Privacy Policy

1. Data controller and content of this Privacy Policy 

We, IVF HARTMANN AG, Victor von Bruns-Strasse 28, 8212 Neuhausen am Rheinfall, Switzerland, are the operator of this website (hereinafter "website") and – unless otherwise stated – are responsible for the data processing specified in this Privacy Policy.

Please take note of the following information so that you know what personal data we collect from you and for what purposes we use it. When it comes to data protection, we are primarily guided by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (FADP), as well as the European Union General Data Protection Regulation (EU GDPR), the provisions of which may apply in individual cases.

Please note that the following information is reviewed and amended from time to time. We therefore recommend that you consult this Privacy Policy regularly. Furthermore, other companies are responsible or jointly responsible with us under data protection law for individual data processing operations listed below, so that in these cases the information provided by these providers is also authoritative.

2. Contact person for data protection

If you have any questions about data protection or would like to exercise your rights, please contact our contact person for data protection, datenschutz@hartmann.info

IVF HARTMANN AG
Data Protection Officer
Herr Kristian Zsolt Takacs
Victor-von-Bruns Strasse 12
8212 Neuhausen
Switzerland

3. Logfile data

When you visit our website, the servers of our hosting provider MTF Solutions AG, Freier Platz 10, CH 8200 Schaffhausen temporarily store every access in a logfile. The following data is recorded without any action on your part and stored by us until it is automatically deleted:

• IP address of the requesting computer,
• Date and time of access,
• Name and URL of the retrieved file,
• Website from which the access was made, if applicable with the search term used,
• Operating system of your computer and the browser you are using (including type, version and language setting),
• Device type in the event of access by mobile phones,
• City or region from which the access was made,
• Name of your Internet access provider.

This data is collected and processed for the purpose of enabling the use of our website (establishing a connection), ensuring system security and stability in the long term, analysing errors and performance and enabling us to optimise our website (see also section 8 for the last points).

In the event of an attack on the network infrastructure of the website or in the event of suspicion of other unauthorised or improper use of the website, the IP address and other data will be evaluated for clarification and defence purposes and, if necessary, used in the context of criminal proceedings for identification and for civil and criminal proceedings against the users concerned.

The purposes described above constitute our legitimate interest in data processing within the meaning of Article 6(1)(f) EU GDPR.

Finally, when you visit our website, we use cookies as well as applications and tools that are based on the use of cookies. The data described here may also be processed in this context. You can find more detailed information on this in the following sections of this Privacy Policy, in particular section 7, as well as in our 

4. Contacting us (by email or telephone)

If you contact us via our contact addresses and channels (e.g. by email or telephone), your personal data will be processed. The data that you have made available to us will be processed, e.g. the name of your company, your name, your function, your email address or telephone number and your enquiry. In addition, the time of receipt of the enquiry is documented.

We process this data exclusively in order to fulfil your request (e.g. providing information about a service or product, assisting with contract processing, incorporating your feedback into the improvement of our services, etc.). The legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) EU GDPR in the implementation of your request or – if your request is aimed at the conclusion or execution of a contract – the necessity for the implementation of the necessary measures within the meaning of Article 6(1)(b) EU GDPR.

5. During the application

If you apply for a specific job vacancy via our website, your personal data will be processed. The following data will be collected. Mandatory information is marked with an asterisk (*) in the application form:

• Email address*
• Password*
• First name*, surname*
• Country*
• Street & house number
• Town/City, postcode
• Telephone*
• Notes
• Desired entry date*
• Desired salary
• Notice period CV, cover letter, other documents (optional)

We use the data you provide to review your application. Application documents of unsuccessful applicants will be deleted at the end of the application process, unless you explicitly consent to a longer retention period or we are legally obliged to retain them for a longer period.

To submit your application online, it is necessary for you to open a user account for our applicant portal. The following data will be collected. Mandatory information is marked with an asterisk (*) in the application form:

• Email address*
• Password*
• First name*
• Surname*
• Country/region of residence*
• My application profile will be considered*
• Notification

The data you provide will be processed for the purpose of submitting the application documents to us.

The legal basis for processing your data for this purpose is therefore the fulfilment of a contract (pre-contractual phase) in accordance with Article 6(1)(b) EU GDPR.

To process your application, we use SAP SuccessFactors from SAP SE – Walldorf, Dietmar-Hopp-Allee 16, 69190 Walldorf, Germany. The legal basis for this processing is our legitimate interest within the meaning of Article 6(1)(f) GDPR in using the services of third-party providers.

6. Use of your data for marketing purposes

6.1. Centralised data storage and analysis in the CRM system

If a clear assignment to your person is possible, we will store and link the data described in this Privacy Policy. This includes, in particular, your personal details, your contacts, your contract data and your surfing behaviour on our websites, in a central database. This serves the efficient management of customer data and allows us to respond to your requests appropriately and enables the efficient provision of the services you require and the processing of the associated contracts. For this purpose, we use tools from Pharmakon Software GmbH, Augartenstrasse 1, DE 76137 Karlsruhe and Agillic A/S, Masnedøgade 22, 2100 København. The legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) EU GDPR in the efficient management of user data.

We analyse this data in order to further develop our offers in line with your needs and to display and suggest the most relevant information and offers to you. We also use methods that predict possible interests and future orders based on your use of the website. The legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) GDPR in the implementation of marketing measures.

6.2. Email marketing and newsletter

If you register for our email newsletter, the following data will be collected. Mandatory information is marked with an asterisk (*) in the application form:

• Title*
• First name*
• Surname*
• Company*
• Email address*
• Preferences
• I hereby accept the Privacy Policy of IVF HARTMANN AG and agree to receive the newsletter selected above by email*

To avoid misuse and to ensure that the owner of an email address has actually given his/her consent, we use the opt-in procedure for registration.

By registering, you consent to the processing of this data in order to receive news from us about our company, our offers and related products and services. Indicating your title and name will allow us to personalise the content of the emails.

We will continue to use your data to send you emails until you withdraw your consent (opt-out). Revocation is possible at any time, in particular via the unsubscribe link in all our marketing emails.

Our marketing emails may contain a so-called web beacon or 1x1 pixel (tracking pixel) or similar technical aids. A web beacon is an invisible graphic that is linked to the user ID of the respective newsletter subscriber. For each marketing email sent, we receive information about which addresses have not yet received the email, which addresses it was sent to and which addresses failed to receive it. We also see which addresses have opened the email, for how long and which links they have clicked on. Finally, we also receive information about which addresses have unsubscribed. We use this data for statistical purposes and to optimise the advertising emails in terms of frequency, timing, structure and content of the emails. This enables us to better tailor the information and offers in our emails to the individual interests of the recipients.

The web beacon is deleted when you delete the email. To prevent the use of the web beacon in our marketing emails, please set the parameters of your email programme so that HTML is not displayed in messages, if this is not already the case by default. You can find information on how to configure this setting in the help sections of your email software, e.g. 

By subscribing to the newsletter, you also consent to the statistical analysis of user behaviour for the purpose of optimising and adapting the newsletter. This consent constitutes our legal basis for the processing of data within the meaning of Article 6(1)(a) EU GDPR.

We use the email marketing software Agillic A/S, Masnedøgade 22, 2100 København for marketing emails. Therefore, your data is stored in a database, which allows Agillic A/S, Masnedøgade 22, 2100 København to access your data if this is necessary for the provision of the software and for support in the use of the software. The legal basis for this processing is our legitimate interest within the meaning of Article 6(1)(f) GDPR in using the services of third-party providers.

7. Cookies

Cookies are information files that your web browser stores on your computer's hard drive or memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read.

Cookies help, among other things, to make your visit to our website easier, more pleasant and more meaningful. We use cookies for various purposes that are required for your desired use of the website – in other words cookies that are "necessary from a technical point of view". For example, we use cookies to identify you as a registered user after you have logged in without you having to log in again each time you navigate through the various subpages. Cookies also perform other technical functions necessary for the operation of the website, such as load balancing – in other words, the distribution of the performance load of the site to different web servers in order to reduce the load on the servers. Finally, we also use cookies as part of the design and programming of our website, e.g. to enable the uploading of scripts or codes.

The legal basis for this data processing is our legitimate interest within the meaning of Article 6(1)(f) EU GDPR in the provision of a user-friendly and up-to-date website.

Most Internet browsers accept cookies automatically. However, when you access our website, we ask for your consent to the cookies we use that are not technically necessary, especially when using cookies from third-party providers. Details on the services and data processing associated with the individual cookies (in particular, how you can prevent cookies from being set automatically) can be found within the cookie banner, in the following sections of this Privacy Policy and in our 

8. Tracking and advertising analysis tools

8.1. General information on tracking

We use the web analysis services listed below for the purpose of designing and continuously optimising our website in line with requirements. In this context, pseudonymised user profiles are created and cookies are used (please also refer to Section 7). The information generated by the cookie about your use of this website is usually transferred to a server of the service provider together with the log file data listed under Section 3, where it is stored and processed. This may also involve a transfer to servers abroad, e.g. the USA (see Section 12, in particular on the guarantees taken).

By processing the data, we obtain the following information, among other things:

• Navigation path followed by a visitor on the site (including content viewed and services selected or purchased),
• Time spent on the website or subpage,
• Subpage on which the website is left,
• Country, region or city from which access is made,
• End device (type, version, colour depth, resolution, width and height of the browser window) and
• Returning or new visitor.

The provider will use this information on our behalf to analyse the use of the website, to compile reports on website activity for us and to provide other services relating to website activity and Internet usage for the purposes of market research and the needs-based design of these web pages. For these processing operations, we and the providers can be regarded as joint controllers under data protection law up to a certain extent.

The legal basis for this data processing with the following tools is your consent within the meaning of Article 6(1)(a) EU GDPR, unless otherwise stated. You can revoke your consent or refuse processing at any time by rejecting or switching off the relevant cookies in the settings of your web browser (see Section 7) or by making use of the service-specific options described below.

For the further processing of the data by the respective provider as the (sole) controller under data protection law, in particular any disclosure of this information to third parties such as authorities due to national legal regulations, please refer to the respective data protection information of the provider.

8.2. Google Analytics

We use the web analysis service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google").

The described data about the use of the website may be transmitted to the servers of Google LLC. in the USA for the explained processing purposes (see Section 8.1). The IP address is shortened by activating IP anonymisation ("anonymizeIP") on this website before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there.

Users can prevent Google from collecting the data generated by the cookie and relating to the use of the website by the user concerned (including the IP address) and from processing this data by Google by downloading and installing the browser plug-in under the following link:

8.3. Google Tag Manager

On our website, we use Google Tag Manager from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google"). Google Tag Manager is a solution that allows marketers to manage website tags via an interface. The Tag Manager tool is a cookie-free domain and does not collect any personal data. The tool triggers other tags, which in turn collect personal data. According to Google, Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags that are implemented with Google Tag Manager. You can prevent the setting of tags at any time.

The legal basis for processing the data for this purpose is our legitimate interest in accordance with Article 6(1)(f) EU GDPR.

8.4. LinkedIn Analytics

On our website, we use LinkedIn Analytics from LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland. With the help of this technology, visitors to our website can be shown personalised advertisements on LinkedIn. It is also possible to create anonymous reports on the performance of the adverts and information on website interaction. For this purpose, the LinkedIn Insight tag is integrated on our website, which establishes a connection to the LinkedIn server if you visit our website and are logged into your LinkedIn account at the same time.

This provides LinkedIn with the information that you have visited our website, whereby your IP address is also transmitted. Timestamps and events such as page views are also stored. This tells us, for example, which LinkedIn advert or interaction on LinkedIn brought you to our website. This allows us to better control the display of our adverts. LinkedIn conversion tracking also logs when you take an action on our website. Such actions are a registration, a search, a lead, a contact, a purchase process and a purchase transaction.

Based on LinkedIn Analytics technology, your browser automatically establishes a direct connection with the LinkedIn server. We have no influence on the scope and further use of the data collected by LinkedIn through the use of the Insight tag.

For more information on data collection and use, as well as the options and rights to protect your privacy, please refer to LinkedIn's Privacy Policy at 

8.5. Hotjar

On our website we use Hotjar from Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, to analyse your user behaviour on our website. Hotjar's technology helps us gain a better understanding of our users' experiences (e.g. how much time users spend on which pages, which links they click on, what they like and dislike, etc.) and helps us tailor our offering to our users' feedback. Hotjar works with cookies and other technologies to collect information about the behaviour of our users and their end devices (in particular IP address of the device (only recorded and stored in anonymised form), screen size, device type (unique device identifiers), information about the browser used, location (country only), to display our website in the preferred language). Hotjar stores this information in a pseudonymised user profile.

If you wish to deactivate data collection by Hotjar, click on the following link and follow the instructions there: 

8.6. Facebook Connect

On our website, you can log in to create a customer account or register using the social plugin "Facebook Connect" of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland or Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA ("Facebook"), using the so-called single sign-on technology if you have a Facebook profile. You can recognise the "Facebook Connect" social plugins on our website by the button with the Facebook logo and the words "Connect with Facebook" or "Log in with Facebook" or "Sign in with Facebook".

When you visit our website that contains such a plugin, your browser establishes a direct connection to the Facebook servers. The content of the plugin is transmitted by Facebook directly to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding website of our web presence, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

By using this "Facebook Connect" button on our website, you also have the option of logging in or registering on our website using your Facebook user data. Only if you give your express consent in accordance with Article 6(1)(a) GDPR before the registration process on the basis of a corresponding notice about the exchange of data with Facebook, we will receive the general and publicly accessible information stored in your profile when using the "Facebook Connect" button from Facebook, depending on your personal data protection settings on Facebook. This information includes the user ID, name, profile picture, age and gender.

Please note that, following changes to Facebook's Privacy Policy and Terms of Use, your profile pictures, the user IDs of your friends and your friends list may also be transferred when you give your consent if they have been marked as "public" in your privacy settings on Facebook. The data transmitted by Facebook will be stored and processed by us to create a user account with the necessary data, if you have authorised this on Facebook (title, first name, surname, address data, country, email address, date of birth). Conversely, data (e.g. information about your surfing or purchasing behaviour) may be transferred from us to your Facebook profile on the basis of your consent.

The purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your rights in this regard and setting options to protect your privacy can be found in Facebook's Data Protection Information: 

If you do not want Facebook to assign the data collected via our website directly to your Facebook profile, you must log out of Facebook before visiting our website.

8.7. Facebook Pixel / Facebook Custom Audiences

On our website, we use the so-called "Facebook Pixel" of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland or Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA ("Facebook").

With the help of Facebook Pixel, Facebook can determine the visitors to our website as a target group for the display of adverts (so-called "Facebook ads"). Accordingly, we use Facebook Pixel to display Facebook ads placed by us only to those Facebook users who have also shown an interest in our website or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "custom audiences").

With the help of Facebook Pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and are not annoying. With the help of Facebook Pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

Facebook Pixel is integrated directly by Facebook when you visit our website and can store a cookie on your device. If you subsequently log in to Facebook or visit Facebook while logged in, your visit to our website will be noted in your profile. The data collected about you is anonymous to us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible. The data can therefore be used by Facebook for its own market research and advertising purposes.

If we transmit data to Facebook for comparison purposes, these are encrypted locally in the browser and only then sent to Facebook via a secure HTTPS connection. The sole purpose of this is to establish a comparison with the data encrypted in the same way by Facebook.

Furthermore, when using Facebook Pixel, we use the additional function "extended comparison", whereby data for the creation of target groups ("Custom Audiences" or "Look Alike Audiences") is transmitted to Facebook in encrypted form.

Facebook processes the data in accordance with Facebook's Privacy Policy. Specific information and details about Facebook Pixel and how it works can be found in the Facebook Help section.

You can object to the collection by Facebook Pixel and use of your data to display Facebook ads. To set which types of adverts are displayed to you within Facebook, you can go to the page set up by Facebook and follow the instructions on the settings for usage-based advertising. You can also object to the use of cookies for reach measurement and advertising purposes via the deactivation page of the network advertising initiative. You can find further opt-out options here: 

8.8. Web Fonts

Our website uses so-called web fonts, which are provided by Monotype GmbH, Werner-Reimers-Strasse 2-4, 61352 Bad Homburg (fonts.com), for the standardised display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to the fonts.com servers. As a result, fonts.com becomes aware that our website has been accessed via your IP address. The further processing is the responsibility of "fonts.com". The corresponding conditions and setting options can be found in the Data Protection Information 

The use of fonts.com is in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Article 6(1)(f) EU GDPR. If your browser does not support web fonts, a standard font will be used by your computer.

8.9. Intercom

On our website, we use the analytics services of Intercom, Inc, 55 2nd Street, 4th Floor, San Francisco, CA 94105, USA, to understand your use of our services. In doing so, we provide Intercom with a limited amount of your data (such as the date of registration and some personal data such as your name, email address and company name) and use Intercom to collect data for analysis purposes when you visit our website. As a data processor acting on our behalf, Intercom analyses your use of our website and tracks our relationship through cookies and similar technologies in order to improve our service to you.

For more information about Intercom's use of cookies, please visit 

For more information about Intercom's privacy practices, please visit 

9. Other tools

9.1. Google Maps

We use Google Maps API (Application Programming Interface, "Google Maps") from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) and Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) on our website to visually display geographical information (maps). By using Google Maps, information about the use of our website, including your IP address, is transmitted to a Google server in the USA and stored there.

The legal basis for processing the data for this purpose is our legitimate interest in accordance with Article 6(1)(f) GDPR.

It is possible to deactivate the Google Maps service and prevent the transfer of data to Google by deactivating JavaScript in your browser. However, we would like to point out that you will not be able to use the map display in this case.

You can find more information about the collection, processing and use of your data by Google and your rights in this regard in Google's Privacy Policy at 

9.2. YouTube

On our website, we integrate plugins from the YouTube video portal of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA ("YouTube"). YouTube is a subsidiary of Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) and Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Each time you access a page that offers one or more YouTube video clips, a direct connection is established between your browser and a YouTube server in the USA. This stores information about your visit and your IP address. By interacting with the YouTube plugins (e.g. clicking the start button), this information is also transmitted to YouTube and stored by YouTube. For more information on the collection and use of your data by YouTube, please refer to the Privacy Policy of YouTube or Google: 

The legal basis for processing the data for this purpose is our legitimate interest in accordance with Article 6(1)(f) GDPR.

If you have a YouTube user account and do not want YouTube to collect data about you via this website and link it to your membership data stored on YouTube, you must log out of YouTube before visiting this website.

In addition, YouTube calls up the Google Analytics analysis tool via an iFrame in which the video is called up (see Section 8.2). This is YouTube's own tracking, to which we have no access. You can prevent tracking by Google Analytics by using the deactivation tools that Google offers for some Internet browsers.

10. Social media

10.1. Social media profiles

We have included links to our profiles in the social networks of the following providers on our website:

• LinkedIn Unlimited Company, Wilton Place, Dublin 2, Ireland,
• Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland and Meta Platforms Inc, 1601 S California Ave, Palo Alto, CA 94304, USA,
• YouTube of YouTube LLC, 901 Cherry Ave, San Bruno, CA 94066, USA,
• Instagram from Instagram Inc, 1601 Willow Road, Menlo Park, CA 94025, USA.

If you click on the social network icons, you will be automatically redirected to our profile on the respective network. This establishes a direct connection between your browser and the server of the respective social network. As a result, the network receives the information that you have visited our website with your IP address and clicked on the link.

If you click on a link to a network while you are logged into your user account with the relevant network, the content of our website may be linked to your profile so that the network can associate your visit to our website directly with your account. If you want to prevent this, you should log out before clicking on the relevant links. A connection between your access to our website and your user account takes place in any case if you log in to the respective network after clicking on the link. The respective provider is responsible under data protection law for the associated data processing. Please therefore note the information on the network's website.

The legal basis for any data processing attributed to us is our legitimate interest within the meaning of Article 6(1)(f) EU GDPR in the use and advertising of our social media profiles.

10.2. Social media plugins

You can use social plugins from the providers listed below on our website:

• Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland bzw. Meta Platforms Inc., 1601 S California Ave, Palo Alto, CA 94304, USA, 
  Data Protection Information
  ,
• Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, 
  Data Protection Information
  ,
• YouTube der YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, 
  Data Protection Information
  ,
• Instagram von Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, 
  Data Protection Information
  .

We use social plugins to make it easier for you to share content from our website. The social plugins help us to increase the visibility of our content on social networks and thus contribute to better marketing.

The plugins are deactivated on our websites by default and therefore do not send any data to the social networks when you simply visit our website. To increase data protection, we have integrated the plugins in such a way that a connection is not automatically established with the servers of the networks. Your browser only establishes a direct connection to the servers of the respective social network when you activate the plugins and thus give your consent to data transmission and further processing by the social network providers.

The content of the plugin is transmitted by the social network directly to your browser and integrated into the website. As a result, the respective provider receives the information that your browser has accessed the corresponding page of our website, even if you do not have an account with this social network or are not currently logged in to it. This information (including your IP address) is transmitted directly from your browser to a server of the provider (usually in the USA) and stored there. We have no influence on the scope of the data that the provider collects with the plugin, although we can be considered jointly responsible with the providers to a certain extent from a data protection perspective.

If you are logged in to the social network, it can assign your visit to our website directly to your user account. If you interact with the plugins, the corresponding information is also transmitted directly to a server of the provider and stored there. The information (e.g. that you like a post from us) may also be published on the social network and may be displayed to other users of the social network. The provider of the social network may use this information for the purpose of displaying advertising and customising the respective offer. For this purpose, usage, interest and relationship profiles may be created, e.g. to analyse your use of our website with regard to the advertisements displayed to you on the social network, to inform other users about your activities on our website and to provide other services associated with the use of the social network. The purpose and scope of the data collection and the further processing and use of the data by the providers of the social networks as well as your rights in this regard and setting options for protecting your privacy can be found directly in the data protection information of the respective provider.

If you do not want the provider of the social network to assign the data collected via our website to your user account, you must log out of the social network before activating the plugins. Your consent within the meaning of Article 6(1)(a) EU GDPR forms the legal basis for the data processing described. You can revoke your consent at any time by declaring your revocation to the provider of the plugin in accordance with the information in their data protection information.

11. Disclosure to third parties and access by third parties

Without the support of other companies, we would not be able to provide our services in the desired form. In order for us to be able to use the services of these companies, it is also necessary to pass on your personal data to a certain extent. Such a transfer takes place by name, insofar as this is necessary for the fulfilment of the contract requested by you. The legal basis for this disclosure is the necessity for the fulfilment of the contract within the meaning of Article 6(1)(b) EU GDPR.

In addition, we may transfer your data to companies affiliated with us (see above). The legal basis for this data transfer is our legitimate interest within the meaning of Article 6(1)(f) EU GDPR in standardised data management within the Group.

Data is also passed on to selected service providers and only to the extent necessary for the provision of the service. Various third-party service providers are also explicitly mentioned in this Privacy Policy. These are, for example, IT service providers (such as providers of software solutions) or other consulting companies. Our legitimate interest within the meaning of Article 6(1)(f) EU GDPR in obtaining third-party services forms the legal basis for this data transfer.

In addition, your data may be passed on, in particular to authorities, legal advisors or debt collection agencies, if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from the relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof and such disclosure is necessary to carry out a due diligence review or to complete the transaction. The legal basis for this data transfer is our legitimate interest within the meaning of Article 6(1)(f) EU GDPR in the protection of our rights and fulfilment of our obligations or the sale of our company.

12. Transfer of personal data abroad

We are authorised to transfer your personal data to third parties abroad if this is necessary to carry out the data processing specified in this Privacy Policy. It goes without saying that the statutory provisions on the disclosure of personal data to third parties will be complied with. If the country in question does not have an adequate level of data protection, we ensure through contractual arrangements that your data is adequately protected by these companies.

13. Your rights

If the legal requirements are met, you have the following rights as a person affected by data processing:

Right to information: You have the right to request access to your personal data stored by us at any time free of charge if we are processing it. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with the applicable data protection regulations.

Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort.

Right to erasure: You have the right to have your personal data erased under certain circumstances. In individual cases, particularly in the case of statutory retention obligations, the right to erasure may be excluded. In this case, the data may be blocked instead of erased if the conditions are met.

Right to restriction of processing: You have the right to request that the processing of your personal data be restricted.

Right to data portability: You have the right to receive from us, free of charge, the personal data that you have provided to us in a readable format.

Right to object: You can object to data processing at any time, in particular for data processing in connection with direct advertising (e.g. advertising emails).

Right of revocation: In principle, you have the right to revoke your consent at any time. However, processing activities based on your consent in the past are not rendered unlawful by your revocation.

To exercise these rights, please send us an email to the following address: 

Right to lodge a complaint: You have the right to lodge a complaint with a competent supervisory authority, e.g. against the way in which your personal data is processed.

14. Data security

We use suitable technical and organisational security measures to protect your personal data stored by us against loss and unlawful processing, in particular unauthorised access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and to respect data protection. Furthermore, these persons are only granted access to personal data to the extent necessary to fulfil their tasks.

Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always harbours certain security risks and we cannot provide an absolute guarantee for the security of information transmitted in this way.

15. Retention obligations

We only store personal data for as long as is necessary to carry out the processing described in this Privacy Policy within the scope of our legitimate interest. In the case of contractual data, storage is prescribed by statutory retention obligations. Requirements that oblige us to retain data result from accounting and tax regulations. According to these regulations, business communication, concluded contracts and accounting documents must be stored for up to 10 years. If we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary for the fulfilment of retention obligations or for the defence and enforcement of our legal interests. The data will be deleted as soon as there is no longer an obligation to retain it and there is no longer a legitimate interest in retaining it.

 July 2022