Privacy policy

Sect. 1 General

We will process your personal data (e.g. title, name, address, e-mail address, phone number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.

Sect. 2 Contact us

(1) Purpose of data processing

Your personal data you provide us by e-mail, contact form etc., will be processed to answer your inquiries. You are not obliged to provide us with your personal data but we would not be able to answer your inquiries sent by e-mail without your e-mail address.

(2) Legal basis

1. a) If your explicit consent is given for the processing of your data, the legal ground for this processing is set out in Art. 6 (1) (a) of the GDPR.
2. b) If your personal data is processed for the purpose of contract performance, the legal ground for this processing is set out in Art. 6 (1) (b) of the GDPR.
3. c) The legal ground for all other cases (especially when using a contact form) is set out in Art. 6 (1) (f) of the GDPR.

You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.

In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.

(3) Legitimate interest

Our legitimate interest in data processing is to communicate with you in a timely manner and to answer your queries cost-effectively. If you provide us with your address, we reserve the right to use it for direct postal marketing. You can protect your interest in data protection by transferring of data efficiently (e.g. using a pseudonym).

(4) Recipient categories

Provider of hosting, service provider for direct marketing

(5) Duration of storage

Your data will be deleted if it can be inferred from the circumstances that your queries or questions have been completely clarified.

However, if a contract is concluded, the data required by commercial and tax law will be retained by us for the periods as required by law, i.g. generally for ten years (cf. § 257 HGB, § 147 AO).

(6) Right of revocation

You have the right to revoke your consent for processing at any time in compliance with your consent.

 

§ 3 Information about Online Meeting

Online meetings, conference calls and webinars via ‘Microsoft Teams’
We use the ‘Microsoft Teams’ tool to hold telephone conferences, online meetings, video conferences and/or webinars (hereinafter: ‘online meetings’). ‘Microsoft Teams’ is a service provided by Microsoft Corporation, which is based in the USA.

If you access the ‘Microsoft Teams’ website, the provider of ‘Microsoft Teams’ is responsible for data processing. However, accessing the website is only necessary for the use of ‘Microsoft Teams’ in order to download the software for the use of ‘Microsoft Teams’.

If you do not want to or cannot use the ‘Microsoft Teams’ app, the basic functions can also be used via a browser version, which you can also find on the ‘Microsoft Teams’ website. After logging in, you may be asked to download the desktop app. In this case, click on the ‘Use the web app instead’ link to open Microsoft Teams in the browser.

Various types of data are processed when you use Microsoft Teams. The scope of the data also depends on the data you provide before or when participating in an ‘online meeting’.

The following personal data is processed:

• User details: first name, surname, telephone (optional), e-mail address, password, profile picture (optional),
  department (optional)
• Meeting metadata: Topic, description (optional), participant IP addresses, device/hardware information
• For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.
• When dialling in by telephone: details of the incoming and outgoing telephone number, country name, start and end time. If necessary, further connection data such as the IP address of the device can be saved.
• Text, audio and video data: You may have the option of using the chat, question or survey functions in an ‘online meeting’. In this respect, the text entries you make are processed in order to display them in the ‘online meeting’ and, if necessary, to log them. In order to enable the display of video and the playback of audio, the data from the microphone of your end device and from any video camera of the end device will be processed accordingly for the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time via the ‘Microsoft Teams’ applications

‘Microsoft Teams’ allows participation in Teams meetings via guest access via the web browser. Alternatively, you can sign in with your Microsoft account in the web browser or in the Microsoft desktop application. If you select guest access without account login, the name you enter for your participation in the Teams meeting will be processed. If you sign in with your Microsoft account, the account name and the associated proper name will be processed as personal data.

We use ‘Microsoft Teams’ to conduct ‘online meetings’. If we want to record ‘online meetings’, we will inform you transparently in advance and – if necessary – ask for your consent. The fact of the recording will also be displayed to you in the ‘Microsoft Teams’ app.

If it is necessary for the purpose of logging the results of an online meeting, we will log the chat content. However, this will not usually be the case.

In the case of webinars, we may also process the questions asked by webinar participants for the purposes of recording and following up on webinars.

If you are registered as a user with ‘Microsoft Teams’, reports on ‘online meetings’ (meeting metadata, telephone dialling data, questions and answers in webinars, survey function in webinars) can be stored for up to one month at ‘Microsoft Teams’.

Automated decision-making within the meaning of Art. 22 GDPR is not used.

Insofar as personal data of employees is processed by us, Section 26 BDSG is the legal basis for data processing. If, in connection with the use of ‘Microsoft Teams’, personal data is not required for the establishment, implementation or termination of the employment relationship, but is nevertheless an elementary component of the use of ‘Microsoft Teams’, Art. 6 para. 1 lit. f) GDPR is the legal basis for data processing. In these cases, we are interested in the effective organisation of online meetings.

Otherwise, the legal basis for data processing when organising ‘online meetings’ is Art. 6 para. 1 lit. b) GDPR, insofar as the meetings are held within the framework of contractual relationships.

If there is no contractual relationship, the legal basis is Art. 6 para. 1 lit. f) GDPR. Here too, our interest lies in the effective organisation of ‘online meetings’.

Personal data that is processed in connection with participation in ‘online meetings’ is generally not passed on to third parties unless it is intended to be passed on. Please note that content from ‘online meetings’, as with face-to-face meetings, is often used to communicate information with customers, interested parties or third parties and is therefore intended to be passed on.

The provider of ‘Microsoft Teams’ necessarily obtains knowledge of the above-mentioned data insofar as this is provided for in our order processing contract with ‘Microsoft Teams’.

‘Microsoft Teams’ is a service provided by a provider from the USA. Personal data is therefore also processed in a third country. We have concluded an order processing agreement with the provider of ‘Microsoft Teams’ that meets the requirements of Art. 28 GDPR.

An adequate level of data protection is guaranteed on the one hand by the conclusion of the so-called EU standard contractual clauses. As additional protective measures, we have also configured our Microsoft Teams in such a way that only data centres in the EU, the EEA or secure third countries such as Canada or Japan are used to conduct ‘online meetings’.

§ 4 Information about cookies

(1) Purpose of data processing

This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system and only serve the functionality of the website. Other cookies remain stored permanently and recognize your browser on your next visit to improve the usability of the website.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

You have expressly given your consent to the use of cookies on our website as follows:

I accept cookies

(3) Duration of storage

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored from a few minutes to several years.

(4) Right of revocation

If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website.

Your consent to persistent cookies can be withdrawn at any time by deleting the cookies in your browser settings.

Sect. 6 Your rights as a data subject

If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:

1. Right to information

You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.

2. Right to rectification

If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.

3. Right to erasure

You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.

4. Right to restriction of processing

You have the right to restrict the processing your personal data under Article 18 of the GDPR.

5. Right to data portability

You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

6. Right to revoke the consent given under data protection law

You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.

7. Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement ).

§ 5 Your rights as a data subject