Create marketing funnels in minutes!

Data protection declaration

1) Introduction and contact details of the person responsible

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Nsquare GmbH, Zeppelinstr. 33, 85748 Garching, Germany, Tel.: +491631705292, Email: info@nsquare.de. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or. TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.

2) Data collection when you visit our website

If you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our website visited

- Date and time at the time of access

- Amount of data sent in bytes

- Source/reference, from which you came to the page

- Browser used

- Operating system used

- IP address used (if necessary: ​​in anonymized form)

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

3.1 - Hosting by Webflow

We use the website construction system from Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA (“Webflow”) for the purpose of hosting and displaying the page content based on processing on our behalf . All data collected on our website is processed on Webflow’s servers. As part of the aforementioned Webflow services, data can also be transmitted to Webflow servers in the USA. Further information on data protection from Webflow can be found on the following website: https://webflow.com/legal/privacy

Further processing on servers other than the Webflow servers mentioned above only takes place within the framework stated below.

- Hosting by Clickfunnels

We use the website construction system from Clickfunnels, a service from Etison LLC, 3443 W. Bavaria St., Eagle, Idaho 83616, USA (“Clickfunnels”), for the purpose of hosting and displaying the page content based on processing in our mission. All data collected on our website is processed on Clickfunnels’ servers. As part of the aforementioned Clickfunnels services, data can also be transferred to the USA as part of further processing on behalf of the customer. Further information on data protection from Clickfunnels can be found on the following website: https://www.clickfunnels.com/privacy-policy

Further processing on servers other than those mentioned above by Clickfunnels only takes place within the framework stated below.

3.2 Cloudflare

On our website we use a so-called Content Delivery Network ("CDN") from the technology service provider Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA ("Cloudflare"). A content delivery network is an online service with the help of which large media files (such as graphics, page content or scripts) are delivered through a network of regionally distributed servers connected via the Internet. Using Cloudflare's Content Delivery Network helps us optimize our website loading speeds.

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in secure and efficient provision and improving the stability and functionality of our website.

We have concluded an order processing agreement with Cloudfare (Data Processing Addendum, available at https://www.cloudflare.com/de-de/cloudflare-customer-dpa/), which obliges Cloudfare to protect the data of our site visitors and them not to be passed on to third parties. For the transfer of data from the EU to the USA, Cloudfare relies on so-called standard data protection clauses from the European Commission, which are intended to ensure compliance with the European data protection level in the USA.

Further information can be found in Cloudflare's privacy policy at: https://www.cloudflare.com/privacypolicy/

3.3 IONOS

On our website we use a so-called Content Delivery Network ("CDN") from &1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur ("IONOS"). A content delivery network is an online service with the help of which large media files (such as graphics, page content or scripts) are delivered through a network of regionally distributed servers connected via the Internet. The use of the Content Delivery Network from IONOS helps us optimize the loading speeds of our website.

Processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on our legitimate interest in secure and efficient provision and improving the stability and functionality of our website.

We have concluded an order processing agreement with IONOS, which obliges IONOS to protect the data of our site visitors and not to pass it on to third parties. Further information can be found in the IONOS data protection declaration at: https://www.ionos.de/terms-gtc/terms-privacy

4) Contact

4.1 Review reminder by Trustpilot

If you give us your express consent to this during or after your order in accordance with Art. 6 para. 1 lit -Email sent.

You can revoke your consent at any time by sending a message to the person responsible for data processing or to the rating platform.

4.2 Calendly

This website uses the “Calendly” software from the provider Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA, to provide an online appointment booking function.

For the purpose of making an appointment, your first and last name as well as your email address (and, if applicable, the telephone number if a telephone appointment is desired) are collected in accordance with Article 6 Paragraph 1 Letter b of the GDPR and stored in accordance with Article 6 Paragraph 1 Letter f of the GDPR Based on our legitimate interest in effective customer management and efficient appointment management, it is transmitted to Calendly and stored there for appointment organization. After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by Calendly. We have concluded an order processing agreement with Calendly (“Data Processing Addendum”, available at https://calendly.com/pages/dpa), in which we oblige Calendly to protect our customers’ data in accordance with legal requirements.

Details about Calendly's data protection regulations can be found here: https://calendly.com/de/pages/privacy

4.3 When you contact us (e.g. via contact form or email) - exclusively for the purpose of processing and answering your request and only to the extent necessary – personal data is processed. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Article 6 (1) (b) GDPR. Your data will be deleted if the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

5) Use of customer data for direct advertising

5.1 Registration for our email newsletter

If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. To send the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data we collect when registering for the newsletter is used strictly for a specific purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person responsible mentioned at the beginning. Once you have unsubscribed, your email address will be immediately deleted from our newsletter distribution list.

5.2 Sending the email newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers by email for goods or services similar to those you have already purchased from our range. In accordance with Section 7 Paragraph 3 UWG, we do not need to obtain your separate consent for this. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Article 6 (1) (f) GDPR. If you have initially objected to the use of your email address for this purpose, we will not send emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with future effect by notifying the person responsible named at the beginning. For this you will only incur transmission costs according to the basic tariffs. Once your objection has been received, the use of your email address for advertising purposes will be stopped immediately.

5.3 - Newsletter dispatch via ActiveCampaign

Our email newsletters are sent via the technical service provider ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, US, USA (“ActiveCampaign”), to whom we send your email when you register for the newsletter pass on the data provided. This transfer is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR and serves our legitimate interest in using an advertising-effective, secure and user-friendly newsletter system. The data you enter to receive the newsletter (e.g. email address) is stored on ActiveCampaign's servers in the USA.

ActiveCampaign uses this information to send and statistically evaluate the newsletter on our behalf. For evaluation purposes, the emails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files that are stored on our website. This makes it possible to determine whether a newsletter message was opened and which links, if any, were clicked on. With the help of so-called conversion tracking, it can also be analyzed whether a pre-defined action (e.g. purchasing a product on our website) took place after clicking on the link in the newsletter. Technical information is also collected (e.g. time of access, IP address, browser type and operating system). The data is only collected pseudonymously and is not linked to your other personal data. a direct personal connection is excluded. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletters to the interests of the recipients.

If you would like to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

We have concluded a data processing agreement with ActiveCampaign, with which we oblige ActiveCampaign to protect our customers' data and not to pass it on to third parties.

You can view ActiveCampaign's privacy policy here: https://www.activecampaign.com/privacy-policy

6) Data processing for order processing

6.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data we collect is processed in accordance with Art. 6 Paragraph 1 lit. b GDPR passed on to the commissioned transport company and the commissioned credit institution.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact details you provided when ordering (name, address, email address) in order to provide you with our legal information obligations in accordance with Art. 6 Para 1 lit. Your contact details will be used strictly for the purpose of communicating updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

6.2 Use of special service providers for order processing and processing

- Kajabi

Orders are processed by Kajabi, LLC, 15495 Sand Canyon Avenue Suite 300 Irvine, CA 92618, USA (“Kajabi”). Name, address and, if applicable, other personal data will be passed on to Kajabi for the purpose of processing the online order in accordance with Article 6 Paragraph 1 Letter b of the GDPR. Your data will only be passed on to the extent that this is actually necessary to process the order. Kajabi is also used for accounting. Kajabi processes incoming and outgoing invoices as well as our company's bank transactions in order to automatically record invoices, match them to the transactions and create financial accounting from them in a semi-automated process.

If personal data is also processed, the processing is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business processes. Details on Kajabi's data protection can be viewed at the following link: https://kajabi.com/policies/privacy

6.3 Use of payment service providers (payment services)

- Apple Pay

If you choose the “Apple Pay” payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed using the “Apple Pay” function of your device running iOS, watchOS or macOS by debiting a payment card stored with “Apple Pay”. Apple Pay uses security features built into your device's hardware and software to protect your transactions. In order to approve a payment, you must enter a code previously specified by you and verify it using the “Face ID” or “Touch ID” function of your device.

For the purpose of payment processing, the information you provided during the ordering process, along with the information about your order, will be passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. Encryption ensures that only the website through which the purchase was made can access the payment details. After the payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment success.

If personal data is processed during the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6 (1) (b) GDPR.

Apple retains anonymized transaction information, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

When you use Apple Pay on iPhone or Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can be used to identify you. You can turn off the ability to use Apple Pay on your Mac in your iPhone's settings. Go to Wallet & Apple Pay and turn off Allow Payments on Mac.

Further information on data protection with Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027

- Google Pay

If you choose the “Google Pay” payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), the payment will be processed via the “Google Pay” application on your device with at least Android 4.4 (“KitKat”) operated mobile device with an NFC function by charging a payment card stored with Google Pay or a payment system verified there (e.g. PayPal). In order to approve a payment via Google Pay in the amount of more than €25, you must first unlock your mobile device using the verification measure that has been set up (e.g. facial recognition, password, fingerprint or pattern).

For the purpose of payment processing, the information you provided during the ordering process, along with the information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the originating website, which is used to verify a payment made. This transaction number does not contain any information about the real payment details of your payment methods stored with Google Pay, but is created and transmitted as a one-time valid numerical token. For all transactions via Google Pay, Google only acts as an intermediary to process the payment process.

If personal data is processed during the transfers described, the processing takes place exclusively for the purpose of payment processing in accordance with Article 6 (1) (b) GDPR.

Google reserves the right to collect, store and evaluate certain process-specific information for every transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photographs that you included with the transaction, the name and email address of the seller and buyer, respectively. the sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, the verification of process data and the optimization and functionality of the Google Pay service.

Google also reserves the right to combine the processed process data with other information that is collected and stored by Google when you use other Google services.

The terms of use of Google Pay can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection at Google Pay can be found below Internet address:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

- Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or “Payment in installments” via PayPal, we pass on your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing. The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent that this is necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment in installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Article 6 Paragraph 1 Letter f of the GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values ​​(so-called score values). To the extent that score values ​​are included in the results of the credit report, They are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. Further data protection information, including information about the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.

-Stripes

If you choose a payment method from the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will send your information and the information you provided during the ordering process about your order (name, address, account number, bank sort code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. Further information about Stripe's data protection can be found at the URL https://stripe.com/de/privacy#translation.

Stripe reserves the right to carry out a credit check based on mathematical and statistical procedures in order to protect the legitimate interest in determining the user's solvency. Stripe may transmit the personal data required for a credit check and received as part of payment processing to selected credit agencies, which Stripe will disclose to users upon request. The credit report can contain probability values ​​(so-called score values). To the extent that score values ​​are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data.

You can object to this processing of your data at any time by sending a message to Stripe or the commissioned credit agencies.

However, Stripe may continue to be entitled to process your personal data if this is necessary to process payments in accordance with the contract.

7) Online marketing

Facebook pixel for the creation of custom audiences with extended data comparison (with cookie consent tool)

Within our online offer, the so-called "Facebook pixel" from the social network Facebook is used in the mode of extended data comparison, which is provided by the Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”) is operated.

Based on their express consent, if a user clicks on an ad placed by us on Facebook, an addition is added to the URL of our linked page by Facebook Pixel. After being redirected, this URL parameter is then written into the user's browser via a cookie, which our linked page sets itself. In addition, this cookie records specific customer data such as the email address, which we collect on our website linked to the Facebook ad during processes such as purchasing, account logins or registrations (extended data comparison). The cookie is then read by Facebook Pixel and enables the data, including specific customer data, to be forwarded to Facebook.

With the help of the Facebook pixel with extended data comparison, Facebook is able to precisely determine the visitors to our online offering as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel with extended data comparison in order to show the Facebook ads we place only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products). determined based on the websites visited) which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel with extended data comparison, we would also like to ensure that that our Facebook ads correspond to the potential interest of the users and are not annoying. This allows us to further evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook advertisement (so-called “conversion”). Compared to the standard version of Facebook Pixel, the extended data matching function helps us to better measure the effectiveness of our advertising campaigns by recording more attributed conversions.

All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to place advertisements on and outside of Facebook.

These processing operations only take place if express consent is given in accordance with Article 6 (1) (a) GDPR.

The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also be transmitted to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.

8) Web analysis services

8.1 Google (Universal) Analytics without cookies

This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

This website uses Google (Universal) Analytics exclusively without the use of cookies, which means that the service never sets cookies on your device.

Instead, your browser's local storage is used to store an individual ID assigned by Google (Universal) Analytics, which enables your use of the website to be analyzed. For this purpose, certain user information is processed via the ID.

The information generated by the ID about your use of this website (including the shortened IP address) is usually transmitted to a Google server and stored there; this may also be transmitted to the servers of Google LLC. come to the USA.

This website uses Google (Universal) Analytics exclusively with the “_anonymizeIp()” extension, which ensures anonymization of the IP address by shortening it and excludes any direct reference to a person. Through the extension, your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google LLC server. broadcast in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors based on an evaluation of interest-based advertising and with the use of third-party information via a special function, the so-called “demographic characteristics”. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized targeting of marketing measures. However, records collected using “demographic characteristics” cannot be assigned to a specific person.

Details about the processing initiated by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All processing described above will only be carried out if you have given us your express consent in accordance with Article 6 Paragraph 1 Letter a GDPR. Without this consent, Google Analytics will not be used during your visit to the site.

You can revoke your consent at any time with future effect. To exercise your revocation, you can download and install the browser plug-in available under the following link:

https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in or within browsers on mobile devices, you can revoke your consent by clicking on the following link to set an opt-out cookie, which will prevent future collection by Google Analytics within this website (this opt-out -Out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on this link again): Deactivate

Google Analytics

We have concluded an order processing agreement with Google for the use of Google Analytics Google is obliged to protect the data of our site visitors and not to pass it on to third parties.

For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.

Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

8.2 Google Analytics 4

This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House , 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze the use of websites.

When you access this website, as part of the so-called consent mode (beta version) of Google Analytics 4, no cookies (text files that are stored on your device and that enable analysis of your use of the website) are used by default unless you consent After a corresponding request, you expressly consent to the setting of cookies and the reading of information from cookies. No cookies will be set or read by Google Analytics 4 until such consent has been granted and – if you expressly refuse to grant such consent when requested by us – even if you continue to use this website. Instead, certain information about your usage behavior is collected and processed using so-called “pings”.

In this case, the information about your use of the website collected by so-called pings (including the IP address transmitted by your device, shortened by the last digits, see below) is usually transmitted to a Google server and stored there and further processed. This may also result in information being transferred to the servers of Google LLC based in the USA and further processing there. If you expressly consent to the use of cookies, the same also applies to the information collected by cookies about your use of the website.

When using Google Analytics 4, the IP address transmitted by your device when you use the website is always collected and processed automatically and in an anonymous manner by default, so that the information collected cannot be directly related to a person. This automatic anonymization occurs by shortening the IP address transmitted by your device by Google within member states of the European Union (EU) or other contracting states to the Agreement on the European Economic Area (EEA) by the last digits.

On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports on your website activities and your usage behavior and to provide us with other services related to your website use and internet usage. The shortened IP address transmitted by your device as part of Google Analytics 4 is not merged with other Google data. The data collected when using Google Analytics 4 is stored for 2 months and then deleted.

Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users based on an evaluation of interest-based advertising and with the use of third-party information via a special function, the so-called “demographic characteristics”. This makes it possible to determine and differentiate user groups of the website for the purpose of targeting marketing measures in a target group-optimized manner. However, data collected via “demographic characteristics” cannot be assigned to a specific person and therefore not to you personally. This data collected via the “demographic characteristics” function is retained for two months and then deleted.

All processing described above, including data transfer via “pings” and

the possible setting of Google Analytics cookies for the storage and possible reading of information on the device you use to use the website, will only take place if you have given us permission to do so Art. 6 Para. 1 lit. a GDPR you have given your express consent. Without your consent, your use of the website will not be analyzed. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service using the “cookie consent tool” provided on the website.

We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, through which Google is obliged to protect the data of our website users and not to pass it on to third parties.

To ensure compliance with the European level of data protection, including any transfer of data from the EU or EEA to the USA and possible further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.

Further legal information about Google Analytics 4, including a copy of the standard contractual clauses mentioned, can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner -sites

8.3 - Hotjar (hotjar Ltd.)

This website uses the Hotjar web analysis service from Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).

This tool can be used to track movements on the websites on which Hotjar is used (so-called heatmaps). For example, you can see how far users scroll and which buttons users click and how often. The tool also makes it possible to obtain feedback directly from website users. In this way, we obtain valuable information to make our websites even faster and more customer-friendly. When using this tool, we pay particular attention to protecting your personal data. This means we can only track which buttons you click and how far they scroll. Areas of the websites in which personal data from you or third parties are displayed are automatically hidden by Hotjar and are therefore not traceable at any time.

All processing described above, in particular the reading of information on the device used, will only be carried out if you have given us your express consent to this in accordance with Article 6 Paragraph 1 Letter a of the GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website.

9) Retargeting/remarketing/recommendation advertising

TikTok Pixel

This website uses the “TikTok Pixel”, a tracking technology from the social network “TikTok” from TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).

With the help of cookies (small text files that are stored on the device used), information about surfing behavior on our website is collected in a pseudonymized form, transmitted to TikTok, stored there and evaluated in order to then enable interest-based and personalized product recommendations to be displayed on TikTok. The subject of the information collected and processed pseudonymously is the device ID, the device type, time stamp, the operating system used and the IP address. The information can be assigned to the user using additional information that TikTok has stored about the user, for example due to the ownership of an account on the social network “TikTok”. TikTok can also combine the information collected via the pixel with other information that TikTok has collected via other websites and/or in connection with the use of the social network “TikTok” and thus create pseudonymized usage profiles. Under no circumstances can the information collected be used to personally identify visitors to this website.

The TikTok Pixel also allows us to track the effectiveness of advertisements on TikTok. If the user is redirected to pages on this website by an ad on TikTok and the cookies have not yet expired, the pixel records certain user actions predefined by us and can track them (e.g. completed transactions, leads, search queries on the website, views of product pages). When carrying out such an action, your browser sends an HTTP request from the cookie to the TikTok server via the TikTok pixel, which transmits certain information about the action. Through this transmission, TikTok can create statistics about usage behavior on our website after being redirected from a TikTok ad, which we use to optimize our offering.

All processing described above, in particular the setting of cookies to read information on the device used, will only be carried out if you have given us your express consent to this in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website. We have concluded an order processing agreement with TikTok for the use of the TikTok Pixel, which obliges TikTok to protect the data of our site visitors and not to pass it on to third parties. TikTok generally transmits collected information outside the European Economic Area and relies on so-called

10) Site functionalities

10.1 Use of Vimeo videos

Plugins from the video portal Vimeo from Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are integrated into our website. If you access a page on our website that contains such a plugin, your browser establishes a direct connection to Vimeo's servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page on our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted from your browser directly to a Vimeo server in the USA and stored there.

If you are logged in to Vimeo, Vimeo can directly assign your visit to our website to your Vimeo account. If you interact with the plugins (such as clicking the start button on a video), this information is also transmitted directly to a Vimeo server and stored there.

If you do not want Vimeo to directly assign the data collected via our website to your Vimeo account, you must log out of Vimeo before visiting our website.

The purpose and scope of data collection and the further processing and use of the data by Vimeo as well as your related rights and setting options to protect your privacy can be found in Vimeo's data protection information: https://vimeo.com/privacy

For videos from Vimeo that are embedded on our site, the tracking tool Google Analytics from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This is Vimeo's own tracking, which we do not have access to and which we cannot influence. Google Analytics uses so-called “cookies” for tracking, which are text files that are stored on your computer and enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transmitted to a Google server and stored there; this may also be transmitted to the servers of Google LLC. come to the USA.

All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent to this in accordance with Article 6 Paragraph 1 Letter a of the GDPR. Without this consent, Vimeo videos will not be used during your site visit.

You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website using alternative options notified to you on the website.

10.2 - Google Meet

We use the “Google Meet” service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google Meet”) to hold online meetings, video conferences and/or webinars.

When using Google Meet, different data is processed. The extent of the data processed depends on what data you provide before or during participation in an online meeting, video conference or webinar. When using Google Meet, data from communication participants is processed and stored on Google servers. This data may include, in particular, your registration data (name, email address, telephone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions from participants, as well as voice input, can be processed in chats. This may also result in a transmission to the Google LLC servers. come to the USA.

When processing personal data that is necessary to fulfill a contract with you (this also applies to processing operations that are necessary to carry out pre-contractual measures), Art. 6 Para. 1 lit. b GDPR serves as the legal basis. If you have given us your consent to process your data, the processing will be carried out on the basis of Article 6 Paragraph 1 Letter a GDPR. Consent given can be revoked at any time with future effect.

Furthermore, the legal basis for data processing when conducting online meetings, video conferences or webinars is our legitimate interest in accordance with Article 6 (1) (f) GDPR in the effective implementation of the online meeting, webinar or video conference. Further information on the use of data by Google Meet can be found in Google's data protection regulations at https://www.google.de/policies/privacy/

- Zoom

We use the “Zoom” service from Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA (hereinafter “Zoom”) to hold online meetings, video conferences and/or webinars.

When using Zoom, different data is processed. The extent of the data processed depends on what data you provide before or during participation in an online meeting, video conference or webinar. When using Zoom, data from communication participants is processed and stored on Zoom servers. This data may include, in particular, your registration data (name, email address, telephone (optional) and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions from participants, as well as voice input, can be processed in chats.

When processing personal data that is necessary to fulfill a contract with you (this also applies to processing operations that are necessary to carry out pre-contractual measures), Art. 6 Para. 1 lit. b GDPR serves as the legal basis. If you have given us your consent to process your data, the processing will be carried out on the basis of Article 6 Paragraph 1 Letter a GDPR. Consent given can be revoked at any time with future effect.

Furthermore, the legal basis for data processing when conducting online meetings, video conferences or webinars is our legitimate interest in accordance with Article 6 (1) (f) GDPR in the effective implementation of the online meeting, webinar or video conference. Further information on Zoom's use of data can be found in Zoom's privacy policy at https://zoom.us/docs/de-de/privacy-and-legal.html

10.3 - Google Forms

To carry out surveys or online forms, we use the Google Forms service from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Forms enables us to design and evaluate surveys and online forms. In addition to the personal data you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transmitted to Google and stored on Google servers. The information you enter into the forms is stored password-protected to ensure that third-party access is excluded and only we can evaluate the data for the purpose specified in the form.

When processing personal data that is necessary to fulfill a contract with you (this also applies to processing operations that are necessary to carry out pre-contractual measures), Art. 6 Para. 1 lit. b GDPR serves as the legal basis. If you have given us your consent to process your data, the processing will be carried out on the basis of Article 6 Paragraph 1 Letter a GDPR. Consent given can be revoked at any time with future effect.

We have concluded an order processing agreement with Google for the use of Google Forms, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. Processing takes place regularly within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. However, data transfers to the USA cannot be ruled out.

For the transfer of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.

Further information about Google Forms and Google's data protection regulations can be found at: https://policies.google.com/privacy?hl=de

- Typeform

To carry out surveys or online forms, we use the service of TYPEFORM SL Carrer Bac de Roda, 163, local, 08018 Barcelona, ​​Spain (“Typeform”). Typeform enables us to design and evaluate surveys and online forms. In addition to the personal data you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transmitted to Typeform and stored on Typeform servers. The information you enter into the forms is stored password-protected to ensure that third-party access is excluded and only we can evaluate the data for the purpose specified in the form.

When processing personal data that is necessary to fulfill a contract with you (this also applies to processing operations that are necessary to carry out pre-contractual measures), Art. 6 Para. 1 lit. b GDPR serves as the legal basis. If you have given us your consent to process your data, the processing will be carried out on the basis of Article 6 Paragraph 1 Letter a GDPR. Consent given can be revoked at any time with future effect.

We have concluded an order processing agreement with Typeform for the use of the above-mentioned services, which obliges Typeform to protect the data of our site visitors and not to pass it on to third parties and Typeform's data protection regulations can be found at: https://admin.typeform .com/to/dwk6gt/

10.4 - Google Web Fonts

This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) for the uniform display of fonts become. When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google's servers. This may also result in personal data being transmitted to the Google LLC servers. come to the USA. In this way, Google becomes aware that our website was accessed via your IP address. The processing of personal data in the course of contacting the font provider will only be carried out if you have given us your express consent to do so in accordance with Article 6 Paragraph 1 Letter a of the GDPR. You can revoke your consent at any time with future effect by deactivating this service in the “cookie consent tool” provided on the website. If your browser does not support web fonts, your computer will use a standard font.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

10.5 Make (formerly Integromat)

This website uses the integration service provider Make, a service provided by Celonis, Inc., One World Trade Center, 87th Floor, New York, NY, 10007, USA (hereinafter "Make"). We use Make to integrate different databases and web tools. Make is a web service that automatically links actions between different web tools and synchronizes their applications with each other so that they carry out the desired processes. Make automates our processing processes and ensures different workflows in order to efficiently design work processes in our processing system. The data processing described is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR on the basis of our legitimate interests in the efficient design of our work processes.

We have concluded an order processing agreement with Make, by which we oblige Make to protect the data of visitors to our website and not to pass it on to third parties. You can view the order processing agreement here: https://assets.ctfassets.net/zmrtlfup12q3/3bYL1ud7OI8IocqN3nT6U0/2111186a2d1cd796c7c4268563dffa03/Celonis_Data_Processing_Agreement_21-12-06.pdf

Further information on the use of data by Make can be found in the Make data protection declaration at https://www. make.com/en/privacy-notice

10.6 Zapier

This website uses the integration service provider Zapier, a service of Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA (hereinafter "Zapier"). We use Zapier to integrate different databases and web tools. Zapier is a web service that automatically links actions between different web tools and synchronizes their applications with each other so that they carry out the desired processes. Zapier automates our processing operations and ensures different workflows to efficiently design work processes in our processing system. The data processing described is carried out in accordance with Article 6 Paragraph 1 Letter f of the GDPR on the basis of our legitimate interests in the efficient design of our work processes.

We have entered into an order processing agreement with Zapier by which we oblige Zapier to protect the data of visitors to our website and not to pass it on to third parties.

For more information about Zapier's use of data, please see the Zapier Privacy Policy at https://zapier.com/privacy.

11) Tools and other

cookie consent tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when they access the page in the form of an interactive user interface on which consent can be given for certain cookies and/or cookie-based applications by checking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by checking the box. This ensures that such cookies are only set on the user's device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in doing so legally compliant, user-specific and user-friendly consent management for cookies and therefore a legally compliant design of our website.

Another legal basis for processing is Article 6 Paragraph 1 Letter c GDPR. As those responsible, we are subject to the legal obligation to make the use of cookies that are not technically necessary dependent on the respective user consent.

Further information about the operator and the setting options for the cookie consent tool can be found directly in the corresponding user interface on our website.

12) Rights of the data subject

12.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) towards the person responsible with regard to the processing of your personal data, whereby reference is made to the legal basis listed for the respective exercise requirements:

- Right to information in accordance with Art. 15 GDPR;

- Right to rectification in accordance with Art. 16 GDPR;

- Right to deletion in accordance with Art. 17 GDPR;

- Right to restriction of processing in accordance with Art. 18 GDPR;

- Right to information in accordance with Art. 19 GDPR;

- Right to data portability in accordance with Art. 20 GDPR;

- Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;

- Right to complain in accordance with Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCE OF INTERESTS BASED ON OUR OVERWHELMING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPLEX REASONS FOR THE PROCESSING THAT ARE DESIGNED TO BE PROTECTED, WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE YOUR OPT-OUT AS DESCRIBED ABOVE.

IF YOU USE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT ADVERTISING PURPOSES.

13) Duration of storage of personal data

The duration of storage of personal data is measured based on the respective legal basis, the purpose of processing and - if relevant - additionally based on the respective statutory retention period (e.g. commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Article 6 (1) (a) GDPR, this data will be stored until the person concerned revokes their consent.

If there are statutory retention periods for data that are processed within the framework of legal or transaction-like obligations on the basis of Art. 6 Para. 1 lit and/or we have no legitimate interest in further storage.

When processing personal data on the basis of Article 6 Paragraph 1 Letter f of the GDPR, this data will be stored until the data subject exercises his or her right to object in accordance with Article 21 Paragraph 1 of the GDPR, unless we can provide compelling legitimate reasons provide evidence for the processing that outweighs the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6 Paragraph 1 Letter f of the GDPR, this data will be stored until the person concerned exercises their right to object in accordance with Article 21 Paragraph 2 of the GDPR.


Unless otherwise stated in the other information in this declaration about specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.