Privacy Policy

I. General information

In the following, we provide information about the collection of personal data when using our website in accordance with Art. 13 GDPR. Personal data are all data that can be related to you personally, e.g. B. Name, address, email addresses, user behavior.

Responsible acc. Art. 4 para. 7 EU General Data Protection Regulation (GDPR) is 

diva-e Digital Value Excellence GmbH, Ella-Barowsky-Straße 44, 10829 Berlin

https://diva-e.com/en/imprint/.

You can contact our data protection officer at:

Bugl & Kollegen Gesellschaft für Datenschutz und Informationssicherheit mbH

Eifelstraße 55

93057 Regensburg

E-mail: kontakt@buglundkollegen.de

II. Your rights

If you as a user process personal data, you are considered to be the data subject according to the GDPR. Affected persons have the following rights vis-à-vis the person responsible:

  • Right to information (Art. 15 GDPR)

  • Right to correction or deletion of personal data (Art. 16, 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to notification in connection with the correction or deletion of your personal data or the restriction of processing (Art. 19 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right of objection (Art. 21 GDPR)

  • Right to revoke declarations of consent given. The legality of the data processing carried out up to the point of revocation remains unaffected on the basis of the previously valid consent. (Art. 7 Para. 3 GDPR)

  • Right to lodge a complaint with the supervisory authority (Art. 77 GDPR)

You can find the competent supervisory authority for data protection issues under the following link.

https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

III. Cookie consent with Usercentrics

This website uses the cookie consent technology of Usercentrics to obtain your consent to the storage of certain cookies on your terminal device and to document this consent in accordance with data protection law. The provider of this technology is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich.

Website: https://usercentrics.com (hereinafter "Usercentrics").

When you enter our website, the following personal data is transferred to Usercentrics:

  • Your consent(s) or revocation of your consent(s)

  • Your IP address

  • Information about your browser

  • Information about your terminal device

  • Time of your visit to the website

Furthermore, Usercentrics stores a cookie in your browser in order to be able to allocate the consent(s) granted or their revocation to you. The data collected in this way is stored until you request us to delete it, delete the Usercentrics cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected.

Usercentrics is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 p. 1 lit. c GDPR.

We have concluded an order processing contract with Usercentrics. This is a contract required by data protection law, which ensures that Usercentrics only processes the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR.

IV. Hosting

The hosting services used by us (Amazon Web Services, AWS, Serverstand Europe) serve to provide the following services: Infrastructure and platform services, computing capacity, storage space and database services, e-mail dispatch, security services and technical maintenance services, which we use for the purpose of operating this online offering.

In doing so, we or our hosting provider process inventory data, contact data, content data, contract data, usage data, meta data and communication data of customers, interested parties and visitors of this online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer pursuant to Art. 6 (1) lit. f GDPR. It cannot be ruled out that the aforementioned data may also be processed outside the European Union/European Economic Area. Therefore, we have concluded the standard data protection clauses with Amazon Web Services in accordance with Art. 46 Para. 2 lit. c) GDPR.

V. Contact

a. Type and purpose of the processing

The data you enter in the contact form will be saved for the purpose of individual communication with you. To do this, you must provide a valid email address and your name. This is used to assign the request and then answer it. The specification of further data is optional.

Should you also contact us by email or phone, we will process the contact details you used to answer your request.

b. Legal basis of the processing

Your personal data is processed on the basis of a legitimate interest (Art 6 Para. 1 lit.f GDPR). By providing the contact form, we would like to make it easy for you to contact us. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions. If you contact us to inquire about an offer, the data provided will be processed to carry out pre-contractual measures (Art 6 Para. 1 lit.b GDPR).

c. Data categories

{e.g. Contact details and order details}

d. Recipients

The recipients of the data are internal employees of the {technology, marketing, sales} and, if applicable, processors.

e. Storage periods

Data will be deleted no later than {6 months} after processing the request. If there is a contractual relationship, we are subject to the statutory retention periods according to the German Commercial Code and delete your data after these periods have expired.

f. Legal / contractual requirement

The provision of your personal data is voluntary. However, we can only process your request if you provide us with your name, your e-mail address and the reason for the request.

g. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Right of withdrawal

You have the right to object to the processing of your personal data at any time. You can inform us of your revocation at any time using the contact option given at the beginning of this data protection notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

VI. Newsletter

a. Type and purpose of the processing

Your data will only be used to send you the subscribed newsletter by e-mail. Your name is entered in order to address you personally in the newsletter and, if necessary, to identify you if you wish to exercise your rights as a person affected. To receive the newsletter, it is sufficient to enter your e-mail address. If you register to receive our newsletter, the data you provide will be used exclusively for this purpose. Subscribers can also be informed by e-mail about circumstances relevant to the service or registration (e.g. changes to the newsletter offer or technical conditions). For an effective registration we need a valid e-mail address. In order to verify that a registration is actually made by the owner of an e-mail address, we use the "double opt-in" procedure. For this purpose we log the ordering of the newsletter, the sending of a confirmation mail and the receipt of the hereby requested answer. Further data is not collected. The data will be used exclusively for sending the newsletter and will not be passed on to third parties.

b. Legal basis of the processing

On the basis of your expressly given consent (Art. 6 para. 1 lit. a GDPR, Art. 7 GDPR in conjunction with § 107 para. 2 TKG), we will send you our newsletter or comparable information regularly by e-mail to your specified e-mail address.

c. Data categories

E-mail address, name

d. Recipients

The recipients of the data are internal employees of the marketing department and HubSpot as a processor.

e. Storage periods

The data will only be processed in this context as long as the corresponding consent has been obtained. Afterwards they will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary, solely based on your consent. Unfortunately, we cannot send you our newsletter without existing consent.

g. Third country transfer

The processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Right of withdrawal

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option at the end of this data protection notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision making or profiling in this data processing.

VII. Prize competitions

a. Type and purpose of the processing

If you register with us for a prize competition, we will use your personal data for the implementation and processing of the prize competition. The fields marked with (*) in the prize competition form are mandatory. In the fortunate event that you are one of the winners, this may also include the transfer of your data to participating companies. For example, it may be necessary to transfer your data to the prize provider (e.g. tour operator) or to an agency that handles the competition on our behalf. As a rule, we also reserve the right to publish the name of the winners on our website. Notifications about the competition can be made by e-mail or by post. If you have provided a telephone number during registration, we reserve the right to notify you of the prize by telephone as well.

Furthermore, you have the option of registering for the newsletter. Further information on this can be found in section VI.

b. Legal basis of the processing

The processing of personal data collected in the context of the prize competition is carried out for the implementation and execution of the prize competition on the basis of Art. 6 (1) lit. b GDPR.

c. Data categories

E-mail address, name, contact details

d. Recipients

  • Employees of the marketing department

  • HubSpot for handling the prize competition within the scope of order processing and, if applicable, the winning party.

e. Storage periods

The data provided will be automatically deleted after 6 weeks, unless there is consent for continued processing, in particular for newsletter dispatch.

f. Legal / contractual requirement

The provision of your personal data is based on your consent to the conditions of participation (Art. 6 para. 1 lit. b GDPR). Without the provision of your personal data, we cannot process your data for the evaluation of the competition.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To guarantee the level of data protection in the USA, we have concluded standard data protection clauses with HubSpot.

h. Right of withdrawal

You can revoke your consent to the storage of your personal data and its use for sending the newsletter at any time with effect for the future. There is a corresponding link in every newsletter. You can also unsubscribe directly on this website at any time or inform us of your revocation using the contact option at the end of this data protection notice.

i. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

VIII. Online surveys

a. Type and purpose of processing

The following data protection information informs you about the processing of your personal data that we collect from you when you participate in our online surveys.

b. Processing for the purpose of sending you the results

In the course of the survey, you may voluntarily provide your contact details. They are used to send interested participants the results in aggregated form after the survey has been evaluated. In this way, we motivate participants to take part in our online surveys in the future.

If you have given us your consent to use your contact data for the purpose of sending newsletters, we will use it for this purpose. You can find more information on this under VI

c. Processing of responses

As a rule, no personal data is collected when answering the questions in our survey. If the choice or formulation of the answers makes it possible to draw conclusions about the person of the participant, the data is processed to protect our legitimate interests. The survey serves to expand further and deepen our customer and industry knowledge. This constitutes legitimate interests within the meaning of the aforementioned provision.

We store the questions and answers of the survey. In addition, the results are evaluated and analyzed by employees of our company.

The documentation and possible publication of the survey results will be carried out exclusively in anonymous form, without naming you and without providing any information that could be used to draw conclusions about your person.

d. Legal basis of the processing

The processing of your contact data for the purpose of sending you your results is based on your consent pursuant to Art. 6 (1) p. 1 lit. a GDPR.

Insofar as the choice or formulation of the answers makes it possible to draw conclusions about the person of the participant, the data processing is carried out to protect our legitimate interests pursuant to Art. 6 (1) lit. f GDPR.

e. Data categories

  • E-mail address, name

f. Recipients

  • Employees of the Marketing and, if applicable, Human Resources departments (personnel marketing)

  • Service provider "SurveyMonkey Europe UC 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Ireland" and "Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399 USA"for survey creation in the context of order processing

g. Storage periods

Your responses will be anonymized or deleted as soon as we have completed the evaluation. Unless there are reasons that justify a longer storage (for example, if you have given your consent to send us your results according to Art. 6 (1) a GDPR).

h. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent.

i. Third country transfer

Processing will not take place outside the European Union (EU) or the European Economic Area (EEA).

j. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

IX. Webinars

a. Type and purpose of the processing

We use “GoToMeeting or GoToWebinar” to conduct “online meetings”. If we want to record, we will inform you transparently in advance and ask for your consent. The fact of the recording is also displayed in the app.

If necessary for the purpose of logging the results of an online meeting, we will log the chat content.

In the case of online seminars, we can also process the questions asked by online seminar participants for the purpose of recording and following up webinars.

If you are registered as a user at “LogMeIn”, reports about “online meetings” (meeting metadata, data on dialing in, questions and answers in webinars, survey function in webinars) can be saved at “LogMeIn” for up to one month.

Note: If you access the “GoToMeeting or GoToWebinar” website, the provider is responsible for the data processing. Calling up the website is only necessary for use in order to download the software for using "GoToMeeting or GoToWebinar".

If you do not want to or cannot use the “GoToMeeting or GoToWebinar” app, the basic functions can also be used via a browser version, which you can also find on the “LogMeIn” website: https://t1p.de/38zc

b. Legal basis of the processing

Processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the effective implementation of "online meetings" and on the basis of consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR.

c. Data categories

  • User information: first name, last name, telephone (optional), email address, password (if "single sign-on" is not used), profile picture (optional), department (optional)

  • Meeting metadata: subject, description (optional), participant IP addresses, device / hardware information

  • For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of the online meeting chat.

  • When dialing in with the phone: information on the incoming and outgoing phone number, country name, start and end time. Possibly. further connection data such as the IP address of the device can be saved.

  • Text, audio and video data: You may have the option of using the chat, question or survey functions in an "online meeting". In this respect, the text entries you make are processed in order to display them in the "online meeting" and, if necessary, to log them. In order to enable the display of video and the playback of audio, the data from the microphone of your terminal device and any video camera on the terminal device are processed accordingly during the duration of the meeting. You can switch off or mute the camera or microphone yourself at any time using the “GoToMeeting or GoToWebinar” applications.

In order to take part in an "online meeting" or to enter the "meeting room", you must at least provide information about your name. However, this can be pseudonymized in the settings.

d. Recipients

The recipients of the data are internal employees of Marketing and LogMeIn as processors. Further information on data protection and data security from LogMeIn can be found here: https://www.logmeininc.com/de/gdpr/gdpr-compliance

e. Storage periods

After the purpose and the end of the use of GoToWebinar by us, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to the content and services we offer.

g. Third country transfer

LogMeIn Inc. is based in the USA. In order to guarantee the level of data protection in the USA, we have concluded the standard data protection clauses with LogMeIn Inc.

h. Right of withdrawal

You can object to the processing of your personal data at any time with effect for the future (if the processing is based on Art. 6 Para. 1 lit f GDPR). You can inform us of your revocation at any time using the contact option given at the beginning of this data protection notice.

i. Automated decision making and profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

X. Website visit

a. Type and purpose of the processing

When you access our website, i.e., when you do not register or otherwise submit information, information of a general nature is automatically collected. This information (server log files) includes, for example, the type of browser, the operating system used, the domain name of your Internet service provider, your IP address and the like. This is exclusively information that does not allow any conclusions to be drawn about your person. In particular, they are processed for the following purposes:

  • Ensuring a smooth connection setup of the website,

  • Ensuring a smooth use of our website,

  • evaluation of system security and stability, and

  • for other administrative purposes.

We do not use your data to draw conclusions about your person. Information of this kind is statistically evaluated by us, if necessary, in order to optimize our website and the technology behind it. Under certain circumstances, we also use another service provider in order to be able to present the data protection declaration. In this case, an embedding code is used, via which your IP address is transmitted to said service provider.We process your data on the basis of our legitimate interest for a limited period of time, in order to initiate a derivation to personal data in the event of unauthorized access or attempted access to local servers and to be able to properly present the privacy policy.

b. Legal basis of the processing

The processing is carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website.

c. Data categories

Device, browser, operating system, location and IP address.

d. Recipients

Recipients of the data are internal employees of the Marketing, IT departments and, if applicable, processors who act as processors for the operation and maintenance of our website.

e. Storage periods

The data is deleted as soon as it is no longer required for the purpose for which it was collected. This is generally the case for data used to provide the website when the respective session has ended.

f. Legal / contractual requirement

The provision of the aforementioned personal data is neither legally nor contractually required. However, without the IP address, the service and functionality of our website is not guaranteed. In addition, individual services and services may not be available or may be limited.

g. Third country transfer

Processing outside the European Union (EU) or the European Economic Area (EEA) cannot be ruled out. In order to be able to guarantee the level of data protection in the USA, we have concluded standard data protection clauses with our hosting provider.

h. Right of withdrawal

You have the right to object to the processing of your personal data at any time. You can notify us of your revocation at any time using the contact option provided at the beginning of this privacy notice.

i. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

XI. Use of Cookies

a. Type and purpose of the processing

Like many other websites, we also use so-called "cookies".

Cookies are simple files that store information about our website and your use of it. These small files are optionally created by your browser automatically through the use of our website and stored locally on your respective end device. This does not mean that we have thereby gained immediate knowledge of your identity. The use of cookies serves to make the use of our offer more pleasant for you.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device for longer. These cookies enable us to recognize your browser on your next visit.

We generally distinguish between technically necessary and non-necessary cookies:

Technically necessary cookies ("first party cookies")

are required for the operation of a website and are essential for navigating on it and using its functions.

Non-essential cookies, on the other hand, are mostly performance cookies and marketing & third party cookies that allow, for example, the number of visitors and traffic sources to be recorded and counted in order to measure and improve the performance of the website. They are also used to find out if certain pages are experiencing problems or errors, which pages are the most popular and how visitors navigate the site.

Performance cookies are used to track visits and individual activities on web pages. They are used to statistically record and evaluate the use of websites.

Marketing & Third Party Cookies originate, among others, from external advertising companies and are used to collect information about the websites visited by the user, for example, to create targeted advertising for the user.

The list of cookies used can be found in our cookie banner.

b. Legal basis of the processing

The use of technically necessary cookies ("first party cookies") is possible without the consent of the website visitor and is subject to a legitimate interest in the economic operation and optimization of our website and services within the meaning of Article 6 (1) sentence 1 lit. f DSGVO.

The use of cookies that are not necessary, such as performance cookies and marketing & third party cookies is subject to the consent of the website visitor in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO.

c. Data categories

  • IP address

  • Browser used

  • Operating system and end device used

  • Internet connection

  • Session ID of the cookie

  • Time of the visit

d. Recipients

  • Named in the course of the privacy policy

e. Storage periods

The user can set his web browser in such a way that the storage of cookies on his end device is generally prevented or he is asked each time whether he agrees to the setting of cookies. Once cookies have been set, the user can delete them at any time. How this works is described in the help function of the respective web browser.

A general deactivation of cookies may lead to functional restrictions of this website.

The setting of cookies can also be restricted or deactivated with the help of plug-ins such as https://www.ghostery.com/.

f. Legal / contractual requirement

The provision of your personal data in cookies is voluntary in the case of cookies that are not necessary, solely on the basis of your consent (so-called opt-in cookies). You can also prevent the use of preset, technically necessary cookies (so-called opt-out cookies) via your browser settings. However, without consent, the service and functionality of our website is not guaranteed. In addition, individual services and services may not be available or may be limited.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). You can find more details in the following paragraphs.

h. Right of withdrawal

You can implement the revocation to the consent of all cookies at any time with effect for the future in your browser settings or change the selection in the cookie banner. To do this, you can use the fingerprint button, which is displayed in the bottom corner of the website.

i. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling when collecting cookies.

XII. HubSpot Analytics

a. Type and purpose of processing

We use HubSpot Analytics by HubSpot, Inc., Cambridge, Massachusetts, USA, as an analysis service for the statistical evaluation of our online offer. This includes, for example, the number of times our online offering is called up, subpages visited, form submissions and the length of time visitors stay. HubSpot Analytics uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity.

b. Legal basis of the processing

We process data using HubSpot Analytics for the purpose of optimizing our website and for marketing purposes on the basis of your consent pursuant to Art. 6 (1) lit. a. GDPR.

c. Data categories

Link clicks, form submissions, behavior and interaction on the website.

d. Recipients

Recipients of the data are internal employees of the Marketing and Sales departments and HubSpot as a processor. For this purpose, we have concluded the corresponding order processing agreement with HubSpot.

e. Storage periods

Data is processed in this context only as long as the necessity exists. Afterwards, they will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this Privacy Policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To guarantee the level of data protection in the USA, we have concluded standard data protection clauses with HubSpot.

h. Revocation of consent

You can revoke your consent to the storage of your personal data at any time with effect for the future.

i. Profiling

As a responsible company, we do not use automatic decision-making or profiling for this data processing.

XIII. Algolia Search Engine

a. Type and purpose of the processing

This website uses the Algolia search technology via an API. To use the functions of the Algolia search, it is necessary to store your IP address and your search query. This information is usually transferred to a server of Algolia in Europe or the USA and stored there. The provider of this site has no influence on this data transfer.

b. Legal basis of the processing

The use of the Algolia search is in the interest of a good accessibility and easy findability of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

c. Data categories

  • IP address (used for location determination)

  • Search term

  • Time of the search

d. Recipients

  • Employees of the IT and marketing department of the own company

  • Algolia as processor

e. Storage periods

Data will only be processed in this context as long as it is necessary. Thereafter, they will be deleted unless there are legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this Privacy Policy.

f. Legal / contractual requirement

You can object to the processing at any time. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Algolia.

h. Right of withdrawal

You have the right to object to the processing of your personal data at any time. You may notify us of your revocation at any time using the contact option provided at the beginning of this Privacy Notice.

i. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

XIV. Google Tag Manager

a. Type and purpose of the processing

Use of Google Tag Manager: Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager: http://www.google.de/tagmanager/use-policy.html.

b. Legal basis of the processing

The processing of the entered data is based on our legitimate interest in improving the functionality of our website (Art. 6 para. 1 lit. f GDPR).

c. Data categories

Interactions on the website

d. Recipients

Recipients of the data are internal employees of the Marketing and Performance Marketing departments and Google as a processor. For this purpose, we have concluded the corresponding order processing agreement with Google.

e. Storage periods

Data is only processed in this context for as long as it is necessary. After that, they will be deleted, provided that there are no legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.

f. Legal / contractual requirement

You can object to the processing at any time. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.

h. Profiling

The Google Tag Manager tool can be used to evaluate the behavior of visitors to the website and analyze their interests.

XV. Vimeo

a. Type and purpose of processing

Third-party content is integrated on this website. For videos from Vimeo that are embedded on our site, the tracking tool Google Analytics is automatically integrated. We have no influence on the tracking settings and the analysis results collected via this, nor can we view them. In addition, web beacons are set for website visitors via the embedding of Vimeo videos. The purpose and scope of the data collection and the further processing and use of the data by the providers, as well as your rights in this regard and setting options for protecting your privacy, can be found in the privacy policy of Vimeo: https://vimeo.com/privacy.

b. Legal basis of the processing

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

- Browser information - Browser language - Browser type - Cookie information - Device information - Device operating system - Information from third-party sources - IP address - Pages visited - Referrer URL - Information users provide on the site - Search queries.

d. Recipients

Recipients of the data are internal employees of the Marketing Department and Vimeo as service provider.

e. Storage periods

After the end of the purpose and the end of the use of Vimeo by us, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third party transfer

This content is provided by Vimeo LLC. Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA. To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Vimeo.

h. Right of withdrawal

You can revoke your consent to the storage of your personal data at any time with effect for the future.

i. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

XVI. YouTube

a. Type and purpose of the processing

On some of our websites, we embed YouTube videos. The operator of the corresponding plugins is YouTube, Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. When you visit a page with the YouTube plugin, a connection to YouTube servers is established. This tells YouTube which pages you are visiting. If you are logged into your YouTube account, YouTube can assign your surfing behavior to you personally. You can prevent this by logging out of your YouTube account beforehand. If a YouTube video is started, the provider uses cookies that collect information about user behavior. For more information on the purpose and scope of data collection and processing by YouTube, please refer to the provider's privacy policy, where you will also find further information on your rights in this regard and settings options for protecting your privacy (https://policies.google.com/privacy).

b. Legal basis of the processing

The legal basis for the integration of YouTube and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

Device information - IP address - Referrer URL - Videos viewed.

d. Recipients

Recipients of the data are internal employees of the department {department/s} and YouTube as the service provider.

e. Storage periods

Anyone who has deactivated the storage of cookies for the Google Ad Program will not have to deal with any such cookies when watching YouTube videos. However, YouTube also stores non-personal usage information in other cookies. If you would like to prevent this, you must block the storage of cookies in the browser. Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy/

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.

h. Right of withdrawal

You can revoke your consent to the storage of your personal data at any time with effect for the future.

i. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

XVII. Google Maps

a. Type and purpose of the processing

On this website we use the offer of Google Maps. Google Maps is operated by Google Cloud EMEA ltd,. This allows us to display interactive maps directly on the website and enables you to use the map function conveniently. You can find more information about data processing by Google in the Google privacy policy. There you can also change your personal privacy settings in the Privacy Center. By visiting the website, Google receives information that you have called up the corresponding sub-page of our website. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want the assignment in your profile at Google, you must log out of Google before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right.

b. Legal basis of the processing

The legal basis for the integration of Google Maps and the associated data transfer to Google is your consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

IP address - location information - usage data - date and time of visit - URLs.

d. Recipients

Recipients of the data are internal employees of the Marketing and IT departments and Google as a processor.

e. Storage periods

Data will only be processed in this context as long as the corresponding consent has been given. Afterwards, they will be deleted unless there are legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.

h. Right of withdrawal

If you do not want Google to collect, process or use data about you via our website, you can deactivate JavaScript in your browser settings. In this case, however, you will not be able to use our website or only to a limited extent. You can revoke your consent to the storage of your personal data at any time with effect for the future.

i. Automated decision making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

j. Use of the Google Maps Static API

When using Google Maps, the Google Maps Static API may be called (gstatic.com).

XVIII. Google Analytics

a. Type and purpose of the processing

This website uses Google Analytics, a web analysis service from the Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland. Google Analytics uses so-called "cookies", ie text files that are stored on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. However, due to the activation of IP anonymization on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The purpose of data processing is to evaluate the use of the website and to compile reports on activities on the website. Based on the use of the website and the Internet, further related services are then to be provided.

b. Legal basis for processing

The data entered is processed on the basis of the user's consent (Art. 6 Para. 1 lit. a GDPR).

c. Data categories

  • example: IP address (shortened / anonymized

  • Date and time of visit - Usage data - Click path - App updates - Browser information - Device information - JavaScript support - Pages visited - Referrer URL - Downloads - Flash version - Location information - Purchase activity - Widget interactions

d. Recipients

  • Employees in the IT and marketing department of your own company

  • Google Building Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland

e. Storage periods

In this context, data is only processed as long as the relevant consent is available. They will then be deleted unless there are any statutory retention requirements. To contact us in this context, please use the contact details given at the beginning of this data protection declaration.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this can lead to functional restrictions on the website.

g. Third country transfer

The processing also takes place outside the European Union (EU) or the European Economic Area (EEA). In order to guarantee the level of data protection in this third country, we have concluded the standard data protection clauses with Google (Analytics).

h. Right of withdrawal

You can revoke your consent to the storage of your personal data at any time with effect for the future.

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the available browser plug-in: "Browser add-on to deactivate Google Analytics".

i. Automatic decision making and profiling

With the help of the tracking tool Google Analytics, the behavior of the website visitors can be evaluated and the interests analyzed. To do this, we create a pseudonymous user profile.

XIX. Matomo

a. Type and purpose of processing

This website uses Matomo (formerly Piwik), an open source software for statistical analysis of visitor traffic. The provider of the Matomo software is InnoCraft Ltd, 150 Willis St, 6011 Wellington, New Zealand. Matomo uses so-called cookies, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is stored on our server in Germany. The IP address is anonymized immediately after processing and before it is stored. You have the option to prevent the installation of cookies by changing the settings of your browser software. We would like to point out that if you change this setting, not all functions of this website may be available. You can decide whether a unique web analysis cookie may be stored in your browser to enable the website operator to collect and analyze various statistical data. For more information on the privacy settings of the Matomo software, please see the following link: https://matomo.org/docs/privacy-how-to/.

b. Legal basis of the processing

The processing of the data is based on the user's consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

IP address (shortened/anonymized) - date and time of visit - usage data - click path - app updates - browser information - device information - JavaScript support - visited pages - referrer URL - downloads - Flash version - location information - purchase activity - widget interactions.

d. Recipients

Recipients of the data are internal employees of the Marketing Department. Since we host Matomo ourselves, no connection is made to Matomo's servers.

e. Storage periods

Data is deleted as soon as it is no longer required for our recording purposes.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Although Matomo is based in New Zealand, all data is hosted by Matomo on our own servers located in Germany.

Therefore, the processing does not take place outside the European Union (EU) or the European Economic Area (EEA).

h. Right of withdrawal

You can revoke your consent to the storage of your personal data at any time with effect for the future.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

i. Automated decision-making and profiling

With the help of the tracking tool Matomo, the behavior of visitors to the website can be evaluated and interests analyzed. For this purpose, we create a pseudonymous user profile.

XX. Google Ads Remarketing

a. Type and purpose of the processing

We use the remarketing or "similar target groups" function of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google, which is responsible for the processing of your data and compliance with the applicable data protection laws. The application serves the purpose of analyzing visitor behavior and visitor interests. Google uses cookies to carry out the analysis of website usage, which forms the basis for creating interest-based advertisements. The cookies are used to record visits to the website and anonymised data on the use of the website. There is no storage of personal data of the visitors to the website. If you subsequently visit another website in the Google Display Network, you will see advertisements that are highly likely to take into account previously accessed product and information areas.

b. Legal basis for the processing

The data entered is processed on the basis of the user's consent (Art. 6 Para. 1 lit. a GDPR).

c. Data categories

Browser language - Browser type - Ads clicked - Cookie ID - Cookie information - Date and time of visit - IP address - Referrer URL - Usage data - Web request

d. Recipients

  • Employees in the IT and marketing department

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

  • e. Storage periods

e. Storage periods

Data will only be processed in this context as long as the corresponding consent has been given. Thereafter, they will be deleted, unless there are legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this privacy policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.

h. Right of withdrawal

You can revoke your consent to the storage of your personal data at any time with effect for the future.
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

i. Automatic decision-making and profiling

The tracking tool can be used to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

XXI. Google Ads Conversion Tracking

a. Type and purpose of the processing

We use the online advertising program "Google Ads" on our website and in this context conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Accordingly, Google Ireland Limited is the company affiliated with Google that is responsible for processing your data and complying with applicable data protection laws. When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Thus, there is no way that cookies can be tracked across Ads customers' websites. The information obtained with the help of the conversion cookie is used for the purpose of creating conversion statistics. Here, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to identify users personally.

b. Legal basis of the processing

The processing of the entered data is based on the user's consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

Browser language - Browser type - Clicked ads - Cookie ID - Cookie information - Date and time of visit - IP address - Referrer URL - Usage data - Web request.

d. Recipients

  • Employees of the IT and marketing department

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

e. Storage periods

Data will only be processed in this context as long as the corresponding consent has been given. Thereafter, they will be deleted, unless there are legal retention obligations to the contrary. To contact us in this context, please use the contact details provided at the beginning of this Privacy Policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded standard data protection clauses with Google.

h. Right of withdrawal

You can revoke your consent to the storage of your personal data at any time with effect for the future.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

i. Automatic decision-making and profiling

The tracking tool can be used to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

XXII. Google Doubleclick

a. Type and purpose of the processing

We use the service for the online marketing procedure Google "Doubleclick".

The purpose of this service is to place ads in the Google advertising network (e.g., in search results, in videos, on web pages, etc.). Double Click is characterized by the fact that ads are displayed in real time based on presumed interests of users. This allows us to display ads for and within our online offering in a more targeted manner to present users only with ads that potentially match their interests. If, for example, a user is shown ads for products he or she was interested in on other online offers, this is referred to as "remarketing". For these purposes, when our website and other websites on which the Google advertising network is active are called up, a code is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also referred to as "web beacons") are integrated into the website. With their help, an individual cookie, i.e. a small file, is stored on the user's device (comparable technologies can also be used instead of cookies). This file records which web pages the user has visited, which content the user is interested in and which offers the user has clicked on, as well as technical information about the browser and operating system, referring web pages, time of visit and other information about the use of the online offer.

The IP address of the user is also recorded, whereby this is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is transferred in full to a Google server in the USA and shortened there. The aforementioned information may also be combined on the part of Google with such information from other sources. If the user subsequently visits other websites, he may be shown ads tailored to his interests based on his user profile.

User data is processed pseudonymously within the Google advertising network. This means that Google does not store and process the name or e-mail address of the user, for example, but processes the relevant data on a cookie basis within pseudonymous user profiles. I.e. from Google's perspective, the ads are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who this cookie holder is. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization.

b. Legal basis of the processing

The processing is carried out in accordance with Art. 6 para. 1 lit. a DSGVO on the basis of your voluntary consent.

c. Data categories

Browser information - Click path - Cookie information - Date and time of visit - Demographic data - Device identifier - Location information - Hardware/software type - Internet service provider - IP address - Frequency with which ads are seen - Providing domains - Interaction data - Views of the page - Search history.

d. Recipients

Recipients of the data are internal employees of the Performance Marketing department and Google as a processor.

e. Storage periods

After the end of the purpose and the end of the use of Google Doubleclick by us, the data collected in this context will be deleted.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. Without the provision of your personal data, we cannot grant you access to our offered content and services.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded the standard data protection clauses with Google.

h. Right of withdrawal

For more information about Google's use of data, settings and opt-out options, please see Google's privacy policy (https://policies.google.com/technologies/ads) and the settings for the display of advertisements by Google(https://adssettings.google.com/authenticated). You can revoke your consent to the storage of your personal data at any time with effect for the future.

i. Automated decision-making and profiling

As a responsible company, we do not use automated decision-making or profiling for this data processing.

XXIII. LinkedIn Insight Tag

a. Type and purpose of the processing

This website uses services provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. The LinkedIn Insight Tag enables the collection of data about visits to this website, including URL, referrer URL, IP address, device and browser characteristics, timestamps and page views. LinkedIn does not share any personally identifiable information with the owner of this website, but only provides aggregate reports on website audience and ad performance. LinkedIn also provides retargeting for website visitors so that the owner of this website can use this data to display targeted ads outside of their website without identifying the member. The purpose of the data collection is to analyze visits to our website and campaign results in order to provide you with interesting information.

b. Legal basis of the processing

The processing of the entered data is based on the user's consent (Art. 6 para. 1 lit. a GDPR).

c. Data categories

Cookies

d. Recipients

  • IT and marketing department employees

  • LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

e. Storage periods

The data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days. To contact us in this regard, please use the contact details provided at the beginning of this Privacy Policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded the standard data protection clauses.

h. Right of withdrawal

You can revoke your consent to the storage of your personal data at any time via the cookie banner with effect for the future.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

Members of LinkedIn can control the use of their personal data for advertising purposes in their account settings.

i. Automatic decision-making and profiling

The tracking tool can be used to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

XXIV. Online presence in social media

We maintain online presences within social networks in order to inform users active there about our services and to communicate directly via the platforms if they are interested. We are currently represented in the following networks:

https://twitter.com/diva_excellence

https://www.linkedin.com/company/divaedigitalvalueexcellence

https://www.facebook.com/divae.gmbh

https://www.youtube.com/channel/UCThwSWflt2lOUZGwc3MhLcA

https://www.instagram.com/diva_excellence/

https://www.xing.com/pages/divaedigitalvalueexcellencegmbh

All of our social media channels can only be accessed by visitors to the website via an external link. We do not use any plugins or other interfaces on our website that the respective networks offer for embedding the offers on websites.

We have no influence on the data collection and its further use by the social networks. Thus, there is no knowledge about the extent to which, where and for how long the data is stored, to what extent the networks comply with existing deletion obligations, what evaluations and links are made with the data and to whom the data is passed on. We therefore expressly draw attention to the fact that user data (e.g. personal information, IP address) is stored by the operators of the networks in accordance with their data usage guidelines and used for business purposes.

We process the data of users in the social media presences insofar as they contact and communicate with us via, for example, comments or direct messages.

The legal basis for the processing of the user's data is Art. 6 (1) lit. b and f GDPR.

  • Twitter

  • LinkedIn

  • Facebook/Instagram

  • YouTube

  • Xing

Within our online offer, no functions and contents of the service Twitter, offered by Twitter Inc., 795 Folsom Street, Suite600, San Francisco, CA 94107 or 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, are integrated. The Twitter channels can only be accessed via an external link. If visitors to the website are members of the Twitter platform, Twitter can assign the call to the social media channel to the user's profile if the user visits our Twitter profile while logged in. We point out that we have no influence on the content, scope of use, of the data collected by Twitter Inc. For further information in this regard, we refer to the pages of Twitter Inc. at: http://twitter.com/privacy Furthermore, we would like to point out that you can make appropriate changes to your Twitter account to protect your privacy.

No functions and contents of the LinkedIn service, offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland, are integrated within our online offer. The LinkedIn channels can only be accessed via an external link.If visitors to our website are members of the LinkedIn platform, LinkedIn can assign the call to the social media channel to the user's profile there if the user visits the LinkedIn profile while logged in. We point out that we have no influence on the content, scope of use of the data collected by LinkedIn. For further information in this regard, we refer to the privacy policy of LinkedIn: https://www.linkedin.com/legal/privacy-policy?trk=hb_ft_priv.

You can access the social media network Facebook via external links on our website. All functions in the social media network are offered by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Dublin 2, Ireland. The Facebook channels can only be accessed via an external link.If you are logged in to Facebook with your own profile and access our social media channel, Facebook can assign your visit to your logged-in profile. If you do not want your user account to be associated with your IP address, please log out of your Facebook account before using our website.

For more information on the processing of your data, please refer to Facebook's privacy policy: https://facebook.com/privacy/explanation and to our Facebook Fanpage Data Policy, which can be found below.

No functions and contents of the YouTube service, offered by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, are integrated within our online offer. The YouTube channels are only accessible via an external link. If visitors to the website are members of the YouTube platform, YouTube can assign the call to the social media channel to the user's profile if the user visits our YouTube profile while logged in. We point out that we have no influence on the content, scope of use, of the data collected by YouTube. For further information in this regard, please refer to YouTube's privacy policy: https://policies.google.com/privacy?hl=de&gl=de. Furthermore, we would like to point out that you can make appropriate changes to your YouTube account to protect your privacy.

Within our online offer, no functions and contents of the service Xing, offered by New Work SE, Dammtorstraße 29-32, 20354 Hamburg, Germany, are integrated. The Xing channels are only accessible via an external link. If visitors to our website are members of the Xing platform, Xing can assign the call to the social media channel to the user's profile there if the user visits the Xing profile while logged in. We point out that we have no influence on the content, scope of use of the data collected by Xing. For further information in this regard, we refer to the privacy policy of Xing: https://www.xing.com/app/share?op=data_protection

XXV. Data Policy Meta (formerly Facebook) Fanpage

diva-e Digital Value Excellence GmbH operates an online presence on Meta, a so-called Facebook Fanpage. The following additional information on data processing applies to visits to our fan page. Information on data protection on Meta in general can be found here (https://www.facebook.com/about/privacy/).

1. joint responsibility, contact details, company data protection officer:

We are jointly responsible with Meta for the operation of our Facebook Fanpage in accordance with Art. 26 GDPR. For this purpose, we have stipulated in an agreement with Meta who fulfills which obligations with regard to data protection. This agreement can be accessed here (https://www.facebook.com/legal/terms/page_controller_addendum). Accordingly, Meta is primarily responsible for providing the data subject with information about the joint processing and enabling him or her to exercise his or her data protection rights. Notwithstanding the above, we hereby inform you about your visit to our Fanpage.

Our contact details are:

diva-e Digital Value Excellence GmbH

Ella-Barowsky-Strasse 44 10829 Berlin, Germany

info@diva-e.com

You can reach Facebook at:

Meta Platforms Ireland Ltd.

4 Grand Canal Square,

Grand Canal Harbour,

Dublin 2, Ireland

You can reach Facebook online here (https://www.facebook.com/help/contact/2061665240770586)

You can reach our company data protection officer at:

Bugl & Kollegen Gesellschaft für Datenschutz und Informationssicherheit mbH

Alexander Bugl

Eifelstraße 55

93057 Regensburg

E-mail: kontakt@buglundkollegen.de

You can reach Meta's data protection officer at

https://www.facebook.com/help/contact/540977946302970.

2. collection and storage of personal data and the type and purpose and use thereof:

a) Data collected by Meta:

If you are a Meta user, Meta collects the data described in the Facebook Data Policy under "What types of information do we collect?". If you are not a Meta user, cookies provided with identifiers, small text files, may still be stored in your browser, which enable so-called tracking of your user behavior.

As a rule, the user data during a visit to Meta is also processed by Meta for market research and advertising purposes. Based on the user behavior (including when visiting our Fanpage), complex user profiles are created, which Meta can use to play personalized advertisements to the visitor within and outside of Meta. More information on this can also be found in the Facebook data policy.

If you do not agree with this, you can object here (opt-out).

b) Data used by us ("Page Insights") and legal basis:

Meta provides us with statistics and usage data that we can use to analyze the use of our Fanpage (so-called "Page Insights"). This enables us to continuously improve our offer on Meta. We, as the operator, do not make any decisions regarding the processing of Insights data and any other information resulting from Art. 13 of the GDPR, such as the storage duration of cookies on user devices. The primary responsibility under the GDPR for the processing of Insights Data lies with Meta and Meta fulfills all obligations under the GDPR with respect to the processing of Insights Data.

We as the site administrator have no other way, including via user tracking, to evaluate user behavior on our Fanpage. It is also fundamentally not possible for us to identify the visitor to the Fanpage on the basis of the page insights. In particular, we have no right under the agreement to require Meta to disclose individual visitor data. Identification is only possible for us if we are able to assign individual profile pictures to "Like" Page Views; however, this is only possible to the extent that our Fanpage has been marked with "Like" by the corresponding visitor, and the "Like" Page Views is set to "public".

What information Meta uses to create page insights can be found here.

The operation of the Faceboook fan page and the use of page insights serves our legitimate interest in effective external presentation and efficient communication with our customers and prospects. This interest justifies the operation of the page both to the legitimate interests of Meta users, as well as to visitors to our fan page who do not have a Meta account. Accordingly, the legal basis is Art. 6 para. 1 lit. f) GDPR.

3. Sharing of data with third parties:

Data collected by Meta is shared and processed throughout the Meta group. The Meta group also includes, for example, Instagram, WhatsApp and Oculus. For example, information collected through Meta is used to display personalized ads to users on Instagram, or information from WhatsApp is used to take action against accounts that send spam through WhatsApp on Meta. This information can be found in the Facebook Data Policy under "How do Meta companies work together?".

The processing of data by Meta may involve the transfer of user data outside the European Economic Area (EEA), in particular the USA.

4. Right to object:

If your personal data is processed on the basis of legitimate interests pursuant to Article 6 (1) (f) GDPR, you have the right to object to the processing of your personal data pursuant to Article 21 GDPR, provided that there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which is implemented by us without specifying a particular situation. If you would like to exercise your right of revocation or objection, an e-mail to datenschutz@diva-e.com is sufficient.

5. Data subject rights:

You have the right to revoke your consent to us at any time. This has the consequence that we may no longer continue the data processing based on this consent for the future. Furthermore, you have the right to information according to Art. 15 GDPR, the right to correction according to Art. 16 GDPR, the right to deletion according to Art. 17 GDPR, the right to restriction of processing according to Art. 18 GDPR, as well as the right from data portability from Art. 20 GDPR. Furthermore, you have the right to lodge a complaint with a competent data protection supervisory authority (Art. 77 GDPR).

In principle, you can assert your data subject rights against Meta as well as against us. Since only Meta has direct access to your user data, you can most effectively assert your data protection rights against Meta.

XXVI. Tealium Audience Stream

a. Type and purpose of the processing

This website uses "Tealium Audience Stream", a service provided by Tealium Inc, 11085 Torreyana Road, San Diego, CA 92121, USA ("Tealium"), whereby data is collected and stored, from which usage profiles are created using pseudonyms. The processing of your personal data within the scope of this service only takes place with your express consent. On our behalf, Tealium will use this information to tailor your use of the website automatically and in real time and to play out content. For this purpose, the following information is collected, for example: widgets seen and clicked, articles, advertisements, case studies, visitor numbers, topic of the page, etc. The pseudonymized usage profiles are not merged with personal data about the bearer of the pseudonym without a separate consent to be given. The IP address transmitted by your browser is also not merged with the usage profiles. Cookies or, in the case of mobile devices, similar technologies are used to create the usage profiles. The information generated by the cookie about your use of this website is stored exclusively in the European Union.

b. Legal basis of the processing

We process your personal data within Tealium Audience Stream on the following legal basis:

  •  Your consent pursuant to Art. 6 para. 1 subpara. 1 letter a) GDPR.

c. Data categories

Widgets viewed and clicked, articles, advertisements, case studies, number of visitors, topic of the page.

d. Recipients

  • Employees of the IT and marketing department

e. Storage periods

The data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days. To contact us in this regard, please use the contact details provided at the beginning of this Privacy Policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded the standard data protection clauses.

h. Right of withdrawal

You can revoke your consent at any time with effect for the future by sending us a message to this effect to the contact data stated here in the privacy policy. You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we would like to point out that in this case you may not be able to use all the functions of our website in full.

i. Automatic decision-making and profiling

The tracking tool can be used to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

For more information on Tealium's data processing in the context of the Tealium Audience Stream service, please refer to Tealium's privacy policy: https://tealium.com/privacy/

XXVII. Outbrain

a. Type and purpose of the processing

This website uses "Outbrain", a web-based native advertising platform provided by Outbrain Inc, 222 Broadway 19th Floor, New York, NY 10038. Using Outbrain enables us to provide relevant recommendations based on the interests of our users. For this purpose, Outbrain does not process personal data such as email addresses or names. Outbrain assigns a unique user ID to each person who interacts with the Outbrain widget through our network of publishers, and may also collect some user agent data and the person's IP address. Outbrain processes data based on key GDPR concepts, including data minimization, purpose limitation, accuracy, transparency, secure sharing, confidentiality, and privacy by design.

b. Legal basis of the processing

We process your personal data within Tealium Audience Stream on the following legal basis:

  • Your consent pursuant to Art. 6 para. 1 subpara. 1 letter a) GDPR.

c. Data categories

IP address, user agent data, timestamp.

d. Recipients

  • Employees of the IT and marketing department

  • Outbrain Inc, 222 Broadway 19th Floor, New York, NY 10038
    e. Retention Periods

e. Storage periods

The data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days. To contact us in this regard, please use the contact details provided at the beginning of this Privacy Policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded the standard data protection clauses.

h. Right of withdrawal

You can revoke your consent at any time with effect for the future by sending us a message to this effect to the contact data stated here in the privacy policy. You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we would like to point out that in this case you may not be able to use all the functions of our website in full.

i. Automatic decision-making and profiling

The tracking tool can be used to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

XXVIII. OHRBEIT

a. Type and purpose of the processing

This website uses a so-called widget as iFrame code from Fair Recruitment GmbH, Untere Hauptstr. 1, 85354 Freising and its podcast platform OHRBEIT (hereinafter referred to as "OHRBEIT").
The widget can be used to access a podcast from our company on OHRBEIT, just like a link. Listening to the embedded podcast is possible without visiting the OHRBEIT site.
OHRBEIT is an online platform through which companies and public authorities, as well as legally capable personalities, present job podcasts instead of job advertisements or present themselves in topic-related podcasts. OHRBEIT does not collect any personal data from you via our website just by using the widget, nor are cookies set on your terminal device in the process. If the link function of the widget is used, you will be redirected to ohrbeit.de.
The data protection provisions of OHRBEIT that apply to the linked website can be viewed at www.ohrbeit.de/datenschutz.

b. Legal basis of the processing

We process your personal data within Tealium Audience Stream on the following legal basis:

  • Your consent pursuant to Art. 6 para. 1 subpara. 1 letter a) GDPR.

c. Data categories

Anonymized number of plays

d. Recipients

  • Employees of the IT and marketing department

  • Fair Recruitment GmbH, Untere Hauptstr. 1, 85354 Freising

e. Storage periods

The data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days. To contact us in this regard, please use the contact details provided at the beginning of this Privacy Policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded the standard data protection clauses.

h. Right of withdrawal

You can revoke your consent at any time with effect for the future by sending us a message to this effect to the contact data stated here in the privacy policy. You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we would like to point out that in this case you may not be able to use all the functions of our website in full.

i. Automatic decision-making and profiling

The tracking tool can be used to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

XXIX. Microsoft Ads Remarketing

a. Type and purpose of the processing

We use the online advertising program "Microsoft Ads Remarketing" of Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; "Microsoft") and in this context the Microsoft Advertising Conversion Tracking. The data processing serves marketing and advertising purposes and the purpose of measuring the success of the advertising measures (conversion tracking). For this purpose, Microsoft sets a cookie on your terminal device if you have accessed our website via a Microsoft Bing ad. In this way, Microsoft and we can recognize that someone has clicked on an ad, been redirected to our website and reached a previously determined target page ("conversion site"). We only learn the total number of users who clicked on a Bing ad and were then redirected to the conversion site. Microsoft collects, processes and uses information via the cookie, from which usage profiles are created using pseudonyms. These usage profiles are used to analyze visitor behavior and are used to display advertisements. No personal information about the identity of the user is processed. For more information on data protection and the cookies used by Microsoft Advertising, please see: Data Security Policy and Privacy Policy

b. Legal basis of the processing

We process your personal data within Tealium Audience Stream on the following legal basis:

  • Your consent pursuant to Art. 6 para. 1 subpara. 1 letter a) GDPR.

c. Data categories

Browser language, Cookie information, Digital signature, IP address, Microsoft Click ID, Page title, Referrer URL, Screen color depth, Screen resolution, Usage data, Version of UET, Event information, Page load time, Page URL

d. Recipients

  • Employees of the IT and marketing department

  • Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

e. Storage periods

The data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days. To contact us in this regard, please use the contact details provided at the beginning of this Privacy Policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded the standard data protection clauses.

h. Right of withdrawal

You can revoke your consent at any time with effect for the future by sending us a message to this effect to the contact data stated here in the privacy policy. You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we would like to point out that in this case you may not be able to use all the functions of our website in full.

i. Automatic decision-making and profiling

The tracking tool can be used to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

XXX. Facebook Pixel


a. Type and purpose of the processing

We use the so-called "Facebook Pixel" of Meta Platforms Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) on our website. This allows interest-based advertisements "Facebook Ads" to be displayed to users of our website during their visit. Through the Facebook pixel, your browser automatically establishes a direct connection with Meta's server. Through the integration of the Facebook pixel, Meta receives the information that you have clicked on an ad from us or called up the corresponding website of our Internet presence.

Data collected by Meta:

If you are a Meta user, Meta collects the data described in the Facebook Data Policy under "What types of information do we collect?". If you are not a Meta user, cookies with identifiers, small text files, may still be stored in your browser, which enable so-called tracking of your user behavior.
As a rule, Meta also processes user data for market research and advertising purposes when you visit Meta. Based on user behavior (including when visiting our Fanpage), complex user profiles are created, which Meta can use to play personalized advertisements to the visitor within and outside of Meta. More information on this can also be found in the Facebook Data Policy.

If you do not agree with this, you can object here (opt-out).

Sharing of data with third parties:

Data collected by Meta is exchanged and processed within the entire Meta Group. The Meta Group also includes, for example, Instagram, WhatsApp and Oculus. For example, information collected through Meta is used to display personalized ads to users on Instagram, or information from WhatsApp is used to take action against accounts that send spam through WhatsApp on Meta. This information can be found in the Facebook Data Policy under "How do Meta companies work together?".

Meta's processing of data may involve transferring user data outside of the European Economic Area (EEA), specifically the United States.

b. Legal basis of the processing

We process your personal data within Tealium Audience Stream on the following legal basis:

  • Your consent pursuant to Art. 6 para. 1 subpara. 1 letter a) GDPR.

c. Data categories

Ads viewed, Content viewed, Device information, Geographic location, HTTP-header, Interactions with advertisement, services, and products, IP address, Items clicked, Marketing information, Pages visited, Pixel ID, Referrer URL, Usage data, User behaviour, Facebook cookie information, Facebook user ID, Usage/click behaviour, Browser information, Device operating system, Device ID, User agent, Browser type

d. Recipients

  • Employees of the IT and marketing department

  • Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland

e. Storage periods

The data is encrypted, anonymized within seven days and the anonymized data is deleted within 90 days. To contact us in this regard, please use the contact details provided at the beginning of this Privacy Policy.

f. Legal / contractual requirement

The provision of your personal data is voluntary, based solely on your consent. If you prevent access, this may result in functional restrictions on the website.

g. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). To ensure the level of data protection in this third country, we have concluded the standard data protection clauses.

h. Right of withdrawal

You can revoke your consent at any time with effect for the future by sending us a message to this effect to the contact data stated here in the privacy policy. You can also prevent the storage of cookies by selecting the appropriate settings on your browser software; however, we would like to point out that in this case you may not be able to use all the functions of our website in full.

i. Automatic decision-making and profiling

The tracking tool can be used to evaluate the behavior of visitors to the website and analyze their interests. For this purpose, we create a pseudonymous user profile.

XXXI. Information on data processing during the application process – Freelancers

We hereby inform you about the processing of your personal data by diva-e Digital Value Excellence GmbH and its subsidiaries and the rights to which you are entitled under data protection law.

Who is responsible for data processing and who is the Data Protection Officer?

The responsible party for data processing is the particular diva-e Group company named.

The Data Protection Officer is:

Bugl & Kollegen GmbH

Eifelstrasse 55

93057 Regensburg

E-mail: kontakt@buglundkollegen.de

What personal data do we collect and where does it come from?

We process the following personal data as part of the selection process as well as during contract negotiations and onboarding:

- Your master data (such as first name, last name, title/name suffix, date of birth).

- Contact data (such as home address, (mobile) phone number, e-mail address)

- Skills data (e.g. specialist knowledge and proficiencies)

- Other data from the CV (e.g. information on previous and current employment or assignments, education, remuneration expectations, possible start dates/availability, photograph).

Your personal data is either collected directly from you as part of the contracting and onboarding process, in particular from application documents as well as the interview, or we lawfully receive your personal data from our freelancer management service providers and partners.

In addition, we process personal data that we have lawfully obtained from publicly available sources (e.g. professional networks).

For what purposes and on what legal basis is data processed?

We process your personal data in compliance with the provisions of the EU General Data Protection Regulation (GDPR).

Primarily, data processing assists in drafting the contract for services with you as a freelancer and is based on Art. 6 (1) b) GDPR.

Your data will be used exclusively for the specific project tender.
If your application is rejected but you would like to be included in our freelancer pool or if you would like us to consider you for another project within the company, we require you to make a declaration of consent.

How long will your data be stored?

If you are contracted by us, we store your data for the duration of the assignment and collaboration. At the end of our collaboration, we continue to store any personal data we are legally obligated to store. This is usually due to legal obligations to provide an audit trail and to retain data which is regulated, among other things, by the German Commercial Code (Handelsgesetzbuch) and the German Fiscal Code (Abgabenordnung). As stated there, storage periods can be up to ten years. In addition, personal data may be stored for the period during which claims can be asserted against us (statutory limitation period of three to thirty years).

If your application is rejected, your documents will be deleted no later than six months after completing the selection process, unless you have given us permission to retain them for a longer period (freelancer pool).

Who receives your data?

Only those persons and departments (e.g. specialist department, project manager, purchasing) in our company who participate in the decision making process regarding your recruitment receive your personal data.

As part of the contracting and onboarding process, we use Jira from Atlassian Pty Ltd’s product portfolio. For this purpose, we have concluded a contract with Atlassian Pty Ltd to process personal data on our behalf (contract processing agreement) which includes the standard data protection clauses currently applicable.

What rights can you assert as a data subject?

You have the rights from Art. 15 - 21 GDPR:

- Right to information (Art. 15 GDPR)

- Right to rectification (Art. 16 GDPR)

- Right to erasure (Art. 17 GDPR)

- Right to restriction of processing (Art. 18 GDPR)

- Right to object to processing (Art. 21 GDPR)

- Right to data portability (Art. 20 GDPR)

To do so, please contact us by e-mail at team-freelancer-management@diva-e.com

Where can you complain?

If you wish to complain, you have the choice of either contacting the Data Protection Officer mentioned above or a data protection supervisory authority.

You can use the following link to find out which data protection supervisory authority is responsible for you in the "Supervisory authorities for the non-public sector" section: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html

Will your data be transferred to a third country?

A transfer of your data to a third country cannot be ruled out. However, we have taken measures that meet the requirements pursuant to Art. 44 et seq. GDPR, e.g. concluding standard data protection clauses.

Are you obliged to provide your data?

In order to consider your application to work with us, we require your personal data to make a decision about offering an assignment as well as the contracting and onboarding process.

To what extent does automated ad hoc decisions or profiling take place?

We do not use any purely automated decision-making processes.

XXXII. ChatWerk

a. Type and purpose of processing

We use ChatWerk from Inbox Solutions GmbH, Pretzfelder Straße 7 - 11, 90425 Nuremberg, Germany, as a service for communication via the Messenger What's App with registered contacts. This includes, for example, sending and receiving personal messages and sending information newsletters to registered contacts.

b. Legal basis of processing

On the basis of your expressly given consent (Art. 6 Para. 1 lit. a DSGVO), we regularly send our newsletter or comparable information via What's App message to the What's App account you have stored or contact you personally via a What's App message on.

c. Data categories

Mobile number, What’s App profile name, profile photo, message history.

d. Recipient

The recipients of the data are internal employees of diva-e from the Marketing and Recruiting departments and the service provider Chatwerk. The messages are encrypted end-to-end and transmitted to Chatwerk via an API connection, so that What's App itself has no insight.

e. Retention periods

The data will only be processed in this context as long as you have given your consent or you have not objected to the processing. You can delete the data yourself by writing the word "delete" in the What's App channel.

f. Third country transfer

Processing also takes place outside the European Union (EU) or the European Economic Area (EEA). In such cases, Standard Contractual Clauses (SCCs) ensure an appropriate level of data protection.

g. Revocation/Objection to processing

You can revoke your consent to the storage of your personal data in Chatwerk at any time with effect for the future by using the word "Infostop" or "Delete" in What's App Chat. The note on this is at the end of each message.

h. Automated decision making and profiling

Not applicable.