Privacy Policy
General information about the processing of your data
We are legally obligated to inform you about the processing of your personal data (hereinafter “data”) when you use our website. This privacy notice provides you with details regarding the processing of your data and your legal rights in this regard. For terms such as “personal data” or “processing,” the legal definitions set forth in Article 4 of the GDPR apply. We reserve the right to amend this privacy policy with future effect, particularly in the event of further development of the website, the use of new technologies, or changes to the legal framework or relevant case law.
1. Data controller
The following entity is responsible for the processing of personal data:
velpTEC GmbH
Philipsbornstraße 230165
Hannover
E-Mail: datenschutz@velptec.de
velpTEC GmbH has appointed a Data Protection Officer, whom you can contact at datenschutz@velptec.de. Please note that when you use this email address, the content will not be viewed exclusively by our Data Protection Officer. If you wish to exchange confidential information, please first request direct contact via this email address.
2. Questions regarding data protection
If you have any questions regarding data protection in relation to our company or our website, you may contact us using the contact details provided in the “Data Controller” section.
3. Security
We have implemented comprehensive technical and organizational measures to protect your personal data from unauthorized access, misuse, loss, and other external threats. To this end, we regularly review our security measures and adapt them to the latest technological standards.
4. Your rights
You have the following rights regarding your personal data, which you may exercise by contacting us:
Right of Access
You may request information in accordance with Article 15 of the GDPR regarding your personal data that we process.
Right to Rectification
If the information concerning you is no longer accurate, you may request a correction in accordance with Article 16 of the GDPR. If your data is incomplete, you may request that it be completed.
Right to Erasure
You may request the erasure of your personal data in accordance with Article 17 of the GDPR.
Right to Restriction of Processing
In accordance with Article 18 of the GDPR, you have the right to request that the processing of your personal data be restricted.
Right to Object to Processing
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data carried out pursuant to Article 6(1)(e) or (f) of the GDPR, in accordance with Article 21(1) of the GDPR. In this case, we will not process your data further unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms. Further processing may also take place if the processing serves to assert, exercise, or defend legal claims (Article 21(1) of the GDPR). Furthermore, pursuant to Article 21(2) of the GDPR, you have the right to object at any time to the processing of your personal data for the purposes of direct marketing; this also applies to any profiling to the extent that it is related to such direct marketing. We draw your attention to the right to object in this Privacy Policy in connection with the respective processing.
Right to Withdraw Your Consent
If you have given your consent to the processing of your personal data, you have the right to withdraw that consent under Article 7(3) of the GDPR.
Right to Data Portability
You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format (“data portability”), as well as the right to have this data transmitted to another controller if the conditions of Article 20(1)(a) and (b) of the GDPR are met (Article 20 of the GDPR).You may exercise your rights by contacting us using the contact details provided in the “Data Controller” section.If you believe that the processing of your personal data violates data protection law, you also have the right under Article 77 of the GDPR to lodge a complaint with a data protection supervisory authority of your choice.This includes the data protection supervisory authority responsible for the controller:State Commissioner for Data Protection of Lower Saxony, P.O. Box 221, 30002 Hanover or: Prinzenstraße 5, 30159 Hanover, Phone: 0511 120-4500, Email: poststelle@lfd.niedersachsen.de, https://www.lfd.niedersachsen.de.
5. Use of Our Website
You may generally use our website for purely informational purposes without disclosing your identity. When accessing individual pages of the website in this manner, only access data is transmitted to our web hosting provider so that the website can be displayed to you. The following data is processed:
The temporary processing of this data is necessary to technically enable the website visit and the delivery of the website to your device. The access data is not used to identify individual users and is not combined with other data sources. Further storage in log files takes place to ensure the functionality of the website and the security of the IT systems. The legal basis for processing is Article 6(1)(f) of the GDPR. Our legitimate interests lie in ensuring the functionality of the website as well as its integrity and security. Storing access data in log files, particularly the IP address, for an extended period enables us to detect and prevent misuse. This includes, for example, defending against requests that overload the service or potential bot activity. The access data is deleted as soon as it is no longer necessary to achieve the purpose of its processing. In the case of data collected for the provision of the website, this occurs when you leave the website. Log data is generally stored in a manner accessible directly and exclusively to administrators and is deleted after seven days at the latest. After that, it is only available indirectly through the reconstruction of backup tapes and is permanently deleted after a maximum of four weeks.
We use the Webflow content management system to host this website. Your data is therefore also processed by “Webflow” (Webflow, Inc., 398 11th St. Fl 2, San Francisco, California, 94103, USA). Webflow also processes your data in the United States. The European Commission has issued an adequacy decision regarding data transfers to the United States. Webflow is certified under this framework. You can view the certification at: https://www.dataprivacyframework.gov/list.
You may object to the processing. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section.
6. Device Information
In addition to the aforementioned access data, technologies are used when you use the website that store information on your device (e.g., desktop PC, laptop, tablet, and smartphone) or access information already stored on your device. These technologies may include, for example, cookies, pixels, LocalStorage, SessionStorage, IndexedDB, or browser fingerprinting technologies. These technologies can be used to recognize you across devices and websites. Pursuant to Section 25(1) of the TDDDG, we generally require your consent to use these technologies. According to Section 25(2) of the TDDDG, such consent is not required only if the technologies either enable the transmission of a message via a public telecommunications network or if they are absolutely necessary to provide a telemedia service that you have expressly requested.
6.1 Technically Necessary Device Information
Some elements of our website serve the sole purpose of transmitting a message (Section 25(2)(1) TDDDG) or are strictly necessary to provide you with our website or individual functionalities of our website (Section 25(2)(2) TDDDG), e.g., language settings, or to enable you to use our website without interruption by preventing pop-ups, sidebars, etc. from reappearing. The elements are deleted once storage is no longer necessary. You can prevent this processing by adjusting the settings in your browser software. For elements whose storage duration is not limited to the session, you can delete them in your browser software settings after your session ends.
6.2 Non-Technically Necessary Device Information
We also use elements on the website that are not technically necessary. In accordance with legal requirements, we use these technologies only with your consent. Information on the individual technologies and functions can be found in our “Settings” as well as organized by function in the following information.
7.3 Consent-Management-Plattform
We use a consent tool on our website to request your consent for the processing of your device information and personal data via cookies or other tracking technologies. This allows you to consent to or refuse the processing of your device information and personal data via cookies or other tracking technologies for the listed purposes. Such processing purposes may include, for example, the integration of external elements, statistical analysis, audience measurement, or personalized advertising. You may grant or deny your consent for all processing purposes, or grant or deny your consent for individual purposes. You may also change the settings you have selected at a later time. The purpose of integrating the consent management platform is to allow users of our website to decide whether to accept cookies and similar functionalities and to offer them the option to change settings they have already made while continuing to use our website. In the course of using the consent management platform, we process personal data as well as information about the end devices used.
The information regarding the settings you have made is also stored on your device. The legal basis for the processing is Article 6(1)(c) of the GDPR in conjunction with Article 7(1) of the GDPR, insofar as the processing serves to fulfill the legally mandated obligations to provide evidence of consent. In all other cases, Article 6(1)(f) of the GDPR is the applicable legal basis. Our legitimate interests in the processing lie in the storage of user settings and preferences regarding the use of cookies and the evaluation of consent rates. Twelve months after the user settings are made, consent is requested again. The user settings you have configured will then be stored again for this period, unless you delete the information about your user settings yourself beforehand using the device storage provided for this purpose. You may object to the processing to the extent that the processing is based on Article 6(1)(f) of the GDPR.
Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section. The recipients of the personal data processed in this context are the provider of the consent management platform we use: “GDPR Cookie Consent” by the provider “Cookiebot” with regard to the “GDPR Cookie Consent” consent management platform.
7. Contacting Our Company
When you contact our company, e.g., via email or through the contact form on the website, we process the personal data you provide in order to respond to your inquiry. To process inquiries submitted via the contact form, you must provide your first and last name as well as a valid email address. You may also optionally provide a phone number. When you send us a message, your IP address, as well as the date and time of the request, are also processed. The legal basis for this processing is Article 6(1)(f) of the GDPR, or Article 6(1)(b) of the GDPR if the contact is aimed at entering into a contract. If the inquiry is intended to conclude a contract, the provision of your data is required and mandatory. If the data is not provided, it is not possible to conclude or execute the contract or to process the inquiry. The other data processed during the submission process serves to prevent misuse of the contact form and to ensure the security of our IT systems. We delete the data collected in this process once processing is no longer necessary—typically two years after the end of communication—or, where applicable, restrict processing to comply with existing mandatory legal retention requirements.
To process your contact request, we use the Make.com service provided by “Celonis” (Celonis Inc, One World Trade Center, 87th Floor, New York, NY 10007). Your data is therefore also processed by “Celonis.” Celonis also processes your data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Celonis is certified under this decision. You can view the certification at: https://www.dataprivacyframework.gov/list.
You may object to the processing of your data if it is based on Article 6(1)(f) of the GDPR. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section. If you provide us with health data, such as the degree of your disability, the legal basis for the processing is your consent pursuant to Article 9(2)(a) of the GDPR.
You may withdraw your consent to the processing at any time by sending us a message using the contact details listed under “Data Controller.” The lawfulness of the processing remains unaffected until the withdrawal is exercised.
8. Processing for Contractual Purposes
We process your personal data if and to the extent that this is necessary for the initiation, establishment, performance, and/or termination of a legal transaction with our company. The legal basis for this is Article 6(1)(b) of the GDPR. The provision of your data is necessary for the conclusion of the contract, and you are contractually obligated to provide your data. If you do not provide your data, the conclusion and/or performance of the contract is not possible. Once the purpose has been achieved (e.g., contract fulfillment), the personal data will be blocked from further processing or deleted, unless we have your consent (e.g., consent to the processing of your email address for the sending of electronic advertising), a contractual agreement, a legal authorization (e.g., authorization to send direct marketing), or legitimate interests (e.g., retention for the enforcement of claims). Your personal data will be disclosed to third parties if:
it is necessary for the establishment, performance, or termination of legal transactions with our company (e.g., when transferring data to a payment service provider or shipping company to fulfill a contract with you), in accordance with Article 6(1)(b) GDPR, or
a subcontractor or agent whom we engage exclusively for the purpose of providing the offers or services you have requested requires this data (unless you are expressly informed otherwise, such agents are only authorized to process the data to the extent necessary for the provision of the offer or service), or
an enforceable official order (Article 6(1)(c) GDPR) exists, or
an enforceable court order exists (Article 6(1)(c) GDPR), or
we are legally obligated to do so (Article 6(1)(c) GDPR), or
the processing is necessary to protect the vital interests of the data subject or of another natural person (Article 6(1)(d) GDPR), or
it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Article 6(1)(e) GDPR), or
we can rely on our legitimate interests or those of a third party for the disclosure (Article 6(1)(f) GDPR).
Your personal data will not be disclosed to other individuals, companies, or entities beyond this scope unless you have validly consented to such disclosure. The legal basis for the processing is then Article 6(1)(a) of the GDPR. Within the scope of this privacy policy, we will inform you of the respective recipients in relation to the specific processing operation.
9. Hosting
10.1 Webflow
We use external hosting services provided by “Webflow” (Webflow, Inc., 398 11th St. Fl 2, San Francisco, California, 94103, USA) to provide the following services: infrastructure and platform services, computing capacity, storage resources, and database services, as well as security and technical maintenance services. For these purposes, all data—including the access data mentioned under “Use of Our Website”—required for the operation and use of our website is processed. The legal basis for the processing is Article 6(1)(f) GDPR. By using hosting services, we pursue our legitimate interests in the efficient and secure provision of our website. Webflow processes data from users of its services, in particular IP address, referrer URL, exit URL, browser software, and operating system. Webflow may also process your data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Webflow is certified under this framework. You can view the certification at: https://www.dataprivacyframework.gov/list.
In addition, standard contractual clauses have been concluded with Webflow to commit Webflow to an adequate level of data protection. We will gladly provide you with a copy upon request.
You may object to the processing. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section.
10. Content Delivery Network
To ensure that you can access our online content quickly, we use a Content Delivery Network (hereinafter: “CDN”). When you visit our website, a library is loaded from our CDN and cached on your device to enable faster delivery of content and avoid reloading. In particular, your IP address, information from the respective server request, browser information, and other information from the section “Use of Our Website” are processed by the provider of the respective CDN. The legal basis for this processing is Article 6(1)(f) of the GDPR. By using a CDN, we pursue the legitimate interest of faster access as well as a more effective and improved presentation of our online offering. You may object to the processing. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section. We use the following service provider(s) as our CDN:
Cloudflare Germany GmbH
Cloudflare Germany GmbH (Rosental 7, 80331 Munich) and Cloudflare, Inc. (101 Townsend St., San Francisco, CA 94107, USA). This service provider processes some of your data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Cloudflare, Inc. is certified under this decision. In addition, standard contractual clauses have been concluded with Cloudflare, Inc. to ensure that Cloudflare, Inc. maintains an adequate level of data protection. You can view a copy of the Standard Contractual Clauses at https://www.cloudflare.com/de-de/cloudflare-customer-dpa/. For more information on data protection and retention periods, please visit: https://www.cloudflare.com/de-de/privacypolicy/.
11. Integration of Third-Party Content
11.1 Google Maps
This website uses the “Google Maps” service provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Maps”) for the purpose of displaying maps or map sections, thereby enabling you to conveniently use the map function on the website. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, some of the data mentioned in the section “Use of Our Website” is transmitted to Google. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish for this association with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and processes them—regardless of whether you have a Google user account—for the purposes of advertising, market research, and/or tailoring its website to user needs. With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the German Telemedia Act (TDDDG); for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the General Data Protection Regulation (GDPR). Google also processes your personal data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Google, LLC is certified under this decision. Additionally, standard contractual clauses have been concluded with Google, LLC to commit Google, LLC to an adequate level of data protection.
You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. Further information on the purpose and scope of processing by the plug-in provider and the storage period for Google Maps can be found at https://policies.google.com/privacy?hl=de.
You may revoke your consent to the processing at any time by sliding the toggle back in the “Settings” of the consent tool. The lawfulness of the processing remains unaffected until the revocation is exercised.
11.2 Google Tag Manager
We use “Google Tag Manager” from “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Tag Manager”) on our website. “Google Tag Manager” is a solution that allows website tags and other third-party elements to be managed via a single interface. When you visit the website, Google Tag Manager sends an HTTP request to “Google.” This transmits device information and personal data, such as your IP address and information about your browser settings, to Google. We use “Google Tag Manager” to facilitate electronic communication by transferring information to third-party providers via programming interfaces, among other means. The respective tracking codes of the third-party providers are implemented in “Google Tag Manager,” without requiring us to make extensive changes to the website’s source code ourselves. Instead, integration is achieved through a container that inserts a “placeholder” code into the source code. Additionally, “Google Tag Manager” allows user data parameters to be exchanged in a specific order, particularly by organizing and systematizing the data packets.
Your data is occasionally also transferred to the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Google is certified under this decision. Additionally, standard contractual clauses have been concluded with Google, LLC to commit Google, LLC to an adequate level of data protection. You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. The legal basis for data processing is Article 6(1)(f) GDPR. Our legitimate interests in the processing lie in facilitating and carrying out electronic communication by identifying communication endpoints, control options, exchanging data elements in a specified order, and identifying transmission errors. “Google Tag Manager” does not trigger any data storage. For more information on data protection at “Google,” please visit: http://www.google.de/intl/de/policies/privacy.
You may object to the processing provided it is based on Article 6(1)(f) of the GDPR. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section. You can prevent processing by deleting your browser history and website data in your browser settings or by opening the browser in “incognito mode.” Additionally, “Google Tag Manager” integrates third-party tags, such as tracking codes or tracking pixels, into our website. The tool triggers other tags that, in turn, collect your data; we provide separate information about this in this Privacy Policy. The “Google Tag Manager” itself does not evaluate the device information and personal data of users collected by the tags. Rather, your data is forwarded to the respective third-party service for the purposes specified in our consent management tool. We have configured “Google Tag Manager” to work with our consent management tool in such a way that the triggering of certain third-party services in “Google Tag Manager” depends on your selection in our consent management tool, so that only those third-party tags for which you have given consent trigger data processing.
The use of “Google Tag Manager” is covered by the consent for the respective third-party service. The legal basis for the processing is your consent pursuant to Article 6(1)(a) GDPR. Google also processes some of the data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Google is certified under this decision. Additionally, standard contractual clauses have been concluded with Google, LLC to commit Google, LLC to an adequate level of data protection. You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. The retention period for your data can be found in the following descriptions of the individual third-party services. Further information on data protection at Google can be found at: http://www.google.de/intl/de/policies/privacy.
You may revoke your consent to processing at any time by sliding the toggle at back in the “Settings” of the consent tool for the respective third-party provider. The lawfulness of the processing remains unaffected until the revocation is exercised.
11.3 Zoho Desk
For our customer support, we use the “Zoho Desk” service provided by Zoho Corporation (4141 Hacienda Drive, Pleasanton, California 94588, USA) and Zoho Corporation B.V. (Beneluxlaan 4B, 3527 HT Utrecht, Netherlands; hereinafter: Zoho Desk). We use Zoho Desk to organize our customer service inquiries, for example, when you contact us via beratung@velptec.de. By analyzing customer reviews, we measure customer satisfaction and compile statistics on accounts, contacts, and products. With Zoho Desk, we can sort incoming customer inquiries by urgency, priority, and customer type, thereby optimizing the quality of our customer service. The data processed by Zoho Desk and us in this context includes, in particular, your address, name, email address, the time and date of contact with customer service or the submission of a customer review, as well as all content you share with customer service or in a review. By processing this data, we measure customer satisfaction. We delete the data collected in this context once processing is no longer necessary, or, where applicable, restrict processing to comply with existing mandatory legal retention requirements. The legal basis for processing is Article 6(1)(f) of the GDPR. Our legitimate interests lie in optimizing our customer service. Zoho Desk also processes some of the data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. In addition, standard contractual clauses have been agreed upon with the provider Zoho to ensure that Zoho adheres to an appropriate level of data protection. You can request a copy of the standard contractual clauses via the following Zoho contact form: https://www.zoho.com/de/privacy.html or via legal@zohocorp.com. Further information on data protection and the retention period can be found at: https://www.zoho.com/de/privacy.html.
You may object to the processing. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section.
12. Services for Statistical, Analytical, and Marketing Purposes
We use third-party services for statistical, analytical, and marketing purposes. This enables us to provide you with a user-friendly, optimized website experience. The third-party providers use cookies, pixels, browser fingerprinting, or other tracking technologies to manage their services. Below, we provide information about the third-party services currently used on our website, the specific processing involved in each case, and your options for revoking consent.
12.1 Google Ads Conversion
We use the “Google Ads” service provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Ads”) to draw attention to our attractive offers on external websites using advertising materials (formerly known as “Google AdWords”). We can determine the success of individual advertising measures based on the data from the advertising campaigns. These advertisements are delivered by Google via “ad servers.” For this purpose, we use “ad server” cookies, which allow certain parameters for measuring reach—such as the display of ads or clicks by users—to be tracked. If you arrive at our website via a Google ad, Google Ads will store a cookie on your device. Using these cookies, Google processes the information generated by your device regarding interactions with our advertising materials (visiting a specific webpage or clicking on an ad), the data mentioned in the section “Use of Our Website”—in particular your IP address, browser information, the previously visited website, and the date and time of the server request, for the purpose of analyzing and visualizing the reach of our advertisements. For this purpose, it may also be determined whether different devices belong to you or your household. Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may obtain and process your IP address. We receive only statistical reports from Google to measure the effectiveness of our advertising materials. With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the German Telemedia Act (TDDDG); for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the General Data Protection Regulation (GDPR). Google also processes some of the data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Google is certified under this decision.
In addition, standard contractual clauses have been agreed with Google, LLC to ensure that Google, LLC adheres to an appropriate level of data protection. You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. The retention period for data stored by Google is a maximum of fourteen months. Further information on data protection and the retention period at Google can be found at: https://policies.google.com/privacy and https://business.safety.google/privacy/.
You may withdraw your consent to the processing at any time by sliding the slider back in the “Cookie Settings” of the consent tool. The lawfulness of the processing remains unaffected until the withdrawal is exercised.
12.2 Google Analytics 4
To tailor our website as effectively as possible to users’ interests, we use “Google Analytics,” a web analytics service provided by “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, and Google, LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google” and “Google Analytics 4”). Google Analytics 4 uses “cookies,” which are stored on your device for recognition purposes, as well as similar tracking methods for device recognition, such as web beacons, device fingerprinting, and programming interfaces (e.g., APIs and SDKs), to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device. Using these technologies, Google processes the information generated regarding your device’s use of our website, as well as access data, for the purpose of statistical analysis—e.g., visits to a specific webpage, number of unique visitors, entry and exit pages, duration of visit, click, swipe, and scroll behavior, button interactions, newsletter sign-ups, bounce rate, and similar user interactions. For this purpose, it may also be determined whether different devices belong to you or your household. Access data includes, in particular, the IP address, browser and device information, cookie ID/device ID, the previously visited website, and the date and time of the server request.
In Google Analytics 4 systems, individual IP addresses are not logged or stored. When Google captures the IP address in dedicated local data centers within the EU, your IP address is used to determine location information. The IP address is then deleted before the access data is stored in a data center or on a server for Google Analytics. Google Analytics 4 does not provide precise data on geographic location, but only general location information such as the region and city of the end device’s location, which is derived from the IP address. Google will process this information to evaluate your use of the website, compile reports on website activity for us, and—where we specifically indicate this—to provide us with additional services related to website usage. If you are registered with a Google service, Google may associate your website visit with your user account and create and analyze cross-application user profiles. In addition, a cross-platform analysis of user behavior on websites and apps that use Google Analytics 4 technologies takes place. This allows user behavior to be recorded, measured, and compared equally across different environments. For example, the user’s scroll events are automatically recorded to facilitate a better understanding of how websites and apps are used. Different cookie IDs/device IDs are used for various end devices. Subsequently, we are provided with anonymized statistics on the use of the various platforms, generated according to selected criteria.
Using Google Analytics 4, target groups are automatically created for specific cookie IDs/device IDs or mobile advertising IDs, which are later used for personalized advertising. Possible target group criteria include, for example: users who viewed products but did not add them to a shopping cart, or added items to a shopping cart but did not complete the purchase, OR users who purchased specific items. A target group comprises at least 100 users. Using the Google Ads tool, interest-based ads can then be displayed in search results. Similarly, users of websites can be recognized on other websites within the Google advertising network (in Google Search, on YouTube, in Google Ads, or on other websites) and presented with ads tailored to the defined audience criteria.
With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the TDDDG; for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the GDPR. Google also processes some of the data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Google, LLC is certified under this decision. In addition, standard contractual clauses have been agreed with Google, LLC to ensure that Google, LLC adheres to an appropriate level of data protection. You can obtain a copy of the standard contractual clauses at https://cloud.google.com/terms/sccs. Your data in connection with Google Analytics 4 will be deleted after 24 months at the latest. For more information on data protection at Google, please visit: http://www.google.de/intl/de/policies/privacy.
You may withdraw your consent to the processing at any time by sliding the toggle back to the “Off” position in the “Settings” of the consent tool. The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal.
12.3 Web Analytics Software Matomo
We use the web analytics software Matomo, an open-source tool for the statistical analysis of visitor traffic, to improve our website and make it more user-friendly. The provider is “Innocraft” (Innocraft Ltd., 150 Willis Street, 6011 Wellington, New Zealand, contact@innocraft.com ). “Matomo” is open-source software that enables statistical analysis on our website, particularly regarding visitor traffic, page views, downloads, previously visited websites, and the measurement of the success of search engine listings. The analyzed information and statistics are processed exclusively on our own web servers or databases. The “Matomo” tool collects, analyzes, and categorizes information generated by the user’s device regarding the use of our website and interactions with our website, as well as access data—including IP address, browser information, previously visited websites, and the date and time of the server request—using technologies such as fingerprinting, for the purpose of statistical analysis and measuring the reach of advertisements in search engines. With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the TDDDG; for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the GDPR. We use “Matomo” with an extension that truncates IP addresses during processing to make it more difficult to directly identify individuals. The retention period is 13 months. You may withdraw your consent to the processing at any time by sliding the toggle in the “Cookie Settings” of the consent tool for the respective third-party provider. The lawfulness of the processing remains unaffected until the withdrawal is exercised.
12.4 Call Tracking via matelso / searchperts
Our website uses a service provided by matelso GmbH, Stuttgart. This service is implemented by the performance marketing agency searchperts Deutschland GmbH, Düsseldorf (searchperts.de). When you call a phone number placed for us by matelso, information about the call is transmitted to a web analytics service we use (e.g., Google Analytics). Matelso also reads cookies set by our analytics service or other parameters of the website you visited, such as referrer, document path, and remote user agent. The corresponding information is processed by matelso in accordance with our instructions and stored on servers in the EU. For more information, please visit: https://matelso.com/de/privacy-statement. You can prevent the storage of cookies by adjusting your browser settings accordingly; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent.
You may revoke your consent to the processing at any time by sliding the slider in the “Cookie Settings” of the consent tool for the respective third-party provider. The lawfulness of the processing remains unaffected until the revocation is exercised.
12.5 Hotjar
We use Hotjar to better understand our users’ needs and to optimize the content and experience on this website. With the help of Hotjar’s technology, we gain a better understanding of our users’ experiences (e.g., how much time users spend on which pages, which links they click, what they like and dislike, etc.), and this helps us tailor our offerings based on user feedback. Hotjar uses cookies and other technologies to collect data about our users’ behavior and their devices, specifically the device’s IP address (which is collected and stored in anonymized form only while you are using the website), screen size, device type (Unique Device Identifiers), information about the browser used, location (country only), and the preferred language for displaying our website. Hotjar stores this information on our behalf in a pseudonymized user profile. Hotjar is contractually prohibited from selling the data collected on our behalf.
Further information can be found in the 'About Hotjar' section of Hotjar's help page. You can withdraw your consent to data processing at any time by moving the toggle switch in the 'Settings' of the consent tool for the respective third-party provider. The lawfulness of the processing remains unaffected until you exercise your right to withdraw consent.
12.6 Zoho CRM
For managing our customer contacts, we use the “Zoho CRM” service provided by Zoho Corporation (4141 Hacienda Drive, Pleasanton, California 94588, USA, and Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT Utrecht, Netherlands; hereinafter: Zoho CRM). The CRM system enables us to fully plan, manage, and execute all interactive processes with customers and allows us to conduct target-group-oriented marketing based on a customer database. The data processed by Zoho and us in this context includes, in particular, address, name, email address, profile data, contact history, communication data, data on interests, contract data, transaction data, sales data, as well as action and reaction data. The legal basis for the processing is Article 6(1)(f) GDPR or Article 6(1)(b) GDPR, if and to the extent that the processing serves the initiation and performance of a contract. In this case, our legitimate interests lie in the effective management of our contacts and the maintenance of our network. We delete the data collected in this context once processing is no longer necessary or, where applicable, restrict processing to comply with existing mandatory statutory retention obligations. Zoho also processes your data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. In addition, standard contractual clauses have been agreed with the provider Zoho to ensure that Zoho adheres to an appropriate level of data protection. You can request a copy of the standard contractual clauses via the following Zoho contact form: https://www.zoho.com/de/privacy.html or vialegal@zohocorp.com. For more information on data protection and retention periods, please visit: https://www.zoho.com/de/privacy.html.
You may object to the processing. Your right to object applies for reasons arising from your particular situation. You may submit your objection to us using the contact details provided in the “Data Controller” section.
12.7 Zoho Sales IQ
For our website, we use the “Zoho Sales IQ” service provided by Zoho Corporation (4141 Hacienda Drive, Pleasanton, California 94588, USA, and Zoho Corporation B.V., Beneluxlaan 4B, 3527 HT UTRECHT, Netherlands; hereinafter: Zoho Sales IQ). Zoho Sales IQ uses “cookies,” which are stored on your device for recognition purposes, as well as similar tracking methods to recognize devices in order to process information from your device. For this purpose, a randomly generated identification number (user ID) is assigned to your device. Using these technologies, Zoho Sales IQ processes the information generated about your device’s use of our website, as well as access data, for the purpose of statistical analysis—e.g., visits to a specific webpage, number of unique visitors, entry and exit pages, duration of visit, click, swipe, and scroll behavior, button interactions, logins, bounce rate, and similar user interactions. Access data includes, in particular, the IP address, browser and device information, user ID, the previously visited website, and the date and time of the server request. Zoho Sales IQ will process this information to evaluate your use of the website, compile reports on website activity for us, and—to the extent we specifically indicate—to provide us with additional services related to website usage. This allows us to use Zoho Sales IQ to determine whether our website offering is appealing to you as a website user, to recognize you as a user, and to optimize our marketing strategy. With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the TDDDG; for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the GDPR. Zoho also processes some of the data in the United States.
The European Commission has issued an adequacy decision regarding data transfers to the US. In addition, standard contractual clauses have been agreed with Zoho to ensure that Zoho maintains an adequate level of data protection.
You can request a copy of the standard contractual clauses via the following Zoho contact form: https://www.zoho.com/de/privacy.html, as well as via legal@zohocorp.com. Your data related to Zoho will be deleted after approximately 13 months at the latest. For more information on data protection and retention periods, please visit: https://www.zoho.com/de/privacy.html.
You may withdraw your consent to the processing of your data at any time by sliding the toggle switch back in the ‘Settings’ section of the consent tool for the relevant third-party provider. The lawfulness of the processing remains unaffected until such time as you withdraw your consent.
12.8 Meta Pixel / Conversion API
On our websites, we use the analytics features provided by “Meta” (provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, and Meta Platforms Inc., 1601 Willow Rd, Menlo Park, California, USA; hereinafter: “Meta”). For this purpose, we use the Meta Pixel and the Meta Conversions API to analyze the use of our websites and online presence, e.g., on social networks such as Meta and Instagram, the interactions users have on our websites and online presence, and the reach of our advertisements. The Meta Conversions API, an application programming interface, helps us transmit and evaluate marketing information and parameters regarding interactions between website visitors and our website directly to Meta’s servers. We use these insights to optimize our marketing and advertising campaigns and to create target audiences—particularly of Meta users—to whom we can display interest-based advertisements. With the help of Meta pixels—which are graphics embedded on our websites that load automatically when you visit our sites and enable tracking of user behavior—your browser automatically establishes a direct connection to Meta’s server. Through the integration of Meta pixels, Meta processes the information generated about your device’s use of our websites—e.g., that you have visited a specific webpage—and processes, among other things, the data listed in the section “Use of Our Websites,” specifically IP address, browser information, the Meta ID, device ID, language settings, date and time of the server request, as well as event data such as page and button clicks and other interactions—for the purpose of analyzing our websites and online presence, analyzing user interactions, and measuring the reach of our advertisements.
For these purposes, it may also be determined whether different devices belong to you or your household. The information obtained using the Meta Pixel serves us solely for statistical purposes, is transmitted to us by Meta anonymously as statistics, and does not provide any insight into the user’s identity. If you are registered with a Meta service, Meta may associate the collected information with your account or with you as a user. Even if a user is not registered with Meta or is not logged in, there is a possibility that Meta may obtain and process the IP address and other identifying characteristics.
With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the TDDDG; for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the GDPR. Meta also processes some of the data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Meta Platforms, Inc. is certified under this decision. In addition, standard data protection clauses have been concluded with Meta Platforms, Inc. to commit Meta Platforms, Inc. to an adequate level of data protection.
You can request a copy of the Standard Data Protection Clauses from Meta at https://www.facebook.com/help/contact/341705720996035. The retention period for the information stored in Meta cookies is one year. Further information on data protection and retention periods at Facebook can be found at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/.
You may withdraw your consent to the processing at any time by sliding the toggle back in the Consent Tool settings. The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal
12.9 LinkedIn Ads (Conversion)
We use the “LinkedIn Ads” features provided by LinkedIn Ireland Unlimited Company (LinkedIn Ireland Unlimited Company (Wilton Place, Dublin 2, Ireland; hereinafter: LinkedIn) on our website. In this context, we also use the “LinkedIn Insight Tag” feature, which implements a code snippet into the HTML code of our website. If you arrive at our website via a LinkedIn ad, the tag sets a cookie on your device or in your browser to measure the reach of our advertisements, enable the attribution of an ad’s success, and continuously improve our advertisements. Using these cookies, LinkedIn processes the information generated by your device regarding interactions with our advertisements (e.g., visiting a specific webpage or clicking on an ad) as well as, in part, the data mentioned in the section “Use of Our Website,” such as your IP address, device and browser information, referrer URL, and timestamps, for the purpose of analyzing the reach and measuring the success of our ads, whereby LinkedIn truncates the IP addresses. By using LinkedIn’s conversion tracking features, we can determine, in particular, to what extent the ads we have placed have influenced relevant actions on our website. For this purpose, your browser automatically establishes a direct connection to LinkedIn’s server. If you are logged into a LinkedIn service, LinkedIn may associate the collected information—in particular information about your visit to our website—with your user account. The direct identifiers of registered users processed in this context are removed by “LinkedIn” within seven days, and the remaining data is then deleted within 180 days. Even if you do not have a user account with LinkedIn or are not logged in, it is possible that LinkedIn may obtain and process, in particular, your IP address and other identifying characteristics.
As part of the analysis, “LinkedIn” does not share any personal data with us, but merely provides us with statistical analyses to measure the effectiveness of our advertising materials. This provides us with statistical insights into the success of our ads displayed on LinkedIn and whether they have led to relevant actions on our website. We also receive statistical analyses regarding which groups of people (e.g., those with a specific job title, company, or industry) have taken action. Based on this, we can refine our target groups and improve the targeting of our advertising materials. The legal basis for the storage of and access to information on your device is Section 25(1) of the TDDDG; the legal basis for further processing is Article 6(1)(a) of the GDPR. LinkedIn also processes the data in the United States. We have entered into standard contractual clauses with LinkedIn to ensure that LinkedIn maintains an adequate level of data protection. We will gladly provide you with a copy upon request. For more information on data protection and retention periods at LinkedIn, please visit https://www.linkedin.com/legal/privacy-policy.
You may withdraw your consent to the processing at any time by sliding the slider back in the “Advanced Settings” of the consent tool. The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal.
12.10 Analysis via Webflow Analyze
To tailor our website to users’ interests as effectively as possible, we use “Webflow Analyze,” a web analytics service provided by “Webflow” (Webflow, Inc., 398 11th St. Fl 2, San Francisco, California, 94103, USA). Webflow Analyze uses cookies, which are stored on your device for recognition purposes, as well as similar tracking methods for device recognition, such as web beacons, device fingerprinting, and programming interfaces (e.g., APIs and SDKs), to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device. Using these technologies, Webflow processes the information generated about your device’s use of our website, as well as access data, for the purpose of statistical analysis—e.g., visits to a specific webpage, number of unique visitors, entry and exit pages, duration of visit, click, swipe, and scroll behavior, button interactions, newsletter sign-ups, bounce rate, and similar user interactions. Access data includes, in particular, the IP address, browser and device information, cookie ID/device ID, the previously visited website, and the date and time of the server request.
With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the TDDDG; for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the GDPR. Webflow also processes your data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Webflow is certified under this framework. You can view the certification at: https://www.dataprivacyframework.gov/list. In addition, standard contractual clauses have been concluded with Webflow to commit Webflow to an adequate level of data protection. We will gladly provide you with a copy upon request. The data collected via Webflow Analyze is deleted after 12 months. The cookie retention period is also 12 months.
You may withdraw your consent to the processing at any time by sliding the slider back in the “Settings” [insert link] of the consent tool. The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal.
12.11 Testing Different Website Designs (A/B Testing) Using Webflow
To tailor our website to users’ interests as effectively as possible, we use “Webflow Analyze,” a web analytics service provided by “Webflow” (Webflow, Inc., 398 11th St. Fl 2, San Francisco, California, 94103, USA). Webflow Analyze uses cookies stored on your device for recognition purposes, as well as similar tracking methods for device recognition such as web beacons, device fingerprinting, and programming interfaces (e.g., APIs and SDKs) to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device. Your device is assigned to one of several user groups, each of which is served different versions of our website. This allows us to observe which designs lead to which user behaviors (e.g., visiting a specific webpage, number of unique visitors, entry and exit pages, time spent on the site, click, swipe, and scroll behavior, button interactions, newsletter sign-ups, bounce rate, and similar user interactions). Access data includes, in particular, the IP address, browser and device information, cookie ID/device ID, the previously visited website, and the date and time of the server request. With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the TDDDG; for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the GDPR. Webflow also processes your data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Webflow is certified under this framework. Additionally, standard contractual clauses have been concluded with Webflow to commit Webflow to an adequate level of data protection. We will gladly provide you with a copy upon request. The data collected via Webflow Analyze is deleted after 12 months. The cookie is also stored for 12 months. You may withdraw your consent to the processing at any time by sliding the toggle in the “Settings” [insert link] of the consent tool. The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal. To tailor our website optimally to user interests, we use “Webflow Analyze,” a web analytics service provided by “Webflow” (Webflow, Inc., 398 11th St. Fl 2, San Francisco, California, 94103, USA). Webflow Analyze uses cookies, which are stored on your device for recognition purposes, as well as similar tracking methods for device recognition such as web beacons, device fingerprinting, and programming interfaces (e.g., APIs and SDKs) to process information from your device. For this purpose, a randomly generated identification number (cookie ID/device ID) is assigned to your device. Using these technologies, Webflow processes the information generated about your device’s use of our website, as well as access data, for the purpose of statistical analysis—e.g., visits to a specific webpage, number of unique visitors, entry and exit pages, duration of visit, click, swipe, and scroll behavior, button interactions, newsletter sign-ups, bounce rate, and similar user interactions. Access data includes, in particular, the IP address, browser and device information, cookie ID/device ID, the previously visited website, and the date and time of the server request.
With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the TDDDG; for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the GDPR. Webflow also processes your data in the United States. The European Commission has issued an adequacy decision for data transfers to the United States. Webflow is certified under this framework. You can view the certification at: https://www.dataprivacyframework.gov/list. In addition, standard contractual clauses have been concluded with Webflow to commit Webflow to an adequate level of data protection. We will gladly provide you with a copy upon request. The data collected via Webflow Analyze is deleted after 12 months. The cookie is also stored for 12 months.
12.12 Server-Side Tag Management Using Stape.io
To efficiently manage and process our analytics and marketing tags in a privacy-friendly manner, we use “Stape,” a service for server-side tag management (Stape Europe OÜ, Narva mnt 5, 10117 Tallinn, Estonia). In this process, tracking data is not processed directly in the browser but via a server endpoint controlled by us and, if necessary, forwarded to third-party providers (e.g., Google, Meta). Stape provides the necessary infrastructure for this (e.g., Google Tag Manager Server Container). This server-side processing allows us to control data flows more precisely and to anonymize or filter personal information (such as IP addresses) before it is forwarded. Cookies (e.g., _gtmeec, _fbp) are used for this purpose and are stored on your device for recognition. The data processed includes, in particular, truncated IP addresses, device and browser information, and event data.
With regard to the storage of and access to information on your device, your consent serves as the legal basis pursuant to Section 25(1) of the German Telemedia Act (TDDDG); for further processing, your consent also serves as the legal basis pursuant to Article 6(1)(a) of the General Data Protection Regulation (GDPR). The data is processed on Stape’s servers within the European Union. We have entered into a data processing agreement with Stape. The cookies set via Stape are deleted at the end of the respective session.
You may withdraw your consent to the processing at any time by sliding the slider back in the settings of the consent tool. The withdrawal does not affect the lawfulness of the processing carried out on the basis of your consent prior to the withdrawal.