Privacy Policy

1. An over­view of data protec­tion

General infor­ma­tion

The follo­wing infor­ma­tion will provide you with an easy to navi­gate over­view of what will happen with your personal data when you visit this website. The term “personal data” comprises all data that can be used to perso­nally iden­tify you. For detailed infor­ma­tion about the subject matter of data protec­tion, please consult our Data Protec­tion Decla­ra­tion, which we have included beneath this copy.

Data recor­ding on this website

Who is the respon­sible party for the recor­ding of data on this website (i.e., the “controller”)?

The data on this website is processed by the operator of the website, whose contact infor­ma­tion is available under section “Infor­ma­tion about the respon­sible party (referred to as the “controller” in the GDPR)” in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be infor­ma­tion you enter into our contact form.

Other data shall be recorded by our IT systems auto­ma­ti­cally or after you consent to its recor­ding during your website visit. This data comprises prima­rily tech­nical infor­ma­tion (e.g., web browser, opera­ting system, or time the site was accessed). This infor­ma­tion is recorded auto­ma­ti­cally when you access this website.

What are the purposes we use your data for?

A portion of the infor­ma­tion is gene­rated to guarantee the error free provi­sion of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your infor­ma­tion is concerned?

You have the right to receive infor­ma­tion about the source, reci­pi­ents, and purposes of your archived personal data at any time without having to pay a fee for such disclo­sures. You also have the right to demand that your data are recti­fied or eradi­cated. If you have consented to data proces­sing, you have the option to revoke this consent at any time, which shall affect all future data proces­sing. Moreover, you have the right to demand that the proces­sing of your data be rest­ricted under certain circum­s­tances. Further­more, you have the right to log a complaint with the compe­tent super­vi­sing agency.

Please do not hesi­tate to contact us at any time if you have ques­tions about this or any other data protec­tion related issues.

Analysis tools and tools provided by third parties

There is a possi­bi­lity that your brow­sing patterns will be statis­ti­cally analyzed when your visit this website. Such analyses are performed prima­rily with what we refer to as analysis programs.

For detailed infor­ma­tion about these analysis programs please consult our Data Protec­tion Decla­ra­tion below.

2. Hosting

We are hosting the content of our website at the follo­wing provider:

All-Inkl

The Provider is the ALL-INKL.COM – Neue Medien Münnich, owner: René Münnich, Haupt­straße 68, 02742 Frie­ders­dorf, Germany (herein­after “All-Inkl”). For details, please visit the privacy policy of All-Inkl: https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legi­ti­mate inte­rest in the most reliable repre­sen­ta­tion of our website. If appro­priate consent has been obtained, the proces­sing is carried out exclu­si­vely on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­ma­tion in the user’s end device (e.g., device finger­prin­ting) within the meaning of the TDDDG. This consent can be revoked at any time.

Data proces­sing

We have concluded a data proces­sing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guaran­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

3. General infor­ma­tion and manda­tory infor­ma­tion

Data protec­tion

The opera­tors of this website and its pages take the protec­tion of your personal data very seriously. Hence, we handle your personal data as confi­den­tial infor­ma­tion and in compli­ance with the statu­tory data protec­tion regu­la­tions and this Data Protec­tion Decla­ra­tion.

When­ever you use this website, a variety of personal infor­ma­tion will be coll­ected. Personal data comprises data that can be used to perso­nally iden­tify you. This Data Protec­tion Decla­ra­tion explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the infor­ma­tion is coll­ected.

We here­with advise you that the trans­mis­sion of data via the Internet (i.e., through e‑mail commu­ni­ca­tions) may be prone to secu­rity gaps. It is not possible to comple­tely protect data against third-party access.

Infor­ma­tion about the respon­sible party (referred to as the “controller” in the GDPR)

The data proces­sing controller on this website is:

Bitnamic GmbH
Albert-Einstein-Straße 30
49076 Osna­brück

Phone: +49 541 3470090–0
E‑mail: privacy@bitnamic.net

The controller is the natural person or legal entity that single-handedly or jointly with others makes decis­ions as to the purposes of and resources for the proces­sing of personal data (e.g., names, e‑mail addresses, etc.).

Storage dura­tion

Unless a more specific storage period has been speci­fied in this privacy policy, your personal data will remain with us until the purpose for which it was coll­ected no longer applies. If you assert a justi­fied request for dele­tion or revoke your consent to data proces­sing, your data will be deleted, unless we have other legally permis­sible reasons for storing your personal data (e.g., tax or commer­cial law reten­tion periods); in the latter case, the dele­tion will take place after these reasons cease to apply.

General infor­ma­tion on the legal basis for the data proces­sing on this website

If you have consented to data proces­sing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special cate­go­ries of data are processed accor­ding to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third count­ries, the data proces­sing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to infor­ma­tion in your end device (e.g., via device finger­prin­ting), the data proces­sing is addi­tio­nally based on § 25 (1) TDDDG. The consent can be revoked at any time. If your data is required for the fulfill­ment of a contract or for the imple­men­ta­tion of pre-contrac­tual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Further­more, if your data is required for the fulfill­ment of a legal obli­ga­tion, we process it on the basis of Art. 6(1)© GDPR. Further­more, the data proces­sing may be carried out on the basis of our legi­ti­mate inte­rest accor­ding to Art. 6(1)(f) GDPR. Infor­ma­tion on the rele­vant legal basis in each indi­vi­dual case is provided in the follo­wing para­graphs of this privacy policy.

Reci­pi­ents of personal data

In the scope of our busi­ness acti­vi­ties, we coope­rate with various external parties. In some cases, this also requires the transfer of personal data to these external parties. We only disc­lose personal data to external parties if this is required as part of the fulfill­ment of a contract, if we are legally obli­gated to do so (e.g., disclo­sure of data to tax autho­ri­ties), if we have a legi­ti­mate inte­rest in the disclo­sure pursuant to Art. 6 (1)(f) GDPR, or if another legal basis permits the disclo­sure of this data. When using proces­sors, we only disc­lose personal data of our custo­mers on the basis of a valid contract on data proces­sing. In the case of joint proces­sing, a joint proces­sing agree­ment is concluded.

Revo­ca­tion of your consent to the proces­sing of data

A wide range of data proces­sing tran­sac­tions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without preju­dice to the lawful­ness of any data coll­ec­tion that occurred prior to your revo­ca­tion.

Right to object to the coll­ec­tion of data in special cases; right to object to direct adver­ti­sing (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the compe­tent super­vi­sory agency

In the event of viola­tions of the GDPR, data subjects are entitled to log a complaint with a super­vi­sory agency, in parti­cular in the member state where they usually main­tain their domicile, place of work or at the place where the alleged viola­tion occurred. The right to log a complaint is in effect regard­less of any other admi­nis­tra­tive or court procee­dings available as legal recourses.

Right to data porta­bi­lity

You have the right to have data that we process auto­ma­ti­cally on the basis of your consent or in fulfill­ment of a contract handed over to you or to a third party in a common, machine-readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is tech­ni­cally feasible.

Infor­ma­tion about, recti­fi­ca­tion and eradi­ca­tion of data

Within the scope of the appli­cable statu­tory provi­sions, you have the right to demand infor­ma­tion about your archived personal data, their source and reci­pi­ents as well as the purpose of the proces­sing of your data at any time. You may also have a right to have your data recti­fied or eradi­cated. If you have ques­tions about this subject matter or any other ques­tions about personal data, please do not hesi­tate to contact us at any time.

Right to demand proces­sing rest­ric­tions

You have the right to demand the impo­si­tion of rest­ric­tions as far as the proces­sing of your personal data is concerned. To do so, you may contact us at any time. The right to demand rest­ric­tion of proces­sing applies in the follo­wing cases:

• In the event that you should dispute the correct­ness of your data archived by us, we will usually need some time to verify this claim. During the time that this inves­ti­ga­tion is ongoing, you have the right to demand that we rest­rict the proces­sing of your personal data.
• If the proces­sing of your personal data was/is conducted in an unlawful manner, you have the option to demand the rest­ric­tion of the proces­sing of your data instead of deman­ding the eradi­ca­tion of this data.
• If we do not need your personal data any longer and you need it to exer­cise, defend or claim legal entit­le­ments, you have the right to demand the rest­ric­tion of the proces­sing of your personal data instead of its eradi­ca­tion.
• If you have raised an objec­tion pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been deter­mined whose inte­rests prevail, you have the right to demand a rest­ric­tion of the proces­sing of your personal data.

If you have rest­ricted the proces­sing of your personal data, these data – with the excep­tion of their archi­ving – may be processed only subject to your consent or to claim, exer­cise or defend legal entit­le­ments or to protect the rights of other natural persons or legal enti­ties or for important public inte­rest reasons cited by the Euro­pean Union or a member state of the EU.

SSL and/or TLS encryp­tion

For secu­rity reasons and to protect the trans­mis­sion of confi­den­tial content, such as purchase orders or inqui­ries you submit to us as the website operator, this website uses either an SSL or a TLS encryp­tion program. You can reco­gnize an encrypted connec­tion by checking whether the address line of the browser swit­ches from “http://” to “https://” and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryp­tion is acti­vated, data you transmit to us cannot be read by third parties.

Rejec­tion of unso­li­cited e‑mails

We here­with object to the use of contact infor­ma­tion published in conjunc­tion with the manda­tory infor­ma­tion to be provided in our Site Notice to send us promo­tional and infor­ma­tion mate­rial that we have not expressly requested. The opera­tors of this website and its pages reserve the express right to take legal action in the event of the unso­li­cited sending of promo­tional infor­ma­tion, for instance via SPAM messages.

4. Recor­ding of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are small data packages that do not cause any damage to your device. They are either stored tempo­r­a­rily for the dura­tion of a session (session cookies) or they are perma­nently archived on your device (perma­nent cookies). Session cookies are auto­ma­ti­cally deleted once you termi­nate your visit. Perma­nent cookies remain archived on your device until you actively delete them, or they are auto­ma­ti­cally eradi­cated by your web browser.

Cookies can be issued by us (first-party cookies) or by third-party compa­nies (so-called third-party cookies). Third-party cookies enable the inte­gra­tion of certain services of third-party compa­nies into websites (e.g., cookies for hand­ling payment services).

Cookies have a variety of func­tions. Many cookies are tech­ni­cally essen­tial since certain website func­tions would not work in the absence of these cookies (e.g., the shop­ping cart func­tion or the display of videos). Other cookies may be used to analyze user beha­vior or for promo­tional purposes.

Cookies, which are required for the perfor­mance of elec­tronic commu­ni­ca­tion tran­sac­tions, for the provi­sion of certain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are neces­sary for the opti­miza­tion (required cookies) of the website (e.g., cookies that provide measurable insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a diffe­rent legal basis is cited. The operator of the website has a legi­ti­mate inte­rest in the storage of required cookies to ensure the tech­ni­cally error-free and opti­mized provi­sion of the operator’s services. If your consent to the storage of the cookies and similar reco­gni­tion tech­no­lo­gies has been requested, the proces­sing occurs exclu­si­vely on the basis of the consent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this consent may be revoked at any time.

You have the option to set up your browser in such a manner that you will be noti­fied any time cookies are placed and to permit the accep­tance of cookies only in specific cases. You may also exclude the accep­tance of cookies in certain cases or in general or acti­vate the delete-func­tion for the auto­matic eradi­ca­tion of cookies when the browser closes. If cookies are deac­ti­vated, the func­tions of this website may be limited.

Which cookies and services are used on this website can be found in this privacy policy.

Consent with User­cen­trics

This website uses the consent tech­no­logy of User­cen­trics to obtain your consent to the storage of certain cookies on your device or for the use of specific tech­no­lo­gies, and to docu­ment the former in a data protec­tion compliant manner. The party offe­ring this tech­no­logy is User­cen­trics GmbH, Send­linger Straße 7, 80331 München, Germany, website: https://usercentrics.com/ (herein­after referred to as “User­cen­trics”).

When­ever you visit our website, the follo­wing personal data will be trans­ferred to User­cen­trics:

• Your declaration(s) of consent or your revo­ca­tion of your declaration(s) of consent
• Your IP address
• Infor­ma­tion about your browser
• Infor­ma­tion about your device
• The date and time you visited our website
• Geolo­ca­tion

Moreover, User­cen­trics shall store a cookie in your browser to be able to allo­cate your declaration(s) of consent or any revo­ca­tions of the former. The data that are recorded in this manner shall be stored until you ask us to eradi­cate them, delete the User­cen­trics cookie or until the purpose for archi­ving the data no longer exists. This shall be without preju­dice to any manda­tory legal reten­tion periods.

The User­cen­trics banner on this website has been confi­gured with the assis­tance of eRecht24. This can be iden­ti­fied by the eRecht24 logo. To display the eRecht24 logo in the banner, a connec­tion to the image server of eRecht24 will be estab­lished. In conjunc­tion with this, the IP address is also trans­ferred; however, is only stored in anony­mized form in the server logs. The image server of eRecht24 is located in Germany with a German provider. The banner as such is provided exclu­si­vely by User­cen­trics.

User­cen­trics uses cookies to obtain the decla­ra­tions of consent mandated by law. The legal basis for the use of specific tech­no­lo­gies is Art. 6(1)© GDPR.

Data proces­sing

We have concluded a data proces­sing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guaran­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

Server log files

The provider of this website and its pages auto­ma­ti­cally coll­ects and stores infor­ma­tion in so-called server log files, which your browser commu­ni­cates to us auto­ma­ti­cally. The infor­ma­tion comprises:

• The type and version of browser used
• The used opera­ting system
• Referrer URL
• The host­name of the acces­sing computer
• The time of the server inquiry
• The IP address

This data is not merged with other data sources.

This data is recorded on the basis of Art. 6(1)(f) GDPR. The operator of the website has a legi­ti­mate inte­rest in the tech­ni­cally error free depic­tion and the opti­miza­tion of the operator’s website. In order to achieve this, server log files must be recorded.

Contact form

If you submit inqui­ries to us via our contact form, the infor­ma­tion provided in the contact form as well as any contact infor­ma­tion provided therein will be stored by us in order to handle your inquiry and in the event that we have further ques­tions. We will not share this infor­ma­tion without your consent.

The proces­sing of these data is based on Art. 6(1)(b) GDPR, if your request is related to the execu­tion of a contract or if it is neces­sary to carry out pre-contrac­tual measures. In all other cases the proces­sing is based on our legi­ti­mate inte­rest in the effec­tive proces­sing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been requested; the consent can be revoked at any time.

The infor­ma­tion you have entered into the contact form shall remain with us until you ask us to eradi­cate the data, revoke your consent to the archi­ving of data or if the purpose for which the infor­ma­tion is being archived no longer exists (e.g., after we have concluded our response to your inquiry). This shall be without preju­dice to any manda­tory legal provi­sions, in parti­cular reten­tion periods.

Request by e‑mail, tele­phone, or fax

If you contact us by e‑mail, tele­phone or fax, your request, inclu­ding all resul­ting personal data (name, request) will be stored and processed by us for the purpose of proces­sing your request. We do not pass these data on without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfill­ment of a contract or is required for the perfor­mance of pre-contrac­tual measures. In all other cases, the data are processed on the basis of our legi­ti­mate inte­rest in the effec­tive hand­ling of inqui­ries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

The data sent by you to us via contact requests remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after comple­tion of your request). Manda­tory statu­tory provi­sions — in parti­cular statu­tory reten­tion periods — remain unaf­fected.

Hubspot CRM

We use Hubspot CRM on this website. The provider is Hubspot Inc. 25 Street, Cambridge, MA 02141 USA (here­after Hubspot CRM).

Hubspot CRM enables us, among other things, to manage exis­ting and poten­tial custo­mers and customer cont­acts, to commu­ni­cate with you and to plan and execute marke­ting acti­vi­ties in line with your inte­rests. Hubspot CRM enables us to capture, sort and analyze customer inter­ac­tions via email, social media, or phone across multiple chan­nels. The personal data coll­ected in this way can be evaluated and used for commu­ni­ca­tion with the poten­tial customer or marke­ting measures (e.g., news­letter mailings). Hubspot CRM also enables us to collect and analyze the user beha­vior of our cont­acts on our website.

The use of Hubspot CRM is based on Art. 6(1)(f) GDPR. The website operator has a legi­ti­mate inte­rest in the most effi­cient customer manage­ment and customer commu­ni­ca­tion. If appro­priate consent has been obtained, the proces­sing is carried out exclu­si­vely on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­ma­tion in the user’s end device (e.g., device finger­prin­ting) within the meaning of the TDDDG. This consent can be revoked at any time.

For details, please refer to Hubspot’s privacy policy: https://legal.hubspot.com/de/privacy-policy.

Data trans­mis­sion to the US is based on the stan­dard contrac­tual clauses of the EU Commis­sion. Details can be found here: https://www.hubspot.de/data-privacy/privacy-shield.

The company is certi­fied in accordance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data proces­sing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follo­wing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TN8pAAG&status=Active.

Data proces­sing

We have concluded a data proces­sing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guaran­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

5. Analysis tools and adver­ti­sing

Google Tag Manager

We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland

The Google Tag Manager is a tool that allows us to inte­grate tracking or statis­tical tools and other tech­no­lo­gies on our website. The Google Tag Manager itself does not create any user profiles, does not store cookies, and does not carry out any inde­pen­dent analyses. It only manages and runs the tools inte­grated via it. However, the Google Tag Manager does collect your IP address, which may also be trans­ferred to Google’s parent company in the United States.

The Google Tag Manager is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legi­ti­mate inte­rest in the quick and uncom­pli­cated inte­gra­tion and admi­nis­tra­tion of various tools on his website. If appro­priate consent has been obtained, the proces­sing is carried out exclu­si­vely on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­ma­tion in the user’s end device (e.g., device finger­prin­ting) within the meaning of the TDDDG. This consent can be revoked at any time.

The company is certi­fied in accordance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data proces­sing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follo­wing link: https://www.dataprivacyframework.gov/participant/5780.

Google Analy­tics

This website uses func­tions of the web analysis service Google Analy­tics. The provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analy­tics enables the website operator to analyze the beha­vior patterns of website visi­tors. To that end, the website operator receives a variety of user data, such as pages accessed, time spent on the page, the utilized opera­ting system and the user’s origin. This data is assi­gned to the respec­tive end device of the user. An assign­ment to a user-ID does not take place.

Further­more, Google Analy­tics allows us to record your mouse and scroll move­ments and clicks, among other things. Google Analy­tics uses various mode­ling approa­ches to augment the coll­ected data sets and uses machine lear­ning tech­no­lo­gies in data analysis.

Google Analy­tics uses tech­no­lo­gies that make the reco­gni­tion of the user for the purpose of analy­zing the user beha­vior patterns (e.g., cookies or device finger­prin­ting). The website use infor­ma­tion recorded by Google is, as a rule trans­ferred to a Google server in the United States, where it is stored.

The use of these services occurs on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your consent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certi­fied in accordance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data proces­sing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follo­wing link: https://www.dataprivacyframework.gov/participant/5780.

IP anony­miza­tion

Google Analy­tics IP anony­miza­tion is active. As a result, your IP address will be abbre­viated by Google within the member states of the Euro­pean Union or in other states that have rati­fied the Conven­tion on the Euro­pean Economic Area prior to its trans­mis­sion to the United States. The full IP address will be trans­mitted to one of Google’s servers in the United States and abbre­viated there only in excep­tional cases. On behalf of the operator of this website, Google shall use this infor­ma­tion to analyze your use of this website to gene­rate reports on website acti­vi­ties and to render other services to the operator of this website that are related to the use of the website and the Internet. The IP address trans­mitted in conjunc­tion with Google Analy­tics from your browser shall not be merged with other data in Google’s posses­sion.

Browser plug-in

You can prevent the recor­ding and proces­sing of your data by Google by down­loa­ding and instal­ling the browser plugin available under the follo­wing link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­tion about the hand­ling of user data by Google Analy­tics, please consult Google’s Data Privacy Decla­ra­tion at: https://support.google.com/analytics/answer/6004245?hl=en.

Contract data proces­sing

We have executed a contract data proces­sing agree­ment with Google and are imple­men­ting the strin­gent provi­sions of the German data protec­tion agen­cies to the fullest when using Google Analy­tics.

6. Plug-ins and Tools

YouTube with expanded data protec­tion inte­gra­tion

This website inte­grates videos from the YouTube website. The operator of the website is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of these websites on which YouTube is inte­grated, a connec­tion to the YouTube servers is estab­lished. This tells the YouTube server which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing beha­vior directly to your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in extended data protec­tion mode. Accor­ding to YouTube, videos that are played in extended data protec­tion mode are not used to perso­na­lize brow­sing on YouTube. Ads that are played in extended data protec­tion mode are also not perso­na­lized. No cookies are set in extended data protec­tion mode. Instead, so-called local storage elements are stored in the user’s browser, which contain personal data similar to cookies and can be used for reco­gni­tion. Details on the extended data protec­tion mode can be found here: https://support.google.com/youtube/answer/171780.

After acti­vating a YouTube video, further data proces­sing opera­tions may be trig­gered over which we have no influence.

The use of YouTube is based on our inte­rest in presen­ting our online content in an appe­aling manner. Pursuant to Art. 6(1)(f) GDPR, this is a legi­ti­mate inte­rest. If appro­priate consent has been obtained, the proces­sing is carried out exclu­si­vely on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, insofar the consent includes the storage of cookies or the access to infor­ma­tion in the user’s end device (e.g., device finger­prin­ting) within the meaning of the TDDDG. This consent can be revoked at any time.

For more infor­ma­tion on how YouTube handles user data, please consult the YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en.

The company is certi­fied in accordance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data proces­sing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follo­wing link: https://www.dataprivacyframework.gov/participant/5780.

Google Fonts (local embed­ding)

This website uses so-called Google Fonts provided by Google to ensure the uniform use of fonts on this site. These Google fonts are locally installed so that a connec­tion to Google’s servers will not be estab­lished in conjunc­tion with this appli­ca­tion.

For more infor­ma­tion on Google Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Decla­ra­tion under: https://policies.google.com/privacy?hl=en.

Lead­info

We have inte­grated Lead­info on this website. The provider is Lead­info / Team.Blue GmbH, Bunsenstr. 19, 40215 Düssel­dorf (herein­after referred to as “Lead­info”).

Lead­info enables us to record visits to our website by members of other compa­nies. For this purpose, the IP address of the website visitor is compared with the company IP addresses stored in Leadinfo’s company data­base. If this is the IP address of a company, this visit and the user beha­vior will be recorded. IP addresses that are not in Leadinfo’s data­base are deleted imme­dia­tely, meaning that website visits by private indi­vi­duals are ignored by Lead­info.

Lead­info is used on the basis of Art. 6 (1)(f) GDPR. The website operator has a legi­ti­mate inte­rest in recor­ding company visits to our website and their user beha­vior. If a corre­spon­ding consent has been requested, the proces­sing is carried out exclu­si­vely on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to infor­ma­tion in the user’s terminal device (e.g. device finger­prin­ting) within the meaning of the TDDDG. Consent can be revoked at any time.

Further details can be found in the provider’s privacy policy at https://www.leadinfo.com/de/datenschutz/.

Data proces­sing

We have concluded a data proces­sing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guaran­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

7. Online-based Audio and Video Confe­rences (Confe­rence tools)

Data proces­sing

We use online confe­rence tools, among other things, for commu­ni­ca­tion with our custo­mers. The tools we use are listed in detail below. If you commu­ni­cate with us by video or audio confe­rence using the Internet, your personal data will be coll­ected and processed by the provider of the respec­tive confe­rence tool and by us. The confe­ren­cing tools collect all infor­ma­tion that you provide/access to use the tools (email address and/or your phone number). Further­more, the confe­rence tools process the dura­tion of the confe­rence, start and end (time) of parti­ci­pa­tion in the confe­rence, number of parti­ci­pants and other “context infor­ma­tion” related to the commu­ni­ca­tion process (meta­data).

Further­more, the provider of the tool processes all the tech­nical data required for the proces­sing of the online commu­ni­ca­tion. This includes, in parti­cular, IP addresses, MAC addresses, device IDs, device type, opera­ting system type and version, client version, camera type, micro­phone or loud­speaker and the type of connec­tion.

Should content be exch­anged, uploaded, or other­wise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recor­dings, chat/ instant messages, voice­mail uploaded photos and videos, files, white­boards, and other infor­ma­tion shared while using the service.

Please note that we do not have complete influence on the data proces­sing proce­dures of the tools used. Our possi­bi­li­ties are largely deter­mined by the corpo­rate policy of the respec­tive provider. Further infor­ma­tion on data proces­sing by the confe­rence tools can be found in the data protec­tion decla­ra­tions of the tools used, and which we have listed below this text.

Purpose and legal bases

The confe­rence tools are used to commu­ni­cate with pros­pec­tive or exis­ting contrac­tual part­ners or to offer certain services to our custo­mers (Art. 6(1)(b) GDPR). Further­more, the use of the tools serves to gene­rally simplify and acce­le­rate commu­ni­ca­tion with us or our company (legi­ti­mate inte­rest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in ques­tion will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.

Dura­tion of storage

Data coll­ected directly by us via the video and confe­rence tools will be deleted from our systems imme­dia­tely after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Manda­tory legal reten­tion periods remain unaf­fected.

We have no influence on the dura­tion of storage of your data that is stored by the opera­tors of the confe­rence tools for their own purposes. For details, please directly contact the opera­tors of the confe­rence tools.

Confe­rence tools used

We employ the follo­wing confe­rence tools:

Micro­soft Teams

We use Micro­soft Teams. The provider is the Micro­soft Ireland Opera­tions Limited, One Micro­soft Place, South County Busi­ness Park, Leopard­stown, Dublin 18, Ireland. For details on data proces­sing, please refer to the Micro­soft Teams privacy policy: https://privacy.microsoft.com/en-us/privacystatement.

The company is certi­fied in accordance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data proces­sing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follo­wing link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzNaAAK&status=Active.

Data proces­sing

We have concluded a data proces­sing agree­ment (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guaran­tees that they process personal data of our website visi­tors only based on our instruc­tions and in compli­ance with the GDPR.

8. Custom Services

Hand­ling appli­cant data

We offer website visi­tors the oppor­tu­nity to submit job appli­ca­tions to us (e.g., via e‑mail, via postal services on by submit­ting the online job appli­ca­tion form). Below, we will brief you on the scope, purpose and use of the personal data coll­ected from you in conjunc­tion with the appli­ca­tion process. We assure you that the coll­ec­tion, proces­sing, and use of your data will occur in compli­ance with the appli­cable data privacy rights and all other statu­tory provi­sions and that your data will always be treated as strictly confi­den­tial.

Scope and purpose of the coll­ec­tion of data

If you submit a job appli­ca­tion to us, we will process any affi­liated personal data (e.g., contact and commu­ni­ca­tions data, appli­ca­tion docu­ments, notes taken during job inter­views, etc.), if they are required to make a decision concer­ning the estab­lish­ment or an employ­ment rela­ti­onship. The legal grounds for the afore­men­tioned are § 26 BDSG accor­ding to German Law (Nego­tia­tion of an Employ­ment Rela­ti­onship), Art. 6(1)(b) GDPR (General Contract Nego­tia­tions) and – provided you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with indi­vi­duals who are involved in the proces­sing of your job appli­ca­tion.

If your job appli­ca­tion should result in your recruit­ment, the data you have submitted will be archived on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of imple­men­ting the employ­ment rela­ti­onship in our data proces­sing system.

Data Archi­ving Period

If we are unable to make you a job offer or you reject a job offer or with­draw your appli­ca­tion, we reserve the right to retain the data you have submitted on the basis of our legi­ti­mate inte­rests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the appli­ca­tion proce­dure (rejec­tion or with­drawal of the appli­ca­tion). After­wards the data will be deleted, and the physical appli­ca­tion docu­ments will be destroyed. The storage serves in parti­cular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6‑month period (e.g., due to an impen­ding or pending legal dispute), dele­tion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agree­ment (Article 6(1)(a) GDPR) or if statu­tory data reten­tion requi­re­ments preclude the dele­tion.

Admis­sion to the appli­cant pool

If we do not make you a job offer, you may be able to join our appli­cant pool. In case of admis­sion, all docu­ments and infor­ma­tion from the appli­ca­tion will be trans­ferred to the appli­cant pool in order to contact you in case of suitable vacan­cies.

Admis­sion to the appli­cant pool is based exclu­si­vely on your express agree­ment (Art. 6(1)(a) GDPR). The submis­sion agree­ment is volun­tary and has no rela­tion to the ongoing appli­ca­tion proce­dure. The affected person can revoke his agree­ment at any time. In this case, the data from the appli­cant pool will be irre­vo­cably deleted, provided there are no legal reasons for storage.

The data from the appli­cant pool will be irre­vo­cably deleted no later than two years after consent has been granted.

Our social media appearances

This privacy policy applies to the follo­wing social media presence

• https://www.facebook.com/bitnamic/
• https://de.linkedin.com/company/bitnamic

Data proces­sing through social networks

We main­tain publicly available profiles in social networks. The indi­vi­dual social networks we use can be found below.

Social networks such as Face­book, X etc. can gene­rally analyze your user beha­vior compre­hen­si­vely if you visit their website or a website with inte­grated social media content (e.g., like buttons or banner ads). When you visit our social media pages, nume­rous data protec­tion-rele­vant proces­sing opera­tions are trig­gered. In detail:

If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circum­s­tances, your personal data may also be recorded if you are not logged in or do not have an account with the respec­tive social media portal. In this case, this data is coll­ected, for example, via cookies stored on your device or by recor­ding your IP address.

Using the data coll­ected in this way, the opera­tors of the social media portals can create user profiles in which their prefe­rences and inte­rests are stored. This way you can see inte­rest-based adver­ti­sing inside and outside of your social media presence. If you have an account with the social network, inte­rest-based adver­ti­sing can be displayed on any device you are logged in to or have logged in to.

Please also note that we cannot retrace all proces­sing opera­tions on the social media portals. Depen­ding on the provider, addi­tional proces­sing opera­tions may ther­e­fore be carried out by the opera­tors of the social media portals. Details can be found in the terms of use and privacy policy of the respec­tive social media portals.

Legal basis

Our social media appearances should ensure the widest possible presence on the Internet. This is a legi­ti­mate inte­rest within the meaning of Art. 6 (1) lit. f GDPR. The analysis processes initiated by the social networks may be based on diver­gent legal bases to be speci­fied by the opera­tors of the social networks (e.g., consent within the meaning of Art. 6 (1) (a) GDPR).

Respon­si­bi­lity and asser­tion of rights

If you visit one of our social media sites (e.g., Face­book), we, toge­ther with the operator of the social media plat­form, are respon­sible for the data proces­sing opera­tions trig­gered during this visit. You can in prin­ciple protect your rights (infor­ma­tion, correc­tion, dele­tion, limi­ta­tion of proces­sing, data porta­bi­lity and complaint) vis-à-vis us as well as vis-à-vis the operator of the respec­tive social media portal (e.g., Face­book).

Please note that despite the shared respon­si­bi­lity with the social media portal opera­tors, we do not have full influence on the data proces­sing opera­tions of the social media portals. Our options are deter­mined by the company policy of the respec­tive provider.

Storage time

The data coll­ected directly from us via the social media presence will be deleted from our systems as soon as you ask us to delete it, you revoke your consent to the storage or the purpose for the data storage lapses. Stored cookies remain on your device until you delete them. Manda­tory statu­tory provi­sions — in parti­cular, reten­tion periods — remain unaf­fected.

We have no control over the storage dura­tion of your data that are stored by the social network opera­tors for their own purposes. For details, please contact the social network opera­tors directly (e.g., in their privacy policy, see below).

Your rights

You have the right to receive infor­ma­tion about the origin, reci­pient and purpose of your stored personal data at any time and free of charge. You also have the right to object, the right to data porta­bi­lity and the right to file a complaint with the respon­sible regu­la­tory agency. Further­more, you can request the correc­tion, blocking, dele­tion and, under certain circum­s­tances, the rest­ric­tion of the proces­sing of your personal data.

Indi­vi­dual social networks

Face­book

We have a profile on Face­book. The provider of this service is Meta Plat­forms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (herein­after Meta). Accor­ding to Meta’s state­ment the coll­ected data will also be trans­ferred to the USA and to other third-party count­ries.

We have signed an agree­ment with Meta on shared respon­si­bi­lity for the proces­sing of data (Controller Addendum). This agree­ment deter­mines which data proces­sing opera­tions we or Meta are respon­sible for when you visit our Face­book Fanpage. This agree­ment can be viewed at the follo­wing link: https://www.facebook.com/legal/terms/page_controller_addendum.

You can custo­mize your adver­ti­sing settings inde­pendently in your user account. Click on the follo­wing link and log in: https://www.facebook.com/settings?tab=ads.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

Details can be found in the Face­book privacy policy: https://www.facebook.com/about/privacy/.

The company is certi­fied in accordance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data proces­sing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follo­wing link: https://www.dataprivacyframework.gov/participant/4452

LinkedIn

We have a LinkedIn profile. The provider is the LinkedIn Ireland Unli­mited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. LinkedIn uses adver­ti­sing cookies.

If you want to disable LinkedIn adver­ti­sing cookies, please use the follo­wing link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data trans­mis­sion to the US is based on the Stan­dard Contrac­tual Clauses (SCC) of the Euro­pean Commis­sion. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal infor­ma­tion, please refer to LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

The company is certi­fied in accordance with the “EU-US Data Privacy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intended to ensure compli­ance with Euro­pean data protec­tion stan­dards for data proces­sing in the US. Every company certi­fied under the DPF is obliged to comply with these data protec­tion stan­dards. For more infor­ma­tion, please contact the provider under the follo­wing link: https://www.dataprivacyframework.gov/participant/5448