Privacy Statement
With this privacy policy, we would like to inform you about the nature, scope and purpose of the processing of personal data (also referred to as “data” below). Personal data is any data that has a personal connection to you, such as name, address, e-mail address or your user behavior. The privacy policy applies to all data processing operations carried out by us, both as part of our core activities and to the online media provided by us.
Who is responsible for data processing with us
Responsible for data processing is:
Marton GmbH
Alter Schlachthof 39
76131 Karlsruhe
Germany
+49 176 41616290
contact@marton.ai
https://www.marton.ai/
Processing of your data as part of our company's core activity
If you are our customer or business partner or are interested in our services, the type, scope and purpose of the processing of your data depends on the contractual or pre-contractual relationship between us. In this sense, the data processed by us includes all data that is or has been provided by you for the purpose of using the contractual or pre-contractual services and that is required to process your request or the contract concluded between us. Unless otherwise stated in the further information in this privacy policy, the processing of your data and its transfer to third parties is limited to the data that is necessary and appropriate to answer your inquiries and/or to fulfill the contract concluded between you and us, to protect our rights and to fulfill legal obligations. We will inform you which data is required for this before or as part of data collection. Insofar as we use third-party providers to provide our services, the privacy policies of the respective third-party providers apply.
Affected data:
- Inventory data (e.g. names, addresses)
- Payment data (e.g. bank details, invoices)
- Contact details (e.g. email address, telephone number, postal address)
- Contract data (e.g. subject matter of contract, contract duration)
Affected persons: Interested parties, business and contract partners
Processing purpose: Processing of contractual services, communication and answering contact requests, office and organizational procedures
legal basis: Contract performance and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Your rights under the GDPR
According to the GDPR, you have the following rights, which you can assert at any time from the person responsible named in Section 1 of this Privacy Policy:
- Right to information: You have the right to request information from us as to whether and which data we process from you.
- Right to rectification: You have the right to request that incorrect or incomplete data be corrected.
- Right to deletion: You have the right to request that your data be deleted.
- Right to restriction: In certain cases, you have the right to request that we only process your data to a limited extent.
- Right to data portability: You have the right to request that we transfer your data to you or another person responsible in a structured, common and machine-readable format.
- Right to lodge a complaint: You have the right to complain to a supervisory authority. The supervisory authority of your usual place of residence, your place of work or our company headquarters is responsible.
Right of Withdrawal
You have the right to withdraw your consent to data processing at any time. You have the right to object at any time to the processing of your data, which we base on our legitimate interest in accordance with Article 6 (1) (f) GDPR. If you exercise your right to object, please explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling legitimate reasons for data processing outweigh your interests and rights.
Irrespective of the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.
Please send your objection to the contact address of the person responsible given above.
When do we delete your data?
We delete your data when we no longer need it or when you tell us to do so. This means that - unless otherwise stated in the individual data protection notices in this privacy policy - we delete your data
• when the purpose of data processing has ceased to exist and the respective legal basis stated in the individual data protection notices therefore no longer exists, e.g.
• after termination of the contractual or membership relationships between us (Art. 6 para. 1 lit. a GDPR) or
• after our legitimate interest in the further processing or storage of your data ceases to exist (Art. 6 para. 1 lit. f DSGVO),
• if you exercise your right of withdrawal and no other legal legal basis for processing within the meaning of Article 6 (1) lit. b-f GDPR applies,
• if you exercise your right of objection and there are no compelling legitimate reasons to prevent the deletion.
However, if we still need to keep (certain parts of) your data for other purposes, for example because this requires tax retention periods (usually 6 years for business correspondence or 10 years for accounting receipts) or the assertion, exercise or defense of legal claims arising from contractual relationships (up to four years) or the data is needed to protect the rights of another natural or legal person, we will delete (the part of) your (r) Data only after these deadlines have expired. However, until these deadlines have expired, we will restrict the processing of this data to these purposes (fulfillment of storage obligations).
cloud services
We use cloud services in particular
• to store and process documents,
• to send documents via e-mail or to exchange files of any kind,
• for our calendar appointment management,
• to prepare and execute presentations and spreadsheets,
• to publish files of any kind,
• for internal and external communication via chats, audio and video conferences.
The software applications that we use for these purposes are made available to us by the provider (s) listed below on their servers. We access these servers via the Internet. If you provide us with your data as part of communication with us or in other processes explained by us using this privacy policy, we process this data in the cloud service we use. This means that your data is stored on the servers of the third-party Cloudservice provider. The third-party providers process usage and metadata to secure their servers and to optimize their services. In particular, we process and store your contact, customer and contract data.
Should we make files of any type publicly available via our website using the cloud service we use, the respective third-party cloud service provider may store cookies on your computer system if you access these files. The service provider can process the data collected in this way to analyze your usage behavior or browser settings.
We would like to point out that, depending on the country of residence of the service provider named below, the data specified in more detail below may be transferred and processed on servers outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights will not be possible or may only be difficult. If the service provider we use offers the processing of data exclusively within the EU, we intend - if not already implemented at present - to process your data exclusively there.
Affected data:
• inventory data (e.g. names, addresses),
• Contact details (e.g. email addresses, telephone and mobile numbers)
• content data (e.g. photos, videos, texts),
• usage data (e.g. times of access, websites visited, interest in content),
• Metadata (e.g. IP address, computer system information)
Affected persons: interested parties, communication partners, customers, employees (e.g. applicants, current and former employees)
Processing purpose: Organization of office and administrative tasks
legal basis: Consent, Art. 6 para. 1 lit. a DSGVO, contract performance and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Cloud service providers used:
Google cloud services
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Web site: https://cloud.google.com/
Privacy Policy: https://www.google.com/policies/privacy
cookies
web hosting
To maintain our websites, we use a provider on whose server our websites are stored and made available for retrieval on the Internet (hosting). In doing so, the provider can process all data transmitted via the browser you use that is generated when using our Internet pages. This includes in particular your IP address, which the provider requires in order to be able to deliver our online offer to the browser you are using, as well as any entries you have made via our website. In addition, the provider we use can
• the date and time of access to our website
• Time zone difference to Greenwich Mean Time (GMT)
• Access status (HTTP status)
• the amount of data transferred
• the Internet service provider of the accessing system
• the type of browser you are using and its version
• the operating system you are using
• the website from which you may have reached our website
• the pages or sub-pages that you visit on our website.
Raise. The above data is stored as log files on our provider's servers. This is necessary to ensure the stability and security of the operation of our website.
Affected data:
• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked on)
• Communication data (e.g. information about the device used, IP address)
Affected persons: users of our website
Processing purpose: Play our Internet pages, ensure the operation of our Internet pages
legal basis: Legitimate interest, Art. 6 para. 1 lit. f DSGVO
Web host (s) commissioned by us:
Webflow, Inc
Service provider: Webflow, Inc
Website: 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA
Privacy Policy: https://webflow.com/
Google Cloud Platform
Service provider: Google Ireland Limited Gordon House, Barrow Street Dublin 4. Ireland
Web site: https://cloud.google.com/
Privacy Policy: https://policies.google.com/privacy?hl=de
contacting
If you contact us via e-mail, social media, telephone, fax, post, our contact form or otherwise and provide us with personal data such as your name, telephone number or email address or provide further information about yourself or your request, we process this data to answer your request as part of the pre-contractual or contractual relationship existing between us.
Affected data:
• Inventory data (e.g. names, addresses)
• Contact details (e.g. email address, telephone number, postal address)
• Content data (texts, photos, videos)
• Contract data (e.g. subject matter of contract, contract duration)
Affected persons: Interested parties, customers, business and contract partners
Processing purpose: Communication and response to contact requests, office and organizational procedures
legal basis: Contract performance and pre-contractual inquiries, Art. 6 para. 1 lit. b DSGVO, legitimate interest, Art. 6 para. 1 lit. f GDPR
Registration, login and user account
You have the option to register on our online medium in order to create a user account there. This requires the provision of personal data resulting from the input mask. The data requested there includes in particular your name, email address, possibly a user name and password. This data is stored and processed by us to set up a user account for you and to enable (repeated) login. You can change or delete the data at any time. The data will not be passed on to third parties unless this is necessary for the technical and organizational processing of the existing user contract between us. To protect you and us from abusive registrations, we store the IP address assigned to you at the time of registration, as well as the date and time of registration.
Affected data:
• Inventory data (e.g. names, addresses)
• Contact details (e.g. email address, telephone number, postal address)
• Contract data (e.g. subject matter of contract, contract duration)
• Payment data (e.g. bank details, invoices)
• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked on)
• Communication data (e.g. information about the device used, IP address)
Processing purpose: Processing of contractual services, communication and answering contact requests, security measures.
legal basis: Contract performance and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Deletion: See the section: “When do we delete your data?” In addition, we would like to draw your attention to the fact that we delete the data collected during registration and the content data stored in the account as soon as you delete your account, subject to conflicting legal storage obligations. We therefore ask you, if you want or need to access the content data stored in your account even after deleting your account, to otherwise secure it before deleting the account.
Processing of your data when ordering from our online shop
If you place orders via our online shop, we process the information you provide during the ordering process in order to be able to process your order. This includes in particular your name as well as your address and electronic contact details, information on how to process the payment process and details of your specific order. We will tell you which data we need in detail as part of the ordering process.
If it is necessary to fulfill the contract concluded between us, to protect your vital interests or due to legal provisions, we will transfer your data to third parties, such as to the logistics company commissioned with delivery, to payment service providers for the purpose of payment processing and our tax advisor, in compliance with your rights. Insofar as we use third-party providers to provide our services, the privacy policies of the respective third-party providers apply.
Processing of your data when ordering from our online shop
If you place orders via our online shop, we process the information you provide during the ordering process in order to be able to process your order. This includes in particular your name as well as your address and electronic contact details, information on how to process the payment process and details of your specific order. We will tell you which data we need in detail as part of the ordering process.
If it is necessary to fulfill the contract concluded between us, to protect your vital interests or due to legal provisions, we will transfer your data to third parties, such as to the logistics company commissioned with delivery, to payment service providers for the purpose of payment processing and our tax advisor, in compliance with your rights. Insofar as we use third-party providers to provide our services, the privacy policies of the respective third-party providers apply.
User accounts: You can voluntarily create a user account in which you can view and manage your orders. If you cancel your account, your data will be deleted. It is your responsibility to back up your data before canceling. We use transient cookies (for the term see above under cookies) to store the content of the shopping cart and persistent cookies (for the term see above under cookies) to save the login status. When you place an order, register for a user account or log in again, we save your IP address and the time of the respective user action. The purpose of storage is our but also your legitimate interests in protecting against misuse and other unauthorized use.
Advertising measures: We can also use the data you provide to inform you by post or email about similar interesting products and/or services after you have placed an order.
Affected data:
• Inventory data (e.g. names, addresses)
• Payment data (e.g. bank details, invoices)
• Contact details (e.g. email address, telephone number, postal address)
• Contract data (e.g. subject matter of contract, contract duration)
• Usage data (e.g. access times, websites clicked on)
• Communication data (e.g. information about the device used, IP address)
Affected persons: Customers, prospects, business and contract partners
Processing purpose: Processing of orders, communication and, if applicable, marketing as well as answering inquiries, data security, office and organizational procedures
legal basis: Contract performance and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legal obligation, Art. 6 para. 1 lit. c GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Payment service provider
In accordance with our legal obligations or because of our legitimate interests in efficient, secure and customer-oriented payment processing, persons who have concluded a contract or other legal relationship with us may use banks and credit institutions as well as other payment service providers to make payments. In this context, the payment service providers offered by us process inventory data, including name, address or bank details such as account/credit card number, passwords, TANs, verification numbers as well as information about the concluded contract and information about the recipient of the payment.
The data collected in this context is necessary to be able to process payment by the payment service provider. Only the payment service provider commissioned by us collects and processes this personal information. We never receive any information about your account or credit card details. We are notified by our payment service provider whether or not payment has been received from our customers. It is possible for our payment service providers to forward our customers' data to credit information files in order to be able to verify the identity and creditworthiness of the payer. In this respect, we refer to the privacy policy and general terms and conditions (GTC) of our payment service providers.
The terms and conditions and privacy policy of the respective payment service provider apply. You can find this information on the website of the service provider concerned or in the transaction application. For further information and to assert your rights regarding revocation and information, we refer to the provisions of the respective service provider.
Affected data:
• inventory data (e.g. name, address),
• usage data (e.g. websites visited, interest in specific topics, times of access),
• Payment details (e.g. bank details, invoices. payment history),
• transaction data (e.g. duration, customer category, subject matter of contract),
• Communication and metadata (e.g. IP address, information about the device or computer system)
Processing purpose: Effective, secure and customer-oriented payment offers (service) and processing of payments in accordance with a contractual agreement
legal basis: Contract fulfilment and fulfilment of pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR
Withdrawal options: You can withdraw your consent to the use of personal data at any time by contacting the respective payment service provider. Despite revocation, the payment service provider may remain entitled to process, use and transfer the personal data that is absolutely necessary for payment processing in accordance with the contract. With regard to the storage and timely deletion of personal data, we refer to the respective data protection regulations of the payment service provider.
We use the following payment service providers:
Stripe
Service provider: Stripe Inc., 510 Townsend Street, San Francisco, CA 94103, USA
Web site: https://stripe.com/de
Privacy Policy: https://stripe.com/de/privacy
Processing of your data when using our software
When you use our software, we process the data you provide or generate through use to provide and improve the functionality of the software. This includes in particular technical information (such as IP address, device information, operating system) and usage data (such as log data, settings, content entered, uploaded images and videos). This data is used to run the software, analyze errors, and optimize the user experience.
If it is necessary to fulfill the agreement concluded with you, to comply with legal obligations or to protect legitimate interests, we will pass on your data to third parties in compliance with your rights. This applies, for example, to IT service providers, hosting providers or other supporting service providers.
For more details on how we process your data, please see the specific privacy notices of our software or the respective terms of use.
Publishing customer videos for marketing purposes (social media)
If you have given us your express consent by activating the corresponding function in our software (“Toggle”/Checkbox), we use the videos you have created to publish them on our social media channels (e.g. Instagram, LinkedIn, Facebook, TikTok) and our website for marketing purposes.
Legal basis: Processing is based on your consent in accordance with Article 6 (1) (a) GDPR.
Recipients and third country transfer: By publishing on social media platforms, data is transmitted to the respective operators (e.g. Meta Platforms Ireland Ltd., LinkedIn Ireland Unlimited Company, TikTok Technology Limited). Here, data can also be transferred to servers in the USA. We would like to point out that no level of data protection comparable with the EU can currently be guaranteed in the USA.
Right of withdrawal: You can withdraw your consent at any time with effect for the future (e.g. by deactivating the function in the software or by sending us an email). The revocation does not affect the lawfulness of the processing carried out up to the revocation. In the event of a revocation, we will delete the affected posts from our channels insofar as they contain personal data (e.g. your face/profile picture) and there are no other legal grounds for storage. We would like to point out that we have no influence on copies that have already been made by third parties (e.g. through “sharing” features).
Runway ML
We use the “Runway” software to create and edit media content, in particular to generate and edit videos and images using artificial intelligence (AI). When using Runway, personal data may be processed, in particular if users provide us with media or other data for processing.
Data processing by Runway:
Runway is operated by Runway AI, Inc., a company based in the USA. When using this software, data, including uploaded media and metadata, can be transferred to Runway AI, Inc. servers and processed there. This may also mean a transfer of personal data to a third country outside the EU/EEA. Runway AI, Inc. may be required to share data with government agencies.
Affected data:
• Real estate pictures
Affected persons: users of our software
Processing purpose: The processing is carried out using AI for the purpose of video generation.
legal basis: This processing is carried out on the basis of Article 6 (1) (f) GDPR (legitimate interest in efficient and innovative media processing) or — if consent is required — on the basis of Article 6 (1) (a) GDPR.
Service provider: Runway AI, Inc., 201 Moore St, Brooklyn, NY 11206, USA
Web site: https://runwayml.com/
Privacy Policy: https://runwayml.com/privacy-policy
Creatomate
We use the “Creatomate” software to create and edit media content, in particular for automated editing and rendering of videos in the cloud. When using Creatomate, personal data may be processed, in particular if users provide us with media or other data for processing.
Data processing by Creatomate:
Creatomate is operated by Creatomate B.V., a company based in the Netherlands. When using this software, data, including uploaded media and metadata, can be transferred to Creatomate B.V. servers and processed there.
Affected data:
• Real estate pictures
Affected persons:
users of our software
Processing purpose:
The processing is carried out for the purpose of automatically cutting and rendering videos.
legal basis:
This processing is carried out on the basis of Article 6 (1) (f) GDPR (legitimate interest in efficient and innovative media processing) or — if consent is required — on the basis of Article 6 (1) (a) GDPR.
Service provider: Creatomate, Leeuwarden, The Netherlands
Web site: https://creatomate.com/
Privacy Policy: https://creatomate.com/privacy-policy
Tensorpix
We use the “Tensorpix” software to create and edit media content, in particular for AI-supported improvement and editing of videos and images. When using Tensorpix, personal data may be processed, in particular if users provide us with media or other data for processing.
Data processing by Tensorpix:
Tensorpix is operated by Tensorpix d.o.o., a company based in Croatia. When using this software, data, including uploaded media and metadata, can be transferred to TensorPixd.o.o. servers and processed there. This may also mean a transfer of personal data to a third country outside the EU/EEA. Tensorpix d.o.o. may be required to share data with authorities.
Affected data:
• Real estate pictures
Affected persons:
users of our software
Processing purpose:
The processing is carried out for the purpose of AI-supported improvement and editing of videos and images.
legal basis:
This processing is carried out on the basis of Article 6 (1) (f) GDPR (legitimate interest in efficient and innovative media processing) or — if consent is required — on the basis of Article 6 (1) (a) GDPR.
Service provider: Tensorpix d.o.o., Slavonska Avenija 6, 10000 Zagreb, Croatia
Internet site: https://tensorpix.ai/Privacy Policy: https://tensorpix.ai/privacy-policy
Google cloud services
We use Google Cloud Platform services, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, to provide our software and its functionalities. Our software is operated via the Google Cloud, which means that data required to operate and use the software is stored and processed on Google's servers.
Personal data may be processed, in particular when users use our software and submit data or media to us for processing. Processing is carried out in compliance with applicable data protection regulations and the data is used exclusively for the contractually agreed purposes.
Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Web site: https://cloud.google.com/
Privacy Policy: https://www.google.com/policies/privacy
Form services
We provide you with online forms that you can use to contact us or submit information. An online form is used for the structured entry and transmission of data via the Internet.
If you use our forms, we collect your access data. This includes in particular the IP address of the requesting device, the date and time of the request and your identification number. We also save the content you have entered via the form and, if necessary, log your declaration of consent. We use this data to communicate with you, answer your inquiries and provide any content or services you have requested.
The service provider (s) mentioned below has/have the option to access the metadata of the form usage. This includes in particular the time and (depending on the settings) location of the form submission, the device you use and the type of data transmitted. Access to this metadata by the service provider is usually to optimize the service or for security reasons. In addition, the service provider may use it for marketing purposes. You can find out more about this in the service provider's privacy policy, which we have linked below.
We would like to point out that, depending on the country of residence of the provider mentioned below, the data collected via their platform may be transferred and processed outside the area of the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights will not be possible or may only be difficult.
Affected data:
• Inventory and contact details (e.g. name, telephone number, email address)
• Content data (e.g. text entries in form fields)
• Usage data (e.g. access times, interaction with the form)
• Communication data (e.g. IP address, device used)
• Pictures (photos of real estate, logos)
Processing purpose:
• Communication and processing of inquiries
• Provision of requested content or services
• Marketing
legal basis:
If we have asked you for your consent before using a form, this is the legal basis in accordance with Article 6 (1) (a) GDPR. We will not share your contact details with third parties without your consent.
If the form is submitted as part of a contract initiation or an existing contractual relationship, the processing is based on Art. 6 para. 1 lit. b GDPR.
In addition, we rely on our legitimate interest in efficient communication and processing of inquiries in accordance with Art. 6 para. 1 lit. f DSGVO.
Objection options:
You can withdraw the consent you have given us to use the form service at any time. You can also object to the processing of your data via the forms we use at any time.
We use the following form services:
Elfsight
Service provider: Elfsight, Paronyana str 19/3, 201, Yerevan 0015, Armenia
Web site: https://elfsight.com/de/
Privacy Policy: https://elfsight.com/privacy-policy/
Online advertising
We use services to display Internet advertising. The services we use collect certain user data through a cookie or pixel. In particular, this includes information from which website you came to our website (so-called referrer), which pages of our website you accessed, how long you visited our pages and what interactions you made there. In addition, data is collected about the browser, computer system and type of device you use. In addition, demographic information, such as age or gender, can also be collected as pseudonymous values via such a service. If you have consented to the collection of your location data, depending on the provider, this may also be processed. In order to collect and store this data, the respective service places a cookie or a so-called tracking pixel on the device you are using, which is also used to collect the IP address associated with you. However, this is abbreviated using a so-called IP masking process so that the IP address can no longer be assigned to your visit to our website. In principle, no clear data such as names or email addresses is stored when using the respective service. This is only the case if you are a member of a social network that offers one of the services listed below and combines your profile with the aforementioned data material.
The data is evaluated by the service we use in order to produce a report with statistical statements about the number of visitors generated through advertising and the success of the advertising campaign. The reports include the total number of users who were redirected to our website via our ads. In addition, the reports include information about the users' devices and browsers, at which locations the users were located, at what times the ad was clicked. However, the reports do not contain any information that would personally identify you as a user of our site.
We would like to point out that, depending on the location of the service provider, the data collected via the service may be transferred and processed outside the area of the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights will not be possible or may only be difficult.
Affected data:
• Usage data (e.g. access times, websites clicked on)
• Communication data (e.g. information about the device used, IP address)
Affected persons: Users of our online offerings
Processing purpose: Reach measurement, campaign success monitoring, remarketing and interest-based and behavioural marketing
legal basis: If we have asked you for your consent before using the respective service, this is the legal basis, Art. 6 para. 1 lit. a GDPR. In addition, we use the respective service based on our legitimate interest in directing visitor flows to our website, analyzing these visitor flows in order to be able to continuously improve the functions, offers and user experience, Art. 6 para. 1 lit. f DSGVO.
We use the following service providers for online advertising:
Bing Ads
Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Headquarters in Germany: Microsoft Germany GmbH, Walter-Gropius-Straße 5, 80807 Munich
Web site: https://ads.microsoft.com/
Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement
Facebook Pixel
Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Based in Europe: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Web site: https://www.facebook.com
Privacy Policy: https://www.facebook.com/about/privacy
Opt-out option: https://www.facebook.com/settings?tab=ads
We also use the “extended reconciliation” feature. In doing so, your personal data is transmitted to Facebook in encrypted form.
We also use the “Custom Audiences from File” process. As a recipient of the newsletter, your email address will be uploaded to Facebook in encrypted form. This helps us to determine the recipient of our Facebook ads and to ensure that the ads are only shown to interested parties.
Google AdSense
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Based in Europe: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Web site: https://www.google.com/intl/de_de/adsense/start/
Privacy Policy: http://www.google.de/intl/de/policies/privacy
Google Ads
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Based in Europe: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Web site: https://ads.google.com/home/
Privacy Policy: http://www.google.de/intl/de/policies/privacy
newsletters
We send out a newsletter at regular intervals to inform our customers and business partners and interested parties about our offers and related news. You have the option of signing up for our newsletter on our website and, by signing up, to consent to receive the newsletter. When you subscribe to our newsletter, it is mandatory to provide your email address. We save the email address so that we can send you the newsletter. The provision of further data, such as title or name, is voluntary and is used to be able to address you personally. As soon as you subscribe to our newsletter, you will receive a confirmation email to the email address you provided when signing up in a so-called double opt-in process. There is a link in this email. By clicking on this link, you confirm that you would like to receive the newsletter. This ensures that your email address was not misused by a third party when you signed up. For the same reason, we save the date and time of registration and the IP address assigned to you when you logged in. We do not share the above data with third parties.
Evaluation of user behavior
If you have consented to this, we will evaluate your user behavior when sending the newsletter. For this purpose, our newsletter contains tracking pixels and tracking links. This allows us to see whether and when you opened the newsletter and whether and which links you clicked on in the newsletter.
purpose: We evaluate the newsletter as described above in order to be able to measure a statistical evaluation of the success or failure of our newsletter.
legal basis: The legal basis for processing your data is Article 6 (1) (a) GDPR.
Prevention: You can withdraw your consent to receive the newsletter at any time using the options given above.
Deletion: We will delete your data after you have withdrawn your consent.
Affected data:
• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked on)
• Communication data (e.g. information about the device used, IP address)
Affected persons: users of our website
Processing purpose: Play our Internet pages, ensure the operation of our Internet pages
legal basis: Consent, Art. 6 para. 1 lit. a DSGVO, legitimate interest, Art. 6 para. 1 lit. f GDPR
Deletion: The email address will be deleted either if you have not clicked on the confirmation link 1 month after sending the confirmation email in the double opt-in procedure or immediately after you have unsubscribed from our newsletter.
Withdrawal: You can withdraw your consent to receive the newsletter at any time and unsubscribe from the newsletter. We offer the following options for you to declare your withdrawal:
• Click on the link provided in the newsletter
Advertising by e-mail, post or telephone
We process personal data for our promotional communication via e-mail, post or telephone. You can object to receiving our advertising measures at any time or withdraw your previously given consent to receive our promotional communication at any time. In order to be able to prove that your consent was available even after your objection or revocation in case of doubt, we can store your data for up to 4 years after your objection/revocation. After your objection/revocation, we will no longer use your data for further purposes. If you want us to delete your data beforehand, we will do so after you have confirmed to us that you have originally given us consent.
Affected data:
• Contact details (e.g. email, telephone number, postal address)
• Inventory data (e.g. names, addresses)
Affected persons: Communication partner
Processing purpose: Direct advertising measures (marketing) via e-mail, post or telephone
legal basis: Consent, Art. 6 para. 1 lit. a DSGVO, legitimate interest, Art. 6 para. 1 lit. f GDPR
Web analysis and statistics
We use web analysis services to record and statistically evaluate visitor flows on our website. Among other things, such services collect data about which website you came to our website from (so-called referrers), which pages of our website you accessed, how long you visited our pages and what interactions you made there. In addition, data is collected about the browser, computer system and type of device you use. In addition, demographic information, such as age or gender, can also be collected as pseudonymous values via such a service. If you have consented to the collection of your location data, depending on the provider, this may also be processed.
In order to collect and store this data, the web analysis service we use usually places a cookie on the device you are using, which is also used to collect the IP address associated with you. However, this is abbreviated using a so-called IP masking process so that the IP address can no longer be assigned to your visit to our website. Otherwise, no clear data such as names or email addresses is stored. Neither we nor the service we use know the identity of visitors to our websites.
However, when collecting data, the service provider can create pseudonymous usage profiles with information from the use of various devices through the use of cookies.
We would like to point out that, depending on the country of residence of the service provider mentioned below, the data collected via the service may be transferred and processed outside the area of the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights will not be possible or may only be difficult.
Affected data:
• Usage data (e.g. access times, websites clicked on)
• Communication data (e.g. information about the device used, IP address).
Affected persons: Users of our online offerings
Processing purpose: Reach measurement, campaign success monitoring, remarketing and interest-based and behavioural marketing
legal basis: If we have asked you for your consent before using the respective service, this is the legal basis, Art. 6 para. 1 lit. a GDPR. In addition, we use the respective service on the basis of our legitimate interest in analyzing the flow of visitors to our websites in order to be able to continuously improve the functions, offers and user experience, Art. 6 para. 1 lit. f DSGVO.
We use the following web analysis services:
Google Analytics 4
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Web site: https://marketingplatform.google.com/intl/de/about/analytics/
Privacy Policy: https://policies.google.com/privacy?hl=de
Note on data transfer to Google Analytics servers: When you visit our website within the EU (based on the geographical location according to the IP address), the IP address assigned to you is collected exclusively via servers in the EU and used as a geolocation date and is then immediately deleted. It is neither logged nor used in any other way. The other measurement data is then forwarded to Google Analytics servers to be evaluated there.
Opt-out option: If you do not want your data to be used by Google Analytics, you can set a so-called opt-out plugin, which will prevent data from being collected from you on our website in the future. You can get this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de
Google Universal Analytics
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Web site: https://marketingplatform.google.com/intl/de/about/analytics/
Privacy Policy: https://policies.google.com/privacy?hl=de
Cross-device tracking: With cross-device tracking, a user ID can be used to evaluate not only the data from the websites you visit, but also data from other devices and recognize the user on the other device. The user ID is assigned by us. It serves as a pseudonym. Identification of the Internet user is excluded here.
Opt-out option: If you do not want your data to be used by Google Analytics, you can set a so-called opt-out plugin, which will prevent data from being collected from you on our website in the future. You can get this plugin here: https://tools.google.com/dlpage/gaoptout?hl=de
Microsoft Clarity
Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Web site: https://clarity.microsoft.com/
Privacy Policy: https://privacy.microsoft.com/de-de/privacystatement
Note on data transfer to Microsoft servers:
When using Microsoft Clarity, data such as mouse movements, click behavior and scrolling on our website is recorded in order to improve the usability of our website. The collected data can be transferred to servers in the USA and stored there. Microsoft uses the data exclusively for analytical purposes and provides us with aggregated reports. Identification of individual users is ruled out, as the data is processed anonymously.
Opt-out options:
If you do not want Microsoft Clarity to collect your data, you can prevent the collection by activating the “Do Not Track” setting in your browser. Alternatively, you can use tools or browser extensions to block collection.
Our online presence on social networks
We operate online presences within the social networks listed below. If you visit one of these sites, the data listed in more detail below will be collected and processed by the respective provider. As a rule, this data is collected for advertising and market research purposes and user profiles are thus created. Data can be stored in user profiles regardless of the device you are using. This is particularly the case if you are a member of the respective platform and logged in to it. The user profiles can be used by providers to display interest-based advertising to you. You have a right of withdrawal against the creation of user profiles. To exercise this, you must contact the respective provider.
If you have an account with one of the providers listed below and are logged in there when you visit our website, the respective provider can collect data about your usage behavior on our website. To prevent such linking of your data, you can log out of the provider's service before visiting our site.
For what purpose and to what extent data is collected by the provider, you can find out in the respective data protection declarations of the providers provided below.
We would like to point out that, depending on the country of residence of the provider mentioned below, the data collected via their platform may be transferred and processed outside the area of the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights will not be possible or may only be difficult.
Affected data:
• Inventory and contact data (e.g. name, address, telephone number, email address)
• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked on)
• Communication data (e.g. information about the device used, IP address).
Processing purpose: Communication and marketing, tracking and analysis of user behavior
legal basis: Consent, Art. 6 para. 1 lit. a DSGVO, legitimate interests Art. 6 para. 1 lit. f GDPR
Objection options: For the respective options for objection (opt-out), we refer to the information provided by the providers linked below.
We maintain online presences on the following social networks:
Service provider: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Headquarters in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Web site: https://www.facebook.com/
Privacy Policy: https://www.facebook.com/about/privacy/
Privacy policy for Facebook pages: https://www.facebook.com/legal/terms/information_about_page_insights_data
Service provider: Instagram Inc., 1601 Willow Road, Menlo Park CA 94025, USA
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Headquarters in the EU: Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
Web site: https://www.instagram.com/
Privacy Policy: http://instagram.com/about/legal/privacy
linkedin
Service provider: LinkedIn Corporation, 1000 W Maude, Sunnyvale, CA 94085, USA
Based in Germany: LinkedIn, Hofstatt 4th Floor, Sendlinger Str. 12, 80331 Munich
Web site: https://www.linkedin.com/?trk=nav_logo
Privacy Policy: https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
TikTok
Service provider: musical.ly Inc., 10351 Santa Monica Boulevard #310, Los Angeles, 90025 California, USA
Headquarters in the EU: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
Web site: https://www.tiktok.com/de/
Privacy Policy: https://www.tiktok.com/de/privacy-policy
Service provider: WhatsApp Inc. 1601 Willow Road Menlo Park, California 94025, USA
Headquarters in the EU: Whatsapp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Web site: https://www.whatsapp.com/
Privacy Policy: https://www.whatsapp.com/legal/? eea=1 #privacy -policy
Messenger services
We communicate via messenger services. Messenger services are chat programs that can be used to send text messages, as well as image or video files, between users in real time over the Internet. In addition, messenger services can also be used to send emoticons, electronic greeting cards, and contacts. In order for messages to be transmitted, subscribers must be connected to each other directly or via a server using a computer program (called a client) via a network such as the Internet. As a rule, messages can also be sent when the interlocutor is not online - the message is then cached by the service server and delivered to the recipient later when the recipient can be reached again. Finally, these services can also be used for screen sharing and online games.
If the service uses end-to-end encryption for the content sent (texts, attachments), only the selected communication partners, but not third parties or the service provider itself, can view the message. We therefore recommend that you install updates to the service regularly to ensure that the content is encrypted. However, the service provider has the option to access communication metadata. This includes the time and (depending on your settings) location of communication as well as the device you are using.
We would like to point out that, depending on the country of residence of the provider mentioned below, the data collected via their platform may be transferred and processed outside the area of the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights will not be possible or may only be difficult.
Affected data:
• Inventory and contact data (e.g. name, telephone number, email address)
• Content data (e.g. posts, photos, videos)
• Usage data (e.g. access times, websites clicked on)
• Communication data (e.g. information about the device used, IP address).
Processing purpose: Communications and marketing
legal basis: If we have asked you for your consent before using the respective service, this is the legal basis, Art. 6 para. 1 lit. a GDPR. In this respect, we make it clear that we will not transfer your contact details to the service provider for the first time without your consent. If we communicate with you via one of the following services as part of a contract initiation or as part of an existing contractual relationship, the legal basis is the fulfilment or preparation of the contract, Art. 6 para. 1 lit. b GDPR. In addition, we rely on our legitimate interests in fast and efficient communication and meeting the needs of our communication partners in communicating the following services, Art. 6 para. 1 lit. f DSGVO.
Objection options: You can withdraw the consent you have given us to use the service listed below at any time. You can also object to communication via the messenger service at any time.
We use the following messenger services:
whatsapp
Service provider: WhatsApp Inc. 1601 Willow Road Menlo Park, California 94025, USA
Headquarters in the EU: Whatsapp Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Parent company: Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA
Web site: https://www.whatsapp.com/
Privacy Policy: https://www.whatsapp.com/legal/? eea=1 #privacy -policy
Chat services
We communicate via online chats and/or chatbots (hereinafter referred to as chat services). Online chat is the exchange of text messages over the Internet in real time. Chat bots are computer programs that are usually used on websites to automatically answer user questions or to display notifications to users.
If you use our chat services, we collect your access data. This includes in particular the IP address of the requesting device, the date and time of the request and your identification number. We also save the content of the communication carried out via the chat services. Finally, we log your registration and your declaration of consent. We use this data to be able to communicate with you via our chat services, to address you personally, to answer your inquiries and to transmit any requested content.
The service provider (s) mentioned below has/have the option to access the metadata of the communication. This includes the time and (depending on the settings) location of communication as well as the device you are using and the information who has communicated with whom. The service provider usually accesses the metadata to optimize the service or for security reasons. In addition, access can also be made by the service provider to use the data for marketing purposes. You can find out more about this in the service provider's privacy policy, which we have linked below.
We would like to point out that, depending on the country of residence of the provider mentioned below, the data collected via their platform may be transferred and processed outside the area of the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights will not be possible or may only be difficult.
Affected data:
• Inventory and contact data (e.g. name, telephone number, email address)
• Content data (e.g. text inputs)
• Usage data (e.g. access times, interest in content)
• Communication data (e.g. information about the device used, IP address).
Processing purpose: Communications and marketing
Legal basis: If we have asked you for your consent before using the respective chat service, this is the legal basis, Art. 6 para. 1 lit. a GDPR. In this respect, we make it clear that we will not transfer your contact details to the service provider for the first time without your consent. If we communicate with you via one of the following services as part of a contract initiation or as part of an existing contractual relationship, the legal basis is the fulfilment or preparation of the contract, Art. 6 para. 1 lit. b GDPR. In addition, we rely on our legitimate interests in fast and efficient communication and meeting the needs of our communication partners in communicating the following services, Art. 6 para. 1 lit. f DSGVO.
Objection options: You can withdraw the consent you have given us to use the service listed below at any time. You can also object to the processing of your data via the chat service we use at any time.
We use the following chatbots and chat functions:
Elfsight
Service provider: Elfsight, Paronyana str 19/3, 201, Yerevan 0015, Armenia
Web site: https://elfsight.com/de/
Privacy Policy: https://elfsight.com/privacy-policy/
Online meetings, video conferencing, and screen sharing
We use offers from third-party providers to enable online meetings, conference calls via video and/or audio, and online seminars among employees as well as with interested parties or customers. If you communicate with us via such a service, the data collected in this communication process is processed both by us and by the third party provider. The data that may arise in such a communication process includes in particular your registration and contact details, contributions in the chat window, your video and audio contributions, and shared screen content. The data processed by the third-party provider we use primarily includes user data and metadata (e.g. IP address, computer system information). The third party providers usually process this data to verify and ensure the security of the service. In addition, findings from data processing should be used to optimize the third-party provider's offerings and carry out appropriate marketing measures. Please note the third-party provider's privacy policy in this regard.
We would like to point out that, depending on the country of residence of the service provider mentioned below, the data collected via the service may be transferred and processed outside the area of the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights will not be possible or may only be difficult.
Affected data:
• Inventory data (e.g. names, addresses)
• Contact details (e.g. email address, telephone number)
• Shared content (e.g. photos, videos, texts, audio recordings)
• User data (e.g. times of access, websites visited, interest in content)
• Meta and communication data (e.g. IP address, computer system information)
Affected persons: Interested parties, customers, communication partners
Processing purpose: Processing of contact requests, internal and external communication with employees as well as interested parties and customers, fulfillment of our contractual services, range of services
legal basis: Consent, Art. 6 para. 1 lit. a DSGVO, contract performance and pre-contractual inquiries, Art. 6 para. 1 lit. b GDPR, legitimate interest, Art. 6 para. 1 lit. f GDPR
Services we use:
Google Meet (formerly Google Hangout)
Services offered: video conferences, chats, instant messaging
Service provider: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
Parent company: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Web site: https://gsuite.google.com/intl/de/
Privacy Policy: https://policies.google.com/privacy?hl=de
Content services
We use certain services to be able to display certain content or graphics (videos, images, music, fonts, maps) via our website. The services we use process the IP address assigned to you at the time of your visit to our website, as this is the only way to display the respective content in the browser you are using. In addition, the providers of these services may set other cookies on your device, which collect information about your usage behavior, your interests, the device and browser you use, and the time and duration of your session. The providers regularly use this data for analysis, statistics and marketing purposes. In addition, this information can also be combined with information from other sources. This is especially true if you yourself have an account with the service provider and are logged in there at the time of the session.
We would like to point out that, depending on the country of residence of the service provider named below, the data specified in more detail below may be transferred and processed on servers outside the European Union. In this case, there is a risk that the level of data protection required by the GDPR will not be met and that the enforcement of your rights will not be possible or may only be difficult.
Affected data:
• Usage data (e.g. access times, websites clicked on)
• Communication data (e.g. information about the device used, IP address)
Affected persons: users of our website
Processing purpose: Playing our websites, offering content, ensuring the operation of our websites
legal basis: Consent via cookie consent banners, Art. 6 para. 1 lit. a GDPR, legitimate interests, Art. 6 para. 1 lit. f GDPR
We use the following content services:
Google Web Fonts
With Google Web Fonts, we can integrate fonts (web fonts) into the design of our website and output them correctly when displaying our websites in your browser. These web fonts are integrated by a server call to Google. From there, the compressed fonts are passed on to your browser and unpacked there. This server is regularly located in the USA. If you visit one of our pages on which we integrate Google Fonts, it will be transmitted to Google which of our websites you have visited.
Service provider: Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
Headquarters in the EU: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Web site: https://fonts.google.com/
Privacy Policy: https://policies.google.com/privacy
Safety measures
We also take state of the art technical and organizational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.
Timeliness and amendment of this privacy policy
This privacy policy is currently valid and was last updated in February 2025. Due to changes in legal or regulatory requirements, it may be necessary to adapt this privacy policy.
This privacy policy was created with the help of the SOS Recht privacy generator. SOS Recht is an offer from Müller.legal Rechtsanwälte Partnerschaft based in Berlin.