Privacy Policy

We (Senior Connect GmbH) are pleased that you are visiting our website. The protection and security of your personal information when using our website is very important to us. We would therefore like to inform you at this point about which of your personal data we collect when you visit our website and for what purposes it is used. Personal data are individual details about the personal or factual circumstances of a specific or identifiable natural person (data subject), e.g. name, address, e-mail addresses, user behavior. This is therefore data with which we can identify you. In addition, you will occasionally find information on data processing processes outside this website (e.g. video conferences or newsletters).

A. Responsible for data processing

Responsible for the processing of personal data within the meaning of the EU General Data Protection Regulation (GDPR) and data protection officer is

Senior Connect GmbH

Obereichenrot 8

74575 Schrozberg

Email: kontakt@senior-connect.de

B. General

This data protection declaration meets the legal requirements for transparency in the processing of personal data. This is all information relating to an identified or identifiable natural person. This includes, for example, information such as your name, your age, your address, your telephone number, your date of birth, your e-mail address, your IP address or the user behavior when visiting a website. Information in which we cannot (or only with a disproportionate effort) establish a reference to your person, e.g. by anonymization, is not personal data. The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis and a defined purpose. Stored personal data will be deleted as soon as the purpose of the processing has been achieved and there are no legitimate reasons for further storage of the data. We inform you in the individual processing operations about the specific storage periods or Criteria for storage. Regardless of this, we store your personal data in individual cases for the assertion, exercise or defense of legal claims and in the presence of legal retention obligations.

C. Information according to Art. 13 GDPR

This information is addressed to customers, interested parties, suppliers and employees. Your personal data will be processed by us for the following purposes:

To fulfill our contractual obligations to which we are obliged to you (Art. 6 para. 1 lit. b GDPR).
For the performance of pre-contractual obligations (Art. 6 para. 1 lit. b GDPR).
To answer inquiries (Art. 6 para. 1 Lit. b GDPR).
If you have given us your consent to process your personal data for certain purposes (e.g. to receive our newsletter), the data processing takes place on the basis of your consent (Art. 6 para. 1 lit. a GDPR).
To fulfill legal obligations to which our company is subject (Art. 6 (1) (c) GDPR).
If necessary, we also process your data to safeguard our legitimate interests, in particular to assert legal claims and defend against legal disputes or to ensure IT security, to consult and exchange data with credit agencies to determine creditworthiness and failure risks, for direct advertising and market research if you have not objected to the use of your data for this purpose, for measures to manage business and further development of services and products, for measures for product and sales optimization, for measures for risk management, for the prevention or investigation of criminal offenses (Art. 6 para. 1 lit. f GDPR).

D. Categories of recipients of personal data

Within our company, only those employees have access to the data that they absolutely need to fulfill their tasks (need-to-know principle). Individual processes and services are carried out by carefully selected and data protection-commissioned service providers who are based within the EEA. Insofar as service providers commissioned by us receive access to personal data during the performance of their services, order processing contracts have been concluded with them in accordance with Art. 28 (3) GDPR.

E. Duration of data storage

The data processed by us will be stored for the duration of the existence and processing of the contractual relationship and in compliance with statutory retention periods. These are in particular commercial and tax retention obligations under the Commercial Code (HGB) and the Tax Code (AO). The regular storage or Documentation periods amount to up to ten years. If no contractual relationship is concluded, we will only process the data for as long as the specific purpose requires.

F. Your rights to data subjects

As a data subject, you have the following rights with regard to your personal data, which you can assert by e-mail to kontakt@senior-connect.de.

If you have given us your express consent to the processing of your personal data, you can revoke this consent at any time free of charge with effect for the future. Your revocation has no effect on the legality of the processing of your personal data carried out until then and on the lawfulness of such processing for which there is a different legal basis.
In accordance with Art. 15 GDPR, you can request information about your personal data processed by us. In particular, you can request information about the processing purposes, the categories of personal data, the categories of recipients to whom your data have been or will be disclosed, the planned storage period, the existence of a right to rectification, deletion, restriction of processing or objection, the existence of a right of appeal, the origin of your data, if it was not collected by us, as well as the existence of automated decision-making including profiling and, if applicable, meaningful information on its details. You can also request that we provide you with a copy of the data stored by you;
In accordance with Art. 16 GDPR, you can immediately request the correction of incorrect or completion of your personal data stored with us;
In accordance with Art. 17 GDPR, you may request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
In accordance with Art. 18 GDPR, you can demand the restriction of the processing of your personal data, insofar as the accuracy of the data is disputed by you, insofar as the processing is unlawful, but you refuse to its deletion, insofar as we no longer need the data, but you need it to assert, exercise or defend legal claims or if you have objected to the processing in accordance with Art. 21 GDPR;
In accordance with Art. 20 GDPR, you can receive your personal data, which you have provided to us and which we process on the basis of your consent or for the execution of the contract, in a structured, common and machine-readable format or request the transmission to another controller within the scope of what is technically feasible (right to data portability);
You can complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our place of business.

Right of objection

If we process your personal data on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this that arise from your particular situation, or the objection is directed against direct marketing. In the latter case, you have a general right of objection, which is implemented by us without specifying a special situation.

G. Cookies

Cookies are small text files that are sent by us to the browser of your device as part of your visit to our website and stored there. As an alternative to the use of cookies, information can also be stored in the local storage of your browser. Some functions of our website cannot be offered without the use of cookies or local storage (technically necessary cookies). Other cookies, on the other hand, allow us to analyze variously, so that we are able, for example, to recognize the browser you are using when you visit our website again and to transmit various information to us (non-necessary cookies). With the help of cookies, we can, among other things, make our Internet offer more user-friendly and effective for you, for example by understanding your use of our website and your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot execute programs and do not contain viruses. We inform you about the respective services for which we use cookies in the individual processing operations. Detailed information on the cookies used can be found in the cookie settings or in the consent manager of this website.

H. Data processing in detail

In the following we inform you about the individual processing operations, the scope and purpose of the data processing, the legal basis, the obligation to provide your data and the respective storage period. An automated decision in individual cases, including profiling, does not take place.

1. Provision of the website – log files

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. The following information is temporarily stored in a so-called log file:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access is made (referrer URL)
Browser used and, if applicable, the operating system of your computer and its interface, as well as the name of your access provider
Language and version of the browser software
Greenwich Mean Time (GMT) time difference
Content of the request (specific page)
Access Status/HTTP Status Code
Amount of data transferred in each case
Website from which the request comes The storage of the IP address for the duration of the session is necessary in order to be able to display our websites to you.

The processing of other data serves in particular to ensure the permanent functionality and security of our websites and information technology systems. The legal basis for the processing of this data is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest in the data processing is to achieve the aforementioned purposes. The log files are stored for a period of 30 days and then deleted, unless they have to be held for longer to track an identified attack. Our website is not hosted by ourselves, but by a service provider who, for the purpose of providing the website, the aforementioned data on our behalf in accordance with Art. Art. 28 GDPR processed.

2. Contact form Type and scope of processing

If you send us inquiries (e.g. via contact form, e-mail or telephone), we store all data that emerges from this (e.g. name, e-mail address, subject of the request, etc.). We need this data to process your request and to answer follow-up questions. We do not pass on this data without your consent.

Purpose and legal basis

The processing of this data is based on Art. 6 (1) (b) GDPR, provided that your request is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. Otherwise, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR) if you have previously submitted it.

Storage period

We delete your data after cancellation of the purpose. We store certain data until the expiry of statutory limitation periods (regularly three years) and/or statutory retention periods, for example from the Tax Code and the Commercial Code (regularly up to ten years).

3. Contact for applicants Type and scope of processing

You have the opportunity to apply to us on our website (e.g. by e-mail, post or via online applicant form).

Purpose and legal basis

During the application process, we process the following categories of data:
Private contact and identification data: e.g. B. surname, first name, academic degree, gender, e-mail address, address and telephone number
Data about your professional qualifications, e.g. B. school and educational qualification, language skills, as well as your place of study or training, certificates
If you send us your CV, we process the data provided in it, e.g. B. photos of you or possibly the presence of a driver's license
If necessary, other data provided by you as part of the application. Your application documents will be sent to the contact person named in the job advertisement and will be forwarded internally to other partners and employees responsible for the application process.

Your data will be processed by us in order to check whether you are eligible for an employment relationship with us as part of the applicant selection. The legal basis for data processing is § 26 para. 1 BDSG and Art. 6 para. 1 lit. b GDPR (contract initiation). Information provided by you voluntarily and beyond the required extent will be processed on the basis of our legitimate interest (Art. 6 para. 1 lit. f GDPR) in being able to respond to your application in the best possible way. If you provide information in individual cases for which we have no legal basis for processing, we will not process it.

Storage period

If an employment relationship with you is established, we will continue to process your data for the purposes of the employment relationship in accordance with a separate data protection declaration, which you will then receive from us. In the event that no employment relationship is established with you, we usually store your data for a period of six months from the date of receipt of the rejection with you. Your application documents will then be deleted. Internally, only those people have access to your data who need it for the aforementioned purposes. These are above all the responsible partners, responsible HR employees and all persons who are necessarily involved in the applicant selection process.

Inclusion in the applicant pool

As part of the application, we offer applicants the opportunity to participate in our "talent pool" for a period of 12 months on the basis of consent within the meaning of Art. 6 para. 1 lit. a. GDPR to be included. The application documents in the talent pool will be processed solely in the context of future job advertisements and the search for employees and will be destroyed at the latest after the deadline. Applicants are informed that their consent to inclusion in the talent pool is voluntary, has no influence on the current application process and they can revoke this consent at any time for the future. If you receive an offer for employment with us as part of the application process and accept it, we store the personal data collected as part of the application process at least for the duration of the employment relationship.

4. Processing of personal data within the framework of the Senior Connect SaaS-enabled Marketplace Type and scope of processing

Our Senior Connect SaaS-enabled Marketplace ("Platform") is a platform for placing potential employees with companies registered with us ("customers"). Users can register on our platform and create their own applicant profile. Our platform is used to identify and suggest potential employers to users. Users can decide in the profile settings whether the application documents should be automatically transmitted to each proposed employer or whether a confirmation of the user should be obtained before each transmission.

Purpose and legal basis

If you register as a user with us, your personal data will be processed by us for the following purposes, among others:

Creation of a user profile on our platform
Forwarding to customers who are potentially eligible as employers
Selection of job offers that are suitable for users For this purpose, the following categories of data are processed by you:
Private contact and identification data: e.g. B. surname, first name, academic degree, gender, e-mail address, address and telephone number
Data about your professional qualifications, e.g. B. school and educational qualification, language skills, as well as your place of study or training, certificates
If available: photo
Answers to the questionnaire
Data on professional preferences: e.g. B. salary expectations, desired job profile

If you register on our platform, you conclude a user agreement with us. The processing of your personal data is thus carried out to fulfill a contractual obligation; the legal basis is Art. 6 para. 1 lit. b GDPR.

Origin of the data; registration

Your personal data comes either from yourself because you have provided or uploaded it to us via the platform. Alternatively, we can receive your data from LinkedIn. You can use your LinkedIn account when you register. The provider of this platform is LinkedIn Ireland Unlimited Company ("LinkedIn"), Wilton Place, Dublin 2, Ireland. To register with LinkedIn, you must enter your account information (LinkedIn name and password). LinkedIn will identify you and confirm your identity to our website. In addition, you must accept our terms of use. If you log in with LinkedIn, we may be able to use certain information on your account to complete your profile with us. You decide this as part of your LinkedIn security settings, which you can find here: https://www.linkedin.com/help/linkedin/answer/a1337839/ihre-konto-und-datenschutzeinstellungen-verwalten-ubersicht? lang=en. The possibility of registering with LinkedIn is voluntary, the associated data processing is based on our legitimate interest in enabling our users to have the simplest possible registration process (Art. 6 para. 1 lit. f GDPR). The data processing by LinkedIn is independent of our processing, which you can find out more at https://de.linkedin.com/legal/privacy-policy? We use an interface (API) of the third-party provider Proxycurl LLC, 1603 Capitol Ave, for the integration of LinkedIn. Ste. 310 A144 Cheyenne, WY 82001 USA; https://nubela.co/proxycurl/linkedin. We have concluded an agreement with Proxycurl for order processing in accordance with Art. 28 GDPR and the EU standard contractual clauses.

Data transfers to customers; Joint responsibility

We transmit your data to potential employers who have registered as customers on our platform. This data transmission only takes place if you have consented to the transmission to the respective customer. In the event of a data transmission, our customers are responsible for the data processing themselves from a data protection point of view. For these purposes, we conclude an agreement with our customers on the joint processing of personal data in accordance with Art. 26 GDPR. The contents of this data protection agreement can be found in the "Data protection" section of our GTC (https://www.senior-connect.de/agb). In essence, we have agreed with our customers that you can contact us and the customer at any time with data protection inquiries.

Storage period

We store your data on the platform as long as you are registered with us. You can delete your account at any time - in this case your personal data will also be deleted. However, in order to comply with statutory retention periods and in the event of a legal dispute, we may retain your data even after deletion of your account for the duration of the relevant retention periods and the statutory limitation periods. In no case, however, will data be passed on to customers after the deletion of the account or processed by us in any other way. Our customers can view their application documents on the platform for a period of six months after completion of the respective application process. Subsequently, the customers will no longer have access to your application documents.

5. AI-supported analysis

If you register with us as a commercial customer, we offer you a comprehensive AI-supported analysis based on the requirement profiles of your company as well as the CVs, interests, hobbies and personality traits of the applicants. The aim of this analysis is to assess the fit between the applicants and the corporate culture as closely as possible and to show the best matches.

The analysis is created using an intelligent algorithm that processes and compares relevant data on the corporate culture and the individual characteristics of the applicants. This data includes:

Requirements profile of the company: Tailored to specific requirements of the company in terms of professional and personal skills, values and work styles.
Applicant data: Data from the CV (e.g. qualifications, professional experience), individual interests, hobbies and answers to specific questions about personality
Work attitude and preferences: Data on the preferred way of working (e.g. remote, hybrid, on-site), as well as preferred areas of activity.

The AI processes and analyzes this information in an anonymized process so that individual employees or applicants cannot be identified. However, if it is theoretically possible to identify a person by merging data, the data will be treated in accordance with the GDPR and as personal data.

The legal basis for this analysis is our legitimate interest (Art. 6 para. 1 lit. f GDPR) to enable our customers to tailor-made selection of potential applicants who meet the specific requirements and culture of their company. All data used will be treated strictly confidentially and kept exclusively for the duration of the analysis.

Our algorithm is designed to respect the privacy of all involved, so that the results of the analysis are provided anonymously and aggregated to avoid conclusions about individuals.

6. Use of analysis and tracking tools

Type and scope of processing

This website uses various analysis and tracking tools to analyze the behavior of website visitors and to optimize the website and our marketing measures. In the context of the use of these tools, the following data is collected and processed:

Visited pages and content
Date and time of access
Duration of stay on the page
Interactions (e.g. mouse movements, clicks, scrolling behavior)
Technical information such as operating system, browser type and version
Referrer URL (previously visited website)
IP address (anonymized, as far as possible)

The processing of this data is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TTDSG, which you provide via our cookie banner. You can revoke your consent at any time.

Tools used

i. Google Analytics‍
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the analysis of user behavior by collecting data such as page views, length of stay and interactions. This data may be summarized in a pseudonymized profile. Google uses technologies such as cookies and device fingerprinting for data processing.

Data transfer: Information is transmitted to servers in the USA. This transfer is based on standard contractual clauses of the EU Commission (details: Google Controller Terms).
IP anonymization: Your IP address will be shortened before transmission, so that no conclusions about your person can be drawn.

ii. Microsoft Clarity
Provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.
Microsoft Clarity creates session recordings and heat maps to analyze user behavior. This data is processed and stored anonymously.

Data transfer: As with Google Analytics, data is also transferred to the USA, based on standard contractual clauses (details: Microsoft Privacy Statement).

iii. Facebook Pixel
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.
Facebook Pixel enables the tracking of visitor interactions on our website as well as the display of personalized advertising ("Facebook Ads", "Instagram Ads"). Cookies and the Conversions API collect information such as pages accessed and interactions.

Data transfer: The processing is carried out in cooperation with Meta Platforms, whereby personal data is transferred to the USA. This transfer is also based on standard contractual clauses (details: Meta Data Transfer Addendum).
Joint responsibility: We have concluded an agreement with Meta Platforms on the joint data processing in accordance with Art. 26 GDPR (Details: Meta Controller Addendum).

Purpose of processing

‍The data collected is used to improve the user experience on the website, to analyze user behavior and to optimize our marketing measures.

Storage period

With Google Analytics, user data is anonymized or deleted after 14 months at the latest (details: Google Analytics data retention).
Microsoft Clarity stores data in anonymized form for a maximum of 13 months (details: Data retention | Microsoft Learn).
Facebook pixel data is stored and processed in accordance with the meta guidelines.

Your rights

‍You can revoke the storage and processing of your data at any time, e.g. by adjusting your settings in the cookie banner or by deactivating the tracking functions via the following links:

Google Analytics: Google Opt-out
Microsoft Clarity: Make settings in your browser
Facebook Custom Audiences: Settings at Meta

7. Presences on social media platforms & data processing by social networks

We operate publicly accessible profiles in social networks. The detailed social networks used by us can be found below. Social networks such as Facebook, Twitter, etc. can usually comprehensively analyze your user behavior. By visiting our social media presence, the following data protection-relevant processing operations are triggered: If you are logged in to your social media account and visit our profile, the operator of this social media can understand this visit. Regardless of this, the operator may process your data (e.g. IP address) even if you are not logged into your account or you do not have an account at all. The operator summarizes this data in user profiles in which your preferences and interests are stored. These profiles are used to place personalized advertising in and out of the respective social media presence. If you have an account with the respective social network, the personalized advertising can be displayed on all devices on which you are logged in or were logged in. Depending on the platform, further processing operations may be carried out by the operators of the social media portals, on which we have no influence. Details can be found in the terms of use and privacy policy of the respective social media portals.

Legal foundation

Our social media presences are intended to ensure the most comprehensive presence on the Internet within the meaning of Art. 6 (1) (f) GDPR. In addition, we pursue our legitimate interest in a diverse external presentation of our company and the use of an effective information opportunity to improve our external presentation and communication with you. The analysis processes carried out by the operators of the social networks may be based on different legal bases, which must be indicated by the respective providers. If you have given a platform operator consent to the processing of data, Art. 6 (1) (a) GDPR is the legal basis.

Responsible and assertion of rights

If you want to use one of our social media presences (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered by this visit. In principle, you can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. B. Facebook). Despite the joint responsibility with the social media portal operators, we have no full influence on the data processing operations of the portals. Our options are largely based on the company policy of the respective provider.

Storage period

The data collected directly by us via the social media presence will be deleted from our systems as soon as you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Mandatory statutory provisions - in est all retention periods - remain unaffected. We have no influence on the storage period of the data collected by the social networks. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

Facebook page

We have a profile on Facebook. This service is provider by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The collected data will also be transferred to the USA and other third countries. We have concluded an agreement on joint processing (Controller Addendum) with Facebook, which defines for which data processing operations we or Facebook is responsible. You can view this agreement at the following link: https://www.facebook.com/legal/terms/page_controller_addendum. You can adjust your advertising settings independently in your user account. Click on the following link and log in: https://www.facebook.com/settings? tab=ads. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/5669946603333381. Further information on data processing by Facebook can be found at https://www.facebook.com/about/privacy/.

Instagram page

We have a profile on Instagram. Provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://help.instagram.com/519522125107875 and https://de-de.facebook.com/help/5669946603333381. Details on how they handle your personal data can be found in Instagram's privacy policy: https://help.instagram.com/519522125107875.

LinkedIn page

We have a profile on LinkedIn. Provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you would like to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs. Details on the handling of your personal data can be found in LinkedIn's privacy policy: https://www.linkedin.com/legal/privacy-policy.

Xing page

‍W‍e have a profile at Xing. Provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://privacy.xing.com/de/datenschutzerklaerung. Details on how they handle your personal data can be found in Xing's privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.

8. E-Mail newsletter

You can subscribe to an e-mail newsletter ("newsletter") on our website. To register for our newsletter, you must provide us with your e-mail address. To verify your e-mail address, we use the so-called double opt-in procedure. This means that after providing your e-mail address we will send you a confirmation e-mail to the specified e-mail address, in which we ask you to confirm that you wish to send the newsletter. If you confirm this, we will store your data until you unsubscribe from the newsletter. The storage serves the sole purpose of being able to send you the newsletter. The legal basis is your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter e-mail, by e-mail to the above address or by sending a message to the contact details given in the imprint. The data you have stored with us for the purpose of receiving the newsletter will be stored by us until you unsubscribe from the newsletter and will be deleted from the newsletter distribution list after you unsubscribe from the newsletter. Data stored by us for other purposes remains unaffected by this. After you have unsubscribed from the newsletter distribution list, your e-mail address may be stored in a blacklist to prevent future mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to the storage if your interests outweigh our legitimate interest.

9. Video conferencing

We use third-party video conferencing tools to conduct video and audio conferences, webinars and other types of video and audio meetings. The following data categories are processed:

Inventory data (e.g. names, addresses),
Contact details (e.g. e-mail, phone numbers),
Content data (e.g. text input, photographs, videos), meta/communication data (e.g. device information, IP addresses). The processing of the data serves to set up and conduct online meetings / video conferences.

The processing takes place on the legal basis Art. 6 para. 1 lit. b GDPR or according to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interests in efficient and secure communication with our communication partners. If you have previously given your consent to data processing, the processing of your data takes place solely on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time. We use the following video conferencing tools: Google Meet: Google Ireland Limited (Gordon House, Barrow Street Dubil 4, Ireland) is responsible for the European area. In order to ensure sufficient guarantee for any data transfers to the USA or other third countries, the EU Standard Treaty Clauses apply. If you share content on this service, it is stored on the servers of the providers. This includes cloud recordings, chat messages, voice messages, and photos and videos that you have shared while using this service. We have no influence on the processing by the provider of the video conferencing tool. Further information on data processing by the conference tools can be found in the data protection declarations of the respective tool used. The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory statutory retention periods remain unaffected. We have no influence on the storage period of your data, which is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

10. Use of fonts

This website uses web fonts to ensure a consistent and appealing presentation of fonts. Various providers are used:

Adobe Fonts
This website uses web fonts from Adobe for the uniform presentation of certain fonts. The provider is Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (Adobe). When you access this website, your browser loads the required fonts directly from Adobe in order to display them correctly on your device. Your browser establishes a connection to the servers of Adobe in the USA. This makes Adobe aware that this website has been accessed via your IP address. According to Adobe, no cookies are stored when the fonts are provided.

Purpose and legal basis
The storage and analysis of the data is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is exclusively based on Art. 6 (1) (a) GDPR; consent can be revoked at any time. The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html. For more information about Adobe Fonts, please visit: https://www.adobe.com/de/privacy/policies/adobe-fonts.html. Adobe's privacy policy can be found at: https://www.adobe.com/de/privacy/policy.html.

Google Fonts
This website uses web fonts for the uniform representation of fonts. These are provided by Google. When you call up the page, your browser loads the required web fonts into your browser cache so that texts and fonts are displayed correctly. For this purpose, the browser you are using establishes a connection to the Google servers. Google gains knowledge of your IP address. If your browser does not support web fonts, a standard font will be used by your computer.

Purpose and legal basis
The use of Google Web Fonts is based on our legitimate interest in a uniform representation of the font of our website (Art. 6 para. 1 lit. f GDPR). If a corresponding consent has been requested (e.g. a consent to the storage of cookies), the processing of the data is exclusively based on your consent in accordance with Art. 6 (1) (a) GDPR. This can be revoked at any time. Further information on Google Web Fonts can be found here: https://developers.google.com/fonts/faq. Google's privacy policy can be found here: https://policies.google.com/privacy? hl=de.

12. Web hosting and platform services

Type and scope of processing

For the provision of our website and web applications, we use several platform and hosting services to ensure a secure, reliable and high-performance function of our offers. These services include, but are not limited to:

i. Webflow
Webflow, Inc., 398 11th Street, 2nd Floor, San Francisco, CA 94103, USA, is used for the design and hosting of our website. In the context of the use of Webflow, the following data is processed:

Visited pages and content (e.g. requested URLs)
Date and time of access
Amount of data transferred
Status messages for retrieval (e.g. success or error)
Browser type and browser version
Operating system of the terminal device
Referrer URL (previously visited website)
IP address of the user

This data is used by Webflow to ensure the functionality and security of the website.

ii. Firebase
Firebase, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is used as a back-end data processing service. Firebase stores and processes data exclusively on servers in Germany and guarantees GDPR-compliant processing. The processing includes:

Storage and management of user data
Hosting of web applications
Authentication and security features

The following data is typically processed:

Visited pages and content
Date and time of access
IP address of the user
Information on authentication (e.g. user ID)

‍iii. Google Cloud Platform
For the provision of our web applications and platform, we use Google Cloud, offered by Google Ireland Limited. Google Cloud is used to ensure the functionality and security of our web services. The data is stored exclusively on servers within the European Union.

The following data is usually processed:

Visited pages and content
Date and time of access
Amount of data transferred
Status messages for retrieval (e.g. success or error)
Browser type and browser version
Operating system of the terminal device
Referrer URL (previously visited website)
IP address of the user

Purposes of processing

The above services are used for the following purposes:

Provision of the website and web applications
Ensuring technical safety and stability
Performance analysis and optimization
Management and storage of user data

Purpose and legal basis

The processing is carried out to fulfill our contractual obligations in accordance with Art. 6 (1) (b) GDPR and on the basis of our legitimate interest in a secure, efficient and efficient provision of our online offer in accordance with Art. 6 (1) (f) GDPR.

Storage period

The data will be processed for the purposes mentioned above and will be deleted regularly after 30 days, unless there are legal retention obligations.

Additional information

Webflow's privacy policy: https://webflow.com/legal/privacy
Firebase Privacy Policy: https://firebase.google.com/support/privacy
Google Cloud Terms of Use: https://cloud.google.com/terms

12. Marketing and CRM tools

Hubspot

We use the services of the provider HubSpot. HubSpot is a provider from the USA with a branch in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland). HubSpot is digital marketing software that allows us to send emails and cover other aspects of our online marketing. For example, the following personal data can be collected: e-mail address, first name and last name of the platform users; information about who receives which mails when and with which links interacts. The data will be deleted when applicants delete themselves from the platform. The data processing is carried out on the basis of consent in accordance with Art. Art. 6 para. 1 lit. a GDPR. The transfer to a third country takes place on the basis of Art. 49 para. 1 lit. a GDPR.

‍