Data Privacy

Privacy Policy

We are pleased that you are visiting our website. The protection and security of your personal information while using our website are very important to us. We would like to inform you about which of your personal data we collect when you visit our website and for what purposes they are used.

This privacy policy applies to the digital offering of Smart Reporting GmbH, which is accessible under this domain as well as various subdomains ("our website").

Objection to Promotional Emails

The use of contact information published within the scope of the legal notice obligation, the privacy policy, and other contact details published on the website is hereby objected to for the purpose of sending unsolicited advertising and informational materials. The operators of the pages expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as through spam emails.

Who is responsible, and how can you reach us?

Responsible Party

for the Processing of Personal Data in accordance with the EU General Data Protection Regulation (GDPR):

Smart Reporting GmbH
Erika-Mann-Straße 69
80636 München

Data Protection Officer

Stephan Krischke, datenschutz@smart-reporting.com

What is this about?

This privacy policy fulfills the legal requirements for transparency in the processing of personal data. This includes all information related to an identified or identifiable natural person. This encompasses details such as your name, age, address, phone number, date of birth, email address, IP address, or user behavior when visiting a website. Information for which we cannot establish a reference to your person (or only with disproportionate effort), such as through anonymization, is not considered personal data. The processing of personal data (e.g., collection, querying, use, storage, or transmission) always requires a legal basis and a defined purpose.

Stored personal data is deleted as soon as the purpose of processing is achieved, and there are no lawful reasons for further data retention. We inform you about specific storage periods or criteria for storage in each processing operation. Regardless, we may store your personal data in individual cases for the assertion, exercise, or defense of legal claims and when legal retention obligations exist.

Who receives my data?

Transmission of your personal data to third parties for purposes other than those listed below does not take place.

We only disclose your personal data to third parties when:

You have given us your explicit consent pursuant to Art. 6 (1)(a) GDPR,
the disclosure is permissible for the protection of our legitimate interests under Art. 6 (1)(f) GDPR, and there is no reason to believe that you have an overriding legitimate interest in not disclosing your data,
there is a legal obligation for the disclosure under Art. 6 (1)(c) GDPR, or
it is legally permissible and necessary for the performance of contractual relationships with you under Art. 6 (1)(b) GDPR.

To protect your data and, if necessary, enable data transmission to third countries (outside the EU/EEA), we have concluded data processing agreements based on the standard contractual clauses of the European Commission. If the standard contractual clauses are not sufficient to ensure an adequate level of security, your consent pursuant to Art. 49 (1)(a) GDPR can serve as the legal basis for the transmission to third countries. This may not apply when transferring data to third countries for which the European Commission has issued an adequacy decision under Art. 45 GDPR.

As part of the processing operations described in this privacy policy, personal data may be transferred to the USA. The USA does not have an adequate level of data protection (ECJ: Schrems II ruling). In particular, US authorities can compel US companies to disclose personal data without affected individuals being able to effectively challenge this in court. As a result, there is a fundamental possibility that your personal data may be processed by US authorities. We have no influence over these processing activities. To protect your data, we have concluded data processing agreements based on the standard contractual clauses of the European Commission. If the standard contractual clauses are not sufficient to ensure an adequate level of security, your consent pursuant to Art. 49 (1)(a) GDPR can serve as the legal basis for the transmission to third countries. This may not apply when transferring data to third countries for which the European Commission has issued an adequacy decision under Art. 45 GDPR.

Do you use cookies?

Cookies are small text files that are sent by us to the browser of your device during your visit to our websites and stored there. Alternatively, information can also be stored in the local storage of your browser instead of using cookies. Some features of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). On the other hand, other cookies enable various analyses, allowing us, for example, to recognize the browser you are using when you revisit our website and transmit different information to us (non-essential cookies). Through the use of cookies, we can make our online offering more user-friendly and effective for you. This includes, for example, tracking your use of our website and determining your preferred settings (e.g., country and language settings). If third parties process information through cookies, they collect the information directly through your browser. Cookies do not harm your device, and they cannot execute programs or contain viruses.

Detailed information about the cookies we use for specific services is provided in the individual processing operations. You can find comprehensive information about the cookies used in the Cookie Settings or the Consent Manager of this website.

What rights do I have?

Under the conditions of the legal provisions of the General Data Protection Regulation (GDPR), you, as the data subject, have the following rights:

Right of Access (Art. 15 GDPR): You have the right to information about the data stored regarding you, in the form of meaningful details about the processing, and a copy of your data.
Right to Rectification (Art. 16 GDPR): You can request the correction of incorrect or incomplete data stored by us.
Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of data stored by us, provided that the processing is not necessary for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, or for the assertion, exercise, or defense of legal claims.
Right to Restriction of Processing (Art. 18 GDPR): You can request the restriction of processing, if the accuracy of the data is contested, the processing is unlawful, we no longer need the data, and you object to its deletion because you need it to assert, exercise, or defend legal claims, or you have objected to processing under Article 21 of the GDPR.
Right to Data Portability (Art. 20 GDPR): You have the right to data portability, if you have provided us with personal data based on consent according to Article 6 (1)(a) GDPR or on the basis of a contract according to Article 6 (1)(b) GDPR, and this data has been processed by us through automated means. You will receive your data in a structured, commonly used, and machine-readable format, or we will transmit the data directly to another controller, where technically feasible.
Right to Object (Art. 21 GDPR): You can object to the processing of your personal data, if the processing is based on Article 6 (1)(e, f) GDPR and there are reasons arising from your particular situation, or if the objection is against direct marketing. The right to object does not apply if compelling legitimate grounds for the processing can be demonstrated, which override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims. If the right to object does not exist for individual processing operations, this is indicated there.
Right to Withdraw Consent (Art. 7 (3) GDPR): You can withdraw your consent with effect for the future.
Right to Lodge a Complaint (Art. 77 GDPR): You have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR. Typically, you can contact the supervisory authority at your habitual residence, your place of work, or our company headquarters.

How are my data processed in detail?

Below, we provide you with information about the individual processing operations, the scope and purpose of data processing, the legal basis, the obligation to provide your data, and the respective storage duration. Automated decision-making in individual cases, including profiling, does not take place.

Website Provision

Nature and Scope of Processing

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called logfile:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access originates (referrer URL)
Used browser and, if applicable, the operating system of your computer, as well as the name of your access provider

Our website is not hosted by us but by a service provider who processes the aforementioned data on our behalf in accordance with Art. 28 GDPR.

Purpose and Legal Basis

The processing is carried out to safeguard our predominant legitimate interest in displaying our website and ensuring security and stability based on Art. 6 (1)(f) GDPR. The collection of data and storage in log files are essential for the operation of the website. There is no right to object to processing due to the exception under Art. 21 (1) GDPR. If further storage of the log files is legally required, processing is carried out based on Art. 6 (1)(c) GDPR. There is no legal or contractual obligation to provide the data; however, accessing our website without providing the data is not technically possible.

Storage Duration

The aforementioned data are stored for the duration of displaying the website and, for technical reasons, for a maximum of 7 days beyond that.

Contact Form

Nature and Scope of Processing

In the course of contacting us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of a contact form is apparent from the respective contact form. Additionally, you may voluntarily provide extra information that you deem necessary for processing the contact request.

When using the contact form, your personal data is not disclosed to third parties.

Purpose and Legal Basis

The processing of your data through the use of our contact form is for the purpose of communication and handling your inquiry, based on your consent according to Art. 6 (1)(a) GDPR. If your inquiry relates to an existing contractual relationship with us, the processing is carried out for the purpose of contract fulfillment based on Art. 6 (1)(b) GDPR. There is no legal or contractual obligation to provide your data, but processing your inquiry without providing information in the mandatory fields is not possible. If you choose not to provide this data, please contact us using alternative means.

Storage Duration

If you use the contact form based on your consent, we store the collected data from each inquiry for a period of three years, starting from the completion of your request or until the withdrawal of your consent.

If you use the contact form within the context of a contractual relationship, we store the collected data from each inquiry for a period of three years from the end of the contractual relationship.

Applicant Contact Form

Nature and Scope of Processing

We collect and process the personal data of applicants. The processing of such data can also take place electronically, for example, when applicants submit application documents by email or through a web form on our website. On our website, we offer the option to submit applications for advertised job positions to us via email.

Storage of your data in an applicant database beyond the current application process occurs only if you have given us separate consent for this.

Purpose and Legal Basis

The processing of your data in connection with your application is for the purpose of handling your application and deciding on the establishment of an employment relationship based on § 26 BDSG. In the event of the disclosure of your application documents to third parties, especially affiliated companies, and the storage of your data beyond the current application process, the processing of your data is based on Art. 6 (1)(1)(a) GDPR. There is no legal or contractual obligation to provide your data, but the processing of your application is not possible without the provision of information.

Storage Duration

Data of applicants will be deleted after 6 months in the event of rejection. In case you have agreed to further storage of your personal data, we will include your data in our applicant pool. The data will be deleted from the pool after 24 months.

Nature and Scope of Processing

On our website, you have the option to subscribe to our company's newsletter. The personal data transmitted to us when ordering the newsletter is determined by the input mask used for this purpose. We regularly inform our customers and business partners about our offers via a newsletter. You can only receive our company's newsletter if:

You have a valid email address, and
You have registered for newsletter delivery.

For the initial newsletter subscription, a confirmation email will be sent to the email address you provided, following the double opt-in procedure for legal reasons. This confirmation email verifies that you, as the owner of the email address, have authorized the receipt of the newsletter.

Upon newsletter registration, we also store the IP address assigned by your Internet service provider (ISP) at the time of registration, as well as the date and time of registration. Collecting this data is necessary to trace (potential) misuse of your email address at a later date and serves our legal protection.

The personal data collected during newsletter registration are used exclusively for sending our newsletter. Subscribers may also be informed by email if necessary for the operation of the newsletter service or related registration, such as in the case of changes to the newsletter offering or technical changes. Personal data collected during the newsletter service are not disclosed to third parties. You can unsubscribe from our newsletter at any time. The consent to store personal data that you provided for newsletter delivery can be revoked at any time. Each newsletter contains a corresponding link for revoking consent. Additionally, you can unsubscribe directly from the newsletter delivery on our website or inform us in other ways.

Purpose and Legal Basis

We process your data for the purpose of newsletter delivery based on your consent under Art. 6 (1)(a) GDPR. By unsubscribing from the newsletter, you can declare your revocation at any time, effective for the future, under Art. 7 (3) GDPR. There is no legal or contractual obligation to provide your data, but sending the newsletter is not possible without providing your data.

Storage Duration

We store the data you provided for newsletter subscription with us or the newsletter service provider until you unsubscribe from the newsletter. After unsubscribing, your data will be deleted from the newsletter distribution list. This does not affect data stored for other purposes.

Newsletter Tracking

Our newsletters contain so-called pixel tags. A pixel tag is a miniature graphic embedded in emails sent in HTML format to enable log file recording and analysis. This allows a statistical evaluation of the success or failure of online marketing campaigns. Based on the embedded pixel tag, the company can determine whether and when an email from you was opened and which links contained in the email were accessed by you.

Purpose and Legal Basis

We store and analyze personal data collected through pixel tags in newsletters to optimize newsletter delivery and better tailor the content of future newsletters to your interests. This personal data is not disclosed to third parties. Individuals are always entitled to revoke the separate consent given through the double opt-in procedure. After revocation, we will delete this personal data. We interpret an unsubscribe from the newsletter as an automatic revocation.

Such evaluation is carried out, especially under Art. 6 (1)(f) GDPR, based on our legitimate interests in displaying personalized advertising, market research, and/or designing our website to meet your needs.

Registration of a User Account

Nature and Scope of Processing

For the use of specific areas of our website, you have the option to register a user account. The information collected during registration through mandatory fields is necessary to provide access to the user account. Additionally, you may voluntarily provide additional information for supplementary (convenience) functions. The processing of your personal data for the registration of a user account is carried out exclusively in accordance with this privacy policy.

Purpose and Legal Basis

We process your data for the purpose of providing a user account to fulfill a contract with you under Art. 6 (1)(b) GDPR. There is a contractual obligation to provide your data, as this information is necessary for identifying you and fulfilling our contractual obligations. There is no legal obligation to provide the data. Without providing this information, the registration of a user account and thus the conclusion of a contract are not possible.

Furthermore, the processing of additionally voluntarily provided information is carried out for the purpose of providing further (convenience) functions based on your consent under Art. 6 (1)(a) GDPR. By deactivating the functions/deleting the voluntary information in the user account, you can declare your revocation under Art. 7 (3) GDPR at any time, effective for the future.

Storage Duration

We store your personal data in the context of providing the user account for the duration of the contractual relationship. After the end of the contract/deletion of the user account, further storage of your data only occurs if there are legal retention obligations (e.g., tax and commercial law).

Additional information provided based on your consent will only be stored until you revoke your consent by deactivating the functions/deleting the data, but no longer than until the end of the contract underlying the provision of the user account.

Presences on Social Media Platforms

We maintain so-called fan pages, accounts, or channels on the social media platforms listed below to provide you with information and offers within social networks. This enables you to contact us and learn about our offerings through additional channels. Below, we inform you about the data that we or the respective social media platform process when you access and use our fan pages/accounts.

Data We Process from You

If you wish to contact us via messenger or direct message through the respective social media platform, we typically process your username through which you contact us. We may also store additional information you provide if necessary for processing or responding to your inquiry.

The legal basis is Art. 6(1)(1)(f) GDPR (processing is necessary to fulfill the legitimate interests of the data controller).

(Static) Usage Data Received from Social Networks

We receive automatically provided statistics concerning our accounts through insights functionalities. The statistics include, among other things, the total number of page views, likes, information about page activities and post interactions, reach, video views, and information about the gender distribution among our fans/followers.

The statistics contain only aggregated data that cannot be attributed to individual persons. They are not identifiable to us in this context.

With the transmitted statistical information, we are unable to draw conclusions about individual users. We use this information solely to address the interests of our users, continually improve our online presence, and ensure its quality.

Data Processed by Social Networks from You

To view the content of our fan pages/accounts, you do not need to be a member of the respective social network, and no user account for the respective social network is required.

Please note that the social networks may collect and store data from website visitors without user accounts when accessing the respective social network (e.g., technical data to display the website) and use cookies and similar technologies, over which we have no influence. Details can be found in the privacy policies of the respective social network (see the corresponding links above).

If you want to interact with the content on our fan pages/accounts, such as commenting, sharing, or liking our posts, and/or if you want to contact us via messenger functions, prior registration with the respective social network and the provision of personal data are required.

We have no influence on the data processing by the social networks in the context of your use. To our knowledge, your data are stored and processed by the social networks, especially in connection with the provision of the services of the respective social network. Additionally, the analysis of usage behavior (using cookies, pixels/web beacons, and similar technologies) is carried out to display interest-based advertising both within and outside the respective social network. It cannot be ruled out that your data may be stored by the social networks outside the EU/EEA and shared with third parties.

Due to the fact that the actual data processing is carried out by the provider of the social network, our access to your data is limited. Only the provider of the social network is authorized to have complete access to your data. Therefore, asserting corresponding rights (request for information, deletion request, objection, etc.) is most effectively done directly with the respective provider.

Purpose and Legal Basis:

We collect your data via our profile solely to enable potential communication and interaction with us. This collection typically includes your name, message content, comment content, and the profile information you "publicly" provide.

The processing of your personal data for the mentioned purposes is based on our legitimate business and communicative interest in offering an information and communication channel, according to Art. 6(1)(f) GDPR. If, as a user, you have given consent to the data processing to the respective social network provider, the legal basis for processing extends to Art. 6(1)(a), Art. 7 GDPR.

Facebook Page:

When you visit our Facebook page, Facebook (Meta) captures your IP address and other information stored in the form of cookies on your PC. This information is used by Facebook to provide us, as the operator of the Facebook pages, with statistical information about the use of the Facebook page. For more details, Facebook provides information at the following link: https://facebook.com/help/pages/insights

We, together with Facebook, are responsible for the personal content of the fan page. Data subject rights can be asserted with Meta Platforms Ireland Ltd. and with us.

The primary responsibility for processing Insights data lies with Facebook according to the GDPR, and Facebook fulfills all obligations under the GDPR regarding the processing of Insights data. Meta Platforms Ireland Ltd. provides the essential parts of the Page Insights addendum to the data subjects.

We do not make decisions regarding the processing of Insights data and the storage duration of cookies on user devices.

For additional information, please refer directly to Facebook (Supplementary Agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum

Further information, including the exact scope and purposes of processing your personal data, storage duration/deletion, as well as guidelines on the use of cookies and similar technologies in the context of registration and use, can be found in Facebook's Privacy Policy/Cookie Policy: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0

https://www.facebook.com/policies/cookies

You can adjust your advertising settings independently in your user account. To do this, click on the following link and log in: https://www.facebook.com/settings?tab=ads

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381 .

YouTube Channel

When visiting our YouTube channel, Google collects, among other things, your IP address and additional information stored in the form of cookies on your PC. This information is used to provide us, as the operator of the YouTube channel, with statistical information about the use of the YouTube channel.

We are jointly responsible with Google for the personal content of the channel. Data subject rights can be asserted with Google Ireland Limited and with us.

We do not make decisions regarding the processing of personal data and the storage duration of cookies on user devices.

For further information, please refer directly to Google: https://cloud.google.com/terms/data-processing-addendum

More information, including the exact scope and purposes of the processing of your personal data, storage duration/deletion, and guidelines for the use of cookies and similar technologies in the context of registration and use, can be found in the privacy policy/cookie policy of Google: https://policies.google.com/privacy

The company is certified under the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards for data processing in the USA. Each company certified under the DPF commits to adhere to these data protection standards. Further information can be obtained from the provider via the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt000000001L5AAI&status=Active

Instagram Page

When you visit our Instagram page, Instagram (Meta) collects, among other things, your IP address and additional information stored in the form of cookies on your PC. This information is used to provide us, as the operator of the Instagram pages, with statistical information about the use of the Instagram page. Further information on this is available on Instagram's website via the following link (Note: by clicking on the link below, you will be directed to the website of the social network Facebook, also part of the Meta group. The information provided via the link applies equally to the social network Instagram): https://facebook.com/help/pages/insights

We are jointly responsible with Instagram for the personal content of the fan page. Data subject rights can be asserted with Meta Platforms Ireland Ltd. and with us.

The primary responsibility for the processing of Insights data lies in accordance with the GDPR with Instagram, and Instagram fulfills all obligations under the GDPR regarding the processing of Insights data. Meta Platforms Ireland Ltd. provides the essential parts of the Page Insights supplement to the affected individuals.

We do not make decisions regarding the processing of Insights data and the storage duration of cookies on user devices.

Further information can be found directly on Instagram (supplementary agreement with Facebook): https://www.facebook.com/legal/terms/page_controller_addendum

Additional information, including the exact scope and purposes of the processing of your personal data, storage duration/deletion, and guidelines for the use of cookies and similar technologies in the context of registration and use, can be found in the privacy policy/cookie policy of Instagram (Note: by clicking on the following link, you will be directed to the website of the social network Facebook): https://help.instagram.com/519522125107875/?helpref=uf_share

This information can also be viewed in the help section of the Instagram website via the following link:

https://help.instagram.com/581066165581870

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at: https://www.facebook.com/legal/EU_data_transfer_addendum and https://www.facebook.com/help/566994660333381 .

X Page

X (formerly Twitter) is a microblogging service provided by Twitter International Company, located at One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. X enables the creation of private profiles for natural persons (Personal Account) as well as professional profiles for natural persons and businesses (Professional Account). Through X, users can, among other things, compose short messages, engage with the content of other users, such as giving likes to posts, sharing posts, and responding when other users mention or tag them in content.

When using or visiting the network, including when visiting our X account, Twitter automatically collects data from users or visitors during use or visits, such as usernames and IP addresses. This is done using tracking technologies, particularly with the use of cookies. Twitter provides users with information, offers, and recommendations based on the data collected. This information is used to provide us, as operators of our Twitter page, with statistical information about the usage of the X page. For more information, refer to Twitter's privacy policy: https://twitter.com/privacy#twitter-privacy-1

We are jointly responsible with Twitter for the personal content on the fan page. Data subject rights can be asserted with Twitter Inc. as well as with us.

According to the GDPR, Twitter has the primary responsibility for the processing of Insights data and fulfills all obligations under the GDPR regarding the processing of Insights data. Twitter provides the essential elements of the Page Insights supplement to the data subjects.

We do not make decisions regarding the processing of Insights data and the storage duration of cookies on user devices.

For more information on the precise scope and purposes of processing your personal data, storage duration/deletion, as well as guidelines on the use of cookies and similar technologies in the context of registration and use, refer to Twitter's privacy policy/cookie policy:

Cookie Policy: https://help.twitter.com/rules-and-policies/twitter-cookies

You can adjust your X privacy settings independently in your user account. To do so, click on the following link and log in: https://twitter.com/personalization

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html

LinkedIn Page

LinkedIn is a social network operated by LinkedIn Inc., headquartered in Sunnyvale, California, USA. It enables the creation of private and professional profiles for individuals as well as company profiles. Users can maintain existing contacts and establish new ones within the social network. Companies and other organizations can create profiles where they upload photos and other company information to present themselves as employers and hire employees. Other LinkedIn users have access to this information and can write their own articles, sharing content with others. The network focuses on professional exchanges on topics of expertise with people who share similar professional interests.

When using or visiting the network, LinkedIn automatically collects data from users or visitors, including usernames, job titles, and IP addresses. This is done using various tracking technologies. LinkedIn provides information, proposals, and recommendations, based on the data collected.

We, together with LinkedIn, are responsible for the personal content on our company profile. Data subject rights can be asserted with LinkedIn Inc. as well as with us.

We do not make decisions regarding the data collected on the LinkedIn page through tracking technologies.

If you wish to disable LinkedIn ad cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

For more information about LinkedIn, visit: https://about.linkedin.com

For more information on privacy at LinkedIn, visit: https://www.linkedin.com/legal/privacy-policy

For more information on storage duration/deletion, as well as guidelines on the use of cookies and similar technologies in the context of registration and use on LinkedIn, visit: https://de.linkedin.com/legal/cookie-policy?trk=homepage-basic_footer-cookie-policy

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found at: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs

Technology

SSL/TLS Encryption

This site uses SSL/TLS encryption to ensure the security of data processing and protect the transmission of confidential content, such as orders, login information, or contact inquiries that you send to us as the operator. You can recognize an encrypted connection by the "https://" in the browser's address bar and the padlock symbol in your browser address bar. When SSL/TLS encryption is activated, the data you transmit to us cannot be read by third parties.

Google APIs

Nature and Scope of Processing

We use Google APIs from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, to access additional services and data from Google Ireland Limited. This involves the transfer of your IP address to Google Ireland Limited. Please note that a separate section in this privacy policy exists for each additional service from Google Ireland Limited we use.

Purpose and Legal Basis

The use of Google APIs is based on our legitimate interests, i.e., the interest in optimizing our online offering according to Art. 6 (1)(f) GDPR.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Google Ireland Limited. For further information, please refer to the privacy policy for Google APIs: https://policies.google.com/privacy

Google Analytics

Nature and Scope of Processing

We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as an analytics service for the statistical evaluation of our online offering. This includes, for example, the number of visits to our online offering, visited subpages, and the duration of visitors' stays.

Google Analytics uses cookies and other browser technologies to analyze user behavior and recognize users.

This information is used, among other things, to compile reports on the activity of the website.

Purpose and Legal Basis

The use of Google Analytics is based on your consent in accordance with Art. 6(1)(a) GDPR and § 25(1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, especially the USA. The data transfer to the USA is carried out in accordance with Art. 45(1) GDPR based on the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where there is no adequacy decision by the European Commission (including US companies not certified under EU-U.S. DPF), we have agreed on other suitable guarantees with the recipients of the data within the meaning of Art. 44 et seq. GDPR. These are - unless otherwise stated - standard contractual clauses of the EU Commission in accordance with Implementing Decision (EU) 2021/914 of June 4, 2021. A copy of these standard contractual clauses can be viewed at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=EN

In addition, we obtain your consent, which you grant in the consent manager (or other forms, registrations, etc.), in accordance with Art. 49 (1)(1)(a) GDPR before such a transfer to a third country. We would like to point out that there may be unknown risks in detail for third-country transfers (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence, and of which you may not become aware).

Storage Duration

Google CDN

Nature and Scope of Processing

We use Google CDN to ensure the proper provision of content on our website. Google CDN is a service provided by Google Ireland Limited, acting as a Content Delivery Network (CDN) on our website.

A CDN helps to deliver content of our online offering, especially files such as graphics or scripts, more quickly using servers distributed regionally or internationally. When you access this content, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, where your IP address and, if applicable, browser data such as your user agent may be transmitted. These data are processed solely for the purposes mentioned above and to maintain the security and functionality of Google CDN.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e., an interest in a secure and efficient provision as well as the optimization of our online offering pursuant to Art. 6 (1)(f) GDPR.

We intend to transfer personal data to third countries outside the European Economic Area, especially the USA. The data transfer to the USA takes place based on Art. 45 (1) GDPR on the basis of the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where there is no adequacy decision of the European Commission (including US companies not certified under the EU-U.S. DPF), we have agreed on other suitable guarantees with the recipients of the data in accordance with Art. 44 et seq. GDPR. These are - unless otherwise stated - standard contractual clauses of the European Commission according to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=EN

In addition, we obtain your consent, which you grant in the consent manager (or other forms, registrations, etc.), in accordance with Art. 49 (1)(1)(a) GDPR before such a transfer to a third country. We would like to point out that there may be unknown risks in detail with regard to transfers to third countries (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence, and which you may not become aware of under certain circumstances).

Storage Duration

The specific storage duration of the processed data is not influenced by us but determined by Google Ireland Limited. Further information can be found in the privacy policy for Google CDN: https://policies.google.com/privacy

Google DoubleClick

Nature and Scope of Processing

We have integrated components of Google DoubleClick on our website. DoubleClick is a brand of Google, predominantly marketing special online marketing solutions to advertising agencies and publishers. DoubleClick by Google transfers data to the DoubleClick server with each impression as well as clicks or other activities.

Each of these data transfers triggers a cookie request to the browser of the affected person. If the browser accepts this request, DoubleClick sets a cookie in your browser.

DoubleClick uses a cookie ID that is necessary for the processing of the technical procedure. The cookie ID is, for example, required to display an advertisement in a browser. DoubleClick can also use the cookie ID to determine which advertisements have already been displayed in a browser to avoid double postings. Furthermore, DoubleClick can capture conversions through the cookie ID. Conversions are recorded, for example, when a user has previously been shown a DoubleClick advertisement and subsequently makes a purchase on the advertiser's website with the same Internet browser.

A DoubleClick cookie does not contain personal data but may contain additional campaign identifiers. A campaign identifier serves to identify the campaigns with which you have already been in contact on other websites. In the context of this service, Google acquires information about data that Google also utilizes for commission billing.

Google can track, among other things, that you have clicked on certain links on our website. In this case, your data are transmitted to the operator of DoubleClick, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information and the applicable privacy policies of DoubleClick by Google can be found at https://policies.google.com/privacy

Purpose and Legal Basis

We process your data with the help of the DoubleClick cookie for the purpose of optimizing and displaying advertisements based on your consent according to Art. 6 (1)(a) GDPR and § 25 (1) TTDSG. The cookie is used, among other things, to display and show user-relevant advertising and to create or improve reports on advertising campaigns. Furthermore, the cookie is used to avoid multiple displays of the same advertisement. With each call of one of the individual pages of our website on which a DoubleClick component has been integrated, your browser is automatically prompted by the respective DoubleClick component to transmit data for the purpose of online advertising and commission settlement to Google. There is no legal or contractual obligation to provide your data. If you do not give us your consent, a visit to our website is possible without restriction, but not all functions may be fully available.

In addition, we obtain your consent, which you grant in the consent manager (or other forms, registrations, etc.), in accordance with Art. 49 (1)(1)(a) GDPR before such a transfer to a third country. We would like to point out that there may be unknown risks in detail with regard to transfers to third countries (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence, and which you may not become aware of under certain circumstances).

Storage Duration

Google Fonts

Nature and Scope of Processing

We use Google Fonts from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, as a service for providing fonts for our online offering. To obtain these fonts, your device connects to servers of Google Ireland Limited, and your IP address is transmitted.

Purpose and Legal Basis

The use of Google Fonts is based on your consent in accordance with Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, especially the USA. The data transfer to the USA is carried out in accordance with Art. 45 (1) GDPR based on the adequacy decision of the European Commission. The involved US companies and/or their US subprocessors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where there is no adequacy decision of the European Commission (including US companies not certified under EU-U.S. DPF), we have agreed on other suitable guarantees with the recipients of the data, in accordance with Art. 44 et seq. GDPR. These are, unless otherwise specified, standard contractual clauses of the EU Commission according to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=EN

In addition, we obtain your consent, which you grant in the consent manager (or other forms, registrations, etc.), in accordance with Art. 49 (1)(1)(a) GDPR before such a transfer to a third country. We would like to inform you that with regard to data transfers to third countries, unknown risks may exist in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence, and of which you may not gain knowledge under certain circumstances).

Storage Duration

The specific storage duration of processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Fonts: https://policies.google.com/privacy

Google Tag Manager

Nature and Scope of Processing

We use Google Tag Manager from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Tag Manager is used to manage website tags through an interface and allows us to control the precise integration of services on our website.

This enables us to flexibly integrate additional services to evaluate user access to our website.

Purpose and Legal Basis

The use of Google Tag Manager is based on your consent according to Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

We intend to transfer personal data to third countries outside the European Economic Area, especially the USA. The data transfer to the USA is carried out according to Art. 45 (1) GDPR based on the adequacy decision of the European Commission. The involved US companies and/or their US subcontractors are certified under the EU-U.S. Data Privacy Framework (EU-U.S. DPF).

In cases where there is no adequacy decision of the European Commission (including US companies not certified under EU-U.S. DPF), we have agreed on other appropriate guarantees with the data recipients in accordance with Art. 44 et seq. GDPR. These are - unless otherwise stated - standard contractual clauses of the European Commission according to Implementing Decision (EU) 2021/914 of June 4, 2021. You can view a copy of these standard contractual clauses at https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914&from=EN

In addition, we obtain your consent, which you grant in the consent manager (or other forms, registrations, etc.), in accordance with Art. 49 (1)(1)(a) GDPR before such a transfer to a third country. We would like to inform you that with regard to data transfers to third countries, unknown risks may exist in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence, and of which you may not gain knowledge under certain circumstances).

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Tag Manager: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/

Google reCAPTCHA

Nature and Scope of Processing

We have integrated components of Google reCAPTCHA on our website. Google reCAPTCHA is a service provided by Google Ireland Limited and allows us to distinguish whether a contact request originates from a natural person or is automated through a program. When you access these contents, you establish a connection to servers of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, wherein your IP address and possibly browser data such as your user-agent are transmitted. Furthermore, Google reCAPTCHA records the user's duration of stay and mouse movements to differentiate automated requests from human ones. These data are processed exclusively for the purposes mentioned above and for maintaining the security and functionality of Google reCAPTCHA.

Purpose and Legal Basis

The use of Google reCAPTCHA is based on your consent according to Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

Furthermore, we obtain your consent, which you grant in the consent manager (or other forms, registrations, etc.), in accordance with Art. 49 (1)(1)(a) GDPR before such a transfer to a third country. We would like to inform you that with regard to data transfers to third countries, unknown risks may exist in detail (e.g., data processing by security authorities of the third country, the exact scope of which and its consequences for you we do not know, over which we have no influence, and of which you may not gain knowledge under certain circumstances).

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by Google Ireland Limited.

Further information can be found in the privacy policy for Google reCAPTCHA: https://policies.google.com/privacy?hl=en-US

HubSpot Analytics

Nature and Scope of Processing

We use HubSpot Analytics from HubSpot, Inc., Cambridge, Massachusetts, US, as an analytics service for the statistical evaluation of our online offerings. This includes, for example, the number of views of our online content, visited subpages, and the duration of visitors' stays.

HubSpot Analytics utilizes cookies and other browser technologies to analyze user behavior and recognize users.

This information is used, among other things, to compile reports on website activity.

Purpose and Legal Basis

The use of HubSpot Analytics is based on your consent according to Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by HubSpot, Inc. Further information can be found in the privacy policy for HubSpot Analytics: https://legal.hubspot.com/privacy-policy

HubSpot CDN

Nature and Scope of Processing

We use HubSpot CDN to ensure the proper delivery of content on our website. HubSpot CDN is a service provided by HubSpot, Inc., serving as a Content Delivery Network (CDN) on our website to ensure the functionality of other services provided by HubSpot, Inc. For these specific services, you will find a separate section in this privacy policy. This section solely pertains to the use of the CDN.

A CDN contributes to the faster delivery of content on our online offerings, particularly files such as graphics or scripts, by utilizing servers distributed regionally or internationally. When you access this content, you establish a connection to servers of HubSpot, Inc., Cambridge, Massachusetts, US, wherein your IP address and possibly browser data such as your user-agent are transmitted. These data are processed exclusively for the purposes mentioned above and for maintaining the security and functionality of HubSpot CDN.

Purpose and Legal Basis

The use of the Content Delivery Network is based on our legitimate interests, i.e., an interest in the secure and efficient provision as well as the optimization of our online offerings according to Art. 6 (1)(f) GDPR.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by HubSpot, Inc. Further information can be found in the privacy policy for HubSpot CDN: https://legal.hubspot.com/privacy-policy

HubSpot Cookie Banner

Nature and Scope of Processing

We have integrated the HubSpot Cookie Banner on our website. HubSpot Cookie Banner is a consent solution provided by HubSpot, Inc., Cambridge, Massachusetts, US, which allows consent for the storage of cookies to be obtained and documented. HubSpot Cookie Banner uses cookies or other web technologies to recognize users and store the granted or revoked consent.

Purpose and Legal Basis

The use of the service is based on obtaining the legally required consent for the use of cookies according to Art. 6 (1)(c) GDPR.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by HubSpot, Inc. Further information can be found in the privacy policy for HubSpot Cookie Banner: https://legal.hubspot.com/privacy-policy

HubSpot Forms

Nature and Scope of Processing

We have integrated HubSpot Forms on our website. HubSpot Forms is a service provided by HubSpot, Inc. offering marketing automation software for marketing services and products, including SEO and content creation, lead management, email marketing, and web analytics.

HubSpot Forms are utilized to store data entered in forms, for example, during contact submissions through contact forms. The information provided can be stored in our Customer Relationship Management System (CRM System).

In this case, your data is shared with the operator of HubSpot Forms, HubSpot, Inc., based in Cambridge, Massachusetts, US.

Purpose and Legal Basis

We process your data using HubSpot Forms for the purpose of handling and processing contact inquiries according to Art. 6 (1)(b) GDPR.

The use of HubSpot Forms and the integrated services is subject to our legitimate interest under Art. 6 (1)(f) GDPR, which includes optimizing our marketing activities and improving the quality of our services on the website.

Storage Duration

The specific storage duration of the processed data is not within our control but is determined by HubSpot, Inc. Further information can be found in the privacy policy for HubSpot Forms: https://legal.hubspot.com/privacy-policy

YouTube Video

Nature and Scope of Processing

We have integrated YouTube Video on our website. YouTube Video is a component of the video platform provided by YouTube, LLC, where users can upload content, share it over the internet, and receive detailed statistics.

YouTube Video enables us to integrate content from the Youtube platform into our website.

YouTube Video uses cookies and other browser technologies to analyze user behavior, recognize users, and create user profiles. This information is used, among other things, to analyze the activity of the viewed content and generate reports. If a user is registered with YouTube, LLC, YouTube Video can associate the played videos with the user's profile.

When you access this content, you establish a connection to servers of YouTube, LLC, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, wherein your IP address and possibly browser data such as your user-agent are transmitted.

Purpose and Legal Basis

The use of the service is based on your consent according to Art. 6 (1)(a) GDPR and § 25 (1) TTDSG.

Storage Duration

The specific storage duration of the processed data is not influenced by us but is determined by YouTube, LLC. Further information can be found in the privacy policy for YouTube Video: https://policies.google.com/privacy

November 2023

Radiology

Pathology

Downloads

Data Privacy Notice

Information for conducting interviews

Data Protection

Privacy Policy

Objection to Promotional Emails

Who is responsible, and how can you reach us?

Responsible Party

Data Protection Officer

What is this about?

Who receives my data?

Do you use cookies?

What rights do I have?

How are my data processed in detail?

Website Provision

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Contact Form

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Applicant Contact Form

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Newsletter

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Newsletter Tracking

Purpose and Legal Basis

Registration of a User Account

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Presences on Social Media Platforms

Data We Process from You

(Static) Usage Data Received from Social Networks

Data Processed by Social Networks from You

Purpose and Legal Basis:

Facebook Page:

YouTube Channel

Instagram Page

X Page

LinkedIn Page

Technology

Google APIs

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Google Analytics

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Google CDN

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Google DoubleClick

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Google Fonts

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Google Tag Manager

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

Google reCAPTCHA

Nature and Scope of Processing

Purpose and Legal Basis

Storage Duration

HubSpot Analytics

Nature and Scope of Processing