Your rights.

Marcus Podorf is committed to upholding our civil and human rights, including our right to privacy, freedom of information and freedom of expression.

Information pursuant to Sect. 5 German Telemedia Act (TMG)

Marcus Podorf | Strategy Advisors & Ventures
Baerwaldstrasse 53,
Berlin, 10 961, Germany

Sales tax identification number according to Sect. 27 a of the Sales Tax Law

VAT ID DE284964758
Tax authority: Friedrichshain-Kreuzberg, Berlin
Entrepreneurship according to § 18 EStG

Creditreform Crefo No.: 2012926791
D-U-N-S® Ident No.: 344798882

Entrepreneur Marcus Podorf has the following, legally binding professional titles:

Diploma of Marketing and Communication (CCI) / Werbekaufmann IHK
Awarded by the Chamber of Commerce and Industry Dortmund in Jan 2002

Instructor for Marketing and Communication (HCC) / Ausbilder HK Hamburg
Awarded by the Hamburg Chamber of Commerce with Instructor Id 131000790382 in Oct 2009 without additional examination as a reward for his continuous education of young professionals since his early career. (Out of practice since mid-2012)

Insured risks

exali AG & Markel Insurance SE

Police: EX.MPI.48544

Consulting / Interim Manager D&O /
IT, Cyber & Data Security / Personal & Property Safety

Financial Loss Insurance (FLI)
General Liability Insurance (GLI)
Including product liability insurance

Up to 1,000,000.00 Euro for financial losses Triple aggregation of the sum insured

Up to 2,000,000.00 Euro lump sum for personal injuries and property damage
Triple aggregation of the sum insured

Interim Manager D&O: Up to 500,000.00 Euro per case and year

Insured risks vary, depending on individual customer contracts and scope of responsibilities.
Current insurance period: 23 Sept 2022 – 01 Oct 2025

Dispute resolution proceedings in front of a consumer arbitration board

We are not willing or obliged to participate in dispute resolution proceedings in front of a consumer arbitration board.

↓
1. An overview of data protection
2. Hosting
3. General information and mandatory information
4. Recording of data on this website
5. Payment service providers
6. Accounting and business intelligence
7. Visits at WeWork offices
8. Audio and video conferences (online based)
9. Hardware, software and additional services
10. Virtual collaboration tools
11. Applicants and employees
12. Recording of data through business partnerships

01. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what will happen with your personal data when you visit this website. The term ‘personal data’ comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the ‘controller’)?

The data on this website is processed by the operator of the website, whose contact information is available under section ‘Information about the responsible party (referred to as the ‘controller’ in the GDPR)’ in this Privacy Policy.

How do we record your data?

We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form.

Other data shall be recorded by our IT systems automatically or after you consent to its recording during your website visit. This data comprises primarily technical information (e.g., web browser, operating system, or time the site was accessed). This information is recorded automatically when you access this website.

What are the purposes we use your data for?

A portion of the information is generated to guarantee the error free provision of the website. Other data may be used to analyze your user patterns.

What rights do you have as far as your information is concerned?

You have the right to receive information about the source, recipients, and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have the right to demand that your data are rectified or eradicated. If you have consented to data processing, you have the option to revoke this consent at any time, which shall affect all future data processing. Moreover, you have the right to demand that the processing of your data be restricted under certain circumstances. Furthermore, you have the right to log a complaint with the competent supervising agency.

Please do not hesitate to contact us at any time if you have questions about this or any other data protection related issues.

Analysis tools and tools provided by third parties

There is a possibility that your browsing patterns will be statistically analyzed when your visit this website. Such analyses are performed primarily with what we refer to as analysis programs.

For detailed information about these analysis programs please consult our Data Protection Declaration below.

↑ Back to Privacy Policy overview

02. Hosting

Provider

We are hosting the content of our website at the provider Alfahosting.

The provider is the Alfahosting GmbH, Ankerstraße 3b, 06 108 Halle (Saale), Germany (hereinafter referred to as: ‘Alfahosting’). Whenever you visit our website, Alfahosting will record a variety of websites and statistics, including your IP addresses.

For details on data processing, please consult the Website and Data Privacy Policy of Alfahosting: https://alfahosting.de/datenschutz /.

We use Alfahosting on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in making the depiction of our website as dependable as possible. If you have been asked for your respective consent, processing shall occur exclusively on the basis of Art. 6 (1)(a) GDPR and § 25(1) TTDSG, if the consent comprises the archiving of cookies or access to information on the user’s device (e.g., device finger printing) as defined in the TTDSG. Such consent may be revoked at any time.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our website visitors only based on our instructions and in compliance with the GDPR.

↑ Back to Privacy Policy overview

03. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.

Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.

We herewith advise you that the transmission of data via the Internet (i.e., through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third-party access.

Information about the responsible party (referred to as the ‘controller’ in the GDPR)

The data processing controller on this website is:

Marcus Podorf | Strategy Advisors & Ventures
Baerwaldstrasse 53,
Berlin, 10 961, Germany

hello@marcuspodorf.com

The controller is the natural person or legal entity that single-handedly or jointly with others makes decisions as to the purposes of and resources for the processing of personal data (e.g., names, e-mail addresses, etc.).

Storage duration

Unless a more specific storage period has been specified in this privacy policy, your personal data will remain with us until the purpose for which it was collected no longer applies. If you assert a justified request for deletion or revoke your consent to data processing, your data will be deleted, unless we have other legally permissible reasons for storing your personal data (e.g., tax or commercial law retention periods); in the latter case, the deletion will take place after these reasons cease to apply.

General information on the legal basis for the data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if special categories of data are processed according to Art. 9 (1) DSGVO. In the case of explicit consent to the transfer of personal data to third countries, the data processing is also based on Art. 49 (1)(a) GDPR. If you have consented to the storage of cookies or to the access to information in your end device (e.g., via device fingerprinting), the data processing is additionally based on § 25 (1) TTDSG. The consent can be revoked at any time. If your data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, we process your data on the basis of Art. 6(1)(b) GDPR. Furthermore, if your data is required for the fulfillment of a legal obligation, we process it on the basis of Art. 6(1)(c) GDPR. Furthermore, the data processing may be carried out on the basis of our legitimate interest according to Art. 6(1)(f) GDPR. Information on the relevant legal basis in each individual case is provided in the following paragraphs of this privacy policy.

Information on data transfer to the USA and other non-EU countries

Among other things, we use tools of companies domiciled in the United States or other from a data protection perspective non-secure non-EU countries. If these tools are active, your personal data may potentially be transferred to these non-EU countries and may be processed there. We must point out that in these countries, a data protection level that is comparable to that in the EU cannot be guaranteed. For instance, U.S. enterprises are under a mandate to release personal data to the security agencies and you as the data subject do not have any litigation options to defend yourself in court. Hence, it cannot be ruled out that U.S. agencies (e.g., the Secret Service) may process, analyze, and permanently archive your personal data for surveillance purposes. We have no control over these processing activities.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your express consent. You can also revoke at any time any consent you have already given us. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses. Our supervisory agency is:

Die Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59-61
Berlin, 10 555, Germany
https://www.datenschutz-berlin.d e

Right to data portability

You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time.

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time. The right to demand restriction of processing applies in the following cases:

In the event that you should dispute the correctness of your data archived by us, we will usually need some time to verify this claim. During the time that this investigation is ongoing, you have the right to demand that we restrict the processing of your personal data.
If the processing of your personal data was/is conducted in an unlawful manner, you have the option to demand the restriction of the processing of your data in lieu of demanding the eradication of this data.
If we do not need your personal data any longer and you need it to exercise, defend or claim legal entitlements, you have the right to demand the restriction of the processing of your personal data instead of its eradication.
If you have raised an objection pursuant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each other. As long as it has not been determined whose interests prevail, you have the right to demand a restriction of the processing of your personal data.

If you have restricted the processing of your personal data, these data – with the exception of their archiving – may be processed only subject to your consent or to claim, exercise or defend legal entitlements or to protect the rights of other natural persons or legal entities or for important public interest reasons cited by the European Union or a member state of the EU.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption program. You can recognize an encrypted connection by checking whether the address line of the browser switches from ‘http://’ to ‘https://‘ and also by the appearance of the lock icon in the browser line.

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

↑ Back to Privacy Policy overview

04. Recording of data on this website

Cookies

Our website and pages do not use what the industry refers to as ‘cookies.’

SalesViewer® technology

This website uses SalesViewer® technology from SalesViewer® GmbH on the basis of the website operator’s legitimate interests (Section 6 paragraph 1 lit.f GDPR) in order to collect and save data on marketing, market research and optimisation purposes.

In order to do this, a javascript based code, which serves to capture company-related data and according website usage. The data captured using this technology are encrypted in a non-retrievable one-way function (so-called hashing). The data is immediately pseudonymised and is not used to identify website visitors personally

The data stored by Salesviewer will be deleted as soon as they are no longer required for their intended purpose and there are no legal obligations to retain them.

The data recording and storage can be repealed at any time with immediate effect for the future, by clicking on https://www.salesviewer.com/opt-ou t in order to prevent SalesViewer® from recording your data. In this case, an opt-out cookie for this website is saved on your device. If you delete the cookies in the browser, you will need to click on this link again.

For details on data processing, please consult the Website and Data Privacy Policy of SalesViewer®: https://www.salesv iewer.com/en/privacy-policy/.

Request by e-mail, telephone or postal services

If you contact us by e-mail, telephone or postal services, your request, including all resulting personal data (e-mail, phone number, name, address, date, request) will be stored and processed by us for the purpose of processing your request. We do not pass these data on without your consent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the fulfillment of a contract or is required for the performance of pre-contractual measures. In all other cases, the data are processed on the basis of our legitimate interest in the effective handling of inquiries submitted to us (Art. 6(1)(f) GDPR) or on the basis of your consent (Art. 6(1)(a) GDPR) if it has been obtained; the consent can be revoked at any time.

The data sent by you to us via e-mail remain with us until you request us to delete, revoke your consent to the storage or the purpose for the data storage lapses (e.g. after completion of your request). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

E-mail service provider

We use Microsoft Exchange (EU Cloud) and Microsoft Office 365 (EU Cloud) technologies for our e-mail services within the domain marcuspodorf.com.

The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter referred to as: ‘Microsoft’). For details on data processing, please consult the Website and Data Privacy Policy of Microsoft: https://privacy.microsoft.com/en-us/privacystatement and https://www.microsof t.com/en/trust-center/privacy?rtc=1.

We have concluded a data processing agreement (DPA) for the use of the services through our provider Alfahosting GmbH, Ankerstraße 3b, 06108 Halle (Saale), Germany, and with Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. This is a contract mandated by data privacy laws that guarantees that they process personal data of our contractors and customers only based on our instructions and in compliance with the GDPR.

SwissSign e-mail encryption

Our e-mails can be digitally signed and encrypted with SwissSign certificates. The recipient of our e-mails must use equivalent or higher standards to benefit from digital signatures and encryption.

The encryption and key provider is the SwissSign AG, Sägereistrasse 25, CH-8152 Glattbrugg, Switzerland (hereinafter referred to as: ‘SwissSign’). For details, please consult the Website and Data Privacy Policy of SwissSign: https://www.swisssign.com/en/datenschutz.htm l.

Our certificate standards within the domain marcuspodorf.com are:

Recognized root CA
SHA-2 hash algorithm
Encryption up to 256 bits
Key length of 2048 bit
Key Usage: Digital Signature, Key Encipherment, Data Encipherment, secure email
Distribution: All major browsers and platforms
Support of directory services (LDAP) for mutual key exchange under the search field at swisssign.net or under directory.swisssign.net with the search basis ‹o=SwissSign,c=CH›
Validity check with OCSP and CRL
Support of directory services (LDAP) for a mutual key exchange via the search of swisssign.net or via directory.swisssign.net with search base ‘o=SwissSign,c=CH’.

↑ Back to Privacy Policy overview

05. Payment service providers

Payment services

We integrate payment services of third-party companies in our account management processes. When you operate business with us, your payment data (e.g. name, payment amount, bank account details, e-mail addresses, additional invoice information according to §14 (4) UStG.) are processed by our payment service providers for the purpose of payment processing. For these transactions, the respective contractual and data protection provisions of the respective providers apply. The use of the payment service providers is based on Art. 6(1)(b) GDPR (contract processing) and in the interest of a smooth, convenient, and secure payment transaction (Art. 6(1)(f) GDPR). Insofar as your consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for data processing; consent may be revoked at any time for the future.

Bank transactions

We use the following payment services / payment service providers within the scope of business bank transactions:

Qonto

We proceed business service transactions via Qonto. The provider of Qonto services is Qonto OLINDA SAS, 18 rue de Navarin, Paris, 75 009, France (hereinafter referred to as: ‘Qonto’).

Whenever we receive or send a transaction via Qonto, the service provider will record a variety of data and statistics, including business partner’s name, bank details and additional, transaction related, personal, third-party and public information. It is possible for us to review, enhance and export these data for business intelligence purposes and insights within legal regulations. National and local tax authorities can access these data for the purpose of account and tax reviews at any time. You can not request us to delete any Qonto bank transaction data or revoke your consent to the to the processing, storage and transmission of these data.

For details on data processing, please consult the Website and Data Privacy Policy of Qonto: https://legal.qonto.com/en#template-6uiwuhdde.

N26

We proceed business service transactions via N26. The provider of this banking and payment service is: N26 AG, Klosterstr. 62, Berlin, 10 179, Germany (hereinafter referred to as: ‘N26’).

Whenever we receive or send a transaction via N26, the service provider will record a variety of data and statistics, including our business partner’s name, bank details and additional, transaction related information. It is possible for us to review, enhance and export these data for business intelligence purposes and insights within legal regulations. National and local tax authorities can access these data for the purpose of account and tax reviews at any time. You can not request us to delete any N26 bank transaction data or revoke your consent to the to the processing, storage and transmission of these data.

For details on data processing, please consult the Website and Data Privacy Policy of N26: https://docs.n26.com/legal/01+DE/03+Privacy+Policy/en/01privacy-policy-en.pdf.

Digital payments

We use the following payment services / payment service providers within the scope of digital payments for business services:

Wise

We proceed international, business service payments for selected contractors via Wise. The provider of this payment service is Wise Europe SA, Avenue Louise 54, Room s52, Brussels, 1050, Belgium (hereinafter referred to as: ‘Wise’).

Whenever we send transactions via Wise, the service provider will record a variety of data and statistics, including our business partner’s name, bank details, legal registration information, addresses, e-mail addresses, transaction data and additional, transaction related information and credentials. It is possible for us to attribute, review and export these data for business intelligence purposes and insights within legal regulations. National and local tax authorities can access these data for the purpose of account and tax reviews at any time. You can not request us to delete any Wise transaction data or revoke your consent to the to the processing, storage and transmission of these data.

For details on data processing, please consult the Website and Data Privacy Policy of Wise: https://wise.com/gb/legal/privacy-policy-e ea.

↑ Back to Privacy Policy overview

06. Accounting and business intelligence

We integrate accounting, automation and business intelligence services in our business strategies and operations. When you operate business with us, your payment data (e.g. name, payment amount, bank account details, e-mail addresses, additional invoice information according to §14 (4) UStG.) are processed by our service providers for the purpose of accounting and payment processing. For these transactions, the respective contractual and data protection provisions of the respective providers apply. The use of the service providers is based on Art. 6(1)(b) GDPR (contract processing) and in the interest of a smooth, convenient, and secure accounting process (Art. 6(1)(f) GDPR). Insofar as your consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for data processing; consent may be revoked at any time for the future.

Accounting

We use the following services and service providers within the scope of our accounting:

accountable

We use digital accountable integrations and services. The provider of accountable’s services is Accountable SA, 22 drève des Weigélias, Brussels, 1170, Belgium (hereinafter referred to as: ‘accountable’).

Whenever we send or receive an invoice, accountable will record a variety of data and statistics, including our business partner’s names, bank details, legal registration information, addresses, transaction data and additional, invoice related information and credentials. We also process allocations to accounts and record payment histories of our business partners. It is possible for us to review, enhance and export these data for business intelligence purposes and insights within legal regulations. National and local tax authorities can access these data for the purpose of account and tax reviews at any time. You can not request us to delete any of these data or revoke your consent to the processing, storage and transmission of these data.

For details on data processing, please consult the Website and Data Privacy Policy of accountable: https://www.accountable.de/datenschutzerklaerung /.

DATEV

We use digital DATEV integrations and services. The provider of DATEV services is DATEV eG, Paumgartnerstr. 6-14, Nuernberg, 90 429, Germany (hereinafter referred to as: ‘DATEV’).

Whenever we send or receive an invoice, DATEV will record a variety of data and statistics, including our business partner’s names, bank details, legal registration information, addresses, transaction data and additional, invoice related information and credentials. We also process allocations to accounts and record payment histories of our business partners. It is possible for us to review, enhance and export these data for business intelligence purposes and insights within legal regulations. National and local tax authorities can access these data for the purpose of account and tax reviews at any time. You can not request us to delete any of these data or revoke your consent to the processing, storage and transmission of these data.

For details on data processing, please consult the Website and Data Privacy Policy of DATEV: https://www.datev.de/web/de/m/ueber-datev/datenschutz/.

Qonto

We use digital Qonto integrations and services. The provider of Qonto services is Qonto OLINDA SAS, 18 rue de Navarin, Paris, 75 009, France (hereinafter referred to as: ‘Qonto’).

Whenever we send or receive an invoice, Qonto will record a variety of data and statistics, including our business partner’s names, bank details, legal registration information, addresses, transaction data and additional, invoice related information and credentials. We also process allocations to accounts and record payment histories of our business partners. It is possible for us to review, enhance and export these data for business intelligence purposes and insights within legal regulations. National and local tax authorities can access these data for the purpose of account and tax reviews at any time. You can not request us to delete any of these data or revoke your consent to the processing, storage and transmission of these data.

For details on data processing, please consult the Website and Data Privacy Policy of Qonto: https://legal.qonto.com/en#template-6uiwuhdd e.

↑ Back to Privacy Policy overview

07. Visits at WeWork

Data recording prior to visits

Our office services provider and data processor for visits of our business partners are the companies WeWork Germany GmbH, Dircksenstrasse 3, Berlin, 10 179, Germany and WeWork Companies LLC (hereinafter referred to as: ‘WeWork’).

We operate our business under highest safety and security measures. If you visit us for a business meeting at any WeWork office around the globe, you will be asked by us for registration and your permission to process this registration data for the purpose of your visit. We do not submit registration data without your prior consent. Registration data include your name, your e-mail address and additional, personal information (‘verification data’) when you arrive for the meeting and enter the building. WeWork will ask for your consent to process and store verification data. These verification data can include a temporary, identifiable personal picture and the personal signature of our business partners. All registration and verification data is processed and stored for security purposes within legal regulations. All public areas of WeWork office buildings are equipped with cameras. Video material can be permanently stored for security purposes within legal regulations.

For details, please consult the Website and Data Privacy Policy of WeWork: https://www.wework.com/en-GB/legal/global-privacy-policy.

↑ Back to Privacy Policy overview

08. Conference tools: audio and video conferences (online based)

Data processing

We use online conference tools, among other things, for communication with our business partners. The tools we use are listed in detail below. If you communicate with us by video or audio conference using the Internet, your personal data will be collected and processed by the provider of the respective conference tool and by us. The conferencing tools collect all information that you provide/access to use the tools (e-mail address and/or your phone number). Furthermore, the conference tools process the duration of the conference, start and end (time) of participation in the conference, number of participants and other ‘context information’ related to the communication process (metadata).

Furthermore, the provider of the tool processes all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.

Should content be exchanged, uploaded, or otherwise made available within the tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/ instant messages, voicemail, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have complete influence on the data processing procedures of the tools used. Our possibilities are largely determined by the corporate policy of the respective provider. Further information on data processing by the conference tools can be found in the data protection declarations of the tools used, and which we have listed below this text.

Purpose and legal bases

The conference tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate communication with us or our company (legitimate interest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.

Duration of storage

Data collected directly by us via the video and conference tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected.

We have no influence on the duration of storage of your data that is stored by the operators of the conference tools for their own purposes. For details, please directly contact the operators of the conference tools.

Conference tools used

Microsoft Teams

We use Microsoft Teams. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter referred to as: ‘Microsoft’). For details on data processing, please consult the Website and Data Privacy Policy of Microsoft: https://privacy.microsoft.com/en-us/privacystatement and https://www.microsoft.com/en/trust-center/privacy?rtc=1.

↑ Back to Privacy Policy overview

09. Hardware, software and additional services

Data processing

We use specific hardware and software, among other services, for projects and communication with our business partners. The solutions we use are listed in detail below. If you communicate with us by chat, e-mail, video or audio in the Internet, your personal data will be collected and processed by the provider of the respective solution and by us. The solutions collect all information that you provide/access to use the tools (phone number, e-mail address, name). Furthermore, the solutions process ‘context information’ related to our projects and communication process (metadata).

Furthermore, the manufacturers and providers of the solutions process all the technical data required for the processing of the online communication. This includes, in particular, IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or loudspeaker and the type of connection.

Should content be exchanged, uploaded, or otherwise made available within the solution, it is also stored on the servers of the solution provider. Such content includes, but is not limited to, cloud recordings, chat/instant messages, voicemail, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Please note that we do not have complete influence on the data processing procedures of the solutions used. Our possibilities are largely determined by the corporate policy of the respective manufacturer and solution provider. Further information on data processing by our hardware, software and additional services can be found in the data protection declarations of the manufacturers and solution providers, and which we have listed below this text.

Purpose and legal bases

Hardware, software and service solutions are used to work for and communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate collaboration and communication with us or our company (legitimate interest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.

Duration of storage

Data collected directly by us via the solutions will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected.

We have no influence on the duration of storage of your data that is stored by the operators of the solutions for their own purposes. For details, please directly contact the manufacturer and providers of the solutions.

Solutions used

Apple hardware, software and services

We maintain a business service partnership with Apple and use Apple hardware, software and additional Apple services.

Manufacturer and solution providers are the companies Apple Inc., One Apple Park Way, Cupertino, CA 95014, United States of America, and its European subsidiaries (1) Apple Computer Limited, Hollyhill Industrial Estate, Cork, Ireland, (2) Apple Jungfernstieg, Apple Retail Germany B.V. & Co. KG, Jungfernstieg 12, 20 354 Hamburg, Germany, and (3) Apple Distribution International Ltd., Ireland (ADI) for related Apple Business and apple.com services. For details on data processing, please consult the Website and Data Privacy Policy of Apple: https://www.apple.com/legal/privacy/en-ww/.

Adobe software and services

We use Adobe software and services. The solution provider is the company Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Saggart D24, Dublin, Irland (hereinafter referred to as: ‘Adobe’). For details on data processing, please consult the Website and Data Privacy Policy of Adobe: https://www.adobe.com/privacy.html.

For specific purposes, we process data from our business partners with solutions from Adobe. Our security measures will ask our business partners for prior consent before processing personal, identifiable data.

We have concluded a data processing agreement (DPA) for the use of the services with Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Saggart D24, Dublin, Irland. This is a contract mandated by data privacy laws that guarantees that they process personal data of our contractors and customers only based on our instructions and in compliance with the GDPR.

Microsoft software and services

We use Microsoft software, services and Microsoft Office 365 (EU Cloud). The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter referred to as: ‘Microsoft’). For details on data processing, please consult the Website and Data Privacy Policy of Microsoft: https://privacy.microsoft.com/en-us/privacystatement and https://www.microsoft.com/en/trust-center/privacy?rtc=1.

For specific purposes, we process data from our business partners with solutions from Microsoft. Our security measures will ask our business partners for prior consent before processing personal, identifiable data.

We have concluded a data processing agreement (DPA) for the use of the services through our provider Alfahosting GmbH, Ankerstraße 3b, 06 108 Halle (Saale), Germany, and with Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. This is a contract mandated by data privacy laws that guarantees that they process personal data of our contractors and customers only based on our instructions and in compliance with the GDPR.

LinkedIn services

Access to LinkedIn information within Microsoft apps and services makes it easier for us and our software users to connect, engage, and build professional relationships with colleagues, customers, and partners inside and outside our organisation. New users can get up to speed faster by connecting with colleagues, learning more about them, and easily accessing more information.

Data that is accessed by us from LinkedIn is not stored permanently in Microsoft services. Data that is accessed from Microsoft is also not stored permanently with LinkedIn.

When our users connect their accounts, information and insights from LinkedIn are available in some Microsoft apps, like the profile card. Users can also expect their networking experience on LinkedIn to be improved and enriched with information from Microsoft.

Users can disconnect accounts and remove data access permissions at any time, and users can control how their own LinkedIn profile is viewed, including whether their profile can be viewed in Microsoft apps. For more information about Microsoft’s use of personal data, please also review the Microsoft Privacy Statement.

Our internal policy for LinkedIn x Microsoft services can be reviewed in section 11. Applicants and employees below.

↑ Back to Privacy Policy overview

10. Virtual collaboration tools

Data processing

We use online collaboration tools, among other things, for projects and communication with our business partner. The tools we use are listed in detail below. If you communicate with us by chat, e-mail, video or audio in the Internet, your personal data will be collected and processed by the provider of the respective collaboration tool and by us. The collaboration tools collect all information that you provide/access to use the tools (email address, name). Furthermore, the collaboration tools process ‘context information’ related to the projects and communication process (metadata).

Should content be exchanged, uploaded, or otherwise made available within the collaboration tool, it is also stored on the servers of the tool provider. Such content includes, but is not limited to, cloud recordings, chat/instant messages, voicemail, uploaded photos and videos, files, whiteboards, and other information shared while using the service.

Purpose and legal bases

The collaboration tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1)(b) GDPR). Furthermore, the use of the tools serves to generally simplify and accelerate collaboration and communication with us or our company (legitimate interest in the meaning of Art. 6(1)(f) GDPR). Insofar as consent has been requested, the tools in question will be used on the basis of this consent; the consent may be revoked at any time with effect from that date.

Duration of storage

Data collected directly by us via the collaboration tools will be deleted from our systems immediately after you request us to delete it, revoke your consent to storage, or the reason for storing the data no longer applies. Stored cookies remain on your end device until you delete them. Mandatory legal retention periods remain unaffected.

We have no influence on the duration of storage of your data that is stored by the operators of the collaboration tools for their own purposes. For details, please directly contact the operators of the tools.

Collaboration tools used

Asana

We use Asana. The tool provider Asana, Inc. is located at 633 Folsom Street Suite 100, San Francisco, CA 94107-3600, United States of America. For details on data processing, please consult the Website and Data Privacy Policy of Asana: https://asana.com/terms.

For specific purposes, we occasionally process data from our business partners with Asana. Our security measures will ask our business partners for prior consent before processing personal, identifiable data.

We have concluded a data processing agreement (DPA) for the use of the service. This is a contract mandated by data privacy laws that guarantees that they process personal data of our business partners only based on our instructions and in compliance with the GDPR.

Miro

We use Miro. The tool provider is the company RealtimeBoard, Inc. dba Miro (‘Miro’), 201 Spear Street, Suite 1100, San Francisco, CA 94105, United States of America. For details on data processing, please consult the Website and Data Privacy Policy of Miro: https://miro.com/legal/privacy-policy/.

For specific purposes, we occasionally process data from our business partners with Miro. Our security measures will ask our business partners for prior consent before processing personal, identifiable data.

Sketch

We use Sketch. The tool provider is the company Sketch B.V., Flight Forum 40, Ground floor, 5657 DB Eindhoven, the Netherlands. For details on data processing, please consult the Website and Data Privacy Policy of Sketch: https://www.sket ch.com/legal/.

For specific purposes, we occasionally process data from our business partners with Sketch. Our security measures will ask our business partners for prior consent before processing personal, identifiable data.

Slack

We use Slack. The tool provider is the company Slack Technologies, LLC or Slack Technologies Limited, 50 Fremont Street, San Francisco, CA, 94105, United States. For details on data processing, please consult the Website and Data Privacy Policy of Slack: https://slack.com/trust/privacy/privacy-policy.

For specific purposes, we occasionally process data from our business partners with Slack. Our security measures will ask our business partners for prior consent before processing personal, identifiable data.

↑ Back to Privacy Policy overview

11. Applicants and employees

Handling applicant data

We offer website visitors the opportunity to submit job applications to us (e.g., via e-mail and via postal services). Below, we will brief you on the scope, purpose and use of the personal data collected from you in conjunction with the application process. We assure you that the collection, processing, and use of your data will occur in compliance with the applicable data privacy rights and all other statutory provisions and that your data will always be treated as strictly confidential.

Scope and purpose of the collection of data

If you submit a job application to us, we will process any affiliated personal data (e.g., contact and communications data, application documents, notes taken during job interviews, etc.), if they are required to make a decision concerning the establishment or an employment relationship. The legal grounds for the aforementioned are § 26 BDSG according to German Law (Negotiation of an Employment Relationship), Art. 6(1)(b) GDPR (General Contract Negotiations) and – provided you have given us your consent – Art. 6(1)(a) GDPR. You may revoke any consent given at any time. Within our company, your personal data will only be shared with individuals who are involved in the processing of your job application.

If your job application should result in your recruitment, the data you have submitted will be archived on the grounds of § 26 BDSG and Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship in our data processing system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or withdraw your application, we reserve the right to retain the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months from the end of the application procedure (rejection or withdrawal of the application). Afterwards the data will be deleted, and the physical application documents will be destroyed. The storage serves in particular as evidence in the event of a legal dispute. If it is evident that the data will be required after the expiry of the 6-month period (e.g., due to an impending or pending legal dispute), deletion will only take place when the purpose for further storage no longer applies.

Longer storage may also take place if you have given your agreement (Article 6(1)(a) GDPR) or if statutory data retention requirements preclude the deletion.

Admission to the applicant pool

If we do not make you a job offer, you may be able to join our applicant pool. In case of admission, all documents and information from the application will be transferred to the applicant pool in order to contact you in case of suitable vacancies.

Admission to the applicant pool is based exclusively on your express agreement (Art. 6(1)(a) GDPR). The submission agreement is voluntary and has no relation to the ongoing application procedure. The affected person can revoke his agreement at any time. In this case, the data from the applicant pool will be irrevocably deleted, provided there are no legal reasons for storage.

The data from the applicant pool will be irrevocably deleted no later than two years after consent has been granted.

LinkedIn x Microsoft services

Access to LinkedIn information within Microsoft apps and services makes it easier for our Microsoft business services users to connect, engage, and build professional relationships with colleagues, customers, and partners inside and outside our organisation. New users can get up to speed faster by connecting with colleagues, learning more about them, and easily accessing more information.

When you connect your accounts, information and insights from LinkedIn are available in some Microsoft apps, like the profile card. You can also expect your networking experience on LinkedIn to be improved and enriched with information from Microsoft.

When you connect your LinkedIn and Microsoft business accounts, you have two options:

Give permission for data to be accessed from both accounts. This means that you give permission for your Microsoft business account to access data from your LinkedIn account, and for your LinkedIn account to access data from your Microsoft work or school account.
Give permission for only the LinkedIn data to be accessed by your Microsoft business account.

You can disconnect accounts and remove data access permissions at any time, and you can also control how your own LinkedIn profile is viewed, including whether your profile can be viewed in Microsoft apps.

Data that is accessed by us from LinkedIn is not stored permanently in Microsoft services. Data that is accessed from Microsoft is also not stored permanently with LinkedIn.

LinkedIn account data

When you connect your Microsoft and LinkedIn accounts, you allow LinkedIn to provide the following data to Microsoft:

Profile data – includes LinkedIn identity, contact information, and the information you share with others on your LinkedIn profile.
Interests data – includes interests on LinkedIn, such as people and topics you follow, courses groups, and content you like and share.
Subscriptions data – includes subscriptions to LinkedIn applications and services along with associated data.
Connections data – includes your LinkedIn network including profiles and contact information of your 1st-degree connections.

Data that is accessed from LinkedIn is not stored permanently in Microsoft services. For more information about Microsoft’s use of personal data, please review the Microsoft Privacy Statement.

Microsoft account data

When you connect your Microsoft and LinkedIn accounts, you allow Microsoft to provide the following data to LinkedIn:

Profile data – includes information like your first name, last name, profile photo, email address, manager, and people that you manage.
Calendar data – includes meetings in your calendars, their times, locations, and attendees’ contact information. Information about the meeting, like agenda, content, or meeting title is not included in the calendar data.
Interests data – includes the interests associated with your account, based on your use of Microsoft services, such as Cortana and Bing for Business.
Subscriptions data – includes subscriptions provided by your organization to Microsoft apps and services, such as Microsoft 365.
Contacts data – includes contact lists in Outlook, Skype, and other Microsoft account services, including the contact information for people you frequently communicate or collaborate with. Contacts will be periodically imported, stored, and used by LinkedIn, for example to suggest connections, help organize contacts, and show updates about contacts.

Data that is accessed from Microsoft is not stored permanently with LinkedIn. For more information on LinkedIn’s use of personal data, see the LinkedIn Privacy Policy. For LinkedIn services, data transfer, and storage, data can flow from the European Union to the United States and back, and your privacy is protected as described in European Union data transfers.

For more information about Microsoft’s use of personal data, please review the Microsoft Privacy Statement.

↑ Back to Privacy Policy overview

12. Recording of data through business partnerships

Data processing

Some of our business partners use e. g., partner IDs, URL tracking or cookies among other things for referral programs. If we recommend you to business partners, your personal data will be collected, processed and enhanced by these partners with unique identifiers. Data we receive in return are usually partially or fully anonymised, these data are only used for billing purposes. Business partners collect all information that you provide to access and use their services and products (e. g. your e-mail address, your full name, postal and business/billing addresses and/or your phone numbers).

Please note that we do have very limited or no influence on the data processing procedures of our business partners. Our possibilities are largely determined by the corporate policy of the respective service provider. Further information on data processing by our business partners can be found in the data protection declarations of each partner’s website, service and product offering.

↑ Back to Privacy Policy overview

Last updated: 20 Nov 2024