Privacy Policy
Information on Data Protection
With this data protection notice we inform you about our handling of your personal data and about your rights according to the European Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG). Responsible for data processing is retraced GmbH (hereinafter referred to as "we" or "us").
Content
1. Contact
2. Legal basis
3. Duration of storage
4. Categories of recipients of the data
5. Data transfer to third countries
6. Processing in the exercise of your rights
7. Your rights
8. Right of objection
9. Data Protection Officer
II. Data Processing on Our Website
1. Processing of server log files
2. Contact options and enquiries
3. Applications
4. Newsletter
5. Registration for webinars
6. Registration for Trainings
7. Download of whitepapers and other content
8. Cookies
9. Consent Management Tool
10. Analysis of our website
a. Google Analytics
b. Pinterest Tag
c. LinkedIn
d. Hotjar
e. HubSpot Analytics
f. Goodle Ads
g. Meta Pixel
h. Microsoft Ads
i. Snapchat Pixel
j. TikTok
k. Ad Roll
11. External media and third party services
a. Cloudflare
b. Shopify
c. Wix.com
d. Youtube
III. Data processing on our platform
1. Registration and login for customers
2. Server log files
3. Cookies
4. Analysis of our platform
a) Datadog
5. External media and third party services
a) Chat
b) imgix CDN
c) Cloudflare
d) Google reCAPTCHA
6. E-mail notifications
7. Processing on behalf
IV. Data processing on our social media pages
- Visit a social media page
- Communication via social media sites
V. Further data processing
- Contact by e-mail
- Customer and interested party data
- Use of the email address for marketing purposes
I. General Information
1. Contact
If you have any questions or suggestions about this information, or if you wish to contact us about asserting your rights, please send your request to
retraced GmbH
Kölner Straße 336a
40227 Düsseldorf, Germany
2. Legal Basis
The term "personal data" under data protection law refers to all information that relates to an identified or identifiable individual. We process personal data in compliance with the relevant data protection regulations, in particular the GDPR and the Federal Data Protection Act. Data processing by us only takes place on the basis of legal permission. We process personal data only with your consent (Section 25 para. 1 TDDDG or Art. 6 para. 1 lit. a GDPR), for the performance of a contract to which you are a party or at your request for the implementation of pre-contractual measures (Art. 6 para. 1. lit. b GDPR), for the fulfilment of a legal obligation (Art. 6 para. 1 lit. c GDPR) or where processing is necessary for the purposes of protecting our legitimate interests or the legitimate interests of a third party, except where such interests are overridden by your interests or fundamental rights and freedoms which require the protection of personal data (Art. 6 para. 1 lit. f GDPR).
If you apply for a vacant position in our company, we will also process your personal data for the purpose of deciding on the establishment of an employment relationship (§ 26 para. 1 s. 1 BDSG).
3. Duration of Storage
Unless stated otherwise in the following notes, we only store the data for as long as is necessary to achieve the processing purpose or to fulfil our contractual or legal obligations. Such legal retention obligations may arise in particular from commercial or tax law regulations. From the end of the calendar year in which the data was collected, we will retain such personal data contained in our accounting records for eight to ten years and retain personal data contained in commercial letters and contracts for six years. In addition, we will retain data in connection with consents requiring proof, as well as with complaints and claims for the duration of the statutory limitation periods. We will delete data stored for advertising purposes if you object to processing for this purpose.
4. Categories of Recipients of The Data
We use external service providers (processors) as part of the processing of your data. Processing operations carried out by such processors include, for example, hosting, emailing, provision and support of IT systems, customer and order management, accounting and billing, marketing activities or file and disk destruction. A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the data controller. Processors do not use the data for their own purposes but carry out data processing exclusively for the data controller and are contractually obliged to guarantee appropriate technical and organizational measures for data protection.
Furthermore, we are a global company with cross-border and cross-company teams. Therefore, data transfer to our subsidiary (Retraced S. de R.L. de C.V., a company based in Mexico) occurs.
In addition, we may transfer your personal data to bodies such as postal and delivery services, your house bank, tax consultancy/auditing firm or the tax authorities. Further recipients may result from the following information.
5. Data Transfer to Third Countries
Our data processing operations may involve the transfer of certain personal data to third countries, i.e. countries where the GDPR is not applicable law. Such a transfer takes place in a permissible manner if the European Commission has determined that an adequate level of data protection is required in such a third country. If such an adequacy decision by the European Commission does not exist, a transfer of personal data to a third country shall only take place if appropriate safeguards pursuant to Article 46 of the GDPR are in place or if one of the conditions of Article 49 of the GDPR is met.
Unless otherwise stated below, we use the EU standard data protection clauses as appropriate safeguards for transfers of personal data to third countries. You have the possibility to obtain a copy of these EU standard data protection clauses or to inspect them. To do so, please contact us at the address given under Contact.
If you consent to the transfer of personal data to third countries, the transfer is made on the legal basis of Art. 49 para. 1 lit. a GDPR.
6. Processing in The Exercise of Your Rights
If you exercise your rights in accordance with Articles 15 to 22 of the GDPR, we will process the personal data provided for the purpose of implementing these rights by us and to be able to provide evidence of this. We will only process data stored for the purpose of providing information and preparing it for this purpose and for the purpose of data protection control and otherwise restrict processing in accordance with Art. 18 GDPR.
These processing operations are based on the legal basis of Art. 6 para. 1 lit. c GDPR in conjunction with. Art. 15 to 22 GDPR and § 34 para. 2 BDSG.
7. Your Rights
As a data subject, you have the right to assert your data subject rights against us. In particular, you have the following rights:
- In accordance with Art. 15 GDPR and § 34 BDSG, you have the right to request information as to whether and, if so, to what extent we are processing personal data relating to you or not.
- You have the right to demand that we correct your data in accordance with Art. 16 GDPR.
- You have the right to demand that we delete your personal data in accordance with Art. 17 GDPR and § 35 BDSG.
- You have the right to have the processing of your personal data restricted in accordance with Art. 18 GDPR.
- You have the right, in accordance with Art. 20 GDPR, to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format and to transfer this data to another controller.
- If you have given us separate consent to data processing, you may revoke this consent at any time in accordance with Art. 7 para. 3 GDPR. Such a revocation does not affect the lawfulness of the processing that was carried out on the basis of the consent until the revocation.
- If you are of the opinion that a processing of personal data concerning you violates the provisions of the GDPR, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77 GDPR.
8. Right of Objection
In accordance with Article 21 para. 1 GDPR, you have the right to object to processing based on the legal basis of Article 6 para. 1 lit. e) or f) of the GDPR on grounds relating to your particular situation. If we process personal data about you for the purpose of direct marketing, you may object to this processing pursuant to Article 21 para. 2 and 3 of the GDPR.
9. Data Protection Officer
You can reach our data protection officer at the following contact details:
Herting Oberbeck Datenschutz GmbH
Hallerstr. 76, 20146 Hamburg
II. Data Processing on Our Website
When you use the website, we collect information that you provide yourself. In addition, during your visit to the website, we automatically collect certain information about your use of the website. In data protection law, the IP address is also generally considered to be a personal data. An IP address is assigned to every device connected to the Internet by the Internet provider so that it can send and receive data.
1. Processing of Server Log Files
During the purely informative use of our website, general information that your browser transmits to our server is initially stored automatically (i.e. not via registration). This includes by default: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code.
The processing is carried out to protect our legitimate interests and is based on the legal basis of Art.6 para 1 lit. f GDPR. This processing serves the technical administration and security of the website. The stored data is deleted after seven days at the latest, unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject from the stored information. Articles 15 to 22 of the GDPR therefore do not apply pursuant to Article 11 para. 2 of the GDPR unless you provide additional information that enables you to be identified in order to exercise your rights set out in these articles.
2. Contact Options and Enquiries
Our website contains contact forms that you can use to send us messages or directly book a demo for our product. The transfer of your data is encrypted (recognisable by the "https" in the address line of the browser). All data fields marked as mandatory are required to process your request. The provision of further data is voluntary. If you don’t want to use our electronic contact forms, you can send us a message via the contact e-mail.
We process your contact data for the purpose of answering your request and organizing a demo with one of our employees.
The legal basis for the data processing is Art. 6 para. 1 lit. f GDPR. We process the data on the basis of our legitimate interest in initiating and carrying out contractual relationships with our customers and in contacting persons making enquiries or booking a demo.
3. Applications
You have the option of applying via our website in the Careers section. For this purpose, we collect personal data from you, including in particular your name, CV, letter of application and other content provided by you. For the selection of our applications, we use the service provider Teamtailor, Teamtailor AB (Sweden), which is solely bound by instructions for us in accordance with the legal requirements for order processing.
Your personal application data will only be processed for purposes related to your interest in current or future employment with us and the processing of your application. Your application will only be processed and noted by the relevant contacts at our company.
All employees entrusted with data processing are obliged to maintain the confidentiality of your data. If we are unable to offer you employment, we will retain the data you have provided for up to six months after the end of the application process for the purpose of answering questions relating to your application and rejection. This does not apply if legal provisions prevent deletion, if further storage is necessary for the purpose of providing evidence or if you have expressly consented to longer storage.
The legal basis for data processing is Section 26 para. 1 sent. 1 BDSG in conjunction with Article 6 para. 1 lit. b GDPR.
If we retain your applicant data for longer than six months and you have expressly consented to this, we would like to point out that this consent can be freely withdrawn at any time in accordance with Art. 7 para. 3 GDPR. Such a withdrawal does not affect the lawfulness of the processing that was carried out on the basis of the consent until the withdrawal.
Teamtailor may store information on your device or access information that has already been stored on your device when accessing our career pages. This is necessary to maintain a secure career page and application form. Legal basis for those purposes is Sec. 25 para. 2 no. 2 TDDDG and, if personal data is processed, our legitimate interest in the above-mentioned purposes following Art. 6 para. 1 lit. f GDPR. Further storage of or access to stored information on your device for other purposes will only take place with your prior consent following Sec. 25 para. 1 TDDDG and, if personal data is processed, Art. 6 para. 1 lit. a GDPR.
4. Newsletter
We offer the possibility to register for our newsletter on our website. After registration, we will inform you regularly about the latest news on our offers. A valid e-mail address is required to register for the newsletter. To verify the e-mail address, you will first receive a registration e-mail, which you must confirm via a link (double opt-in). If you subscribe to the newsletter on our website, we process personal data such as your e-mail address and name on the basis of the consent you have given. The processing is based on the legal basis of Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with future effect, for example via the "unsubscribe" link in the newsletter or by contacting us via the channels mentioned above. The legality of the data processing operations already carried out remains unaffected by the revocation.
When registering for the newsletter, we also store the IP address and the date and time of registration. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis results from our legal obligation to document your consent (Art. 6 para. 1 letter c in conjunction with Art. 7 para. 1 GDPR).
We also analyze the reading behavior and opening rates of our newsletter. We evaluate the data generated during the delivery and retrieval of our emails in aggregated and anonymized form (delivery rate, opening rate, click rates, unsubscribe rate, bounce rate, visits, completions) in order to measure the use and success of the emails. The legal basis for the analysis of our newsletter is Art. 6 para. 1 lit. f GDPR and the processing serves our legitimate interest in optimizing our newsletter. You can object to this at any time by contacting one of the above-mentioned contact channels.
On the other hand, we also evaluate the data generated when you retrieve and use these e-mails (time of opening, hyperlinks clicked on, documents downloaded) as well as movement data on downstream websites on a personal basis in connection with your e-mail address in order to send you individualized information in the future on this basis as well, which take your interests and needs into account in the best possible way. We use the anonymous and personal data collected to provide you with personalized content and individualized information in our promotional e-mails and downstream websites. The legal basis for data processing in the context of e-mails is Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future, for example via the "unsubscribe" link in the newsletter or by contacting us via the above-mentioned channels.
For the administration of the subscriptions, the dispatch of the newsletter and the analysis, we use the service HubSpot, of HubSpot Germany GmbH (Germany, EU). Your email address is therefore transmitted by us to the service provider. We also cannot exclude the possibility that the service provider may also process personal data in third countries. If you do not want your data to be processed by this service provider, you should not register for the newsletter or unsubscribe from it. Please note the information in the section "Data transfer to third countries".
5. Registration for Webinars
You can register for various live webinars and events on our website. For this purpose, it is necessary to provide your personal data. The data is collected via an input mask on our website. All data fields marked as mandatory are required for participation in the webinar. Failure to provide this data will result in us being unable to consider you for participation in the webinar. The provision of further data is voluntary.
The legal basis for the data processing is Art. 6 para. 1 lit. f GDPR. We process your personal data based on our legitimate interest in the proper implementation of the webinars. The personal data is used to provide you with the recording of the webinar and, if applicable, further interesting content following the webinar.
We may use the contact data provided during registration to inform you about our products and services in the future and to provide you with our newsletter. The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Section 7 para. 2 no. 3 UWG, which you may have given us as in the context of the registration. You can withdraw your consent at any time with effect for the future. To do so, you can unsubscribe by clicking on the unsubscribe link contained in every mailing. Further information regarding the data processing when registering and receiving our newsletter can be found above.
Live webinars and events will take place via Livestorm. Livestorm SAS (France) processes your personal registration and usage data on our behalf. Further information on data processing by Livestorm can be found at: Privacy Policy | Livestorm.
6. Registration for Users Trainings
We regularly offer user trainings via our website. These sessions are designed for users and each training focuses on specific features and functionalities of our platform. For this purpose, it is necessary to provide your personal data. The data is collected via an input mask on our website. All data fields marked as mandatory are required for participation in the training. Failure to provide this data will result in us being unable to consider you for participation in the training. The provision of further data is voluntary.
The legal basis for the data processing is Art. 6 para. 1 lit. f GDPR. We process your personal data based on our legitimate interest in the proper implementation of the trainings. The personal data is used to provide you with the recording of the training and, if applicable, further interesting content following the training.
The training will take place via Microsoft Teams. Microsoft Ireland Operations Limited (Ireland) processes your personal registration and usage data on our behalf. Further information on data processing by Microsoft Teams can be found at: Microsoft Privacy Statement
7. Download of whitepapers and other content
On our website, you will have the option of downloading our whitepapers and other content (e.g. access to recordings of previous events). This requires you to provide your personal data. The data is collected via an entry form on our website.
The legal basis for data processing is Art. 6 para. 1 lit. f GDPR. We process your personal data on the basis of our legitimate interest in providing the requested content.
We may use the contact data provided during registration to inform you about our products and services in the future and to provide you with our newsletter. The legal basis for this is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Section 7 para. 2 no. 3 UWG, which you may have given us as in the context of the download. You can withdraw your consent at any time with effect for the future. To do so, you can unsubscribe by clicking on the unsubscribe link contained in every mailing.
8. Cookies
We use cookies and similar technologies ("cookies") on our website. Cookies are small data sets that are stored by your browser when you visit a website. This identifies the browser you are using and can be recognized by web servers. You have full control over the use of cookies through your browser. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies in principle or for specific cases through your browser settings.
The use of cookies is partly technically necessary for the operation of our website and thus permissible without the consent of the user. In addition, we may use cookies to offer special functions and content as well as for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third party cookies). We only use such technically unnecessary cookies with your consent in accordance with Section 25 para. 1 Telecommunications and Telemedia Data Protection Act (“TDDDG ”) and, where applicable, Article 6 para lit. a GDPR. Information on the purposes, providers, technologies used, data stored and the storage period of individual cookies can be found in our Cookie Policy, which you can access at any time in the footer of our website.
9. Consent Management Tool
This website uses the consent management tool Consentmo of iSense Ltd.(Bulgaria, EU) to control cookies and the processing of personal data.
The consent banner enables users of our website to give their consent to certain data processing procedures or to revoke their consent. By confirming the "I accept" button or by saving individual cookie settings, you consent to the use of the associated cookies.
The legal basis under data protection law is your consent within the meaning of Art. 6 para 1 lit. a GDPR.
In addition, the banner helps us to provide evidence of the declaration of consent. For this purpose, we process information about the declaration of consent and further log data about this declaration. Cookies are also used to collect this data. The processing of this data is necessary in order to be able to prove that consent has been given. The legal basis results from our legal obligation to document your consent (Art. 6 para. 1 lit. c in conjunction with Art. 7 para. 1 GDPR).
You can revoke your consent for cookies at any time via the Consent Management Tool, which can be accessed in the footer of our website.
10. Analysis of our website, tracking and retargeting
a) Google Analytics
We use the Google Analytics service of the provider Google Ireland Limited (Ireland, EU) on our website.
Google Analytics is a web analytics service that allows us to collect and analyze data about the behavior of visitors to our website. Google Analytics uses cookies for this purpose, which enable an analysis of the use of our website. Personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about interaction with our website is processed.
Some of this data is information that is stored in the terminal device you are using. In addition, further information is also stored on your end device via the cookies used. Such storage of information by Google Analytics or access to information that is already stored in your end device only takes place with your consent.
Google Ireland will process the data collected in this way on our behalf in order to evaluate the use of our website by users, to compile reports on the activities within our website and to provide us with further services associated with the use of our website and the use of the internet. In doing so, pseudonymous user profiles of the users can be created from the processed data.
The setting of cookies and the further processing of personal data described here takes place with your consent. The legal basis for the data processing in connection with the Google Analytics service is therefore Art. 6 para. 1 lit. a GDPR. You can revoke this consent via our Consent Management Tool at any time with effect for the future.
The personal data processed on our behalf to provide Google Analytics may be transferred to any country in which Google Ireland or Google Ireland's sub-processors maintain facilities. Please refer to the information in the section "Data transfer to third countries".
We only use Google Analytics with IP anonymization activated. This means that the IP address of the user is shortened by Google Ireland within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The IP address transmitted by the user's browser is not merged with other data. Further information on the use of data for advertising purposes can be found in Google's privacy policy.
We use the Google Analytics 4 variant, which allows us to track interaction data from different devices and from different sessions. This allows us to put individual user actions in context and analyse long-term relationships.
The data is stored for a period of 14 months and then automatically deleted. The deletion of data whose storage period has expired takes place automatically once a month.
b) Pinterest Tag
We use the Pinterest tag from Pinterest Europe Limited (Ireland, EU) on our website. The Pinterest tag is a JavaScript code snippet that allows us to track the activities of visitors to our website. The Pinterest tag collects information about usage under joint responsibility by us and Pinterest Europe Limited and transmits it to Pinterest Europe.
With the help of the Pinterest tag, Pinterest is able to identify visitors to our online offering as a target group for the display of ads on the social media platform Pinterest (so-called “Pinterest ads”). Accordingly, we use the Pinterest tag to display the Pinterest ads we place only to those Pinterest users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, which are determined based on the websites visited) that we transmit to Pinterest. With the help of the Pinterest tag, we also want to ensure that our Pinterest ads correspond to the potential interests of users and do not appear intrusive. With the help of the Pinterest tag, we can also track the effectiveness of Pinterest ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Pinterest ad.
Your data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Cookies are set on your device to integrate the service. Cookies are set and information stored on your device is accessed with your consent, which you can revoke at any time with future effect via our consent management tool.
When using the service, the transfer of your data to the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries.” For more information on data protection at Pinterest Europe, please refer to the Pinterest Europe privacy policy.
c) LinkedIn
We use the LinkedIn Insight Tag, a marketing product from LinkedIn Ireland Unlimited Company (Ireland, EU), on our website. Information about LinkedIn Ireland's contact details and the contact details of LinkedIn Ireland's data protection officer can be found in LinkedIn's data policy.
The LinkedIn Insight Tag is a JavaScript code snippet that is triggered by LinkedIn when you visit our website and stores a cookie on your device. Such storage of information by the LinkedIn Insight Tag or access to information already stored on your device, as well as further processing of personal data in connection with the LinkedIn Insight Tag, will only take place with your consent. The legal basis for the collection and transfer of personal data by us to LinkedIn Ireland is therefore Art. 6 para. 1 lit. a GDPR.
The LinkedIn Insight Tag enables us to perform various functions, which we describe in detail below.
LinkedIn Conversion Tracking is an analysis function supported by the LinkedIn Insight Tag. The LinkedIn Insight Tag enables the collection of data on visits to our website, including URL, referrer URL, IP address, device and browser properties (user agent), and timestamp. IP addresses are truncated or (if used to reach members across devices) hashed. LinkedIn does not provide us with any personal data, but only provides reports (in which you are not identified) about the website audience and ad performance. This allows us to measure the effectiveness of LinkedIn ads for statistical and market research purposes.
Members' direct identifiers are removed by LinkedIn within seven days to pseudonymize the data. LinkedIn then deletes this remaining pseudonymized data within 180 days.
This processing is carried out for the purpose of obtaining information about our website audience and a report on the effectiveness of LinkedIn campaigns.
We also use the “Matched Audiences” service to target our advertising campaigns to specific audiences. LinkedIn Matched Audiences and related data integrations allow us to target advertising to specific audiences based on data we provide to LinkedIn (e.g., company lists, hashed contact information, device identifiers, or event data such as websites visited).
This processing is carried out for the purpose of marketing our offers through the targeted display of advertising.
We have entered into a joint controller agreement with LinkedIn, which specifies the distribution of data protection obligations between us and LinkedIn. You can view this agreement here.
Please note that, in accordance with LinkedIn's privacy policy, personal data is also processed by LinkedIn in the USA or other third countries. LinkedIn only transfers personal data to countries for which the European Commission has issued an adequacy decision in accordance with Art. 45 GDPR or on the basis of appropriate safeguards in accordance with Art. 46 GDPR.
d) Hotjar
We use the Hotjar service provided by Hotjar Ltd. (Malta, EU) on our website to analyze movements on our website using so-called “heat maps.” This allows us to see, for example, how far users scroll and which buttons they click on and how often. The tool also allows us to obtain feedback directly from website users. This provides us with valuable information that helps us make our website even faster and more user-friendly. Hotjar only allows us to track which buttons are clicked, the mouse path, how far users scroll, the screen size of the device, the device type, and browser information. We also receive information about your geographical location (country) and the preferred language for displaying our website. Areas of the website where personal data from you or third parties is displayed are automatically hidden by Hotjar and are therefore not traceable by the tool at any time.
Your data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Cookies are set on your device to integrate the service. Cookies are set and information stored on your device is accessed with your consent, which you can revoke at any time with future effect via our consent management tool. For more information on data protection at Hotjar, please refer to Hotjar's privacy policy.
e) HubSpot Analytics
We use the HubSpot service on our website, a service provided by HubSpot Germany GmbH (Germany, EU). HubSpot uses cookies and similar technologies that enable analysis of your use of our website. Personal data in the form of online identifiers (including cookie identifiers), IP addresses, and device identifiers are processed in this process. HubSpot will use this information on our behalf to evaluate the use of our online offering by users and to compile reports on the activities within our website. In doing so, usage profiles of users can be created from the processed data.
The processing of your data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Cookies are set on your device to integrate the service. Cookies are set with your consent, which you can revoke at any time with future effect via our consent management tool. When using the service, the transfer of your data to the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries.” For more information on data protection at HubSpot, please refer to HubSpot's privacy policy.
f) Google Ads
We use the online advertising program Google Ads from Google Ireland Limited (Ireland, EU) on our website, through which we place advertisements on the Google search engine. If you access our website via a Google ad, Google places a cookie on your device (“conversion cookie”). Each Google Ads customer is assigned a different conversion cookie, so that cookies cannot be tracked across the websites of different Ads customers. The information collected using the cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our Google ads. However, we do not receive any information that can be used to personally identify users.
Your data is processed on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
Cookies are set with your consent, which you can revoke at any time with future effect via the Consent Management Tool. When using the service, the transfer of your data to the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries.” For more information on data protection at Google, please refer to Google's privacy policy.
g) Meta Pixel
We use Meta Pixel, a Meta Business tool from Meta Platforms Ireland Limited (Ireland, EU), on our website. Information on the contact details of Meta Platforms Ireland Ltd. and the contact details of the data protection officer of Meta Platforms Ireland Ltd. can be found in the privacy policy of Meta Platforms Ireland Ltd.
Meta Pixel is a JavaScript code snippet that allows us to track the activities of visitors to our website. This tracking is called conversion tracking. Meta Pixel collects and processes different information (known as event data) for this purpose:
- Information about the actions and activities of visitors to our website, such as searching for and viewing a product or purchasing a product;
- Specific pixel information such as the pixel ID and the Facebook cookie;
- Information about buttons clicked by visitors to the website;
- Information contained in HTTP headers, such as IP addresses, information about the web browser, the location of the page, and the referrer;
- Information about the status of deactivation/restriction of ad tracking.
Some of this event data is information stored on your device. In addition, cookies are also used via the Meta Pixel to store information on your device. Such storage of information by the Meta Pixel or access to information already stored on your device will only take place with your consent in accordance with Section 25 para. 1 TDDDG.
The event data collected via the Meta pixel is used to target our advertisements and improve ad delivery on Meta products such as the social media platforms Facebook and Instagram, to personalize features and content, and to improve and secure Meta products. For this purpose, the event data collected on our website using the Meta pixel is transmitted to Meta Platforms Ireland Ltd. This collection and transmission of event data is carried out by us and Meta Platforms Ireland Ltd. as joint controllers. We have entered into an agreement with Meta Platforms Ireland Ltd. on processing as joint controllers, which specifies the distribution of data protection obligations between us and Meta Platforms Ireland Ltd. In this agreement, we and Meta Platforms Ireland Ltd. have agreed, among other things,
- that we are responsible for providing you with all information pursuant to Articles 13 and 14 of the GDPR regarding the joint processing of personal data;
- that Meta Platforms Ireland Ltd. is responsible for enabling the rights of data subjects pursuant to Articles 15 to 20 of the GDPR with regard to the personal data stored by Meta Platforms Ireland Ltd. after joint processing.
You can access the agreement concluded between us and Meta Platforms Ireland Ltd. here.
Meta Platforms Ireland Ltd. is solely responsible for the processing of the transmitted event data following the transfer.
For more information on how Meta Platforms Ireland Ltd. processes personal data, including the legal basis on which Meta Platforms Ireland Ltd. relies and the options for exercising your rights vis-à-vis Meta Platforms Ireland Ltd., please refer to Meta Platforms Ireland Ltd.'s data policy.
We have also commissioned Meta Platforms Ireland Ltd. to prepare reports on the effectiveness of our advertising campaigns and other online content (campaign reports) based on the event data collected via the Meta pixel, and to provide analyses and insights about users and their use of our website, products, and services (analyses). For this purpose, we transfer personal data contained in the event data to Meta Platforms Ireland Ltd. The transferred personal data is processed by Meta Platforms Ireland Ltd. as our processor in order to provide us with the campaign reports and analyses.
We only collect and transfer personal data to Meta Platforms Ireland Ltd. and commission Meta Platforms Ireland Ltd. to process personal data for the purpose of creating analyses and campaign reports if you have given your prior consent. The legal basis for the processing of personal data is therefore Art. 6 para. 1 lit. a GDPR.
h) Microsoft Ads
We use the Microsoft Advertising service from Microsoft Ireland Operations Limited (Ireland, EU) on our website. Microsoft Advertising is an online marketing service that uses the Universal Event Tracking (UET) tool to help us display targeted ads on the Microsoft Bing, Yahoo, and AOL search engines, other search partners (e.g., Ecosia, DuckDuckGo), and the Microsoft Audience Network. Microsoft Advertising uses cookies for this purpose.
Microsoft Advertising collects data via UET that we can use to track target groups using remarketing lists. To do this, a cookie is stored on the device used when visiting our website. Microsoft Advertising can thus recognize that our website has been visited and display an advertisement when the above-mentioned services are used at a later date.
The information is also used to generate conversion statistics, i.e., to record how many users have visited our website after clicking on an ad. This tells us the total number of users who clicked on our ad and were redirected to our website. However, we do not receive any information that can be used to personally identify users.
Your data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Cookies are set with your consent, which you can revoke at any time with future effect using our consent management tool. When using the service, the transfer of your data to the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries”. For more information on data protection at Microsoft, please refer to Microsoft's privacy policy.
i) Snapchat Pixel
We use Snap Pixel from Snap Group Limited (UK) on our website. Snap Pixel enables us to target visitors to our website with advertisements on the social media platform Snapchat (known as “Snapchat Ads”). Accordingly, we use the Snap Pixel to display the Snapchat Ads we place only to those Snapchat users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, which are determined based on the websites visited) that we transmit to Snapchat.
With the help of the Snapchat Pixel, we also want to ensure that our Snapchat Ads correspond to the potential interests of users and do not appear intrusive. With the help of the Snapchat pixel, we can also track the effectiveness of Snapchat ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Snapchat ad.
Your data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR.
Cookies are set on your device to integrate the service. Cookies are set and information stored on your device is accessed with your consent, which you can revoke at any time with future effect via our consent management tool. When using the service, the transfer of your data to the United Kingdom cannot be ruled out. We base the transfer of data to the United Kingdom on the adequacy decision of the European Commission pursuant to Art. 45 GDPR. Further information on data protection at Snap Group Limited can be found in the data protection information of Snap Group Limited.
j) TikTok
We use TikTok Pixel on our website. TikTok Pixel is a TikTok advertising tool provided by two companies, TikTok Technology Limited (Ireland, EU) and TikTok Information Technologies UK Limited (UK) (both referred to collectively as “TikTok” below).
The TikTok Pixel is a JavaScript code snippet that enables us to understand and track the activities of visitors to our website. To this end, the TikTok Pixel collects and processes information about visitors to our website or the devices they use (known as event data).
The event data collected via the TikTok Pixel is used to target our advertisements, improve ad delivery, and personalize advertising. For this purpose, the event data collected on our website using the TikTok Pixel is transmitted to TikTok.
Some of this event data is information stored on your device. In addition, TikTok Pixel also uses cookies to store information on your device. Such storage of information by TikTok Pixel or access to information already stored on your device only takes place with your consent. The legal basis for the collection and transfer of personal data by us to TikTok is therefore Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time via our consent management tool.
This collection and transfer of event data is carried out by us and TikTok as joint controllers. We have entered into an agreement with TikTok on processing as joint controllers, which specifies the distribution of data protection obligations between us and TikTok. In this agreement, we and TikTok have agreed, among other things,
- that we are responsible for providing you with all information pursuant to Art. 13, 14 GDPR on the joint processing of personal data;
- TikTok is responsible for enabling the rights of data subjects pursuant to Articles 15 to 20 GDPR with regard to the personal data stored by TikTok after joint processing.
You can access the agreement concluded between us and TikTok.
TikTok is solely responsible for the processing of the transmitted event data following the transfer. For more information on how TikTok processes personal data, including the legal basis on which TikTok relies and the options for exercising your rights against TikTok, please refer to TikTok's data policy.
k) AdRoll
We use AdRoll, a digital advertising service provided by NextRoll, Inc. (USA). AdRoll enables us to display interest-based and targeted advertisements to users who have previously visited our website when they browse other websites and online platforms that participate in advertising networks.
AdRoll uses cookies and similar tracking technologies to collect information about your browsing behavior on our website and across other websites. This information is used to deliver targeted advertisements that are relevant to your interests based on your previous interactions with our website, measure the effectiveness of advertising campaigns, limit the number of times you see a particular advertisement (frequency capping) as well as understand and improve the relevance of advertisements delivered to you.
When you visit our website, AdRoll may collect device information (such as IP address, browser type, operating system, and device identifiers), browsing data (including pages visited, time
spent on pages, referring URLs, and click behavior), ad interaction data (such as advertisements viewed, clicked, or otherwise interacted with) as well as cross-device data used to associate your activity across multiple browsers or devices
Legal basis for the usage of AdRoll is your consent (Art. 6 para. 1 lit. a GDPR, Sec. 25 para. 1 TDDDG). You may withdraw your consent at any time with effect for the future.
You also have several options to opt out of interest-based advertising delivered by AdRoll. Please refer to https://app.adroll.com/optout for further information.
NextRoll, Inc. is based in the United States. We have concluded the EU Standard Conctractual Clauses with NextRoll as an appropriate safeguard (Art. 46 para. 2 lit. c GDPR). When personal data is transferred to the USA or other third countries by NextRoll, NextRoll relies on appropriate safeguards in accordance with applicable data protection laws. For further information about how NextRoll collects, uses, and protects personal data, and about your rights regarding that data, please refer to NextRoll's Privacy Notice.
11. Other External Media and Third-Party Services
a) Cloudflare
We use the Cloudflare service of Cloudflare Inc. (USA) on our website to display content. For such an integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Cloudflare. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. Please note that this may result in functional restrictions on the website.
The processing of your data is based on Art. 6 para. 1 lit. f GDPR and is based on our legitimate interest in the optimization and economic operation of our website.
When using the service, a transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". For further information on data protection at Cloudflare, please refer to Cloudflare's privacy policy .
b) Shopify
We use the Shopify shop system for the purpose of hosting and displaying our website. Shopify is provided by the service provider Shopify International Limited (Ireland, EU). All data collected on our website is processed on our behalf on the servers of Shopify International Limited.
For the provision of the services, it is necessary that Shopify stores information on your device (e.g., via cookies) or accesses information that has already been stored in your device. As long as this is technically necessary to host the website, the legal basis for this processing is Section 25 para. 2 no. 2 TDDDG. If Shopify processes personal data for those purposes, legal basis is our legitimate interest to provide a technically stable and secure website following Art. 6 para. 1 lit. f GDPR. If Shopify stores information on your device or accesses information there for technically non-necessary purposes (e.g., tracking or analytics), this is only done with your prior consent following Sec. 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.
When using the service, the transfer of your data to countries outside the EU cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Shopify can be found in Shopify's privacy policy.
c) Wix.com
We use the website builder system provided by Wix.com Ltd. (Israel) to display and host our website. Insofar as this involves the processing of personal data relating to the use of our website, Wix.com Ltd. is our data processor. The processing of personal data takes place on servers operated by Wix.com Ltd.
For the provision of the services, it is necessary that Wix.com stores information on your device (e.g., via cookies) or accesses information that has already been stored in your device. As long as this is technically necessary to host the website, the legal basis for this processing is Section 25 para. 2 no. 2 TDDDG. If Wix.com processes personal data for those purposes, legal basis is our legitimate interest to provide a technically stable and secure website following Art. 6 para. 1 lit. f GDPR. If Wix.com stores information on your device or accesses information there for technically non-necessary purposes (e.g., tracking or analytics), this is only done with your prior consent following Sec. 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.
When using the service, the transfer of your data to Israel cannot be ruled out. We base the transfer of data to Israel on the adequacy decision of the European Commission pursuant to Art. 45 GDPR. For more information on data protection at Wix.com, please refer to the Wix.com privacy policy at: The privacy policy of Wix.com Ltd. can be found here.
d) YouTube
We use the YouTube service provided by Google Ireland Limited (Ireland, EU) on our website to embed videos. For such embedding, it is technically necessary to process your IP address so that the content can be sent to your browser. Your IP address is therefore transmitted to Google, and Google may set its own cookies.
Your data is processed on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR. Your consent is controlled by our consent management system and can be revoked at any time.
When using the service, the transfer of your data to the USA cannot be ruled out. Please note the information in the section “Data transfer to third countries.” For more information about data protection at Google, please refer to Google's privacy policy.
III. Data Processing on Our Platform
When you use our platform as a customer, we process your data that you provide to us as part of the service provision as described below.
1. Registration and Login For Customers
In order to make use of our offer as a customer and to be able to use certain functions of the website, registration via the website is required. The required information can be seen in the registration input mask. The provision of the information marked as mandatory is necessary to be able to make use of our offer. The data provided will be processed for the purpose of providing the service and processing the contract.
You have the option of registering on our platform using single sign-on. For this purpose, we use the WorkOS service of WorkOS, Inc (USA). If you decide to register using single sign-on, WorkOS processes the personal data required for registration. The retraced customer, i.e. the company for which you are working, can determine which personal data should be required for registration and login.
The processing is based on the legal basis of Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to establish and fulfil our service contract with our clients.
2. Server Log Files
When using our platform, general information that your browser transmits to our server is stored automatically (i.e. not via registration). This includes by default: browser type/version, operating system used, page accessed, the previously visited page (referrer URL), IP address, date and time of the server request and HTTP status code.
The processing is carried out to protect our legitimate interests and is based on the legal basis of Art. 6 Art. 1 lit. f GDPR. This processing serves the technical administration, provision and security of the platform. The stored data will be deleted after one year unless there is a justified suspicion of unlawful use based on concrete indications and further examination and processing of the information is necessary for this reason. We are not able to identify you as a data subject from the stored information. Articles 15 to 22 of the GDPR therefore do not apply pursuant to Article 11 para. 2 of the GDPR unless you provide additional information that enables you to be identified in order to exercise your rights set out in these articles.
3. Cookies
We use cookies and similar technologies ("cookies") on our platform. Cookies are small data sets that are stored by your browser when you visit a website. This identifies the browser used and can be recognised by web servers. You have full control over the use of cookies through your browser. You can delete the cookies in the security settings of your browser at any time. You can object to the use of cookies in principle or for specific cases through your browser settings.
The use of cookies is partly technically necessary for the operation of our platform and thus permissible without the consent of the user. In addition, we may use cookies to offer special functions and content as well as for analysis and marketing purposes. These may also include cookies from third-party providers (so-called third party cookies). We only use such technically unnecessary cookies with your consent in accordance with Section 25 para. 1 Telecommunications and Telemedia Data Protection Act (“TDDDG ”) and, where applicable, Article 6 para. 1 lit. a GDPR.
4. Analysis of Our Platform
a) Datadog
We use the DataDog service on our platform, a service of DataDog, Inc (USA). With the help of DataDog, we can monitor and analyse user behaviour on our platform. For this purpose, DataDog analyses the server log files generated on the platform. These contain, among other things, your IP address and information on user behaviour. The log files are kept for a period of 90 days and then deleted.
The legal basis is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to monitor and analyse user behaviour on our platform in order to continuously improve our product.
When using the service, a transfer of your data to the USA cannot be ruled out. Please also note the information in the section "Data transfer to third countries". Further information on data processing by DataDog can be found here.
5. External Media and Third-Party Services
a) Chat and customer support tools
We use the chat tool Intercom from the provider Intercom R&D Unlimited Company (Ireland/EU) on our platform. Intercom helps us manage, distribute, process, and subsequently document incoming requests.
If you send us enquiries via chat, your details from the chat process, including the contact data you provided there, are stored with us for the purpose of processing the enquiry and in the event of follow-up questions. Our chat function stores the IP addresses with the location of the users who compose messages.
All inquiries, including the personal data provided therein (e.g., your name, email address, problem description, or inquiry), are processed and stored using Intercom.
It is likely that you will first be contacted by an AI assistant who will attempt to answer your query based on our internal knowledge base. We ensure that you can always tell whether you are interacting with an AI assistant. We use Intercom's AI features to provide you with support that is available at all times, to increase the speed of responses, and thus to reduce the workload of our employees. Intercom is contractually obliged not to use the data entered into the AI system for training purposes. Furthermore, the inputs and outputs are not stored in the AI system, but are automatically deleted immediately after the request has been answered.
You have the option to directly rate the responses you receive from our support team and provide us with feedback on whether we were able to help you. We use this feedback to continuously develop and improve our support services.
The processing of your personal data serves our legitimate interest pursuant to Art. 6 (1) (f) GDPR in the optimization and economic operation of our customer support as well as the processing and documentation of data subject requests.
When using the Intercom chat on our platform, Intercom may store information on your device (e.g., via cookies) or access information that has already been stored in your device. However, the Intercom chat is only activated if you click on the chat button and actively decide to use this feature. Legal basis for the storage of or access to information on your device is Sec. 25 para. 2 no. 2 TDDDG. If personal data is processed in this course, legal basis is our legitimate interest in providing you with the requested service under Art. 6 para. 1 lit. f GDPR.
When using the service, your data may be transferred to the USA or other third countries. This transfer is based on adequacy decisions (Art. 45 GDPR). In addition, we have concluded appropriate safeguards with Intercom in accordance with Art. 46 GDPR (EU standard data protection clauses). Please also note the information in the section "Data transfer to third countries".
b) imgix CDN
We use the imgix service of Zebrafish Labs Inc. (USA) on our platform for the uniform display of images. When you call up a page, your browser loads the required images into its browser cache in order to display the images correctly. For this purpose, the browser you use must establish a connection to the servers of Zebrafish Labs Inc. This enables Zebrafish to know that our website has been accessed via your IP address.
Your data is processed on the basis of Art. 6 para. 1 lit. f GDPR and is based on our legitimate interest in the optimisation and economic operation of our platform.
When using the service, a transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". Further information on data protection at Zebrafish can be found in the Zebrafish data protection information here.
c) Cloudflare
We use the Cloudflare service of Cloudflare Inc. (USA) on our platform to display content. For such an integration, a processing of your IP address is technically necessary so that the content can be sent to your browser. Your IP address is therefore transmitted to Cloudflare. You can object to this data processing at any time via the settings of the browser used or certain browser extensions. Please note that this may result in functional restrictions on the website.
The processing of your data is based on Art. 6 para. 1 lit. f GDPR and is based on our legitimate interest in the optimisation and economic operation of our website.
When using the service, a transfer of your data to the USA cannot be ruled out. Please note the information in the section "Data transfer to third countries". For further information on data protection at Cloudflare, please refer to Cloudflare's data protection information here.
6. E-mail Notifications
We inform our customers of important changes and innovations to our platform by e-mail. This information serves the sole purpose of being able to guarantee the contractually owed service. The legal basis for sending these emails is Art. 6 para. 1 lit. f GDPR. The information is necessary for the performance of the contract.
We also analyse the reading behaviour and opening rates of these emails. The legal basis for the analysis of these emails is Art. 6 para. 1 lit. f GDPR and the processing serves our legitimate interest to know whether our customers have received the information. You can object to the analysis at any time by contacting one of the above-mentioned contact channels.
We use the service Simple Email Service (SES) of Amazon Web Services EMEA SARL (Luxembourg/EU) to manage subscribers, send and analyze these emails.
When using the service, a transfer of your data to the USA cannot be ruled out. Please also note the information in the section "Data transfer to third countries".
7. Joint Controllership
For certain data processing activities related to the operation and use of our platform, we are jointly responsible with our respective clients as joint controllers within the meaning of Art. 26 GDPR.
The joint controllership covers in particular the collection, storage and processing of customer and user data that occur in connection with the use of the platform and its functionalities.
Within this joint responsibility, we have defined our respective obligations with our clients as follows:
- Our client (e.g. your employer) is responsible, in particular, for deciding which data and whose data is initially loaded onto the platform as well as which data will initially be made available to whom within the platform.
- Retraced is responsible for the operation and technical provision of the platform, including hosting, platform design, and IT security. Furthermore, Retraced is allowed to decide how long the information uploaded and shared by the client will be retained and with which other parties this information will be shared.
Both parties (our client as well as Retraced) ensure that the data subjects can exercise their rights (e.g., access, rectification, erasure, restriction, data portability, and objection) under the GDPR both with and against each joint controller. We cooperate with our client to ensure that such rights are processed promptly and in accordance with the GDPR.
8. Processing on Behalf
In the context of the provision of services, it is also necessary for us to handle personal data as a processor within the meaning of Article 4 No. 8 of the GDPR, for which the client acts as a controller within the meaning of Article 4 No. 7 of the GDPR. Such processing activities contain the creation and management of platform access and registration for our clients’ users as well as sending invitations to the client’s business partners to participate in the platform. We conclude a Data Processing Agreement with our clients pursuant to Art. 28 GDPR.
IV. Data Processing on Our Social Media Pages
We are represented on several social media platforms with a company page. Through this, we would like to offer further opportunities for information about our company and for exchange. Our company has company pages on the following social media platforms :
- Facebook of Meta Platforms Ireland Limited, (Ireland, EU), hereinafter "Meta".
- Instagram of Meta Platforms Ireland Limited, (Ireland, EU), hereinafter "Meta".
- LinkedIn of LinkedIn Ireland Unlimited Company, (Ireland, EU), hereinafter "LinkedIn".
- XING of NEW WORK SE, (Germany, EU), hereinafter "XING".
When you visit or interact with a profile on a social media platform, personal data about you may be processed. Information associated with a social media profile in use also regularly constitutes personal data. This also covers messages and statements made while using the profile. In addition, during your visit to a social media profile, certain information is often automatically collected about it, which may also constitute personal data.
1. Visit a Social Media Page
When you visit our social media site, through which we present our company or individual products from our range, certain information about you is processed. The operators of the social media platforms are solely responsible for this processing of personal data. Further information on the processing of personal data can be found in their data protection declarations, which we link to below:
- Meta (https://www.facebook.com/privacy/explanation). Meta offers the possibility to object to certain data processing; information and opt-out options in this regard can be found at https://www.facebook.com/settings?tab=ads;
- LinkedIn (https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footerprivacy-policy)
- XING (https://privacy.xing.com/de/datenschutzerklaerung/druckversion)
The operators of the social media platforms collect and process event data and profile data and provide us with statistics and insights for our pages in anonymised form, which help us gain insights into the types of actions that people take on our page (so-called "page insights"). These page insights are created on the basis of certain information about individuals who have visited our site. This processing of personal data is carried out by the social media operators and us as joint controllers. The processing serves our legitimate interest to evaluate the types of actions taken on our site and to improve our site based on these insights. The legal basis for this processing is Art. 6 para. lit. f GDPR.
We cannot attribute the information obtained via page insights to individual user profiles interacting with our pages. We have entered into joint controller processing agreements with the operators of the social media platforms which set out the allocation of data protection obligations between us and the operators. For details about the processing of personal data to create page insights and the agreement entered into between us and the operators, please see the following links:
- Meta (https://www.facebook.com/legal/terms/information_about_page_insights_data);
- LinkedIn (https://legal.linkedin.com/pages-joint-controller-addendum;
- XING (https://www.xing.com/terms/onlyfy-one#h2-vereinbarung-zur-gemeinsamenhttps://www.xing.com/terms/onlyfy-onedatenschutzrechtlichen-verantwortlichkeit)
You also have the option of asserting your rights against the operators. You can find more information on this under the following links:
- Meta (https://www.facebook.com/privacy/explanation)
- LinkedIn (https://www.linkedin.com/help/linkedin/ask/PPQ?lang=de)
- XING (https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-siehttps://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machengeltend-machen)
We have agreed with Meta and LinkedIn that the Irish Data Protection Commission is the lead supervisory authority overseeing processing for Page Insights. You always have the right to lodge a complaint with the Irish Data Protection Commission (see www.dataprotection.ie) or any other supervisory authority.
2. Communication Via Social Media Sites
We also process information that you have provided to us via our company page on the respective social media platform. Such information may include the username used, contact details or a message sent to us. These processing operations are carried out by us as the sole data controller. We process this data on the basis of our legitimate interest to get in contact with inquiring persons. The legal basis for the data processing is Art. 6 para. 1 letter f GDPR. Further data processing may take place if you have consented (Art. 6 para. 1 lit. a GDPR) or if this is necessary for the fulfilment of a legal obligation (Art. 6 para. 1 lit. c GDPR).
V. Further data processing
1. Contact by Email
If you send us a message via the contact email provided, we will process the data submitted for the purpose of responding to your enquiry. We process this data on the basis of our legitimate interest in contacting enquirers.
The legal basis for the data processing is Art. 6 para. 1 lit. f GDPR.
2. Customer and Interested Party Data
If you contact our company as a customer or interested party, we process your data to the extent necessary to establish or implement the contractual relationship. This regularly includes the processing of the personal master, contract and payment data provided to us as well as contact and communication data of our contact persons at commercial customers and business partners. The legal basis for this processing is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the establishment and implementation of our service contracts.
We also process customer and interested party data for evaluation and marketing purposes. This processing is carried out on the legal basis of Art. 6 para. 1 lit. f GDPR and serves our interest in further developing our offer and informing you specifically about our offers.
Further data processing may take place if you have consented (Art. 6 para. 1 lit. a GDPR) or if this is necessary for the fulfilment of a legal obligation (Art. 6 para. 1 lit. c GDPR).
3. Use of the Email Address For Marketing Purposes
We may use the email address you provide at registration to contact you about our own similar products and services.
The legal basis is Art. 6 para. 1 lit. f GDPR in conjunction with. § Section 7 para. 3 Act Against Unfair Competition. You can object to this at any time without incurring any costs other than the transmission costs according to the basic rates. To do so, you can unsubscribe by clicking on the unsubscribe link contained in each mailing or by sending an e-mail to:
4. Contact at trade shows and industry events
We are represented at various events and trade fairs where we can get in touch with you. We use the service “Captello” from Captello, Inc. (USA) to efficiently record and manage your contact details. This service allows us to scan your business cards and automatically transfer your contact details to our CRM system.
The legal basis for data processing is our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR in storing the contact details you have shared with us in a secure and orderly manner and contacting you after the event regarding the topics discussed.
Your personal data may be transferred to third countries, e.g., the U.S. Please note the information in the section “Data transfer to third countries.” For more information about data protection at Google, please refer to Captello’s privacy policy.
Status: 12.02.2026