top of page

Privacy Policy

4. Purpose of processing

Below you will find a list of the purposes of processing:

  • Provision of the online offering, its contents and functions;

  • Provision of contractual services, service and customer care;

  • Answering contact requests and communicating with users;

  • marketing, advertising and market research;

  • Safety measures.

5. Legal basis for data processing

In accordance with Art. 13 GDPR, we will inform you of the legal basis for our data processing. If the legal basis is not stated in the data protection declaration, the following applies: The legal basis for obtaining consent is Article 6 Paragraph 1 Sentence 1 Letter a) and Article 7 GDPR, the legal basis for processing to fulfill our services and Carrying out contractual measures and answering inquiries is Article 6 Paragraph 1 Sentence 1 Letter b) GDPR, the legal basis for processing to fulfill our legal obligations is Article 6 Paragraph 1 Clause 1 Letter c) GDPR, and The legal basis for processing to protect our legitimate interests is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. In the event that the vital interests of the data subject or another natural person require the processing of personal data, Article 6 Paragraph 1 Sentence 1 Letter d) GDPR serves as the legal basis.

6. Collaboration with processors and third parties

6.1. If, as part of our processing, we disclose data to other people and companies (processors or third parties), transfer it to them or otherwise grant them access to the data, this only takes place on the basis of legal permission (e.g. if the data is transferred to third parties, as to payment service providers, in accordance with Art. 6 Para. 1 Sentence 1 lit. b) GDPR is necessary for the fulfillment of the contract), you have consented, a legal obligation stipulates this or on the basis of our legitimate interests (e.g. when using agents, web hosts, Etc.).

6.2. If we commission third parties to process data on the basis of a so-called “order processing contract”, this is done on the basis of Art. 28 GDPR.

7. Transfers to third countries

If we process data in a third country (i.e. outside the European Union (EU) or the European Economic Area (EEA)) or if this occurs as part of the use of third-party services or disclosure or transmission of data to third parties, this will only occur if it is done to fulfill our (pre-)contractual obligations, based on your consent (Art. 49 Para. 1a GDPR), on the basis of a legal obligation or on the basis of our legitimate interests. Subject to legal or contractual permissions, we only process or have the data processed in a third country if the special requirements of Art. 44 ff. GDPR are met. This means that the processing is carried out, for example, on the basis of special guarantees, such as the officially recognized determination of a data protection level that corresponds to the EU or compliance with officially recognized special contractual obligations (so-called “standard contractual clauses”). The consent according to Art. 49 Paragraph 1 a) GDPR with regard to processing by Google, Facebook, Automattic in the USA when accessing our website is as follows:

"We use cookies in accordance with our data protection declaration linked below to process device information and personal data. This is used to integrate content, external services and elements from third parties, statistical analysis/measurement, personalized advertising and the integration of social media. Depending on the function, data is used passed on to and processed by third parties, including in the USA, with the risk of secret access by US authorities and use for surveillance purposes, possibly without any legal remedy. By clicking the "Accept all" button, you agree to the above use. 
This Consent is voluntary and can be revoked at any time using the "Cookie settings" link at the bottom of the footer of the website. When you click the "Reject all" button, only essential cookies that are necessary for the operation of the website are set. Links at the bottom via " "Advanced Settings" allows you to select in detail which cookies you want to allow."

8. Cookies and right to object to direct advertising

8.1. We use so-called cookies when you visit our website. Cookies are small text files that your Internet browser places and saves on your computer. When you visit our website again, these cookies provide information to automatically recognize you. Cookies also include so-called “user IDs”, where user information is stored using pseudonymized profiles. When you access our website, we will inform you by referring to our data protection declaration about the use of cookies for the aforementioned purposes and how you can object to them or prevent them from being stored (“opt-out”).

A distinction is made between the following types of cookies:

• Necessary, essential cookies: Essential cookies are cookies that are absolutely necessary for the operation of the website in order to save certain functions of the website such as logins, shopping cart or user input, for example regarding the language of the website.
• Session cookies: Session cookies are required to recognize multiple uses of an offer by the same user (e.g. if you have logged in to determine your login status). When you visit our site again, these cookies provide information to automatically recognize you. The information obtained in this way is used to optimize our offers and to give you easier access to our site. When you close the browser or log out, the session cookies are deleted.
• Persistent cookies: These cookies remain stored even after the browser is closed. They are used to store the login, measure reach and for marketing purposes. These are automatically deleted after a specified period of time, which may differ depending on the cookie. You can delete cookies at any time in your browser's security settings.
• Third-party cookies (third-party cookies, especially from advertisers): According to your wishes, you can configure your browser settings and e.g. B. Decline to accept third-party cookies or all cookies. However, we would like to point out that you may then not be able to use all of the functions of this website. Read more about these cookies in the respective data protection declarations of the third-party providers.

8.2. Data categories: user data, cookies, user ID (including the pages visited, device information, access times and IP addresses).

8.3. Purposes of processing: The information obtained in this way serves the purpose of technically and economically optimizing our web offerings and enabling you to access our website more easily and securely.

8.4. Legal basis: If we process your personal data using cookies based on your consent (“opt-in”), then Art. 6 Paragraph 1 Sentence 1 Letter a) GDPR is the legal basis. Otherwise, we have a legitimate interest in the effective functionality, improvement and economic operation of the website, so that in this case Art. 6 Paragraph 1 Sentence 1 Letter f) GDPR is the legal basis. The legal basis is also Article 6 Paragraph 1 Sentence 1 Letter b) GDPR if the cookies are set to initiate a contract, for example when placing orders.

8.5. The consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR when accessing our website is as follows:

"We and these third parties process your personal data and store or access information on your device (e.g. cookies, personal identifiers or IP addresses) in accordance with the data protection declaration linked below. This serves to integrate content, external services and elements from third parties , statistical analysis/measurement, personalized and interest-based advertising as well as the integration of social media. Depending on the function, usage and behavioral data are sent to third parties to create personal advertising profiles, including in the USA, with the risk of secret access by US authorities and the Use for monitoring purposes, possibly without any legal recourse, and processed by them. By clicking the "Accept all" button, you agree to the above use."

8.6. Storage period/deletion: The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended. Cookies are otherwise stored on your computer and transmitted from it to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

Here you can find information about deleting cookies by browser:

Chrome: https://support.google.com/chrome/answer/95647

Safari: https://support.apple.com/de-at/guide/safari/sfri11471/mac

Firefox: https://support.mozilla.org/de/kb/cookies-und-website-daten-in-firefox-loschen

Internet Explorer: https://support.microsoft.com/de-at/help/17442/windows-internet-explorer-delete-manage-cookies

Microsoft Edge: https://support.microsoft.com/de-at/help/4027947/windows-delete-cookies

8.7. Objection and “opt-out”: You can generally prevent cookies from being stored on your hard drive, regardless of consent or legal permission, by selecting “do not accept cookies” in your browser settings. However, this can result in a functional restriction of our offers. You can opt out of the use of third-party cookies for advertising purposes via a so-called “opt-out” via this American website ( https://optout.aboutads.info ) or this European website ( http://www.youronlinechoices.com/de /preference management/) . You can also revoke your consent at any time using the “Cookie Settings” link at the bottom of the footer of the respective website.

9. Deletion of data

9.1. The data we process will be deleted or its processing will be restricted in accordance with Articles 17 and 18 of the GDPR. Unless expressly stated in this data protection declaration, the data stored by us will be deleted as soon as they are no longer required for their intended purpose and the deletion does not conflict with any legal retention obligations. Unless the data is deleted because it is required for other legally permissible purposes, its processing will be restricted. This means that the data is blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax reasons or to data whose further retention is required for evidentiary purposes.

9.2. According to legal requirements, storage takes place in particular for 6 years in accordance with Section 257 Paragraph 1 HGB (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting documents, etc.) and for 10 years in accordance with Section 147 Paragraph 1 AO (books, records, management reports , accounting documents, commercial and business letters, documents relevant to taxation, etc.).

10. Provision of contractual services (web shops)

10.1. We process inventory data (e.g. company, title/academic degree, names and addresses as well as contact details of users, email), contract data (e.g. services used, names of contact persons) and payment data (e.g. bank details, payment history) in order to fulfill our contractual obligations (Knowing who the contractual partner is; justification, content and execution of the contract; checking the plausibility of the data) and services (e.g. contacting customer service) in accordance with Article 6 Paragraph 1 Sentence 1 Letter b) GDPR. The entries marked as mandatory in online forms are required for the conclusion of the contract.

10.2. In principle, this data will not be passed on to third parties unless it is necessary to pursue our claims (e.g. handing it over to a lawyer for debt collection) or there is a legal obligation to do so in accordance with Article 6 Paragraph 1 Sentence 1 Letter c) GDPR.

10.3. We can also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information.

10.4. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. This is the case for inventory and contract data if the data is no longer required for the execution of the contract and claims can no longer be asserted under the contract because they have expired (standard limitation period: three years). Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of ten years. However, if the contract is terminated after three years, we will restrict processing, meaning your data will only be used to comply with legal obligations. Information in the user account remains until it is deleted.

10.5. Obligation of confidentiality of the contractual partners when providing AI and automation services

10.5.1. The contractual partners undertake to keep all exchanged information, in particular economic information such as customer-related data, individual work results, price and financial data, secret from third parties and to take all necessary measures to prevent third parties from becoming aware of it and using it. They also require their respective employees to do this.

10.5.2. The contractual partners agree that the information will only be provided for the purpose of collaboration. The exchanged information may only be passed on to third parties if an agreement corresponding to this confidentiality obligation has been concluded with these third parties and their knowledge of the information is necessary for the execution of the contract.

10.5.3. The obligation of confidentiality and the prohibition of use do not apply to information that is obvious because it:

  • are generally known,

  • must be made accessible to authorities due to mandatory regulations,

  • have been released in writing for publication by the transferring contractual partner,

  • were already legally known and available to the recipient from their own development work or from a third party at the time of the information exchange.

The burden of proof regarding the obviousness of information for one or more of the aforementioned reasons lies with the user of this information. If secret information becomes lawfully disclosed, the confidentiality of this information expires.

10.5.4. The contractual partners will be informed of the criminal consequences (in particular in accordance with Section 203 of the Criminal Code) of a breach of duty of confidentiality.

11. Use of the blog functions / comments

11.1. In the future, you will be able to make public comments in our blog, where we publish various articles on topics on our website. Your comment will be published with your specified username in the post. We recommend using a pseudonym instead of your real name. Providing a username and email address is required; all other information is voluntary.

11.2. If you leave a comment, we will continue to store your IP address, which we will delete after 70 days. The storage is necessary for us to be able to defend ourselves against liability claims in the event of possible publication of illegal content. We need your email address in order to contact you if a third party should complain that your comment is illegal.

11.3. The legal basis is Article 6 Paragraph 1 Sentence 1 Letters b) and f) GDPR.

11.4. Comments are not checked before publication. We reserve the right to delete comments if they are criticized by third parties as being unlawful. In principle, this data will not be passed on to third parties unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 Paragraph 1 Sentence 1 Letter c) GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected or to carry out the contract because the contract has been terminated.

12. Registration / email newsletter or online services

12.1. On our website we offer users the opportunity to register (user account) by providing personal data (e.g. company, title/academic degree, names and addresses as well as contact details of users, email). The data is entered into an input mask and transmitted to us and stored. A transfer of data to third parties does not take place. At the time of registration, the following data is also stored: the user's IP address, date and time of registration. We use the so-called double opt-in procedure for registration, i.e. your registration is only complete if you have previously confirmed your registration in a confirmation email sent to you for this purpose by clicking on the link contained therein. sent a fax with the confirmation. If you do not confirm this within 30 days, your registration will automatically be deleted from our database. Providing the aforementioned data is mandatory; you can provide any further information voluntarily by using our portal.

12.2. Registration of the user is necessary to fulfill a contract with the user (determining the identity of the contractual partner, data for contacting us) or to carry out pre-contractual measures. The legal basis for processing the data when registering is to fulfill a contract to which the user is a party or to carry out pre-contractual measures Art. 6 Paragraph 1 Sentence 1 Letter b) GDPR.

12.3. If necessary, we analyze using information from the service provider maxmind inc. 14 Spring Street, 3rd Floor, Waltham, MA 02451, USA ( https://www.maxmind.com/de/privacy_policy ) Your IP in terms of origin (GeoIP) and whether it is a proxy (Proxyscore). The circumstance and result of our request will be stored in your user account for the duration of the contractual relationship. The storage is based on our legitimate interests, as well as the user's protection against misuse/fraud and other unauthorized use. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR.

12.4. As a user, you have the opportunity to change the data stored about you at any time. If the data is necessary to fulfill a contract or to carry out pre-contractual measures, early deletion of the data is only possible unless contractual or legal obligations prevent deletion. In this case, the regulations for the provision of contractual services apply under No. 10.

13. Online payment providers

13.1. When paying via “Paypal”, billing is carried out via PayPal (Europe) S.à rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg, Web: paypal.de, https://www.paypal.com/ de/webapps/mpp/ua/privacy-full ., by Visa, https://www.visa.de/datenschutz , Mastercard, https://www.mastercard.de/de-de/datenschutz.html or American Express , https://www.americanexpress.com/de/content/privacy-policy-statement.html . Hereafter referred to as “online calculator”. The online billers collect, store and process the user's usage and billing data to determine and bill the service they use. The data entered into the online calculators will only be processed and stored by them. If the online billers cannot or only partially collect the usage fees or the online billers fail to do so due to a complaint from the user, the usage data will be passed on by the online billers to the person responsible and the user may be blocked by the person responsible . The same also applies if, for example, a credit card company reverses a user's transaction at the expense of the provider.

13.2. The legal basis is Article 6 Paragraph 1 Letter b) GDPR, as the processing is necessary for the person responsible to fulfill a contract. In addition, external online billers are used on the basis of Article 6 Paragraph 1 Sentence 1 Letter f) GDPR for the legitimate interests of the person responsible in order to be able to offer the user the most secure, simple and diverse payment options possible.

13.3. With regard to the storage period, revocation, information and data subject rights, we refer to the above data protection declarations of the online billing companies.

14. Financial accounting

14.1. As part of financial accounting and statutory archiving obligations (GoBD), we process the same data that we use as part of the provision of our contractual services in accordance with No. Process 10. The legal basis is Article 6 Paragraph 1 Sentence 1 Letters c) and f) GDPR. This affects customers, interested parties and users of our online offering. The purpose of the processing is the commercial and tax law obligation for financial accounting and archiving of data. We also have a legitimate interest in maintaining our business activities and proper office organization. The deletion of data with regard to contractual services and contractual communication corresponds to the information specified in these processing activities under No. 10.

14.2. This data will be passed on to the following third parties: to the tax office/financial auditor and tax advisor as well as to other authorities, insofar as there is a legal obligation to do so.

15. Contact via contact form / email / fax / post

15.1. When you contact us via contact form, fax, post or email, the user's details are processed for the purpose of processing the contact request.

The legal basis for processing the data, if the user has given his consent, is Article 6 Paragraph 1 Sentence 1 Letter a) GDPR. The legal basis for the processing of data transmitted in the course of sending an email, letter or fax is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. The person responsible has a legitimate interest in processing and storing the data in order to be able to answer user inquiries by email, letter or fax, to preserve evidence for liability reasons and, if necessary, to be able to fulfill his legal retention obligations for business letters. If the e-mail/post/fax contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Sentence 1 Letter b) GDPR.

When contacting us via a contact form, your declaration of consent according to Art Processing my request. You can revoke your consent at any time.”

15.2. User information can be stored in our customer relationship management system (“CRM system”) or comparable inquiry organization.

15.3. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the personal data from the input mask of the contact form and those that were sent by email, this is the case when the respective conversation with the user has ended. The conversation ends when it can be seen from the circumstances that the matter in question has been finally clarified. We permanently store inquiries from users who have a user account and refer to the registration information section for deletion. 13 or provision of contractual services No. 10. In the case of legal archiving obligations, deletion takes place after their expiry (end of the commercial law (6 years) and tax law (10 years) retention obligation).

15.4. You have the option at any time to revoke your consent to the processing of personal data in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) GDPR. If you contact us by email, you can object to the storage of your personal data at any time.

16. Contact by telephone

16.1. When contacting us by telephone, the user's telephone number is processed and temporarily stored or displayed in the RAM/cache of the telephone device/display in order to process the contact request and process it. The data is stored for liability and security reasons, to provide evidence of the call, and for economic reasons to enable a callback. In the case of unauthorized advertising calls, we block the phone numbers.

16.2. The legal basis for processing the telephone number is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. If the contact is aimed at concluding a contract, the additional legal basis for the processing is Article 6 Paragraph 1 Letter b) GDPR.

16.3. The device cache stores the calls for 30 days and gradually overwrites or deletes old data. When the device is disposed of, all data is deleted and the memory may be destroyed. Blocked telephone numbers are checked annually to determine whether blocking is necessary.

16.4. You can prevent the phone number from being displayed by calling with the phone number hidden by default.

17. Anyone who receives emails by post (B2B)

17.1. We also use postal advertising to potential customers for direct advertising. We process and store the following data: company, title/academic degree, profession, title, name, address. The mailings are sent by a letter shop in Germany with which there is an agreement for order processing in accordance with Art. 28 GDPR. Otherwise, the data will not be passed on to third parties.

17.2. The legal basis for this is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR (or before May 25, 2018: Section 28 Paragraph 3 Sentence 2 BDSG old version).

17.3. The purpose of using mailings is to acquire new B2B customers for our company. Our legitimate interest in processing personal data in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR also lies in this purpose. This is based on the following balancing of interests:

  • Recital (EC) 47 GDPR must be used for the balancing: “The processing of personal data for the purpose of direct advertising can be viewed as processing serving a legitimate interest.” In addition, EC 47 GDPR specifies “the reasonable expectations of the data subjects” with regard to the balancing of interests , which are based on their relationship with the person responsible. In order to determine the reasonable expectations of the data subject, Articles 13 and 14 GDPR must be used. In addition, according to EC 47 GDPR, it must be taken into account whether the data subject is already a customer of the controller or uses its services. Finally, the “Principles for the processing of personal data” in accordance with Art. 5 GDPR must also be used.

  • We offer services and products for small and medium-sized businesses interested in the use of artificial intelligence, IT, marketing and automation. These help our customers to acquire new customers themselves, achieve more sales with existing customers or simplify their processes. It can therefore generally be assumed that customers will find our offers useful. We are interested in advertising to new customers who are not yet existing customers. It is to be expected that new customers will also find the offers useful (“reasonable expectations of the people concerned”).

  • The interest in direct advertising is also supported by the focus on B2B customers, where the selection criteria are based on information about the company, e.g. small and medium-sized companies and not individuals. No data is collected from the customers' personal environment or from special categories in accordance with Art. 9 Para. 1 GDPR. Likewise, no information from other sources such as social networks is taken into account or so-called advertising scores are created. The lack of aggregation of selection criteria means a low intensity of intervention.

  • Companies that want to be accessible to their customers and also offer interesting offers usually make their contact information public. Therefore, our direct advertising measures are primarily used for offers to acquire customers from those affected. Entrepreneurs can therefore expect their data to be used for marketing purposes due to the publication of their contact details for contact purposes.

  • We therefore also research the addresses from publicly accessible sources/directories or company homepages. No additional data will be stored.

  • In contrast, the person concerned has little interest in not receiving direct advertising from us as a company that has not previously contracted with them. Industry-specific B2B letter advertising only has a minor impact on company processes and generally suggests that those affected are interested in it. It should also be taken into account that the people or companies affected by postal advertising can stop the advertising mail by putting a notice on the mailbox stating that they do not want to receive advertising letters, since the postmen are generally instructed to send advertising letters marked as “Dialogpost”. not to be delivered. This means that any burden on the office organization caused by those affected can easily be avoided in advance. Due to the fact that direct mail is paid, direct mail is generally smaller in number than electronic mail and is therefore less burdensome. Finally, there is a right to object at any time in accordance with Art. 21 Para. 2 GDPR, which must be expressly pointed out to those affected in accordance with Art. 21 Para. 4 GDPR. According to Art. 21 Para. 3 GDPR, personal data may no longer be processed or used for advertising purposes if there is an objection to advertising. Based on the previous considerations, the interest of the data subjects or companies in excluding data processing does not outweigh this.

 

 

17.4. The data will be deleted as soon as it is no longer necessary to achieve the purpose or the data subject objects to the processing.

17.5. Objection to advertising: You can object to the processing of your personal data for advertising purposes at any time. Your objection can be made by email, fax or post to the contact details above.

18. Competitions

18.1. In order to carry out competitions, the email address is saved for contacting us and, if you win, the address details are saved so that the prize can be sent. The address data can be passed on to a shipping service provider. The data will not be passed on to third parties in any other way.

18.2. The legal basis is Article 6 Paragraph 1 Sentence 1 Letter b) GDPR.

18.3. The data will be deleted 2 months after the winner has been determined.

19. Collection of access data and log files

19.1. Based on our legitimate interests within the meaning of Article 6 Paragraph 1 Sentence 1 Letter f) GDPR, we collect data about every access to the server on which this service is located (so-called server log files). The access data includes the name of the website accessed, file, date and time of access, amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page), IP address and the requesting provider .

19.2. Log file information is stored for security reasons (e.g. to investigate hacker attacks, misuse or fraud) for a maximum of 60 days and then deleted. Data whose further storage is necessary for evidentiary purposes is excluded from deletion until the respective incident has been finally clarified.

20. Online social media presence

20.1. We maintain profiles or fan pages on social media. When you use and access our profile in the respective network, the respective data protection information and terms of use of the respective network apply.

20.2. Data categories and description of data processing: usage data, contact data, content data, inventory data. Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on usage behavior and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data can also be stored in the usage profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them). For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.

We are jointly responsible for our fan page with Facebook, Instagram, Twitter (X) in accordance with Art. 26 GDPR. For this purpose, an agreement called “Information on Page Insights”, available at https://www.facebook.com/legal/terms/page_controller_addendum, was concluded, according to which Facebook must observe certain security measures and will also directly fulfill the rights of those affected. Above all, you can contact Facebook directly about your rights to information and deletion.

This does not affect your data subject rights, such as information, deletion, objection and complaint to the responsible supervisory authority. For more information about shared responsibility, see “Page Insights Data Information” at https://www.facebook.com/legal/terms/informationaboutpageinsightsdata. In the case of requests for information and the assertion of the rights of those affected, we would like to point out that these can also be asserted directly on Facebook. 

Since Instagram, like Facebook, belongs to the Meta Group, the group's common data protection policy is available for all services at https://privacycenter.instagram.com/policy/ , which concerns the processing of your data if you have either a Facebook profile or Instagram Visit our company's profile and use the link on our website. In addition, the standard contractual clauses for commercial use apply https://www.facebook.com/legal/commercial_terms . We expressly point out that when using these services, Twitter (X) data can also be processed outside the EU. Please also note this on Instagram https://privacycenter.instagram.com/policies/data_privacy_framework/ and on Twitter (X) https://twitter.com/de/privacy .

20.3. Purpose of processing: communication with users connected and registered on social networks; Information and advertising for our products, offers and services; Representation and image cultivation; Evaluation and analysis of the users and content of our social media presence.

20.4. Legal basis: The legal basis for the processing of personal data is our legitimate interest in the above purposes in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. If you have given us or the person responsible for the social network your consent to the processing of your personal data, the legal basis is Article 6 Paragraph 1 Sentence 1 Letter a) in conjunction with Article 7 GDPR. 

20.5. Data transmission/recipient category: Social network.

20.6. The data protection information, information options and objection options (opt-out) of the respective networks/service providers can be found here:

​

​

20. Online social media presence

20.1. We maintain profiles or fan pages on social media. When you use and access our profile in the respective network, the respective data protection information and terms of use of the respective network apply.

20.2. Data categories and description of data processing: usage data, contact data, content data, inventory data. Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on usage behavior and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data can also be stored in the usage profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them). For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.

We are jointly responsible for our fan page with Facebook, Instagram, Twitter (X) in accordance with Art. 26 GDPR. For this purpose, an agreement called “Information on Page Insights”, available at https://www.facebook.com/legal/terms/page_controller_addendum, was concluded, according to which Facebook must observe certain security measures and will also directly fulfill the rights of those affected. Above all, you can contact Facebook directly about your rights to information and deletion.

This does not affect your data subject rights, such as information, deletion, objection and complaint to the responsible supervisory authority. For more information about shared responsibility, see “Page Insights Data Information” at https://www.facebook.com/legal/terms/informationaboutpageinsightsdata. In the case of requests for information and the assertion of the rights of those affected, we would like to point out that these can also be asserted directly on Facebook. 

Since Instagram, like Facebook, belongs to the Meta Group, the group's common data protection policy is available for all services at https://privacycenter.instagram.com/policy/ , which concerns the processing of your data if you have either a Facebook profile or Instagram Visit our company's profile and use the link on our website. In addition, the standard contractual clauses for commercial use apply https://www.facebook.com/legal/commercial_terms . We expressly point out that when using these services, Twitter (X) data can also be processed outside the EU. Please also note this on Instagram https://privacycenter.instagram.com/policies/data_privacy_framework/ and on Twitter (X) https://twitter.com/de/privacy .

20.3. Purpose of processing: communication with users connected and registered on social networks; Information and advertising for our products, offers and services; Representation and image cultivation; Evaluation and analysis of the users and content of our social media presence.

20.4. Legal basis: The legal basis for the processing of personal data is our legitimate interest in the above purposes in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. If you have given us or the person responsible for the social network your consent to the processing of your personal data, the legal basis is Article 6 Paragraph 1 Sentence 1 Letter a) in conjunction with Article 7 GDPR. 

20.5. Data transmission/recipient category: Social network.

20.6. The data protection information, information options and objection options (opt-out) of the respective networks/service providers can be found here:

21. Google Analytics

21.1. Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR), we use Google Analytics, a web analysis service from Google LLC (“Google”). ) a. If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. With regard to the use of the data, there is a joint responsibility for data processing between Google and us in accordance with Article 26 GDPR. We have agreed with Google that we assume primary responsibility for processing the data in accordance with the GDPR and that we will fulfill all obligations under the GDPR with regard to the processing of the data (including Art. 12, 13 GDPR, Art. 15 to 22 GDPR and Art . 32 to 34 GDPR). We have also concluded an order processing contract with Google (Art. 28 GDPR) and, for example, deactivated all data sharing in the settings.

21.2. Google Analytics typically uses cookies. The information generated by the cookie about the user's use of the online offering is usually transmitted to a Google server in the USA and stored there. We have therefore reprogrammed the Google Analytics code so that it no longer sets cookies. We also technically prevent the creation and merging of user profiles. We also load the analytics.js file directly from our own server instead of from Google. Google Analytics does not use any “cookies” in this integration, but instead uses our own, anonymous and non-resolvable ID (“ClientId”) without personal reference, which we created and which is usually transferred to a Google server in the USA and stored there. In addition, Google Analytics cannot combine statistical data beyond the boundaries of the website with data from other websites.

21.3. Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with other services related to the use of this online offering and internet usage. 

21.4. We use Google Analytics to show the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products) based on the information they visit websites) that we transmit to Google (so-called “remarketing” or “Google Analytics audiences”). With the help of remarketing audiences, we also want to ensure that our ads match the potential interest of users and do not appear annoying.

21.5. We only use Google Analytics with IP anonymization activated. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

21.6. The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offering and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https:// tools .google.com/dlpage/gaoptout?hl=de .

21.7. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking on this link . An opt-out cookie will be set to prevent future collection of your data when you visit this website. The opt-out cookie only applies in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

21.8. Further information on data usage by Google, settings and objection options can be found on the Google websites: https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when you use websites or apps our partners"), https://policies.google.com/technologies/ads ("use of data for advertising purposes"), https://adssettings.google.com/authenticated ("manage information that Google uses to show you advertising ").

9/21 The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.

22. Chatbot Services

22.1. Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR), we use a chatbot that runs via the Voiceflow platform (www.voiceflow.com ) is hosted. Data is processed in accordance with the EU GDPR directive. Data will be transferred to Canada, Voiceflow's headquarters, but will also be transferred to other countries where Voiceflow hosts servers within the scope of legal permissibility and guidelines.

Details on data processing of personal data with Voiceflow can be found herehttps://www.voiceflow.com/gdpr

22.2 Voiceflow may transfer personal data to countries outside the European Economic Area (EEA) or to third parties located in such countries. In such cases, Voiceflow will ensure that appropriate safeguards such as standard contractual clauses or security certifications are in place to protect the data and ensure its secure transmission in accordance with the requirements of the General Data Protection Regulation (GDPR). Voiceflow is committed to protecting the privacy and rights of individuals regarding their personal information. By adhering to the principles of transparency, accountability and data protection, we strive to maintain the trust of our users and partners. This GDPR Compliance Statement will be updated as necessary to ensure ongoing compliance with changing regulations and standards. We have also agreed on so-called standard data protection clauses with Voiceflow, the purpose of which is to maintain an appropriate level of data protection.

23. Google-Re/Marketing-Services

23.1. Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR), we use the marketing and remarketing services (“Google” for short). Marketing Services”) of Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. With regard to the use of the data, there is a joint responsibility for data processing between Google and us in accordance with Art. 26 GDPR. We have agreed with Google that we assume primary responsibility for processing the data in accordance with the GDPR and that we will fulfill all obligations under the GDPR with regard to the processing of the data (including Art. 12, 13 GDPR, Art. 15 to 22 GDPR and Art . 32 to 34 GDPR). 

23.2. The Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to only show users advertisements that potentially match their interests. For example, if a user is shown ads for products that they were interested in on other websites, this is referred to as “remarketing”. For these purposes, when you visit our and other websites on which Google marketing services are active, Google directly executes a code from Google and so-called (re)marketing tags (invisible graphics or code, also known as "Web Beacons") are integrated into the website. With their help, an individual cookie, ie a small file, is usually stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file usually records which websites the user has visited, what content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, visiting time and other information about the use of the online offer. However, we have connected Google Analytics (see above) with Google Ads. Then Google Analytics may set a “_gac_” cookie. This happens in particular when you create goals in Google Analytics and then import them into Google Ads as goals (“conversions”). Our analytics code therefore contains the function 'store_gac': false, which also deactivates this cookie. This means that in the above constellation with imported targets, no cookie is set if you as a user come to our site via Google Ads. The user's IP address is also recorded, although we inform Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states to the Agreement on the European Economic Area and only in exceptional cases Transferred to servers by Google in the USA and shortened there. The IP address is not merged with the user's data within other Google offerings. Google may also combine the information mentioned above with such information from other sources. When the user then visits other websites, ads tailored to their interests can be shown to them.

23.3. User data is processed pseudonymously as part of Google marketing services. This means that Google does not store and process the user's name or email address, for example, but rather processes the relevant cookie-related data within pseudonymous user profiles. This means that from Google's perspective, the advertisements are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who the cookie holder is. We therefore do not set such a cookie. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google's servers in the USA.

23.4. The Google marketing services we use include the online advertising program “Google Ads”:

23.4.1. We use the Google Ads service to draw attention to our offers with the help of advertisements. If you reach our website via a Google ad, Google Ads will store a cookie on your device. The legal basis for the processing of your data is Article 6 Paragraph 1 Sentence 1 Letter a GDPR, which means that integration will only take place with your consent.

23.4.2. The advertising materials are delivered by Google via so-called “ad servers”. For this purpose, we and other websites use so-called ad server cookies, through which certain parameters can be measured to measure success, such as display of ads or clicks by users. We can obtain information about the success of our advertising campaigns via the Google Ads cookies stored on our website. These cookies are not intended to identify you personally. The analysis values ​​for this cookie are usually the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user is not would like to be addressed more).

23.4.3. The cookies set by Google enable Google to recognize your Internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Ads customer is assigned a different cookie, so that the cookies cannot be tracked across the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

23.4.4. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We ourselves do not independently collect personal data in the advertising measures mentioned, but only provide Google with the opportunity to collect the data. We only receive statistical evaluations from Google that provide information about which advertisements were clicked on, how often, and at what price. We do not receive any further data from the use of advertising materials; in particular, we cannot identify users based on this information.

23.4.5. You can revoke your consent at any time without affecting the permissibility of processing up to the point of revocation. The easiest way to revoke your consent is via our Consent Manager or using the following functions: a) by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any advertisements from third-party providers; b) by setting your browser to block cookies from the domain “ www.googleadservices.com ”, www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by deactivating the interest-based ads of providers that are part of the self-regulatory campaign “About Ads” via the link www.aboutads.info/choices, although this setting will be deleted when you delete your cookies; d) by permanently deactivating it in your browsers Firefox, Internet Explorer or Google Chrome under the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to fully use all of the functions of this offer.

23.4.6. Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: https://policies.google.com/privacy and services.google.com/sitestats/de.html .

23.5. We can integrate third-party advertisements based on the Google marketing service “DoubleClick”. DoubleClick uses cookies that enable Google and its partner websites to serve ads based on users' visits to this website or other websites on the Internet.

23.6. The Google marketing services we use also include the online advertising monetization program Google Adsense

We have integrated advertisements from the Google service “Adsense” (Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. The advertisements are marked with the (i) note “Google ads” in each advertisement. We have activated personalized ads to show you more interesting advertising that supports the commercial use of our website, increases its value for us and improves your user experience. Personalized advertising allows us to reach users through Adsense based on their interests and demographics (e.g. "sports enthusiasts").

For these purposes, when you visit our website, Google receives the information that you have accessed our website. To do this, Google places a web beacon or cookie on your computer. We do not know the full extent of data processing and the storage period. The data is also transferred to the USA and analyzed there. If you are logged in with a Google account, Adsense can assign the data to your account. If you do not wish this, you must log out before visiting our website.

But other information can also be used by Google for this:

  • the type of websites you visit and the mobile apps installed on your device;

  • Cookies in your browser and settings in your Google account;

  • websites and apps you have visited;

  • your activities on other devices;

  • previous interactions with Google ads or advertising services;

  • Your Google Account activity and information.

When you click on an Adsense ad, the user's IP is processed by Google (usage data), whereby the processing is carried out pseudonymously (so-called "advertising ID") by shortening the IP by the last two digits.

When providing personalized advertising, Google does not link identifiers from cookies or similar technologies with special categories of personal data in accordance with Art. 9 GDPR such as ethnic origin, religion, sexual orientation or health.

It cannot be ruled out that the above data will be passed on to third parties, authorities or Google partners. This website also has third-party Google AdSense ads enabled. The aforementioned data can be transferred to these third parties (named at https://support.google.com/dfp_sb/answer/94149 ).

The legal basis for the processing of your data is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. 

You can object to or prevent the installation of cookies by Google Adsense in various ways:

  • You can permanently deactivate cookies using a browser plug-in for Chrome, Firefox or Internet Explorer under the link https://support.google.com/ads/answer/7395996 . This deactivation may mean that you can no longer fully use all functions of our website.

  • You can object to cookies using the “Cookie Settings” link at the foot of our website.

In Google's advertising privacy policy at https://policies.google.com/technologies/ads you will find further information about the use of Google cookies in advertisements and their advertising technologies, storage period, anonymization, location data, functionality and your rights.

23.7. We can also use the “Google Tag Manager” to integrate and manage Google analysis and marketing services into our website.

23.8. Further information on Google's use of data for marketing purposes can be found on the overview page: https://policies.google.com/technologies/ads , Google's data protection declaration is available at https://policies.google.com/privacy .

23.9. If you would like to object to interest-based advertising through Google marketing services, you can use the settings and opt-out options provided by Google: https://adssettings.google.com/authenticated .

24. Facebook-Buttons

24.1. Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR), we use the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis.

24.2. When a user clicks on a Facebook button on our online offering and is logged into their Facebook account, their device establishes a direct connection to the Facebook servers. User usage profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects based on the click and therefore inform users according to our level of knowledge.

24.3. By clicking, Facebook receives the information that a user has accessed the corresponding page of the online offering. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. For example, if users press the Facebook Like button or leave a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

24.4. The purpose and scope of data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect the privacy of users can be found in Facebook's data protection information: https://www.facebook.com/about/privacy/ .

24.5. If a user is a Facebook member and does not want Facebook to collect data about them via this online offering and link it to their member data stored on Facebook, they must log out of Facebook and delete their cookies before using our online offering. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info /choices/ or the EU site http://www.youronlinechoices.com/ . The settings are platform-independent, meaning they are applied to all devices, such as desktop computers or mobile devices.

25. Bing Ads

25.1. We use the conversion and tracking tool “Bing Ads” within our online offering based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR). Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. Microsoft stores cookies on users' devices in order to enable an analysis of the use of our online offering by users if users have accessed our online offering via a Microsoft Bing ad (so-called "conversion measurement"). In this way, Microsoft and we can recognize that someone has clicked on an ad, was redirected to our online offering and reached a predetermined target page (so-called “conversion page”). We only find out the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No IP addresses are stored. No personal information about the identity of the users is shared. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. 

25.2. If users do not want to participate in the Bing Ads tracking process, you can also deactivate the required setting of a cookie via your browser setting or use Microsoft's opt-out page: http://choice.microsoft.com/de -DE/opt-out .

25.3. Users can find further information about data protection and the cookies used by Microsoft Bing Ads in Microsoft's data protection declaration: https://privacy.microsoft.com/de-de/privacystatement .

26. WIX (Content Management)

26.1. We use the service provider wix, www.wix.com , to create, operate and automate this website, as well as for certain landing pages . Wix uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. 

26.2. The data processing agreement concluded with Wix can be viewed here. Wix is ​​GDPR compliant and the exact treatment of data can be read here. The information generated by the cookie about your use of this online offering is stored on a server in the USA. User profiles can be created from the processed data, which are only used for analysis and not for advertising purposes. Further information can be found in Wix's privacy policy https://de.wix.com/about/privacy .

27. Newsletter

27.1. With the following information we inform you about the contents of our newsletter as well as the registration, shipping and statistical evaluation procedures as well as your rights to object. By subscribing to our newsletter, you agree to its receipt and the procedures described.

27.2. Content of the newsletter: We only send newsletters, emails and other electronic notifications with promotional information (hereinafter “newsletter”) with the consent of the recipient or legal permission. If the contents are specifically described when registering for the newsletter, they are decisive for the user's consent. Our newsletters also contain information about our products, offers, promotions and our company as well as news we have selected on industry topics.

27.3. Double opt-in and logging: Registration for our newsletter takes place using a so-called double opt-in procedure. This means that after you register you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with someone else's email address. Registrations for the newsletter are logged in order to be able to provide evidence of the registration process in accordance with legal requirements. This includes storing the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

27.4. Shipping service provider: The newsletter is sent using the previously mentioned service provider Wix. The data protection regulations of this shipping service provider can be found above under “Wix”.

27.5. Registration data: To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name so that you can be addressed personally in the newsletter.

27.6. Measuring success: The newsletters can contain a so-called “web beacon”, ie a pixel-sized file that is retrieved from the shipping service provider’s server when the newsletter is opened. As part of this retrieval, technical information is initially collected, such as information about the browser and your system, as well as your IP address and the time of retrieval. This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their access locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the shipping service provider to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

27.7. The sending of the newsletter and the measurement of success are based on the consent of the recipient in accordance with Art. 6 Para. 1 Sentence 1 Letter a), Art. 7 GDPR in conjunction with Section 7 Para Permission in accordance with Section 7 Paragraph 3 UWG.

27.8. When registering for our AI for You, your declaration of consent according to Art Advertising for offers on the topics of AI, automation and IT, as well as our company. You can revoke this consent at any time, for example using the unsubscribe link at the end of the newsletter. Consent, reader analysis, shipping service provider and right of withdrawal are carried out in accordance with the data protection declaration.

27.9. The registration process is logged on the basis of our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR and serves to provide proof of consent to receive the newsletter.

10/27 Termination/revocation: You can terminate your receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter. Alternatively, write an email to info@aiforu.de If the users have only registered for the newsletter and canceled this registration, their personal data will be deleted.

28. Web hosting

28.1. We use external providers for web hosting (web host). For the purpose of secure and uninterrupted operation of our online offerings, external providers provide web servers and database servers.

28.2. The web hosts process inventory data, contract data, payment data, meta and communication data from customers, interested parties and users of the online offerings. The legal basis for processing is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR in conjunction with Article 28 GDPR. We have concluded agreements for order processing for this purpose. Our legitimate interest lies in the secure, uninterrupted and efficient operation of our online offerings.

29. Integration of third-party services and content

29.1. Within our online offering, we use content or service offerings from third-party providers based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR). to integrate their content and services, such as videos or fonts (hereinafter referred to as “content”). If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. This always assumes that the third party providers of this content are aware of the user's IP address, as without the IP address they would not be able to send the content to their browser. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and can contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offering, as well as can be linked to such information from other sources.

29.2. The following presentation provides an overview of third-party providers and their content, along with links to their data protection declarations, which contain further information on the processing of data and, in some cases already mentioned here, objection options (so-called opt-out):

Google Fonts
External fonts from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) at https://www.google.com/fonts (“Google Fonts”). The integration of Google Fonts takes place from our servers. Google's privacy policy: https://policies.google.com/privacy , opt-out: https://adssettings.google.com/authenticated .

Google Maps Maps
from the “Google Maps” service provided by the third-party provider Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). On this website we use Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of the maps is Article 6 Paragraph 1 Sentence 1 Letter a GDPR, which means that they will only be integrated with your consent. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google saves your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this you must contact Google. The information collected is stored on Google servers, including in the USA. For these cases, the provider says it has set itself a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring international data. We have also agreed on so-called standard data protection clauses with Google, the purpose of which is to maintain an appropriate level of data protection in third countries.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's data protection declarations. There you will also receive further information about your rights in this regard and setting options to protect your privacy. Google’s privacy policy: https://policies.google.com/privacy .

YouTube
videos from the third-party platform “YouTube” Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

(1) We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer. The legal basis for displaying the videos is Article 6 Paragraph 1 Sentence 1 Letter a GDPR, which means that they will only be integrated with your consent.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want it to be associated with your YouTube profile, you must log out before activating the button. YouTube saves your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this you must contact YouTube.

(3) The information collected is stored on Google servers, also in the USA. For these cases, the provider says it has set itself a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring international data. We have also agreed on so-called standard data protection clauses with Google, the purpose of which is to maintain an appropriate level of data protection in third countries.

(4) Further information on the purpose and scope of data collection and processing by YouTube can be found in the data protection declaration. There you will also find further information about your rights and setting options to protect your privacy: Data protection declaration: https://policies.google.com/privacy .

Google ReCaptcha
We integrate the function to detect bots, e.g. when making entries in online forms ("ReCaptcha") from the third-party provider Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Data protection declaration: https://www.google.com/policies/privacy/ , opt-out: https://adssettings.google.com/authenticated .

Instagram
Links to the Instagram service are integrated into our online offering. Instagram is offered by: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile or share it there by clicking on the Instagram button. This allows Instagram to assign your visit to our pages to your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Data protection declaration: http://instagram.com/about/legal/privacy/ .

LinkedIn
Within our online offering we use links to the LinkedIn network (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA). If you are logged into your LinkedIn account, you can share the content of our pages in your Linkedin account by clicking the Linkedin button. LinkedIn is informed that you have visited our website with your IP address. If you are registered with LinkedIn, it is possible for LinkedIn to assign your interaction with our online offering to your user account. Data protection declaration: https://www.linkedin.com/legal/privacy-policy , opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out .

Twitter
We have included links to the Twitter service within our online offering (hereinafter referred to as “Twitter”). Twitter is an offering from Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. If you are logged into your Twitter account, you can link the content of our pages to your Twitter profile or share it there by clicking on the Twitter button. We use the following Twitter functions: presentation of our contributions within Twitter within our online offering there, the link to our profile on Twitter and the possibility of interacting with the contributions and the functions of Twitter. Data protection declaration: https://twitter.com/de/privacy , opt-out:

https://twitter.com/personalization .

 

XING
We use links to the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Every time you click on the Xing button on one of our pages, a connection is established to Xing servers if you are logged in to your XING account. To our knowledge, personal data is not stored. In particular, no IP addresses are stored or usage behavior is evaluated. Data protection declaration: https://www.xing.com/app/share?op=data_protection .

30. Rights of the data subject

If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights towards the person responsible:

30.1. right of providing information

You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us. If such processing occurs, you can request information from the person responsible about the following information:

  • the purposes for which the personal data are processed;

  • the categories of personal data that are processed;

  • the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

  • the planned duration of storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period;

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

30.2. Right to rectification

You have the right to request correction and/or completion from the person responsible if the personal data processed concerning you is incorrect or incomplete. The person responsible must make the correction immediately.

30.3. Right to restriction of processing

You can request the restriction of the processing of personal data concerning you under the following conditions:

  • if you contest the accuracy of the personal data relating to you for a period enabling the controller to verify the accuracy of the personal data;

  • the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;

  • the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or

  • if you have lodged an objection to the processing in accordance with Article 21 Para. 1 GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.

30.4. Right to deletion

30.4.1. You can request that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

  • The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

  • You revoke your consent on which the processing was based in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR and there is no other legal basis for the processing.

  • You object to the processing in accordance with Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Para. 2 GDPR.

  • Your personal data has been processed unlawfully.

  • The deletion of personal data concerning you is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.

  • The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 Para. 1 GDPR.

30.4.2. If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 Para. 1 GDPR, he will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to ensure that the person responsible for data processing to inform those processing the personal data that you, as the data subject, have requested them to delete all links to that personal data or copies or replications of that personal data.

30.4.3. There is no right to deletion if processing is necessary

  • to exercise the right to freedom of expression and information;

  • to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;

  • for reasons of public interest in the field of public health in accordance with Article 9 Paragraph 2 Letters h and i and Article 9 Paragraph 3 GDPR;

  • for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 Para. 1 GDPR, insofar as the law mentioned under section a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or

  • to assert, exercise or defend legal claims.

30.5. Right to information

If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless: this turns out to be impossible or involves disproportionate effort. You have the right to be informed about these recipients by the person responsible.

30.6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that

  • the processing is based on consent in accordance with Art. 6 Paragraph 1 Sentence 1 Letter a) GDPR or Art. 9 Paragraph 2 Letter a GDPR or on a contract in accordance with Art ) GDPR is based and

  • the processing takes place using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, to the extent that this is technically feasible. The freedoms and rights of other people must not be impaired by this. The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

30.7. Right to object or revoke the processing of your data

If you have given your consent to the processing of your data (Article 6 Paragraph 1 Sentence 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR), you can do so at any time in accordance with Article 7 Paragraph 3 GDPR revoked. Such a revocation affects the lawfulness of the processing of your personal data after you have given it to us.

To the extent that we base the processing of your personal data on the balance of interests (Art. 6 Para. 1 Sentence 1 Letter f) GDPR), you can object to the processing. This is the case if the processing is not necessary to fulfill a contract with you, which is explained by us in the following description of the functions. If you exercise such an objection, we will ask you to explain the reasons why we should not process your personal data as we do. In the event of your justified objection, we will examine the situation and will either stop or adjust data processing or show you our compelling legitimate reasons on the basis of which we continue processing.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. We may use your electronic mailing address provided in connection with the sale of the Services for direct advertising of our own similar goods and services. You can object to this use at any time without incurring any costs other than the transmission costs according to the basic tariffs. You can inform us about your objection to advertising using the contact details above.

30.8. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you is contrary to violates the GDPR. The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.

31. Security measures

31.1. We take appropriate technical measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk; The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, distribution, ensuring availability and its separation. We have also set up procedures to ensure that the rights of those affected are exercised, data are deleted and data are at risk. Furthermore, we take the protection of personal data into account when developing or selecting hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 GDPR).

 

31.2. The security measures include, in particular, the encrypted transmission of data between your browser and our server.

32. Changes and Updates to the Privacy Policy

We ask you to regularly inform yourself about the content of our data protection declaration. We will adapt the data protection declaration as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

Version from: 24.10.2023

AI for You

sandro.curati@aiforu.de

©2023 AI for You. www.aiforu.de

20. Online social media presence

20.1. We maintain profiles or fan pages on social media. When you use and access our profile in the respective network, the respective data protection information and terms of use of the respective network apply.

20.2. Data categories and description of data processing: usage data, contact data, content data, inventory data. Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on usage behavior and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data can also be stored in the usage profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them). For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.

We are jointly responsible for our fan page with Facebook, Instagram, Twitter (X) in accordance with Art. 26 GDPR. For this purpose, an agreement called “Information on Page Insights”, available at https://www.facebook.com/legal/terms/page_controller_addendum, was concluded, according to which Facebook must observe certain security measures and will also directly fulfill the rights of those affected. Above all, you can contact Facebook directly about your rights to information and deletion.

This does not affect your data subject rights, such as information, deletion, objection and complaint to the responsible supervisory authority. For more information about shared responsibility, see “Page Insights Data Information” at https://www.facebook.com/legal/terms/informationaboutpageinsightsdata. In the case of requests for information and the assertion of the rights of those affected, we would like to point out that these can also be asserted directly on Facebook. 

Since Instagram, like Facebook, belongs to the Meta Group, the group's common data protection policy is available for all services at https://privacycenter.instagram.com/policy/ , which concerns the processing of your data if you have either a Facebook profile or Instagram Visit our company's profile and use the link on our website. In addition, the standard contractual clauses for commercial use apply https://www.facebook.com/legal/commercial_terms . We expressly point out that when using these services, Twitter (X) data can also be processed outside the EU. Please also note this on Instagram https://privacycenter.instagram.com/policies/data_privacy_framework/ and on Twitter (X) https://twitter.com/de/privacy .

20.3. Purpose of processing: communication with users connected and registered on social networks; Information and advertising for our products, offers and services; Representation and image cultivation; Evaluation and analysis of the users and content of our social media presence.

20.4. Legal basis: The legal basis for the processing of personal data is our legitimate interest in the above purposes in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. If you have given us or the person responsible for the social network your consent to the processing of your personal data, the legal basis is Article 6 Paragraph 1 Sentence 1 Letter a) in conjunction with Article 7 GDPR. 

20.5. Data transmission/recipient category: Social network.

20.6. The data protection information, information options and objection options (opt-out) of the respective networks/service providers can be found here:

​

​

20. Online social media presence

20.1. We maintain profiles or fan pages on social media. When you use and access our profile in the respective network, the respective data protection information and terms of use of the respective network apply.

20.2. Data categories and description of data processing: usage data, contact data, content data, inventory data. Furthermore, user data within social networks is usually processed for market research and advertising purposes. For example, usage profiles can be created based on usage behavior and the resulting interests of users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behavior and interests of the users are stored. Furthermore, data can also be stored in the usage profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them). For a detailed description of the respective forms of processing and the options for objection (opt-out), we refer to the data protection declarations and information provided by the operators of the respective networks.

We are jointly responsible for our fan page with Facebook, Instagram, Twitter (X) in accordance with Art. 26 GDPR. For this purpose, an agreement called “Information on Page Insights”, available at https://www.facebook.com/legal/terms/page_controller_addendum, was concluded, according to which Facebook must observe certain security measures and will also directly fulfill the rights of those affected. Above all, you can contact Facebook directly about your rights to information and deletion.

This does not affect your data subject rights, such as information, deletion, objection and complaint to the responsible supervisory authority. For more information about shared responsibility, see “Page Insights Data Information” at https://www.facebook.com/legal/terms/informationaboutpageinsightsdata. In the case of requests for information and the assertion of the rights of those affected, we would like to point out that these can also be asserted directly on Facebook. 

Since Instagram, like Facebook, belongs to the Meta Group, the group's common data protection policy is available for all services at https://privacycenter.instagram.com/policy/ , which concerns the processing of your data if you have either a Facebook profile or Instagram Visit our company's profile and use the link on our website. In addition, the standard contractual clauses for commercial use apply https://www.facebook.com/legal/commercial_terms . We expressly point out that when using these services, Twitter (X) data can also be processed outside the EU. Please also note this on Instagram https://privacycenter.instagram.com/policies/data_privacy_framework/ and on Twitter (X) https://twitter.com/de/privacy .

20.3. Purpose of processing: communication with users connected and registered on social networks; Information and advertising for our products, offers and services; Representation and image cultivation; Evaluation and analysis of the users and content of our social media presence.

20.4. Legal basis: The legal basis for the processing of personal data is our legitimate interest in the above purposes in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. If you have given us or the person responsible for the social network your consent to the processing of your personal data, the legal basis is Article 6 Paragraph 1 Sentence 1 Letter a) in conjunction with Article 7 GDPR. 

20.5. Data transmission/recipient category: Social network.

20.6. The data protection information, information options and objection options (opt-out) of the respective networks/service providers can be found here:

21. Google Analytics

21.1. Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR), we use Google Analytics, a web analysis service from Google LLC (“Google”). ) a. If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. With regard to the use of the data, there is a joint responsibility for data processing between Google and us in accordance with Article 26 GDPR. We have agreed with Google that we assume primary responsibility for processing the data in accordance with the GDPR and that we will fulfill all obligations under the GDPR with regard to the processing of the data (including Art. 12, 13 GDPR, Art. 15 to 22 GDPR and Art . 32 to 34 GDPR). We have also concluded an order processing contract with Google (Art. 28 GDPR) and, for example, deactivated all data sharing in the settings.

21.2. Google Analytics typically uses cookies. The information generated by the cookie about the user's use of the online offering is usually transmitted to a Google server in the USA and stored there. We have therefore reprogrammed the Google Analytics code so that it no longer sets cookies. We also technically prevent the creation and merging of user profiles. We also load the analytics.js file directly from our own server instead of from Google. Google Analytics does not use any “cookies” in this integration, but instead uses our own, anonymous and non-resolvable ID (“ClientId”) without personal reference, which we created and which is usually transferred to a Google server in the USA and stored there. In addition, Google Analytics cannot combine statistical data beyond the boundaries of the website with data from other websites.

21.3. Google will use this information on our behalf to evaluate the use of our online offering by users, to compile reports on the activities within this online offering and to provide us with other services related to the use of this online offering and internet usage. 

21.4. We use Google Analytics to show the advertisements placed within the advertising services of Google and its partners only to those users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products) based on the information they visit websites) that we transmit to Google (so-called “remarketing” or “Google Analytics audiences”). With the help of remarketing audiences, we also want to ensure that our ads match the potential interest of users and do not appear annoying.

21.5. We only use Google Analytics with IP anonymization activated. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

21.6. The IP address transmitted by the user's browser is not merged with other Google data. Users can prevent the storage of cookies by setting their browser software accordingly; Users can also prevent Google from collecting the data generated by the cookie and relating to their use of the online offering and from processing this data by Google by downloading and installing the browser plug-in available at the following link: https:// tools .google.com/dlpage/gaoptout?hl=de .

21.7. As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent data collection by Google Analytics by clicking on this link . An opt-out cookie will be set to prevent future collection of your data when you visit this website. The opt-out cookie only applies in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you will have to set the opt-out cookie again.

21.8. Further information on data usage by Google, settings and objection options can be found on the Google websites: https://www.google.com/intl/de/policies/privacy/partners (“Use of data by Google when you use websites or apps our partners"), https://policies.google.com/technologies/ads ("use of data for advertising purposes"), https://adssettings.google.com/authenticated ("manage information that Google uses to show you advertising ").

9/21 The data sent by us and linked to cookies, user identifiers (e.g. user ID) or advertising IDs are automatically deleted after 14 months. The deletion of data whose retention period has been reached occurs automatically once a month.

22. Chatbot Services

22.1. Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR), we use a chatbot that runs via the Voiceflow platform (www.voiceflow.com ) is hosted. Data is processed in accordance with the EU GDPR directive. Data will be transferred to Canada, Voiceflow's headquarters, but will also be transferred to other countries where Voiceflow hosts servers within the scope of legal permissibility and guidelines.

Details on data processing of personal data with Voiceflow can be found herehttps://www.voiceflow.com/gdpr

22.2 Voiceflow may transfer personal data to countries outside the European Economic Area (EEA) or to third parties located in such countries. In such cases, Voiceflow will ensure that appropriate safeguards such as standard contractual clauses or security certifications are in place to protect the data and ensure its secure transmission in accordance with the requirements of the General Data Protection Regulation (GDPR). Voiceflow is committed to protecting the privacy and rights of individuals regarding their personal information. By adhering to the principles of transparency, accountability and data protection, we strive to maintain the trust of our users and partners. This GDPR Compliance Statement will be updated as necessary to ensure ongoing compliance with changing regulations and standards. We have also agreed on so-called standard data protection clauses with Voiceflow, the purpose of which is to maintain an appropriate level of data protection.

23. Google-Re/Marketing-Services

23.1. Based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR), we use the marketing and remarketing services (“Google” for short). Marketing Services”) of Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. With regard to the use of the data, there is a joint responsibility for data processing between Google and us in accordance with Art. 26 GDPR. We have agreed with Google that we assume primary responsibility for processing the data in accordance with the GDPR and that we will fulfill all obligations under the GDPR with regard to the processing of the data (including Art. 12, 13 GDPR, Art. 15 to 22 GDPR and Art . 32 to 34 GDPR). 

23.2. The Google marketing services allow us to display advertisements for and on our website in a more targeted manner in order to only show users advertisements that potentially match their interests. For example, if a user is shown ads for products that they were interested in on other websites, this is referred to as “remarketing”. For these purposes, when you visit our and other websites on which Google marketing services are active, Google directly executes a code from Google and so-called (re)marketing tags (invisible graphics or code, also known as "Web Beacons") are integrated into the website. With their help, an individual cookie, ie a small file, is usually stored on the user's device (comparable technologies can also be used instead of cookies). The cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file usually records which websites the user has visited, what content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, visiting time and other information about the use of the online offer. However, we have connected Google Analytics (see above) with Google Ads. Then Google Analytics may set a “_gac_” cookie. This happens in particular when you create goals in Google Analytics and then import them into Google Ads as goals (“conversions”). Our analytics code therefore contains the function 'store_gac': false, which also deactivates this cookie. This means that in the above constellation with imported targets, no cookie is set if you as a user come to our site via Google Ads. The user's IP address is also recorded, although we inform Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states to the Agreement on the European Economic Area and only in exceptional cases Transferred to servers by Google in the USA and shortened there. The IP address is not merged with the user's data within other Google offerings. Google may also combine the information mentioned above with such information from other sources. When the user then visits other websites, ads tailored to their interests can be shown to them.

23.3. User data is processed pseudonymously as part of Google marketing services. This means that Google does not store and process the user's name or email address, for example, but rather processes the relevant cookie-related data within pseudonymous user profiles. This means that from Google's perspective, the advertisements are not managed and displayed for a specifically identified person, but for the cookie holder, regardless of who the cookie holder is. We therefore do not set such a cookie. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google Marketing Services about users is transmitted to Google and stored on Google's servers in the USA.

23.4. The Google marketing services we use include the online advertising program “Google Ads”:

23.4.1. We use the Google Ads service to draw attention to our offers with the help of advertisements. If you reach our website via a Google ad, Google Ads will store a cookie on your device. The legal basis for the processing of your data is Article 6 Paragraph 1 Sentence 1 Letter a GDPR, which means that integration will only take place with your consent.

23.4.2. The advertising materials are delivered by Google via so-called “ad servers”. For this purpose, we and other websites use so-called ad server cookies, through which certain parameters can be measured to measure success, such as display of ads or clicks by users. We can obtain information about the success of our advertising campaigns via the Google Ads cookies stored on our website. These cookies are not intended to identify you personally. The analysis values ​​for this cookie are usually the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user is not would like to be addressed more).

23.4.3. The cookies set by Google enable Google to recognize your Internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. Each Ads customer is assigned a different cookie, so that the cookies cannot be tracked across the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

23.4.4. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We ourselves do not independently collect personal data in the advertising measures mentioned, but only provide Google with the opportunity to collect the data. We only receive statistical evaluations from Google that provide information about which advertisements were clicked on, how often, and at what price. We do not receive any further data from the use of advertising materials; in particular, we cannot identify users based on this information.

23.4.5. You can revoke your consent at any time without affecting the permissibility of processing up to the point of revocation. The easiest way to revoke your consent is via our Consent Manager or using the following functions: a) by setting your browser software accordingly; in particular, suppressing third-party cookies means that you will not receive any advertisements from third-party providers; b) by setting your browser to block cookies from the domain “ www.googleadservices.com ”, www.google.de/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by deactivating the interest-based ads of providers that are part of the self-regulatory campaign “About Ads” via the link www.aboutads.info/choices, although this setting will be deleted when you delete your cookies; d) by permanently deactivating it in your browsers Firefox, Internet Explorer or Google Chrome under the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to fully use all of the functions of this offer.

23.4.6. Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: https://policies.google.com/privacy and services.google.com/sitestats/de.html .

23.5. We can integrate third-party advertisements based on the Google marketing service “DoubleClick”. DoubleClick uses cookies that enable Google and its partner websites to serve ads based on users' visits to this website or other websites on the Internet.

23.6. The Google marketing services we use also include the online advertising monetization program Google Adsense

We have integrated advertisements from the Google service “Adsense” (Google Ireland Limited, registration number: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. The advertisements are marked with the (i) note “Google ads” in each advertisement. We have activated personalized ads to show you more interesting advertising that supports the commercial use of our website, increases its value for us and improves your user experience. Personalized advertising allows us to reach users through Adsense based on their interests and demographics (e.g. "sports enthusiasts").

For these purposes, when you visit our website, Google receives the information that you have accessed our website. To do this, Google places a web beacon or cookie on your computer. We do not know the full extent of data processing and the storage period. The data is also transferred to the USA and analyzed there. If you are logged in with a Google account, Adsense can assign the data to your account. If you do not wish this, you must log out before visiting our website.

But other information can also be used by Google for this:

  • the type of websites you visit and the mobile apps installed on your device;

  • Cookies in your browser and settings in your Google account;

  • websites and apps you have visited;

  • your activities on other devices;

  • previous interactions with Google ads or advertising services;

  • Your Google Account activity and information.

When you click on an Adsense ad, the user's IP is processed by Google (usage data), whereby the processing is carried out pseudonymously (so-called "advertising ID") by shortening the IP by the last two digits.

When providing personalized advertising, Google does not link identifiers from cookies or similar technologies with special categories of personal data in accordance with Art. 9 GDPR such as ethnic origin, religion, sexual orientation or health.

It cannot be ruled out that the above data will be passed on to third parties, authorities or Google partners. This website also has third-party Google AdSense ads enabled. The aforementioned data can be transferred to these third parties (named at https://support.google.com/dfp_sb/answer/94149 ).

The legal basis for the processing of your data is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. 

You can object to or prevent the installation of cookies by Google Adsense in various ways:

  • You can permanently deactivate cookies using a browser plug-in for Chrome, Firefox or Internet Explorer under the link https://support.google.com/ads/answer/7395996 . This deactivation may mean that you can no longer fully use all functions of our website.

  • You can object to cookies using the “Cookie Settings” link at the foot of our website.

In Google's advertising privacy policy at https://policies.google.com/technologies/ads you will find further information about the use of Google cookies in advertisements and their advertising technologies, storage period, anonymization, location data, functionality and your rights.

23.7. We can also use the “Google Tag Manager” to integrate and manage Google analysis and marketing services into our website.

23.8. Further information on Google's use of data for marketing purposes can be found on the overview page: https://policies.google.com/technologies/ads , Google's data protection declaration is available at https://policies.google.com/privacy .

23.9. If you would like to object to interest-based advertising through Google marketing services, you can use the settings and opt-out options provided by Google: https://adssettings.google.com/authenticated .

24. Facebook-Buttons

24.1. Based on our legitimate interests (ie interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR), we use the social network facebook.com, which is operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis.

24.2. When a user clicks on a Facebook button on our online offering and is logged into their Facebook account, their device establishes a direct connection to the Facebook servers. User usage profiles can be created from the processed data. We therefore have no influence on the amount of data that Facebook collects based on the click and therefore inform users according to our level of knowledge.

24.3. By clicking, Facebook receives the information that a user has accessed the corresponding page of the online offering. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. For example, if users press the Facebook Like button or leave a comment, the corresponding information is transmitted from your device directly to Facebook and stored there. If a user is not a member of Facebook, there is still the possibility that Facebook will find out and store their IP address. According to Facebook, only an anonymized IP address is stored in Germany.

24.4. The purpose and scope of data collection and the further processing and use of the data by Facebook as well as the related rights and setting options to protect the privacy of users can be found in Facebook's data protection information: https://www.facebook.com/about/privacy/ .

24.5. If a user is a Facebook member and does not want Facebook to collect data about them via this online offering and link it to their member data stored on Facebook, they must log out of Facebook and delete their cookies before using our online offering. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US website http://www.aboutads.info /choices/ or the EU site http://www.youronlinechoices.com/ . The settings are platform-independent, meaning they are applied to all devices, such as desktop computers or mobile devices.

25. Bing Ads

25.1. We use the conversion and tracking tool “Bing Ads” within our online offering based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR). Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. Microsoft stores cookies on users' devices in order to enable an analysis of the use of our online offering by users if users have accessed our online offering via a Microsoft Bing ad (so-called "conversion measurement"). In this way, Microsoft and we can recognize that someone has clicked on an ad, was redirected to our online offering and reached a predetermined target page (so-called “conversion page”). We only find out the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No IP addresses are stored. No personal information about the identity of the users is shared. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. 

25.2. If users do not want to participate in the Bing Ads tracking process, you can also deactivate the required setting of a cookie via your browser setting or use Microsoft's opt-out page: http://choice.microsoft.com/de -DE/opt-out .

25.3. Users can find further information about data protection and the cookies used by Microsoft Bing Ads in Microsoft's data protection declaration: https://privacy.microsoft.com/de-de/privacystatement .

26. WIX (Content Management)

26.1. We use the service provider wix, www.wix.com , to create, operate and automate this website, as well as for certain landing pages . Wix uses so-called “cookies”, text files that are stored on your computer and that enable your use of the website to be analyzed. If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG. 

26.2. The data processing agreement concluded with Wix can be viewed here. Wix is ​​GDPR compliant and the exact treatment of data can be read here. The information generated by the cookie about your use of this online offering is stored on a server in the USA. User profiles can be created from the processed data, which are only used for analysis and not for advertising purposes. Further information can be found in Wix's privacy policy https://de.wix.com/about/privacy .

27. Newsletter

27.1. With the following information we inform you about the contents of our newsletter as well as the registration, shipping and statistical evaluation procedures as well as your rights to object. By subscribing to our newsletter, you agree to its receipt and the procedures described.

27.2. Content of the newsletter: We only send newsletters, emails and other electronic notifications with promotional information (hereinafter “newsletter”) with the consent of the recipient or legal permission. If the contents are specifically described when registering for the newsletter, they are decisive for the user's consent. Our newsletters also contain information about our products, offers, promotions and our company as well as news we have selected on industry topics.

27.3. Double opt-in and logging: Registration for our newsletter takes place using a so-called double opt-in procedure. This means that after you register you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with someone else's email address. Registrations for the newsletter are logged in order to be able to provide evidence of the registration process in accordance with legal requirements. This includes storing the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

27.4. Shipping service provider: The newsletter is sent using the previously mentioned service provider Wix. The data protection regulations of this shipping service provider can be found above under “Wix”.

27.5. Registration data: To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name so that you can be addressed personally in the newsletter.

27.6. Measuring success: The newsletters can contain a so-called “web beacon”, ie a pixel-sized file that is retrieved from the shipping service provider’s server when the newsletter is opened. As part of this retrieval, technical information is initially collected, such as information about the browser and your system, as well as your IP address and the time of retrieval. This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their access locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the shipping service provider to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

27.7. The sending of the newsletter and the measurement of success are based on the consent of the recipient in accordance with Art. 6 Para. 1 Sentence 1 Letter a), Art. 7 GDPR in conjunction with Section 7 Para Permission in accordance with Section 7 Paragraph 3 UWG.

27.8. When registering for our AI for You, your declaration of consent according to Art Advertising for offers on the topics of AI, automation and IT, as well as our company. You can revoke this consent at any time, for example using the unsubscribe link at the end of the newsletter. Consent, reader analysis, shipping service provider and right of withdrawal are carried out in accordance with the data protection declaration.

27.9. The registration process is logged on the basis of our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR and serves to provide proof of consent to receive the newsletter.

10/27 Termination/revocation: You can terminate your receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter. Alternatively, write an email to info@aiforu.de If the users have only registered for the newsletter and canceled this registration, their personal data will be deleted.

28. Web hosting

28.1. We use external providers for web hosting (web host). For the purpose of secure and uninterrupted operation of our online offerings, external providers provide web servers and database servers.

28.2. The web hosts process inventory data, contract data, payment data, meta and communication data from customers, interested parties and users of the online offerings. The legal basis for processing is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR in conjunction with Article 28 GDPR. We have concluded agreements for order processing for this purpose. Our legitimate interest lies in the secure, uninterrupted and efficient operation of our online offerings.

29. Integration of third-party services and content

29.1. Within our online offering, we use content or service offerings from third-party providers based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 Sentence 1 Letter f) GDPR). to integrate their content and services, such as videos or fonts (hereinafter referred to as “content”). If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. This always assumes that the third party providers of this content are aware of the user's IP address, as without the IP address they would not be able to send the content to their browser. The IP address is therefore required to display this content. We strive to only use content whose respective providers only use the IP address to deliver the content. Third parties may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. The “pixel tags” can be used to evaluate information such as visitor traffic on the pages of this website. The pseudonymous information can also be stored in cookies on the user's device and can contain, among other things, technical information about the browser and operating system, referring websites, visiting time and other information about the use of our online offering, as well as can be linked to such information from other sources.

29.2. The following presentation provides an overview of third-party providers and their content, along with links to their data protection declarations, which contain further information on the processing of data and, in some cases already mentioned here, objection options (so-called opt-out):

Google Fonts
External fonts from Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) at https://www.google.com/fonts (“Google Fonts”). The integration of Google Fonts takes place from our servers. Google's privacy policy: https://policies.google.com/privacy , opt-out: https://adssettings.google.com/authenticated .

Google Maps Maps
from the “Google Maps” service provided by the third-party provider Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). On this website we use Google Maps. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of the maps is Article 6 Paragraph 1 Sentence 1 Letter a GDPR, which means that they will only be integrated with your consent. By visiting the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want your profile to be associated with Google, you must log out before activating the button. Google saves your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this you must contact Google. The information collected is stored on Google servers, including in the USA. For these cases, the provider says it has set itself a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring international data. We have also agreed on so-called standard data protection clauses with Google, the purpose of which is to maintain an appropriate level of data protection in third countries.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's data protection declarations. There you will also receive further information about your rights in this regard and setting options to protect your privacy. Google’s privacy policy: https://policies.google.com/privacy .

YouTube
videos from the third-party platform “YouTube” Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).

(1) We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer. The legal basis for displaying the videos is Article 6 Paragraph 1 Sentence 1 Letter a GDPR, which means that they will only be integrated with your consent.

(2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want it to be associated with your YouTube profile, you must log out before activating the button. YouTube saves your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this you must contact YouTube.

(3) The information collected is stored on Google servers, also in the USA. For these cases, the provider says it has set itself a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring international data. We have also agreed on so-called standard data protection clauses with Google, the purpose of which is to maintain an appropriate level of data protection in third countries.

(4) Further information on the purpose and scope of data collection and processing by YouTube can be found in the data protection declaration. There you will also find further information about your rights and setting options to protect your privacy: Data protection declaration: https://policies.google.com/privacy .

Google ReCaptcha
We integrate the function to detect bots, e.g. when making entries in online forms ("ReCaptcha") from the third-party provider Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Data protection declaration: https://www.google.com/policies/privacy/ , opt-out: https://adssettings.google.com/authenticated .

Instagram
Links to the Instagram service are integrated into our online offering. Instagram is offered by: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile or share it there by clicking on the Instagram button. This allows Instagram to assign your visit to our pages to your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Data protection declaration: http://instagram.com/about/legal/privacy/ .

LinkedIn
Within our online offering we use links to the LinkedIn network (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA). If you are logged into your LinkedIn account, you can share the content of our pages in your Linkedin account by clicking the Linkedin button. LinkedIn is informed that you have visited our website with your IP address. If you are registered with LinkedIn, it is possible for LinkedIn to assign your interaction with our online offering to your user account. Data protection declaration: https://www.linkedin.com/legal/privacy-policy , opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out .

Twitter
We have included links to the Twitter service within our online offering (hereinafter referred to as “Twitter”). Twitter is an offering from Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. If you are logged into your Twitter account, you can link the content of our pages to your Twitter profile or share it there by clicking on the Twitter button. We use the following Twitter functions: presentation of our contributions within Twitter within our online offering there, the link to our profile on Twitter and the possibility of interacting with the contributions and the functions of Twitter. Data protection declaration: https://twitter.com/de/privacy , opt-out:

https://twitter.com/personalization .

 

XING
We use links to the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Every time you click on the Xing button on one of our pages, a connection is established to Xing servers if you are logged in to your XING account. To our knowledge, personal data is not stored. In particular, no IP addresses are stored or usage behavior is evaluated. Data protection declaration: https://www.xing.com/app/share?op=data_protection .

30. Rights of the data subject

If your personal data is processed, you are the data subject within the meaning of the GDPR and you have the following rights towards the person responsible:

30.1. right of providing information

You can request confirmation from the person responsible as to whether personal data concerning you is being processed by us. If such processing occurs, you can request information from the person responsible about the following information:

  • the purposes for which the personal data are processed;

  • the categories of personal data that are processed;

  • the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

  • the planned duration of storage of the personal data concerning you or, if specific information is not possible, criteria for determining the storage period;

You have the right to request information as to whether the personal data concerning you will be transferred to a third country or to an international organization. In this context, you can request to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.

30.2. Right to rectification

You have the right to request correction and/or completion from the person responsible if the personal data processed concerning you is incorrect or incomplete. The person responsible must make the correction immediately.

30.3. Right to restriction of processing

You can request the restriction of the processing of personal data concerning you under the following conditions:

  • if you contest the accuracy of the personal data relating to you for a period enabling the controller to verify the accuracy of the personal data;

  • the processing is unlawful and you refuse the deletion of the personal data and instead request the restriction of the use of the personal data;

  • the person responsible no longer needs the personal data for the purposes of processing, but you need them to assert, exercise or defend legal claims, or

  • if you have lodged an objection to the processing in accordance with Article 21 Para. 1 GDPR and it is not yet clear whether the legitimate reasons of the controller outweigh your reasons.

If the processing of personal data concerning you has been restricted, this data - apart from its storage - may only be used with your consent or to assert, exercise or defend legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction on processing has been restricted in accordance with the above conditions, you will be informed by the person responsible before the restriction is lifted.

30.4. Right to deletion

30.4.1. You can request that the person responsible delete the personal data concerning you immediately, and the person responsible is obliged to delete this data immediately if one of the following reasons applies:

  • The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

  • You revoke your consent on which the processing was based in accordance with Article 6 Paragraph 1 Sentence 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR and there is no other legal basis for the processing.

  • You object to the processing in accordance with Art. 21 Para. 1 GDPR and there are no overriding legitimate reasons for the processing, or you object to the processing in accordance with Art. 21 Para. 2 GDPR.

  • Your personal data has been processed unlawfully.

  • The deletion of personal data concerning you is necessary to comply with a legal obligation under Union or Member State law to which the controller is subject.

  • The personal data concerning you was collected in relation to information society services offered in accordance with Article 8 Para. 1 GDPR.

30.4.2. If the person responsible has made the personal data concerning you public and is obliged to delete it in accordance with Article 17 Para. 1 GDPR, he will take appropriate measures, including technical ones, taking into account the available technology and the implementation costs, to ensure that the person responsible for data processing to inform those processing the personal data that you, as the data subject, have requested them to delete all links to that personal data or copies or replications of that personal data.

30.4.3. There is no right to deletion if processing is necessary

  • to exercise the right to freedom of expression and information;

  • to fulfill a legal obligation requiring processing under Union or Member State law to which the controller is subject, or to carry out a task carried out in the public interest or in the exercise of official authority vested in the controller;

  • for reasons of public interest in the field of public health in accordance with Article 9 Paragraph 2 Letters h and i and Article 9 Paragraph 3 GDPR;

  • for archiving purposes in the public interest, scientific or historical research purposes or for statistical purposes in accordance with Article 89 Para. 1 GDPR, insofar as the law mentioned under section a) is likely to make the achievement of the objectives of this processing impossible or seriously impair it, or

  • to assert, exercise or defend legal claims.

30.5. Right to information

If you have asserted the right to rectification, deletion or restriction of processing against the controller, the controller is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or deletion of the data or restriction of processing, unless: this turns out to be impossible or involves disproportionate effort. You have the right to be informed about these recipients by the person responsible.

30.6. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the person responsible in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that

  • the processing is based on consent in accordance with Art. 6 Paragraph 1 Sentence 1 Letter a) GDPR or Art. 9 Paragraph 2 Letter a GDPR or on a contract in accordance with Art ) GDPR is based and

  • the processing takes place using automated procedures.

In exercising this right, you also have the right to have the personal data concerning you transmitted directly from one controller to another controller, to the extent that this is technically feasible. The freedoms and rights of other people must not be impaired by this. The right to data portability does not apply to processing of personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

30.7. Right to object or revoke the processing of your data

If you have given your consent to the processing of your data (Article 6 Paragraph 1 Sentence 1 Letter a) or Article 9 Paragraph 2 Letter a) GDPR), you can do so at any time in accordance with Article 7 Paragraph 3 GDPR revoked. Such a revocation affects the lawfulness of the processing of your personal data after you have given it to us.

To the extent that we base the processing of your personal data on the balance of interests (Art. 6 Para. 1 Sentence 1 Letter f) GDPR), you can object to the processing. This is the case if the processing is not necessary to fulfill a contract with you, which is explained by us in the following description of the functions. If you exercise such an objection, we will ask you to explain the reasons why we should not process your personal data as we do. In the event of your justified objection, we will examine the situation and will either stop or adjust data processing or show you our compelling legitimate reasons on the basis of which we continue processing.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. We may use your electronic mailing address provided in connection with the sale of the Services for direct advertising of our own similar goods and services. You can object to this use at any time without incurring any costs other than the transmission costs according to the basic tariffs. You can inform us about your objection to advertising using the contact details above.

30.8. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement, if you are of the opinion that the processing of personal data concerning you is contrary to violates the GDPR. The supervisory authority to which the complaint was submitted will inform the complainant of the status and results of the complaint, including the possibility of a judicial remedy in accordance with Art. 78 GDPR.

31. Security measures

31.1. We take appropriate technical measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk; The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, distribution, ensuring availability and its separation. We have also set up procedures to ensure that the rights of those affected are exercised, data are deleted and data are at risk. Furthermore, we take the protection of personal data into account when developing or selecting hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 GDPR).

 

31.2. The security measures include, in particular, the encrypted transmission of data between your browser and our server.

32. Changes and Updates to the Privacy Policy

We ask you to regularly inform yourself about the content of our data protection declaration. We will adapt the data protection declaration as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

Version from: 24.10.2023

AI for You

sandro.curati@aiforu.de

©2023 AI for You. www.aiforu.de

22.3 Stack AI
Please note that we can use other platforms to display the virtual AI assistants and chatbot experiences on this website and to provide our services.  StackAI (www.stack-ai.com) is also GDPR compliant, information about this can be found here: https://www.stack-ai.com/blog/gdpr-announcement, and here https://www.stack- ai.com/privacy.
22.4. Airtable
Please note that we can use other platforms to display the virtual AI assistants and chatbot experiences on this website and to provide our services.  Airtable (www.airtable.com) is also GDPR compliant, information about this can be found here: https://support.airtable.com/docs/gdpr-at-airtable.
22.5. Google Cloud
We also use Google Cloud to display our chatbot services, with corresponding enterprise accounts. The Google Cloud Declaration of Conformity for GDPR can be found here: https://cloud.google.com/privacy/gdpr?hl=de
22.6. Twilio
If you use SMS and mobile or voice call notification services through our AI agents and chatbots, Twilio is our partner. Twilio is also GDPR compliant: https://www.twilio.com/de-de/gdpr.
22.7. Manychat
We use Manychat to translate our AI assistants to services such as Whatsapp and Instagram, as well as Facebook Messenger. We have entered into a data processing agreement with Manychat. Manychat processes your data under GDPR as follows: https://manychat.com/legal/privacy, https://manychat.com/legal/dpa.

23 Google Re/Marketing Services

23.1 On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR), we use the marketing and remarketing services ("Google Marketing Services" for short) of Google Ireland Limited (registration no.: 368047), Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Insofar as we obtain consent for use, Art. 6 para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's terminal equipment is carried out in accordance with Section 25 (1) TTDSG. With regard to the use of the data, there is joint responsibility for data processing between Google and us in accordance with Art. 26 GDPR. We have agreed with Google that we assume primary responsibility under the GDPR for the processing of the data and fulfill all obligations under the GDPR with regard to the processing of the data (including Art. 12, 13 GDPR, Art. 15 to 22 GDPR and Art. 32 to 34 GDPR).

23.2 Google Marketing Services allow us to display advertisements for and on our website in a more targeted manner in order to present users only with advertisements that potentially match their interests. If, for example, a user is shown ads for products that they were interested in on other websites, this is referred to as "remarketing". For these purposes, when our and other websites on which Google marketing services are active are accessed, a code from Google is executed directly by Google and so-called (re)marketing tags (invisible graphics or code, also known as "web beacons") are integrated into the website. These are normally used to store an individual cookie, i.e. a small file, on the user's device (comparable technologies can also be used instead of cookies). Cookies can be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com or googleadservices.com. This file normally records which websites the user has visited, which content they are interested in and which offers they have clicked on, as well as technical information about the browser and operating system, referring websites, visiting time and other information about the use of the online offer. However, we have linked Google Analytics (see above) with Google Ads. Google Analytics may then set a "_gac_" cookie. This occurs in particular when you create goals in Google Analytics and then import them into Google Ads as goals ("conversions"). Our Analytics code therefore contains the function 'store_gac': false, which also deactivates this cookie. This means that in the above constellation with imported goals, no cookie is set if you come to our site as a user via Google Ads. The IP address of the user is also recorded, whereby we inform Google Analytics that the IP address is shortened within member states of the European Union or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is it transmitted in full to a Google server in the USA and shortened there. The IP address is not merged with the user's data within other Google offers. Google may also combine the aforementioned information with such information from other sources. If the user subsequently visits other websites, they can be shown ads tailored to their interests.

23.3 User data is processed pseudonymously as part of Google marketing services. This means that Google does not store and process the user's name or email address, for example, but processes the relevant data in relation to cookies within pseudonymous user profiles. This means that, from Google's point of view, the ads are not managed and displayed for a specifically identified person, but for the cookie owner, regardless of who this cookie owner is. We therefore do not set such a cookie. This does not apply if a user has expressly allowed Google to process the data without this pseudonymization. The information collected by Google marketing services about users is transmitted to Google and stored on Google's servers in the USA.

23.4 The Google marketing services we use include the online advertising program "Google Ads":
23.4.1 We use Google Ads to draw attention to our offers with the help of advertisements. If you access our website via a Google ad, Google Ads will store a cookie on your device. The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent.

23.4.2 The advertising material is delivered by Google via so-called "ad servers". For this purpose, we and other websites use so-called ad server cookies, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. We can obtain information about the success of our advertising campaigns via the Google Ads cookies stored on our website. These cookies are not intended to identify you personally. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that a user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

23.4.3 The cookies set by Google enable Google to recognize your internet browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer so that the cookies cannot be tracked via the websites of other Ads customers. By integrating Google Ads, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address.

23.4.4 Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We ourselves do not independently collect personal data in the aforementioned advertising measures, but only provide Google with the opportunity to collect the data. We only receive statistical evaluations from Google, which provide information on which advertisements were clicked on how often and at what prices. We do not receive any further data from the use of the advertising media; in particular, we cannot identify users on the basis of this information.

23.4.5 You can withdraw your consent at any time without this affecting the permissibility of processing up to the time of withdrawal. The easiest way to revoke your consent is via our Consent Manager or via the following functions: a) by setting your browser software accordingly, in particular by suppressing third-party cookies so that you do not receive any ads from third-party providers; b) by setting your browser to block cookies from the domain "www.googleadservices.com", www.google. de/settings/ads, whereby this setting will be deleted when you delete your cookies; c) by deactivating the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign via the link www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers under the link www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this website to their full extent.

23.4.6 Further information on data protection at Google Ireland Limited, Gordon House, Barrow Street Dublin 4, Ireland, can be found here: https://policies.google.com/privacy and services.google.com/sitestats/en.html.

23.5 We can integrate third-party advertisements on the basis of the Google marketing service "DoubleClick". DoubleClick uses cookies that enable Google and its partner websites to place ads based on users' visits to this website or other websites on the Internet.
23.6 The Google marketing services we use also include the online advertising monetization program Google Adsense

We have integrated advertisements from the Google service "Adsense" (Google Ireland Limited, Register No.: 368047, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. The advertisements are identified by the (i) notice "Google Ads" in each advertisement. We have activated the personalized ads in order to show you more interesting advertising that supports the commercial use of our website, increases the value for us and improves the user experience for you. Personalized advertising allows us to reach users via Adsense based on their interests and demographic characteristics (e.g. "sports enthusiasts").

For these purposes, when you visit our website, Google receives the information that you have accessed our website. For this purpose, Google places a web beacon or cookie on your computer. We do not know the full extent of the data processing and the storage period. The data is also transferred to the USA and analyzed there. If you are logged in with a Google account, Adsense can assign the data to your account. If you do not wish this to happen, you must log out before visiting our website.

However, Google may also use other information for this purpose:
- the type of websites you visit and the mobile apps installed on your device;
- Cookies in your browser and settings in your Google account;
 - Websites and apps you have visited;
-  your activities on other devices;
- previous interactions with Google ads or advertising services;
- Your Google Account activity and information.
 

When you click on an Adsense ad, Google processes the user's IP (usage data), whereby the processing is pseudonymized (so-called "advertising ID") by shortening the IP by the last two digits.

For personalized advertising, Google does not link identifiers from cookies or similar technologies with special categories of personal data in accordance with Art. 9 GDPR, such as ethnic origin, religion, sexual orientation or health.

It cannot be ruled out that the above data will be passed on to third parties, authorities or Google partners. This website has also activated Google AdSense ads from third-party providers. The aforementioned data may be transferred to these third-party providers (named at https://support.google.com/dfp_sb/answer/94149).

The legal basis for the processing of your data is Art. 6 para. 1 sentence 1 lit. f) GDPR. Insofar as we obtain consent for use, Art. 6 para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's terminal equipment is carried out in accordance with Section 25 (1) TTDSG.

You can object to or prevent the installation of cookies by Google Adsense in various ways:
- You can prevent cookies in your browser by selecting the "do not accept cookies" setting, which also includes third-party cookies;
- You can deactivate personalized ads on Google directly via the link https://adssettings.google.com, whereby this setting will only remain in effect until you delete your cookies. You can find instructions for deactivating personalized advertising on mobile devices here: https://support.google.com/adsense/troubleshooter/1631343;
- You can deactivate the personalized ads of third-party providers participating in the "About Ads" advertising self-regulation initiative via the link https://optout.aboutads.info for US sites or for EU sites at http://www.youronlinechoices.com/de/praferenzmanagement/, whereby this setting will only remain in effect until you delete all your cookies;
- You can permanently deactivate cookies by using a browser plug-in for Chrome, Firefox or Internet Explorer under the link https://support.google.com/ads/answer/7395996. This deactivation may mean that you will no longer be able to use all the functions of our website to their full extent.
- You can object to cookies by clicking on the "Cookie settings" link at the bottom of our websites.
 

You can find more information on the use of Google cookies in ads and their advertising technologies, storage duration, anonymization, location data, how they work and your rights in Google's privacy policy for advertising at https://policies.google.com/technologies/ads.

23.7 We may also use the "Google Tag Manager" to integrate and manage Google analytics and marketing services on our website.

23.8 For more information about Google's use of data for marketing purposes, please visit the overview page: https://policies.google.com/technologies/ads, the Google Privacy Policy

​

23.8 Further information on the use of data for marketing purposes by Google can be found on the overview page: https://policies.google.com/technologies/ads, Google's privacy policy is available at https://policies.google.com/privacy.

23.9 If you wish to object to interest-based advertising by Google marketing services, you can use the setting and opt-out options provided by Google: https://adssettings.google.com/authenticated.
You can deactivate the personalized ads of third-party providers that participate in the "About Ads" advertising self-regulation initiative via the link https://optout.aboutads.info for US sites or for EU sites at http://www.youronlinechoices.com/de/praferenzmanagement/, whereby this setting only lasts until you delete all your cookies;
    



    
    You can permanently deactivate cookies by using a browser plug-in for Chrome, Firefox or Internet Explorer under the link https://support.google.com/ads/answer/7395996. This deactivation may mean that you will no longer be able to use all the functions of our website to their full extent.
    
    
    You can object to cookies by clicking on the "Cookie settings" link at the bottom of our websites.
    


You can find more information on the use of Google cookies in ads and their advertising technologies, storage duration, anonymization, location data, how they work and your rights in Google's privacy policy for advertising at https://policies.google.com/technologies/ads.

23.7 We may also use the "Google Tag Manager" to integrate and manage Google analytics and marketing services on our website.

23.8 For more information about Google's use of data for marketing purposes, please visit the overview page: https://policies.google.com/technologies/ads, Google's privacy policy is available at https://policies.google.com/privacy.

23.9 If you wish to object to interest-based advertising by Google marketing services, you can use the setting and opt-out options provided by Google: https://adssettings.google.com/authenticated.

24 Facebook buttons

24.1 We use the social network facebook.com, which is operated by Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"), on the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR). Insofar as we obtain consent for use, Art. 6 para. 1 lit. a) GDPR is the legal basis.

24.2 When a user clicks on a Facebook button on our website and is logged into their Facebook account, their device establishes a direct connection with the Facebook servers. User profiles can be created from the processed data. We therefore have no influence on the scope of the data that Facebook collects as a result of the click and therefore inform users according to our level of knowledge.

24.3 By clicking, Facebook receives the information that a user has accessed the corresponding page of the online offer. If the user is logged in to Facebook, Facebook can assign the visit to their Facebook account. For example, if users click the Facebook Like button or leave a comment, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to store their IP address in their Facebook account. If users click the Facebook Like button or leave a comment, for example, the corresponding information is transmitted directly from your device to Facebook and stored there. If a user is not a member of Facebook, it is still possible for Facebook to find out their IP address and store it. According to Facebook, only an anonymized IP address is stored in Germany.

24.4 The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as the relevant rights and setting options for protecting the privacy of users, can be found in Facebook's data protection information: https://www.facebook.com/about/privacy/.

24.5 If a user is a Facebook member and does not want Facebook to collect data about them via this online service and link it to their membership data stored on Facebook, they must log out of Facebook and delete their cookies before using our online service. Further settings and objections to the use of data for advertising purposes are possible within the Facebook profile settings: https://www.facebook.com/settings?tab=ads or via the US site http://www.aboutads.info/choices/ or the EU site http://www.youronlinechoices.com/. The settings are platform-independent, i.e. they are adopted for all devices, such as desktop computers or mobile devices.

 

​

​

 

25. Bing Ads

25.1. We use the conversion and tracking tool “Bing Ads” within our online offering based on our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offering within the meaning of Art. 6 Para. 1 lit. f. GDPR). Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. If we obtain consent for use, Art. 6 Para. 1 lit. a) GDPR is the legal basis. Microsoft stores cookies on users' devices in order to enable an analysis of the use of our online offering by users if users have accessed our online offering via a Microsoft Bing ad (so-called "conversion measurement"). In this way, Microsoft and we can recognize that someone has clicked on an ad, was redirected to our online offering and reached a predetermined target page (so-called “conversion page”). We only find out the total number of users who clicked on a Bing ad and were then redirected to the conversion page. No IP addresses are stored. No personal information about the identity of the users is shared. The storage of and access to information in the end user's device is carried out in accordance with Section 25 Paragraph 1 TTDSG.

25.2. If users do not want to participate in the Bing Ads tracking process, you can also deactivate the required setting of a cookie via your browser setting or use Microsoft's opt-out page: http://choice.microsoft.com/de -DE/opt out.

25.3. Users can find further information about data protection and the cookies used by Microsoft Bing Ads in Microsoft's data protection declaration: https://privacy.microsoft.com/de-de/privacystatement.

26 WIX (Content Management)

26.1 We use the service provider wix, www.wix.com, to create, operate and automate this website, as well as for certain landing pages. Wix uses so-called "cookies", text files that are stored on your computer and that enable your use of the website to be analyzed. Insofar as we obtain consent for use, Art. 6 para. 1 lit. a) GDPR is the legal basis. The storage of and access to information in the end user's terminal equipment is carried out in accordance with § 25 para. 1 TTDSG.

26.2 The concluded order processing contract with Wix can be viewed here. Wix is GDPR compliant and the exact handling of the data can be read here.  The information generated by the cookie about your use of this online offer is stored on a server in the USA. The processed data can be used to create user profiles, whereby these are only used for analysis and not for advertising purposes. Further information can be found in the privacy policy of Wix https://de.wix.com/about/privacy.

27. Newsletters

27.1. With the following information we inform you about the contents of our newsletter as well as the registration, shipping and statistical evaluation procedures as well as your rights to object. By subscribing to our newsletter, you agree to its receipt and the procedures described.

27.2. Content of the newsletter: We only send newsletters, emails and other electronic notifications with promotional information (hereinafter “newsletter”) with the consent of the recipient or legal permission. If the contents are specifically described when registering for the newsletter, they are decisive for the user's consent. Our newsletters also contain information about our products, offers, promotions and our company as well as news we have selected on industry topics.

27.3. Double opt-in and logging: Registration for our newsletter takes place using a so-called double opt-in procedure. This means that after registering you will receive an email asking you to confirm your registration. This confirmation is necessary so that no one can log in with someone else's email address. Registrations for the newsletter are logged in order to be able to provide evidence of the registration process in accordance with legal requirements. This includes storing the registration and confirmation times as well as the IP address. Changes to your data stored by the shipping service provider are also logged.

27.4. Shipping service provider: The newsletter is sent using the previously mentioned service provider Wix. The data protection regulations of this shipping service provider can be found above under “Wix”.

​

27.5. Registration data: To register for the newsletter, it is sufficient to provide your email address. Optionally, we ask you to provide a name so that you can be addressed personally in the newsletter.

27.6. Success measurement: The newsletters can contain a so-called “web beacon”, i.e. a pixel-sized file that is retrieved from the shipping service provider’s server when the newsletter is opened. As part of this retrieval, technical information is initially collected, such as information about the browser and your system, as well as your IP address and the time of retrieval. This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their access locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor that of the shipping service provider to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

27.7. The sending of the newsletter and the measurement of success are based on the consent of the recipient in accordance with Art. 6 Para. 1 Sentence 1 Letter a), Art. 7 GDPR in conjunction with Section 7 Para Permission in accordance with Section 7 Paragraph 3 UWG.

​

27.8. When registering for our AI for You, your declaration of consent according to Art Advertising for offers on the topics of AI, automation and IT, as well as our company. You can revoke this consent at any time, e.g. using the unsubscribe link at the end of the newsletter. Consent, reader analysis, shipping service provider and right of withdrawal are carried out in accordance with the data protection declaration.

27.9. The registration process is logged on the basis of our legitimate interests in accordance with Article 6 Paragraph 1 Sentence 1 Letter f) GDPR and serves to provide proof of consent to receive the newsletter.

10/27 Termination/revocation: You can terminate your receipt of our newsletter at any time, i.e. revoke your consent. You will find a link to unsubscribe from the newsletter at the end of each newsletter. Alternatively, write an email to info@aiforu.de If the users have only registered for the newsletter and canceled this registration, their personal data will be deleted.

28. Web hosting

28.1. We use external providers for web hosting (web host). For the purpose of secure and uninterrupted operation of our online offerings, external providers provide web servers and database servers.

28.2. The web hosts process inventory data, contract data, payment data, meta and communication data from customers, interested parties and users of the online offerings. The legal basis for processing is Article 6 Paragraph 1 Sentence 1 Letter f) GDPR in conjunction with Article 28 GDPR. We have concluded agreements for order processing for this purpose. Our legitimate interest lies in the secure, uninterrupted and efficient operation of our online offerings. These providers currently include Strato, Google,WIX,Microsoft Azure, Voiceflow, Stack AI, Twilio, Airtable.

.

29. integration of third-party services and content

29.1 On the basis of our legitimate interests (i.e. interest in the analysis, optimization and economic operation of our online offer within the meaning of Art. 6 para. 1 sentence 1 lit. f) GDPR), we use content or service offers from third-party providers within our online offer in order to integrate their content and services, such as videos or fonts (hereinafter uniformly referred to as "content"). Insofar as we obtain consent for use, Art. 6 para. 1 lit. a) GDPR is the legal basis. This always presupposes that the third-party providers of this content are aware of the IP address of the user, as they would not be able to send the content to their browser without the IP address. The IP address is therefore required to display this content. We endeavor to only use content whose respective providers only use the IP address to deliver the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as "web beacons") for statistical or marketing purposes. Pixel tags can be used to analyze information such as visitor traffic on the pages of this website. The pseudonymous information may also be stored in cookies on the user's device and may contain, among other things, technical information about the browser and operating system, referring websites, time of visit and other information about the use of our online offer, as well as being linked to such information from other sources.





29.2 The following presentation provides an overview of third-party providers and their content, together with links to their data protection declarations, which contain further information on the processing of data and, in some cases already mentioned here, options for objection (so-called opt-out):





Google Fonts
External fonts from Google Ireland Limited (registration no.: 368047), Gordon House, Barrow Street, Dublin 4, Ireland ("Google") at https://www.google.com/fonts ("Google Fonts"). Google Fonts are integrated from our servers. Google's privacy policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated.





Google Maps
Maps from the "Google Maps" service of the third-party provider Google Ireland Limited (registration no.: 368047), Gordon House, Barrow Street, Dublin 4, Ireland ("Google").   We use the Google Maps service on this website. This allows us to show you interactive maps directly on the website and enables you to use the map function conveniently. The legal basis for the use of the maps is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. When you visit the website, Google receives the information that you have accessed the corresponding subpage of our website. In addition, the above-mentioned basic data such as IP address and timestamp are transmitted. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. The information collected is stored on Google servers, including in the USA. In these cases, the provider has, according to its own information, imposed a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to maintain an appropriate level of data protection in the third country.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and setting options to protect your privacy. Google's privacy policy on this: https://policies.google.com/privacy.

Youtube
Videos from the “YouTube” platform of the third-party provider Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). (1) We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. These are all integrated in “extended data protection mode”, which means that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transmitted. We have no influence on this data transfer. The legal basis for displaying the videos is Article 6 Paragraph 1 Sentence 1 Letter a GDPR, which means that they will only be integrated with your consent. (2) By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the basic data mentioned above such as IP address and timestamp are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not want it to be associated with your YouTube profile, you must log out before activating the button. YouTube saves your data as a usage profile and uses it for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide tailored advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles; to exercise this you must contact YouTube.

​

(3) The information collected is stored on Google servers, also in the USA. For these cases, the provider says it has set itself a standard that corresponds to the former EU-US Privacy Shield and has promised to comply with applicable data protection laws when transferring international data. We have also agreed on so-called standard data protection clauses with Google, the purpose of which is to maintain an appropriate level of data protection in third countries.

(4) Further information on the purpose and scope of data collection and processing by YouTube can be found in the data protection declaration. There you will also find further information about your rights and setting options to protect your privacy: Data protection declaration: https://policies.google.com/privacy.

​

Google ReCaptcha
We integrate the function for detecting bots, e.g. when making entries in online forms (“ReCaptcha”) from the third-party provider Google Ireland Limited (registration number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Data protection declaration: https://www.google.com/policies/privacy/, opt-out: https://adssettings.google.com/authenticated.

​

Instagram
Links to the Instagram service are integrated into our online offering. Instagram is offered by: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA. If you are logged into your Instagram account, you can link the content of our pages to your Instagram profile or share it there by clicking on the Instagram button. This allows Instagram to assign your visit to our pages to your user account. We would like to point out that as the provider of the pages, we have no knowledge of the content of the transmitted data or its use by Instagram. Data protection declaration: http://instagram.com/about/legal/privacy/.

​

LinkedIn
Within our online offering we use links to the LinkedIn network (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA). If you are logged into your LinkedIn account, you can share the content of our pages in your Linkedin account by clicking the Linkedin button. LinkedIn is informed that you have visited our website with your IP address. If you are registered with LinkedIn, it is possible for LinkedIn to assign your interaction with our online offering to your user account. Data protection declaration: https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

​

LinkedIn
Within our online offering we use links to the LinkedIn network (LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA). If you are logged into your LinkedIn account, you can share the content of our pages in your Linkedin account by clicking the Linkedin button. LinkedIn is informed that you have visited our website with your IP address. If you are registered with LinkedIn, it is possible for LinkedIn to assign your interaction with our online offering to your user account. Data protection declaration: https://www.linkedin.com/legal/privacy-policy, opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

​

Twitter
Within our online offering we have included links to the Twitter service (hereinafter referred to as “Twitter”). Twitter is an offering from Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. If you are logged into your Twitter account, you can link the content of our pages to your Twitter profile or share it there by clicking on the Twitter button. We use the following Twitter functions: presentation of our contributions within Twitter within our online offering there, the link to our profile on Twitter and the possibility of interacting with the contributions and the functions of Twitter. Data protection declaration: https://twitter.com/de/privacy, opt-out:

https://twitter.com/personalization.

 

XING
We use links to the XING network. The provider is XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany. Every time you click on the Xing button on one of our pages, a connection is established to Xing servers if you are logged in to your XING account. To our knowledge, personal data is not stored. In particular, no IP addresses are stored or usage behavior is evaluated. Data protection declaration: https://www.xing.com/app/share?op=data_protection.


​​

30. Rechte der betroffenen Person

Werden personenbezogene Daten von Ihnen verarbeitet, sind Sie Betroffener i.S.d. DSGVO und es stehen Ihnen folgende Rechte gegenüber dem Verantwortlichen zu:

30.1. Auskunftsrecht

Sie können von dem Verantwortlichen eine Bestätigung darüber verlangen, ob personenbezogene Daten, die Sie betreffen, von uns verarbeitet werden. Liegt eine solche Verarbeitung vor, können Sie von dem Verantwortlichen über folgende Informationen Auskunft verlangen:

  • die Zwecke, zu denen die personenbezogenen Daten verarbeitet werden;

  • die Kategorien von personenbezogenen Daten, welche verarbeitet werden;

  • die Empfänger bzw. die Kategorien von Empfängern, gegenüber denen die Sie betreffenden personenbezogenen Daten offengelegt wurden oder noch offengelegt werden;

  • die geplante Dauer der Speicherung der Sie betreffenden personenbezogenen Daten oder, falls konkrete Angaben hierzu nicht möglich sind, Kriterien für die Festlegung der Speicherdauer;

Ihnen steht das Recht zu, Auskunft darüber zu verlangen, ob die Sie betreffenden personenbezogenen Daten in ein Drittland oder an eine internationale Organisation übermittelt werden. In diesem Zusammenhang können Sie verlangen, über die geeigneten Garantien gem. Art. 46 DSGVO im Zusammenhang mit der Übermittlung unterrichtet zu werden.

30.2. Recht auf Berichtigung

Sie haben ein Recht auf Berichtigung und/oder Vervollständigung gegenüber dem Verantwortlichen, sofern die verarbeiteten personenbezogenen Daten, die Sie betreffen, unrichtig oder unvollständig sind. Der Verantwortliche hat die Berichtigung unverzüglich vorzunehmen.

30.3. Recht auf Einschränkung der Verarbeitung

Unter den folgenden Voraussetzungen können Sie die Einschränkung der Verarbeitung der Sie betreffenden personenbezogenen Daten verlangen:

  • wenn Sie die Richtigkeit der Sie betreffenden personenbezogenen für eine Dauer bestreiten, die es dem Verantwortlichen ermöglicht, die Richtigkeit der personenbezogenen Daten zu überprüfen;

  • die Verarbeitung unrechtmäßig ist und Sie die Löschung der personenbezogenen Daten ablehnen und stattdessen die Einschränkung der Nutzung der personenbezogenen Daten verlangen;

  • der Verantwortliche die personenbezogenen Daten für die Zwecke der Verarbeitung nicht länger benötigt, Sie diese jedoch zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen benötigen, oder

  • wenn Sie Widerspruch gegen die Verarbeitung gemäß Art. 21 Abs. 1 DSGVO eingelegt haben und noch nicht feststeht, ob die berechtigten Gründe des Verantwortlichen gegenüber Ihren Gründen überwiegen.

Wurde die Verarbeitung der Sie betreffenden personenbezogenen Daten eingeschränkt, dürfen diese Daten – von ihrer Speicherung abgesehen – nur mit Ihrer Einwilligung oder zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen oder zum Schutz der Rechte einer anderen natürlichen oder juristischen Person oder aus Gründen eines wichtigen öffentlichen Interesses der Union oder eines Mitgliedstaats verarbeitet werden. Wurde die Einschränkung der Verarbeitung nach den o.g. Voraussetzungen eingeschränkt, werden Sie von dem Verantwortlichen unterrichtet bevor die Einschränkung aufgehoben wird.

30.4. Recht auf Löschung

30.4.1. Sie können von dem Verantwortlichen verlangen, dass die Sie betreffenden personenbezogenen Daten unverzüglich gelöscht werden, und der Verantwortliche ist verpflichtet, diese Daten unverzüglich zu löschen, sofern einer der folgenden Gründe zutrifft:

  • Die Sie betreffenden personenbezogenen Daten sind für die Zwecke, für die sie erhoben oder auf sonstige Weise verarbeitet wurden, nicht mehr notwendig.

  • Sie widerrufen Ihre Einwilligung, auf die sich die Verarbeitung gem. Art. 6 Abs. 1 S. 1 lit. a) oder Art. 9 Abs. 2 lit. a) DSGVO stützte, und es fehlt an einer anderweitigen Rechtsgrundlage für die Verarbeitung.

  • Sie legen gem. Art. 21 Abs. 1 DSGVO Widerspruch gegen die Verarbeitung ein und es liegen keine vorrangigen berechtigten Gründe für die Verarbeitung vor, oder Sie legen gem. Art. 21 Abs. 2 DSGVO Widerspruch gegen die Verarbeitung ein.

  • Die Sie betreffenden personenbezogenen Daten wurden unrechtmäßig verarbeitet.

  • Die Löschung der Sie betreffenden personenbezogenen Daten ist zur Erfüllung einer rechtlichen Verpflichtung nach dem Unionsrecht oder dem Recht der Mitgliedstaaten erforderlich, dem der Verantwortliche unterliegt.

  • Die Sie betreffenden personenbezogenen Daten wurden in Bezug auf angebotene Dienste der Informationsgesellschaft gemäß Art. 8 Abs. 1 DSGVO erhoben.

30.4.2. Hat der Verantwortliche die Sie betreffenden personenbezogenen Daten öffentlich gemacht und ist er gem. Art. 17 Abs. 1 DSGVO zu deren Löschung verpflichtet, so trifft er unter Berücksichtigung der verfügbaren Technologie und der Implementierungskosten angemessene Maßnahmen, auch technischer Art, um für die Datenverarbeitung Verantwortliche, die die personenbezogenen Daten verarbeiten, darüber zu informieren, dass Sie als betroffene Person von ihnen die Löschung aller Links zu diesen personenbezogenen Daten oder von Kopien oder Replikationen dieser personenbezogenen Daten verlangt haben.

30.4.3. Das Recht auf Löschung besteht nicht, soweit die Verarbeitung erforderlich ist

  • zur Ausübung des Rechts auf freie Meinungsäußerung und Information;

  • zur Erfüllung einer rechtlichen Verpflichtung, die die Verarbeitung nach dem Recht der Union oder der Mitgliedstaaten, dem der Verantwortliche unterliegt, erfordert, oder zur Wahrnehmung einer Aufgabe, die im öffentlichen Interesse liegt oder in Ausübung öffentlicher Gewalt erfolgt, die dem Verantwortlichen übertragen wurde;

  • aus Gründen des öffentlichen Interesses im Bereich der öffentlichen Gesundheit gemäß Art. 9 Abs. 2 lit. h und i sowie Art. 9 Abs. 3 DSGVO;

  • für im öffentlichen Interesse liegende Archivzwecke, wissenschaftliche oder historische Forschungszwecke oder für statistische Zwecke gem. Art. 89 Abs. 1 DSGVO, soweit das unter Abschnitt a) genannte Recht voraussichtlich die Verwirklichung der Ziele dieser Verarbeitung unmöglich macht oder ernsthaft beeinträchtigt, oder

  • zur Geltendmachung, Ausübung oder Verteidigung von Rechtsansprüchen.

30.5. Recht auf Unterrichtung

Haben Sie das Recht auf Berichtigung, Löschung oder Einschränkung der Verarbeitung gegenüber dem Verantwortlichen geltend gemacht, ist dieser verpflichtet, allen Empfängern, denen die Sie betreffenden personenbezogenen Daten offengelegt wurden, diese Berichtigung oder Löschung der Daten oder Einschränkung der Verarbeitung mitzuteilen, es sei denn, dies erweist sich als unmöglich oder ist mit einem unverhältnismäßigen Aufwand verbunden. Ihnen steht gegenüber dem Verantwortlichen das Recht zu, über diese Empfänger unterrichtet zu werden.

30.6. Recht auf Datenübertragbarkeit

Sie haben das Recht, die Sie betreffenden personenbezogenen Daten, die Sie dem Verantwortlichen bereitgestellt haben, in einem strukturierten, gängigen und maschinenlesbaren Format zu erhalten. Außerdem haben Sie das Recht diese Daten einem anderen Verantwortlichen ohne Behinderung durch den Verantwortlichen, dem die personenbezogenen Daten bereitgestellt wurden, zu übermitteln, sofern

  • die Verarbeitung auf einer Einwilligung gem. Art. 6 Abs. 1 S. 1 lit. a) DSGVO oder Art. 9 Abs. 2 lit. a DSGVO oder auf einem Vertrag gem. Art. 6 Abs. 1 S. 1 lit. b) DSGVO beruht und

  • die Verarbeitung mithilfe automatisierter Verfahren erfolgt.

In Ausübung dieses Rechts haben Sie ferner das Recht, zu erwirken, dass die Sie betreffenden personenbezogenen Daten direkt von einem Verantwortlichen einem anderen Verantwortlichen übermittelt werden, soweit dies technisch machbar ist. Freiheiten und Rechte anderer Personen dürfen hierdurch nicht beeinträchtigt werden. Das Recht auf Datenübertragbarkeit gilt nicht für eine Verarbeitung personenbezogener Daten, die für die Wahrnehmung einer Aufgabe erforderlich ist, die im öffentlichen Interesse liegt oder in Ausübung öffentlicher Gewalt erfolgt, die dem Verantwortlichen übertragen wurde.

30.7. Recht auf Widerspruch oder Widerruf gegen die Verarbeitung Ihrer Daten

Falls Sie eine Einwilligung zur Verarbeitung Ihrer Daten (Art. 6 Abs. 1 S. 1 lit. a) bzw. Art. 9 Abs. 2 lit. a) DSGVO) erteilt haben, können Sie diese jederzeit gemäß Art. 7 Abs. 3 DSGVO widerrufen. Ein solcher Widerruf beeinflusst die Zulässigkeit der Verarbeitung Ihrer personenbezogenen Daten, nachdem Sie ihn gegenüber uns ausgesprochen haben.

Soweit wir die Verarbeitung Ihrer personenbezogenen Daten auf die Interessenabwägung stützen (Art. 6 Abs. 1 S. 1 lit. f) DSGVO), können Sie Widerspruch gegen die Verarbeitung einlegen. Dies ist der Fall, wenn die Verarbeitung insbesondere nicht zur Erfüllung eines Vertrags mit Ihnen erforderlich ist, was von uns jeweils bei der nachfolgenden Beschreibung der Funktionen dargestellt wird. Bei Ausübung eines solchen Widerspruchs bitten wir um Darlegung der Gründe, weshalb wir Ihre personenbezogenen Daten nicht wie von uns durchgeführt verarbeiten sollten. Im Falle Ihres begründeten Widerspruchs prüfen wir die Sachlage und werden entweder die Datenverarbeitung einstellen bzw. anpassen oder Ihnen unsere zwingenden schutzwürdigen Gründe aufzeigen, aufgrund derer wir die Verarbeitung fortführen.

Selbstverständlich können Sie der Verarbeitung Ihrer personenbezogenen Daten für Zwecke der Werbung und Datenanalyse jederzeit widersprechen. Ihre im Zusammenhang mit dem Verkauf der Dienstleistungen angegebene elektronische Postadresse können wir zur Direktwerbung für eigene ähnliche Waren und Dienstleistungen verwenden. Sie können dieser Verwendung jederzeit widersprechen kann, ohne dass hierfür andere als die Übermittlungskosten nach den Basistarifen entstehen. Über Ihren Werbewiderspruch können Sie uns unter den obigen Kontaktdaten informieren.

30.8. Recht auf Beschwerde bei einer Aufsichtsbehörde

Unbeschadet eines anderweitigen verwaltungsrechtlichen oder gerichtlichen Rechtsbehelfs steht Ihnen das Recht auf Beschwerde bei einer Aufsichtsbehörde, insbesondere in dem Mitgliedstaat ihres Aufenthaltsorts, ihres Arbeitsplatzes oder des Orts des mutmaßlichen Verstoßes, zu, wenn Sie der Ansicht sind, dass die Verarbeitung der Sie betreffenden personenbezogenen Daten gegen die DSGVO verstößt. Die Aufsichtsbehörde, bei der die Beschwerde eingereicht wurde, unterrichtet den Beschwerdeführer über den Stand und die Ergebnisse der Beschwerde einschließlich der Möglichkeit eines gerichtlichen Rechtsbehelfs nach Art. 78 DSGVO.

31. Safety measures

31.1. We take appropriate technical measures in accordance with Art. 32 GDPR, taking into account the state of the art, the implementation costs and the type, scope, circumstances and purposes of the processing as well as the different probability of occurrence and severity of the risk for the rights and freedoms of natural persons and organizational measures to ensure a level of protection appropriate to the risk; The measures include, in particular, ensuring the confidentiality, integrity and availability of data by controlling physical access to the data, as well as the access, input, distribution, ensuring availability and its separation. We have also set up procedures to ensure that the rights of those affected are exercised, data are deleted and data are at risk. Furthermore, we take the protection of personal data into account when developing or selecting hardware, software and processes, in accordance with the principle of data protection through technology design and through data protection-friendly default settings (Art. 25 GDPR).

 31.2. The security measures include, in particular, the encrypted transmission of data between your browser and our server.

32. Changes and Updates to the Privacy Policy

We ask you to regularly inform yourself about the content of our data protection declaration. We will adapt the data protection declaration as soon as changes to the data processing we carry out make this necessary. We will inform you as soon as the changes require your cooperation (e.g. consent) or other individual notification.

As of: February 24, 2024

bottom of page