PRIVACY POLICY

Table of contents

PRIVACY POLICY

DATA PROTECTION RIGHTS AND INFORMATION ON THE RIGHT TO OBJECT

GENERAL INFORMATION

HOSTING

COOKIES

DATA PROCESSING ON THE WEBSITE
Contact requests
Applications via the website
Newsletter mailing

DATA PROCESSING ON DYEMANSION WEB PORTAL
DyeMansion Connect
DyeMansion Workflow Center (IoT-Portal)

THIRD PARTY TOOLS
Facebook (Meta) Pixel
Google Tag Manager
Google Analytics
Google Ads
Google AdManager 
Google AdSense (personalized)
Google Maps
Hotjar
LinkedIN Insight Tag
Microsoft Bookings
Pardot by Salesforce
Personio HR Software
Salesforce Sales Cloud
Youtube

NOTES REGARDING OUR PRESENCE ON SOCIAL MEDIA

Privacy policy

Thank you for visiting our website and for your interest in our company. When processing your data, we strive to take the greatest possible care. The following information provides a compact and simple overview of what happens to your personal data when you visit our website. Your personal data will be processed in accordance with the relevant legal provisions.

Controller

The controller within the meaning of the European General Data Protection Regulation (GDPR) and other national data protection laws of the member states of the EU, as well as other data protection regulations, is:

DyeMansion GmbH
Robert-Koch-Straße 1
82152 Planegg-Munich
Germany
+49 89 4141705 00
hallo@dyemansion.com
https://dyemansion.com/

Contact information for questions about data protection

We have appointed an external data protection officer. For questions on the subject of data protection, please contact: datenschutz@confidentdata.de

Validity and changes of the privacy policy

This privacy policy is valid and is dated from
February 16, 2024

Due to the further development of our website or the implementation of new technologies and features, it may become necessary to change this privacy policy. We reserve the right to make appropriate changes at any time.

Data protection rights and information on the right to object

Your rights of access, rectification, restriction, erasure, data portability and to lodge a complaint with the supervisory authority

Every data subject has the right of access pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to object pursuant to Art. 21 GDPR and the right to data portability pursuant to Art. 20 GDPR.

With regard to the right of access and the right of erasure, the restrictions pursuant to §§34 and 35 BDSG apply.

You may object to the processing of your personal data at any time. This also applies to objections of declarations of consent given to us before the applicability of the General Data Protection Regulation, i.e. before May 25, 2018. Please note that the objection is only effective for the future. Processing that took place before the objection is not affected by it.

In addition, there is a right to lodge a compliant with the supervisory authority (Art. 77 GDPR in conjunction with § 19 BDSG). A list of the supervisory authorities (for the non-public sector) with address can be found at: https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html

Information on the right to object pursuant to Art. 21 GDPR

Right to object to the collection of personal data in special cases and recipient of the request

You have the right to object at any time, based on reasons relating to your particular situation, to the processing of your personal data on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

The objection can be made informally with the subject “Objection” stating your name, address or other identification features to the contact data stored in the imprint.

General information

Data security

We use technical and organizational security measures to protect your personal data against misuse, loss, destruction or access by unauthorized persons. The security measures taken into account (such as encryption procedures, firewall and virus protection, back-up and recovery procedures) correspond to the current state of the art and are continuously updated.

Nevertheless, we would like to point out that there is always a certain residual risk when communicating on the Internet, which depends on the user’s respective usage behavior and over which we consequently have no influence.

Scope (external links)

This privacy policy applies exclusively to visits to our own website. At some points on our website, external websites of third parties are linked. These websites are subject to the liability of the respective operators. If you notice that links on the websites refer to Internet pages whose contents violate applicable law, please notify us via the e-mail address provided in the imprint. We will then immediately remove these links from our website. The providers do not assume any liability for the topicality, correctness, completeness or quality of the information provided.

Data erasure routine

As a matter of principle, we only store your personal data for the period of time required to achieve the purpose of storage or if this is stipulated by national or European legislation.

In Germany, in particular, there is an obligation to retain documents for 6 years in accordance with § 257 (1) HGB (in particular, commercial books, inventories, opening balances, annual financial statements, commercial letters, accounting vouchers). Pursuant to § 147 (1) and (3) AO, 10 years for books, records, management reports, accounting vouchers, documents relevant to taxation, and 6 years in particular for commercial and business letters.

If the purpose of storage no longer applies or if a legally prescribed storage period expires, your personal data will be deleted routinely and in accordance with the statutory provisions.

Please also be aware of the specific explanations on individual storage and deletion periods of the respective data processing in this data protection declaration.

Data transfer to non EU-countries

When browsing our website, personal data may be transferred to servers in third countries outside the European Union through the integration of individual plug-ins and tools. Details about these data transfers, if any, including the respective valid legal basis, can be found in the section of the respective third-party tool in this privacy policy.

Data processing by processors

Tools and plug-ins from third-party providers are used on our website as part of commissioned processing. A data processing agreement has been duly concluded with all commissioned processors used, which ensures an appropriate level of data protection.

You can find more information about the data processing by the processors used in the section of the third-party tool in this privacy policy.

Hosting

External hosting provider:
We use an external service provider to host our website.

Provider:
1&1 IONOS SE
Elgendorfer Str. 57
56410 Montabaur
Germany

Purpose:
Reliable accessibility and presentation of our website.

Legal basis:
The use of our hoster is based on our legitimate interest in the most reliable accessibility and presentation of our website, pursuant to Art. 6 (1) lit. f GDPR.

Data processing agreement:
We have concluded a data processing agreement (DPA) with our hoster, which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR.

SSL- / TLS:
To protect the security of your data during transmission, we use the SSL or TLS encryption method via HTTPS.

Server-Log-Files:
When you browse our website, technical information of your browser session is automatically processed by our server. This data (so-called server log files) includes for example: the type of web browser, the operating system used, the domain name of your Internet service provider, your IP address and the like.

Purpose:
Ensuring a stable and smooth connection to the website, a responsive use of our website and the guarantee of system security and stability. We also reserve the right to check the server log files on a regular basis if there are concrete indications of illegal use.

Legal Basis:
The legal basis for the processing of the server log files is our legitimate interest in an error-free and secure presentation of our website, pursuant to Art. 6 (1) lit. f GDPR.

Provision of your data voluntary or mandatory:
Die Bereitstellung der Server Log-Files ist weder gesetzlich noch vertraglich vorgeschrieben. Ohne die Erhebung der Logfiles ist jedoch die Funktionsfähigkeit unserer Website nicht gewährleistet.

Storage period: 
The server-log-files are deleted as soon as it is no longer required for the purpose of collection. This is generally the case for the data used to provide the website when the respective session has ended.

Cookies

Cookies

Cookies are pieces of information that are transmitted from our web server or third-party web servers to users’ web browsers, where they are stored for later retrieval. They are stored either temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your terminal device. Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your end device until you delete them yourself or until they are automatically deleted by your web browser.

If you agree, cookies from third-party companies may also be stored on your end device (third-party cookies). These enable us or you to use certain services of the third-party company (e.g., reach measurement and evaluation of the usage behavior of our website, etc.)

Cookies have various functions. Many cookies are technically necessary, as certain website functions would not work without them (e.g. saving your cookie preferences). Other cookies are used to evaluate user behavior or, for example, to display advertising.

Cookies that are necessary to carry out the electronic communication process (necessary cookies) or to provide certain functions that you have requested (functional cookies, e.g. for storing your cookie preferences) or to optimize the website (e.g. cookies for measuring the web audience) are stored on the basis of Art. 6 (1) lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If consent to the storage of cookies has been requested, the storage of the cookies in question is based exclusively on this consent (Art. 6 (1) lit. a GDPR and §25 (1) TTDSG); a given consent can be objected at any time.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be limited.

As far as cookies are used by third-party companies or for analysis purposes, we will inform you separately about this within the framework of this data protection declaration and, if necessary, ask for your consent.

Borlabs Cookie

Provider:
Borlabs – Benjamin A. Bornschein, Rübenkamp 32, 22305 Hamburg, Germany.

Purpose:
Borlabs cookie is used to obtain consent from website users to store certain cookies and to use certain third-party tools, and to document this consent in compliant manner

Description of data processing:
When you browse our website for the first time, you are asked for your cookie preferences in Borlabs’ consent manager. A cookie is then set in your browser, which stores your cookie preferences for further browsing on our site. No personal data is passed on to Borlabs in this process.

Legal basis:
Obtaining legally required consent for the use of cookies according to Art. 6 (1) lit. c GDPR.

Provision of your data voluntarily or required:
Obtaining your cookie preferences is required by law.

Storage period:
The collected data is stored until you request us to delete it or delete the Borlabs cookie yourself, or until the purpose for storing the data no longer applies.

Objection:
For information on your right to object under Art. 21 GDPR, please see the section about data subject rights of this privacy policy.

Borlabs is not a processor:
No personal data is transmitted to Borlabs. Borlabs is therefore not a processor in terms of GDPR.

Information about data protection at the third party provider:
https://de.borlabs.io/kb/welche-daten-speichert-borlabs-cookie/.

Data processing on the website

Contact requests

Purpose:
Processing of the request.

Description of data processing:
Requests by e-mail, telephone or fax, including all resulting personal data, are stored and processed for the purpose of processing. A passing on of the data does not take place without your consent.

Legal basis:
The processing of your request is based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR. If you contact us to request a contractual offer, the processing is carried out for the implementation of pre-contractual measures pursuant to Art. 6 (1) lit. b GDPR.

Provision of your data voluntarily or required:
The provision of your data is neither legally nor contractually required. However, without the information a processing of your request is not possible.

Storage period:
Your data will be deleted at the latest 6 months after processing the request. If a contractual relationship exists, we are subject to the statutory retention periods and delete your data after six or ten years.

Objection:
For information on your right to object under Art. 21 GDPR, please see the section about data subject rights of this privacy policy.

Online contact form:
By providing an online contact form, we would like to enable you to contact us easily. The information you provide will be stored for the purpose of processing the request and for possible follow-up questions, taking into account the above-mentioned storage period.

Use of a CRM-System:
The personal data resulting from your inquiry may be stored in our Customer Relationship Management System (CRM). For more information on the CRM system that is used, please refer to the section Third-party tools.

Applications via the website

Purpose:
Processing of applications.

Description of data processing:
On our website, users have the possibility of applying to us either via our application form or directly by e-mail. In this context, we will inform you separately about the details of the processing of your application data with corresponding data protection information according to Art. 13, 14 and 21 GDPR.

Legal basis:
The processing of your application including all resulting personal data is based on your consent pursuant to Art. 6 (1) lit. a DSGVO and for the decision on the establishment of an employment relationship pursuant to Art. 88 DSGVO in conjunction with. § 26 BDSG.

Provision of your data voluntarily or required:
The provision of your application is voluntary. However, we can only make a decision on the establishment of an employment relationship if you provide such personal data that is required for the execution of the application.

Storage period:
Your application documents will be deleted no later than six months after the end of the application process (e.g. notification of the rejection decision), unless longer storage is legally required or permitted.

Application pool:
In case we are unable to make you a job offer at the time of your application, we offer applicants the opportunity to be included in our applicant pool in order to be informed about suitable vacancies at a later date. Inclusion in the applicant pool is, of course, voluntary and has no effect on the current application process. The legal basis for inclusion is your consent pursuant to Art. 6 (1) lit. a GDPR.

Objection:
You can object your given consent at any time. Information on your right to object in accordance with Art. 21 GDPR can be found in the section “Data subject rights”.

Storage period of personal data stored in our application pool:
Applications in our applicant pool will be irrevocably deleted no later than two years after consent has been given.

Newsletter

Purpose:
Sending a newsletter for marketing purposes.

Description of data processing:
On our website visitors can sign up for a newsletter. If you decide to subscribe, your data will only be used to send you the newsletter you have subscribed to by e-mail and, if you have also consented to this, to evaluate how you use the newsletter and any content linked to it. To receive the newsletter, it is only mandatory to provide a valid e-mail address.All other information requested is voluntary.

Legal basis:
The processing is based on your consent in receiving the newsletter according to Art. 6 (1) lit. a GDPR.

Provision of your data voluntarily or required:
The provision of your data is voluntary, based on your consent. However, without your consent, the receipt of our newsletter is not possible.

Storage period:
Your data will only be processed as long as we have your consent in receiving our newsletter.

Objection:
You can object your given consent in every newsletter mail by clicking on unsubscibe. You then will no longer receive the newsletter.

Use of a newsletter tool:
To ensure an efficient and performative newsletter mailing, we use an external newsletter tool of a third-party provider. You can find more information about the newsletter tool we are using in the section about third-party tools.

Data processing on DyeMansion Web Portals

DyeMansion Connect

Purpose:
Use of a portal for service tickets and sales activities for customers and resellers.

Description of data processing:
For our customers and resellers, we operate DyeMansion Connect – a portal for digital management of installed machines and service activities and cooperation with DyeMansion resellers for joint sales activities. For existing customer relationships, we use the data already collected during the conclusion of the contract or in the context of pre-contractual measures: Name, e-mail, account data. If the user wants to create a lead via the form, we collect the following information: First name, last name, voluntarily: title, name and address of the company, e-mail, telephone, voluntarily: telephone number, website of the company. 
The platform is hosted by our service provider Salesforce as part of order processing and is based on the Salesforce Community/Experience Cloud solution. Hosting takes place via Salesforce servers at server locations in Salesforces’ EU cluster. For more information on data protection at Salesforce, please see the section on third-party tools used in this privacy policy.

Legal basis:
The use of DyeMansion Connect for existing customers, contractual partners and leads is a contractual service or a pre-contractual measure. Accordingly, the legal basis is Art. 6 para. 1 lit. b. GDPR. The use of Salesforce as a platform is based on our legitimate interest in the efficient and secure provision of our service offering pursuant to Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 para. 3 GDPR.

Provision of your data voluntarily or required:
The provision of your data is voluntary.
However, without the provision of your data, the use of the portal or the processing of the request is not possible.

Storage period:
As far as the personal data necessary for the execution of the contractual relationship is concerned, we are subject to the statutory retention periods and delete your data after six or ten years.

Objection:
You can find information on your right to object in accordance with Art. 21 GDPR in the section on data subject rights.

DyeMansion Workflow Center (IOT-Portal)

Purpose:
Use of a portal for visualization, monitoring and analysis of our customers’ machines.

Description of data processing:
We operate an IOT portal for visualization, monitoring and analysis of our customers’ machines and for troubleshooting by our service technicians. In addition to a variety of technical machine data without personal reference, only the name and e-mail address of the user are processed.

For the operation of our IOT portal, the following service providers are used within the scope of order processing:

Siemens Mindsphere:
We operate an IOT portal for visualization, monitoring and analysis of our customers’ machines and for troubleshooting by our service technicians. In addition to a variety of technical machine data without personal reference, only the name and e-mail address of the user are processed.

Provider: Siemens AG, Werner-von-Siemens-Straße 1, 80333 Munich, Germany.
Purpose: Provider of the IOT as a service solution Mindsphere.
More information: https://www.plm.automation.siemens.com/global/en/products/mindsphere.

AWS:
Provider: Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxemburg.
Purpose: Hosting der Backend Datenbank.
More informationen: https://aws.amazon.com/?nc1=h_ls.

Codestryke:
Provider: Codestryke GmbH, Central Tower Landsberger Str. 110, 80339 München Deutschland.
Purpose: Entwicklungsdienstleister für die Durchführung von Updates und Konfigurationsänderungen.
More informationen: https://codestryke.com/en/vergelink-en/.

Legal basis:
The use of the DyeMansion Workflow Center for existing customers is a contractual service. Accordingly, the legal basis is Art. 6 para. 1 lit. b. GDPR. The use of our service providers for the operation is based on our legitimate interest in an efficient and secure provision of our services according to Art. 6 para. 1 lit. f GDPR in conjunction with Art. 28 para. 3 GDPR.

Provision of data voluntarily or required:
The provision of your data is voluntary.
However, without the provision of your data, the use of the portal or the processing of the request is not possible.

Storage period:
As far as the personal data necessary for the execution of the contractual relationship is concerned, we are subject to the statutory retention periods and delete your data after six or ten years.

Objection:
You can find information on your right to object in accordance with Art. 21 GDPR in the section on data subject rights.

Third Party Tools

Facebook (Meta) Pixel

Provider:
Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Purpose:
Optimization of our social media marketing activities.

Description of data processing:
We have integrated Meta Pixel on our website. The tool helps us to better align our advertising measures with the interests of our website visitors and thus optimize our social media marketing. If the user clicks on an ad on Meta or Instagram and is subsequently redirected to our website, Meta Pixel – in case of their consent – sets cookies on their device. The data collected in this process is anonymous for us as the provider of this website and does not allow any conclusions to be drawn about your identity. Meta stores and processes this data and merges it with your active profile, so that a connection to the respective active profile is possible. Meta may use this data for its own advertising purposes. We have no influence on this.

Legal basis:
The use of the tool requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 (1) lit. a GDPR and §25 (1) TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
According to Meta, the storage period of their cookies set in your browser is between 3-12 months. We cannot give any guarantee for this information, since an adjustment of the storage period of Meta’s cookies can never be ruled out.

Joint controllership Addendum:
We have accepted the Terms of Use for Meta Business Tools and at the same time completed the Joint Controllership Addendum.

Transfers to third countries:
Processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 (2) lit. c GDPR.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

Further notes on data protection:
Privacy policy: https://de-de.facebook.com/about/privacy/.
If you have a Meta account, you can deactivate the “Custom Audiences” remarketing function here (log-in required): https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen 
If you do not have a Meta account: the following website offers a way to disable Meta’s targeted advertising. Please note that you may need to set this on each of your devices: https://www.youronlinechoices.com/de/praferenzmanagement/.

Google Tag Manager

Provider:
Google – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose:
Efficient organization and integration of Google tools on our website.

Description of data processing:
The Google Tag Manager allows us to centrally integrate and manage various Google tools. For this purpose, small sections of code (so-called tags) of the various Google products (such as Google Analytics, Google Ads, etc.), but also tags from other companies are integrated into the Google Tag Manager and managed from there. The Google Tag Manager itself does not store any personal data, so it only acts as an “intermediary”. The situation is different for the tools that are integrated via the Tag Manager. The data protection relevance of these tools is indicated in the corresponding text passages.

Legal basis:
The use of the Google Tag Manager requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings or click the opt-out link below.

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
The Google Tag Manager itself does not store cookies, user profiles, analyses, etc.. How long the analysis tools integrated via the Google Tag Manager store your data can therefore be found in the respective text passages.

Google consent mode:
We have embedded the Google Tag Manager using the consent mode. Consent Mode is Google’s solution for managing cross-device user consents and data protection settings. Consent Mode helps us to generate valuable insights about the visit to our website, even if a user has objected to the use of cookies on the website. You can find more information on how this works in Google’s technical documentation: https://support.google.com/analytics/answer/9976101?hl=en.

Further notes on data protection:
How the Google Tag Manager works: https://support.google.com/tagmanager/?hl=de#topic=3441530.
Googles privacy policy: https://policies.google.com/privacy?hl=de.

Data transfers to third countries:
Processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 (2) lit. c GDPR. The SCCs can be found here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

Google Ads Data Processing Terms:
By accepting the Google Tag Manager Terms of Service, we have also entered into the Google Ads Data Processing Terms. Googles terms can be viewed as a Data Processing Addendum (DPA).

Google Analytics

Provider:
Google – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose:
Analysis of the behavior of website visitors by evaluating, for example, page views, dwell time, operating system, etc., in order to optimize the website.

Description of data processing:
Google Analytics helps us to analyze the traffic of our website. For this to work, a tracking code provided by Google Analytics and integrated via the Google Tag Manager is implemented on our website. If you consent to tracking by Google Analytics, a cookie is set on your device, which gives your device a unique identifier (tracking ID). This cookie is linked to Google Analytics. It records the surfing behavior of our website visitors and the resulting statistics may provide information about which target groups feel addressed by our website.

Legal basis:
The use of Google Analytics requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings or click the opt-out link below.

Provision of data voluntarily or required:
The provision of your data is voluntary.

Further notes on data protection:
Notes on data protection and Google Analytics: https://support.google.com/analytics/answer/6004245?hl=de.
General information about Google Analytics: https://marketingplatform.google.com/about/analytics/terms/de/.
Googles privacy policy: https://policies.google.com/privacy.
Browser Plug-In to Opt-Out: https://tools.google.com/dlpage/gaoptout?hl=en.

Anonymize-IP:
We have activated the IP anonymization function. This means that no full IP addresses of visitors within the European Economic Area (EEA) are stored and transmitted unabbreviated to the USA. A transmission of unabbreviated IP addresses 

Data storage 14 months:
We have configured Google Analytics so that the stored data at user and event level is automatically deleted after 14 months. You can find more information about the storage period of the tool here: https://support.google.com/analytics/answer/7667196?hl=de.

Data Processing Addendum:
We have entered into a direct customer agreement with Google for the use of Google Analytics by accepting their “Data Processing Addendum” (DPA) in the Google Analytics settings. You can find more information about these data processing conditions here: https://privacy.google.com/businesses/controllerterms/mccs/.

Transfers to third countries:
Processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 para. 2 lit. c GDPR. Information on Googles SCCs can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

Google Ads

Provider:
Google – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose:
Analysis and performance tracking of our online marketing activities in Google’s advertising network.

Description of data processing:
By using Google Ads, our website can be found better in Google’s advertising network. If the user enters certain keywords in the Google search (keyword targeting), we are able to play our website offer to the user in accordance with the search query through the Google Ads. We also have the option of evaluating the search queries made and thus measure the success of our advertising measure based on the access figures of the individual search terms.

Legal basis:
The use of Google Ads is based on our legitimate interest in marketing our website offer as effectively as possible pursuant to Art. 6 para. 1 lit. f GDPR.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings. If you want to turn off the ads displayed by Google for your Google account, you can do so via this link:  https://adssettings.google.com/authenticated.

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
The storage period of the user data transmitted to Google by Google AdManager (IP addresses, browser information, operating system, limited usage and location data) cannot be clearly limited. Google has not yet taken a position on this.

Further notes on data protection:
Information on Google Ads: https://policies.google.com/technologies/ads.
Googles privacy policy: https://policies.google.com/privacy?hl=de.

Google Remarketing:
We use the remarketing function of Google Ads. Remarketing analyzes your usage behavior on our website (e.g. clicking on certain content on the website) in order to classify you in certain advertising target groups and then play you personalized advertising when you visit other websites. This is known as remarketing or retargeting.

In addition, the information obtained through remarketing can be linked to Google’s cross-device functions. This means that the ads directed at you are displayed on another of your end devices, taking into account your previous surfing behavior on other end devices (cell phone, tablet, etc.).

If you have a Google account, you can opt-out of personalized advertising in your account settings here: https://www.google.com/settings/ads/onweb/.

Google Conversion-Tracking:
We use Google Ads conversion tracking. This helps us to match the ads we run to your interests better. Specifically, the conversion tracking tool helps us measure the cost-benefit ratio of our ads.

A conversion is the process of turning an interested user into an active user who, for example, makes a purchase or clicks on certain content on the website. Google’s conversion tracking tool helps us measure what happens after the user has clicked on one of our ads and whether this has resulted in a purchase, subscription or download.

We can see which keywords, ads, ad groups, and campaigns led to which results. We can see how many customers interact with our ads on their devices and subsequently complete a conversion. This data helps us measure the success of individual advertising measures and subsequently optimize our online marketing.

Data Processing Addendum:
We have agreed with Google on their Google Ads Controller Data Protection Terms. This means that Google itself is responsible for data processing. You can find more information about these data processing conditions here:https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.

Transfers to third countries:
Processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 para. 2 lit. c GDPR. Information on Googles SCCs can be found here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

Google AdManager (formerly DoubleClick)

Provider:
Google – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose:
Online marketing measure to display interest-based advertisements in the Google advertising network.

Description of data processing:
The Google AdManager ( former Google DoubleClick) helps us to target our marketing measures to relevant audiences. For example, our ads are displayed in Google search queries or in ad banners that are connected to the Google advertising network. Google uses cookies so that this can be technically realized and the user can be recognized. The information on the user’s interests collected in this way is bundled in a pseudonymized profile in order to subsequently play out advertising based on these interests in the Google advertising network.

Legal basis:
The display of Google Ads content requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings. If you want to turn off the ads displayed by Google for your Google account, you can do so via this link:  https://adssettings.google.com/authenticated.

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
The storage period of the user data transmitted to Google by Google AdManager (IP addresses, browser information, operating system, limited usage and location data) cannot be clearly limited. Google has not yet taken a position on this.

Further notes on data protection:
Information on Google Ads: https://policies.google.com/technologies/ads.
Googles privacy policy: https://policies.google.com/privacy?hl=de.

Google Ads Controller-Controller Data Protection Terms:
We have agreed with Google on their Google Ads Controller Data Protection Terms. This means that Google itself is responsible for data processing. You can find more information about these data processing conditions here:https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.

Transfers to third countries:
Processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 para. 2 lit. c GDPR. Information on Googles SCCs can be found here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

Google AdSense

Provider:
Google – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose:
Online marketing activity to display advertisements on the Google advertising network.

Description of data processing:
Google AdSense in personalized mode plays ads depending on their Google user profile and the associated previous usage behavior. In addition, the advertisements take into account contextual information, such as your location, the content of the visited page, or the search terms through which you came to the website. By integrating AdSense, we can thus target interest-related advertisements on our website. So that this can be technically realized, Google sets cookies for this.

Legal basis:
The use of Google AdSense requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings. If you want to turn off the ads displayed by Google for your Google account, you can do so via this link:  https://adssettings.google.com/authenticated.

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
The storage period of the user data transmitted to Google by Google AdManager (IP addresses, browser information, operating system, limited usage and location data) cannot be clearly limited. Google has not yet taken a position on this.

Further notes on data protection:
Information on the different features of Google AdSense:  https://support.google.com/adsense/answer/9007336.
Googles privacy policy: https://policies.google.com/privacy?hl=de.

Google Ads Controller-Controller Data Protection Terms:
We have agreed with Google on their Google Ads Controller Data Protection Terms. This means that Google itself is responsible for data processing. You can find more information about these data processing conditions here:https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.

Transfers to third countries:
Processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 para. 2 lit. c GDPR. Information on Googles SCCs can be found here: https://business.safety.google/adscontrollerterms/sccs/eu-c2c/.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

Google Maps

Provider:
Google – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose:
Optimization of our internet presence.

Description of data processing:
We have integrated the online map service Google Maps on our website. This helps interested parties with orientation and us with better findability in the Google search. In case you agree in the display of Google Maps on our website, then browser data is transmitted to Googles Servers and at least one cookie is set. This cookie stores data about your user behavior, which Google uses to improve its own services and, if necessary, to play individual, personalized advertising.

Legal basis:
The display of Google Maps content requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings.

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
By integrating Google Maps we do not consciously collect user data The storage period of the NID cookie set by Google Maps is 6 months according to Google. We cannot give any guarantee for this information, since an adjustment of the storage period of Google cookies can never be excluded.

Further notes on data protection:
Googles privacy policy: https://policies.google.com/privacy?hl=de.

Transfers to third countries:
Processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 para. 2 lit. c GDPR. Information on Googles SCCs can be found here:
https://business.safety.google/controllerterms/.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

LinkedIN Insight Tag

Provider:
LinkedIn – LinkedIn Ireland Unlimited Company, Wilton Plaze, Dublin 2, Ireland.

Purpose:
Optimization of our website by analyzing the behavior of our website visitors.

Description of data processing:
The LinkedIn Insight Tag helps us to get information about the visitors of our website. If a user is registered with LinkedIn, the tool allows us to analyze the key professional data available in LinkedIn (position, employer, industry, location, etc.) and align our website accordingly. For this purpose, the tool sets a browser cookie that stores your IP address, timestamp, page activity and your information published on LinkedIn if you are an active LinkedIn member at the time of the visit. The collected data is hashed (pseudonymized).

Legal basis:
The use of LinkedIN Insight Tag requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings.

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
The direct IDs of LinkedIn members are deleted by LinkedIn after seven days. The remaining pseudonymized data is then deleted within the next 180 days. We store your data for as long as you need for the purpose of campaign evaluation and web audience analysis, or you have objected to the storage of your data or revoked your consent.

Further notes on data protection:
LinkedIn privacy statement: https://www.LinkedIn.com/legal/privacy-policy#choices-oblig
Opt-Out Cookie for LinkedIN Retargeting: https://docs.microsoft.com/en-us/clarity/faq.

Data Processing Addendum:
By accepting LinkedIns services agreement, we have also concluded the providers Data Processing Addendum (DPA). The DPA guarantees that the personal data of our website visitors will only be processed according to our instructions and in compliance with the GDPR. The DPA can be found via the following document search: LinkedINs DPA can be found here: https://www.linkedin.com/legal/l/dpa.

Data transfers to third countries:
Processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 para. 2 lit. c GDPR. Information on LinkedIN and the SCCs can be found here: 
https://www.linkedin.com/legal/l/customer-sccs.

Microsoft Bookings

Provider:
Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Purpose:
Scheduling, execution and follow-up of appointments via the website.

Description of data processing:
The data you provide for your desired appointment will be recorded via a corresponding form on our website. This data, including all resulting personal information, is then transmitted to us via Microsofts` servers. Our Microsoft instance is hosted within the EU-Cluster of Microsoft.

Legal basis:
The use of Microsoft Bookings requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 (1) lit. a GDPR and §25 (1) TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings.

Provision of data voluntarily or required:
The provision of your data is voluntary. You are also welcome to send us an appointment request without using Microsoft Bookings.

Storage period:
The data entered will remain with us until we are requested to delete the data, you revoke your consent to storage or the purpose of the data storage no longer applies. In the event that a contract is concluded, the statutory retention periods of six or ten years apply.

Further notes on data protection:
Microsoft privacy policy: https://go.microsoft.com/fwlink/?LinkId=521839

Data Processing Addendum:
By accepting Microsofts terms of use of we have also concluded the providers online terms of use / Data Processing Addendum (DPA). The DPA guarantees that the personal data of our website visitors will only be processed according to our instructions and in compliance with the GDPR. Microsofts DPA can be found here: https://www.microsoft.com/licensing/docs/view/Microsoft-Products-and-Services-Data-Protection-Addendum-DPA.

Data transfers to third countries:
Processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 (2) lit. c GDPR. Information on Microsoft and the SCCs can be found here: https://docs.microsoft.com/en-us/compliance/regulatory/offering-eu-model-clauses.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

Personio HR Software

Provider:
Personio – Personio GmbH, Rundfunkplatz 4, 80335 Munich, Germany.

Purpose:
Efficient HR-Management and application management.

Description of data processing:
Our Human Resources Management uses the cloud-based HR operating system Personio. The tool helps us to deal with HR processes, such as the applications via our website. When you apply for a job at our company, your data can be transferred in to the Personio HR Operating System. There we can centrally manage your application and control and analyze HR-related processes. All applicants will, of course, be informed separately about the data processing in the context of their application.

Legal basis:
The processing of applicant data with Personio is based on our legitimate interest in the most efficient HR-Management and application management, pursuant to Art. 6 (1) lit. f GDPR.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights.

Provision of data voluntarily or required:
The provision of your data is voluntary. Without the provision of your data, however, we may not be able to enter into a contractual relationship with you.

Storage period:
The applicant data transmitted to Personio is deleted as soon as it is no longer required (after 6 months the latest) or you request us to delete it. If the application leads to an employment relationship, other retention periods apply.

Further notes on data protection:
Personios privacy policy: https://www.personio.com/privacy-policy/.

Data Processing Addendum:
We have concluded Personio`s data processing addendum, which ensures that Personio only processes the personal data according to our instructions and in compliance with the GDPR.

Salesforce Sales Cloud

Provider:
Salesforce – salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany.

Purpose:
Efficient customer communication and customer management.

Description of data processing:
To manage our customers, we use the customer relationship management system (CRM) Salesforce Sales Cloud. When you contact us, for example by filling out one of our website forms, your data can be transferred to the Salesforce CRM system. There we can centrally manage your request and control and analyze customer-related processes. This happens in the Salesforce Sales Cloud, which means that personal data is transmitted to Salesforce’s servers. Salesforce has assured us that our customer data is hosted exclusively on servers in the EU. In exceptional cases – for example, in the event of technical problems – data may nevertheless be transferred to the parent company of Salesforce in the US.

Legal basis:
The processing of customer data with Salesforce Sales Cloud is based on our legitimate interest in the most efficient customer management and customer communication possible, pursuant to Art. 6 lit. f GDPR. The storage of Salesforces` third-party cookies when you visit our website on the other hand requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings.

Provision of data voluntarily or required:
The provision of your data is voluntary. Without the provision of your data, however, we may not be able to enter into a contractual relationship with you.

Storage period:
The customer data transmitted to Salesforce is deleted as soon as it is no longer required or you request us to delete it. If there is a contractual relationship, we are subject to the statutory retention periods and delete your data after six or ten years.

Further notes on data protection:
Salesforce privacy policy: https://www.salesforce.com/de/company/privacy/.

Data Processing Addendum:
We have concluded Salesforces data processing addendum (DPA), which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR. Salesforces DPA can be found here:
https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf.

Data transfers to third countries:
In exceptional cases, processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of binding corporate rules (BCR) in accordance with Article 47 of the GDPR, to which Salesforce has committed itself and which have been approved by the French data protection authority and also in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 para. 2 lit. c GDPR. Salesforces SCCs can be found here:
https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/scc-amendment.pdf.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

Pardot by Salesforce

Provider:
Salesforce – salesforce.com Germany GmbH, Erika-Mann-Str. 31, 80636 Munich, Germany.

Purpose:
Efficient customer communication and customer management.

Description of data processing:
You can sign up for our newsletter. The registration is of course voluntary. Within the scope of your registration, we and our service provider Salesforce, which is used for the newsletter dispatch, process the data provided by you. The only mandatory information is your e-mail address, everything else is voluntary. The registration process works by the so called “double opt-in” procedure. Pardot offers us the possibility to analyze our newsletter campaigns. For this purpose, so-called web beacons are integrated into Pardot’s emails, which connect to Salesforce’s servers when the email is opened and transmit technical information (e.g. time of retrieval, IP address, browser type and operating system). Pardot also set cookies in order to technically manage the newsletter dispatch and to make your service secure and continuously improve it. For more information about the cookies that are set, check the further notes on data protection below,

Legal basis:
The receipt of our newsletter requires your consent. This consent is obtained as part of the newsletter sign up process. Legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG, if you agree to the use of third-party cookies by the provider. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. You can object your given consent in every newsletter mail by clicking on unsubscribe in the footer section of each mail. You then will no longer receive the newsletter. Regarding the third party cookies being set, you can manually delete the cookies in your browser settings.

Provision of data voluntarily or required:
The provision of your data is voluntary. However, without your consent, the receipt of our newsletter is not possible.

Storage period:
Your data will only be processed as long as we have your consent in receiving our newsletter.

Further notes on data protection:
Salesforce privacy policy: https://www.salesforce.com/de/company/privacy/.
Information on how Pardot works: https://www.salesforce.com/de/products/pardot/solutions/.
Information on Cookies and Pardot: https://help.salesforce.com/s/articleView?id=sf.pardot_basics_cookies.htm&type=5.

Data Processing Addendum:
We have concluded Salesforces data processing addendum (DPA), which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR. Salesforces DPA can be found here:
https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/data-processing-addendum.pdf.

Data transfers to third countries:
In exceptional cases, processing also takes place outside the EU, namely in the USA. Guarantees exist in the form of binding corporate rules (BCR) in accordance with Article 47 of the GDPR, to which Salesforce has committed itself and which have been approved by the French data protection authority and also in the form of concluded Standard Contractual Clauses (SCC) of the European Commission, pursuant to Art. 46 para. 2 lit. c GDPR. Salesforces SCCs can be found here:
https://www.salesforce.com/content/dam/web/en_us/www/documents/legal/Agreements/scc-amendment.pdf.

In addition, the company is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

YouTube

Provider:
Google – Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Purpose:
Improving our website by displaying video content.

Description of data processing:
We have embedded YouTube videos on our website using the so called “extended data protection mode”. This embedding method ensures that YouTube does not store any information about our visitors before they watch the video on our website. However, the transfer of data to the Google DoubleClick network cannot necessarily be excluded by the extended data protection mode. As soon as you start a YouTube video on our website, your browser establishes a connection to YouTube’s servers. This tells YouTube which page you have visited. If you are logged into your YouTube account at this time, the data is merged. In addition, YouTube sets cookies on your end device when you start a video. In summary, it can be said that after starting a YouTube video, data processing operations are triggered over which we have no influence.

Legal basis:
The use of YouTube requires your consent. This consent is obtained via our Consent Management Tool, respectively will be obtained before clicking on the displayed Vimeo content. Legal basis is therefore Art. 6 para. 1 lit. a GDPR and §25 para. 1 TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings.

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
By embedding video content from YouTube, we do not consciously collect user data. How long Vimeo stores your data, on the other hand, can not be clearly quantified from our side.

Further notes on data protection:
Googles privacy policy, as YouTubes parent company: https://policies.google.com/privacy?hl=de.
For owners of a Google Account:
Link to disable the recording of your YouTube history: https://myactivity.google.com/myactivity.
Link to the data and privacy settings: https://myaccount.google.com/data-and-privacy.

Transfers to third countries:
A transfer of your data also takes place outside the EU, namely in the USA. Google is member of the data protection agreement between the EU and the US, the so-called “EU-US Data Privacy Framework (DPF)” and is thereby certified. By participating in the DPF, the company commits to guarantee a level of data protection that is comparable to the GDPR.

Hotjar

Provider:
Hotjar – Hotjar Ltd., Dragonara Business Centre, 5th floor, Dragonara road, Paceville St. Julian`s, STJ 3141, Malta.

Purpose:
Analysis of website users to optimize our marketing processes.

Description of data processing:
We have embedded Hotjar on our website. Hotjar’s technology helps us to collect data website. The technology of Hotjar helps us to collect qualitative data about our website visitors, such as device types, click history and number of clicks on individual content. Based on this information, the tool creates heat maps that can be used to determine which areas of the website are viewed preferentially by the user. In order to make this possible and to recognize the user if necessary, Hotjar uses cookies. According to Hotjar a processing only takes place on AWS servers located in Ireland (EU).

Legal basis:
The use of Hotjar requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 (1) lit. a GDPR and §25 (1) TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings. Another option for a permanent opt-out is to install Hotjar`s do-not-track plugin: https://www.hotjar.com/policies/do-not-track/

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
The data collected by Hotjar will be deleted as soon as it is no longer required for its intended purpose and the deletion does not conflict with any statutory retention obligations.

Further notes on data protection:
Privacy policy: https://www.hotjar.com/legal/policies/privacy/.
Informations on data protection: https://help.hotjar.com/hc/en-us/sections/360007966773-Privacy

Data Processing Addendum:
We have concluded Hotjars Data Processing Addendum (DPA), which ensures that the personal data of our website visitors is only processed according to our instructions and in compliance with the GDPR. Hotjars DPA can be viewed here: https://www.hotjar.com/legal/support/dpa/.

Flockler

Provider:
Flockler – Flockler Oy, Rautatienkatu 21 B, 33100, Tampere Finland.

Purpose:
Analysis of the behavior of website visitors by evaluating, for example, page views, dwell time, operating system, etc., in order to optimize the website.

Description of data processing:
Flockler helps us to manage our activities on social media. If you agree, content from our social media channels will be displayed on our website. A connection to the Flockler servers is established by activating the respective platform terminal. Your IP address is then temporarily transmitted to the Flockler servers. Your data is processed anonymously in the server logs to ensure good performance and IT security. When the content is loaded, personal data is passed on to the respective platform providers and transmitted to the third-party providers (e.g. IP address, referrer URL, video views, etc.). This also applies if you are not logged in or registered at the respective provider. Further information on data processing by the respective platform can be found in the notes regarding services below.

Legal basis:
The use of the tool requires your consent. This consent is obtained via our Consent Management Tool. Legal basis is therefore Art. 6 (1) lit. a GDPR and §25 (1) TTDSG. The consent can be revoked at any time.

Right to object / Opt-Out:
Information on your right to object according to Art. 21 of the GDPR can be found in the section on data subject rights. In the footer area of the website, you have the option of resubmitting your cookie preferences. Another option for opting out is to manually delete the website cookies in your browser settings.

Provision of data voluntarily or required:
The provision of your data is voluntary.

Storage period:
The collected data is automatically deleted or anonymized by flockler. The anonymized logs are completely deleted after 21 days.

Further notes on data protection:
Privacy Policy: https://flockler.com/privacy-policy.

Notes regarding our presence on social media

Data processing resulting from our presence on social media platforms
We are having profiles on various social media platforms. Details on the individual platforms we use can be found in this section.

Purpose:
We are having profiles on various social media platforms. Details on the individual platforms we use can be found in this section.

Description of data processing:
The type of data processing differs from platform to platform. Social networks such as Facebook, Instagram, Twitter, etc. can comprehensively analyze user behavior when you visit the respective platform or a website with integrated social media content (e.g. share/ like buttons or banners). Visiting our profiles on the platforms triggers numerous processing operations relevant to data protection.

For example: If you are logged into your account and visit our profile, the operator of the platform can assign this visit to your user account. Your personal data transmitted when you visit our profile may also be collected if you are not logged in or do not have an account with the respective social media platform. This is done, for example, via cookies that are stored on your terminal device or by recording your IP address.

The data collected in this way enables the platforms to create user profiles of the visitors, in which the preferences and interests of the users are stored. This helps the operators of the platforms to show you advertising tailored to your respective interests inside and outside platforms. This is how the platforms earn money. Provided you have an account with the respective platform, this advertising can be displayed on all devices on which you are or were logged in.

The data processing that takes place on the individual platforms is very difficult for outsiders to understand: It is therefore not possible for us to trace all the processing operations that actually take place on the individual networks. When visiting the platforms, it is therefore quite possible that further processing operations of your data are carried out by the operators. You can find more information on this in the terms of use and data protection provisions of the individual services.

Legal basis:
The legal basis is our legitimate interest in a comprehensive presence on social media platforms pursuant to Art. 6 (1) lit. f DSGVO. The data processing on the social media platforms themselves is based on other legal bases for which the operators themselves are responsible.

Storage period:
Personal data that we have collected directly via the individual platforms will be deleted from our systems as soon as you request us to do so, revoke your consent to storage or the purpose for storing the data no longer applies. Cookies remain on your device until you delete them. We have no direct influence on the storage period of your data on the individual social media platforms.

We have profiles on the following platforms:

Facebook (Meta)

Provider:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irleand.

Joint controllership:
When you visit our Facebook page, Facebook and we are jointly responsible for the processing of your data under data protection law. Facebooks agreement of joint controllership has been concluded. It can be viewed here: https://www.facebook.com/legal/terms/page_controller_addendum.

Data transfers to the US:
When visiting our Facebook profile, personal data is transferred to Facebook’s server in the USA. The transfer of personal data to the USA is based on the standard contractual clauses of the EU Commission. These can be viewed here: https://www.facebook.com/legal/EU_data_transfer_addendum.

Information on Facebook and privacy:
Advertising settings in your Facebook profile: https://www.facebook.com/settings?tab=ads.
Facebooks privacy policy: https://www.facebook.com/settings?tab=ads.
Information on the Standard Contractual Clauses: https://de-de.facebook.com/help/566994660333381.

Instagram

Provider:
Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.

Data transfers to the US:
Whilst visiting our Instagram profile, personal data is transferred to servers of Facebook (Meta), as Instagram’s parent company, in the USA. The data transfer to the USA is based on the concluded standard contractual clauses of the EU Commission. These can be viewed here: https://www.facebook.com/legal/EU_data_transfer_addendum.

Information on Instagram and privacy:
Instagrams privacy policy: https://help.instagram.com/519522125107875. Information on the Standard Contractual Clauses: https://de-de.facebook.com/help/566994660333381.

Twitter

Provider:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

Data transfers to the US: Whilst visiting our Twitter profile, data is transmitted to Twitter’s server in the USA. The data transfer to the USA is based on the concluded standard contractual clauses of the EU Commission. These can be viewed here: https://gdpr.twitter.com/en/controller-to-controller-transfers.html.

Information on Twitter and privacy:
Twitters Privacy Policy: https://twitter.com/de/privacy.

YouTube

Provider:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Information on YouTube and privacy:
Googles privacy policy, as YouTubes parent organisation: https://policies.google.com/privacy?hl=de.
For oweners of a Google account:
Link to disable YouTube History: https://myactivity.google.com/myactivity.
Link to the data and privacy account settings: https://myaccount.google.com/data-and-privacy.

LinkedIN

Provider:
LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Data Processing Addendum:
We have concluded LinkedIns’ data processing addendum, which ensures that the personal data of our website visitors are processed only according to our instructions and in compliance with the DSGVO. LinkedIn’s Data Processing Addendum can be found here: https://www.LinkedIn.com/legal/l/dpa.

Data transfers to the US:
Whilst visiting our LinkedIn profile, data is transferred to LinkedIn servers in the USA. The transfer of data to the USA is based on the standard contractual clauses of the EU Commission. These can be viewed here: https://www.linkedin.com/legal/l/eu-sccs.

Information on LinkedIn and privacy:
LinkedIns privacy policy: https://www.linkedin.com/legal/privacy-policy.
Opt-out cookie to disable LinkedIN retargeting: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Scroll to Top

Get a quote

    I would like to get a quote for:

    Print-to-Product WorkflowPowershot CPowershot SPowershot Performance SeriesPowerfuse SPowerfuse S PPDM60 SeriesOn-Demand FinishingColor Matching

    DyeMansion will process all information provided here in accordance with our privacy policy.

    *Mandatory field

    Do a benchmark

      I would like to:

      Send in my parts for a free benchmarkDo a live benchmark at our mansion

      DyeMansion will process all information provided here in accordance with our privacy policy.

      *Mandatory field

      Contact

        I am interested in (multiple answers possible):

        Print-to-Product WorkflowCleaningBlasting (PolyShot)Vapor Polishing (VaporFuse)Coloring360° Digital ServicesBenchmarkingBecome a partnerCompatible 3D-printing technologiesOther

        DyeMansion will process all information provided here in accordance with our privacy policy.

        *Mandatory field