1. Introduction

With the following information, we would like to give you, as a “data subject”, an overview of how we process your personal data and your rights under data protection laws. In principle, it is possible to use our Internet pages without entering personal data. However, if you would like to make use of special services offered by our company via our website, it may be necessary to process personal data. If the processing of personal data is necessary and there is no legal basis for such processing, we will generally obtain your consent.

Personal data, such as your name, address or e-mail address, is always processed in accordance with the General Data Protection Regulation (GDPR) and in accordance with the country-specific data protection regulations applicable to “Elevait GmbH & Co. KG - Dresden”. By means of this privacy policy, we would like to inform you about the scope and purpose of the personal data we collect, use and process.

As data controller, we have implemented numerous technical and organizational measures to ensure that personal data processed via this website is protected as completely as possible. However, Internet-based data transmissions can generally have security gaps, meaning that absolute protection cannot be guaranteed. For this reason, you are also free to submit personal data to us by alternative means, for example by telephone or post.

You too can take simple and easy-to-implement measures to protect yourself against unauthorized access to your data by third parties. We would therefore like to take this opportunity to provide you with some information on how to handle your data securely:

- Protect your account (login, user or customer account) and your IT system (computer, laptop, tablet or mobile device) with secure passwords.
- Only you should have access to the passwords. Make sure that you only ever use your passwords for one account (login, user or customer account).
- Don't use a password for different websites, applications, or online services.
- In particular when using publicly available IT systems or used jointly with other people, the following applies: You should definitely log out every time you log on to a website, an application or an online service.

Passwords should consist of at least 12 characters and should be chosen in such a way that they cannot be easily guessed. Therefore, they should not contain common everyday words, your own names or the names of relatives, but uppercase and lowercase letters, numbers and special characters.

2. Responsible person

Responsible within the meaning of the GDPR is:

elevait GmbH & Co. KG

Hauptstraße 60
78098 Triberg im Schwarzwald
Phone: +49 (0) 7722/91 79 057
Register court: Freiburg im Breisgau District Court
Tax number: 707013
VAT ID: 22181/02850
Tax office: Villingen-Schwenningen
Email: info@elevait.de

General Partner
artificibia GmbH
Hauptstraße 60
78098 Triberg im Schwarzwald
Register court: Freiburg im Breisgau District Court
Tax number: 724583
Contact data protection officer: gdpr@elevait.de

The responsible body is the legal person who, alone or together with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

3. Data Protection Officer

You can contact the data protection officer as follows: gdpr@elevait.de

You can contact our data protection officer directly at any time if you have any questions or suggestions regarding data protection.

4. Definitions

The data protection declaration is based on the terms used by the European legislator when adopting the General Data Protection Regulation (GDPR). Our privacy policy should be easy to read and understand both for the public and for our customers and business partners. To ensure this, we would like to explain the terms used in advance.

In this privacy statement, we use the following terms, among others:
1. personal data
Personal data is any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more particular characteristics that are an expression of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.

2nd Affected person
Data subject is any identified or identifiable natural person whose personal data is processed by the controller (our company).

3rdworkmanship
Processing is any process carried out with or without the aid of automated processes or any such series of processes in connection with personal data, such as collecting, organizing, storing, adapting or modifying, reading, querying, using, disclosing through transmission, dissemination or any other form of provision, reconciliation or linking, restriction, deletion or destruction.

4th Restriction of processing
Restriction of processing is the marking of stored personal data with the aim of restricting their future processing.

5th profiling
Profiling is any type of automated processing of personal data that consists of using this personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects relating to the work performance, economic situation, health, personal preferences, interests, reliability, behavior, whereabouts or changes of location of that natural person.

6th pseudonymization
Pseudonymization is the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that this additional information is stored separately and is subject to technical and organizational measures which ensure that the personal data is not assigned to an identified or identifiable natural person.

7. Contract processor
Contract processor is a natural or legal person, authority, agency or other body that processes personal data on behalf of the person responsible.

8th transceivers
The recipient is a natural or legal person, authority, institution or other body to which personal data is disclosed, regardless of whether it is a third party or not. However, public authorities that may receive personal data as part of a specific investigation mandate under Union or Member State law are not considered recipients.

9th third
A third party is a natural or legal person, authority, agency or body other than the data subject, the controller, the processor and the persons who, under the direct responsibility of the controller or processor, are authorized to process personal data.

10th consent
Consent is any expression of will given voluntarily by the data subject in an informed and unequivocal manner in the form of a statement or other unequivocal affirmative action by which the data subject indicates that he or she agrees to the processing of personal data concerning you.

5. Legal basis of processing

Art. 6 para. 1 lit. a) GDPR (in conjunction with § 25 para. 1 TTDDG) serves our company as the legal basis for processing operations in which we obtain consent for a specific processing purpose.

If the processing of personal data is necessary to fulfill a contract to which you are a party, as is the case, for example, in processing operations that are necessary for the delivery of goods or the provision of another service or consideration, the processing is based on Art. 6 para. 1 lit. b) GDPR. The same applies to such processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries about our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Art. 6 para. 1 lit. c) GDPR.

In rare cases, the processing of personal data could be necessary to protect the vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were injured in our company and his name, age, health insurance data or other vital information would then have to be passed on to a doctor, hospital or other third party. Processing would then be based on Article 6 (1) (d) GDPR.

Ultimately, processing operations could be based on Art. 6 para. 1 lit. f) GDPR. Processing operations that are not covered by any of the above legal bases are based on this legal basis if processing is necessary to protect a legitimate interest of our company or a third party, provided that the interests, fundamental rights and fundamental freedoms of the data subject do not prevail. We are permitted to carry out such processing operations in particular because they have been specifically mentioned by the European legislator. In this respect, he was of the opinion that a legitimate interest could be assumed if you are a customer of our company (recital 47 sentence 2 GDPR).

Our offer is generally aimed at adults. Persons under 16 years of age may not transfer any personal data to us without the consent of their parents or legal guardians. We do not request any personal data from children and adolescents, do not collect it and do not share it with third parties.

6. Transfer of data to third parties

Your personal data will not be transferred to third parties for purposes other than those listed below. We only share your personal data with third parties if:

1. you have given us your express consent to do so in accordance with Article 6 (1) (a) of the GDPR,
2. disclosure is permitted in accordance with Article 6 (1) (f) GDPR to protect our legitimate interests and there is no reason to assume that you have an overriding legitimate interest in not sharing your data,
3. in the event that there is a legal obligation to transfer data in accordance with Article 6 (1) (c) GDPR, and
4. this is permitted by law and is required in accordance with Article 6 (1) (b) of the GDPR to process contractual relationships with you.

As part of the processing operations described in this privacy policy, personal data may be transferred to the USA. The USA does not have an adequate level of data protection (ECJ: Schrems II ruling). In particular, US investigative authorities may oblige US companies to surrender or disclose personal data without the data subjects being able to take effective legal action against this. In principle, this means that your personal data may be processed by US investigative authorities. We have no influence on these processing activities. In order to protect your data, we have concluded order processing agreements based on the European Commission's standard contractual clauses. If the standard contractual clauses are not sufficient to establish an adequate level of security, your consent may serve as a legal basis for transfer to third countries in accordance with Art. 49 para. 1 lit. a) GDPR. This sometimes does not apply to data transfers to third countries for which the European Commission has issued an adequacy decision in accordance with Article 45 GDPR.

Einwilligung zur Datenverarbeitung - Datenschutz ist uns wichtig.elevait verpflichtet sich, Ihre Privatsphäre zu schützen. Ihre personenbezogenen Daten verwenden wir ausschließlich zur Verwaltung Ihres Kontos und zur Bereitstellung der angeforderten Produkte und Dienstleistungen.

Zusätzliche Informationen erhalten
Von Zeit zu Zeit möchten wir Sie über unsere Produkte und Dienstleistungen sowie andere Inhalte, die für Sie von Interesse sein könnten, informieren. Wenn Sie damit einverstanden sind, dass wir Sie zu diesem Zweck kontaktieren, geben Sie bitte unten an, wie Sie von uns kontaktiert werden möchten:Ich stimme zu, andere Benachrichtigungen von elevait zu erhalten.

Abbestellen und Datenschutz
Sie können diese Benachrichtigungen jederzeit abbestellen. Weitere Informationen zum Abbestellen, zu unseren Datenschutzverfahren und dazu, wie wir Ihre Privatsphäre schützen und respektieren, finden Sie in unserer Datenschutzrichtlinie.

Zustimmung zur Datenverarbeitung
Indem Sie unten auf „Senden“ klicken, stimmen Sie zu, dass elevait die oben angegebenen personenbezogenen Daten speichert und verarbeitet, um Ihnen die angeforderten Inhalte bereitzustellen.

7. Technology

7.1 SSL/TLS encryption

This site uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data or contact requests that you send to us as the operator. You can recognize an encrypted connection by the fact that there is “https://” in the browser's address line instead of “http://” and by the lock icon in your browser line. We use this technology to protect your transmitted data.

7.2 Data collection when you visit the website

When using our website for informational purposes only, i.e. when you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (in so-called “server log files”). Our website collects a range of general data and information each time you access a page by you or through an automated system. This general data and information is stored in the server's log files. It is possible to record the

1. browser types and versions used,
2. the operating system used by the accessing system,
3. the website from which an accessing system accesses our website (so-called referrer),
4. the sub-websites, which are accessed via an accessing system on our website,
5. the date and time of access to the website,
6. an Internet protocol address (IP address) and
7. the Internet service provider of the accessing system.

When using this general data and information, we do not draw any conclusions about you personally. Rather, this information is needed to

1. to deliver the content of our website correctly,
2. to optimize the content of our website and advertising for it,
3. to ensure the long-term functionality of our IT systems and the technology of our website, and
4. to provide law enforcement authorities with the information necessary for prosecution in the event of a cyber attack.

We therefore analyse this collected data and information statistically on the one hand and also with the aim of increasing data protection and data security in our company in order to ultimately ensure an optimal level of protection for the personal data we process. The data in the server log files is stored separately from all personal data provided by a data subject.

The legal basis for data processing is Article 6 (1) (f) GDPR. Our legitimate interest results from the data collection purposes listed above.

7.3 Amazon CloudFront (Content Delivery Network)

We use Amazon CloudFront, a web service from Amazon Web Services Inc., 410 Terry Avenue North, 98109, Seattle, Washington, USA.

Amazon CloudFront is a content delivery network (CDN). It routes the transfer of information between your browser and our website via CloudFront's network. This reduces the latency with which we can deliver static and dynamic web content. It also improves the security of our website through traffic encryption and access controls.

CloudFront also stores cookies on your computer to optimize the service. You can delete cookies in your browser, allow cookies only in individual cases and activate the automatic deletion of cookies when you close your browser.

Amazon Web Services receives and processes personal data as our contract processor in accordance with EU standard contractual clauses. CloudFront collects statistical data about visits to our website. This includes:

- IP address
- Website accessed
- referrer URL
- Browser type
- operating system
- device type

If you have agreed that CloudFront may be used, the legal basis for processing personal data is Art. 6 para. 1 lit. a GDPR. In addition, it is in our legitimate interest within the meaning of Article 6 (1) (f) GDPR to optimize our website, make it more secure and not operate a content delivery network ourselves. The personal data is kept by Amazon Web Services for as long as is necessary to achieve the described purpose.

The transfer of your personal data to the USA is based on standard contractual clauses. For more information, see: https://d1.awsstatic.com/legal/aws-gdpr/AWS_GDPR_DPA.pdf.

For more detailed information about CloudFront, visit: https://aws.amazon.com/de/cloudfront/.

7.4 Amazon Web Services (AWS) — hosting individual components

Amazon Web Services (AWS) components from Amazon.com Inc., Seattle, 410 Terry Ave N, United States, are integrated on our website. Amazon Web Services (AWS) is the world's most comprehensive and widely used cloud.

The purpose of using AWS in the present case is, among other things, to have applications and services hosted on AWS and to rent resources for computationally intensive tasks.

If you have agreed that the services hosted by AWS may be used, the legal basis for processing personal data is Art. 6 para. 1 lit. a GDPR. In addition, it is in our legitimate interest within the meaning of Article 6 (1) (f) GDPR to use the hosting of individual components on AWS in order to operate our website attractively and securely.

The parent company Amazon Inc. is certified as a US company under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

You can view the AWS privacy policy at:
https://d1.awsstatic.com/legal/privacypolicy/AWS_Privacy_Notice_German_2023-08-11.pdf.

7.5 Cloudflare (Content Delivery Network)

Our website uses features from CloudFlare. The provider is CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA.

CloudFlare offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is managed via the CloudFlare network. CloudFlare is thus able to analyze traffic between users and our websites, for example to identify and ward off attacks on our services. CloudFlare may also store cookies on your computer for optimization and analysis.

You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.

We have concluded a corresponding agreement with Cloudflare on the basis of the GDPR for order processing or according to EU standard contractual clauses. Cloudflare collects statistical data about visits to this website. Access data includes: name of the retrieved website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. Cloudflare uses log data for statistical evaluations for the purpose of operation, security and optimization of the offer.

If you have agreed that Cloudflare may be used, the legal basis for processing personal data is Art. 6 para. 1 lit. a) GDPR. We also have a legitimate interest in using Cloudflare to optimize our online offering and make it more secure. The corresponding legal basis for this is Art. 6 para. 1 lit. f) GDPR. The personal data is stored for as long as it is necessary to fulfill the purpose of processing.

The data is deleted as soon as it is no longer required to achieve the purpose. This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

For more information about CloudFlare, visit: https://www.cloudflare.com/privacypolicy/.

7.6 Content Delivery Network SP CDN (formerly MaxCDN)

Our website uses features from SP CDN (formerly MAX CDN). The provider is StackPath LLC, 1950 N Stemmons Fwy, Suite 1001, Dallas, TX 75207, USA.

SP CDN offers a globally distributed content delivery network with DNS. Technically, the transfer of information between your browser and our website is routed via the SP CDN network. SP CDN is thus able to analyze traffic between users and our websites. Statistical data is collected about visits to this website. Access data includes: name of the retrieved website, file, date and time of retrieval, amount of data transferred, notification of successful retrieval, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider. SP CDN uses the log data for statistical evaluations for the purpose of operation, security and optimization of the offer.

If you have agreed that SP CDN may be used, the legal basis for processing personal data is Art. 6 para. 1 lit. a) GDPR. We also have a legitimate interest in using SP CDN to optimize our online offering and make it more secure. The corresponding legal basis for this is Art. 6 para. 1 lit. f) GDPR.

This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

The personal data is kept for as long as it is necessary to fulfill the purpose of processing.

For more information about SP CDN, visit: https://www.stackpath.com/legal/.

7.7 jsDelivr

Components from jsDelivr, operated by the provider Prospect One, Królewska 65A/1, PL-30-081 Kraków, Poland, are integrated on our website.

We use the open source service jsDelivr on our website in order to be able to deliver content from our website to various user devices as quickly and technically flawlessly as possible.

jsDelivr is a content delivery network (CDN) that distributes the content on our website across various servers to ensure optimal worldwide accessibility. A CDN usually uses servers that are geographically close to the respective website user. It can therefore be assumed that users within the EU will be provided with content via servers within the EU. To provide the content, jsDelivr collects user data such as the IP address.

According to the provider, jsDelivr does not use cookies or similar tracking technologies, but is only necessary for the technical reasons mentioned above.

Data processing is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The privacy policy of jsDelivr can be viewed at: https://www.jsdelivr.com/terms/privacy-policy-jsdelivr-net.

7.8 unpkg (Content Delivery Network)

On our website, we display icons (favicons) using the “UNPKG” Content Delivery Network (CDN). This is an open source CDN operated by CloudFlare, Inc. 665 3rd St. #200, San Francisco, CA 94107, USA. When you call up a page, your browser loads the required icons into your browser cache to display them correctly.

For this purpose, the browser you are using must connect to UNPKG's servers. As a result, UNPKG becomes aware that our website has been accessed via your IP address.

The favicons are displayed using the CDN in the interest of a uniform and appealing presentation of our online offerings. This represents a legitimate interest within the meaning of Article 6 (1) (f) GDPR. If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a) GDPR.

For more information about viewing favicons using the UNPKG CDN, see:
https://unpkg.com/browse/@mdi/svg@7.2.96/.

8. cookies

8.1 General information about cookies

Cookies are small files that your browser automatically creates and that are stored on your IT system (laptop, tablet, smartphone, etc.) when you visit our site.

Information is stored in the cookie, which results from the specific device being used in each case. However, this does not mean that we are immediately aware of your identity as a result.

The use of cookies serves to make the use of our website more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after leaving our site.

In addition, we also use temporary cookies to optimize usability, which are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically recognize that you have already been with us and what entries and settings you have made so that you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate our offer for you for the purpose of optimization. When you visit our website again, these cookies enable us to automatically recognize that you have already visited it. The cookies set in this way are automatically deleted after a defined period of time. The respective storage period of cookies can be found in the settings of the consent tool used.

8.2 Legal basis for using cookies

The data processed by cookies, which is required for the website to function properly, is therefore necessary to protect our legitimate interests and those of third parties in accordance with Article 6 (1) (f) GDPR.

For all other cookies, you have given your consent to this via our opt-in cookie banner in accordance with Art. 6 para. 1 lit. a) GDPR.

6.3 Usercentrics (consent management tool)

We use the “Usercentrics” consent management platform from Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This service allows us to obtain and manage the consent of website users to process data.

Usercentrics collects data generated by end users who use our website. When an end user gives consent, Usercentrics automatically logs the following data:

1. Browser information.
2. Date and time of access.
3. Device information.
4. The URL of the page you visited.
5. Geographic location.
6. Page path of the web page.
7. The consent status of the end user, which serves as proof of consent.

The consent status is also stored in the end user's browser so that the website can automatically read and follow the end user's consent on all subsequent page requests and future end user sessions for up to 12 months. The consent data (consent and withdrawal of consent) are stored for three years. The storage period corresponds to the regular limitation period in accordance with Section 195 BGB. The data is then immediately deleted or passed on to the responsible person in the form of a data export upon request.

The functionality of the website is not guaranteed without the described processing. The user has no right to object as long as there is a legal obligation to obtain the user's consent to certain data processing processes (Art. 7 para. 1, 6 para. 1 lit. c GDPR).

Usercentrics is a recipient of your personal data and acts as an order processor for us.

Detailed information about using Usercentrics can be found at: //https://usercentrics.com/privacy-policy/.

8.4 Necessary cookies

weblocks.io

This cookie is used to differentiate between humans and bots. This is beneficial for the website to generate valid reports on the use of their website.

1 day

__cf_bm

cookie name

vendors

description

expiry

9. Content of our website

9.1 Contact/Contact form

When you contact us (e.g. via contact form or email), personal data is collected. Which data is collected when using a contact form is shown in the respective contact form. This data is stored and used exclusively for the purpose of answering your request or contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your request has been processed, this is the case if it can be inferred from the circumstances that the matter in question has been finally clarified and the deletion does not conflict with any legal storage requirements.

9.2 Application management/ job board

We collect and process the personal data of applicants for the purpose of processing the application process. Processing can also be carried out electronically. This is particularly the case if an applicant submits relevant application documents to us electronically, for example by e-mail or via a web form on the website. If we conclude an employment or service contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with legal requirements. If we do not conclude a contract with the applicant, the application documents will be automatically deleted two months after notification of the rejection decision, provided that deletion does not conflict with any other legitimate interests on our part. Another legitimate interest in this sense is, for example, a duty of proof in proceedings under the General Equal Treatment Act (AGG).

The legal basis for processing your data is Article 88 GDPR in conjunction with Section 26 (1) BDSG.

For personnel administration purposes, we also work with the HR solution Kenjo, from Kenjo GmbH, Urbanstraße 71, 10967 Berlin (“Kenjo”). This tool helps us manage personal data. We have concluded an order processing contract with Kenjo in accordance with Art. 28 GDPR. You can find more information about data protection here: https://www.kenjo.io/legal/privacy .

In order to accept and evaluate your application and depending on the data you provide, we may process personal data such as those set out below:

1st name
2. Contact details
3. Email address
4th telephone number
5. Date and place of birth
6. Application photo
7. Files and documents, such as certificates and certificates, that you send us in connection with your application.

The data that you provide to us during the application process will not be passed on to third parties.

10. Newsletter delivery

10.1 Promotional newsletter

Our website gives you the opportunity to subscribe to our company's newsletter. The input mask used for this purpose shows which personal data is transmitted to us when ordering the newsletter.
We inform our customers and business partners about our offers at regular intervals by means of a newsletter. In principle, you can only receive our company's newsletter if
1. You have a valid email address and
2. You have signed up to receive the newsletter.

For legal reasons, a confirmation email will be sent to the e-mail address you entered for the first time for sending the newsletter using a double opt-in procedure. This confirmation email is used to check whether you, as the owner of the email address, have authorized receipt of the newsletter.

When you register for the newsletter, we also store the IP address of the IT system you were using at the time of registration, as well as the date and time of registration, as well as the date and time of registration. The collection of this data is necessary to be able to trace the (possible) misuse of your e-mail address at a later date and is therefore our legal protection.

The personal data collected as part of a subscription to the newsletter is used exclusively to send our newsletter. In addition, subscribers to the newsletter could be informed by e-mail if this is necessary to operate the newsletter service or to register in this regard, as could be the case in the event of changes to the newsletter offer or if technical conditions change.
There is no transfer of personal data collected as part of the newsletter service to third parties. You can cancel your subscription to our newsletter at any time. The consent to the storage of personal data that you have given us for sending the newsletter can be withdrawn at any time. For the purpose of withdrawing consent, there is a corresponding link in every newsletter. It is also possible to unsubscribe from the newsletter at any time directly on our website or to inform us of this in another way.

The legal basis for data processing for the purpose of sending newsletters is Article 6 (1) (a) GDPR.

10.2 Using Hubspot

Description and purpose: We use Hubspot to send newsletters. The provider is Hubspot, Inc., 25 First Street, Cambridge, MA 02141 USA. Hubspot organizes and analyses, among other things, the sending of newsletters. The data you enter for the purpose of subscribing to the newsletter is stored on Hubspot's servers in Europe. If you do not want analysis from Hubspot, you must unsubscribe from the newsletter. For this purpose, we provide a corresponding link in every newsletter message. For the purpose of analysis, the emails sent with Hubspot contain a so-called tracking pixel, which connects to Hubspot's servers when the email is opened. In this way, it is possible to determine whether a newsletter message has been opened. In addition, with the help of Hubspot, we can determine whether and which links in the newsletter message are clicked on. Optionally, links in the email can be set as tracking links that can be used to count your clicks.

Legal basis: The legal basis for data processing is Art. 6 para. 1 lit. a) GDPR.

Recipient: The recipient of the data is Hubspot, Inc.

Transfer to third countries: Data will not be transferred to third countries.

Duration: The data stored by us as part of your consent for the purpose of the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted both from our servers and from Hubspot's servers after you unsubscribe from the newsletter. Data that we have stored for other purposes (e.g. e-mail addresses for the member area) remains unaffected by this.

Withdrawal option: You have the option to withdraw your consent to data processing at any time with effect for the future. The legality of the data processing operations that have already taken place remains unaffected by the revocation.

Further data protection information: For more information, see Hubspot's data security notices here.

11. Our activities on social networks

So that we can also communicate with you on social networks and inform you about our services, we have our own pages there. If you visit one of our social media pages, we are jointly responsible for the processing with regard to the processing operations triggered as a result, within the meaning of Article 26 GDPR, with the provider of the respective social media platform.

We are not the original provider of these pages, but only use them within the scope of the options offered to us by the respective providers.

As a precautionary measure, we therefore point out that your data may also be processed outside the European Union or the European Economic Area. Use may therefore involve data protection risks for you, as the protection of your rights, e.g. to information, deletion, objection, etc. could be difficult and the processing on social networks is often carried out directly for advertising purposes or to analyze user behavior by the providers, without this being able to be influenced by us. If user profiles are created by the provider, cookies are often used or the usage behavior is assigned to your own social network member profile.

The described processing of personal data is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest and the legitimate interest of the respective provider in order to be able to communicate with you in a timely manner or to inform you about our services. If you have to give the respective providers consent to data processing as a user, the legal basis relates to Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR.

Since we have no access to the providers' databases, we would like to point out that it is best to assert your rights (e.g. to information, correction, deletion, etc.) directly with the respective provider. We have provided further information on the processing of your data in social networks below with the respective social network provider we use:

11.1 Instagram

(Co-) responsible for data processing in Germany:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

Privacy Policy (Data Policy): https://instagram.com/legal/privacy/

11.2 LinkedIn

(Co-) responsible for data processing in Europe:
LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland

Privacy statement: https://www.linkedin.com/legal/privacy-policy

11.3 X (Twitter)

(Co-) responsible for data processing in Europe:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland

Privacy statement: https://twitter.com/de/privacy
Information about your data: https://twitter.com/settings/your_twitter_data

11.4 YouTube

(Co-) responsible for data processing in Europe:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

Privacy statement: https://policies.google.com/privacy

11.5 XING

(Co-) responsible for data processing in Germany:
New Work SE, Am Strandkai 1, 20457 Hamburg, Germany

Privacy statement: https://privacy.xing.com/de/datenschutzerklaerung
Information requests for XING members: https://www.xing.com/settings/privacy/data/disclosure

12. Social media plug-ins

12.1 Instagram plugin

We have integrated components of the Instagram service on this website. Instagram is a service that qualifies as an audiovisual platform and allows users to share photos and videos and also to share such data on other social networks.

The operating company of Instagram services is Meta Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.

Each time you access one of the individual pages of this website, which is operated by us and on which an Instagram component (Instagram button) has been integrated, the Internet browser on your IT system is automatically prompted by the respective Instagram component to download a representation of the corresponding component from Instagram. As part of this technical process, Instagram becomes aware of which specific sub-page of our website you are visiting.

If you are logged in to Instagram at the same time, Instagram recognizes which specific sub-page you visit every time you visit our website and for the entire duration of your stay on our website. This information is collected by the Instagram component and assigned to your Instagram account by Instagram. If you click on one of the Instagram buttons integrated on our website, the data and information transferred with it will be assigned to your personal Instagram user account and stored and processed by Instagram.

Instagram receives information via the Instagram component that you have visited our website whenever you are logged in to Instagram at the same time as you access our website; this takes place regardless of whether you have clicked on the Instagram component or not. If you do not want this information to be transmitted to Instagram in this way, you can prevent the transmission by logging out of your Instagram account before accessing our website.

This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

Personal data will only be processed using the social media buttons with your express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

Further information and Instagram's applicable privacy policy can be found at https://help.instagram.com/155833707900388 and https://www.instagram.com/about/legal/privacy/ be retrieved.

12.2 LinkedIn plugin

We have integrated components from LinkedIn Corporation on this website. LinkedIn is an internet-based social network that allows users to connect with existing business contacts and make new business contacts.

LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court Mountain View, CA 94043, USA. LinkedIn Ireland, Privacy Policy Issues, Wilton Plaza, Wilton Place, Dublin 2, Ireland, is responsible for data protection issues outside the USA.

Each time you access our website, which is equipped with a LinkedIn component (LinkedIn plug-in), this component causes the browser you are using to download a corresponding representation of the LinkedIn component. More information about LinkedIn plugins can be found at https://developer.linkedin.com/plugins be retrieved. As part of this technical process, LinkedIn receives information about which specific subpage of our website you have visited.

If you are logged in to LinkedIn at the same time, LinkedIn recognizes which specific sub-page of our website you are visiting each time you visit our website and for the entire duration of your stay on our website. This information is collected by the LinkedIn component and assigned to your LinkedIn account by LinkedIn. If you click on a LinkedIn button integrated on our website, LinkedIn assigns this information to your personal LinkedIn user account and stores this personal data.

LinkedIn receives information via the LinkedIn component that you have visited our website whenever you are logged in to LinkedIn at the same time as you access our website; this takes place regardless of whether you have clicked on the LinkedIn component or not. If you do not want this information to be transmitted to LinkedIn in this way, you can prevent the transmission by logging out of your LinkedIn account before you access our website. Personal data will only be processed using the social media buttons with your express consent in accordance with Art. 6 (1) lit. a) GDPR.

LinkedIn offers at https://www.linkedin.com/psettings/guest-controls The ability to unsubscribe from email messages, text messages, and targeted ads, and manage ad preferences. LinkedIn also uses partners such as Quantcast, Google Analytics, BlueKai, DoubleClick, Nielsen, Comscore, Eloqua and Lotame, who can set cookies. Such cookies can be found at https://www.linkedin.com/legal/cookie-policybe rejected. LinkedIn's current privacy policy is available at https://www.linkedin.com/legal/privacy-policy retrievable. LinkedIn's cookie policy is available at https://www.linkedin.com/legal/cookie-policy retrievable.

12.3 X Plug-in (Twitter Plugin)

We have integrated components from X (formerly Twitter) on this website. X is a multilingual, publicly accessible microblogging service, on which users can publish and distribute so-called tweets, i.e. short messages limited to 140 characters. These short messages are available to everyone, including people who are not registered with X. However, the tweets are also displayed to the so-called followers of the respective user. Followers are other X users who follow a user's tweets. X also makes it possible to address a wide audience via hashtags, links or retweets.

The operating company of X is X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA.

Each time you access one of the individual pages of this website, which is operated by us and on which an X component (Twitter button) has been integrated, the Internet browser on your IT system is automatically prompted by the respective X component to download a representation of the corresponding X component from X. More information about the Twitter buttons is available at https://about.twitter.com/de/resources/buttons retrievable. As part of this technical process, X becomes aware of which specific subpage of our website you are visiting. The purpose of integrating the X component is to enable our users to redistribute the content of this website, to make this website known in the digital world and to increase our number of visitors.

If you are logged in to X at the same time, X recognizes which specific sub-page of our website you are visiting each time you visit our website and for the entire duration of your stay on our website. This information is collected by the X component and assigned to your X account by X. If you click on one of the Twitter buttons integrated on our website, the data and information transferred with it will be assigned to your personal X user account and stored and processed by X.

X receives information via the X component that you are visiting our website whenever you are logged in to X at the same time as you access our website; this takes place regardless of whether you click on the X component or not. If you do not want this information to be transmitted to X in this way, you can prevent the transmission by logging out of your X account before accessing our website.

Personal data will only be processed using the social media buttons with your express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The applicable data protection regulations of X are available at https://twitter.com/privacy?lang=de retrievable.

12.4 Youtube plugin

We have integrated components from YouTube on this website. YouTube is an Internet video portal that allows video publishers to post video clips free of charge and other users to view, rate and comment on them free of charge. YouTube allows the publication of all types of videos, which is why complete film and television broadcasts, but also music videos, trailers or videos made by users themselves can be accessed via the Internet portal.

The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Each time you access one of the individual pages of this website, which is operated by us and on which a YouTube component (YouTube plug-in) has been integrated, the Internet browser on your IT system is automatically prompted by the respective YouTube component to download a representation of the corresponding YouTube component from YouTube. More information about YouTube can be found at https://www.youtube.com/yt/about/de/ be retrieved. As part of this technical process, YouTube and Google are aware of which specific sub-page of our website you are visiting.

If you are logged in to YouTube at the same time, when you call up a subpage that contains a YouTube plugin, YouTube recognizes which specific subpage of our website you are visiting. This information is collected by YouTube and Google and associated with your YouTube account.

YouTube and Google receive information via the YouTube component that you have visited our website whenever you are logged in to YouTube at the same time as you access our website; this takes place regardless of whether you click on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google in this way, you can prevent the transmission by logging out of your YouTube account before you access our website.

YouTube is used in the interest of convenient and easy use of our website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f) GDPR.

This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 GDPR, so that personal data may also be transferred without further guarantees or additional measures. Personal data using the social media buttons will only be processed with your express consent in accordance with Article 6 (1) (a) GDPR.

The privacy policy published by YouTube, which is available at https://www.google.de/intl/de/policies/privacy/ are available, provide information about the collection, processing and use of personal data by YouTube and Google.

13. Web analysis

13.1 Google Analytics 4 (GA4)

On our websites, we use Google Analytics 4 (GA4), a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

In this context, pseudonymized user profiles are created and cookies (see “Cookies” section) are used. The information generated by the cookie about your use of this website may include:

1. a brief recording of the IP address without permanent storage
2. Location data
3.Browser type/version
4. operating system used
5. Referrer URL (previously visited page)
6. Time of server request

The pseudonymized data can be transferred from Google to a server in the USA and stored there.

The information is used to evaluate the use of the website, to compile reports on website activity and to provide other services related to website activity and Internet usage for the purposes of market research and to tailor these websites to meet the needs of users. This information may also be transferred to third parties if this is required by law or if third parties process this data on behalf of third parties. Under no circumstances will your IP address be combined with other data from Google.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a GDPR.

Further information on data protection when using GA4 can be found at: https://support.google.com/analytics/answer/12017362?hl=de.

The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 GDPR, so that personal data may also be transferred without further guarantees or additional measures. Further information on data protection when using GA4 can be found at: https://support.google.com/analytics/answer/12017362?hl=de.

13.2 Hubspot

We use HubSpot features on this website. The provider is HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA.

HubSpot tracks visitors to our website using browser cookies. Each time you access our website, HubSpot checks whether a HubSpot tracking cookie has been set. If no such cookie has been set on your browser yet, provided you give your consent, a HubSpot cookie will be set on your browser, which records all our websites that you access later on.

When it comes to HubSpot's handling of tracking cookies, please note the following:

- Your visit to our websites will only be traced using the HubSpot cookie if you have given your consent to the setting of the HubSpot cookie or all tracking cookies.
- If you fill out and submit one of the forms on our websites (e.g. a contact form) and have given your consent to set the HubSpot cookie, HubSpot will associate your previous page views resulting from the tracking cookie with the form you have sent.
- If you have already been in contact with us, your email address submitted via the form will be assigned to the information we have already stored.
- If you delete all of your cookies or specifically delete HubSpot cookies, you will be considered a new visitor to our websites and a new cookie will be set. However, HubSpot automatically duplicates all form submissions received from the same email address, even if there are different browser cookies associated with those submissions.
- Since cookies are only set once on a browser, submissions from two people who share a single computer are associated with the same contact entry. This deduplication via cookie ensures that when a contact from different email addresses sends forms to your website, all submissions are attributed to a single contact entry in HubSpot.
- HubSpot assigns page views to a contact person when the contact clicks on a link in a followed marketing email that links to a page that has the HubSpot tracking code installed.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a) GDPR. Your data will be stored until you withdraw your consent.

You can set your browser so that you are informed when cookies are set and only allow cookies in individual cases, exclude the acceptance of cookies for specific cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be limited.

The transfer of your personal data to the USA is based on standard contractual clauses.

For more information about HubSpot, visit: https://legal.hubspot.com/privacy-policy.

13.3 New Relic

We use the New Relic web analysis service for our website. The service provider is the American company New Relic Inc., San Francisco, CA, 188 Spear St. San Francisco, USA.

With the New Relic service, we can monitor the speed and availability of our website. In addition, this service allows us to analyze user behavior. In the course of using our website, the following data may be transferred, processed and stored to New Relic:

- Frequency of page views
- number of users
- Use of website features
- Date
- IP address

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a GDPR. Your data will be deleted as soon as it is no longer required to achieve the purpose or as soon as you withdraw your consent.

New Relic Inc. is certified as a US company under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

For more information about New Relic's privacy policy, please visit: https://newrelic.com/de/termsandconditions/privacy.

14. advertising

14.1 Google Ads with conversion tracking

We have integrated Google Ads on this website. The operating company of Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ads is an Internet advertising service that allows advertisers to place ads both in Google's search engine results and in the Google advertising network. Google Ads allows an advertiser to define specific keywords in advance, which are used to display an ad in Google's search engine results only when the user retrieves a keyword-relevant search result with the search engine. In the Google advertising network, ads are distributed on topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The purpose of Google Ads is to promote our website by displaying interest-based advertising on the websites of third-party companies and in the search engine results of the Google search engine and to display third-party advertising on our website.

If you access our website via a Google ad, Google stores a so-called conversion cookie on your IT system. A conversion cookie expires after thirty days and is not used to identify you. If the cookie has not yet expired, the conversion cookie is used to track whether certain sub-pages, such as the shopping cart from an online shop system, have been accessed on our website. With the conversion cookie, both we and Google can understand whether a user who came to our website via an AdWords ad generated revenue, i.e. completed or canceled a purchase of goods.

The data and information collected through the use of conversion cookies is used by Google to create visit statistics for our website. These visit statistics are in turn used by us to determine the total number of users who were referred to us via ads ads, i.e. to determine the success or failure of the respective ads ad and to optimize our ads ads for the future. Neither our company nor other Google Ads advertisers receive information from Google that could identify you.

Conversion cookies are used to store personal information, such as the websites you visit. Each time you visit our website, personal data, including the IP address of the Internet connection you are using, is therefore transmitted to Google in the United States of America. This personal data is stored by Google in the United States of America. Google may share this personal data collected via the technical process with third parties.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

The privacy policy and further information from Google AdSense can be viewed at: https://www.google.de/intl/de/policies/privacy/

15. Partner and affiliate programs

15.1 DoubleClick

This website contains components from DoubleClick by Google. DoubleClick is a brand of Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), under which special online marketing solutions are marketed to advertising agencies and publishers.

DoubleClick by Google transfers data to the DoubleClick server with every impression as well as with clicks or other activities. Each of these data transfers triggers a cookie request to your browser. If the browser accepts this request, DoubleClick sets a cookie on your IT system. The purpose of the cookie is to optimize and display advertising. The cookie is used, among other things, to place and display user-relevant advertising and to create reports on advertising campaigns or to improve them. The cookie is also used to prevent multiple displays of the same advertisement.

DoubleClick uses a cookie ID, which is required to complete the technical process. The cookie ID is required, for example, to display an ad in a browser. DoubleClick can also use the cookie ID to record which advertisements have already been displayed in a browser in order to avoid duplication. DoubleClick also allows DoubleClick to record conversions using the cookie ID.

A DoubleClick cookie does not contain any personal data. However, a DoubleClick cookie may contain additional campaign identifiers. A campaign ID is used to identify the campaigns with which you have already been in contact.

Each time you access one of the individual pages of this website, which is operated by us and on which a DoubleClick component has been integrated, the Internet browser on your IT system is prompted by the respective DoubleClick component to transmit data to Google for the purpose of online advertising and the billing of commissions. As part of this technical process, Google receives information that Google also uses to create commission statements. Among other things, Google can understand that you have clicked on certain links on our website.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

You can view DoubleClick by Google's privacy policy at: https://www.google.com/intl/de/policies/.

16. Plug-ins and other services

16.1 Google Maps

We use Google Maps (API) on our website. The operating company of Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Maps is a web service for displaying interactive (country) maps to visually represent geographical information. By using this service, for example, you can see our location and make it easier to get there.

As soon as you access the sub-pages into which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there provided that you have given your consent within the meaning of Art. 6 para. 1 lit. a) GDPR. In addition, Google Maps reloads Google web fonts and Google Photos as well as Google stats. Google Ireland Limited is also the provider of the services. When you access a page that integrates Google Maps, your browser loads the web fonts and photos required to display the Google Maps into your browser cache. The browser you use also connects to Google's servers for this purpose. As a result, Google becomes aware that our website has been accessed via your IP address. This is done regardless of whether Google provides a user account through which you are logged in, or whether there is no user account. If you are logged in to Google, your data is directly associated with your account. If you do not want to be associated with your profile on Google, you must log out of your Google user account. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right.

If you do not agree to the future transmission of your data to Google as part of using Google Maps, it is also possible to completely deactivate the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a) GDPR. Google's terms of use can be found at https://www.google.de/intl/de/policies/terms/regional.html The additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.

The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

The privacy policy of Google Maps can be viewed at: (“Google Privacy Policy”): https://www.google.de/intl/de/policies/privacy/.

16.2 Google Photos

We use the Google Photos service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to store images that are embedded on our homepage.

Embedding is the integration of specific external content (text, video or image data) that is provided by another website (Google Photos) and then appears on your own website (our website). A so-called embed code is used for embedding. If we have integrated an embed code, the external content of Google Photos is displayed immediately as soon as one of our websites is visited.

Through the technical implementation of the embed code, which enables images from Google Photos to be displayed, your IP address is transmitted to Google Photos. Google Photos also records our website, the type of browser used, the browser language, the time and length of access. In addition, Google Photos may collect information about which of our sub-pages you have visited and which links have been clicked on, as well as other interactions that you have carried out when you visit our site. This data can be stored and evaluated by Google Photos.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

Google's privacy policy can be viewed at: https://www.google.com/policies/privacy/.

16.3 Google reCAPTCHA

We use the reCAPTCHA function on this website. The operating company of Google reCAPTCHA is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The reCAPTCHA function is primarily used to distinguish whether an input is made by a natural person or is misused through machine and automated processing. The service also includes sending the IP address and any other data required by Google for the reCAPTCHA service to Google.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

16.4 Google Tag Manager

We use the Google Tag Manager service on this website. The operating company of Google Tag Manager is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

With this tool, “website tags” (i.e. keywords that are integrated into HTML elements) can be implemented and managed via an interface. By using Google Tag Manager, we can automatically understand which button, link or personalized image you have actively clicked on and can then record which content on our website is of particular interest to you.

The tool also triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have made a deactivation at the domain or cookie level, this will remain valid for all tracking tags that are implemented with Google Tag Manager.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

Further information about Google Tag Manager and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/.

16.5 Google Translate (Translate)

Our website integrates components from GTranslate Inc., 7957 N University Dr #355, Parkland, FL 33067, USA.

We use GTranslate to provide visitors with automated language translation. The service is used in the interest of making our online offerings multilingual. With this plugin, the translation is carried out automatically by Google (operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

For this purpose, the browser you use must connect to the GTranslate and Google servers. As a result, GTranslate and Google become aware that our website has been accessed via your IP address. They collect, store and process information to provide users with better services.

Among other things, the following data is processed:

- IP address
- language
- time of access and
- the page you visited

Data processing is based on your consent in accordance with Art. 6 para. 1 lit. a) GDPR.

For all transfers outside the EEA, appropriate security measures are in place in accordance with European law.

The transfer of your personal data to the USA is based on standard contractual clauses.

You can view Gtranslate's privacy policy at: https://gtranslate.io/privacy-policy.

16.6 Google Web Fonts

Our website uses so-called web fonts to uniformly display fonts. Google WebFonts are provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Ireland Limited is part of the Google group of companies headquartered in 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

When you call up a page, your browser loads the required web fonts into your browser cache to correctly display texts and fonts. For this purpose, the browser you use connects to Google's servers. As a result, Google becomes aware that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our website.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

Further information about Google WebFonts and Google's privacy policy can be found at: https://developers.google.com/fonts/faq ; https://www.google.com/policies/privacy/.

16.7 HubSpot CRM system

We use CRM software from the provider HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA (“HubSpot”).

Hubspot is a Software CRM solution for managing customer relationships and includes the following features:

1. Deal management, lead management and task management,
2. email tracking and notifications,
3. Email templates and scheduling,
4. document sharing,
5. online booking system for appointments,
6. Telephony solutions such as automatic call recording & logging.

All departments (including marketing, sales, customer service as well as online and stationary retail) work together with the described software.

The provider of HubSpot necessarily receives knowledge of the above data, insofar as this is provided for in our order processing contract (Art. 28 GDPR) with HubSpot. These may include names, addresses, email addresses, and telephone numbers. Personal data is therefore also processed in a third country (outside the EU and the EEA).

If a corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a) GDPR. The legal basis for using HubSpot within the framework of contractual relationships is Art. 6 para. 1 lit. b) GDPR. In all other cases, the legal basis for processing your personal data is Art. 6 para. 1 lit. f) GDPR. Here, we are interested in effectively coordinating internal and external communication and managing customer relationships.

To the extent that HubSpot processes personal data in connection with its own legitimate business transactions, HubSpot is an independent data controller for such use and, as such, responsible for compliance with applicable laws and obligations of a data controller.

This US company is certified under the EU-US Data Privacy Framework. There is hereby an adequacy decision in accordance with Article 45 of the GDPR, meaning that personal data may also be transferred without further guarantees or additional measures.

HubSpot's privacy policy can be viewed at: https://legal.hubspot.com/de/privacy-policy.

16.8 YouTube (videos)

We have integrated components from YouTube on this website. The operating company of YouTube is YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

If you are logged in to YouTube at the same time, when you call up a subpage that contains a YouTube video, YouTube recognizes which specific subpage of our website you are visiting. This information is collected by YouTube and Google and associated with your YouTube account.

YouTube and Google receive information via the YouTube component that you have visited our website whenever you are logged in to YouTube at the same time as you access our website; this takes place regardless of whether you click on a YouTube video or not. If you do not want this information to be transmitted to YouTube and Google in this way, you can prevent the transmission by logging out of your YouTube account before visiting our website.

These processing operations are carried out exclusively with express consent in accordance with Art. 6 para. 1 lit. a GDPR.

YouTube's privacy policy can be viewed at https://www.google.de/intl/de/policies/privacy/.

16.9 Webflow

We host our website with Webflow. The provider is Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (hereinafter: Webflow). When you visit our website, Webflow collects various log files, including your IP addresses. Webflow is a tool for building and hosting websites. Webflow stores cookies or other recognition technologies that are necessary to display the page, to provide certain website functions and to ensure security (necessary cookies). For details, see Webflow's privacy policy: EU & Swiss Privacy Policy | Webflow 22.

Webflow is used on the basis of Art. 6 para. 1 lit. f DSGVO. We have a legitimate interest in presenting our website as reliably as possible. If consent has been requested, processing is carried out exclusively on the basis of Article 6 (1) (a) GDPR and Section 25 (1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TTDSG. The consent can be withdrawn at any time. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: EU & Swiss Privacy Policy | Webflow 22.

17. Your rights as a data subject

17.1 Right to confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

17.2 Right to information Art. 15 GDPR

You have the right to receive free information from us about the personal data stored about you and a copy of this data in accordance with legal provisions at any time.

17.3 Right to rectification Art. 16 GDPR

You have the right to request that incorrect personal data concerning you be corrected. You also have the right to request the completion of incomplete personal data, taking into account the purposes of processing.

17.4 Deletion Art. 17 GDPR

You have the right to request that we delete the personal data relating to you immediately, provided that one of the reasons provided for by law applies and insofar as processing or storage is not necessary.

17.5 Restriction of processing Art. 18 GDPR

You have the right to ask us to restrict processing if one of the legal requirements is met.

17.6 Data portability Art. 20 GDPR

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format. You also have the right to transfer this data to another person responsible without hindrance from us to whom the personal data has been provided, provided that the processing is based on consent in accordance with Article 6 (1) (a) GDPR or Article 9 (2) (a) GDPR or on a contract in accordance with Article 6 (1) (b) GDPR and the processing is carried out using automated procedures, provided that the processing is not necessary to perform a task that is in the public interest is or is exercising public authority which was transferred to us.

In addition, when exercising your right to data portability in accordance with Article 20 (1) GDPR, you have the right to have the personal data transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible and provided that this does not affect the rights and freedoms of other persons.

17.7 Objection Art. 21 GDPR

For reasons arising from your particular situation, you have the right to object at any time to the processing of personal data concerning you on the basis of Article 6 (1) (e) (data processing in the public interest) or f (data processing based on a balance of interests) GDPR.

This also applies to profiling based on these provisions within the meaning of Art. 4 No. 4 GDPR. If you file an objection, we will no longer process your personal data unless we can prove compelling legitimate reasons for processing which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

In individual cases, we process personal data for direct marketing purposes. You can object to the processing of personal data for the purpose of such advertising at any time. This also applies to profiling, insofar as it is associated with such direct advertising. If you object to us processing for direct marketing purposes, we will no longer process the personal data for these purposes.

In addition, you have the right, for reasons arising from your particular situation, to object to processing of personal data concerning you by us for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) of the GDPR, unless such processing is necessary to perform a task in the public interest.

Notwithstanding Directive 2002/58/EC, you are free to exercise your right of objection in connection with the use of information society services by means of automated procedures using technical specifications.

17.8 Withdrawal of consent under data protection law

You have the right to withdraw your consent to the processing of personal data at any time with effect for the future.

Withdrawal address:
elevait GmbH & Co. KG
Main road 60
78098 Triberg in the Black Forest
gdpr@elevait.de

17.9 Complaint to a supervisory authority

You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.

18. Routine storage, deletion and blocking of personal data

We process and store your personal data only for the period necessary to achieve the storage purpose or if this is provided for by the legislation to which our company is subject.

If the storage purpose ceases to apply or if a prescribed storage period expires, the personal data will be blocked or deleted routinely and in accordance with legal requirements.

19. Duration of storage of personal data

The criterion for the duration of storage of personal data is the respective legal retention period. At the end of the period, the corresponding data will be routinely deleted, provided that it is no longer required to fulfill or initiate a contract.

20. Timeliness and amendment of the privacy policy

This privacy policy is currently valid and was last updated: June 21, 2024

As a result of the development of our websites and offers or due to changes in legal or regulatory requirements, it may be necessary to change this privacy policy. The current privacy policy can be found at any time on the website at”www.elevait.de/privacy“is retrieved and printed out by you.This privacy policy was created with the support of the data protection software: TÜV SÜD DSMS created.

En
De