Privacy Policy

1. An overview of data protection

General information

The following information will provide you with an easy to navigate overview of what  will happen with your personal data when you visit this website. The term “personal  data” comprises all data that can be used to personally identify you. For detailed  information about the subject matter of data protection, please consult our Data  Protection Declaration, which we have included beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e. the  “controller”)? 

The data on this website is processed by the operator of the website, whose contact  information is available under section “Information Required by Law” on this website.  

How do we record your data? 

We collect your data as a result of your sharing of your data with us. This may, for  instance be information you enter into our contact form.  

Other data shall be recorded by our IT systems automatically or after you consent to  its recording during your website visit. This data comprises primarily technical  information (e.g. web browser, operating system or time the site was accessed). This  information is recorded automatically when you access this website.  

What are the purposes we use your data for? 

A portion of the information is generated to guarantee the error free provision of the  website. Other data may be used to analyze your user patterns.  

What rights do you have as far as your information is concerned? 

You have the right to receive information about the source, recipients and purposes  of your archived personal data at any time without having to pay a fee for such  disclosures. You also have the right to demand that your data are rectified or  eradicated. If you have consented to data processing, you have the option to revoke  this consent at any time, which shall affect all future data processing. Moreover, you  have the right to demand that the processing of your data be restricted under certain  circumstances. Furthermore, you have the right to log a complaint with the competent  supervising agency.  

Please do not hesitate to contact us at any time under the address disclosed in  section “Information Required by Law” on this website if you have questions about  this or any other data protection related issues. 

Analysis tools and tools provided by third parties  

There is a possibility that your browsing patterns will be statistically analyzed when  your visit this website. Such analyses are performed primarily with what we refer to  as analysis programs.  

For detailed information about these analysis programs please consult our Data  Protection Declaration below.

2. Hosting and Content Delivery Networks (CDN)

External Hosting

This website is hosted by an external service provider (host). Personal data collected  on this website are stored on the servers of the host. These may include, but are not  limited to, IP addresses, contact requests, metadata and communications, contract  information, contact information, names, web page access, and other data generated  through a web site.  

The host is used for the purpose of fulfilling the contract with our potential and  existing customers (Art. 6 para. 1 lit. b GDPR) and in the interest of secure, fast and  efficient provision of our online services by a professional provider (Art. 6 para. 1 lit. f  GDPR).  

Our host will only process your data to the extent necessary to fulfil its performance  obligations and to follow our instructions with respect to such data.  

Execution of a contract data processing agreement 

In order to guarantee processing in compliance with data protection regulations, we  have concluded an order processing contract with our host.

3. General information and mandatory information

Data protection

The operators of this website and its pages take the protection of your personal data  very seriously. Hence, we handle your personal data as confidential information and  in compliance with the statutory data protection regulations and this Data Protection  Declaration.  

Whenever you use this website, a variety of personal information will be collected.  Personal data comprises data that can be used to personally identify you. This Data  Protection Declaration explains which data we collect as well as the purposes we use  this data for. It also explains how, and for which purpose the information is collected.  

We herewith advise you that the transmission of data via the Internet (i.e. through e mail communications) may be prone to security gaps. It is not possible to completely  protect data against third party access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data processing controller on this website is:  

TYPO3 GmbH  
Emanuel-Leutze-Str. 11  
40547 Düsseldorf  
Germany

Phone: +49 211 205436-0  
Email: info@typo3.com

Information on data transfer to the USA

Our website uses, in particular, tools from companies based in the USA. When these  tools are active, your personal information may be transferred to the US servers of  these companies. We must point out that the USA is not a safe third country within  the meaning of EU data protection law. US companies are required to release  personal data to security authorities without you as the data subject being able to  take legal action against this. The possibility cannot therefore be excluded that US  authorities (e.g. secret services) may process, evaluate and permanently store your  data on US servers for monitoring purposes. We have no influence over these  processing activities.

Revocation of your consent to the processing of data

A wide range of data processing transactions are possible only subject to your  express consent. You can also revoke at any time any consent you have already  given us. This shall be without prejudice to the lawfulness of any data collection that  occurred prior to your revocation.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6 SECT.  1 LIT. E OR F GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE  PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING  FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING  BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON  WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA  PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO  LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A  POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR  THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS,  RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE  CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION  PURSUANT TO ART. 21 SECT. 1 GDPR).  

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN  DIRECT ADVERTISING, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO 

THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE  PURPOSES OF SUCH ADVERTISING. THIS ALSO APPLIES TO PROFILING TO  THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF  YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE  USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO  ART. 21 SECT. 2 GDPR).

Right to log a complaint with the competent supervisory agency

In the event of violations of the GDPR, data subjects are entitled to log a complaint  with a supervisory agency, in particular in the member state where they usually  maintain their domicile, place of work or at the place where the alleged violation  occurred. The right to log a complaint is in effect regardless of any other  administrative or court proceedings available as legal resources.

Right to data portability

You have the right to demand that we hand over any data we automatically process  on the basis of your consent or in order to fulfil a contract be handed over to you or a  third party in a commonly used, machine readable format. If you should demand the  direct transfer of the data to another controller, this will be done only if it is technically  feasible.

SSL and/or TLS encryption

For security reasons and to protect the transmission of confidential content, such as  purchase orders or inquiries you submit to us as the website operator, this website  uses either an SSL or a TLS encryption program. You can recognize an encrypted  connection by checking whether the address line of the browser switches from  “http://” to “https://” and also by the appearance of the lock icon in the browser line.  

If the SSL or TLS encryption is activated, data you transmit to us cannot be read by  third parties.

Encrypted payment transactions on this website

If you are under an obligation to share your payment information (e.g. account  number if you give us the authority to debit your bank account) with us after you have  entered into a fee-based contract with us, this information is required to process  payments.  

Payment transactions using common modes of paying (Visa/MasterCard, debit to  your bank account) are processed exclusively via encrypted SSL or TLS connections.  You can recognize an encrypted connection by checking whether the address line of  the browser switches from “http://” to “https://” and also by the appearance of the lock  icon in the browser line.  

If the communication with us is encrypted, third parties will not be able to read the  payment information you share with us.

Information about, rectification and eradication of data

Within the scope of the applicable statutory provisions, you have the right to at any  time demand information about your archived personal data, their source and  recipients as well as the purpose of the processing of your data. You may also have  a right to have your data rectified or eradicated. If you have questions about this  subject matter or any other questions about personal data, please do not hesitate to  contact us at any time at the address provided in section “Information Required by  Law.”

Right to demand processing restrictions

You have the right to demand the imposition of restrictions as far as the processing of  your personal data is concerned. To do so, you may contact us at any time at the  address provided in section “Information Required by Law.” The right to demand  restriction of processing applies in the following cases:  

∙ In the event that you should dispute the correctness of your data archived by  us, we will usually need some time to verify this claim. During the time that this  investigation is ongoing, you have the right to demand that we restrict the  processing of your personal data.  

∙ If the processing of your personal data was/is conducted in an unlawful  manner, you have the option to demand the restriction of the processing of  your data in lieu of demanding the eradication of this data.  

∙ If we do not need your personal data any longer and you need it to exercise,  defend or claim legal entitlements, you have the right to demand the restriction  of the processing of your personal data instead of its eradication.  

∙ If you have raised an objection pursuant to Art. 21 Sect. 1 GDPR, your rights  and our rights will have to be weighed against each other. As long as it has not  been determined whose interests prevail, you have the right to demand a  restriction of the processing of your personal data.  

If you have restricted the processing of your personal data, these data – with the  exception of their archiving – may be processed only subject to your consent or to  claim, exercise or defend legal entitlements or to protect the rights of other natural  persons or legal entities or for important public interest reasons cited by the  European Union or a member state of the EU.

Rejection of unsolicited e-mails

We herewith object to the use of contact information published in conjunction with the  mandatory information to be provided in section “Information Required by Law” to  send us promotional and information material that we have not expressly requested.  The operators of this website and its pages reserve the express right to take legal  action in the event of the unsolicited sending of promotional information, for instance  via SPAM messages.

4. Recording of data on this website

Cookies

Our websites and pages use what the industry refers to as “cookies.” Cookies are  small text files that do not cause any damage to your device. They are either stored  temporarily for the duration of a session (session cookies) or they are permanently  archived on your device (permanent cookies). Session cookies are automatically  deleted once you terminate your visit. Permanent cookies remain archived on your  device until you actively delete them or they are automatically eradicated by your web  browser.  

In some cases it is possible that third party cookies are stored on your device once  you enter our site (third party cookies). These cookies enable you or us to take  advantage of certain services offered by the third party (e.g. cookies for the  processing of payment services).  

Cookies have a variety of functions. Many cookies are technically essential since  certain website functions would not work in the absence of the cookies (e.g. the  shopping cart function or the display of videos). The purpose of other cookies may be  the analysis of user patterns or the display of promotional messages.  

Cookies, which are required for the performance of electronic communication  transactions (required cookies) or for the provision of certain functions you want to  use (functional cookies, e.g. for the shopping cart function) or those that are  necessary for the optimization of the website (e.g. cookies that provide measurable  insights into the web audience), shall be stored on the basis of Art. 6 Sect. 1 lit. f  GDPR, unless a different legal basis is cited. The operator of the website has a  legitimate interest in the storage of cookies to ensure the technically error free and  optimized provision of the operator’s services. If your consent to the storage of the  cookies has been requested, the respective cookies are stored exclusively on the  basis of the consent obtained (Art. 6 Sect. 1 lit. a GDPR); this consent may be  revoked at any time.  

You have the option to set up your browser in such a manner that you will be notified  any time cookies are placed and to permit the acceptance of cookies only in specific  cases. You may also exclude the acceptance of cookies in certain cases or in  general or activate the delete function for the automatic eradication of cookies when  the browser closes. If cookies are deactivated, the functions of this website may be  limited.  

In the event that third party cookies are used or if cookies are used for analytical  purposes, we will separately notify you in conjunction with this Data Protection Policy  and, if applicable, ask for your consent.

Cookie Consent with Usercentrics

This website uses the cookie consent technology of Usercentrics to obtain your  consent to the storage of certain cookies on your device or for the use of specific  technologies, and to document the former in a data protection compliant manner. The  party offering this technology is Usercentrics GmbH, Rosental 4, 80331 München,  Germany, website: https://usercentrics.com/ (hereinafter referred to as  “Usercentrics”). 

Whenever you visit our website, the following personal data will be transferred to  Usercentrics:  

∙ Your declaration(s) of consent or your revocation of your declaration(s) of consent  ∙ Your IP address  
∙ Information about your browser  
∙ Information about your device  
∙ The date and time you visited our website  

Moreover, Usercentrics shall store a cookie in your browser to be able to allocate  your declaration(s) of consent or any revocations of the former. The data that are  recorded in this manner shall be stored until you ask us to eradicate them, delete the  Usercentrics cookie or until the purpose for archiving the data no longer exists. This  shall be without prejudice to any mandatory legal retention periods.  

Usercentrics uses cookies to obtain the declarations of consent mandated by law.  The legal basis for the use of specific technologies is Art. 6 Sect. 1 Sentence 1 lit. c  GDPR.

Contract data processing agreement

Our company has executed a Contract Data Processing Agreement with  Usercentrics. This is an Agreement mandated by data privacy protection legislation  that warrants that Usercentrics processes all personal data of our website visitors  exclusively in compliance with our instructions and in compliance with the GDPR.

Server log files

The provider of this website and its pages automatically collects and stores  information in so-called server log files, which your browser communicates to us  automatically. The information comprises:  

∙ The type and version of browser used  
∙ The used operating system  
∙ Referrer URL  
∙ The hostname of the accessing computer  
∙ The time of the server inquiry  
∙ The IP address  

This data is not merged with other data sources.  

This data is recorded on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of the  website has a legitimate interest in the technically error free depiction and the  optimization of the operator’s website. In order to achieve this, server log files must  be recorded.

Contact form

If you submit inquiries to us via our contact form, the information provided in the  contact form as well as any contact information provided therein will be stored by us  in order to handle your inquiry and in the event that we have further questions. We  will not share this information without your consent. 

The processing of these data is based on Art. 6 para. 1 lit. b GDPR, if your request is  related to the execution of a contract or if it is necessary to carry out pre-contractual  measures. In all other cases the processing is based on our legitimate interest in the  effective processing of the requests addressed to us (Art. 6 Para. 1 lit. f GDPR) or on  your agreement (Art. 6 Para. 1 lit. a GDPR) if this has been requested.  

The information you have entered into the contact form shall remain with us until you  ask us to eradicate the data, revoke your consent to the archiving of data or if the  purpose for which the information is being archived no longer exists (e.g. after we  have concluded our response to your inquiry). This shall be without prejudice to any  mandatory legal provisions – in particular retention periods.

Request by e-mail, telephone or fax

If you contact us by e-mail, telephone or fax, your request, including all resulting  personal data (name, request) will be stored and processed by us for the purpose of  processing your request. We do not pass these data on without your consent.  

These data are processed on the basis of Art. 6 Sect. 1 lit. b GDPR if your inquiry is  related to the fulfillment of a contract or is required for the performance of pre contractual measures. In all other cases, the data are processed on the basis of our  legitimate interest in the effective handling of inquiries submitted to us (Art. 6 Sect. 1  lit. f GDPR) or on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR) if it has been  obtained.  

The data sent by you to us via contact requests remain with us until you request us to  delete, revoke your consent to the storage or the purpose for the data storage lapses  (e.g. after completion of your request). Mandatory statutory provisions - in particular  statutory retention periods - remain unaffected.

Registration on this website

You have the option to register on this website to be able to use additional website  functions. We shall use the data you enter only for the purpose of using the  respective offer or service you have registered for. The required information we  request at the time of registration must be entered in full. Otherwise we shall reject  the registration.  

To notify you of any important changes to the scope of our portfolio or in the event of  technical modifications, we shall use the e-mail address provided during the  registration process.  

We shall process the data entered during the registration process on the basis of  your consent (Art. 6 Sect. 1 lit. a GDPR).  

The data recorded during the registration process shall be stored by us as long as  you are registered on this website. Subsequently, such data shall be deleted. This  shall be without prejudice to mandatory statutory retention obligations.

The comment function on this website

When you use the comment function on this website, information on the time the  comment was generated and your e-mail-address and, if you are not posting  anonymously, the username you have selected will be archived in addition to your  comments.  

Storage of the IP address 

Our comment function stores the IP addresses of all users who enter comments.  Given that we do not review the comments prior to publishing them, we need this  information in order to take action against the author in the event of rights violations,  such as defamation or propaganda.  

Storage period for comments 

Comments and any affiliated information (e.g. the IP address) shall be stored by us  and remain on this website until the content the comment pertained to has been  deleted in its entirety or if the comments had to be deleted for legal reasons (e.g.  insulting comments).  

Legal basis 

Comments are stored on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You  have the right to revoke at any time any consent you have already given us. To do  so, all you are required to do is sent us an informal notification via e-mail. This shall be without prejudice to the lawfulness of any data collection that occurred prior to  your revocation. 

5. Social media

Facebook plug-ins (Like & Share button)

We have integrated plug-ins of the social network Facebook on this website. The  provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2,  Ireland. According to Facebook’s statement the collected data will be transferred to  the USA and other third-party countries too.  

You will be able to recognize Facebook plug-ins by the Facebook logo or the “Like”  button on this website. An overview of the Facebook plug-ins is available under the  following link: https://developers.facebook.com/docs/plugins/.  

Whenever you visit this website and its pages, the plug-in will establish a direct  connection between your browser and the Facebook server. As a result, Facebook  will receive the information that you have visited this website with your plug-in.  However, if you click the Facebook “Like” button while you are logged into your  Facebook account, you can link the content of this website and its pages with your  Facebook profile. As a result, Facebook will be able to allocate the visit to this  website and its pages to your Facebook user account. We have to point out, that we  as the provider of the website do not have any knowledge of the transferred data and  its use by Facebook. For more detailed information, please consult the Data Privacy  Declaration of Facebook at: https://www.facebook.com/privacy/explanation

If you do not want Facebook to be able to allocate your visit to this website and its  pages to your Facebook user account, please log out of your Facebook account  while you are on this website.  

The use of the Facebook plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator  of the website has a legitimate interest in being as visible as possible on social  media. If a respective declaration of consent has been obtained, the data shall be  processed exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of  consent may be revoked at any time.

Twitter plug-in

We have integrated functions of the social media platform Twitter into this website.  These functions are provided by Twitter Inc., 1355 Market Street, Suite 900, San  Francisco, CA 94103, USA. While you use Twitter and the “Re-Tweet” function,  websites you visit are linked to your Twitter account and disclosed to other users.  During this process, data are transferred to Twitter as well. We must point out, that  we, the providers of the website and its pages do not know anything about the  content of the data transferred and the use of this information by Twitter. For more  details, please consult Twitter’s Data Privacy Declaration at: https://twitter.com/en/privacy.  

The use of Twitter plug-ins is based on Art. 6 Sect. 1 lit. f GDPR. The operator of the  website has a legitimate interest in being as visible as possible on social media. If a  respective declaration of consent has been obtained, the data shall be processed  exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may  be revoked at any time.  

You have the option to reset your data protection settings on Twitter under the  account settings at https://twitter.com/account/settings.

LinkedIn plug-in

This website uses functions of the LinkedIn network. The provider is LinkedIn  Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.  

Any time you access a page of this website that contains functions of LinkedIn, a  connection to LinkedIn’s servers is established. LinkedIn is notified that you have  visited this website with your IP address. If you click on LinkedIn’s “Recommend”  button and are logged into your LinkedIn account at the time, LinkedIn will be in a position to allocate your visit to this website to your user account. We have to point  out that we as the provider of the websites do not have any knowledge of the content  of the transferred data and its use by LinkedIn.  

The use of the LinkedIn plug-in is based on Art. 6 Sect. 1 lit. f GDPR. The operator of  the website has a legitimate interest in being as visible as possible on social media. If  a respective declaration of consent has been obtained, the data shall be processed  exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may  be revoked at any time. 

For further information on this subject, please consult LinkedIn’s Data Privacy  Declaration at: https://www.linkedin.com/legal/privacy-policy.

XING plug-in

This website uses functions of the XING network. The provider is the New Work SE,  Dammtorstraße 30, 20354 Hamburg, Germany.  

Any time one of our sites/pages that contains functions of XING is accessed, a  connection with XING’s servers is established. As far as we know, this does not  result in the archiving of any personal data. In particular, the service does not store  any IP addresses or analyze user patterns.  

Data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website  operator has a legitimate interest in the highest possible visibility on social media. If a  respective declaration of consent has been obtained, the data will be processed  exclusively on the basis of Art. 6 Sect. 1 lit. a DGDPR. Any such consent may be  revoked at any time.  

For more information on data protection and the XING share button please consult  the Data Protection Declaration of Xing at: https://www.xing.com/app/share?op=data_protection.

6. Analysis tools and advertising

Google Analytics

This website uses functions of the web analysis service Google Analytics. The  provider of this service is Google Ireland Limited (“Google”), Gordon House, Barrow  Street, Dublin 4, Ireland.  

Google Analytics enables the website operator to analyze the behavior patterns of  website visitors. To that end, the website operator receives a variety of user data,  such as pages accessed, time spent on the page, the utilized operating system and  the user’s origin. Google may consolidate these data in a profile that is allocated to  the respective user or the user’s device.  

Google Analytics uses technologies that make the recognition of the user for the  purpose of analyzing the user behavior patterns (e.g. cookies or device  fingerprinting). The website use information recorded by Google is, as a rule  transferred to a Google server in the United States, where it is stored.  

This analysis tool is used on the basis of Art. 6 Sect. 1 lit. f GDPR. The operator of  this website has a legitimate interest in the analysis of user patterns to optimize both,  the services offered online and the operator’s advertising activities. If a corresponding  agreement has been requested (e.g. an agreement to the storage of cookies), the  processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the  agreement can be revoked at any time.  

IP anonymization

On this website, we have activated the IP anonymization function. As a result, your IP  address will be abbreviated by Google within the member states of the European  Union or in other states that have ratified the Convention on the European Economic  Area prior to its transmission to the United States. The full IP address will be  transmitted to one of Google’s servers in the United States and abbreviated there  only in exceptional cases. On behalf of the operator of this website, Google shall use  this information to analyze your use of this website to generate reports on website  activities and to render other services to the operator of this website that are related  to the use of the website and the Internet. The IP address transmitted in conjunction  with Google Analytics from your browser shall not be merged with other data in  Google’s possession.  

Browser plug-in 

You can prevent the recording and processing of your data by Google by  downloading and installing the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more information about the handling of user data by Google Analytics, please  consult Google’s Data Privacy Declaration at: https://support.google.com/analytics/answer/6004245?hl=en.  

Contract data processing 

We have executed a contract data processing agreement with Google and are  implementing the stringent provisions of the German data protection agencies to the  fullest when using Google Analytics.  

Demographic parameters provided by Google Analytics 

This website uses the “demographic characteristics” function of Google Analytics, to  be able to display to the website visitor compatible ads within the Google advertising  network. This allows reports to be created that contain information about the age,  gender and interests of the website visitors. The sources of this information are  interest-related advertising by Google as well as visitor data obtained from third party  providers. This data cannot be allocated to a specific individual. You have the option  to deactivate this function at any time by making pertinent settings changes for  advertising in your Google account or you can generally prohibit the recording of your  data by Google Analytics as explained in section “Objection to the recording of data”.  

Google Analytics E-Commerce-Tracking 

This website uses the “E-Commerce Tracking” function of Google Analytics. With the assistance of E-Commerce Tracking, the website operator is in a position to analyze the purchasing patterns of website visitors with the aim of improving the operator’s  online marketing campaigns. In this context, information, such as the orders placed, the average order values, shipping costs and the time from viewing the product to making the purchasing decision are tracked. These data may be consolidated by Google under a transaction ID, which is allocated to the respective user or the user’s  device. 

Archiving period 

Data on the user or incident level stored by Google linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 month. For details please click the following link: https://support.google.com/analytics/answer/7667196?hl=en

Google Ads

The website operator uses Google Ads. Google Ads is an online promotional  program of Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin  4, Ireland.  

Google Ads enables us to display ads in the Google search engine or on third party  websites, if the user enters certain search terms into Google (keyword targeting). It is  also possible to place targeted ads based on the user data Google has in its  possession (e.g. location data and interests; target group targeting). As the website  operator, we can analyze these data quantitatively, for instance by analyzing which  search terms resulted in the display of our ads and how many ads led to respective clicks.  

The use of Google Ads is based on Art. 6 Sect. 1 lit. et seq. GDPR. The website  operator has a legitimate interest in marketing the operator’s services and products  as effectively as possible.

Google AdSense

This website uses Google AdSense, a service for the integration of ads. The provider  of this service is Google Ireland Limited (“Google”), Gordon House, Barrow Street,  Dublin 4, Ireland.  

With the assistance of Google Adsense we are in a position to place targeted ads by  third parties on our site. The contents of the ads are based on your interests, which  Google determines based on your past user patterns. Moreover, when choosing  compatible ads, context information, such as your location, the content of the visited  website or Google search terms you have entered, will be taken into account.  

Google AdSense uses Cookies, Web Beacons (invisible graphics) and comparable  recognition technologies. As a result, it is possible to analyze information, such as  visitor traffic data, on these sites.  

The usage information for this website (including your IP address) recorded by  Google Adsense and delivery of advertising formats are transferred to a Google  server in the United States, where the information is stored. Google may share this  information with one of its contracting partners. However, Google will not link your IP  address with any other of your stored information.  

Our use of AdSense is based on Art. 6 Sect. 1 lit. et seq. GDPR. The website  operator has a legitimate interest in the marketing of the operator’s website that is as  effective as possible. If a respective declaration of consent was requested, processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given  consent may be revoked at any time.

Google Remarketing

This website uses the functions of Google Analytics Remarketing. The provider of  these solutions is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.  

Google Remarketing analyzes your user patterns on our website (e.g. clicks on  specific products), to allocate a certain advertising target groups to you and to  subsequently display matching online offers to you when you visit other online offers (remarketing or retargeting).  

Moreover, it is possible to link the advertising target groups generated with Google  Remarketing to device encompassing functions of Google. This makes it possible to  display interest-based customized advertising messages, depending on your prior  usage and browsing patterns on a device (e.g. cell phone) in a manner tailored to  you as well as on any of your devices (e.g. tablet or PC).  

If you have a Google account, you have the option to object to personalized  advertising under the following link: https://www.google.com/settings/ads/onweb/.  

The use of Google Remarketing is based on Art. 6 1 lit. et seq. GDPR. The website  operator has a legitimate interest in the marketing of the operator’s products that is  as effective as possible. If a respective declaration of consent was requested,  processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given  consent may be revoked at any time.  

For further information and the pertinent data protection regulations, please consult  the Data Privacy Policies of Google at: https://policies.google.com/technologies/ads?hl=en.

Google Conversion-Tracking

This website uses Google Conversion Tracking. The provider of this service is  Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.  

With the assistance of Google Conversion Tracking we are in a position to recognize  whether the user has completed certain actions. For instance, we can analyze the  how frequently which buttons on our website have been clicked and which products  are reviewed or purchased with particular frequency. The purpose of this information  is to compile conversion statistics. We learn how many users have clicked on our ads  and which actions they have completed. We do not receive any information that  would allow us to personally identify the users. Google as such uses cookies or  comparable recognition technologies for identification purposes.  

We use Google Conversion Tracking on the basis of Art. 6 Sect. 1 lit. et seq. GDPR.  The operator of the website has a legitimate interest in the analysis of the user  patterns with the aim of optimizing both, the operator’s web presentation and  advertising. If a respective declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6 Sect. 1  lit. a GDPR; the given consent may be revoked at any time.  

For more information about Google Conversion Tracking, please review Google’s  data protection policy at: https://policies.google.com/privacy?hl=en

7. Newsletter

Newsletter data

If you would like to subscribe to the newsletter offered on this website, we will need  from you an e-mail address as well as information that allow us to verify that you are  the owner of the e-mail address provided and consent to the receipt of the newsletter.  No further data shall be collected or shall be collected only on a voluntary basis. We  shall use such data only for the sending of the requested information and shall not  share such data with any third parties.  

The processing of the information entered into the newsletter subscription form shall  occur exclusively on the basis of your consent (Art. 6 Sect. 1 lit. a GDPR). You may  revoke the consent you have given to the archiving of data, the e-mail address and  the use of this information for the sending of the newsletter at any time, for instance by clicking on the “Unsubscribe” link in the newsletter. This shall be without prejudice  to the lawfulness of any data processing transactions that have taken place to date.  

The data deposited with us for the purpose of subscribing to the newsletter will be  stored by us until you unsubscribe from the newsletter or the newsletter service  provider and deleted from the newsletter distribution list after you unsubscribe from  the newsletter. Data stored for other purposes with us remain unaffected.  

After you unsubscribe from the newsletter distribution list, your e-mail address may  be stored by us or the newsletter service provider in a blacklist to prevent future  mailings. The data from the blacklist is used only for this purpose and not merged  with other data. This serves both your interest and our interest in complying with the  legal requirements when sending newsletters (legitimate interest within the meaning  of Art. 6 para. 1 lit. f GDPR). The storage in the blacklist is indefinite. You may object to the storage if your interests outweigh our legitimate interest.

Use of HubSpot

TYPO3 GmbH uses HubSpot for online marketing activities and website analysis  purposes. HubSpot is an integrated software solution that covers various online  marketing concepts.  

These include: 

∙ Content management (website and blog)  
∙ E-Mail marketing (mewsletter as well as automated mailings, e.g. for the  provision of downloads)  
∙ Social media publishing & reporting  
∙ Reporting (e.g. traffic sources, accesses, etc. ...) 
∙ Contact management (e.g. user segmentation & CRM)  
∙ Landing pages and contact forms  

The registration service allows visitors to find out more about the content  management system TYPO3, appropriate content is provided and offered for  download. The contact information of the prospective customer or the TYPO3  Accociation member as well as demographic information will be provided.  

The CRM HubSpot is located on the servers of our software partner HubSpot. It is  also subject to the TRUSTe's Privacy Seal and the US - Swiss Safe Harbor  Framework.  

The website user data will be stored on the servers and will be used by us to connect  with visitors to our website and to determine which services our company is  interested in. This ensures that the website receives more accurate information for  users.  

The purpose of the collected data is the optimization of our offer. The corresponding  legal basis is based on Article 6 paragraph 1 lit. f (legitimate interest). The data  collected is subject to our privacy policy. 

HubSpot cookies  

HubSpot CRM uses web beacons and cookies that are stored on your computer to  allow us to analyze your use of the website. The collected information (such as part  of the IP address, geographic location, type of browser, time and duration of the visit,  and pages viewed) is evaluated by the CRM. With this information we can generate a  report about the visit.  

However, you have the option to set your browser to notify you when you receive a  cookie. Then you can decide for yourself whether you accept it or not.  

Firefox (Windows): → Tools → Settings → Privacy → Create History for Custom  Settings  

Firefox (Linux): → Edit → Settings → Privacy → Create history according to user defined settings  

Internet Explorer: → Tools → Internet Options → Privacy → Advanced  

For detailed information about how Hubspot works, refer to Hubspot Inc.'s Privacy  Policy at: http://legal.hubspot.com/privacy-policy 

The software company HubSpot is based in the US, with a branch in Ireland.  

HubSpot  
2nd Floor 30 North Wall Quay  
Dublin 1, Ireland,  

Phone: +353 1 5187500.  

HubSpot Privacy Policy » 
EU Privacy Policy HubSpot »

8. Plug-ins and Tools

YouTube with expanded data protection integration

Our website embeds videos of the website YouTube. The website operator is Google  Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.  

We use YouTube in the expanded data protection mode. According to YouTube, this  mode ensures that YouTube does not store any information about visitors to this  website before they watch the video. Nevertheless, this does not necessarily mean  that the sharing of data with YouTube partners can be ruled out as a result of the  expanded data protection mode. For instance, regardless of whether you are  watching a video, YouTube will always establish a connection with the Google  DoubleClick network.  

As soon as you start to play a YouTube video on this website, a connection to  YouTube’s servers will be established. As a result, the YouTube server will be  notified, which of our pages you have visited. If you are logged into your YouTube  account while you visit our site, you enable YouTube to directly allocate your  browsing patterns to your personal profile. You have the option to prevent this by  logging out of your YouTube account.  

Furthermore, after you have started to play a video, YouTube will be able to place  various cookies on your device or comparable technologies for recognition (e.g.  device fingerprinting). In this way YouTube will be able to obtain information about  this website’s visitors. Among other things, this information will be used to generate  video statistics with the aim of improving the user friendliness of the site and to  prevent attempts to commit fraud.  

Under certain circumstances, additional data processing transactions may be  triggered after you have started to play a YouTube video, which are beyond our  control.  

The use of YouTube is based on our interest in presenting our online content in an  appealing manner. Pursuant to Art. 6 Sect. 1 lit. f GDPR, this is a legitimate interest.  If a corresponding agreement has been requested, the processing takes place  exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the agreement can be revoked  at any time.  

For more information on how YouTube handles user data, please consult the  YouTube Data Privacy Policy under: https://policies.google.com/privacy?hl=en

Vimeo Without Tracking (Do-Not-Track)

This website uses plugins of the Vimeo video portal. The provider is Vimeo Inc., 555  West 18th Street, New York, New York 10011, USA. 

Whenever you visit one of our pages featuring Vimeo videos, a connection with the  servers of Vimeo is established. In conjunction with this, the Vimeo server receives  information about which of our sites you have visited. Vimeo also receives your IP address. However, we have set up Vimeo in such a way that Vimeo cannot track your  user activities and does not place any cookies.  

We use Vimeo to make our online presentation attractive for you. This is a legitimate  interest on our part pursuant to Art. 6 Abs. 1 lit. et seq. GDPR. If a respective  declaration of consent was requested (e.g. concerning the storage of cookies), processing shall occur exclusively on the basis of Art. 6 Sect. 1 lit. a GDPR; the given  consent may be revoked at any time.  

For more information on the handling of user data, please consult Vimeo’s data privacy policy at: https://vimeo.com/privacy.

Google Web Fonts (local embedding)

This website uses so-called Web Fonts provided by Google to ensure the uniform  use of fonts on this site. These Google fonts are locally installed so that a connection  to Google’s servers will not be established in conjunction with this application.  

For more information on Google Web Fonts, please follow this link: https://developers.google.com/fonts/faq and consult Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

 

Google Maps

Via an API, this website uses the mapping service Google Maps. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data  transfer.

We use Google Maps to present our online content in an appealing manner and to  make the locations disclosed on our website easy to find. This constitutes a  legitimate interest as defined in Art. 6 Sect. 1 lit. f GDPR. If a respective declaration  of consent has been obtained, the data shall be processed exclusively on the basis  of Art. 6 Sect. 1 lit. a GDPR. This declaration of consent may be revoked at any time.

For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter referred to as “reCAPTCHA”) on this  website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow  Street, Dublin 4, Ireland.

The purpose of reCAPTCHA is to determine whether data entered on this website  (e.g. information entered into a contact form) is being provided by a human user or by  an automated program. To determine this, reCAPTCHA analyzes the behavior of the  website visitors based on a variety of parameters. This analysis is triggered  automatically as soon as the website visitor enters the site. For this analysis,  reCAPTCHA evaluates a variety of data (e.g. IP address, time the website visitor  spent on the site or cursor movements initiated by the user). The data tracked during  such analyses are forwarded to Google.

reCAPTCHA analyses run entirely in the background. Website visitors are not alerted  that an analysis is underway.  

Data are stored and analyzed on the basis of Art. 6 Sect. 1 lit. f GDPR. The website  operator has a legitimate interest in the protection of the operator’s websites against  abusive automated spying and against SPAM. If a respective declaration of consent  has been obtained, the data will be processed exclusively on the basis of Art. 6 Sect. 1 lit. a DGDPR. Any such consent may be revoked at any time.

For more information about Google reCAPTCHA please refer to the Google Data  Privacy Declaration and Terms Of Use under the following links: https://policies.google.com/privacy?hl=en and https://www.google.com/recaptcha/intro/android.html.

Retrieval of profile pictures from Gravatar

We use in our online offer, for example in the internal area of typo3.org, the service Gravatar of

Automattic Inc.,
60 29th Street #343,
San Francisco, CA 94110, USA.

Gravatar is a service where users can log in and store profile images and their email  addresses. If users with the respective email address on other online presences  (especially in blogs) leave contributions or comments, so their profile pictures can be  displayed next to the posts or comments. For this purpose, the email address  provided by the users is sent to Gravatar to check whether a profile is stored to it.  This is the only purpose of transmitting the email address and it is not used for other  purposes but deleted thereafter.

The use of Gravatar is based on our legitimate interests in the sense of Art. 6 Abs. 1 lit. f) DSGVO, since with the help of Gravatar we offer the contribution and comment writers the possibility to personalize their contributions with a profile picture.

By displaying the images Gravatar brings the IP address of the users in experience, as this is necessary for a communication between a browser and an online service. Further information on the collection and use of the data by Gravatar can be found in the privacy policy of Automattic Inc.: https://automattic.com/privacy/.

If users do not want a user image linked to their email address at Gravatar in the  internal TYPO3 area appears, you should for the internal TYPO3 area use an email  address that is not stored at Gravatar. We also point out that it is possible to use an  anonymous email address if users do not wish their own email address to be sent to  Gravatar. Users can completely prevent the transfer of data by not using our internal  service area.

Keycloak

For creating a customer account or for registration on our website, you can use the  Keycloak service. We use Keycloak as a self-hosted single sign-on procedure. All  data is processed exclusively on our servers.  

These actions are taken on the basis of Art. 6 Sect. 1 lit. f GDPR.

9. Merchandise Management System, eCommerce and payment service providers

Processing of data (customer and contract data)

We collect, process, and use personal data only to the extent necessary for the establishment, content organization or change of the legal relationship (data inventory). These actions are taken on the basis of Art. 6 Sect. 1 lit. b GDPR, which permits the processing of data for the fulfilment of a contract or pre-contractual actions. We collect, process, and use personal data concerning the use of this website (usage data) only to the extent that this is necessary to make it possible for users to utilize the services and to bill for them.

The collected customer data shall be eradicated upon completion of the order or the termination of the business relationship. This shall be without prejudice to any statutory retention mandates.

Data transfer upon closing of contracts for online stores, retailers and the shipment of merchandise

We share personal data with third parties only if this is necessary in conjunction with  the handling of the contract; for instance, with companies entrusted with the shipment  of goods or the financial institution tasked with the processing of payments. Any  further transfer of data shall not occur or shall only occur if you have expressly  consented to the transfer. Any sharing of your data with third parties in the absence  of your express consent, for instance for advertising purposes, shall not occur.  

The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the  processing of data for the fulfilment of a contract or for pre-contractual actions.

Data transfer upon closing of contracts for services and digital content

We share personal data with third parties only if this is necessary in conjunction with  the handling of the contract; for instance, with the financial institution tasked with the  processing of payments. 

Any further transfer of data shall not occur or shall only occur if you have expressly  consented to the transfer. Any sharing of your data with third parties in the absence  of your express consent, for instance for advertising purposes, shall not occur.

The basis for the processing of data is Art. 6 Sect. 1 lit. b GDPR, which permits the  processing of data for the fulfilment of a contract or for pre-contractual actions.

Payment services

We integrate payment services of third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, bank account details, credit card number) are processed by the payment service provider for the purpose of payment processing. For these transactions, the respective contractual and data protection provisions of the respective providers apply. The use of the payment service providers is based on Art. 6(1)(b) GDPR (contract processing) and in the interest of a smooth, convenient, and secure payment transaction (Art. 6(1)(f) GDPR). Insofar as your consent is requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for data processing; consent may be revoked at any time for the future.

We use the following payment services / payment service providers within the scope of this website:

Paypal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.
Details can be found in PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Stripe

In addition to payment services, we use Stripe as a merchandise management system, e.g. for billing, reminders, etc....
The provider for customers within the EU is Stripe Payments Europe, Ltd,1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”).
Data transmission to the US is based on the Standard Contractual Clauses (SCC) of the European Commission. Details can be found here: https://stripe.com/de/privacy and https://stripe.com/de/guides/general-data-protection-regulation.
Details can be found in Stripe’s Privacy Policy at the following link: https://stripe.com/de/privacy.

Evaluation reminder

We will generate a rating reminder using your email address for a one-time reminder  to submit a rating of your order. In the mail we refer to the rating system we use. You  have given your consent in accordance with Art. 6 Para. 1 lit. a DSGVO by agreeing  to the general terms and conditions.  

You can revoke your consent at any time by e-mail to info@typo3.com.

10. Online-based Audio and Video Conferences (Conference tools)

Data processing

We use online conference tools, among other things, for communication with our  customers. The tools we use are listed in detail below. If you communicate with us by  video or audio conference using the Internet, your personal data will be collected and  processed by the provider of the respective conference tool and by us. The  conferencing tools collect all information that you provide/access to use the tools  (email address and/or your phone number). Furthermore, the conference tools  process the duration of the conference, start and end (time) of participation in the  conference, number of participants and other “context information” related to the  communication process (metadata).  

Furthermore, the provider of the tool processes all the technical data required for the  processing of the online communication. This includes, in particular, IP addresses,  MAC addresses, device IDs, device type, operating system type and version, client  version, camera type, microphone or loudspeaker and the type of connection.  

Should content be exchanged, uploaded or otherwise made available within the tool,  it is also stored on the servers of the tool provider. Such content includes, but is not  limited to, cloud recordings, chat/ instant messages, voicemail uploaded photos and  videos, files, whiteboards and other information shared while using the service.  

Please note that we do not have complete influence on the data processing  procedures of the tools used. Our possibilities are largely determined by the  corporate policy of the respective provider. Further information on data processing by  the conference tools can be found in the data protection declarations of the tools  used, and which we have listed below this text.

Purpose and legal bases

The conference tools are used to communicate with prospective or existing  contractual partners or to offer certain services to our customers (Art. 6 para. 1  sentence 1 lit. b GDPR). Furthermore, the use of the tools serves to generally  simplify and accelerate communication with us or our company (legitimate interest in  the meaning of Art. 6 para. 1 lit. f GDPR). Insofar as consent has been requested, the  tools in question will be used on the basis of this consent; the consent may be  revoked at any time with effect from that date.

Duration of storage

Data collected directly by us via the video and conference tools will be deleted from  our systems immediately after you request us to delete it, revoke your consent to  storage, or the reason for storing the data no longer applies. Stored cookies remain  on your end device until you delete them. Mandatory legal retention periods remain  unaffected.  

We have no influence on the duration of storage of your data that is stored by the  operators of the conference tools for their own purposes. For details, please contact  directly the operators of the conference tools.

Conference tools used

We employ the following conference tools: 

Google Hangouts  

We use Google Hangouts. The provider is Google Ireland Limited, Gordon House,  Barrow Street, Dublin 4, Ireland. For details on data processing, please see the  Google Hangouts privacy policy: https://policies.google.com/privacy?hl=en.

Execution of a contract data processing agreement 

We have entered into a contract data processing agreement with the provider of  Google Hangouts and implement the strict provisions of the German data protection  agencies to the fullest when using Google Hangouts.  

Google Meet  

We use Google Meet. The provider is Google Ireland Limited, Gordon House, Barrow  Street, Dublin 4, Ireland. For details on data processing, please see the Google  privacy policy: https://policies.google.com/privacy?hl=en.  

Execution of a contract data processing agreement 

We have entered into a contract data processing agreement with the provider of  Google Meet and implement the strict provisions of the German data protection  agencies to the fullest when using Google Meet.  

Slack  

We use Slack. The provider is Slack, Slack Technologies Limited, 4th Floor, One  Park Place, Hatch Street Upper, Dublin 2, Irland. Slack is certified according to the  EU-US Privacy Shield. Details of data processing can be found in Slack privacy  policy: https://slack.com/intl/en-gb/legal.

Execution of a contract data processing agreement 

We have entered into a contract data processing agreement with the provider of  Slack and implement the strict provisions of the German data protection agencies to  the fullest when using Slack.

11. Custom Services

Job Applications

We offer website visitors the opportunity to submit job applications to us (e.g. via e mail, via postal services on by submitting the online job application form). Below, we  will brief you on the scope, purpose and use of the personal data collected from you  in conjunction with the application process. We assure you that the collection,  processing and use of your data will occur in compliance with the applicable data  privacy rights and all other statutory provisions and that your data will always be  treated as strictly confidential.

Scope and purpose of the collection of data

If you submit a job application to us, we will process any affiliated personal data (e.g.  contact and communications data, application documents, notes taken during job  interviews, etc.), if they are required to make a decision concerning the establishment  or an employment relationship. The legal grounds for the aforementioned are § 26  New GDPR according to German Law (Negotiation of an Employment Relationship),  Art. 6 Sect. 1 lit. b GDPR (General Contract Negotiations) and – provided you have  given us your consent – Art. 6 Sect. 1 lit. a GDPR. You may revoke any consent  given at any time. Within our company, your personal data will only be shared with  individuals who are involved in the processing of your job application.

If your job application should result in your recruitment, the data you have submitted  will be archived on the grounds of § 26 New GDPR and Art. 6 Sect. 1 lit. b GDPR for  the purpose of implementing the employment relationship in our data processing  system.

Data Archiving Period

If we are unable to make you a job offer or you reject a job offer or withdraw your  application, we reserve the right to retain the data you have submitted on the basis of  our legitimate interests (Art. 6 para. 1 lit. f GDPR) for up to 6 months from the end of  the application procedure (rejection or withdrawal of the application). Afterwards the  data will be deleted, and the physical application documents will be destroyed. The  storage serves in particular as evidence in the event of a legal dispute. If it is evident  that the data will be required after the expiry of the 6-month period (e.g. due to an  impending or pending legal dispute), deletion will only take place when the purpose  for further storage no longer applies.

Longer storage may also take place if you have given your agreement (Article 6 (1)  (a) GDPR) or if statutory data retention requirements preclude the deletion.

12. Event tickets

Eventbrite

For events, we use the services of Eventbrite, Inc., a company registered in  Delaware, 155 5th Street, Floor 7, San Francisco, CA 94103, USA, for the purposes  of general contract preparation (Art. 6 Sect. 1 lit. b GDPR); to enable you to book  events, workshops and seminars. You will be redirected to the Eventbrite site to  purchase tickets.  

You can review Eventbrite's privacy policy at: https://www.eventbrite.co.uk/support/articles/en_US/Troubleshooting/eventbrite privacy-policy?lg=en_GB.

13. Surveys

We use surveys to obtain feedback from our customers or members about our  services. We evaluate this feedback anonymously. This gives us the opportunity to  adapt our services to the needs of our customers and members.

The surveys are only sent out if the customer has given his or her express consent in  accordance with Art. 6 Para. 1 lit. a GDPR. The consent can be revoked at any time  with effect for the future. In the case of members, dispatch is carried out based on  Art. 6 Sect. 1 lit. b and Art. 6 Sect. 1 lit. f GDPR.

SurveyMonkey

We use SurveyMonkey. The provider is SurveyMonkey Inc., 1 Curiosity Way San  Mateo, California 94403, USA and SurveyMonkey Europe UC,2nd Floor, 2  Shelbourne Buildings, Shelbourne Road, Dublin, Ireland. For details on data  processing, please see SurveyMonkey privacy policy: https://www.surveymonkey.com/mp/legal/privacy-policy/.

Execution of a contract data processing agreement  

We have entered into a contract data processing agreement with the provider of  SurveyMonkey and implement the strict provisions of the German data.

Google Form

We use Google Form. The provider is Google Ireland Limited, Gordon House, Barrow  Street, Dublin 4, Ireland. For details on data processing, please see the Google  privacy policy: https://policies.google.com/privacy?hl=en.

Execution of a contract data processing agreement  

We have entered into a contract data processing agreement with the provider of  Google Form and implement the strict provisions of the German data.