PRIVACY STATEMENT
Palette CAD AG
Behlesstraße 9-11
70329 Stuttgart
Phone +49 711 9595-0
Fax +49 711 9595-250
Trade Register Stuttgart 785686
VAT ID No. DE 178416603
Tax no. 99077/00922
SEPA Creditor Identifier:
DE18ZZZ00000533921
Executive Board: Volker Zeller (Chairman), Dirk Böckstiegel, Elvis Grabic, Frank Kobs
Chairman of the Supervisory Board: Dr.-Ing. Walter Zinser
1. Types of data we collect
We collect the following categories of data:
- Login information you enter when setting up your account, including your first and last name, country of residence, sex, date of birth, email address, user name and password.
- Transaction data you send to us when you request information or purchase goods or services from us, whether on our websites or via our applications, including your postal address, telephone number and payment details.
- Data you provide in public forums on our websites and applications.
- Information sent from one person to another or within a restricted group in our messaging, chat, posting or other services with similar functionality, inasmuch as is required for the provision of the respective service or as you have given your consent for us to collect the data.
- Data you send to us when you use our websites and applications, use our applications on third-party websites or platforms such as social media network websites, or link your profile on a website or third-party platform to your account.
- Location data when you visit our websites or applications, including location data supplied when using mobile devices when interacting with any of our websites or applications or data linked to your IP address, inasmuch as is required for the provision of the respective service or as you have given your consent for us to process the information.
- Use and access to pages and the technical data, including your device ID and your IP address, when you visit our websites, use our applications on third-party websites or platforms, or open emails from us.
2. How we collect your data
We collect data from you when you request products, services or information from us, log in to our services, participate in public forums or engage in other activities on our websites or applications, answer our customer surveys, or otherwise interact with us. Please be aware that when you send us data via a third-party website or platform (e.g. using our applications), the data you send may be collected separately by the third-party website or platform. The data we collect are subject to this Privacy Statement, and the data on the third-party websites and platforms are subject to the privacy policies of those websites and platforms. Privacy settings you have configured on the third-party websites and platforms do not apply to our use of data that we collect directly through our applications.
We collect data using technology such as cookies, including when you visit our websites and applications or use our applications on third-party websites or platforms.
3. How Palette CAD AG uses your data
Palette CAD, which operates the website or application you use, is responsible for your data. No other companies will have access to your personal data without your consent.
Your data will be used in accordance with the applicable laws and the restrictions and options available to you:
- To send you offers and advertisements for our products and services, and those of third parties.
- To adapt the content and accessibility of our websites and applications.
- To optimise and improve our products, services and processes.
- To uncover, investigate and prevent activity which violates our policies or is illegal.
4. Sending your data to other companies
Palette CAD AG and its partners are the only companies that will use your personal data.
5. The restrictions and options available to you
There are certain restrictions and options available to you with regard to how we collect and use your data. In accordance with the applicable laws in your country or region, the restrictions and options available to you include the following:
- You can correct your login details and update and delete your account.
- You can change your preferences for subscriptions, the Newsletter and messages.
- You can choose whether you want to receive offers relating to our products and services and whether you want to hear about products and services we think you may be interested in, as well as advertising for them.
6. Data security and integrity
The security, integrity and confidentiality of your data are our highest priority. We have implemented technological, administrative and physical security measures in order to protect our visitors’ data from access, disclosure, use and alteration by unauthorised persons. We periodically review our security measures to consider whether new technologies and methods may be of benefit. Please be aware that, despite all our efforts, no security measures are perfect or completely impenetrable.
7. Data transfer, storage and processing around the world
Wherever we transfer, store or process your personal data, we will take appropriate steps to protect them.
8. Changes to this Privacy Statement
From time to time we may change this Privacy Statement in order to keep it up to date with new technologies, general practice in the sector or legal requirements, or for other purposes. If this is necessary, we will inform you of the changes we make. If the applicable laws require it, we will request your consent before making the changes.
9. Palette CAD AG Privacy Statement for Job Applications
(in accordance with Art. 13 GDPR)
By submitting your application, you give us your consent to process your personal data for the purposes of the application process.
Initially, your data will be processed solely in order to process your application. If we are unable to offer you employment at the present time, we will process your data for up to a further six months after we inform you we have rejected your application.
If you are due to receive reimbursement of costs, or if tax-relevant transactions are involved, the corresponding accounting records will be stored until no later than 31 March of the eleventh calendar year after the transaction, in order to comply with budgetary and tax retention obligations.
Initially, our Human Resources department, the executive board and the relevant specialist department for the job you have applied for will have access to your data.
The legal basis for processing the data as part of an application process and as part of personnel documentation is Section 26 Paragraph 1 Sentence 1 of the German Federal Data Protection Act and Article 6 (1) Subsection 1 lit. b of the General Data Protection Regulation.
10. Comments and Questions
If you have any comments or questions about this Privacy Statement, please contact info@palettecad.com.
11. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Inc. (“Google”). Google Analytics uses cookies, which are text files placed on your computer to enable analysis of how you use the website. The information generated by the cookie about your use of the website will usually be transmitted to and stored by Google on a server in the United States. If IP anonymisation is enabled on this website, however, your IP address will be shortened by Google within European Union Member States or in other States party to the Agreement on the European Economic Area. Only in exceptional cases will your full IP address be sent to a Google server in the USA and shortened there. Google will use this information on behalf of the operator of the website to evaluate your use of the website, compile reports on website activity and provide other services related to website usage and internet usage for the website operator. Google will not combine the IP address sent by your browser while using Google Analytics with other data. You can prevent the storage of cookies by configuring your browser software; however, please note that this may restrict the functionality of this website. You can also prevent collection and processing of the data generated by the cookie relating to your use of the website (including your IP address) by Google by downloading and installing the browser plug-in available at tools.google.com/dlpage/gaoptout about Google Analytics and Google’s privacy policy, visit https://policies.google.com/privacy . Please be aware that on this website Google Analytics has been expanded using the code “gat._anonymizeIp();” in order to guarantee anonymised collected of IP addresses (IP masking).
12. Use of YouTube videos
We have embedded videos into our website from YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066, USA (“YouTube”), which are stored on www.youtube.com and can be viewed on our website. We have embedded these videos in “privacy-enhanced mode”, which means that when you visit our website without viewing a YouTube video embedded there, no personal data are sent to YouTube. Only if you view a video will data be sent to YouTube. We have no influence on the sending these data. For more information about the purpose and scope of data collection by YouTube, about how YouTube processes and uses your data, and about your rights and options for protecting your data privacy, please see YouTube’s privacy policy, which can be found athttps://policies.google.com/privacy.
13. Google Tag Manager
For transparency reasons, we would like to inform you that we use the Google Tag Manager provided by Google Ireland Limited (Registration Number: 368047), Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager itself does not collect any personal data. It facilitates the integration and management of our tags. Tags are small code elements that, among other things, measure traffic and visitor behavior, capture the impact of online advertising and social channels, set up remarketing and audience targeting, and test and optimize websites. We use the Tag Manager for the Google Analytics service. If you have opted for deactivation, this deactivation will be taken into account by the Google Tag Manager. For further information on the Google Tag Manager, please refer to: Google Tag Manager Use Policy: https://www.google.com/intl/de/tagmanager/use-policy.html .
14. Google reCAPTCHA
We use "Google reCAPTCHA" (hereinafter referred to as "reCAPTCHA") on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
ReCAPTCHA is used to verify whether data input on our websites (e.g., in a contact form) is done by a human or by an automated program. To achieve this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the site. For analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of the website visitor's stay on the site, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not informed that an analysis is taking place.
Data processing is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting their web offerings from abusive automated espionage and SPAM.
For more information on Google reCAPTCHA and Google's privacy policy, please refer to the following links: Google Privacy Policy and https://www.google.com/recaptcha/intro/android.html.
15. Google Forms
We use the Google Forms form service. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
To utilize the features of Google Forms, it is necessary to store the provided data. This information is typically transferred to a Google server in the United States and stored there. The provider of this page has no influence on this data transmission.
The use of Google Forms is in the interest of presenting our online offerings attractively and facilitating the easy processing of the provided data. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.
For more information on how user data is handled, please refer to Google's privacy policy: Google Privacy Policy: https://www.google.de/intl/de/policies/privacy/
16. Google Ads, Remarketing und Conversion-Tracking
We use the Google Ads service, an online advertising program provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The responsible entity for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
This means that we display Google Ads and, as part of this, utilize Google Remarketing and Conversion Tracking. Ads are displayed based on search queries on websites within the Google advertising network. Additionally, we use Ads Remarketing lists for search ads, allowing us to tailor search ad campaigns for users who have previously visited our website. Through these services, we have the ability to combine our ads with specific search terms or display ads to previous visitors promoting services they viewed on our website. Consequently, we can show users of our website interest-based advertising on other websites within the Google advertising network (as a "Google Ad" in the context of Google Search or on other websites).
For interest-based offerings, an analysis of online user behavior is necessary. Google uses cookies to conduct this analysis. When a user clicks on an ad or visits our website, Google sets a cookie on the user's computer. These cookies have a lifespan of 90 days. The information collected via the respective cookies is used to specifically address the visitor in later search queries. Further information on the cookie technology used can be found in Google's notes on website statistics and in their privacy policy.
Through this technology, Google and we as the customer receive information that a user clicked on an ad and was redirected to our websites. The information obtained is solely used for statistical analysis to optimize advertising. We do not receive information that allows us to personally identify visitors. Your IP address is transmitted to Google; however, as we use Google Analytics on this website with Google's IP masking, your IP address is anonymized.
The log data is anonymized after 9 months, and cookie information is anonymized after 18 months.
The statistics provided by Google include the total number of users who clicked on one of our ads and, if applicable, whether they were redirected to a page on our website with a conversion tag. Using these statistics, we can understand which search terms often lead to clicks on our ad and which ads result in user contact through the contact form.
For more information on privacy with Google Ads, please visit: Google Ads Privacy Policy.
https://policies.google.com/technologies/ads?hl=en
To ensure a secure level of data protection when processing data outside the EU/EEA, we have entered into Standard Data Protection Clauses adopted by the EU Commission according to Art. 46 GDPR with the service provider. These clauses, in individual cases, allow the transfer of personal data to a third country.
The legal basis for the described data processing is your consent, Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by changing your selection in the cookie settings (see above, section 5. Cookies). Alternatively, you can delete your cookies (all or only from this website). The banner with the selection options will then be displayed again.
You also have the option to select the types of Google ads or disable interest-based ads on Google through the ad settings (https://adssettings.google.com/authenticated?hl=en )
17. Facebook Custom Audience/ Conversion Tracking Pixel
We have linked Facebook on our website. Facebook is a social network owned by Meta Platforms Inc (formerly facebook Inc), 1 Hacker Way, Menlo Park, CA 94025, United States. We host Facebook from its subsidiary Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
We use Facebook for advertising and information of our company. Personal data is collected by Facebook as soon as you access our Facebook page. We have no influence on the scope of the data that Facebook collects.
We cannot rule out the possibility that personal data is transmitted to Facebook when you enter the website. Personal data is collected by Facebook at the latest when you enter our Facebook page. Likewise, we cannot exclude that Facebook transmits the information to a server in a third country.
The responsibility of the personal data collected on the Facebook page lies entirely with Facebook.
For more information about Facebook's privacy policies, please visit https://www.facebook.com/policy.php/.
We have entered into standard contractual clauses with Meta to protect your data in the best possible way. However, for analytics purposes, Meta may share your data with third-party service providers who also have corresponding contracts with Meta.
Please note that this service may transfer the collected data to another country. This country may also be outside of the European Union and the European Economic Area and thus may not provide an adequate level of data protection. Should the data be transferred to the United States of America, there is a risk that your data may be accessed and processed by the US authorities for control and monitoring purposes. In this case, you will not have any legal recourse that you can use to protect your data.
We would like to inform you once again at this point that in addition to the data described above that the meta services collect, any data stored by you that is stored in your Facebook account is also collected when you enter our website with a logged-in Facebook account. We have no influence on the data that is collected at this point. Furthermore, you can also log out of your account so that no further data is collected from you by Facebook.
18. Instagram
We have linked to Instagram on our website. Instagram is a social network of Meta Platform Inc (formerly facebook Inc), 1 Hacker Way, Menlo Park, CA 94025, United States of America.
We use Instagram for advertising and information of our company. Personal data is collected by Instagram as soon as you access our Instagram page. We have no influence on the scope of the data that Instagram collects.
We cannot exclude that personal data is transmitted to Instagram when you enter the website. At the latest when entering our Instagram page, personal data is collected by Instagram. Likewise, we cannot exclude that Instagram transmits the information to a server in a third country.
The responsibility of the personal data collected on the Instagram page lies entirely with Instagram.
For more information on Instagram's privacy policy, please visit https://www.instagram.com/about/legal/privacy/before-january-19-2013/.
We have entered into Standard Contractual Clauses with Meta to best protect your data. However, for analytics purposes, Meta may share your data with third-party service providers who also have corresponding contracts with Meta.
Please note that this service may transfer the collected data to another country. This country may also be outside of the European Union and the European Economic Area and thus may not provide an adequate level of data protection. Should the data be transferred to the United States of America, there is a risk that your data may be accessed and processed by the US authorities for control and monitoring purposes. In this case, you have no legal recourse that you can use to protect your data.
We would like to inform you once again at this point that in addition to the data described above that the meta services collect, any data stored by you that is stored in your Instagram account is also collected when you enter our website with a logged-in Instagram account. We have no influence on the data that is collected at this point.
Furthermore, you can also log out of your account so that no further data is collected from you by Instagram.
19. LinkedIn
On our website, we have linked to our LinkedIn page. LinkedIn is a web-based social network owned by LinkedIn, 1000 W Maude, Sunnywale, CA 94085, United States of America. We are registered for the extension LinkedIn Germany, Sendlinger Straße 12, 80331 Munich, Germany. LinekdIn is linked via the white "in" on our website.
We use LinkedIn for advertising, information and recruiting for our company. Personal data is collected by LinkedIn as soon as you access our LinkedIn page. We have no influence on the scope of the data that LinkedIn collects.
We cannot rule out the possibility that personal data may be transmitted to LinkedIn when you enter the website. Personal data is collected by LinkedIn at the latest when you enter our LinkedIn page. Likewise, we cannot exclude that LinkedIn transmits the information to a server in a third country.
The provision of personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are also not obliged to provide the personal data. However, failure to provide it would mean that you would not be able to use our website or would not be able to use it to its full extent.
We have concluded standard contractual clauses with LinkedIn to protect your data as best as possible. However, for analysis purposes, LinkedIn may share your data with third-party providers who also have corresponding contracts with LinkedIn.
For more information on LinkedIn's privacy policy, please visit https://www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy
Please note that this service may transfer the collected data to another country. This country may also be outside the European Union and the European Economic Area and therefore may not provide an adequate level of data protection. Should the data be transferred to the United States of America, there is a risk that your data may be accessed and processed by the US authorities for control and monitoring purposes. In this case, you will not have any legal remedies that you can use to protect your data.
We would like to inform you once again at this point that in addition to the data described above that is collected by LinkedIn, any data stored by you that is stored in your LinkedIn account is also collected when you enter our website with a logged-in LinkedIn account. We have no influence on the data that is collected at this point.
Furthermore, you can also log out of your account so that no further data is collected from you by LinkedIn.
20. Microsoft Dynamics CRM
We use the Microsoft Dynamics 365 CRM system provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA) – hereinafter referred to as Microsoft – as a cloud service, meaning that data is processed in Microsoft data centers.
We use your data solely for the technical handling of inquiries and do not disclose the data to third parties. Specifically, we use the system to manage customers and leads, facilitating the quicker and more efficient processing of user inquiries. The use of the system is based on our legitimate interest according to Art. 6 para. 1 lit. f GDPR.
For further privacy information, please refer to the Microsoft Privacy Statement at
https://privacy.microsoft.com/en-gb/privacy
21. Personio
On our website, there is a job application form that can be used for electronic applications. For the provision of the application form, we use the recruiting platform of the personnel and applicant management software "Personio," provided by the service provider Personio GmbH, Rundfunkplatz 4, 80335, Munich, Germany.
When an applicant utilizes this option, the data entered in the input mask is transmitted to Personio and stored. For further information, please refer to the privacy policy of Personio:
https://www.personio.com/privacy-policy/
If an applicant avails of this opportunity, the data entered in the input mask will be transmitted and stored by us. This data includes:
- First name
- Last name
- Telephone/Mobile number
- Email address
- Salary expectations
- Resume
- Certificates
- Cover letter
- Channel of awareness
- Other personal data voluntarily communicated during the application process
Alternatively, you can also send us your application via email. In that case, we will capture your email address and the data you provide in the email.
Upon sending your application, you will receive a confirmation of the receipt of your application documents by email from us.
The data will be used exclusively for the processing of your application.
22. Microsoft Azure
To optimize the loading times of our online offering, we use the Azure Content Delivery Network (CDN) service. The providers are Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, and Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18 D18, Ireland.
The CDN helps to deliver the content of our online offering, especially large media files such as graphics, page content, or scripts, more quickly by utilizing a network of geographically distributed servers, thereby reducing loading times.
The use of the CDN service is based on our predominant legitimate interest in accordance with Art. 6 para. 1 lit. f GDPR for an efficient provision of our online offering.
As part of this processing, personal data is transferred to the USA. The transfer is based on European standard contractual clauses, in which Microsoft commits to complying with European data protection laws for the services it provides.
For more information on data protection related to the CDN service provided by Microsoft, please refer to:
https://azure.microsoft.com/en-us/support/legal/
You can access Microsoft's privacy policy here:
https://privacy.microsoft.com/en-us/privacystatement
23. CleverReach
If you wish to subscribe to the newsletter offered on the website, we require your email address and information that allows us to verify that you are the owner of the specified email address and agree to receive the newsletter. No further data is collected, or it is collected only on a voluntary basis. We use newsletter service providers to manage the newsletter, and they are described below.
This website uses CleverReach for the newsletter dispatch. The provider is CleverReach GmbH & Co. KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter "CleverReach"). CleverReach is a service that enables the organization and analysis of newsletter delivery. The data you enter for newsletter subscription (e.g., email address) is stored on CleverReach servers in Germany or Ireland.
The newsletters sent through CleverReach allow us to analyze the behavior of newsletter recipients. This analysis may include, for example, how many recipients opened the newsletter and how often each link in the newsletter was clicked. Additionally, the so-called conversion tracking allows us to analyze whether, after clicking a link in the newsletter, a pre-defined action (e.g., purchasing a product on this website) occurred. For more information on data analysis through CleverReach newsletters, please visit:
https://www.cleverreach.com/en-de/newsletter-tool/newsletter-reporting/
The data processing is based on your consent (Art. 6 para. 1 lit. a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing carried out before the revocation remains unaffected.
If you do not wish to undergo analysis by CleverReach, you need to unsubscribe from the newsletter. In each newsletter message, we provide a corresponding link for this purpose.
The data you provided to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter. After unsubscribing from the newsletter, your data will be deleted from the newsletter distribution list. Data that has been stored for other purposes remains unaffected.
After you have unsubscribed from the newsletter distribution list, your email address may be stored by us or the newsletter service provider in a blacklist if this is necessary to prevent future mailings. The data from the blacklist is used only for this purpose and is not merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is not limited in time. You can object to this storage if your interests outweigh our legitimate interest.
For more details, please refer to CleverReach's privacy policy at:
https://www.cleverreach.com/en-de/privacy-policy/
24. Coachy
We use the online platform "Coachy" to provide videos and materials in the context of our online and blended-learning consultant training courses. In the course of these activities, personal data of both instructors and participants are processed.
Legal Basis:
The use of the online platform "Coachy" is based on your consent. The legal basis for the processing of personal data is thus Art. 6 para. 1(a) GDPR.
Categories of Personal Data:
When participating in an online seminar, the following categories of personal data may be subject to processing:
- First name and last name
- Email address
- Registration data
- Device information
- Usage data
Recipient (Data Processor):
Coachy OOD
104 Simeonovsko shose Blvd
1700 Sofia, Bulgaria
Email: support@coachy.net
Phone: +49 2689-9898882
Data Processing Agreement:
We have concluded a Data Processing Agreement (DPA) with the above-mentioned provider. This is a legally required contract that ensures that the personal data of our website visitors is processed only according to our instructions and in compliance with the GDPR.
Transfer to Third Countries:
No personal data is transferred to third countries when using Coachy.
Automated Decision-Making:
No automated decision-making takes place.
Storage Duration / Deletion Periods:
Personal data is deleted or anonymized three months after the completion of the training course if the purpose has been fulfilled and there are no legal retention periods.
Purpose of Processing Font:
On the Coachy website, fonts are loaded from an external server using the IP address of website visitors. This is done to achieve an appropriate design of the responsible party's website.
Please note that this is a general translation, and it's advisable to have legal documents reviewed by a professional translator or legal expert to ensure accuracy and compliance with local regulations.
25. Digistore24
We produce online courses and digital products, offering them for purchase using the Digistore24 service. When you click on the purchase button for one of our digital products, you leave our website and are redirected to our individually set up Digistore purchase page.
Digistore24 is a service provided by:
Digistore24 GmbH
St.-Godehard-Straße 32
31139 Hildesheim
Imprint: https://www.digistore24.com/page/imprint
All functions on the purchase pages, as well as the entire associated payment processing, are handled by Digistore24. Therefore, when you proceed with the purchase process, Digistore24's privacy policy applies. You can view Digistore24's privacy policy here https://www.digistore24.com/page/privacy.
We have created a separate privacy policy for our sales webpage on Digistore, which you should also consider.
Digistore24 is not a data processor but sells our products and handles the entire payment processing and product delivery. Therefore, there was no need to conclude a data processing agreement. In its own privacy policy, Digistore24 has assured that it will treat the personal data of our customers in compliance with data protection laws and other applicable regulations.
The legal basis for processing personal data when redirecting from our website to the sales page via Digistore is Art. 6 para. 1 sentence 1 lit. b) GDPR.
26. edoobox
On this website, we use the software solution "edoobox" provided by Etzensperger Informatik AG, Kirchweg 24, CH-3366 Bettenhausen, for event bookings. The booking system allows interested parties to directly and easily register for our courses, seminars, and events. The system efficiently manages and organizes bookings. The legal basis for using edoobox is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest stems from the mentioned purposes.
When making a booking, the following personal data is collected:
- Salutation
- First name, Last name
- Address data (Street, ZIP code, City, Country)
- Contact details (Phone, Email)
- Company (optional)
- Expert group (only for employees of Carpus+Partner AG)
- Payment information
Providing this personal data is necessary for the organization and execution of the event. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b) GDPR for the fulfillment of contractual/pre-contractual measures. Data is only forwarded to third parties if it is also necessary for the organization or execution of the event (e.g., providing name and company details to external speakers).
The data is processed in data centers within the European Union. We process the data for as long as necessary for the respective purpose. If legal retention obligations exist – e.g., in commercial or tax law – the relevant personal data is stored for the duration of the retention obligation. After the expiration of the retention obligation, it is assessed whether there is a further need for processing. If no further need exists, the data is deleted.
Edoobox is integrated into our website as a link to the respective service. Only after clicking the booking button will you be redirected to the edoobox system. After redirection, the mentioned data and additional user information are transmitted to Etzensperger Informatik AG, the operator of edoobox.
Details regarding data processing by Etzensperger Informatik AG can be found in the privacy policy of edoobox.
27. Externe Links
Our online offering may contain links to third-party websites from providers not affiliated with us. After clicking the link, we no longer have any influence on the collection, processing, and use of any personal data transmitted to the third party by clicking the link (such as IP address or the URL of the page where the link is located), as the behavior of third parties is naturally beyond our control. We do not assume responsibility for the processing of such personal data by third parties.
28. Microsoft Forms
We use the tool 'Microsoft Forms' to conduct surveys and polls in Forms, as well as in online meetings, video conferences, and/or webinars. Microsoft Forms is a service provided by Microsoft Corporation. The processing is carried out by
Microsoft Ireland Operations Limited
One Microsoft Place
South County Business Park
Leopardstown
Dublin 18
D18 P521
Irland
Please note that these data protection notices only inform you about the processing of your personal data when using a Microsoft Forms survey. If you need information about the processing of your personal data by Microsoft, please refer to the respective statement on Microsoft's website. You can find more information from Microsoft on this topic in their Privacy Statement – Microsoft Privacy.
https://www.microsoft.com/de-de/servicesagreement/default.aspxSicherheit und Datenschutz in Microsoft Forms
When using Microsoft Forms, various types of data are processed. The extent of the data processing depends on the information you provide when participating in a poll or survey in Forms, especially when questions are formulated in an "open" manner.
The following personal data is subject to processing:
- IP address
- Username, display name, email address
- Profile picture (optional, if stored in Microsoft 365)
- Preferred language
- Status (optional, if stored in Microsoft 365)
- Date and time of opening the questionnaire
- Date and time of submitting the response
- Survey responses: These details are specific to the survey. The user decides, when entering free text in response fields, which personal data is transmitted.
Legal basis: The legal basis for this processing depends on the specific context in which the survey is conducted. It may be necessary for contract fulfillment (Art. 6(1)(b) GDPR) or for the legitimate interests of us or third parties (Art. 6(1)(f) GDPR). For example, ensuring IT security and operation.
If personal data of employees is processed, the legal basis for conducting, exercising, and fulfilling the employment relationship is derived from Art. 88(1) GDPR in conjunction with § 26(1) sentence 1 BDSG and the works council agreement on employee surveys. In all other cases, the legal basis for conducting surveys to safeguard legitimate interests is Art. 6(1)(f) GDPR.
Participation in surveys and/or polls is generally voluntary.
29. Zapier
We use Zapier to integrate different databases and web tools. Zapier is a service provided by Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA. When using Zapier, data is transferred to the USA, which is generally considered a third country with an uncertain level of data protection. We have no knowledge of the content of the transferred data or how it is used or how long it is stored by Zapier. Data processing is therefore carried out exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
Further information about data protection at Zapier can be found at https://zapier.com/privacy/
Status: 20.02.2024