer Security (TLS).
22. SolidWP
We use the Solid Security extension to secure our website. The developer and provider of the extension is SolidWP.
Personal Data
The IP address of visitors, the user ID of logged-in users, and the username of login attempts are conditionally logged to check for malicious activity and to protect the website from certain types of attacks. Examples of conditions under which logging occurs include login attempts, logout requests, requests for suspicious URLs, changes to website content, and password updates. This information is stored for 60 days.
Purpose of Data Processing
This allows us to identify which LinkedIn ad or interaction on LinkedIn brought you to our website. Using this data, we can statistically evaluate the use of our website and continuously optimize our website as well as better target our advertising.
Recipients
For users or customers who set up two-factor authentication for this website, a QR code image is generated. This image is generated using an API hosted by SolidWP. When generating this image, your username is sent to the API. This data is not logged. This website is scanned by the SolidWP Site Scanner for potential malware and vulnerabilities. We do not transmit any personal data to the scanner. However, the scanner may find publicly published personal information (for example, in comments or product reviews) during the scan.
A cookie named “itsec_interstitial_browser” is created to track a user’s login process and implement advanced security features. For further details, see Section 5 Cookies. Login attempts, logout requests, requests for suspicious URLs, changes to website content, and password updates. This information is stored for 60 days.
Legal basis
Art. 6 (1) f) GDPR The website operator has a legitimate interest in the most effective protection of their website from cyberattacks.
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required.
23. Application/Training
Personal Data
Training occupation, location, name, telephone number, email, time, educational qualification, and application documents
Purpose of Data Processing
We use a form on our website to communicate with our applicants and to respond to applications. Applications submitted to us in this context are processed exclusively to handle your application and to contact you. For further information, please refer to our privacy information for applicants.
Legal basis
For the decision on establishing an employment relationship: Where necessary, we process your personal data primarily for the purpose of establishing an employment relationship (Art. 6 (1) sentence 1 lit. b, Art. 88 GDPR in conjunction with Section 26 (1) BDSG).
Provision Required or Mandatory
The provision of the aforementioned personal data is neither legally nor contractually required. However, without providing this information, processing your application is not possible.
B. Your Rights
You have the right to request confirmation from us at any time as to whether we are processing personal data concerning you and the right to information about this personal data. In addition, you have the right to rectification, erasure, and restriction of data processing, as well as the right to object to the processing of personal data at any time, or to withdraw consent to data processing at any time, or to request data portability.
Please direct all information requests, access requests, withdrawals, or objections to data processing by email to . Furthermore, you have the right to lodge a complaint with a supervisory authority in the event of data protection violations.
You are currently viewing a placeholder content from Vimeo. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
You are currently viewing a placeholder content from YouTube. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
You are currently viewing a placeholder content from Facebook. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
You are currently viewing a placeholder content from Google Maps. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
You are currently viewing a placeholder content from Mapbox. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
You are currently viewing a placeholder content from OpenStreetMap. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
You are currently viewing a placeholder content from Google Maps. To access the actual content, click the button below. Please note that doing so will share data with third-party providers.
