Automation & Artificial Intelligence for non-destructive testing (NDT) and industrial inspections. Made in Germany 🇩🇪
- +49 234 54506170
- contact@sentin.ai
Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system or time of page view). This data is collected automatically as soon as you enter this website.
What do we use your data for?
Some of the data is collected to ensure that the website is provided without errors. Other data may be used to analyse your user behaviour. If contracts can be concluded or initiated via the website, the transmitted data will also be processed for contract offers, orders or other order enquiries.
What rights do you have regarding your data?
You have the right to obtain information about the origin, recipient and purpose of your stored personal data at any time and free of charge.
You also have the right to request the correction or deletion of this data. If you have given your consent to data processing, you can revoke this consent at any time with future effect. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
Please feel free to contact us at any time if you have any questions about this or other data protection issues.
Analytics tools and third-party tools
When you visit this website, your surfing behaviour may be statistically evaluated. This is mainly done using so-called analysis programmes.
Detailed information about these analysis programmes can be found in the following privacy policy
We host the content of our website with the following providers:
IONOS
The provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter referred to as IONOS). When you visit our website, IONOS collects various log files, including your IP addresses. For details, please refer to the IONOS privacy policy:
The use of IONOS is based on Art. 6 (1) lit. f GDPR. We have a legitimate interest in ensuring that our website is displayed as reliably as possible. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Data protection
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
When you use this website, various personal data is collected.
Personal data is data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.
We would like to point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. Complete protection of data against access by third parties is not possible.
Note on the responsible body
The responsible body for data processing on this website is:
sentin GmbH
Südring 25
44787 Bochum, Deutschland
Tel.: +49 234 54506170
Mail: contact@sentin.ai
The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).
Storage period
Unless a more specific storage period is specified in this privacy policy, your personal data will remain with us until the purpose for data processing no longer applies. If you assert a legitimate request for deletion or revoke your consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. tax or commercial law retention periods); in the latter case, deletion will take place once these reasons no longer apply.
General information on the legal basis for data processing on this website
If you have consented to data processing, we process your personal data on the basis of Art. 6 (1) lit. a GDPR or Art. 9 (2) lit. a GDPR, if special categories of data are processed in accordance with Art. 9 (1) GDPR. In the event of express consent to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or access to information on your end device (e.g. via device fingerprinting), data processing is also carried out on the basis of Section 25(1) TDDDG. Consent can be revoked at any time. If your data is necessary for the performance of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6 (1) lit. b GDPR. Furthermore, we process your data if it is necessary to fulfil a legal obligation on the basis of Art. 6 (1) lit. c GDPR. Data processing may also be carried out on the basis of our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR. The relevant legal bases in each individual case are explained in the following paragraphs of this privacy policy.
Data protection officer
We have appointed a data protection officer. You can contact our data protection officer at:
Datenschutbeauftragter
sentin GmbH
Südring 25
44787 Bochum, Deutschland
Mail: datasecurity@sentin.ai
Note on data transfer to third countries that are not secure under data protection law and transfer to US companies that are not DPF-certified
Among other things, we use tools from companies based in third countries that are not secure in terms of data protection law, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to these countries and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in third countries that are not secure in terms of data protection law.
We would like to point out that the US, as a secure third country, generally has a level of data protection comparable to that of the EU. Data transfer to the US is therefore permissible if the recipient is certified under the EU-US Data Privacy Framework (DPF) or has appropriate additional safeguards in place. Information on transfers to third countries, including data recipients, can be found in this privacy policy.
Recipients of personal data
As part of our business activities, we work with various external parties. In some cases, this requires the transfer of personal data to these external parties. We only pass on personal data to external parties if this is necessary for the fulfilment of a contract, if we are legally obliged to do so (e.g. passing on data to tax authorities), if we have a legitimate interest in passing on the data in accordance with Art. 6 (1) lit. f GDPR, or if another legal basis permits the transfer of data. When using processors, we only disclose our customers’ personal data on the basis of a valid contract for data processing. In the case of joint processing, a contract for joint processing is concluded.
Withdrawal of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(e) OR (f) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS DATA PROTECTION DECLARATION. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA, UNLESS WE CAN PROVE THAT THERE ARE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR). IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING, INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).
Right to lodge a complaint with the competent supervisory authority
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged violation. The right to lodge a complaint exists without prejudice to other administrative or judicial remedies.
Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfilment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done if it is technically feasible.
Information, correction and deletion
Within the framework of the applicable legal provisions, you have the right to obtain information free of charge at any time about your stored personal data, its origin and recipients, and the purpose of data processing, and, if applicable, a right to correct or delete this data. You can contact us at any time if you have any questions about this or other issues relating to personal data.
Right to restriction of processing
You have the right to request the restriction of the processing of your personal data. You can contact us at any time to do so. The right to restrict processing applies in the following cases:
If you dispute the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you can request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend or assert legal claims, you have the right to request the restriction of the processing of your personal data instead of deletion.
If you have lodged an objection pursuant to Art. 21(1) GDPR, a balance must be struck between your interests and ours. As long as it is not yet clear whose interests prevail, you have the right to request the restriction of the processing of your personal data.
If you have restricted the processing of your personal data, this data – apart from its storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.
SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator, this site uses SSL or TLS encryption. You can recognise an encrypted connection by the fact that the address line of the browser changes from ‘http://’ to ‘https://’ and by the lock symbol in your browser line. When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
Objection to advertising emails
We hereby object to the use of contact data published within the scope of the imprint obligation for sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, for example through spam emails.
Cookies
Our websites use so-called ‘cookies’. Cookies are small data packets and do not cause any damage to your device. They are either stored temporarily for the duration of a session (session cookies) or permanently (permanent cookies) on your device. Session cookies are automatically deleted at the end of your visit. Permanent
cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.
Cookies can originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable the integration of certain services from third-party companies within websites (e.g. cookies for processing payment services).
Cookies have various functions. Numerous cookies are technically necessary, as certain website functions would not work without them (e.g. the shopping basket function or the display of videos). Other cookies can be used to evaluate user behaviour or for advertising purposes.
Cookies that are necessary for the electronic communication process, for the provision of certain functions requested by you (e.g. for the shopping basket function) or to optimise the website (e.g. cookies for measuring the web audience) (necessary cookies) are stored on the basis of Art. 6 para. 1 lit. f GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies for the technically error-free and optimised provision of its services. If consent to the storage of cookies and comparable recognition technologies has been requested, processing is carried out exclusively on the basis of this consent (Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG); Consent can be revoked at any time.
You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when closing the browser. If cookies are deactivated, the functionality of this website may be restricted.
You can find out which cookies and services are used on this website in this privacy policy.
Consent with CookieYes
This website uses CookieYes consent technology to obtain your consent to store certain cookies on your device or to use certain technologies and to document this in accordance with data protection regulations. The provider of this technology is CookieYes Limited, 3 Warren Yard Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom, website:
https://www.cookieyes.com/de/ (hereinafter referred to as ‘CookieYes’).
CookieYes stores a cookie in your browser in order to be able to assign the consents you have given or their revocation. The data collected in this way is stored until you request us to delete it, delete the CookieYes cookie yourself or the purpose for data storage no longer applies. Mandatory legal retention obligations remain unaffected.
CookieYes is used to obtain the legally required consent for the use of certain technologies. The legal basis for this is Art. 6 (1) lit. c GDPR.
Elements of the social network Facebook are integrated into this website. The provider of this service is Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. However, according to Facebook, the data collected is also transferred to the United States and other third countries.
An overview of Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.
When the social media element is active, a direct connection is established between your device and the Facebook server. Facebook receives the information that you have visited this website with your IP address. If you click the Facebook ‘Like’ button while logged into your Facebook account, you can link the content of this website to your Facebook profile.
This allows Facebook to associate your visit to this website with your user account. We would like to point out that, as the provider of the pages, we have no knowledge of the content of the data transmitted or its use by Facebook. Further information on this can be found in Facebook’s privacy policy at:
https://de-de.facebook.com/privacy/explanation.
The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
Insofar as personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). Joint responsibility is limited exclusively to the collection of data and its transfer to Facebook. The processing by Facebook after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been set out in a joint processing agreement. The wording of the agreement can be found at:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for the data protection-compliant
implementation of the tool on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook products. You can assert your rights as a data subject (e.g. requests for information) regarding the data processed by Facebook directly with Facebook. If you assert your rights as a data subject with us, we are obliged to forward them to Facebook.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.
Privacy policy for social media appearances
This privacy policy provides information about the processing of your personal data and your rights as a data subject in connection with our social media appearances.
General Information
We have set up and operate publicly accessible accounts on various social networks. When you visit these accounts, your personal data is processed not only by us, but also by the provider of the respective social network. In addition to us, the provider of the respective social network is responsible for the collection and further processing of your personal data in the respective social network, e.g. through websites or apps. If you use our presence on a social network and/or contact us via this presence (e.g., our page or our channel on the social network), your personal data will be processed by the provider. Please note that this also applies if you do not have a user account with the social network or are not logged into an existing account when you visit or use our social network presences.
You are neither legally nor contractually obliged to provide us with your personal data. However, this may be necessary in order for you to use all the functions of social networks in general and our social network presence in particular.
Information about the processing of personal data by the provider of the respective social network can be found in its privacy policy, which we have linked in the section “Additional information on the individual social networks” of this privacy policy. These links may be updated from time to time.
As the operator of our social network pages, we can only view your public profile on the respective social network. Which of your information is visible to us depends on the privacy settings you have selected in your profile. For more information on privacy settings, please refer to the respective privacy policy of the social networks.
Purposes of processing and type of personal data
We process your personal data (your name, the content of your messages, inquiries, or other contributions addressed to us) when you contact us via our presence on the respective social network. We then process this data for the purpose of processing and possibly responding to your contributions and/or messages addressed to us.
In addition, the provider of the respective social network may provide us with so-called “page insights data” and/or analysis data. This data consists of anonymous statistics that we use to evaluate the quality of our presence and content on social networks. These statistics are compiled on the basis of the usage data collected by the respective social network about your interaction with our social network page. We do not have access to this usage data. You can find out which specific tracking and analysis techniques the respective social networks use under the respective tab in the “Additional information on the individual social networks” section of this privacy policy.
Legal basis
The processing of your personal data is based on our legitimate interest pursuant to Art. 6 (1) (f) of the General Data Protection Regulation (GDPR). Our legitimate interest consists in particular in being able to contact you in response to your inquiries or contributions, as well as in recognizing your user preferences (e.g., the number of so-called “followers,” the number of visits to individual areas of pages, user statistics with regard to age, geography, and language) and, in addition, in being able to tailor and improve the offerings on our presence on the respective social network as precisely as possible to the target group.
Deletion of personal data
We store your personal data in our systems (e.g., when we use certain administrative programs to process messages from you and to you), i.e., outside the respective social network, if and only as long as it is necessary for the respective processing purposes or as long as there are legal retention obligations.
Data transfer to recipients outside the European Economic Area
When visiting certain social networks, your personal data may be transferred to recipients in countries outside the European Union (“EU”), Iceland, Liechtenstein, and Norway (=European Economic Area, “EEA”) and processed there, in particular in the USA. Where there is no decision by the European Commission establishing an adequate level of protection for personal data (so-called “adequacy”), we agree with the recipients to apply EU standard contractual clauses, binding corporate rules, or, if available, other applicable instruments to create an “adequate level of protection” in accordance with the applicable legal requirements.
In the following countries outside the EU/EEA, the European Commission has determined an adequate level of protection for the processing of personal data in accordance with EU standards (so-called “adequacy decision”):
https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
Transfer of personal data to third parties
We may use certain qualified service providers to design and manage our social media presence. In such cases, we will only pass on your personal data if this is necessary for the purposes specified in the “Purposes of use” section of this privacy policy and to the extent permitted by law or if you have given your consent.
You have the following rights
Right of access: Under Article 15 of the GDPR, you have the right to obtain information about which of your personal data we process. This means that you have the right to obtain confirmation from us as to whether or not personal data concerning you is being processed and, if so, to request access to that personal data. The right to information includes, among other things, the purposes of processing, the categories of personal data concerned, and the recipients and categories of recipients to whom the personal data has been or will be disclosed. However, this is not an absolute right, and the interests of third parties may restrict your right to information.
Right to rectification: You have the right to rectify inaccurate personal data in accordance with Art. 16 GDPR. This means that you have the right to request that we rectify inaccurate personal data concerning you. Depending on the purpose of the processing, you may have the right to request the completion of incomplete personal data, including by means of a supplementary statement.
Right to erasure (“right to be forgotten”): In accordance with Art. 17 GDPR, you may request the erasure of your personal data. This means that under certain circumstances, you have the right to request that we erase personal data concerning you, and we are obliged to erase this personal data.
Right to restriction of processing: In accordance with Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data. This means that in this case, the data in question will be marked and may only be processed by us for specific purposes (e.g., with your consent or to assert legal claims).
Right to data portability: Under Art. 20 GDPR, you have the right, under certain circumstances, to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to transmit this data to another controller without hindrance from us.
Right to lodge a complaint with a supervisory authority: You also have the right to lodge a complaint with the competent data protection supervisory authority, primarily in an EU member state where you have your habitual residence or where the possible violation of the provisions of the GDPR occurred.
Under certain circumstances, you have the right to object to the processing of your personal data at any time for reasons arising from your particular situation or if personal data is processed by us for direct marketing purposes, and we may be required to no longer process your personal data. If your personal data is processed for direct marketing purposes, you also have the right to object at any time to the processing of your personal data for such marketing purposes. This also applies to profiling insofar as it is related to such direct marketing. In this case, we will no longer process your personal data for these purposes. To exercise your right to object, please send us an email to the address mentioned in section 1, if possible.
To exercise these rights in relation to data processing by the provider of the respective social network, please contact them using the contact options provided on their websites.
Additional information about the individual social networks
We have a presence on Facebook. This social network is provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter also referred to as “Meta”).
Information on the processing of personal data by the provider can be found in its privacy policy at the following link: https://de-de.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
In connection with the operation of our Facebook fan pages, Facebook provides us with so-called Page Insights data. This data consists of anonymous statistics that we use to evaluate the quality of our Facebook page and its content. These statistics are compiled on the basis of usage data collected by Facebook about your interaction with our Facebook page; we do not have access to this usage data. Further information about the use of your data in this context can be found at the following link: https://de-de.facebook.com/legal/terms/information_about_page_insights_data
With regard to Page Insights data, we have an agreement with Meta on joint responsibility in accordance with Art. 26 GDPR: https://de-de.facebook.com/legal/terms/page_controller_addendum
We have a presence on Instagram. This social network is provided by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour Dublin 2, Ireland (hereinafter also referred to as “Meta”).
Information on the processing of personal data by the provider can be found in its privacy policy at the following link: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect
In connection with the operation of our Instagram profile, Meta provides us with so-called Page Insights data. This data consists of anonymous statistics that we use to evaluate the quality of our Instagram profile and our content. These statistics are compiled on the basis of usage data collected by Meta about your interaction with our Instagram profile. We do not have access to this usage data. For more information about the use of your data in this context, please visit the following link: https://de-de.facebook.com/legal/terms/information_about_page_insights_data
With regard to Page Insights data, we have entered into an agreement with Meta on joint responsibility in accordance with Art. 26 GDPR: https://de-de.facebook.com/legal/terms/page_controller_addendum
We have a presence on LinkedIn. This social network is provided by LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.
Information on the processing of personal data by the provider can be found in its privacy policy at the following link: https://www.linkedin.com/legal/privacy-policy
In connection with the operation of our LinkedIn profile, LinkedIn provides us with so-called Page Insights data. This data consists of anonymous statistics that we use to evaluate the quality of our Instagram profile and our content. These statistics are compiled on the basis of usage data collected by LinkedIn about your interaction with our LinkedIn profile; we do not have access to this usage data. Further information about the use of your data in this context can be found at the following link: https://www.linkedin.com/help/linkedin/answer/a1338708?lang=en-US
With regard to Page Insights data, we have entered into a joint controller agreement with LinkedIn in accordance with Art. 26 GDPR: https://legal.linkedin.com/pages-joint-controller-addendum
We have a presence on Pinterest. This social network is provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
Information about the processing of personal data by the provider can be found in its privacy policy at the following link: https://policy.pinterest.com/de/privacy-policy
YouTube
We have a channel on YouTube. This social network is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
Information on the processing of personal data by the provider can be found in its privacy policy at the following link: https://policies.google.com/privacy
X (formerly Twitter)
We have a presence on X. This social network is provided by Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.
Information about the processing of personal data by the provider can be found in its privacy policy at the following link: https://x.com/de/privacy
The following tools are used:
Google Analytics
This website uses functions of the web analysis service Google Analytics. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.
Google Analytics enables the website operator to analyse the behaviour of website visitors. The website operator receives various usage data, such as page views, length of stay, operating systems used and the origin of the user. This data is summarised in a user ID and assigned to the respective end device of the website visitor.
Furthermore, we can use Google Analytics to record your mouse and scroll movements and clicks, among other things. Google Analytics also uses various modelling approaches to supplement the data sets collected and uses machine learning technologies in data analysis.
Google Analytics uses technologies that enable user recognition for the purpose of analysing user behaviour (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is usually transferred to a Google server in the USA and stored there.
The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the USA that aims to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
IP anonymisation
Google Analytics IP anonymisation is activated. This means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Browser plugin
You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.
Google Signals
We use Google Signals. When you visit our website, Google Analytics collects your location, search history, YouTube history, demographic data (visitor data), and other information. This data can be used for personalised advertising with the help of Google Signals. If you have a
Google account, the visitor data from Google Signal is linked to your Google account and used for personalised advertising messages. The data is also used to create anonymised statistics on the user behaviour of our users.
Order processing
We have concluded an order processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.
Google Analytics E-Commerce-Measurement
This website uses the ‘e-commerce measurement’ function of Google Analytics. With the help of e-commerce measurement, the website operator can analyse the purchasing behaviour of website visitors in order to improve their online marketing campaigns. This involves collecting information such as orders placed, average order values, shipping costs and the time from viewing to purchasing
a product. This data can be summarised by Google under a transaction ID that is assigned to the respective user or their device.
Mouseflow
We have integrated Mouseflow into this website. The provider is Mouseflow Inc., 106 E 6th St #900, Austin Texas, 78701, USA.
By using Mouseflow, we can analyse the behaviour of visitors to our website. This helps to improve the operator’s website and offer visitors a more pleasant user experience.
To achieve this goal, we mainly collect click paths from individual visits, known as ‘session replay’. During this process, we primarily collect information about how users interact with the website, such as clicking or touching, moving the mouse, scrolling and browsing the pages. In addition, we collect all keyboard entries via Mouseflow.
The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
You can also deactivate tracking via Mouseflow by clicking on the following link: https://mouseflow.com/opt-out/.
For further details, please refer to the provider’s privacy policy at https://mouseflow.com/legal/visitor/privacy-policy/ and https://mouseflow.com/legal/gdpr/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5609.
Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Meta-Pixel (formerly Facebook Pixel)
This website uses Meta’s visitor action pixel to measure conversions. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Meta, the data collected is also transferred to the United States and other third countries.
This allows the behaviour of website visitors to be tracked after they have been redirected to the provider’s website by clicking on a Meta advertisement. This enables the effectiveness of Meta advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimised.
The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Meta, so that a connection to the respective user profile on Facebook or Instagram is possible and Meta can use the data for its own advertising purposes in accordance with the Meta Data Use Policy (
https://de-de.facebook.com/about/privacy/). This enables Meta to place advertisements on Facebook or Instagram pages and other advertising channels. As the website operator, we have no influence over this use of the data.
The use of this service is based on your consent in accordance with Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG. Consent can be revoked at any time.
We use the extended matching function within Meta Pixel.
Advanced matching enables us to transmit various types of data (e.g. place of residence, state, postcode, hashed email addresses, names, gender, date of birth or telephone number) about our customers and prospects, which we collect via our website, to Meta. This allows us to tailor our advertising campaigns on Facebook and Instagram even more precisely to people who are interested in our offers. In addition, advanced matching improves the attribution of website conversions and expands custom audiences.
Insofar as personal data is collected on our website using the tool described here and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to the collection of data and its transfer to Meta. The processing carried out by Meta after the transfer is not part of the joint responsibility. The obligations incumbent upon us jointly have been set out in a joint processing agreement. The wording of the agreement can be found at:
https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Meta tool and for the data protection-compliant implementation of the tool on our website. Meta is responsible for the data security of Meta products. You can assert your rights as a data subject (e.g. requests for information) regarding the data processed by Facebook or Instagram directly with Meta. If you assert your rights as a data subject with us, we are obliged to forward them to Meta.
Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
You can find further information on the protection of your privacy in Meta’s privacy policy: https://de-de.facebook.com/about/privacy/.
You can also deactivate the ‘Custom Audiences’ remarketing function in the ad settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.
If you do not have a Facebook or Instagram account, you can deactivate usage-based advertising from Meta on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/4452.
We use the following plugins and tools:
YouTube with enhanced data protection
This website embeds videos from the YouTube website. The website is operated by Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.
When you visit one of these websites that has YouTube embedded, a connection to the YouTube servers is established. The YouTube server is informed which of our pages you have visited. If you are logged into your YouTube account, you enable YouTube to assign your surfing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.
We use YouTube in extended data protection mode. According to YouTube, videos played in extended data protection mode are not used to personalise surfing on YouTube. Advertisements played in extended data protection mode are also not personalised. No cookies are set in extended data protection mode. Instead, however, so-called local storage elements are stored in the user’s browser, which, similar to cookies, contain personal data and can be used for recognition purposes. Details on extended data protection mode can be found here:
https://support.google.com/youtube/answer/171780.
After activating a YouTube video, further data processing operations may be triggered over which we have no control.
The use of YouTube is in the interest of an appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
Further information on data protection at YouTube can be found in their privacy policy at: https://policies.google.com/privacy?hl=de.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Google Fonts (local Hosting)
This site uses Google Fonts, which are provided by Google, to ensure consistent font display. Google Fonts are installed locally. No connection to Google servers is established.
Further information about Google Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://policies.google.com/privacy?hl=de.
Font Awesome
This site uses Font Awesome for the uniform display of fonts and symbols. The provider is Fonticons, Inc., 6 Porter Road Apartment 3R, Cambridge, Massachusetts, USA.
When you visit a page, your browser loads the required fonts into its browser cache to display text, fonts and symbols correctly. For this purpose, the browser you are using must connect to the Font Awesome servers. This allows Font Awesome to know that this website has been accessed via your IP address. The use of Font Awesome is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the uniform display of the typeface on our website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
If your browser does not support Font Awesome, a standard font from your computer will be used.
Further information on Font Awesome can be found in Font Awesome’s privacy policy at:
https://fontawesome.com/privacy.
Google reCAPTCHA
We use ‘Google reCAPTCHA’ (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (‘Google’), Gordon House, Barrow Street, Dublin 4, Ireland.
reCAPTCHA is used to verify whether the data entered on this website (e.g. in a contact form) is entered by a human or by an automated programme. To do this, reCAPTCHA analyses the behaviour of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, length of time the website visitor stays on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.
The reCAPTCHA analyses run completely in the background. Website visitors are not notified that an analysis is taking place.
The storage and analysis of data is based on Art. 6 (1) lit. f GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and spam. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and § 25 (1) TDDDG, insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be revoked at any time.
For more information about Google reCAPTCHA, please refer to Google’s privacy policy and Google’s terms of use at the following links:
https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the United States that aims to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.
Ninja Firewall
We have integrated Ninja Firewall into this website. The provider is NinTechNet Limited, Unit 1603, 16th Floor, The L. Plaza 367 – 375 Queen’s Road Central Sheung Wan, Hong Kong (hereinafter referred to as Ninja Firewall).
Ninja Firewall serves to protect our website from unwanted access or malicious cyber attacks. For this purpose, Ninja Firewall collects IP addresses, requests, referrers and the time of page access. Ninja Firewall is integrated into our own servers and does not transmit any personal data to the provider of the tool or other third parties. We have activated IP anonymisation in Ninja Firewall so that the tool only records the IP address in truncated form.
The use of Ninja Firewall is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its website as effectively as possible against cyber attacks.
OMGF (Optimize My Google Fonts)
We use the OMGF (Optimize My Google Fonts) tool on this website. The provider is Daan van den Bergh, Waalre, Netherlands (hereinafter referred to as OMGF).
OMGF serves to integrate Google Fonts in a data protection-friendly manner by storing the required fonts locally on our server and integrating them from there. This prevents a connection to Google servers, in particular in the USA, from being established when our website is accessed.
OMGF does not process any personal data of website visitors and does not transfer any data to third parties.
The use of OMGF is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in the data protection-compliant, high-performance and legally compliant display of fonts on its website.
No online marketing programmes (affiliates) are used.
No e-commerce transactions take place via this website.
Data processing
We use online conference tools, among other things, to communicate with our customers. The specific tools we use are listed below. When you communicate with us via video or audio conference over the Internet, your personal data is collected and processed by us and the provider of the respective conference tool.
The conference tools collect all data that you provide/use to use the tools (e-mail address and/or your telephone number). Furthermore, the conference tools process the duration of the conference, the start and end (time) of participation in the conference, the number of participants and other
‘contextual information’ related to the communication process (metadata).
In addition, the provider of the tool processes all technical data required for the processing of online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker, and the type of connection.
If content is exchanged, uploaded or otherwise made available within the tool, it is also stored on the tool provider’s servers. Such content includes, in particular, cloud recordings, chat/instant messages, voicemails, uploaded photos and videos, files, whiteboards and other information shared while using the service.
Please note that we do not have full control over the data processing operations of the tools used. Our options are largely determined by the corporate policy of the respective provider. For further information on data processing by the conference tools, please refer to the privacy policies of the respective tools, which we have listed below this text.
Purpose and legal basis
The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest within the meaning of Art. 6 (1) lit. f GDPR). If consent has been requested, the use of the relevant tools is based on this consent; consent can be revoked at any time with effect for the future.
Storage period
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request us to do so, revoke your consent to storage, or the purpose for data storage no longer applies. Stored cookies remain on your device until you delete them. Mandatory legal retention periods remain unaffected.
We have no influence on the storage period of your data stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.
Conference tools used
We use the following conference tools:
Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. Details on data processing can be found in the Microsoft Teams privacy policy:
https://privacy.microsoft.com/de-de/privacystatement.
The company is certified under the EU-US Data Privacy Framework (DPF). The DPF is an agreement between the European Union and the US that aims to ensure compliance with European data protection standards when processing data in the US. Every company certified under the DPF undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/participant/6474.
Order processing
We have concluded an order processing agreement (AVV) for the use of the above-mentioned service. This is a contract required by data protection law, which ensures that the personal data of our website visitors is only processed in accordance with our instructions and in compliance with the GDPR.
Handling job applicant data
We offer you the opportunity to apply for a position with us (e.g., by email or post). Below, we provide information about the scope, purpose, and use of your personal data collected during the application process. We assure you that the collection, processing, and use of your data will be carried out in accordance with applicable data protection laws and all other legal provisions, and that your data will be treated as strictly confidential.
Scope and purpose of data collection
When you send us an application, we process your associated personal data (e.g., contact and communication data, application documents, notes taken during job interviews, etc.) to the extent necessary to decide whether to establish an employment relationship. The legal basis for this is Section 26 of the German Federal Data Protection Act (BDSG) (initiation of an employment relationship), Article 6(1)(b) of the GDPR (general contract initiation) and – if you have given your consent – Article 6(1)(a) of the GDPR. Consent can be revoked at any time. Your personal data will only be passed on within our company to persons involved in processing your application.
If your application is successful, the data you submit will be stored in our data processing systems on the basis of Section 26 BDSG and Art. 6 (1) lit. b GDPR for the purpose of implementing the employment relationship.
Data retention period
If we are unable to offer you a position, you decline a job offer, or you withdraw your application, we reserve the right to store the data you have provided on the basis of our legitimate interests (Art. 6 (1) (f) GDPR) for up to 6 months from the end of the application process (rejection or withdrawal of the application).
The data will then be deleted and the physical application documents destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is apparent that the data will be required after the 6-month period has expired (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.
Longer storage may also take place if you have given your consent (Art. 6 (1) (a) GDPR) or if statutory retention obligations prevent deletion.
Inclusion in the applicant pool
If we do not offer you a position, we may include you in our applicant pool. If you are included, all documents and information from your application will be transferred to the applicant pool so that we can contact you if a suitable vacancy arises.
Inclusion in the applicant pool is based exclusively on your express consent (Art. 6 (1) (a) GDPR). Consent is voluntary and is not related to the current application process. The data subject may revoke their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, provided there are no legal reasons for retention.
The data from the applicant pool will be irrevocably deleted no later than two years after consent has been given.