General Privacy Policy

Our websites are operated (hosted) on our own servers at a German location.

We process stock data, contact data, content data, contract data, usage data, meta and / or communication data of customers, interested parties and visitors of our online offer on the basis of our legitimate interests in an efficient and secure provision of this online offer according to GDPR Art. 6 section 1 letter f.

Each time you access our website, data is transmitted to us by your Internet browser and stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of GDPR Art. 6 section 1 letter f from our legitimate interest in ensuring trouble-free operation of our website and to improve our offer.

The server log file information is stored for security reasons (e.g. to clarify acts of abuse or fraud) for a maximum period of 21 days and then deleted. Data whose further storage is required for evidentiary purposes is exempt from deletion until final clarification of the respective incident.

This site uses SSL encryption for security reasons and for the protection of the transmission of confidential content such as the inquiries you send to us as a site operator. An encrypted connection indicates that the browser's address line changes from "http://" to "https://" and that the lock icon in your browser line is visible.

If the SSL encryption is activated, the data that you transfer to us can not be read by third parties.

Our Website partly uses so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called "session cookies". They are automatically deleted after the end of your visit. Other cookies remain stored on your terminal device until you delete them. These cookies allow us to recognize your browser on your next visit. The use of cookies is based on GDPR Art. 6 section 1 letter f (processing is necessary to protect the legitimate interests of the controller or a third party).

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, as well as activate the automatic deletion of cookies when closing the browser. When deactivating cookies, the functionality of this website may be limited.

With regard to the storage period, the following types of cookies are distinguished:

• Temporary cookies (also: session cookies): Temporary cookies are deleted at the latest after you have left our website and closed your end device (e.g. browser or mobile app).

• Permanent cookies: Permanent cookies remain stored even after you close your end device. For example, login status can be saved or preferred content can be displayed directly when you visit our website again. Likewise, the data collected with the help of cookies can be used for reach measurement. Unless we provide explicit information about the type and storage duration of cookies (e.g., as part of obtaining consent), you can assume that the stored cookies are permanent and the storage period can be up to two years.

We use cookies only in accordance with the law. Therefore, we obtain consent from you before you use our website. You can revoke the consent at any time and it contains all information about the respective cookie use.

In the context of your declaration of consent to the use of cookies, your declaration will be saved so that it does not have to be repeated and the consent can be proven in accordance with the legal obligation. The storage can take place on the server side and/or in a cookie (so-called opt-in cookie or with the help of comparable technologies) in order to be able to assign the consent to you or your end device.

The duration of the storage of the consent can be up to two years. A pseudonymous user identifier is created and stored with the time of consent, information on the scope of consent (e.g. which categories of cookies and/or service providers) and the browser, system and end device used.

The legal basis under data protection law on which we process your personal data using cookies depends on whether we ask you for consent. If you consent, the legal basis for processing your data is your declared consent. Otherwise, the data processed with the help of cookies will be processed on the basis of our legitimate interests (e.g. in the business operation of our online offer and improvement of its usability) or, if this is done in the context of the fulfillment of our contractual obligations, if the use of cookies is necessary to fulfill our contractual obligations.

You can revoke the consents you have given at any time and also file an objection to the processing in accordance with the legal requirements in GDPR Art. 21. You can also declare your objection by means of the settings of your browser.

Unless otherwise stated in this privacy policy, we only use technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

The processing of your personal data is based on GDPR Art. 6 section 1 letter f from our legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

This website uses the open source web analytics service Matomo. Matomo uses cookies, which means text files that are stored on your computer and allow us to analyse your usage of our website. For this purpose, the information generated with the cookie is stored on our server. Your IP address is anonymized before storage.

The information on the use of this website generated by the cookie is not passed on to third parties. You can prevent cookies from being saved by setting your browser software accordingly; however, we would point out that in this case you may not be able to fully utilize all the functions of this website.

If you do not agree to the storage and use of your data, you may wish to deactivate it under the Disable Link below. In this case, an opt-out cookie is stored in your browser which prevents Matomo from storing user data. If you delete your cookies, this also means that the Matomo Opt-Out cookie is also deleted. The opt-out must be reactivated when you visit our site again.

For more information, please see Matomo's Privacy Statement https://matomo.org/privacy/.

Matomo disable

If you have any questions, we offer you the opportunity to contact us using the form provided on the website. At least the following information is required: Name and email address, so that we know who the request comes from and to be able to answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with GDPR Art. 6 section 1 letter abased on your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been dealt with.

This site uses Zendesk Chat (formerly Zopim), a live chat software. While using Zendesk Chat it is shown whether one of our employees is online to provide an immediate response to any question a user has. For this purpose, all visitors of our pages are recorded with their IP address and the page visited at the moment. The IP address is anonymized.

Zendesk Chat uses cookies. The information on the use of our website (including your anonymous IP address) generated by the cookie is transferred to a Zendesk Chat server in the USA and stored there. The information is only visible for the moment of the stay on a certain page and will not be saved. Conducted chats are logged and saved. You can prevent the installation of cookies by setting your browser software; accordingly, we would like to point out that in this case not all functions of the website can be used fully.

Company: Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA.

Website: www.zendesk.com

You can obtain information on data protection at HubSpot at https://www.zendesk.com/company/privacy.

The processing of your data via Zendesk Chat is based on your consent in accordance with GDPR Art. 6 section 1 letter a. You can object to this storage at any time. Please address your objection to the Zendesk data protection officer at privacy@zendesk.com.

By using this website, you agree to the processing of the data collected about you by Zendesk Chat in contact form will be automatically deleted after your request has been dealt with.

If you contact us on your own initiative, we will collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of processing and answering your contact request.

If the contact serves the implementation of pre-contractual measures (e.g. advice on our service, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of GDPR Art. 6 section 1 letter b. If the contact is made for other reasons, this data processing is carried out on the basis of GDPR Art. 6 section 1 letter f from our legitimate interest in processing and responding to your request.

In this case, you have the right to object at any time to this processing of personal data relating to you based on GDPR Art. 6 section 1letter f for reasons arising from your particular situation. Please address your objection to our data protection officer.

During user registration, we collect certain personal data as registration information (mandatory fields). This data includes the title, last name, e-mail address and password and, in the case of legal entities, additionally the company name of the legal entity.

The application for a micropayment account and the use of the offered payment services are only possible if the necessary data (hereinafter also referred to as "master data") were completely and correctly provided. This data can be entered at the beginning and supplemented later.

The application for a micropayment account and the use of the offered payment services are only possible if a user has provided the necessary data (hereinafter also referred to as "Master Data") completely and correctly. This data can be entered at the beginning or added later before an activation decision is made.

For companies, the necessary master data includes

• Data on the acting person: first name and surname, place of birth, date of birth, the number of the identity card or passport stating the issuing authority, the address as well as the e-mail address and telephone number, if applicable position in the company.
• Data on the company: Company name, legal form, registration number (if applicable) with indication of the competent registering authority, the registered office and business address, web presence/URL, bank details for the payment of credit balances, tax identification number

and for natural persons:

• First and last name, place of birth, date of birth, number of the identity card or passport with indication of the issuing authority, address as well as e-mail address or telephone number, bank details for payment of credit balances, tax identification number, if applicable.

In addition, further data on the user's experience and knowledge may be requested in order to increase risk awareness and minimize risks.

All data collected can be seen in the respective input masks. Necessary mandatory data are marked separately with *, other data are voluntary.

You can view the data you have entered in your personal ControlCenter customer area (ControlCenter) at any time by logging into our website with your user alias and password.

The data in your customer account is not public and cannot be indexed by search engines. Within the scope of registration and subsequent logins and uses of the customer account, we store IP addresses and access times in order to be able to prove registration and prevent any misuse of the customer account.

We collect, store and use the collected data exclusively to provide our contractual services, i.e. in particular to provide a login on all our pages, to enable maintenance of user data, to manage the newsletter and product information and to offer a portfolio overview including the relevant documents for all transactions made.

The collected data is collected on the basis of GDPR Art. 6 section 1 letter b for the fulfillment of a contract or for the implementation of pre-contractual measures. The data may be used in accordance with GDPR Art. 6 section 1 letter b furthermore be used for the processing of the desired payment services. For this purpose, the data may be passed on to our cooperation partners Volksbank eG, Okenstraße 7, 77652 Offenburg, EVO Payments International GmbH, Elsa-Brändström-Straße 10-12,50668 Cologne, paydirekt GmbH, Stephanstraße 14-16, 60313 Frankfurt am Main, Tink Germany GmbH, Gottfried-Keller-Straße 33, 81245 Munich, ACI Worldwide (Germany) GmbH, Grillparzerstraße 18, 81675 Munich, Computop Paygate GmbH, Schwarzenbergstraße 4, 96050 Bamberg and paysafecard. com Deutschland, Zweigniederlassung der Prepaid Services Company Limited, Roßstr. 92, D-40476 Düsseldorf for the provision of third-party payment methods.

We host our payment window on AWS. The provider is Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, 1855 Luxembourg (hereinafter referred to as AWS). The collected data is collected on the basis of Art. 6 (1) lit. b GDPR for the fulfilment of a contract or for the implementation of pre-contractual measures. The data may be used in accordance with Art. 6 para. 1 lit b. GDPR, the data may also be used to process the desired payment services. In this context, personal data may also be transmitted to the parent company of AWS in the USA. The data transfer to the USA is based on the EU standard contractual clauses. Details can be found here: https://aws.amazon.com/de/compliance/gdpr-center/
For more information, please see the AWS privacy policy:
https://aws.amazon.com/de/privacy/?nc1=f_pr

For the purpose of communicating with you within the scope of our contractual relationship or for the purpose of carrying out pre-contractual measures, we use, among others, the services of Microsoft 365. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, Leopardstown, Dublin 18, D18 P521 Ireland (hereinafter Microsoft). The collected data is collected on the basis of Art. 6 (1) lit. b GDPR for the fulfilment of a contract or for the implementation of pre-contractual measures. The data may be used in accordance with Art. 6 para. 1 lit b. GDPR, the data may also be used to process the desired payment services. Further information on data protection at Microsoft, including the data protection declaration and contact options, can be found here: https://www.microsoft.com/de-de/trust-center/privacy

The deletion of the data takes place after the expiry of legal warranty and comparable obligations. The necessity of keeping the data is reviewed every three years at the latest. In the case of legal archiving obligations, the deletion takes place after their expiry. Information in any customer account will remain until it is deleted. If an account is terminated, the data relating to the customer account will be deleted, unless the corresponding data must still be retained due to statutory warranty and comparable obligations. In this case, access to the customer account will initially be blocked and the data will be deleted after the statutory retention periods have expired.

Data that you transmit to us within the framework of a contractual relationship or data that we receive from you within the framework of the initiation of a contractual relationship are processed by us with a customer management program for the purpose of better handling the initiation and implementation of the contractual relationship. The corresponding data will be stored as long as their processing is necessary for these purposes or until the expiry of any subsequent retention periods.

We use the CRM platform HubSpot to manage our customer relationships.

Company: HubSpot Inc., 25 First Street, Cambridge, MA 02141 USA.

Website: www.hubspot.com

You can obtain information on data protection at HubSpot at https://legal.hubspot.com/de/privacy-policy

Standard contractual clauses (guaranteeing level of data protection when processing in third countries): https://legal.hubspot.com/de/dpa

The processing of your data in our CRM platform is based on your consent in accordance with GDPR Art. 6 section 1 letter a. You can object to this storage at any time. Please address your objection to our data protection officer.

The deletion of the data collected and processed in this way takes place after the expiry of legal warranty and comparable obligations. The necessity of retaining the data is reviewed every three years. In the case of legal archiving obligations, deletion takes place after their expiry.

If signatures are required from our (potential) contractual partners as part of a contractual relationship or as part of the initiation of a contractual relationship, the digital e-signing platform PandaDoc will be used for this purpose for the purpose of optimal processing of signature requirements.

Company: PandaDoc Inc. , 3739 Balboa Street, Suite #1083, San Francisco, CA 94121, USA.

Website: www.pandadoc.com

You can obtain information on data protection at PandaDoc at https://www.pandadoc.com/de/privacy-notice/

Standard contractual clauses (guaranteeing level of data protection when processing in third countries): https://www.pandadoc.com/de/privacy-notice/

The processing of your data in our eSigning platform is based on your consent pursuant to GDPR Art. 6 section 1 letter a. You can object to this storage at any time. Please address your objection to our data protection officer.

The deletion of the data collected and processed in this way takes place after the expiry of legal warranty and comparable obligations. The necessity of retaining the data is reviewed every three years at the latest. In the case of statutory archiving obligations, deletion takes place after their expiry.

Data that you provide us with in the context of a contractual relationship will be processed for the purpose of processing the order and executing the contract. This data is stored as long as

their processing is necessary for these purposes or until the expiry of any subsequent retention periods.

We use the contract management software ContractHero to manage our contractual relationships.

Company: ContractHero GmbH, Kiautschoustraße 14, 13353 Berlin.

Website: www.contracthero.de

Information on data protection at Contracthero is available at https://www.contracthero.de/datenschutzerklaerung

The processing of your data in our contract management software is based on your consent in accordance with GDPR Art. 6 section 1 letter f. You can object to this storage at any time. Please address your objection to our data protection officer.

The deletion of the data collected and processed in this way takes place after the expiry of legal warranty and comparable obligations. The necessity of retaining the data is reviewed every three years at the latest. In the case of statutory archiving obligations, deletion takes place after their expiry.

If you would like to receive the newsletter offered by us, we require an e-mail address from you as well as information that allows us to verify that you are the owner of the specified e-mail address and agree to receive the newsletter. Further data will not be collected. We use this data exclusively for sending the requested information and do not pass it on to third parties.

If you have expressly consented in accordance with GDPR Art. 6 section 1 letter a, we will use your e-mail address to send you our newsletter at irregular intervals.

You can unsubscribe at any time. Alternatively, you are welcome to send your unsubscribe request at any time by e-mail (preferably with the subject: "Unsubscribe Newsletter").

You can revoke your consent to the storage of the data, the e-mail address and their use for sending the newsletter at any time via the ControlCenter.

We maintain online presences within social networks and process your data in this context in order to communicate with users active there or to offer information about us.

We would like to point out that user data may be processed outside the European Union. This may result in risks for users because, for example, it could make it more difficult to enforce users' rights.

Furthermore, user data is usually processed within social networks for market research and advertising purposes. For example, usage profiles can be created based on the usage behaviour and resulting interests of the users. The usage profiles can in turn be used, for example, to place advertisements within and outside the networks that presumably correspond to the interests of the users. For these purposes, cookies are usually stored on the users' computers, in which the usage behaviour and interests of the users are stored. Furthermore, data independent of the devices used by the users may also be stored in the usage profiles (especially if the users are members of the respective platforms and are logged in to them).

For a detailed presentation of the respective forms of processing and the options to object (opt-out), we refer to the data protection statements and information provided by the operators of the respective networks.

In the case of requests for information and the assertion of data subject rights, we also point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can take appropriate measures and provide information directly. If you still need assistance, you can contact us.

The following types of data are processed as part of our presences on social networks: Contact data (e.g. e-mail, telephone numbers); Content data (e.g. entries in online forms); Usage data (e.g. websites visited, interest in content, access times); Meta/communication data (e.g. device information, IP addresses). The legal basis of the processing is GDPR Art. 6 section 1 letter f, i.e. the legitimate interest.

Further guidance on processing operations, procedures and services:

• Instagram: social network

  Service Provider: Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA.

  Website: https://www.instagram.com

  Privacy policy: https://instagram.com/about/legal/privacy.

• Facebook pages:

  Profiles within the Facebook social network - We are jointly responsible with Meta Platforms Ireland Limited for the collection (but not the further processing) of data from visitors to our Facebook page (known as a "Fan Page"). This data includes information about the types of content users view or interact with, or the actions they take (see under "Things You and Others Do and Provide" in the Facebook Data Policy: https://www.facebook.com/policy), as well as information about the devices users use (e.g., IP addresses, operating system, browser type, language settings, cookie data; see under "Device Information" in the Facebook Data Policy: https://www.facebook.com/policy). As explained in the Facebook Data Policy under "How do we use this information?", Facebook also collects and uses information to provide analytics services, known as "Page Insights," to Page operators to provide them with insights into how people interact with their Pages and the content associated with them. We have entered into a special agreement with Facebook ("Page Insights Information," https://www.facebook.com/legal/terms/page_controller_addendum), which specifically regulates which security measures Facebook must observe and in which Facebook has agreed to fulfill the rights of data subjects (i.e., users can, for example, send information or deletion requests directly to Facebook). The rights of users (in particular to information, deletion, objection and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the "Information on Page Insights" (https://www.facebook.com/legal/terms/information_about_page_insights_data).

  Service provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Irland

  Website: https://www.facebook.com

  Privacy policy: https://www.facebook.com/about/privacy

  Standard contractual clauses (guaranteeing level of data protection when processing in third countries): https://www.facebook.com/legal/EU_data_transfer_addendum

  Further information: Shared Responsibility Agreement: https://www.facebook.com/legal/terms/information_about_page_insights_data.

• LinkedIn: social network

  Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Irland;

  Website: https://www.linkedin.com

  Privacy policy: https://www.linkedin.com/legal/privacy-policy

  Order processing agreement: https://legal.linkedin.com/dpa

  Standard contractual clauses (guaranteeing the level of data protection in the case of processing in third countries): https://legal.linkedin.com/dpa

  Opt-out option: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

• Twitter: social network

  Service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Irland, Mutterunternehmen: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA

  Website: https://www.twitter.com

  Privacy policy: https://twitter.com/privacy, (Settings: https://twitter.com/personalization).

• Xing: social network

  Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Deutsch-land;

  Website: https://www.xing.de

  Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung.

The legal basis for the processing of personal data for which we obtain consent for a specific processing purpose is basically GDPR Art. 6 section 1 letter a.

If the processing of personal data is required to fulfill a contract, the processing is based on GDPR Art. 6 section 1 letter b. The same applies to processing operations that are necessary to carry out pre-contractual measures, for example in cases of inquiries regarding our products or services.

If our company is subject to a legal obligation which requires the processing of personal data, such as the fulfillment of tax obligations, the processing is based on GDPR Art. 6 section 1 letter c.

We adhere to the principles of data avoidance and data economy. Therefore, we only store your personal data for as long as it is necessary to achieve the purposes mentioned here or as provided for by the various legal binding storage periods. After discontinuation of the respective purpose or expiration of these deadlines, the corresponding data will be routinely and in accordance with the statutory provisions blocked or deleted.

You are entitled to the following rights according to GDPR Art. 15 to 20, if the legal requirements are met: right to information, to correction, to deletion, to restriction of processing, to data portability. You therefore have the right at any time to free information about your stored personal data, its origin and recipient and the purpose of data processing, as well as a right to rectification, blocking or deletion of this data. In accordance with GDP Art. 77, you also have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

Our data protection officer will be happy to answer any requests for information or other questions you may have on the subject of data protection.