Data Privacy
Version 3.2, as of 06.10.2026 · Adtelligence GmbH
This is a convenience translation. Only the German version is legally binding.
ACCELERAID takes the protection of your data very seriously. This applies even more in the course of the EU General Data Protection Regulation (GDPR) which came into force on May 25th 2018.
Information on the processing of personal data (data protection information)
(Version 3.2, as of 06.10.2026)
Welcome to the data protection area of ADTELLIGENCE GmbH. We are very pleased about your interest in our company. On the basis of this data protection information, we would like to inform you in detail about what data we collect, when we collect it and how it is processed.
Responsible
The responsible party pursuant to Art. 4 (7) EU General Data Protection Regulation (GDPR) is:
ADTELLIGENCE GmbH
Managing Director: Michael Altendorf
Address: Elisabethstraße 1, 68165 Mannheim, Germany
Phone: +49 621 59 23 41 0
E-mail: info@acceleraid.ai
Data Protection Officer
You can reach our data protection officer at:
Gesellschaft für Personaldienstleistungen mbH
Pestalozzistraße 27
34119 Kassel
Phone: +49 561 78968-80
General information on the collection of personal data
With the following notes, we inform you transparently about the nature and extent of the processing of personal data,
in the course of your visit to our website,
the use of our online services,
External online presences on social media platforms
in the context of application procedures
as well as in business relationships with customers and service providers
are collected.
The legal basis for our data protection is formed in particular by the requirements of the General Data Protection Regulation (GDPR) and the supplementary regulations of the Federal Data Protection Act (BDSG) and the Telecommunications Digital Services Data Protection Act (TDDDG).
Processing on behalf of our customers
This privacy notice applies to our website acceleraid.ai, including the subdomain blog.acceleraid.ai, and to our own business processes. Where we process personal data via the ACCELERAID platform on behalf of our customers, the respective customer is the controller within the meaning of the GDPR. Information about this processing and about your rights is available from the respective company.
Purpose / legal basis of the processing
In such cases where we obtain your consent for processing operations of personal data, Art. 6 (1) lit. a GDPR serves as the legal basis.
When processing personal data that is necessary for the performance of a contract concluded between you and us, Art. 6 (1) lit. b GDPR serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures.
In the event that processing of personal data is necessary for compliance with a legal obligation to which we are subject, Art. 6 (1) lit. c GDPR serves as the legal basis.
In the event that vital interests of the data subject or another natural person make it necessary to process personal data, Art. 6 (1) lit. d GDPR is the legal basis.
In the event that the processing of personal data is necessary to protect a legitimate interest of our company or a third party and your interests, fundamental rights and freedoms do not override the first-mentioned interest, Article 6 (1) lit. f GDPR is the legal basis for the processing.
If cookies or similar technologies are set during data processing, the storage of these or the access to information in the end device of a user (e.g. device fingerprinting) is carried out in accordance with § 25 para. 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR.
If the use of cookies is absolutely necessary, this is done on the basis of Section 25 (2) no. 2 TDDDG.
Disclosure of personal data
If, in the course of our processing, we transfer your personal data to other bodies or disclose it to them, this will only be done on the basis of one of the aforementioned legal grounds. Recipients may include, for example, IT, hosting, CRM and communication service providers that we engage as processors. In such cases where we are required to do so by law or by court order, we must disclose your data to bodies entitled to receive such information.
If external service providers support us in the processing of your data (e.g. data analysis, newsletter dispatch), this is done within the framework of commissioned processing pursuant to Art. 28 GDPR.
Data transfer to third countries
Data is only transferred to third countries (outside the European Union or the European Economic Area) if this is in accordance with the legal requirements. Subject to express consent or contractually or legally required transfer, we process or allow the data to be processed only in third countries with a recognized level of data protection (e.g. adequacy decision of the European Commission pursuant to Art. 45 para. 1 p. 3 GDPR for the “EU-US Data Privacy Framework” https://commission.europa.eu/document/fa09cbad-dd7d-4684-ae60-be03fcb0fddf_en).
Data storage
As soon as the respective purpose for storage ceases to apply, we will delete or block your personal data. Furthermore, your personal data will only be stored if special legal retention periods (in particular commercial and tax retention obligations) at national or European level prevent deletion.
Definitions
Our privacy policy is based on the terms used in the GDPR. To ensure that our privacy policy is easy to read and understand, we would first like to explain the most important terms.
Personal data
“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Processing
“Processing” means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organization, filing, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Responsible
“Controller” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data.
Pseudonymization
“Pseudonymization” means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data are not attributed to an identified or identifiable natural person.
Processor
“Processor” means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the Controller.
Receiver
“Recipient” means a natural or legal person, public authority, agency or other body to whom personal data are disclosed, whether or not a third party.
Third
“Third party” means a natural or legal person, public authority, agency or other body, other than the data subject, the controller, the processor and the persons authorized to process the personal data under the direct responsibility of the controller or the processor.
Consent
“Consent” means any freely given indication of the data subject's wishes in an informed and unambiguous manner for the specific case, in the form of a statement or any other unambiguous affirmative act.
Profiling
“Profiling” means any type of automated processing of personal data that consists of using such personal data to evaluate certain personal aspects relating to a natural person.
Data subject rights
The processing of personal data gives you, as the natural person concerned, rights that you can exercise against us at any time. These are:
Right to revoke a declaration of consent under data protection law pursuant to Art. 7 (3) GDPR
Right to information about your personal data stored by us in accordance with Art. 15 GDPR
Right to rectification of inaccurate data or completion of incomplete data pursuant to Art. 16 GDPR
Right to have your data stored by us deleted in accordance with Art. 17 GDPR
Right to restrict the processing of your data according to Art. 18 GDPR
Right to data portability according to Art. 20 GDPR
Right of objection according to Art. 21 GDPR
Automated decisions in individual cases including profiling pursuant to Art. 22 GDPR
Right to information
You have the right to find out from us whether and – if so – which personal data we process from you as well as to request copies of your personal data from us. Please note that your right to information may be restricted under certain circumstances in accordance with the statutory provisions.
Right to rectification
If the information concerning you is not (or no longer) accurate, you have the right to request the immediate correction of inaccurate personal data concerning you and, where applicable, the completion of incomplete personal data.
Right to deletion
In accordance with the statutory provisions, you have the right to demand that data relating to you be deleted without delay, e.g. if the data is no longer required for the purposes pursued and the statutory storage and archiving regulations do not prevent deletion.
Right to restrict processing
Within the framework of the requirements of Art. 18 GDPR, you have the right to request a restriction of the processing of the data concerning you, e.g. if you have objected to the processing, for the duration of the examination whether the objection can be granted.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format.
Right to revoke a declaration of consent under data protection law
If the processing of your personal data is based on consent given to us, you have the right to revoke this consent at any time. The revocation does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Please send your revocation informally to ADTELLIGENCE GmbH, Elisabethstraße 1, 68165 Mannheim, e-mail: info@acceleraid.ai.
Right to object to processing
Under the conditions of Art. 21 (1) GDPR, you may object to data processing based on Art. 6 (1) e or f GDPR for reasons arising from your particular situation. This also applies to profiling based on these provisions. If you exercise your right to object, we will no longer process your personal data concerned, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
Please send your objection informally to ADTELLIGENCE GmbH, Elisabethstraße 1, 68165 Mannheim, e-mail: info@acceleraid.ai.
Right of appeal to the data protection authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful. The address of the supervisory authority responsible for our company is:
The State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg
Lautenschlagerstrasse 20
70173 Stuttgart
Phone: +49 711 61 55 41 0
E-mail: poststelle@lfdi.bwl.de
Automatic decision in individual cases including profiling
You have the right not to be subject to a decision based solely on automated processing – including profiling – which produces legal effects concerning you or similarly significantly affects you.
Use of online services
In the following, we inform you when and in what context data is processed when you use our online services.
Collection of personal data when visiting our website
When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. Processing is based on our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). The following data is processed:
IP address
Date and time of the request
Time zone difference from Greenwich Mean Time (GMT)
Content of the request (concrete page)
Access status / HTTP status code
Data volume transferred in each case
Website from which the request comes
Browser
Operating system and its interface
This data is temporarily stored in the log files of our system. A storage beyond this is possible, but in this case the IP addresses are partially deleted or alienated, so that an assignment of the calling client is no longer possible.
Cookies use
In addition to the aforementioned data, cookies are stored on your terminal device (e.g. PC, laptop, smartphone) when you use our website. Cookies are small text files that are stored on your terminal device assigned to the browser you are using and through which the body that sets the cookie (in this case by us) receives certain information.
This website uses the following types of cookies, the scope and functionality of which are explained below:
Transient cookies
Transient cookies are automatically deleted when you close the browser. These include in particular the session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session.
Persistent cookies
Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time.
We use cookies on our website, which are generated by us as the website operator and are necessary for the full functionality and presentation of our offer on the website. The legal basis for storing information in the form of cookies on your terminal equipment or accessing this information in your terminal equipment is Section 25 (2) No. 2 TDDDG. We use these cookies for legitimate interest according to Art. 6 para. 1 lit. f GDPR to ensure our online offer.
In addition to the cookies set by us as the responsible party, cookies offered by other providers are also used. We process these cookies on the basis of your consent in accordance with Art. 6 Para. 1 lit. a and § 25 Para. 1 TDDDG.
Cookie settings in web browsers
Web browsers can be set to notify you when cookies are set or to generally or partially reject or disable cookies. By deactivating and deleting all cookies, you can also revoke any consent you have previously given.
You can learn about these options of the most commonly used browsers via the following links:
Mozilla Firefox: support.mozilla.org
Google Chrome: support.google.com
Apple Safari: support.apple.com
Microsoft Edge: support.microsoft.com
Opera: help.opera.com
SSL / TLS encryption
Our website uses TLS encryption (formerly SSL) for security and to protect the transmission of confidential content. Enquiries that you send to us are thus protected by transport encryption.
External hosting
We host our website, including the blog (blog.acceleraid.ai), externally. The personal data collected on this website is stored on the servers of the hoster.
We use the following hosting provider: Framer B.V., Rozengracht 207B, 1016 LZ Amsterdam, Netherlands. When pages are accessed, Framer processes the access data listed above and creates cookieless audience statistics. For further information on data protection, please visit https://www.framer.com/legal/privacy-statement/
The legal basis is our legitimate interest in providing the website securely and reliably (Art. 6(1)(f) GDPR). Framer uses sub-processors, including Amazon Web Services (AWS); the current list is available at trust.framer.com. A transfer of data to the USA cannot be ruled out; any such transfer is based on the EU-U.S. Data Privacy Framework or on EU Standard Contractual Clauses. Access data is only stored for as long as necessary for security and stability and is then deleted or anonymised.
We have also concluded a contract for commissioned data processing (AV).
Contact
Contact form
When you contact us via a contact form, the data you provide (your e-mail address, your name if applicable, your telephone number, the content of your message) will be stored by us in order to fulfill your request. Processing is based on Art. 6(1)(b) GDPR where your enquiry relates to a contract or to pre-contractual measures, and otherwise on our legitimate interest in handling your enquiry (Art. 6(1)(f) GDPR). We delete the data once your enquiry has been fully processed, unless statutory retention obligations apply. Our forms are web forms provided by Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia. Pipedrive processes the form data on our behalf on servers in the EU.
Enquiries by email or telephone
If you contact us by email or telephone, the personal data you provide (your e-mail address, your name if applicable, your telephone number, the content of your message) will be stored by us in order to process your request. We do not pass on this data without your consent.
Data processing is based on Art. 6 (1) lit. b GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, we process your data on the basis of your consent pursuant to Art. 6 (1) a GDPR and/or on the basis of our legitimate interests pursuant to Art. 6 (1) f GDPR.
Chat enquiries
AI assistant
Our website offers an AI assistant (chat window) provided by Adtelligence GmbH. When you use the assistant, we process your input and technical connection data (e.g. IP address) in order to answer your questions.
To generate responses, we use language models from OpenAI and Google. Both providers act as our processors on the basis of enterprise agreements. Your input is not used to train these models. A transfer of data to the USA cannot be ruled out; any such transfer is based on the EU-U.S. Data Privacy Framework or on EU Standard Contractual Clauses.
The legal basis is our legitimate interest in responding promptly to enquiries about our services (Art. 6(1)(f) GDPR) or Art. 6(1)(b) GDPR where your enquiry is aimed at concluding a contract.
Chat histories are anonymised after 30 days. You may request earlier deletion at any time at datenschutz@acceleraid.ai.
Please do not enter any sensitive personal data in the chat. You do not need to provide your name.
Data processing for advertising purposes
Direct mail
If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing in accordance with Article 21 (2) of the GDPR.
Information for existing customers by email
If we have received your email address in connection with a contract for our services, we use it in accordance with Section 7(3) of the German Act against Unfair Competition (UWG) to inform you about our own similar services. The legal basis is our legitimate interest in direct marketing (Art. 6(1)(f) GDPR). You may object to this use at any time without incurring any costs other than transmission costs at basic rates – via the link in every email or by writing to info@acceleraid.ai.
Newsletter
With your consent, you can subscribe to our newsletter, in which we inform you about our products and services, industry topics, events and webinars.
For the registration to our newsletter we use the so-called double opt-in procedure. This means that after your registration, we will send you an e-mail to the e-mail address you provided, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month.
The only mandatory data for sending the newsletter is your e-mail address. The legal basis is Art. 6 (1) lit. a GDPR (consent).
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. The revocation can be declared by clicking on the link (unsubscribe) provided in every newsletter e-mail.
We send our newsletter via Pipedrive Campaigns, provided by Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia, acting as our processor.
Our newsletters contain technical features that allow us to see whether a newsletter has been opened and which links have been clicked. We use this analysis to improve our content. It is covered by your consent and ends when you withdraw it.
Analysis tools
Google Analytics 4 (GA4)
This website uses Google Analytics 4, a web analytics service of Google LLC. The responsible body for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Analytics uses cookies that enable an analysis of your use of our websites. The information collected by the cookies about your use of this website is generally transferred to a Google server in the USA and stored there.
Google Analytics 4 does not store IP addresses. During your website visit, your user behavior is recorded in the form of “events”. Events can be:
Page views, first visit to the website, start of session
Visited web pages, your “click path”, interaction with the website
Scrolls (whenever a user scrolls to the end of a page (90%))
Clicks on external links, internal search queries, interaction with videos
File downloads, advertisements seen / clicked, language setting
Also recorded:
Your approximate location (region), date and time of visit
Technical information about your browser and the end devices you use (e.g. language setting, screen resolution)
The referrer URL (via which website/advertising medium you came to this website)
Storage period: The data is deleted after 2 months. The “_ga” cookie has a lifetime of up to 2 years.
Legal basis: The legal basis for this data processing is your consent pursuant to Art. 6 para.1 p.1 lit. a GDPR and § 25 para. 1 p.1 TDDDG. You can revoke your consent at any time with effect for the future by changing the cookie settings.
Third country transfer: The company is certified in accordance with the “EU-US Data Privacy Framework” (DPF). For more information, please visit https://www.dataprivacyframework.gov
Information on concluding EU standard contractual clauses can be found at https://privacy.google.com/businesses/controllerterms/mccs/.
For more information on Google Analytics' terms of use and Google's privacy policy, please visit https://marketingplatform.google.com/about/analytics/terms/de/ and https://policies.google.com/?hl=de.
Framer Analytics
To evaluate website usage statistically, we use the analytics function of our hosting provider Framer B.V., Amsterdam. When a page is accessed, technical data (e.g. page visited, referrer, device type, browser, approximate region) is transmitted to Framer (events.framer.com). No cookies are set. IP address and user agent are hashed with a salt that changes daily; we only receive aggregated data. The legal basis is our legitimate interest in analysing and improving our website (Art. 6(1)(f) GDPR). Framer processes the data as our processor.
Marketing Tools
Google Tag Manager
This website uses “Google Tag Manager”, a service of Google Ireland Limited. Google Tag Manager makes it possible to manage website tags via one interface. The Google Tag Manager tool, which implements the tags, is a cookieless domain. However, Google Tag Manager records your IP address, which may also be transferred to Google’s parent company in the USA.
The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR (consent) and § 25 para. 1 TDDDG.
The company is certified according to the “EU-US Data Privacy Framework” (DPF). For more information, please visit https://www.dataprivacyframework.gov
FAQ Google Tag Manager: https://www.google.com/intl/de/tagmanager/faq.html. Terms of use Google Tag Manager: https://www.google.com/intl/de/tagmanager/use-policy.html
Pipedrive Web Visitors (Leadfeeder)
With your consent to the “Marketing” category, we use the “Web Visitors” feature of our CRM provider Pipedrive OÜ, Mustamäe tee 3a, 10615 Tallinn, Estonia, acting as our processor. The feature is technically provided by Leadfeeder (Dealfront Finland Oy, Finland, as a sub-processor of Pipedrive). Based on the IP address, Leadfeeder identifies which companies visit our website and provides us with this information for our B2B sales work. For this purpose, the cookie _lfa and a localStorage entry are set (lifetime 1 year).
The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 (1) TDDDG. You can revoke your consent at any time via the cookie settings.
LinkedIn Insight Tag
With your consent to the Marketing category, we use the LinkedIn Insight Tag of LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It measures the success of our LinkedIn campaigns and enables retargeting, i.e. showing our ads on LinkedIn to visitors of our website. Cookies are set on linkedin.com for this purpose (lifetime 1 day to 1 year). LinkedIn removes directly identifying data within 7 days and deletes the pseudonymised data within 180 days.
The legal basis is your consent pursuant to Art. 6 para. 1 lit. a GDPR and Section 25 (1) TDDDG. Data may be transferred to LinkedIn Corporation in the USA; LinkedIn is certified under the EU-US Data Privacy Framework. Further information: https://www.linkedin.com/legal/privacy-policy
Online video conferencing tools
Microsoft Teams
We use the tool “Microsoft Teams” to conduct telephone and video conferences, online meetings, video consulting, digital coaching and/or webinars (hereinafter: “Online Meetings”). The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.
Data categories
When using Microsoft Teams, various types of data are processed. The following personal data may in principle be the subject of processing:
User details: first name, last name, phone (optional), e-mail address, password (if “single sign-on” is not used), profile picture (optional), department (optional).
Meeting metadata: Topic, description (optional), date, time, duration, attendee IP addresses, device/hardware information.
For recordings (optional): MP4 file of all video, audio and presentation recordings, M4A file of all audio recordings, text file of online meeting chat.
Data storage
A recording of the “online meetings” does not take place as a rule. If we want to record “Online Meetings”, we will notify you in advance and obtain – where necessary – your consent.
Legal bases of data processing
Where personal data of employees of Adtelligence GmbH is processed, the legal basis is Art. 6(1)(b) GDPR.
Otherwise, the legal basis for processing data when conducting online meetings is Art. 6(1)(b) GDPR where the meetings are held in the context of contractual relationships or in preparation of a contract (e.g. product demos). For webinars and other meetings, the legal basis is our legitimate interest in efficient communication (Art. 6(1)(f) GDPR).
Data processing outside the European Union
We use Microsoft Teams within the EU Data Boundary. Content data is stored in data centres within the EU. In individual cases, e.g. for support purposes, access from the USA cannot be ruled out; any such access is based on the EU-U.S. Data Privacy Framework (https://www.dataprivacyframework.gov) and on EU Standard Contractual Clauses.
For more information about Microsoft Teams privacy: https://privacy.microsoft.com/de-de/privacystatement.
Social media presences
Social media information
We operate publicly accessible profiles in social networks to draw attention to our services and products. There we would like to get in touch with you as a visitor and user of these pages as well as our website.
User data may be processed outside the European Union. This may result in risks for you as a user and may make it more difficult to enforce your rights.
If you visit one of our social media sites (e.g. Facebook), we, ADTELLIGENCE GmbH, Elisabethstraße 1, 68165 Mannheim, are jointly responsible with the operator of the respective social media platform within the meaning of the GDPR and other data protection regulations.
Data processing on social media platforms
We have no influence on the processing of personal data by the respective platform operator. For example, social networks such as Facebook use your data for market research and advertising purposes.
Legal basis
The operation of these company pages, including the processing of users' personal data, is based on our legitimate interests in a timely and supportive information and interaction opportunity for and with our users and visitors pursuant to Art. 6 para. 1 lit. f. GDPR.
Storage duration
The data collected directly by us via the social media sites is deleted from our systems as soon as the purpose for storing it no longer applies, you request us to delete it, or you revoke your consent to its storage.
Assertion of rights
In principle, you can assert your rights (information, correction, deletion, restriction of processing, data portability and complaint) both against us and against the operator of the respective portal (e.g. Facebook).
Despite joint responsibility, we would like to point out that we do not have complete access to your personal data. For this reason, you should contact the providers of the social media platforms directly with requests for information and the assertion of data subject rights. Should you require assistance in this regard, please contact us: ADTELLIGENCE GmbH, Elisabethstraße 1, 68165 Mannheim, e-mail: info@acceleraid.ai.
Our social networks
Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Agreement on joint processing of personal data on Facebook pages: https://www.facebook.com/legal/terms/page_controller_addendum
Certification under the “EU-US Data Privacy Framework” (DPF) at https://www.dataprivacyframework.gov.
Privacy policy: https://www.facebook.com/about/privacy. Possibility of objection (opt-out): https://www.facebook.com/settings?tab=ads
Provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Joint controller agreement (Insights): https://www.facebook.com/legal/terms/page_controller_addendum
Privacy policy / possibility of objection (opt-out): https://instagram.com/about/legal/privacy
Certification under the “EU-US Data Privacy Framework” (DPF) at https://www.dataprivacyframework.gov.
Provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Joint controller agreement (Page Insights): https://legal.linkedin.com/pages-joint-controller-addendum
Privacy policy: https://www.linkedin.com/legal/privacy-policy. Possibility of objection (opt-out): https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
X (Twitter)
Provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Privacy policy: https://x.com/en/privacy. Possibility of objection (opt-out): https://x.com/settings/privacy_and_safety
Data protection for applications
We offer you the opportunity to apply to us by e-mail, by post, via the online application form or via our career portal.
Scope and purpose of data collection
For us to consider you in the application process for a specific position, customary and meaningful application documents are required.
The personal data you provide and send to us as part of your application usually includes: cover letter, resume with the usual personal information (first and last name, contact details, professional background) as well as supporting documents and certificates.
As a matter of principle, we only use your application documents to decide whether to fill the position for which you have expressly applied. The legal basis is Art. 6(1)(b) GDPR.
Categories of recipients of personal data
A transfer of your personal data to third parties will only take place for the purposes listed below. We will only pass on your personal data received as part of the application process to third parties if:
you have expressly given your consent pursuant to Art. 6(1)(a) GDPR,
the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 para. 1 lit. f GDPR,
in the event that there is a legal obligation for the disclosure pursuant to Art. 6 Para. 1 lit. c GDPR as well as
this is permitted by law and necessary pursuant to Art. 6(1)(b) GDPR for establishing or performing contractual relationships with you.
A transfer of your data to third countries outside the EU or the European Economic Area is not intended.
Data retention period
If we are unable to make you a job offer, you reject a job offer, withdraw your application, revoke your consent to data processing or request us to delete the data, the data you have provided will be stored for a maximum of 6 months after completion of the application process in order to be able to trace the details of the application process in the event of discrepancies (Art. 6 (1) f GDPR).
You have the option of consenting to the use of your application documents to fill other positions as well. If you choose this option, we will include you in our talent pool in accordance with Art. 6 Para. 1 lit. a GDPR for a maximum of 12 months until revoked.
Automated decision making
There is no automated decision in individual cases within the meaning of Art. 22 GDPR. This means that we evaluate your application personally and the decision about your application is not based exclusively on automated processing.
Stationary business premises
Security cameras
We use video surveillance in our business premises to protect our property and to prevent and investigate criminal offences and vandalism. The monitored areas are marked by signs. Sound recording does not take place. The legal basis is Art. 6 para. 1 lit. f GDPR. We generally delete the resulting footage from the security cameras 72 hours after recording.
Use guest WLAN
We provide you with access to the Internet in our business premises in the form of WLAN access (“Guest WLAN”) for use free of charge.
Processing purposes and legal basis
The data processing is carried out for the purpose of the technical provision of a guest WLAN and to ensure smooth use by our guests. The processing is necessary for the fulfillment of a contract (provision of Internet access via the guest WLAN) pursuant to Art. 6 (1) lit. b DS-GVO.
Data categories and data origin
When using our guest WLAN, the Mac address and the host name of your end device are stored in this context. In addition, each device is assigned its own IP address.
Duration of storage
We delete the data regularly, but at the latest after a maximum of 24 hours after activation.
Business relationships
The following information shows you how we handle your data when you contact us, when contractual negotiations take place with us and/or when contractual agreements exist with us.
Processing purposes and legal basis
The data processing is carried out for the purpose of contract management. The processing of your data is necessary according to Art. 6 para. 1 lit. b GDPR for the initiation and fulfillment of contracts.
Furthermore, the processing of your personal data may be necessary on the basis of Art. 6 (1) lit. f GDPR to protect our legitimate interests. Our legitimate interests consist in inviting you to events, asserting legal claims and avoiding legal disadvantages.
Data category and origin
We process the following categories of data:
Master and contact data: salutation, name, company, department and position, business contact details, communication, contract and billing data.
We receive this data from you or your company or from publicly available sources such as company websites or professional networks (e.g. LinkedIn, see “Contact data from professional networks”).
Contact data from professional networks
In order to initiate business relationships, we transfer business contact data from publicly accessible profiles on professional networks (in particular LinkedIn) into our CRM system. For this purpose, we use Surfe (operated by Growster SAS, 17 allée des Gassets, 77700 Serris, France). For the synchronisation, Surfe acts as our processor. Where necessary, Surfe supplements this data with business email addresses and telephone numbers. This information originates from publicly accessible sources such as company websites and from data providers that Surfe works with.
We process name, company, position, business contact details and the address of the public profile. The legal basis is our legitimate interest in initiating business relationships (Art. 6(1)(f) GDPR). A transfer to third countries cannot be ruled out; any such transfer is based on EU Standard Contractual Clauses. We store the data for as long as there is an interest in a business relationship. You may object to this processing at any time (Art. 21 GDPR); we will then delete your data. To ensure that your objection is permanently respected, we add your email address to a suppression list.
Recipients
We engage service providers as processors, in particular for CRM (Pipedrive), contact data management (Surfe), email and communication (Microsoft 365) and hosting. Beyond this, we only transfer data where we are legally obliged to do so, e.g. to tax authorities.
Duration of storage
The data stored about you will be deleted after fulfillment of the contract, provided that there are no further legal obligations to retain data. Statutory retention periods apply: 10 years for books and annual financial statements, 8 years for accounting vouchers and 6 years for commercial and business correspondence (Section 257 German Commercial Code (HGB), Section 147 German Fiscal Code (AO)).
Right of objection
Where we process your data on the basis of legitimate interests, you may object pursuant to Art. 21 GDPR. You may object to the use of your data for direct marketing at any time.
Provision of data
The provision of personal data is required by contract or necessary for the conclusion of a contract. If the required personal data is not provided, we would not be able to enter into a business relationship with you.