The website is hosted on servers by a service provider commissioned by us.

Our service provider is:

• plusserver GmbH, Welserstraße 14, 51149 Köln
   

Further information can be found in the provider’s privacy policy: www.plusserver.com/datenschutzerklaerung/

The servers automatically collect and store information in so-called server log files, which your browser transmits automatically when you visit the website. The information stored is:

• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• Date and time of access
• Web pages accessed by the user’s system via our website
   

This data is not combined with other data sources. The collection of this data is based on Article 6(1)(f) of the GDPR. Our legitimate interest in processing this data is to ensure our website is displayed correctly and to optimise its functions.

The website’s server is physically located in Germany.

1. Description and scope of data processing

Every time our website is accessed, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected in this process:

• Information about the browser type and version used
• The user’s operating system
• The user’s internet service provider
• Date and time of access
• Websites from which the user’s system accesses our website
• Web pages accessed by the user’s system via our website

This data is stored in our system’s log files.

This data is not stored together with any other personal data relating to the user.
 

2. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. To this end, the user’s IP address must remain stored for the duration of the session.
 

The data is stored in log files to ensure the website functions properly. The data also helps us to optimise the website and ensure the security of our IT systems. The data is not analysed for marketing purposes in this context
 

3. Legal basis for data processing

The legal basis for the temporary storage of the data and log files is Article 6(1)(f) of the GDPR.
 

4. Duration of storage

The data is deleted as soon as it is no longer required to fulfil the purpose for which it was collected. In the case of data collected for the purpose of providing the website, this is the case once the relevant session has ended.

Where data is stored in log files, this occurs after seven days at the latest. Storage for a longer period is possible. In this case, users’ IP addresses are removed or anonymised so that it is no longer possible to identify the client making the request.
 

5. Right to object

The collection of data for the purpose of providing the website and the storage of data in log files is strictly necessary for the operation of the website. The user may object to this. Whether the objection is successful must be determined by weighing up the respective interests.

1. Description and scope of data processing

When you visit our website, we use technical tools for various functions, in particular cookies, which may be stored on your device. When you access our website, and at any time thereafter, you have the choice of whether to allow cookies in general or which specific additional functions you wish to select. You can make changes in your browser settings or via our Consent Manager. To do so, simply click on the fingerprint icon at the bottom left of the website. A pop-up will open where you can manage or withdraw your consents individually.

Cookies are text files that are stored on your hard drive and associated with the browser you are using, so that certain information can be sent to the party setting the cookie. Below, we describe the types of cookies we use:

We use technically necessary cookies, which are required for the technical structure of the website. Without these cookies, our website cannot be displayed (correctly in full) or the support functions will not work.

The following data is stored and transmitted by technically necessary cookies:

• Language settings
• Items in the shopping basket
• Log-in details
• Search terms entered
• Frequency of page views
• Use of website functions
   

We use cookies on our website that are not technically necessary. Text files that are not solely intended to ensure the functionality of the website, but also collect other data, are regarded as technically non-essential cookies.

The following data is processed when non-technically necessary cookies are set:

• IP address
• Location of internet users
• Date and time of the website visit
• Tracking of browsing behaviour
• Linking the website visit to other social media platforms
   

2. Purpose of data processing

The purpose of using technically necessary cookies is to ensure the functionality of our website. Some features of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised even after a page has been changed.

We require technically necessary cookies for the following applications:

• Applying language settings
• Website functionality
• Shopping basket
   

Non-technically necessary cookies are used to improve the quality of our website, its content and, consequently, our reach and cost-effectiveness. By setting these cookies, we learn how the website is used and can thus continuously optimise our offering. In particular, these cookies serve the following purposes:

Analytics and tracking cookies enable us to collect and analyse statistics on the usage behaviour of visitors to our online services, i.e. to measure reach and analyse usage for the purpose of website optimisation (tracking). They are not strictly necessary for the website’s core functions, and the tracking data may be linked to or shared with other data and services where applicable. By incorporating cookies that are not technically necessary, our aim is to be able to present visitors with various features (videos, chat function, etc.) on our website.

3. Legal basis for data processing

The provisions of the Act on Data Protection and the Protection of Privacy in Telecommunications and Digital Services (TDDDG) apply to the storage of information on the end user’s device and/or access to information already stored on the end user’s device. Where the setting and reading of cookies is technically necessary, this is done to ensure the functionality of our website. In this case, the storage of and access to cookies on your terminal equipment is carried out on the basis of Section 25(2)(2) of the TDDDG. This storage and access to the information on your terminal equipment serve to facilitate your use of our website and to enable us to offer you our services as you have requested. Some features of our website also do not work without the use of these cookies and could therefore not be provided. Cookies are generally deleted at the end of the session (e.g. when you log out or close your browser) or after a specified period has elapsed. Information on different retention periods for cookies can be found in the following sections of this privacy policy. 

Where cookies are used that are not technically necessary, this is done on the basis of your explicit consent, which you can give via the cookie banner. In this case, the legal basis for the storage of and access to information is Section 25(1) of the TDDDG in conjunction with Article 6(1)(a) and Article 7 of the GDPR. You may withdraw your consent at any time with future effect or re-grant it retrospectively by configuring your cookie settings accordingly. Alternatively, you can prevent the storage of cookies by adjusting the settings in your web browser. Please note that the browser settings you make only apply to the browser you are currently using. If personal data is processed following the storage of and access to the information on your device, the provisions of the GDPR apply. You can find further information on this in the following sections of this privacy policy.

4. Exercising your rights

You may withdraw your consent to the use of cookies at any time and manage your consent preferences via the following link: https://www.herma.com/

To do this, simply click on the fingerprint icon at the bottom left of the website. A dialogue box will open where you can manage or withdraw your consents individually.

As explained in this privacy policy, we use various service providers who help us to deliver our services and ensure the security of your data. When we use these service providers, it is necessary for us to share your personal data with them.

We have entered into agreements with all service providers to whom we disclose your data, obliging them to protect your data.

If your personal data is transferred outside the EU, we ensure that your personal data receives an equivalent level of protection, either because the country to which your data is transferred has an ‘adequate’ data protection standard as defined by the European Commission, or by applying another safeguard, such as an enhanced contractual arrangement, i.e. the Standard Contractual Clauses (SCCs) adopted by the European Commission.

For example, when we use US service providers, we rely either on the SCCs or the EU-US Data Privacy Framework, depending on the provider. You can request a copy of the SCCs we have entered into with our service providers by sending an email to the email address specified in this Privacy Policy.

1. Description and scope of data processing

On our website, you have the option to subscribe to a free newsletter. When you sign up for the newsletter, the data entered in the form is transmitted to us.

To provide this service, we collect the following data from you:

• E-Mail address
• Surname
• First name
• IP address of the computer accessing the site
• Date and time of registration
   

Your consent to the processing of your data is sought as part of the registration process, and reference is made to this privacy policy.

No data is passed on to third parties in connection with the data processing required for sending newsletters. The data is used exclusively for sending the newsletter. 

HERMA’s newsletters may contain tracking pixels, which enable us to determine whether and when an email has been opened and which links contained in the email have been clicked. The data collected in this way is stored and processed anonymously for statistical purposes in order to optimise the distribution of the newsletter.
 

2. Purpose of data processing

The collection of the user’s email address serves to deliver the newsletter.

The collection of other personal data as part of the registration process is intended to prevent misuse of the services or of the email address provided.
 

3. Legal basis for data processing

The legal basis for processing the data following the user’s subscription to the newsletter is Article 6(1)(a) of the GDPR, provided the user has given their consent.
 

4. Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. The user’s email address will therefore be stored for as long as the newsletter subscription remains active.
 

5. Exercising your rights

The user concerned may cancel their newsletter subscription at any time. A link for this purpose is included in every newsletter.

This also allows the user to withdraw their consent to the storage of the personal data collected during the registration process.

1. Description and scope of data processing

It is possible to contact us via the email address provided on our website. In this case, the user’s personal data transmitted with the email will be stored.

The data is used exclusively for the purpose of handling the correspondence.
 

2. Purpose of data processing

Where contact is made via email, this also constitutes the necessary legitimate interest in processing the data.
 

3. Legal basis for data processing

The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing the best possible response to your enquiry sent by email.

If the email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.
 

4. Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected. For personal data sent by email, this is the case once the relevant conversation with the user has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved.
 

5. Exercising your rights

If a user contacts us by email, they may object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

The objection must be made by email to the email address specified in this privacy policy.

In this case, all personal data stored in the course of the contact will be deleted.

1. Description and scope of data processing

Our website features a contact form which can be used to contact us electronically. If a user makes use of this option, the data entered in the form will be transmitted to us and stored.

The following data is stored when the message is sent:

• E-Mail address
• Surname
• First name
• Address
• Telephone/mobile number
• IP address of the accessing computer
• Date and time
   

2. Purpose of data processing

We process the personal data provided via the contact form or the email address provided solely for the purpose of handling your enquiry.

Any other personal data processed during the submission process is used to prevent misuse of the contact form and to ensure the security of our IT systems.
 

3. Legal basis for data processing

The legal basis for processing the data transmitted when sending an email is Article 6(1)(f) of the GDPR. Our legitimate interest lies in providing the best possible response to your enquiry submitted via the contact form. If the email contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1), first sentence, point (b) of the GDPR.
 

4. Duration of storage

The data will be deleted as soon as no longer requires it to fulfil the purpose for which it was collected. For personal data entered via the contact form and that sent by email, this is generally the case once the relevant conversation with the user has ended. The conversation is deemed to have ended when it is clear from the circumstances that the matter in question has been conclusively resolved.

Furthermore, the data is deleted from the CMS system via an automated process after a period of 60 days at the latest.
 

5. Exercising your rights

If a user contacts us via the contact form, they may object to the storage of their personal data at any time, as follows:

The objection must be made by email to the email address specified in this privacy policy.

In this case, all personal data stored in the course of establishing contact will be deleted.

1. Description and scope of data processing

On our website, we offer users the option to register by providing personal data. The data is entered into a form, transmitted to us and stored. The following data is collected as part of the registration process:

• E-Mail address
• Surname
• First name
• Address
• Telephone/mobile number
• VAT number 
• IP address of the accessing computer
• Date and time of registration
   

As part of the registration process, the user’s consent to the processing of this data is obtained.
 

2. Purpose of data processing

User registration is required in order to provide certain content and services on our website. In particular, user registration is required for the following purpose:

• Provision and use of certain digital services, such as the label design software (HERMA Label Assistant Online), including advanced features for registered users (e.g. saving and managing your own templates).
• Setting up and managing a user account.
• Applying for access to shop functions, in particular to place orders via our online shops.
   

3. Legal basis for data processing

The legal basis for the processing of data is Article 6(1), first sentence, point (f) of the GDPR. We have a legitimate interest in processing your registration data in order to provide you with the content and services you have requested.
 

4. Duration of storage

The data will be deleted as soon as it is no longer required to fulfil the purpose for which it was collected, or as required by law, e.g. for tax and accounting purposes.
 

5. Exercising your rights

As a user, you may cancel your registration at any time. You may have the data stored about you amended at any time.

Specifically, you can request deletion in the following ways:

HERMA processes and stores your personal data only for the period necessary to fulfil the purpose of storage or insofar as this is required by a law or regulation to which the relevant HERMA data controller is subject – e.g. statutory retention periods. If the purpose of storage no longer applies or a statutory retention period expires, the personal data will be routinely blocked or deleted in accordance with legal requirements. Specific details regarding the individual deletion periods can be found in the relevant sections of this privacy policy (e.g. log files) and in the Consent Manager tool regarding the retention period for cookies. You may request the erasure of your personal data in accordance with the provisions of Article 17 of the GDPR. Your right to erasure depends, amongst other things, on whether the data concerning you is still required by us to fulfil our legal obligations.

If the data is required to fulfil a contract or to carry out pre-contractual measures, early erasure of the data is only possible insofar as no contractual or statutory obligations preclude such erasure.

1. Description and scope of data processing

We offer our customers various payment options for processing their orders.

Depending on the payment method chosen, we redirect customers to the platform of the relevant

payment service provider. Once the payment process is complete, we receive the customers’ payment details from the payment service providers or our bank and process them in our systems for invoicing and accounting purposes.
 

Payment by credit card

It is possible to complete the payment process by credit card.

If you have chosen to pay by credit card, payment details are collected by the payment provider in a separate window. The data is not stored on HERMA’s servers. All payment service providers comply with the requirements of the ‘Payment Card Industry (PCI) Data Security Standards’ and have been certified by an independent PCI Qualified Security Assessor.

The following details are routinely collected when paying by credit card:

• Purchase amount Date and time of purchase
• First name and surname
• Address
• Email address
• Credit card number
• Credit card expiry date
• Security code (CVC)
• IP address
• Telephone number / mobile number
   

Payment data is passed on to the following payment service providers:

PAYONE, operated by PAYONE GmbH, Lyoner Straße 15, 60528 Frankfurt am Main. Further information on the processing of your data by PAYONE can be found in PAYONE’s privacy policy at: www.payone.com/DE-de/datenschutz.
 

Payment in advance

If you have chosen to pay in advance, we do not process any data other than that transmitted by your bank. This data is used solely to verify receipt of payment.
 

Other payment options 

We also offer the following payment options: Invoice
 

2. Purpose of data processing

The transfer of payment data to payment service providers serves to process the payment, e.g. when you purchase a product and/or use a service.
 

3. Legal basis for data processing

The legal basis for data processing is Article 6(1)(b) of the GDPR, as the processing of the data is necessary for the performance of the concluded sales contract.
 

4. Duration of storage

All payment data, as well as data relating to any chargebacks that may occur, will only be stored for as long as is necessary for payment processing, the handling of any chargebacks and debt collection, and to combat misuse.

Furthermore, payment data may be stored for a longer period where and for as long as this is necessary to comply with statutory retention periods or to investigate a specific case of misuse.

Your personal data will be deleted upon expiry of the statutory retention obligations, i.e. after 10 years at the latest.
 

5. Exercising your rights

If the data is required to fulfil a contract or to carry out pre-contractual measures, early deletion of the data is only possible insofar as no contractual or statutory obligations preclude such deletion.

1. Description and scope of data processing

To assess our customers’ creditworthiness, including an analysis of payment behaviour and credit default risk, we may use the services of rating agencies and credit reference agencies.

We use the services of the following credit reference providers:

• Creditreform Stuttgart Strahler KG, Theodor-Heuss-Str. 2, 70174 Stuttgart

The data provided consists of:

• Company details 
   

2. Purpose of data processing

We transfer the data for the purpose of carrying out credit checks on our customers. This serves to reduce the default rate and protect against credit risks.
 

3. Legal basis for data processing

The legal basis for the processing of data for the purpose of assessing the customer’s creditworthiness by the data controller is Article 6(1), first sentence, point (a) of the GDPR, provided the user has given their consent.

The legal basis for processing data for the purpose of assessing a customer’s creditworthiness in the case of high-risk payment methods is Article 6(1), first sentence, point (f) of the GDPR, based on our legitimate interest in safeguarding our advance payments.
 

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes. 

1. Description and scope of data processing

If you order products or services on our website for which a delivery service provider is used, you will receive your order and dispatch confirmation via your email address and, depending on the relevant delivery service provider, notification that your parcel has arrived and/or a parcel notification along with possible delivery options. The data is transferred to the following service providers:

• DHL Paket GmbH, Robert-Bosch-Straße 200, 73257 Köngen
• FedEx Express Deutschland GmbH, Ferdinand-Porsche-Str. 10, 71154 Nufringen 
• DHL Freight GmbH, Industriestraße 28, 71272 Renningen
• ERKA Internationale Spedition GmbH, Motorstraße 8, 70499 Stuttgart
• Gebrüder Weiss GmbH, Zeppelinstraße 90, 73730 Esslingen
• Raben Trans European Germany GmbH, Dieselstraße 20, 70736 Fellbach
   

The data transmitted usually consists of:

• Name
• Address
• E-Mail address
   

2. Purpose of data processing

The purpose of processing personal data is to enable delivery service providers to inform recipients of the status of their parcels by email, thereby increasing the likelihood of successful delivery.
 

3. Legal basis for data processing

The legal basis for the transfer of your email address to the relevant delivery service provider and its use is your consent in accordance with Article 6(1)(a) of the GDPR. The legal basis for the transfer of your address details (first name, surname, address) to the relevant delivery service provider is Article 6(1), first sentence, (b) of the GDPR, as the processing of the data is necessary for the performance of the concluded sales contract.
 

4. Duration of storage

The data transmitted will be deleted by the relevant delivery service provider once the parcel has been delivered.
 

5. Right to object

The notification service provided by the delivery service provider may be cancelled by the data subject at any time. For this purpose, a corresponding opt-out link is included in every email.

1. Description and scope of data processing

On our website, we use the Amazon PartnerNet affiliate programme operated by Amazon EU S.à.r.l, 5 Rue Plaetis, L-2338 Luxembourg, Luxembourg (hereinafter referred to as ‘Amazon’). This programme displays advertisements which, when clicked, redirect you to various websites within the Amazon Group, in particular amazon.de, amazon.co.uk, amazon.fr, amazon.it, amazon.es, amazon.nl, amazon.se, amazon.pl, amazon.com.be and amazon.ie. In doing so, Amazon places a cookie on your computer. This may result in personal data being stored and analysed, in particular the user’s activity (specifically which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data relating to the advertisements displayed (in particular which advertisements were shown and whether the user clicked on them), and also data from advertising partners (in particular pseudonymised user IDs). When you visit a page on our website where we use Amazon’s service, your web browser is prompted to transmit data to Amazon for the purposes of online advertising and the settlement of commissions. In doing so, Amazon gains access to personal data used to trace the origin of orders received by Amazon. Through this process, Amazon can determine that you have clicked on an affiliate link on our website. 

Further information on the collection and storage of data by Amazon can be found in the privacy policy of the relevant Amazon marketplace

(for the German marketplace at: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010).
 

2. Purpose of data processing

We use Amazon’s service to generate advertising revenue and to enable commission settlement.
 

3. Legal basis for data processing

The legal basis for the processing of users’ personal data is Article 6(1), first sentence, point (a) of the GDPR.
 

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
 

5. Exercising your rights

You have the right to object at any time to the processing of your personal data. As this service is permanently integrated into our website and cannot be opt-out via a cookie consent banner, you must implement your objection by taking technical measures on your end.
 

You can prevent Amazon from collecting and processing your personal data by generally disabling the storage of third-party cookies in your browser settings, activating the ‘Do Not Track’ function of a browser that supports it, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (www.noscript.net) or Ghostery (www.ghostery.com) in your browser.

Further information on exercising your rights vis-à-vis Amazon can be found in the privacy policies of the respective Amazon marketplaces (e.g. at https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010).

1. Scope of personal data processing

We use the FACT-Finder plug-in from Omikron Data Quality GmbH, Habermehlstr. 17, 75172 Pforzheim, Germany (hereinafter: FACT-Finder). If you have JavaScript enabled in your browser and have not installed a JavaScript blocker, your browser may transmit personal data to FACT-Finder. This involves your shopping history, in particular items and product categories that you have viewed, searched for or purchased. This may result in personal data being stored and analysed, primarily relating to the user’s activity (in particular, which pages have been visited and which elements have been clicked on) as well as device and browser information (in particular, the IP address and the operating system). All information collected for this purpose is stored in anonymised form, and it is not possible to identify you personally.

Further information on the processing of data by FACT-Finder is available here:

https://www.fact-finder.de/datenschutz.html
 

2. Purpose of data processing

The FACT-Finder plug-in is used to provide personalised product recommendations, to ensure the website functions correctly, and to analyse user behaviour..
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.
 

4. Duration of storage

Your personal information will be retained for as long as is necessary to fulfil the purposes set out in this privacy policy or as required by law. 
 

5. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal. You can prevent FACT-Finder from collecting and processing your personal data by blocking third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on your rights to object to and remove data processed by FACT-Finder can be found at: 
https://www.fact-finder.de/datenschutz.html

1. Scope of the processing of personal data

We use Friendly Captcha, a service designed to protect our website from unauthorised automated use (e.g. by bots), provided by Friendly Captcha GmbH, Am Anger 3–5, 80333 Munich, Germany.

Friendly Captcha is a privacy-friendly CAPTCHA solution that operates entirely without tracking cookies or profiling. The service is designed to detect and prevent automated access by performing cryptographic calculations in the background.

In connection with the use of Friendly Captcha, the following data in particular may be processed:

• IP address (truncated or hashed),
• technical information about the device and browser used,
• anonymised details regarding the time of access,
• hash values for the detection of automated requests.
   

No association with specific individuals or recognition across websites takes place.
 

2. Purpose of data processing

Personal data is processed for the purpose of protecting our website and online forms against automated access, misuse and spam, and to ensure the technical security and stability of our IT systems.
 

3. Legal basis for the processing of personal data

The processing of personal data by Friendly Captcha is carried out on the basis of our legitimate interest in accordance with Article 6(1)(f) of the GDPR.

Our legitimate interest lies in protecting our website from malicious automated access (e.g. by bots), spam and cyber-attacks, and in ensuring the functionality and security of our online services.
The solution used is designed to be particularly data-protection-friendly and processes only those data that are strictly necessary to achieve this purpose.
 

4. Duration of storage

The personal data processed by Friendly Captcha is stored only for as long as is necessary to detect and prevent automated access.

The data is subsequently deleted or anonymised, provided there are no statutory retention obligations. No permanent storage or profiling takes place.
 

5. Exercising your rights

As processing is carried out on the basis of a legitimate interest, you can prevent the collection and processing of your personal data by Friendly Captcha by:

• disabling the storage of third-party cookies in your browser,
• activating the ‘Do Not Track’ function in a browser that supports it,
• disabling the execution of script code in your browser, or
• installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

Please note that, in this case, you may not be able to use all the features of our website to their full extent.

Further information on data processing by Friendly Captcha can be found in the provider’s privacy policy at:
https://friendlycaptcha.com/de/privacy/

1. Scope of the processing of personal data

We use Google reCAPTCHA provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the EU, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland. This tool is designed to verify that data entry is legitimate and has not been carried out by a bot.To this end, Google reCAPTCHA analyses and authenticates the behaviour of a visitor to our website with regard to a wide range of characteristics. This may result in the storage and analysis of personal data, primarily the user’s activity (in particular, mouse movements and which elements have been clicked) and device and browser information (in particular, the time, the IP address and the operating system).

The data is not linked to any data that may be collected or used in connection with the concurrent use of authenticated Google services such as Gmail.

Further information on the processing of data by Google is available here:

https://policies.google.com/privacy?gl=DE&hl=de
 

2. Purpose of data processing

The use of Google reCAPTCHA serves to protect our website from misuse.
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.
 

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
 

5. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the ““Do Not Track” function of a compatible browser , disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can use the link below to opt out of Google’s use of your personal data:

https://adssettings.google.de

Further information on your options to object to and have your data removed by Google can be found at:

https://policies.google.com/privacy?gl=DE&hl=de"

1. Scope of the processing of personal data

We use Google Web Fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as ‘Google’). When the page is accessed, the web fonts are transferred to the browser’s cache so that they can be used to improve the visual presentation of various pieces of information. If the browser does not support Google Web Fonts or blocks access to them, the text will be displayed in a standard font. No cookies are stored on the visitor’s device when the page is accessed. Data transmitted in connection with the page visit is sent to resource-specific domains such as https://fonts.googleapis.com or https://fonts.gstatic.com. This may result in personal data being stored and analysed, primarily relating to the user’s activity – in particular, which pages have been visited and which elements have been clicked on – as well as device and browser information, specifically the IP address and the operating system. The data is not linked to any data that may be collected or used in connection with the concurrent use of authenticated Google services such as Gmail.

Further information on the processing of data by Google is available here:

https://policies.google.com/privacy?gl=DE&hl=de
 

2. Purpose of data processing

The use of Google Web Fonts serves to present our text in an appealing manner. If your browser does not support this feature, a standard font from your computer will be used for display.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can disable Google’s use of your personal data via the following link:

https://adssettings.google.de

Further information on your rights to object to and have your data deleted by Google can be found at:

1. Scope of personal data processing

We use the plugin from the video portal Vimeo, operated by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA. Vimeo is an online video streaming portal. When you visit our website, your browser establishes a connection with Vimeo’s servers in the USA. Information about your visit to our website and your IP address is forwarded to Vimeo.

This occurs regardless of whether you have a Vimeo account and whether you are logged in to it.

If you are logged in, Vimeo may link the data collected to your account. 

Further information on how Vimeo processes data can be found here:

https://vimeo.com/privacy
 

2. Purpose of data processing

The Vimeo plug-in is provided to enable the display and embedding of videos.
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR. 
 

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law.
 

5. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.

You can prevent Vimeo from collecting and processing your personal data by blocking third-party cookies from being stored on your computer, using the ‘Do Not Track’ feature of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on options for objecting to and removing data processed by Vimeo can be found at: https://vimeo.com/privacy

1. Scope of the processing of personal data

We use the YouTube plugin operated by Google, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, and its representative in the EU, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as ‘Google’). We use the YouTube plugin to embed YouTube videos on our website. When you visit our website, your browser establishes a connection with YouTube’s servers. This may result in personal data being stored and analysed, in particular the user’s activity (specifically, which pages have been visited and which elements have been clicked on) as well as device and browser information (specifically, the IP address and the operating system).

We have no influence over the content of the plug-in. If you are logged into your YouTube account whilst visiting our website, YouTube may associate your visit to our website with that account. When you interact with this plug-in, the relevant information is transmitted directly to YouTube and stored there.

Further information on Google’s processing of data can be found here:

https://policies.google.com/privacy?gl=DE&hl=de
 

2. Purpose of data processing

The YouTube plug-in is used to improve user-friendliness and to present our website in an appealing way.
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.
 

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
 

5. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can disable Google’s use of your personal data via the following link:

https://adssettings.google.de

Further information on options for objecting to and removing data held by Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

1. Scope of personal data processing

We use features of the Userlike live chat platform provided by Lime Connect (Userlike) GmbH, Im Mediapark 8 50670 Köln, Deutschland (hereinafter referred to as: Lime). You can use the live chat in the same way as a contact form to chat with our staff in near real time. When you start a chat, the following personal data is collected:
 

• Date and time of the session
• Browser type/version
• IP address
• Operating system used
• URL of the previously visited website
• Amount of data transmitted
• First name
• Surname
• E-Mail address
   

Depending on the course of the conversation with our staff, further personal data may be collected during the chat, which you will enter yourself. The nature of this data depends largely on your enquiry or the issue you are describing to us. In addition, Lime stores the history of live chats.
 

The chat widget is loaded as a JavaScript file from AWS CloudFront, operated by Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, United States (hereinafter referred to as ‘Amazon’). The chat widget essentially consists of the source code that runs on your computer and enables the chat. In the process, data may be transferred to AWS CloudFront servers in the USA
 

Further information on how Lime processes data can be found here:

https://connect.lime-technologies.com/de/legal/privacy-policy/
 

2. Purpose of data processing

We use Lime to facilitate efficient customer communication. The chat history is stored to save our customers from having to provide extensive details regarding the history of their enquiry, and to ensure consistent quality control of our live chat service. 
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.
 

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy, until consent to storage has been withdrawn, or as required by law.
 

5. Exercising your rights

You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.

You can prevent Userlike from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You may withdraw your consent to the processing of your data at any time. You may exercise your right to withdraw consent at any time by emailing us or  privacy(at)lime-connect.com

Further information on options for objecting to and removing data processed by Lime can be found here: https://connect.lime-technologies.com/de/legal/privacy-policy/

1. Scope of the processing of personal data

We use the consent management platform consentmanager, provided by consentmanager GmbH, Eppendorfer Weg 183, 20253 Hamburg, Germany. consentmanager enables us to obtain, manage and document, in accordance with the law, users’ consent to the processing of device information and personal data using cookies or other tracking technologies. To this end, consentmanager sets cookies on users’ devices. In particular, the following data is processed:

• Date and time of the visit
• Device information
• Browser informationen
• Anonymised IP address
• Opt-in and opt-out data
   

Data processing takes place within the European Union. 
 

Further information on the processing of personal data by consentmanager can be found at:
https://www.consentmanager.net/en/privacy/
 

2. Purpose of data processing

Personal data is processed to comply with the legal requirements of the GDPR and the BDSG regarding the collection and management of consent.
 

3. Legal basis for the processing of personal data

The legal basis for the processing of personal data by consentmanager is Article 6(1)(f) of the GDPR. Our legitimate interest lies in the legally compliant collection, management and documentation of consent for the use of cookies and third-party services.
 

4. Duration of storage

The personal data collected by consentmanager is stored only for as long as is necessary to fulfil the stated purpose and for as long as there is a legitimate interest in retaining it. As soon as the purpose has been fulfilled or the legitimate interest no longer applies, the data will be deleted or anonymised, provided that no statutory retention obligations prevent this.
 

5. Exercising your rights

You can prevent the collection and processing of your personal data by consentmanager by blocking the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as, for example, NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com).

Further information on options for objecting to and removing consentmanager can be found at:
https://www.consentmanager.net/en/privacy/

1. Scope of the processing of personal data

We use Google Tag Manager (https://www.google.com/intl/de/tagmanager/) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as ‘Google’). Google Tag Manager enables tags from Google and third-party services to be managed and embedded in a bundled form on a website. Tags are small pieces of code on a website which serve, amongst other things, to measure visitor numbers and behaviour, track the impact of online advertising and social media channels, implement remarketing and target specific audiences, and test and optimise websites. When a user visits the website, the current tag configuration is sent to the user’s browser. It contains instructions on which tags are to be triggered. Google Tag Manager ensures that other tags are triggered, which may in turn collect data. Further information on this can be found in the sections on the use of the relevant services in this privacy policy. Google Tag Manager does not access this data. 

Further information on Google Tag Manager can be found at https://www.google.com/intl/de/tagmanager/faq.html and in Google’s privacy policy: https://policies.google.com/privacy?hl=de
 

2. Purpose of data processing

The purpose of processing personal data is to ensure the centralised and clear management, as well as the efficient integration, of third-party services.
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.
 

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law.

Advertising data in server logs is anonymised by Google, which, according to its own statements, deletes parts of the IP address and cookie information after 9 or 18 months respectively.
 

5. Exercising your rights

You have the right to withdraw your consent under data protection law at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address), and from processing this data, by downloading and installing the browser plug-in available via the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

You can use the link below to opt out of Google’s use of your personal data:
https://adssettings.google.de

Further information on options for objecting to and deleting data held by Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

1. Scope of personal data processing

We use the Bing Ads conversion tracking tool provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (hereinafter referred to as ‘Microsoft’). Bing Ads stores a cookie on your computer if you have accessed our website via a Bing Ads advertisement. This may result in personal data being stored and analysed, in particular the user’s activity (in particular, which pages have been visited and which elements have been clicked on), device and browser information (in particular, the IP address and the operating system), data relating to the advertisements displayed (in particular, which advertisements were shown and whether the user clicked on them), and also data from advertising partners (in particular, pseudonymised user IDs). We only receive the total number of users who clicked on a Bing advert and were then redirected to the conversion page.

Further information on Microsoft’s processing of this data is available here:

https://privacy.microsoft.com/de-de/privacystatement
 

2. Purpose of data processing

This enables Microsoft Bing and us to recognise that someone has clicked on an advert, been redirected to our website and reached a pre-defined landing page (conversion page).
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.
 

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
 

5. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal. You can prevent the collection and the processing of your personal data by Microsoft by blocking the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can use the link below to opt out of Microsoft’s use of your personal data:

https://account.microsoft.com/privacy/ad-settings/

Further information on your rights to object to and have your data deleted by Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement

1. Scope of the processing of personal data

We use Google AdWords, provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and its representative in the European Union, Google Ireland Ltd., Gordon House, Barrow Street, D04 E5W5, Dublin, Ireland (hereinafter referred to as ‘Google’). We use this service to display advertisements. In doing so, Google places a cookie on your computer. This may result in the storage and analysis of personal data, in particular the user’s activity (specifically, which pages have been visited and which elements have been clicked on), device and browser information (in particular the IP address and the operating system), data relating to the advertisements displayed (in particular which advertisements were shown and whether the user clicked on them) and, , data from advertising partners (in particular pseudonymised user IDs). 

Further information on Google’s processing of data is available here:

https://policies.google.com/privacy?gl=DE&hl=de
 

2. Purpose of data processing

We are only informed of the total number of users who have responded to our advert. No information is passed on that would enable us to identify you. The data is not used for tracking purposes.
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.
 

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.
 

5. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal. You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can disable Google’s use of your personal data via the following link:

https://adssettings.google.de

Further information on options for objecting to and removing data held by Google can be found at: https://policies.google.com/privacy?gl=DE&hl=de

1. Scope of the processing of personal data

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter referred to as ‘Google’).

Google Analytics analyses, amongst other things, how website visitors use our site. In doing so, Google places cookies on your device. During your visit, user behaviour is recorded in the form of ‘events’. This may result in the storage and analysis of personal data, including:

• First visit to the website
• Interaction with the website, usage path
• Clicks on external and internal links
• Video usage
• File downloads
• Advertising impressions and clicks
• Scrolling behaviour 
• Searches on the website
• Language selection
• Page views
• Location (region)
• Your IP address (in truncated/anonymised form)
• Technical information about your browser and the devices you use (e.g. language settings, screen resolution)
• Your internet service provider
• Referrer URL

By default, IP address anonymisation is enabled in GA 4. This means that your IP address is truncated by Google within the Member States of the European Union or other signatory states to the Agreement on the European Economic Area. In exceptional cases only, the full IP address is transmitted to a Google server in the USA and truncated there . Google states that the IP address transmitted by your browser is not merged with other Google data within the context of Google Analytics.
 

Further information on the processing of data by Google can be found here:

https://policies.google.com/privacy
 

2. Purpose of data processing

We use GA 4 to analyse the use of our website and to generate reports on activity on our site. These reports are used to analyse our website’s performance and to display targeted advertising to people who have already shown an initial interest by visiting our site.
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1), first sentence, point (a) of the GDPR.
 

4. Retention period

Your personal data will be deleted after 14 months. 
 

5. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal. You can withdraw your consent via our Cookie Consent Tool.

You can prevent the collection and processing of your personal data by Google by blocking the storage of third-party cookies on your computer, using the ““Do Not Track” function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net) or Ghostery (https://www.ghostery.com) in your browser.

Further information on options for objecting to and removing data processed by Google can be found at: https://policies.google.com/technologies/partner-site

You can also prevent the collection of data generated by the cookie and relating to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de

You can disable the use of your personal data by Google via the following link: https://adssettings.google.de

1. Scope of the processing of personal data

We use the LinkedIn Analytics service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as ‘LinkedIn’). The use of LinkedIn Analytics results in the creation of pseudonymised user profiles. These profiles are used to analyse user behaviour and to optimise our services. The following data is processed in this context:

• Information about the operating system
• Device identifier
• Internet service provider
• IP address
• Referrer URL
• Browser informationen
   

Further information on how LinkedIn processes this data can be found here:

https://www.linkedin.com/legal/privacy-policy
 

2. Purpose of data processing

The processing of users’ personal data by LinkedIn Analytics enables us to analyse our users’ browsing behaviour. By evaluating the data collected, we are able to compile information on the use of the individual components of our website. This helps us to continuously improve our online presence and, in this context, to enhance user-friendliness.
 

2. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.
 

3. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law.
 

4. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.

You can prevent LinkedIn from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can use the link below to disable LinkedIn’s use of your personal data:

https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences

Furhter information on your rights to object to and have your data removed by LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy

1. Scope of personal data processing

We use features of the LinkedIn Insight Tag marketing plugin provided by LinkedIn Ireland, Unlimited Company, Wilton Place, Dublin 2, Ireland (hereinafter referred to as ‘LinkedIn’). The plugin enables us to obtain information about visitors to the website and to generate detailed campaign reports.

In particular, the following personal data is processed by LinkedIn: 

• URL
• Referrer URL
• IP address (truncated or hashed)
• Device and browser characteristics (user agent) and timestamps
   

In doing so, LinkedIn stores cookies on your device. Further information on the cookies used can be found here:

https://www.linkedin.com/legal/cookie-policy

LinkedIn does not share any personal data with us, but only provides aggregated reports on the target audience and advertisements. LinkedIn also offers a remarketing function that enables us to display targeted, personalised advertising to you outside our website without us learning your identity..

Further information on how LinkedIn processes data can be found here:

https://www.linkedin.com/legal/privacy-policy?_l=de_DE
 

2. Purpose of data processing

We use the LinkedIn Insight Tag to collect information about visitors to our website.
 

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1), first sentence, point (a) of the GDPR.
 

4. Retention period

Members’ direct identifiers are removed within seven days in order to pseudonymise the data. This remaining pseudonymised data is then deleted within 180 days.
 

5. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.

You can prevent LinkedIn from collecting and processing your personal data by blocking the storage of third-party cookies on your computer, using the ‘Do Not Track’ function of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

Further information on options for objecting to and removing data from LinkedIn can be found at: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

1. Scope of the processing of personal data

We use features of the Microsoft Advertising service provided by Microsoft Corporation, One Microsoft Way, 98052, Redmond, Washington, USA (hereinafter referred to as ‘Microsoft’). Microsoft Advertising allows advertisements for a company to be displayed on Bing, for example to acquire new customers. In doing so, we use what is known as Universal Event Tracking (UET) within the Microsoft Advertising service, which is used to collect and store data on this website for marketing and optimisation purposes. Cookies from Microsoft are stored on your device as part of this process.

In particular, the following personal data is processed by Microsoft:
 

• IP address
• Device and browser information
• A user ID assigned by Microsoft
• Referrer URL (the website via which you accessed our website)
   

In doing so, data is processed on Microsoft’s servers in the USA.

Further information on the processing of data by Microsoft is available here:

https://privacy.microsoft.com/de-de/privacystatement
 

2. Purpose of data processing

We use Microsoft Advertising to analyse, evaluate and optimise adverts for advertising purposes.

3. Legal basis for the processing of personal data

The legal basis for the processing of users’ personal data is, in principle, the user’s consent in accordance with Article 6(1)(a) of the GDPR.

4. Duration of storage

Your personal information will be stored for as long as is necessary to fulfil the purposes described in this privacy policy or as required by law, e.g. for tax and accounting purposes.

5. Exercising your rights

You have the right to withdraw your consent to the processing of your personal data at any time. Withdrawing your consent does not affect the lawfulness of any processing carried out on the basis of your consent prior to its withdrawal.

You can prevent Microsoft from collecting and processing your personal data by blocking third-party cookies on your computer, using the ‘Do Not Track’ feature of a compatible browser, disabling the execution of script code in your browser, or installing a script blocker such as NoScript (https://noscript.net/) or Ghostery (https://www.ghostery.com) in your browser.

You can object to the processing of your personal data for advertising purposes here at Microsoft: http://choice.microsoft.com/de-DE/opt-out
 

Further information on your rights to object and request the erasure of your data from Microsoft can be found at: https://privacy.microsoft.com/de-de/privacystatement

Instagram, Part of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Irland

On our company and business unit profiles, we provide information and offer Instagram users the opportunity to communicate.

If you carry out an action on our Instagram company page (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. your real name or user profile photo) publicly available.

However, as we generally have little or no influence over the processing of your personal data by Instagram, we cannot make any binding statements regarding the purpose and scope of the processing of your data.

We use our business profiles on social media for communication and exchange information with (potential) customers. In particular, we use our corporate accounts for:

• Brand presence and visibility
• Employer branding and recruitment
• Communication & PR
• Competitions and surveys
   

In this context, posts on the company’s website may contain the following content: 

• Information about the company
• Information about products and services
• Latest news, press releases and industry articles
• Insights into the working environment and corporate culture
• Job vacancies and information on the application process
• Interaction with users (surveys, feedback, comments)
• Participation in trade fairs or events
• Success stories
• Competitions
   

Each user is free to disclose personal data through their activities.

The legal basis for the processing of personal data for the purpose of communicating with customers and prospective customers is Article 6(1)(f) of the GDPR. Our legitimate interest in this regard is to respond to your enquiry in the best possible way and to be able to provide the requested information.

If the purpose of making contact is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

The data generated through the company’s website is not stored in our own systems.

For the processing of your personal data in third countries, we have put in place appropriate safeguards in the form standard data protection clauses in accordance with Article 46(2)(c) of the GDPR. A copy of the standard data protection clauses can be requested from us.

You may object at any time to the processing of your personal data that we collect in connection with your use of our company website and exercise your rights as a data subject, as set out in the ‘Your Rights’ section of this privacy policy. To do so, please send us an informal email to datenschutz@herma.de. For further information on the processing of your personal data by Instagram and the relevant options for objecting, please see here:

Instagram: https://help.instagram.com/519522125107875

Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Irland

On our company and business unit profiles, we provide information and offer Pinterest users the opportunity to communicate.

If you carry out an action on our Pinterest company page (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. your real name or user profile photo) publicly available.

However, as we generally have little or no influence over the processing of your personal data by Pinterest, we cannot make any binding statements regarding the purpose and scope of the processing of your data.

We use our corporate presence on social media to communicate and exchange information with (potential) customers. In particular, we use our corporate presence for:

• Brand presence and visibility
• Employer branding and recruitment
• Communication & PR
• Competitions and surveys

Posts on our corporate social media profiles may contain the following content:

• Information about the company 
• Information about products and services
• Latest news, press releases and industry articles
• Insights into the working environment and corporate culture
• Job vacancies and information on the application process
• Interaction with users (surveys, feedback, comments)
• Participation in trade fairs or events
• Success stories
• Competitions
   

Each user is free to disclose personal data through their activities.

The legal basis for the processing of personal data for the purpose of communicating with customers and prospective customers is Article 6(1)(f) of the GDPR. Our legitimate interest in this regard is to respond to your enquiry in the best possible way and to be able to provide the requested information.

If the purpose of making contact is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

The data generated through the company’s website is not stored in our own systems.

For the processing of your personal data in third countries, we have put in place appropriate safeguards in the form standard data protection clauses in accordance with Article 46(2)(c) of the GDPR. A copy of the standard data protection clauses can be requested from us.

You may object at any time to the processing of your personal data that we collect in connection with your use of our company website and exercise your rights as a data subject, as set out in the ‘Your Rights’ section of this privacy policy. To do so, please send us an informal email to datenschutz@herma.de. For further information on the processing of your personal data by Pinterest and the relevant options for objecting, please see here:

Pinterest: policy.pinterest.com/de/privacy-policy

YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, United States

On our corporate and business unit profiles, we provide information and offer YouTube users the opportunity to communicate.

If you carry out an action on our YouTube corporate channel (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. your real name or user profile photo) publicly available.

However, as we generally have little or no influence over the processing of your personal data by YouTube, we cannot make any binding statements regarding the purpose and scope of the processing of your data.

We use our corporate presence on social media to communicate and exchange information with (potential) customers. In particular, we use our corporate presence for:
 

• Brand presence and visibility
• Employer branding and recruitment
• Communication & PR
• Competitions and surveys

Posts on our corporate social media profiles may contain the following content:

• Information about the company
• Information about products and services
• Latest news, press releases and industry articles
• Insights into the working environment and corporate culture
• Job vacancies and information on the application process
• Interaction with users (surveys, feedback, comments)
• Participation in trade fairs or events
• Success stories
• Competitions
   

Each user is free to disclose personal data through their activities.

The legal basis for the processing of personal data for the purpose of communicating with customers and prospective customers is Article 6(1)(f) of the GDPR. Our legitimate interest in this regard is to respond to your enquiry in the best possible way and to be able to provide the requested information.

If the purpose of making contact is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.

For the processing of your personal data in third countries, we have put in place appropriate safeguards in the form standard data protection clauses in accordance with Article 46(2)(c) of the GDPR. A copy of the standard data protection clauses can be requested from us.

You may object at any time to the processing of your personal data that we collect in connection with your use of our company website and exercise your rights as a data subject, as set out in the ‘Your Rights’ section of this privacy policy. To do so, please send us an informal email to datenschutz@herma.de. For further information on the processing of your personal data by YouTube and the relevant options for objecting, please see here:

YouTube: policies.google.com/privacy

1. Scope of data processing

The company website is used for recruitment, employer branding, brand presence, visibility, communication and PR, as well as active sourcing. We do not have any information regarding the processing of your personal data by the companies jointly responsible for the company website. Further information on this can be found in the privacy policy of:

• LinkedIn
• XING

On our site, we provide information and offer users the opportunity to communicate.

LinkedIn: https://www.linkedin.com/legal/privacy-policy

XING: https://privacy.xing.com/de

If you carry out an action on our company page (e.g. comments, posts, likes, etc.), you may thereby make personal data (e.g. your real name or profile photo) publicly available.
 

2. Legal basis for data processing

The legal basis for the processing of personal data for the purpose of communicating with customers and prospective customers is Article 6(1)(f) of the GDPR. Our legitimate interest in this regard is to respond to your enquiry in the best possible way and to be able to provide the requested information.

If the purpose of making contact is to conclude a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR.
 

3. Purpose of data processing

Our website serves to inform users about our company and products. In doing so, every user is free to disclose personal data through their activities. 
 

4. Duration of storage

The data generated by the company website is not stored in our own systems.
 

5. Exercising your rights

You may object at any time to the processing of your personal data that we collect in connection with your use of our corporate website and exercise your rights as a data subject, as set out in the ‘Your Rights’ section of this privacy policy. To do so, please send us an informal email to the email address specified in this privacy policy.

Further information on exercising your rights can be found here:

LinkedIn: https://www.linkedin.com/legal/privacy-policy

XING: https://privacy.xing.com/en