Privacy Policy

We host this website on Google Cloud Platform, a service provided by Google Cloud EMEA Limited, 70 Sir John Rogerson’s Quay, Dublin 2, Ireland (“Google Cloud”). When you access the website, Google Cloud processes in particular your IP address and technical connection data in server log files to deliver content and ensure stability and security.

We use Google Cloud on the basis of Article 6(1)(f) GDPR. Our legitimate interest is the secure, fast, and reliable provision of this website. Where data is processed outside the European Economic Area, Google bases transfers in particular on adequacy decisions and the European Commission’s Standard Contractual Clauses.

More information is available in the Google Cloud Privacy Notice and Cloud Data Processing Addendum.

• Google Cloud Privacy Notice
• Cloud Data Processing Addendum

Data processing

We have entered into a data processing agreement with Google Cloud. It requires Google Cloud to process our website visitors’ personal data only on our instructions and in compliance with applicable data protection law.

Data protection

We treat your personal data confidentially and in accordance with applicable data protection law and this Privacy Policy. Please note that transmitting data over the internet, including by email, can present security risks. Complete protection against third-party access is not possible.

Controller

The controller is the natural or legal person that determines, alone or jointly with others, the purposes and means of processing personal data.

Data Protection Officer

You can contact our Data Protection Officer at: Phone: +49 421 69 66 32-330 Email: stausch@datenschutz-nord.de

Storage period

Unless a more specific storage period is stated in this Privacy Policy, we retain personal data until the purpose for processing no longer applies. Following a legitimate request for erasure or withdrawal of consent, we erase data unless legally permissible reasons require further storage. Statutory retention periods remain unaffected.

Legal bases

Depending on the purpose, we process data based on your consent (Article 6(1)(a) GDPR and, where applicable, Article 9(2)(a) GDPR), performance of a contract or pre-contractual steps (Article 6(1)(b) GDPR), a legal obligation (Article 6(1)(c) GDPR), or our legitimate interests (Article 6(1)(f) GDPR). Access to or storage of information on your device is additionally based on Section 25 TDDDG where required.

Recipients of personal data

We use external parties and service providers in our business operations. We disclose data only where necessary to perform a contract, required by law, supported by a legitimate interest, or permitted by another legal basis. Processors are engaged under agreements pursuant to Article 28 GDPR.

Withdrawal of consent

You may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Right to object under Article 21 GDPR

Where processing is based on Article 6(1)(e) or (f) GDPR, you may object at any time on grounds relating to your particular situation. We will then cease processing unless we demonstrate compelling legitimate grounds or the processing is required to establish, exercise, or defend legal claims. You may object to direct marketing at any time without giving specific reasons.

Right to lodge a complaint

You may lodge a complaint with a data protection supervisory authority, particularly in the member state of your habitual residence, workplace, or the place of the alleged infringement. The State Commissioner for Data Protection and Freedom of Information of the Free Hanseatic City of Bremen is generally competent for us.

• Bremen data protection authority

Data portability

You have the right to receive data that we process automatically on the basis of consent or a contract in a commonly used, machine-readable format or, where technically feasible, have it transmitted to another controller.

Access, rectification, and erasure

Within the scope of applicable law, you have the right to access your stored personal data and, where applicable, request its rectification or erasure.

Restriction of processing

You may request restriction of processing, in particular where you dispute the accuracy of data, processing is unlawful, we no longer need the data but you require it for legal claims, or while an objection is being assessed.

This website uses SSL/TLS encryption for security and to protect confidential content. You can recognize an encrypted connection by “https://” and the padlock icon in your browser. When encryption is active, data you transmit cannot readily be read by third parties.

Cookies are small data packages stored on your device. Session cookies are deleted after your visit; persistent cookies remain until you delete them or your browser removes them automatically. Cookies may be set by us or by third parties.

We use strictly necessary cookies and similar technologies on the basis of Article 6(1)(f) GDPR and Section 25(2) TDDDG where required to provide a service you have expressly requested. We use all other cookies and similar technologies only with your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw consent at any time through the consent banner settings.

You can configure your browser to allow cookies only in individual cases, reject them generally, or delete them automatically when the browser closes. Disabling cookies may limit website functionality.

The hosting provider automatically collects and stores information transmitted by your browser in server log files. This may include browser type and version, operating system, referrer URL, host name, time of the server request, and IP address. We generally do not combine this data with other data sources.

Processing is based on Article 6(1)(f) GDPR. Our legitimate interest is the technically correct display, optimization, and security of this website.

Contact, newsletter, and registration forms

When you use a form, we process the contact details and message you submit to handle your inquiry, registration, or newsletter subscription. Processing is based on Article 6(1)(b) GDPR where connected to a contract or pre-contractual steps, otherwise on our legitimate interest in efficiently handling inquiries under Article 6(1)(f) GDPR or your consent under Article 6(1)(a) GDPR.

We retain this data until you request erasure, withdraw consent, or the processing purpose no longer applies. Statutory retention obligations remain unaffected. You can unsubscribe from newsletters at any time using the link in each message.

Requests by email or phone

If you contact us by email or phone, we store and process your request, including resulting personal data, to respond to you. The legal bases and storage periods described above for form inquiries apply accordingly.

We use HubSpot for contact, newsletter, and registration forms. The provider for users in the European Economic Area is HubSpot Ireland Limited, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland. HubSpot processes data you enter in a form as well as technical usage and device data required to display, secure, and operate the forms.

HubSpot processes form data as our processor. We have entered into a data processing agreement with HubSpot. Transfers to HubSpot, Inc. and other recipients in the United States cannot be excluded. HubSpot bases such transfers in particular on the EU-US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.

Where technically necessary data is processed to provide a form you requested, this is based on Article 6(1)(f) GDPR. Any additional cookies or similar technologies are used only with your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. We process data you submit using the legal bases described in “Contacting us”.

• HubSpot Privacy Policy
• HubSpot Data Processing Agreement

If we activate the Google tag and you have consented, we use it as a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. It allows us to measure the success of Google Ads (conversion tracking) and address website visitors again with targeted advertising (retargeting).

The Google tag may set cookies and collect the URL, truncated IP address, device and browser characteristics, and information about actions on the website. Processing takes place only with your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw consent at any time through the consent banner settings.

Data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-US Data Privacy Framework. Standard Contractual Clauses may also be used.

• Manage ad personalization
• Google Privacy Policy

If we activate the LinkedIn Insight Tag and you have consented, we use it as a service of LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland. It is used for audience measurement, conversion tracking, and targeted advertising on LinkedIn.

The tag may set cookies and collect the URL, referrer URL, truncated IP address, device and browser characteristics, and timestamps. Processing takes place only with your consent under Article 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw consent at any time through the consent banner settings.

Data may be transferred to LinkedIn Corporation in the United States. LinkedIn is certified under the EU-US Data Privacy Framework. Standard Contractual Clauses may also be used.

• LinkedIn opt-out
• LinkedIn Privacy Policy