Data protection regulations of Hornetsecurity Ltd.

I. Contact Information

II. General information on data processing

The basis of effective data protection is comprehensive information about the collection, processing and use of your data (“data processing”). Therefore, we would like to inform you

• when or in the context of which activities we process data,
• which data we process and for what reasons,
• who receives data,
• which rights you have as a result of our data processing.

This Privacy Policy governs the use of personal data on any German-language website in the “hornetsecurity.com” address space, unless otherwise stated. If you leave our websites via a link or visit our websites on a social media platform, you leave the scope of this Privacy Policy.

The transmission of information to or from these websites is secured by TLS encryption.

You can permanently access, print or download this Privacy Policy at any time at https://www.hornetsecurity.com/de/privacy/.

1. Scope of the processing of personal data

The provision of the websites requires the processing of various information. In addition, the scope of data processing depends on your use of the functionalities of the websites, for example if you communicate with us via the contact form or consent to the processing of data.

You are not obliged to provide us with personal data. However, if the provision of these data is technically mandatory when you access our website, refusal will mean that you will be unable to access and use our websites.

As a visitor to our websites, you are not subject to automated decision-making within the meaning of Art. 22 GDPR.

2. Legal bases for the processing of personal data

Reason for processing	Legal basis	Comment
Performance of contract or implementation of pre-contractual measures	Art. 6 para. 1 lit. b) GDPR	Processing takes place only to the extent necessary for the exercise and fulfillment of the rights and obligations arising from the contract. Unless expressly stated otherwise, data are processed by us only to this extent.
Legitimate interest	Art. 6 para. 1 lit. f) GDPR	Processing takes place insofar as we have a legitimate interest and no conflicting overriding interests of the data subject are apparent. The specific interest is explained in this Privacy Policy within the framework of the respective processing description.
Consent	Art. 6 para. 1 lit. a) GDPR	The data are processed if you have expressly consented to the type and scope of data processing. You can withdraw your consent at any time with effect for the future. However, this does not affect processing carried out up to that point in time.
Legal obligation	Art. 6 para. 1 lit. c) GDPR	They are processed insofar as this is necessary to comply with German or European legal obligations.

3. Erasure of data and storage period

We delete your personal data as soon as the legal basis for their processing ceases to apply. In some cases, however, several legal bases may exist in parallel, or a new legal basis may replace a legal basis that has ceased to apply, such as the obligation to retain certain data in order to comply with a statutory retention obligation.

III. Data processing for the provision of the website

In order for us to display the websites to you, it is necessary to process certain information. This already takes place when you visit our website. In addition, we offer various functionalities on our websites that require further data processing.

1. Log Files

When you use our services or visit our websites, various information is transmitted to our servers. We need this information to establish and maintain the connection. The data also include your IP address, which we treat as personal data. In addition, the following data are collected:

• your IP address
• the page you visit on our website
• date and time of your visit
• browser version
• operating system

We store these data in so-called server log files. These data are not combined with other data about you. The storage of log files, including your IP address, serves the legitimate interest of providing our websites and preventing their misuse. Stored log files are deleted after 10 weeks at the latest, unless longer storage is required, for example to prevent or investigate an attack on our websites.

2. Cookies

We use cookies to establish and maintain the connection. A cookie is a small text file containing information transmitted by your browser and stored on your computer. You can also control the use of cookies in your browser and delete cookies yourself at any time. Cookies may be required to establish a connection or to improve the use of the website.

You can refuse the use of cookies by selecting the appropriate settings in your browser. Please note, however, that in this case you may not be able to use the full functionality of this website.

The use of technically required cookies and the associated data processing is based on our legitimate interest in the technically flawless and convenient use of our websites. Technically required cookies are usually deleted automatically when you close your browser (session cookies); in other cases, they are deleted only after a certain period of time (persistent cookies). The storage period for persistent cookies is determined by the provider and can be viewed, for example, in your browser.

Further information can be found in our cookie policies.

3. Contact Forms

At various points on our website, you will find contact forms through which you can send us an inquiry or, for example, request a quotation for one of our services. For general inquiries, the following information is requested: recipient at Hornetsecurity, company, name, email address, telephone number and your message. If you request a quotation for our services, you must provide the following information: first name, last name, email address, telephone number, company size, job title, business type. The information is marked as mandatory fields. All other data that you transmit to us in the context of the inquiry, including via the free-text field, are voluntary.

We use these data exclusively to answer your inquiry and for the related communication. The legal basis for the processing of this information and all data stored in Hornetsecurity’s services is the necessity for the performance of the existing contractual relationship. In principle, our legitimate interest in providing the contact functionality and responding to the inquiry transmitted through it applies here. If your inquiry is aimed at concluding a contract with us, the processing takes place within the framework of this pre-contractual obligation.

If a contract is concluded, we process the data to the extent necessary for the performance of the contract.

4. Hubspot

We use HubSpot, a marketing and customer relationship management platform provided by HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA, as part of our marketing, communication and data processing.

HubSpot is used to collect and consolidate information from various marketing channels, including our websites (e.g. forms for downloads, webinars, on-demand webinar registrations, trial requests), online advertising campaigns (such as LinkedIn Ads and Google Ads) and registrations for online and offline events.

Depending on the context, the personal data collected via HubSpot may include first and last name, email address, country, telephone number, company, company size, job title, business type and information on how you became aware of our offers. These data are processed for the purpose of handling inquiries and registrations, managing and optimizing our marketing activities and communicating with interested parties, newsletter subscribers and business partners.

We also use HubSpot to automate certain communication processes by means of workflows, for example to send confirmation emails, follow-up communications, newsletters or information relating to on-site and online events.

As part of our business activities, data processed in HubSpot are synchronized with our CRM and made available to our sales departments. This enables us to process inquiries efficiently, maintain up-to-date customer and prospect data and manage customer relationships.

HubSpot also enables us to analyze the performance of our marketing activities, for example by evaluating interaction data such as email open and click rates or engagement with our content. These analyses help us to improve our marketing measures and tailor our communications to the interests of recipients.

When you visit our websites, HubSpot may use cookies and similar technologies to recognize your browser and collect information about your use of our online services. Further details on the use of cookies can be found in our Cookie Policy.

You can withdraw your consent to the processing of your personal data for marketing purposes at any time with effect for the future. You can do so, for example, by using the unsubscribe link included in our marketing emails or by contacting us directly. The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Further information on data processing by HubSpot can be found in HubSpot’s privacy policy.

Salesforce (CRM)

Where data processed in HubSpot are synchronized with our CRM as part of our business activities, this synchronization is carried out with Salesforce. We use Salesforce as a customer relationship management (CRM) system. Personal data that we receive via forms, inquiries, registrations or in the context of existing business relationships may be processed in Salesforce in order to handle inquiries, manage contact and prospect data, control sales processes and document customer relationships. Depending on the context, this may in particular include the processing of names, contact details, company, position/function, communication content and information on interests, interactions and business relationships. Depending on the reason for the contact or the underlying process, the processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR, Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the efficient management and maintenance of business relationships and the structured handling of inquiries and sales processes or, where required, Art. 6 para. 1 lit. a GDPR.

The personal data processed in Salesforce are deleted as soon as they are no longer required for the aforementioned purposes and no statutory retention obligations or other legitimate reasons for further storage exist.

4.1. Information on newsletter subscription

With the following information, we inform you about our newsletters, the registration procedure, dispatch, statistical evaluation and your right to object. By subscribing to our newsletter, you consent to receiving the newsletter and to the processing activities described below. We send newsletters, emails and other electronic notifications containing promotional information (hereinafter “newsletters”) only on the basis of the recipient’s consent or a statutory permission. If the content of a newsletter is specifically described during registration, that description is decisive for the scope of the consent given.

a) Double opt-in procedure and logging

Subscription to our newsletter (referred to on our websites as “Release Notes Newsletter” or “IT Pro Tuesday”) takes place using a double opt-in procedure. After registration, you will receive an email asking you to confirm your subscription. This confirmation is required to prevent misuse of email addresses by unauthorized third parties.

In order to be able to demonstrate compliance with legal requirements, newsletter subscriptions are logged. This includes storing the time of registration and confirmation as well as the IP address used.

b) Statistical evaluation

Our newsletters contain a so-called web beacon (a pixel-sized file) that is retrieved from HubSpot’s servers when the newsletter is opened. In the course of this retrieval, technical information such as browser type, operating system, IP address and time of access is collected.

This information is used to technically optimize our newsletters and to better understand recipient engagement, for example based on access times or approximate location (derived from the IP address). Statistical evaluations also include determining whether newsletters are opened, when they are opened and which links are clicked.

For technical reasons, this information can be associated with individual newsletter recipients. However, neither we nor HubSpot intend to monitor individual users. The evaluations are used solely to assess overall user behavior, optimize content and tailor newsletters to the interests of our recipients.

c) Unsubscription and withdrawal of consent

You can unsubscribe from our newsletter at any time and thereby withdraw your consent. Upon unsubscription, your consent to receive newsletters via HubSpot and to the associated statistical evaluation is also withdrawn. A separate withdrawal of newsletter dispatch and statistical evaluation is not possible.

5. Partner portal

If you are interested in distributing our services as a Hornetsecurity partner, you can register for our partner program via our websites. To do so, you must complete the online partner application, in the course of which you must provide various information about your company and your contact persons. The mandatory information is marked in each case. All other information is provided voluntarily.

In this respect, the legal basis for the processing is the implementation of pre-contractual measures or, after conclusion of the partner agreement, the necessity for the performance of the contract. The storage period is therefore generally measured by the duration of the contractual relationship. After its end, however, alternative legal bases may apply, such as statutory retention periods.

6. Online application

You can also apply to us at any time using our online application form. As part of the application, personal data are transmitted to us via our websites. This may take place directly via the input fields or indirectly via application documents to be uploaded, such as your CV. The information marked as mandatory in the registration form is mandatory. All other information, even if contained in the uploaded application documents, is voluntary. We process your data only to the extent necessary to carry out the application procedure.

By submitting your information on our Careers page or by registering for the Talent Pool, you also agree that we may contact and inform you in writing and by telephone as part of our recruitment marketing or talent retention programs. If you no longer wish this at a later date, you can have your data deleted at any time without giving reasons. A brief message to [email protected] is sufficient for this purpose.

The legal basis for the processing is the necessity for the initiation of an employment relationship. Your data are stored for a period of 90 days after completion of the application process, unless you have given us consent to further storage.

This process is supported by an HR tool that Hornetsecurity GmbH uses for applicant management and personnel administration.

Further information can be found at the following link: https://www.hornetsecurity.com/en/privacy-policy-personio.

7. LiveChat

Hornetsecurity has integrated the LiveChat component on this website. LiveChat is live support helpdesk software that enables direct communication in real time (so-called live chat) with visitors to its own website. The developer of the LiveChat component is LiveChat, Inc, One International Place, Suite 1400, Boston, MA 02110-2619, United States of America.

With each individual visit to our website that is equipped with a LiveChat component, data are collected by this component for the purpose of operating the LiveChat system and analyzing the operation of the system. Further information on LiveChat can be found at https://www.livechatinc.com/legal/privacy-policy/#main. The chat component sets a cookie on the computer, tablet or smartphone of the data subject. What cookies are has already been explained above.

Pseudonymized usage profiles can be created via the LiveChat cookie. In the process, the following information is recorded for each person and stored until the agent closes the chat system; this usually occurs after 4 to 10 hours: pages visited, duration of page visits, in some cases the referrer, the device, the browser, the user agent.

Such pseudonymized usage profiles may be used by the controller to analyze visitor behavior and to analyze and maintain the proper functioning of the live chat system. The analysis also serves to improve our offer. The data collected via the LiveChat component are assigned to the data subject only when he or she starts the chat and provides his or her personal data (name & email). If the inquiry can already be resolved in the chat, the information is deleted as soon as the agent closes the chat system.

8. GoToWebinar

We use a plugin provided by GoToWebinar (GoTo Technologies Ireland Unlimited Company, The Reflector, 10 Hanover Quay, Dublin, Ireland) to offer webinars to website visitors, end users and business partners. Registration forms provided by GoToWebinar are integrated into our website and can be used to register for webinars.

When registering for a webinar, the following personal data may be collected: first and last name, email address, country, telephone number, company, company size, job title, business type (e.g. reseller, end user, distributor) and information on how you became aware of the webinar.

The processing of these data is carried out for the purpose of organizing and conducting webinars. Further information on how GoTo processes personal data can be found in GoTo’s privacy policy at: https://www.goto.com/company/trust/privacy

9. Other personal data

We would like to point out that Google Analytics has been extended on these websites by the code “_anonymizeIp();” in order to ensure the anonymous collection of IP addresses (so-called IP masking). Hornetsecurity GmbH therefore does not store any personal data of a website visitor.

Personal data are collected only if you provide them voluntarily, e.g. in the case of individual inquiries, as part of an application, a talent retention program or in the case of a service or support inquiry via a contact form, by email, online or in writing. To answer your inquiry, your personal data are forwarded to the department responsible for processing your inquiry/application.. Your personal data are processed and stored via the marketing automation tool ActiveCampaign, the ticket system OTRS and our servers. Furthermore, the data are not passed on to third parties or used for purposes other than those stated in each case. Personal data transmitted to us (e.g. name, address, telephone number, fax number or email address) are used only to answer your inquiry or to process your request or application. With explicit consent (double opt-in procedure), your personal data are also used for advertising purposes. They are stored by us only for as long as this is necessary for the aforementioned purposes or for as long as we are legally obliged to store them. You have the option to withdraw your consent at any time. Please contact our data protection officer for this purpose (see above). We would like to point out that messages sent by unencrypted email are not a secure means of communication against access by third parties and, in particular, also become accessible to the email provider.

IV. Usage analysis and tracking

We would like to further improve the user-friendliness of these websites and the attractiveness of their services. For this reason, when you visit our websites, we also collect data on usage behavior, which we evaluate for this purpose. For this purpose, the following tracking and analysis cookies are used on our websites. A cookie is a small text file containing information that is transmitted by your browser and stored on your computer. These cookies do not contain personal data. You can also control the use of cookies in your browser and delete cookies yourself at any time. Cookies may be required to establish a connection or to improve the use of the websites. We would like to point out that in this case you may not be able to use all functions of these websites in full. The legal basis for usage analysis is your cookie consent pursuant to Section 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a) GDPR.

Here you can adjust your cookie settings:

Adjust cookie settings

1. Google (Universal) Analytics

These websites use Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google collects information about your use of these websites (including your IP address) in the USA via a cookie and stores this information. However, we use Google Analytics only with an anonymization function whereby the IP address is truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address transmitted to Google in the USA and truncated there. Google analyzes the information collected, sends us reports on usage activities on our websites and provides us with further related services. The IP address transmitted by your browser in the context of Google Analytics is not merged with other Google data.

In addition to blocking all cookies through your browser, you can prevent Google from processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie that prevents future collection by Google Analytics on these websites (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies in this browser, you must click this link again):

Disable Google Analytics data collection for this website

Further information on Google Analytics can be found in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

2. Google AdWords

Our websites use the advertising tool “Google AdWords” from Google, including its conversion tracking. We use this tool to determine how successful advertising for our services is on websites other than our own. For this purpose, a conversion cookie is set when you click on one of our advertisements. This cookie enables us to recognize that you accessed our websites via this advertisement. We use such usage statistics to compile statistics for evaluating the conversion of our advertisements. We do not receive any information about you personally. The conversion cookie set in your browser is individual and cannot be used by other Google AdWords customers for their statistics.

You can prevent tracking by disabling the conversion tracking cookie in your browser settings.

3. Google Tag Manager

We use Google Tag Manager, a tag management system provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager itself does not set cookies and does not collect personal data. It is used solely to manage and deploy other tools and tags on our website, such as analytics or marketing services. These tools may, depending on their configuration, set cookies or process personal data.

Any data processing that occurs via tags implemented through Google Tag Manager takes place only if you have given your consent for the respective cookie category (e.g. statistics or marketing) via our cookie consent management tool. The legal basis and purposes of such processing are described separately for the respective tools in this Cookie Policy and in our Privacy Policy.

Further information on data processing by Google can be found in Google’s privacy policy.

4. HubSpot

We use cookies and similar technologies provided by HubSpot (HubSpot, Inc., 25 First Street, Cambridge, MA 02141, USA) to support our marketing, communication and analytics activities.

HubSpot cookies are used to:

• recognize visitors when they return to our websites,
• analyze the use of our websites and marketing content,
• enable and improve website forms (e.g. for content downloads, webinar registrations and trial requests),
• support email marketing activities and measure campaign performance (e.g. open and click behavior),
• associate website interactions with form submissions where consent has been given.

Depending on the cookie category, HubSpot cookies may collect information such as IP address, device and browser information, pages visited, access times, referrer URLs and interactions with website content. This information may be linked to a user profile if the user has provided personal data via a form and has consented to such processing.

The use of HubSpot cookies that are not technically required requires your consent and is carried out via our cookie consent management tool. You can withdraw your consent at any time with effect for the future by adjusting your cookie settings.

Further information on the cookies used by HubSpot and how they work can be found in HubSpot’s privacy policy and documentation.

5. Matomo Tracking

Our website uses Matomo, a cookieless web analytics service from InnoCraft, located at 7 Waterloo Quay PO625, 6140 Wellington, New Zealand, to improve your user experience. The data collected by us via Matomo are not transmitted to Matomo itself or to other third parties, nor are they used by them. Read more about which data are collected by Matomo.

Matomo does not collect any personal information. Due to our configuration, users are shown to us with an anonymous IP address and personal details are ignored, while we can see each “user” by means of a personal identification number.

Read Matomo’s privacy policy here.

6. LinkedIn Analytics

Our websites also use tracking functions of the LinkedIn network. LinkedIn sets cookies when you visit our websites, provided that you have consented to such processing. Data processing takes place only after consent has been given. Your IP address is transmitted to LinkedIn in the USA together with information about your use of our websites and the devices used. Your use of our websites and other websites you visit may be analyzed and used as a basis for advertising. If you have a LinkedIn user account and are logged in, LinkedIn may associate your visit to our website with your account. We have no knowledge of the exact data flows between your browser and LinkedIn. Please refer to LinkedIn’s privacy policy and Cookie Policy for further information:

• Privacy Policy: https://www.linkedin.com/legal/privacy-policy
• Cookie policy: https://www.linkedin.com/legal/cookie-policy

The legal basis and purposes of such processing are described separately for the respective tools in this Cookie Policy and in our Privacy Policy.

V. Social Networks

We operate our own presences on the social networks Facebook, LinkedIn, X, Youtube (Google Ireland Limited) and Xing. These networks process your personal data, for example to create usage profiles corresponding to your interests. Cookies may be stored on your device for this purpose. More detailed information on data processing by the individual networks can be found in the respective privacy information and, where applicable, in the cookie policies of the networks:

• https://www.facebook.com/about/privacy/
• https://www.linkedin.com/legal/privacy-policy?
• https://privacy.x.com/en
• https://policies.google.com/privacy?hl=en
• https://privacy.xing.com/en

This privacy information also contains information about the type and scope of data processing by the respective networks, as well as about the options for asserting your data subject rights (right of access, confirmation, rectification, erasure, restriction, data portability and complaint to the competent data protection supervisory authority).

We do not know which user data the social networks collect. We do not receive full access to the collected user data or user profiles. We can access only public profile information. You can customize which information you choose to make public through your account settings.

Where available, we use user data from the chat functions to answer your questions. Customer data collected are used to contact the user and provide requested information and offers.

We may receive anonymous statistics from social networks on the basis of our legitimate interest in the use of our page, such as:

• Followers: number of people who follow us, including growth and development over a defined period of time.
• Reach: number of people who see a particular post. Number of interactions with a post. This can be used, for example, to infer which content performs better than other content in the community.
• Ad performance: how many people saw and interacted with an ad or article.
• Demographic data: average age of visitors, gender, location, language, industry.

These statistics are used to continuously improve our online content and to respond better to the interests of our users. We cannot link the statistical data to the profiles of our fans or individual users. Through your account settings on social networks, you can decide how targeted advertising should be displayed to you.

Special notes on Facebook

We are jointly responsible with Facebook under data protection law for the operation of the Facebook fan page. In Europe, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is the controller. The joint controllership is regulated in the Facebook Page Insights Supplement regarding Facebook as controller: https://www.facebook.com/legal/terms/page_controller_addendum

Further information on the processing of Page Insights data can be found at https://www.facebook.com/legal/terms/information_about_page_insights_data

Data processing outside Europe by Facebook Inc, 1601 Willow Road, Menlo Park, CA 94025, USA, is possible under certain circumstances.

The legal basis for the processing of your personal data on our fan page is the legitimate interests of us and Facebook pursuant to Art. 6 para. 1 lit. f) GDPR in advertising, recommendations and measurements as well as in offering interested parties an information and communication channel. You can object to the data processing at any time. To do so, please contact Facebook. You can find information on this in Facebook’s privacy policy: www.facebook.com/about/privacy/. In your browser settings, you can also prevent the storage of cookies yourself at any time or delete existing cookies.

VI. How can you refuse and delete cookies?

You have a choice. You can refuse all or individual cookies. Please use the following cookie settings for this purpose. You can also change the settings in your Internet browser to control first- and third-party cookies. The majority of Internet browsers accept cookies automatically. If you refuse the use of cookies, you should actively delete them. By refusing cookies, you can continue to use our websites at any time. However, individual functions may be available to you only to a limited extent. Further information can be found at the following link: www.allaboutcookies.org. By continuing to use our websites, you agree that cookies may be set unless you have deleted or blocked the cookies.

Cookie	Description	Further information
Google Analytics	We use the Google Analytics service to understand how our campaigns work and how you as a user interact with our websites. This enables us to continuously improve usability for our visitors.	https://tools.google.com/dlpage/gaoptout
Google tracking cookies	Google’s tracking cookies enable us to track the extent to which you perform certain actions in relation to our online presence immediately after you have seen one of our ads on Google and confirmed this with a click. Google uses these cookies to analyze which content you have viewed on our websites in order to display personalized ads at other Google partners.	https://support.google.com/ads/answer/2662922?hl=en
Google Tag Manager	Google Tag Manager manages website tags, such as analytics or marketing tags. The data processing of the tools loaded through Google Tag Manager is described separately in this Privacy Policy.	https://support.google.com/tagmanager/answer/7207086?hl=en
LinkedIn	LinkedIn’s Insight Tag enables us to analyze campaigns and collect information about website visitors who reached us through LinkedIn campaigns.	https://www.linkedin.com/help/lms/answer/65521/the-linkedin-insight-tag-overview?lang=en
HubSpot	HubSpot enables us to interpret user behavior on our websites through the use of cookies. The cookies serve to provide individual user preferences (e.g. form entries) for subsequent visits.	https://legal.hubspot.com/privacy-policy
Personio	Personio is an HR tool that supports us in applicant management and personnel administration. Cookies are used to process personal user data (e.g. form entries and uploaded applicant files).	https://www.hornetsecurity.com/en/career/privacy-policy-personio/
Youtube	On our websites, we embed YouTube videos and link to them. Therefore, when visiting individual subpages of our websites, embedded YouTube content may be displayed and forwarded to corresponding YouTube cookies.	https://support.google.com/ads/answer/2662922?hl=en-GB
Livechat	We use components of LiveChat GmbH, Ekkehardstrasse 10, 78224 Singen. Each time our website is accessed, this component collects and stores data for web analysis and for operating the live chat system, from which usage profiles can then be created under a pseudonym through the use of cookies. These usage profiles can be used to analyze visitor behavior and operate the live chat system; they can also be evaluated in order to improve and customize our online offering.	https://www.livechat.com/legal/privacy-policy/ https://www.livechat.com/legal/data-processing-addendum/

VII. Possibility of objection and removal

If data processing is based on your consent or on our legitimate interest, you have the right to object to the processing at any time or to withdraw your consent. Your objection or withdrawal takes effect only for the future. If the analysis cookies used offer their own technical options for deactivation, this is shown in each case. You can exercise your right of objection or withdrawal at any time by contacting [email protected]. If you object to processing based on our legitimate interest, we may nevertheless continue the processing if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms.

VIII. Recipients of data

The processing of your personal data within the scope of our websites is partly also carried out by processors, in particular in connection with the hosting of our websites and the use of analytics tools. These are engaged exclusively on the basis of a data processing agreement pursuant to Art. 28 para. 3 GDPR.

In this context, the processors or service providers we use may also include Salesforce as the provider of our CRM system, to the extent this is necessary for handling inquiries, maintaining prospect and customer data and managing sales and communication processes.

IX. Rights of data subjects

If personal data are processed, you are a data subject within the meaning of Art. 4 para. 1 GDPR and have the rights listed below. To exercise these rights, please use the contact details provided above.

Right of access pursuant to Art. 15 GDPR

You have a right of access to the personal data processed by us. This includes the mandatory information specified in Art. 15 GDPR.

Right to rectification pursuant to Art. 16 GDPR

You have the right to have inaccurate personal data rectified without undue delay and incomplete personal data completed.

Right to erasure pursuant to Art. 17 GDPR

You have the right to request the erasure of your personal data if one of the grounds specified in Art. 17 GDPR applies, in particular if there is no longer any legal basis for the processing.

Right to restriction of processing pursuant to Art. 18 GDPR

You have the right to request restriction of the processing of your personal data if one of the grounds specified in Art. 18 GDPR applies, in particular at your request instead of erasure of the data.

Right to data portability pursuant to Art. 20 GDPR

You have the right to request all personal data stored by us about you in a structured, commonly used and machine-readable format and to transmit these data to another controller without hindrance from the controller to whom the personal data were provided.

Right to lodge a complaint with the competent supervisory authority, Art. 77 GDPR

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority competent for you.

X. Data transfer to third countries

The personal data that we collect from you via the websites are also transferred in part to third countries outside the European Economic Area.

In the exceptional cases described above, when using Google tools, your IP address may be transmitted in full to Google LLC and truncated only there.

When using the analytics tool HubSpot and LinkedIn Analytics from LinkedIn, as well as in connection with the listed social media plugins, your IP address and other information are transmitted to the respective operators.

Where personal data are processed via Salesforce, a transfer to third countries outside the European Economic Area may also take place. In this case, the processing or transfer is carried out on the basis of appropriate safeguards, in particular the Data Processing Addendum agreed with Salesforce, including the applicable Standard Contractual Clauses and, where applicable, the Salesforce Processor Binding Corporate Rules. The relevant Salesforce group company contractually engaged in each case is decisive.

Google, Facebook (Instagram), LiveChat, X and LinkedIn are each based in the USA and therefore in a so-called “third country” within the meaning of Art. 44 GDPR. All of the aforementioned companies safeguard or process your data on the basis of the respective Standard Contractual Clauses.