Privacy policy

Privacy policy for the chargecloud website

We, chargecloud GmbH, Design Offices Köln Mediapark, Erftstraße 15-17, 50672 Cologne (hereinafter also ‘we’, ‘us’ or ‘chargecloud’) would like to provide you with the following information on the processing of your personal data (hereinafter also ‘data’) when using our website and on your rights under data protection law.

We take the protection of your personal data very seriously. Your data will be processed exclusively in accordance with the applicable data protection regulations, in particular the provisions of the European General Data Protection Regulation (hereinafter: ‘GDPR’) and the German Federal Data Protection Act (hereinafter: ‘BDSG’).

Please note that the terms used, such as ‘personal data’ or ‘processing’, correspond to the definitions in Article 4 GDPR. If you would like to take a look at the GDPR yourself, you can find it on the Internet at: http://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32016R0679. You can access the BDSG under the following link: https://www.gesetze-im-internet.de/bdsg_2018.

This privacy policy applies exclusively to our website, which can be accessed at https://www.chargecloud.de, including all its subpages. This privacy policy expressly does not apply to our community, our social media presences or websites and other online offers from third parties that are linked to from our website.

1. Information about the controller of the data processing

The controller within the meaning of the GDPR for the processing of your data within the context of this website is:

chargecloud GmbH

Design Offices Köln Mediapark
Erftstraße 15-17
50672 Cologne
Germany

Email: support@chargecloud.de

If you have any questions about the processing of your data or wish to exercise your rights as a data subject, please contact us using the contact details above.

You can also contact our data protection officer directly. You can reach him by email at datenschutz@chargecloud.de or using the following contact details:

Data Protection Officer of chargecloud GmbH

c/o V-Formation GmbH

Stephanienstr. 18

76133 Karlsruhe

Germany

www.v-formation.de

Tel.: 0721 / 170 290 34

Email: datenschutz@chargecloud.de

2. data processed when using our website

2.1 Enquiries to the sales department

You have the option of contacting our sales department by email or via the contact form on our website. Messages received via the contact form are always transferred directly to our CRM system (Salesforce). We also usually use our CRM system to process inquiries, e.g. by email or telephone. If you do not want us to store and process your data in our CRM system, please let us know when you contact us. We process the following data when you contact the sales team:

First name, last name
E-mail address, telephone number
Company name, number of charging points, job title
Content of the request

Data processing is carried out to safeguard our legitimate interest in properly responding to your inquiries on the basis of Article 6(1) sentence 1(f) GDPR or, if the inquiry serves to initiate a contract between you and us, on the basis of Article 6(1) sentence 1(b) GDPR.

The inclusion of your personal data in our CRM system is based on our legitimate interest in the efficient processing of inquiries to the sales department, in particular with regard to the possible initiation of a contract in the future, on the basis of Article 6(1) sentence 1(f) GDPR.

If we process your data to protect our legitimate interests on the basis of Article 6(1) sentence 1 point (f) GDPR, you can object to the processing of your data at any time by sending a message to the contact details given above.

The above-mentioned data will be stored until your request has been fully answered and then deleted.

2.2. Contacting the support team

You have the possibility to contact our support team via the contact form on our website. Messages received via the contact form are transferred directly to our support system (Zendesk). When contacting the support team, we process the following data:

First name, last name
Email address, telephone number
Company name
Content of the enquiry

Data processing is based on our legitimate interests in properly responding to your enquiries on the basis of Article 6 paragraph 1 sentence 1 letter f GDPR, or, insofar as the enquiry is made in the context of the performance of a contract between you and us, on the basis of Article 6 paragraph 1 sentence 1 letter b GDPR.

If we process your data based on our legitimate interests on the basis of Article 6 paragraph 1 sentence 1 letter f GDPR, you can object to the processing of your data at any time by sending a message to the contact details above.

The above-mentioned data will be stored until your enquiry has been fully answered and then deleted.

2.3. Contacting the Human Resources Department

You have the option of contacting our HR department by email or via the "Careers" contact form on our website. Messages received via the contact form are transferred directly to our HR management software Personio. When contacting the human resources department, we process the following data:

First name, last name
E-mail address, telephone number
Content of the enquiry

2.4. Application Process

Data processing is carried out to safeguard our legitimate interest in properly responding to your inquiries on the basis of Article 6(1) sentence 1(f) GDPR or, if the inquiry serves to initiate an employment contract between you and us, on the basis of Article 6(1) sentence 1(b) GDPR.

If we process your data to protect our legitimate interests on the basis of Article 6(1) sentence 1(f) GDPR, you can object to the processing of your data at any time by sending a message to the above-mentioned contact details.

The above-mentioned data will be stored until your request has been fully answered and then deleted. If your inquiry relates to an application for a job with us, the retention and deletion periods in section 2.4 below apply

You have the option of applying to us via our careers section on the website or by email. Applications submitted via the careers page are transferred directly to the personnel management software Personio that we use. As part of your application to us, we initially process the following data in particular:

First name, last name
E-mail address, telephone number
Desired salary, possible starting date, how you became aware of chargecloud
Content of the request/your message to us
Cover letter, curriculum vitae

Depending on the nature of the position, further data may be required as the application process progresses, such as proof of certain qualifications. In this case, we would ask you separately to submit such further information.

Data processing is carried out for the establishment of employment contracts on the basis of Article 6 (1) sentence 1 letter b, Art. 88 GDPR i.V.m. § SECTION 26 BDSG. If you have agreed to be included in our applicant pool during the application process, the legal basis for the continued storage of your data, even after an unsuccessful application, is your consent on the basis of Article 6(1) sentence 1(a) GDPR.

You can revoke your consent to the storage of your data in our applicant pool at any time with effect for the future by sending a message to the above-mentioned contact details.

The above data will be used for personnel administration in the event of employment. If the application is unsuccessful, we will delete the data six months after announcing our decision. If you have agreed to be included in the applicant pool, we will delete the data two years after inclusion in the applicant pool, unless a position is found in the meantime or you revoke your consent to storage in the applicant pool.

In the event of interviews, you undertake to maintain confidentiality about all operational matters of the employer, unless these are generally known.

2.5. Client information / Newsletter

You have the option of registering to receive our client information / newsletter, our regular e-mail notifications with information on current faults and maintenance work, release notes, product-specific information and advertising content, as well as information about chargecloud. We use the Brevo service from Sendinblue to send client information / newsletters. If you register to receive email notifications, we will process the following data:

First name, last name
e-mail address
Time of registration/registration for the client information/newsletter
Time at which the client information / newsletter was opened and links contained therein were clicked (opening and click rates)

2.6. Opinion polls

If you click on the links contained in the client information / newsletters, further evaluations will be carried out. For details, please refer to section 2.9 (Evaluation of advertising campaigns).

We use the so-called double opt-in procedure for sending client information / newsletters, i.e. we will send you an automatic confirmation e-mail after your registration via the respective registration form and ask you to confirm your registration for the newsletter dispatch by clicking on the corresponding link. By completing this double opt-in procedure, you have given your consent to receive the newsletter.

Data processing in the context of sending the newsletter is based on your consent in accordance with Article 6(1) sentence 1(a) GDPR. If the content of our newsletters is specifically described when you register for them, this is decisive for the scope of your consent. Our newsletters also contain information about our services, products, offers, promotions and our company.

Subscriptions to our newsletters are logged by us in order to be able to prove the registration process and the consent given in accordance with the legal requirements. The logging of the registration and the necessary processing of the data entered by you during registration is carried out to safeguard our legitimate interests in accordance with Article 6 (1) sentence 1 letter f GDPR.

If you no longer wish to receive newsletters from us, you can revoke your consent at any time with effect for the future by sending a message in text form to the above-mentioned contact details or via the unsubscribe link in each newsletter. Please note that it is not possible to revoke your consent to the measurement of opening and click rates separately.

In order to improve our product offering and to better prioritize the wishes and requirements of our clients, we will conduct surveys from time to time. You can choose which products or changes should be implemented first. We use Microsoft Forms for the opinion surveys. We process the following data as part of the surveys:

IP address
Time at which the survey was started and sent
Interests, wishes and comments, e.g. on new products or possible changes

Data processing is carried out to protect our legitimate interest in market research on the basis of Article 6(1) sentence 1(f) GDPR.

2.7. Registration for webinars

We regularly organize webinars to inform interested parties and clients about new and existing chargecloud products and to train them in their use. You can register for these webinars via our website. We use the Goto Webinar service to register for the webinars. We process the following data:

First name, last name
E-mail address, postal address, telephone number
Name of the company
Role/position

2.8. Log data

Data processing is carried out to safeguard our legitimate interest in the proper planning of webinars on the basis of Article 6(1) sentence 1(f) GDPR, or, if the webinar is held in the context of the performance of a contract between you and us or in the context of pre-contractual measures, on the basis of Article 6(1) sentence 1(b) GDPR.

Logs are created when you access and use our website. The following information is automatically stored in these logs

IP address and name of the internet provider
Activity, time stamp, any error messages or similar
Browser type and version, operating system
The previously visited website (referrer URL)

This data is required for the stable and secure operation of our website. We process it to protect our legitimate interests on the basis of Article 6(1) sentence 1 point (f) GDPR. Our legitimate interests lie in the provision of our website and in ensuring stability and security.

This data processing takes place automatically when you visit our website. It is not possible to use our website without this data processing. We do not use the above-mentioned data to draw conclusions about your identity unless there is a reasonable suspicion of an attack or illegal use of our website.

The above-mentioned data (log data) is stored for as long as is necessary for the above-mentioned purposes and is generally deleted after 14 days.

2.9. Statistics and usage analyses

If you have given us your consent to do so, we will evaluate your activities when using our website with the help of the analysis software Matomo, which we operate ourselves, and use it to compile statistics. Statistics and usage analyses enable us to better understand the wishes and interests of our visitors and to further develop our website accordingly. We process the following data:

Unique ID, number of page views, pages visited, time spent on the website
IP address
Location (the IP address is used to determine the approximate location of the region/city)
Information on how visitors arrived at the chargecloud website (e.g. direct access or via search engines, social media platforms or a link from another website)

You can revoke your consent to the processing at any time with effect for the future by deselecting the analysis cookies in the cookie settings of our website.

The storage of information on your end device or access to information that is already stored on your end device only takes place if a) you have given us your consent in accordance with Section 25 (1) sentence 1 of the Telecommunications Telemedia Data Protection Act (TTDSG), or b) if the storage of information on your end device or access to information already stored on your end device is absolutely necessary so that we can provide the telemedia service you have expressly requested (here: our website) (Section 25 (2) no. 2 TTDSG).

2.10. Evaluation of advertising campaigns

As part of advertising campaigns, your interactions with our newsletters and placed advertisements are tracked and evaluated (so-called measurement of opening and click rates). For this purpose, we use appropriately coded links contained in our newsletters and advertisements. When you click on these links, the following data is processed

Name of the advertising campaign
Medium used for the campaign, e.g. newsletter or social media platform
Element via which the link was followed, e.g. image or video
Personal data is not processed for the evaluation of advertising campaigns.

2.11.Web analysis

2.11.1. Google Analytics

f you have consented to this, we use Google Analytics, a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google Ireland”).

Google Analytics uses cookies. The information generated by the cookies about your use of our website may also be transferred to servers of Google LLC, the parent company of Google Ireland, in the USA and stored there. The US-based parent company Google LLC is certified in accordance with the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list. Any data transfers to Google in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Art. 43 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en

The legal basis is your consent pursuant to Article 6(1)(a) GDPR. We expressly reserve the right to rely on other legal bases.

Google will use this information on our behalf to evaluate your use of our website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Pseudonymous user profiles can be created from the processed data.

We only use Google Analytics with activated IP anonymization. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA.

We use the “demographic characteristics” function of Google Analytics. This allows reports to be created that contain statements about the age, gender and interests of site visitors. This data comes from Google's interest-based advertising, among other things. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google account.

We use the web analysis and optimization service Google Optimize, a sub-service of Google Analytics, to play out new functions and content to a percentage of our website visitors, to statistically evaluate changes in usage and thus increase the user-friendliness of our pages. This is done with the help of cookies. Google uses this information to evaluate the use of our pages and to create reports on optimization tests and website activities. This data cannot be assigned to a specific person.

You can revoke your consent to the use of Google Analytics at any time via the cookie settings on our website. You can also technically prevent the storage and use of cookies by selecting the appropriate browser settings or browser add-ons. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the further processing of this data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Further information on the use of data by Google, setting and objection options can be found on the Google websites under the following links:

https://www.google.com/intl/de/policies/privacy/partners („Datennutzung durch Google bei Ihrer Nutzung von Webseiten oder Apps unserer Partner“),
https://www.google.com/policies/technologies/ads („Datennutzung zu Werbezwecken“),
https://www.google.de/settings/ads („Informationen verwalten, die Google verwendet, um Ihnen Werbung einzublenden“).

2.12. Remarketing / Retargeting

2.12.1. LinkedIn Insights and Conversion Tracking

We use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter “LinkedIn Ireland”) on this website for retargeting/remarketing purposes.

When you visit our website and if you have given us your consent to do so, a direct connection is established between your browser and the LinkedIn servers via the LinkedIn Insight Tag. LinkedIn thus receives the information that you have visited our website and we can make our LinkedIn activities more effective and, for example, display posts or ads only to visitors to our website. In addition, the LinkedIn Insight Tag enables us to analyze the use of this website and to display ads for content and offers that may be of interest to you. The data collected is only transmitted to LinkedIn in encrypted form and is anonymous to us, i.e. the personal data of individual users cannot be viewed by us.

The information generated by the LinkedIn Insight Tag may also be transferred to servers of LinkedIn Corporation, the parent company of LinkedIn Ireland, in the USA and stored there. The US-based parent company LinkedIn Corporation is certified under the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list. Any data transfers to LinkedIn in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Art. 43 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

You can revoke your consent at any time via the cookie settings on our website. You can also technically prevent the storage and use of cookies by making the appropriate browser settings or browser add-ons.

Further information on the LinkedIn Insight Tag, data processing by LinkedIn and the options for objecting to data processing by LinkedIn can be found at

2.12.2. Xing Tracking-Pixel

We use the Xing tracking pixel of New Work SE, Am Strandkai 1, 20457 Hamburg, Germany (hereinafter also referred to as “Xing”) on this website for retargeting/remarketing purposes.

When you visit our website and if you have given us your consent to do so, a direct connection is established between your browser and the Xing servers via the tracking pixel. Xing thus receives the information that you have visited our website and we can make our Xing activities more effective and, for example, display posts or ads only to visitors to our website. In addition, Xing tracking pixels enable us to analyze the use of this website and to display ads for content and offers that may be of interest to you. The data collected is only transmitted to Xing in encrypted form and is anonymous to us, i.e. the personal data of individual users cannot be viewed by us.

2.13. Cookies

Cookies and similar technologies (hereinafter collectively referred to as “cookies”) are used on this website to make our website more convenient, efficient and secure and to ensure economical operation.

Cookies are generally small identifiers that our server sends to your web browser and that your end device stores with the corresponding default setting. These can be used, among other things, to recognize you when you visit our website again and to analyze and evaluate your use of our website. Cookies can be set by us or by third-party providers, such as our partners, e.g. for statistical and marketing purposes.

Data processing is carried out either to safeguard our legitimate interests on the basis of Article 6(1) sentence 1(f) GDPR or on the basis of Article 6(1) sentence 1(a) GDPR if you have expressly consented to the storage and use of cookies via our cookie banner. We expressly reserve the right to have recourse to other legal bases.

You can revoke your consent to the use and storage of non-essential cookies at any time with effect for the future in the [cookie settings] [MR3] of our website. You can also object to the storage of necessary cookies at any time by selecting “Do not accept cookies” in your web browser settings. The procedures for the technical management and deletion of cookies via the settings of your web browser can be found in the “Help” function of your web browser. You can also technically prevent the storage and use of all cookies by means of free browser add-ons, e.g. with an adblocker in conjunction with corresponding filter lists. However, if you prevent the storage of all cookies, this can lead to functional restrictions on our website. You can object to any processing that we carry out to protect our legitimate interests on the basis of Article 6(1) sentence 1(f) GDPR by sending a message to the contact details above.

2.13.1. Required cookies

We use the following cookies on our website, which are necessary for the basic functionality and to ensure the security and stability of our website (hereinafter collectively referred to as “necessary cookies”):

Name	Provider	Purpose	Storage duration	Type
cookieBannerAccepted	chargecloud	Check whether the cookie banner has already been accepted by the visitor. If this is not the case, the banner is displayed	7 Tage	Local Storage
analyticsAccepted	chargecloud (self-hosted Matomo instance)	Check whether visitors have consented to the use of web analytics, e.g. Matomo	7 Tage	Local Storage
previousContactContext	chargecloud	This value saves the context (if set) of the current page. When the contact form is opened, this context is used to decide which tabs are active above the form	7 Tage	Local Storage
clickPosition	chargecloud	Position at which the contact form was opened on the website (can be linked in the header or footer). This is used to customise the animation when the contact form is closed depending on the initial opening position	7 Tage	Local Storage
languageDetectionWasShown	chargecloud (self-hosted Matomo instance)	Check whether the banner for automatic detection of the user language has been displayed	7 Tage	Local Storage

The necessary cookies are stored and used to safeguard our legitimate interests on the basis of Article 6(1) sentence 1(f) GDPR. Our legitimate interest lies in the proper provision of our website and in ensuring the security and stability of our website.

The associated storage of information on your end device or access to information already stored on your end device is also permitted without your consent, as this is absolutely necessary so that we can provide the telemedia service you have expressly requested (here: our website) (Section 25 (2) No. 2 TTDSG).

You can only deactivate required cookies technically via your web browser settings. For further details, please refer to the above passage. Please note that the deactivation of required cookies can lead to functional restrictions. You can object to any processing that we carry out to protect our legitimate interests on the basis of Article 6(1) sentence 1(f) GDPR by sending a message to the contact details above.

2.13.2. Statistical cookies

Statistical cookies help us to better understand how you interact with our website by analyzing your use of our website with the help of statistical cookies. We may also use cookies from third-party providers, which may enable them to obtain information about your usage behavior and use it for their own purposes. For details on data processing by the third-party services used on this website, please refer to the relevant sections. Subject to your consent, we use the following statistical cookies:

Name	Provider	Purpose	Storage duration	Type
pk_ses_1.f6b1	chargecloud (self-hosted Matomo instance)	Session cookie, used to assign several requests on the website to a session	30 Minutes	Cookie
pk_id_1.f6b1	chargecloud (self-hosted Matomo instance)	Cookie for storing the user ID in Matomo. This is used to recognise visitors to the website	13 Months	Cookie
_ga	Google Analytics	Utilisation analysis	2 Years	Cookie
_ga_<278355449>	Google Analytics	Utilisation analysis	2 Years	Cookie

The storage and use of statistical cookies is based on your consent in accordance with Article 6(1)(a) GDPR.

The associated storage of information on your end device or access to information already stored on your end device is also based on your consent in accordance with Section 25 (1) sentence 1 of the GDPR.

You can revoke your consent to the storage and use of statistical cookies at any time with effect for the future in the cookie settings of our website. For further details, please refer to the passages above.

2.13.3. Marketing Cookies

Subject to your consent, we use the following cookies for marketing purposes in order to optimize our online marketing measures and to be able to evaluate your interactions with them (hereinafter collectively referred to as “marketing cookies”). We may also use cookies from third-party providers, which may enable them to obtain information about your usage behavior and use it for their own purposes. For details on data processing by the third-party services used on this website, please refer to the relevant sections.

Name	Provider	Purpose	Storage Duration	Type
Xing Tracking-Pixel	Xing	Remarketing / Retargeting	180 Days	Tracking-Pixel
LinkedIn Insight Tag	LinkedIn	Remarketing / Retargeting	180 Days	Tracking Tag

The storage and use of marketing cookies is based on your consent in accordance with Article 6(1)(a) GDPR.

The associated storage of information on your end device or access to information already stored on your end device is also based on your consent in accordance with Section 25 (1) sentence 1 GDPR.

2.14. Other services and content from third-party providers

2.14.1. Brevo

We use the Brevo service from Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin Germany, to send client information and newsletters.

2.14.2. Google Tag Manager

We use Google Tag Manager, a tag management service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google Ireland”). We use Google Tag Manager to integrate third-party services into our website. With the help of Google Tag Manager, we can integrate new services more easily into our website and update existing services more easily without having to make changes to the website itself. Google Tag Manager also makes it possible to activate or deactivate individual services in a targeted manner. This allows us to activate or deactivate services as selected by you via our cookie banner.

When you visit our website, a connection to the servers of Google Ireland is established and your IP address is transmitted to Google Ireland. Your IP address may also be transmitted to servers of Google LLC, the parent company of Google Ireland, in the USA and stored there. The US-based parent company Google LLC is certified in accordance with the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list. Any data transfers to Google in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Art. 43 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

The processing is necessary for the stable and secure operation of our website and is carried out to protect our legitimate interests on the basis of Article 6(1) sentence 1(f) GDPR. Our legitimate interests lie in the provision of our website and in ensuring stability and security.

This data processing takes place automatically when you visit our website. It is not possible to use our website without this data processing.

2.14.3. Goto Webinar

To register for webinars, we use the Goto Webinar service of GoTo Technologies Ireland Unlimited Company, The Reflector, 10 Hanover Quay, Dublin 2 D02R573, Ireland (hereinafter “GoTo Ireland”). The data processed by you when registering for webinars may also be transferred to servers of our processor GoTo Ireland or its parent company GoTo Technologies USA Inc. and other group companies in the USA and stored there. The group companies based in the USA are certified under the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list. Any data transfers to GoTo in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 45 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Further information on data protection at GoTo can be found at: https://www.goto.com/de/company/legal/privacy/international.

2.14.4. Microsoft Forms

For surveys, we use forms from Microsoft Forms, a service of Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18 P521, Ireland (hereinafter “Microsoft Ireland”).

The data processed by you when participating in surveys may also be transferred to servers of our processor Microsoft Ireland or its parent company Microsoft Corporation in the USA and stored there. The parent company based in the USA is certified under the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list. Any data transfers to Microsoft in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 45 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Further information on data protection at Microsoft can be found at: https://learn.microsoft.com/de-de/compliance/regulatory/gdpr.

If you do not want Microsoft to associate your access to our survey with your Microsoft user account, you must log out of Microsoft before accessing the survey.

2.14.5. Personio

For application management, we use the Personio service from Personio SE & Co. KG, Seidlstraße 3, 80335 Munich Germany, for application management.

2.14.6. Salesforce

We use the Salesforce service from Salesforce Inc, 415 Mission St Fl 3, San Francisco, California 94105 USA (hereinafter “Salesforce”) to answer inquiries and manage customer data.

The data processed by you when contacting our sales team may also be transferred to the servers of our processor Salesforce in the USA and stored there. Salesforce is certified under the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list. Any data transfers to Salesforce in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 45 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

Further information on data protection at Salesforce can be found at https://www.salesforce.com/de/company/privacy/full_privacy/.

2.14.7. Zendesk

We use the Zendesk service from Zendesk Inc., 1019 Market Street, San Francisco, California 94103 USA (“Zendesk”) to process support requests and tickets.

The data processed by you when contacting our support team via the contact form may also be transferred to the servers of our processor Zendesk in the USA and stored there. Zendesk is certified under the EU-US Data Privacy Framework, the corresponding certificate can be found here: https://www.dataprivacyframework.gov/list. Any data transfers to Zendesk in the USA are therefore covered by the corresponding adequacy decision of the EU Commission pursuant to Article 45 (3) GDPR. The EU Commission has published the adequacy decision here: https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en.

2.14.8. Links to our social media profiles

On our website you will find links (hyperlinks) to our presence on the social networks and platforms Xing and LinkedIn. These services are operated by the companies listed below (hereinafter also referred to as “third-party providers”):

Xing is operated by New Work SE, Am Strandkai 1, 20457 Hamburg (“Xing”)
LinkedIn is operated by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland (“LinkedIn”).

The purpose and scope of the data collection and the further processing and use of the data by Twitter and LinkedIn as well as your rights in this regard and the available setting options to protect your privacy can be found in the data protection notices of the third-party providers:

If you do not want a third-party provider to be able to assign the clicking of a link leading to its offer to your user account there, you must log out of the respective service before clicking on such a link. Even if you are not logged in with the third-party provider, data may be sent to the third-party provider via the use of cookies after clicking on a link.

3. Recipients of personal data

Your personal data will only be transferred to external recipients to the extent necessary to achieve the above-mentioned purposes, if we have your consent or other legal permission to do so. Your data may be transferred to external service providers that we use to achieve the above-mentioned purposes and with whom we have concluded order processing contracts in accordance with Article 28 (3) GDPR. External service providers used by us will only process your data for specific purposes and in accordance with our instructions.

External recipients of your personal data may be, in particular

Service providers bound by instructions that we use to achieve the above-mentioned purposes;
Business partners, e.g. freelance employees;
Courts, arbitration tribunals, authorities or legal advisors, if this is necessary to comply with applicable law or to assert, exercise or defend legal claims.

4. Data processing in third countries

If we transfer your data to third countries outside the European Union (EU) or the European Economic Area (EEA) as described above, we ensure that, apart from legally permitted exceptions, the recipient either has an adequate level of data protection or that you consent to the data transfer. An adequate level of data protection can be ensured, for example, by the existence of an adequacy decision by the EU Commission, the conclusion of EU standard contractual clauses (SCC) or the existence of so-called Binding Corporate Rules (BCR). Please contact us using the contact details above to obtain a copy of the specific guarantees for the transfer of your data to third countries.

In the event that the existing adequacy decision for the EU-US Data Privacy Framework is declared invalid in the future, we have already agreed additional transfer instruments with the relevant service providers as a precautionary measure, such as EU standard contractual clauses in particular, or will do so in good time if necessary.

5. Storage period and deletion

We only store your personal data for as long as is necessary to fulfill the above-mentioned purposes or - in the case of consent - as long as you do not revoke your consent. In the event of an objection, we will no longer process your personal data unless further processing is permitted or even mandatory under the relevant statutory provisions (e.g. as part of retention obligations under commercial and tax law). We also delete your personal data if we are obliged to do so for legal reasons.

For further details on the storage period of your personal data, please refer to the respective explanations in the sections listed above.

6. your rights

As a data subject affected by data processing, you have the following rights in accordance with the GDPR

Right of access (Article 15 GDPR)

You have the right to obtain information about your personal data processed by us.

Right to rectification (Article 16 GDPR)

You have the right to obtain from us without undue delay the rectification of inaccurate data and the completion of incomplete data, provided that the legal requirements are met.

Right to erasure (Article 17 GDPR)

You have the right to request the erasure of your personal data if the legal requirements are met and in particular if (1) your data is no longer required for the purposes stated in this data protection notice, (2) you have withdrawn your consent and there is no other legal basis for the processing, (3) your data has been processed unlawfully or (4) you have objected to the processing of your data and there are no overriding legitimate grounds for the processing.

Right to restriction of processing (Article 18 GDPR)

You have the right to request that we restrict the processing of personal data concerning you, in particular if you dispute the accuracy of the data or if the processing of your data is unlawful and you request restriction instead of erasure.

Right to data portability (Article 20 GDPR)

If your data is processed on the basis of a contract or on the basis of your consent, you have the right to receive your data in a structured, commonly used and machine-readable format or to have your data transmitted to another controller, provided that the legal requirements for this are met.

Right to object (Article 21 GDPR)

You have the right to object to our processing of your data at any time on grounds relating to your particular situation, provided that the legal basis for our processing of your data is the protection of our legitimate interests in accordance with Article 6(1)(f) GDPR. If you exercise your right to object, we will stop processing your data unless we can demonstrate compelling legitimate grounds for continuing the processing which override your interests, rights and freedoms or the processing serves the establishment, exercise or defense of legal claims.

Right to withdraw consent (Article 7(3) GDPR)

If we process your data on the basis of your consent, you have the right to withdraw this consent at any time with effect for the future. The lawfulness of the processing carried out on the basis of the consent until the revocation remains unaffected by the revocation.

Right to lodge a complaint with the supervisory authority (Article 77 GDPR)

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data relating to you infringes the GDPR (Article 77 GDPR). You can exercise this right with a supervisory authority in the member state of your habitual residence, your place of work or the place of the alleged infringement or with the supervisory authority responsible for us. The supervisory authority responsible for us is Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Postfach 200444, 40102 Düsseldorf.

If you have any questions regarding the processing of your data or would like to exercise your rights as a data subject, please contact us using the contact details above.

This data protection notice may be subject to change. The current version of this privacy policy applies.

Status: April 2024