Privacy Policy

This Privacy Policy relates to the processing of personal data within the framework of this website, including the services offered there.

You can contact us using the contact details below for more information about how your personal data is processed.

1. General remarks

Publisher:

Smartbox Pro GmbH
Liebenstein 15
95703 Plößberg
 

Phone: +49 (0) 9631 / 605-1100

Email: info@smartboxpro.com

Website controller

Smartbox Pro GmbH

Data protection representatives & managing directors

Smartbox Pro GmbH

Marion Forster, Bernhard Schön jun.

Email: info@smartboxpro.com

External Data Protection Officer:

RT Data & IT Consulting GmbH, Gravenreutherstr. 2, 95445 Bayreuth

Frank Steinbrügger

Website: https://rtdata-it.de

Telephone: +49 (0) 9631 6052818

Email: datenschutzsmartboxprode

2. Purposes and legal bases for the processing of personal data

The legal basis for the processing of your data is set out in Art. 6(1)(a) of the General Data Protection Regulation (GDPR), unless otherwise stated. Accordingly, we are permitted to process the data required to fulfil a task incumbent upon us.

3. Duration of the storage of personal data

Your data will only be stored for as long as is necessary for the fulfilment of tasks, taking account of statutory retention periods.

4. Rights of data subjects

In cases where we process personal data concerning you, you have the following rights as a data subject:

• If your personal data is processed, you have the right to obtain information about the data concerning you that is stored (Art. 15 GDPR).
• If inaccurate personal data is processed, you have a right to rectification (Art. 16 GDPR).
• You may request the deletion or restriction of processing if the legal requirements are met (Art. 17, 18 GDPR).
• If you have consented to the processing or if a data processing agreement is in place and the data processing is carried out with the help of automated procedures, you may have a right to data portability (Art. 20 GDPR).
• If you have consented to the processing and the processing is based on this consent, you can revoke the consent at any time with future effect. The revocation will have no bearing on the lawfulness of the data processing carried out on the basis of the consent up to the point of revocation. You have the right to object to the processing of your data at any time on grounds relating to your particular situation where the processing is carried out based on Art. 6(1)(e) GDPR (Art. 21(1) sentence 1 GDPR).

5. Note on data transfer to the USA

The tools integrated on our website include some tools from companies based in the USA. When these tools are active, your personal data may be transferred to the servers of the respective companies in the USA. Please note that the USA is not a secure third country as defined under EU data protection law. US companies are obliged to hand over personal data to security authorities without you being able to take legal action against this as the data subject. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, analyse and permanently store your data located on US servers for surveillance purposes. We have no influence over these processing activities.

6. Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can revoke previously granted consent at any time. The revocation will not affect the lawfulness of the data processing carried out up to the point of revocation. Right to object to the collection of data in special cases as well as to

a.Direct advertising (Art. 21 GDPR)

If the data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data at any time on grounds relating to your particular situation; this also applies to profiling based on these provisions. The respective legal basis on which processing is based can be found in this Privacy Policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims (objection under Art. 21(1) GDPR).

If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of the personal data in question for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing. If you object, your personal data will subsequently no longer be used for the purpose of direct marketing (objection pursuant to Art. 21(2) GDPR).

b.Right to lodge a complaint with the servisory authority

Furthermore, a right to lodge a complaint with the Bavarian State Office for Data Protection Supervision exists. You can reach this office using the following contact details:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
www.lda.bayern.de
Tel.: +49 (0) 981 180093-0
Fax: +49 (0) 981 180093-800
Email: poststelle@lda.bayern.de

7. Additional information

If you would like more information about the processing of your data and your rights, you can contact us on the contact details mentioned above (at the beginning).

8. SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or requests that you send to us as the site operator.
You can recognise an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock icon in your browser bar.
If SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

9. Special remarks on the website

a. External hosting

Our website is operated by the company JUNG GmbH & Co KG. The personal data you provide when visiting our website is therefore processed by the company JUNG GmbH & Co KG on our behalf.
 

Contact information:

Name of processor: JUNG GmbH & Co. KG
Postal address: Mergenthaler Str. 1, 96247 Michelau
Email: hellojungagency

The personal data collected on this website is stored on the hoster’s servers. This may include, but is not limited to, IP addresses, contact requests, meta and communication data, contractual data, contact data, names, website accesses and other data generated through a website.

The hoster is used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6(1)(f) GDPR).

Our hoster will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions regarding this data.

To ensure data protection-compliant processing, we have entered into a data processing agreement with our hoster.

b. Logging

When you access this or other Internet pages, you transmit data to the web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your Internet browser and our web server:

•  Browser type
• Browser version
• Operating system used
• Resolution
• Referrer URL
• Time of the server request
• IP address

This data is not merged with other data sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimisation of its website – for which purpose the server log files must be collated.

10. Cookies

a. Session cookie (technical cookie – essential)

When you access this website, we store technical cookies (small files) on your device that are valid for the duration of your visit to the website. These are known as session cookies. We use these exclusively during your visit to our website and only store the current session ID of the browser.
This cookie is removed again when the browser session is ended.
IP addresses are not stored.

b. Cookie consent with cookie manager – Typo3

This website uses TYPO3 Association’s cookie consent technology to obtain your consent to the storage of certain cookies on your end device or to the use of certain technologies and to document this consent in accordance with data protection law.
The provider of this technology is the TYPO3 Association, Gewerbestr. 10, CH-4450 Sissach (Switzerland), website: www.typo3.org.
No data processing is performed.

The cookie consent technology of TYPO3 stores a cookie in your browser in order to be able to allocate your consents, or alternatively the revocation of these, to you. The data collected in this way is stored until you request us to delete it, you delete the consent cookie yourself or until the purpose for storing the data no longer applies. This has no bearing on mandatory legal storage obligations. TYPO3’s Consten technology is used to obtain the legally required consents for the use of certain technologies. The legal basis for this is Art. 6(1) sentence 1(c) GDPR.

11. Analysis of user behaviour (web tracking systems; reach measurement)

a. Use of Matomo

This website uses the open-source web analytics service Matomo.

Matomo helps us to collect and analyse data about the use of our website by website visitors. This allows us to establish when which page views were made and which region they come from, among other things. We also collect various log files (e.g. IP address, referrer, browsers and operating systems used) and can measure whether our website visitors perform certain actions (e.g. clicks, purchases and the like).

The analysis tool is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its web services and its advertising. If corresponding consent has been requested, the processing is based exclusively on Art. 6(1)(a) GDPR and section 25(1) German Telecommunications-Telemedia Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

IP anonymisation
We use IP anonymisation for analysis with Matomo. Your IP address is shortened prior to analysis so that it can no longer be clearly assigned to you.

The tool is provided by the website operator.

Contact information:

Name of processor: JUNG GmbH & Co. KG
Postal address: Mergenthaler Str. 1, 96247 Michelau
Email: hellojungagency

Data processing
We have concluded a data processing agreement (DPA) for the use of the above service. This is a contract required under data protection law that ensures that the processor only processes the personal data concerning our website visitors in accordance with our instructions and in compliance with GDPR.

12. External links

Use of YouTube

The website links to our YouTube channel. The operator of the site is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Once you leave our site, we have no control over the collection of data outside our site. YouTube connects to the Google DoubleClick network.

As soon as you follow the link and launch a YouTube video on the YouTube platform, a connection to YouTube’s servers is established.
In doing so, personal data is communicated to the YouTube server. If you are logged into your YouTube account, you enable YouTube to assign your browsing behaviour directly to your personal profile. You can prevent this by logging out of your YouTube account.

Furthermore, YouTube may store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). YouTube can obtain information about visitors to this website in this way.
This information is used to collect video statistics, improve user experience and prevent fraud attempts, among other things.

If necessary, further data processing operations over which we have no control may be triggered after the start of a YouTube video.

YouTube is used in the interest of providing an appealing presentation of our online services. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If corresponding consent has been requested, the processing is based exclusively on Art. 6(1)(a) GDPR and section 25(1)
German Telecommunications-Telemedia Data Protection Act (TTDSG), insofar as the consent includes the storage of cookies or access to information on the user’s end device (e.g. device fingerprinting) as defined by the TTDSG. The consent can be revoked at any time.

For more information about privacy at YouTube, please see their privacy policy at: https://policies.google.com/privacy?hl=de.

13. Collection of further data

a. Contact form

If you enter personal or business data (email addresses, names, addresses etc.) on our website, this data will be used exclusively for sending the requested information or for the purposes stated in the form. Your data is encrypted using software (SSL) during transmission to the mail server and is protected from being read by third parties. The transmission by email afterwards is unencrypted (see point 14). The data is not shared with third parties. The services offered there are used on a voluntary basis.

This data is processed on the basis of Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of the inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if this was requested; the consent can be revoked at any time. The data you input into the contact form will remain with us until you request that we delete it, you revoke your consent to us storing it or the purpose for storing the data no longer applies (e.g. after we have completed processing your request). This has no bearing on mandatory legal provisions – in particular retention periods.

Data category:

Number of units (mandatory)
Product description (mandatory)
Street (of the place of delivery) (mandatory)
House number (of the place of delivery) (mandatory)
Postal code (of the place of delivery) (mandatory)
Place (of delivery) (mandatory)
Country (of the place of delivery) (mandatory)
Company (mandatory)
Street (mandatory)
House number (mandatory)
Postcode (mandatory)
Place (mandatory)
Country (mandatory)
Contact person (mandatory)
Email address (mandatory)
Salutation (optional)
Phone number (mandatory)
 

b. Use of a newsletter
When you sign up for our newsletter, you provide us with your email address and optionally other data. We use this information exclusively to send you the newsletter. We will store the data you entered when registering for the newsletter until you unsubscribe from our newsletter. You can unsubscribe at any time via the link provided for this purpose in the newsletter or by sending us a message to that effect. By unsubscribing, you are objecting to the use of your email address.

In addition, where we receive your email address in connection with the sale of a good or service, we will use it exclusively for direct advertising for our own similar goods or services in the form of our newsletter, such as those ordered by you, unless you have objected to such use. You can object to the use of your email address at any time without incurring any costs other than the transmission costs at standard rates. You can exercise your right of objection (and thus unsubscribe to our newsletter) by sending a corresponding message to our email address (see legal notice).

We use the newsletter service provider described below to manage the newsletters:

CleverReach

This website uses CleverReach for sending newsletters. The provider is CleverReach GmbH & Co KG, Schafjückenweg 2, 26180 Rastede, Germany (hereinafter “CleverReach”).

CleverReach is a service that can be used to organise and analyse newsletter distribution. The data you enter for the purpose of receiving the newsletter (e.g. email address) is stored on CleverReach’s servers in Germany or Ireland.

Data analysis via CleverReach

Our newsletters sent with CleverReach allow us to analyse the behaviour of newsletter recipients. Among other things, this enables analysis of how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of what is termed conversion tracking, it is also possible to analyse whether a predefined action (e.g. purchase of a product on this website) has taken place after clicking on the link in the newsletter. For more information on data analysis through CleverReach newsletters, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

If you do not want any analysis to be performed via CleverReach, you must unsubscribe from the newsletter. We provide a corresponding link for this purpose in every individual newsletter.

Legal basis

The data processing is based on your consent (Art. 6(1)(a) GDPR). You can revoke this consent at any time. The revocation will not affect the lawfulness of the data processing carried out on the basis of the consent up to the point of revocation.

Storage duration

We or the newsletter service provider will store the data you provide for the purpose of receiving the newsletter until you unsubscribe from the newsletter and will delete it from the newsletter distribution list after you unsubscribe from the newsletter. This has no bearing on any data that has been stored by us for other purposes.

After you have unsubscribed from the newsletter distribution list, we or the newsletter service provider will store your email address in a blacklist if necessary to prevent future mail-outs. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements when sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR. There is no time limit on the storage in the blacklist. You can object to the storage if your interests outweigh our legitimate interest.

For more details, please see CleverReach’s privacy policy at: www.cleverreach.com/de/datenschutz/.

Data processing

We have concluded a data processing agreement (DPA) with the abovementioned provider. This is a contract required under data protection law that ensures that the processor only processes the personal data concerning our website visitors in accordance with our instructions and in compliance with GDPR.

c. Audio and videoconferencing

Data processing
Among other things, we use online conferencing tools to communicate with our customers. The specific tools we use are listed below. When you communicate with us via video or audio conferencing over the Internet, your personal data is collected and processed by us and the provider of the conferencing tool in question. This entails the conference tools collecting any data that you provide/input to use the tools (email address and/or your phone number).
Furthermore, the conferencing tools process the duration of the conference, start and end (duration) of participation in the conference, number of participants and other “context information” related to the communication process (metadata). Furthermore, the provider of the tool processes all technical data required for the handling of online communication. This includes in particular IP addresses, MAC addresses, device IDs, device type, operating system type and version, client version, camera type, microphone or speaker and connection type.
If content is exchanged, uploaded or otherwise made available within the tool, this is also stored on the servers of the tool providers.
Such content specifically includes cloud recordings, chat/instant messages, voicemails uploaded photos and videos, files, whiteboards and other information shared while using the service.

Please note that we do not have full control over the data processing operations of the tools used. Our capabilities are largely determined by the corporate policy of the respective provider. For further information on data processing by the conference tools, please refer to the privacy statements of the respective tools used, which we have listed below this text.

Purpose and legal basis
The conferencing tools are used to communicate with prospective or existing contractual partners or to offer certain services to our customers (Art. 6(1) sentence 1 (B) GDPR). Furthermore, the use of the tools enables the general simplification and acceleration of communication with us or our company (legitimate interest within the meaning of Art. 6(1)(f) GDPR).
Where consent has been requested, the tools in question are used on the basis of this consent; consent can be revoked at any time with future effect.

Storage duration
The data collected directly by us via the video and conference tools will be deleted from our systems as soon as you request that we delete it, you revoke your consent to us storing it or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. This has no bearing on mandatory statutory retention periods. We have no influence over the storage period of your data that is stored by the operators of the conference tools for their own purposes. For details, please contact the operators of the conference tools directly.

We use the following conferencing tools:

Microsoft Teams
We use Microsoft Teams. The provider is Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. For details on data processing, please refer to the Microsoft Teams privacy policy:

privacy.microsoft.com/de-de/privacystatement.

Conclusion of a data processing agreement

We have entered into a data processing agreement with the provider of Microsoft Teams and implement the strict requirements of the German data protection authorities in full when using Microsoft Teams.

14. Credit report

If we make advance payments or take comparable economic risks (e.g. when ordering on account), we reserve the right to obtain identity and credit information from specialised service providers (credit agencies) for the purpose of assessing the credit risk on the basis of mathematical and statistical procedures in order to protect our legitimate interests.

We process the information on the statistical probability of a payment default received from credit agencies as part of an appropriate discretionary decision on the establishment, implementation and termination of the contractual relationship. We reserve the right to refuse payment on account or any other advance payment in the event of a negative result of the credit check.

The decision as to whether we make advance payments shall be made in accordance with Art. 22 GDPR solely on the basis of an automated decision in each individual case, which our software makes on the basis of the information from the credit agency.

Where we obtain express consent from contractual partners, the consent forms the legal basis for the credit check and the transmission of the customer’s data to the credit agencies. If no consent is obtained, the credit information is provided on the basis of our legitimate interests in the default security of our payment claims.

Types of data processed:

• Inventory data (e.g. names, addresses)
• Payment data (e.g. bank details, invoices, payment history)
• Contact details (e.g. email, telephone numbers)
• Contract data (e.g. subject of contract, term, customer category)

Data subjects: Customers, prospects.

Purposes of processing:

Assessment of creditworthiness and credit standing.

Legal basis:

Consent (Art. 6(1) sentence (1)(a) GDPR) and legitimate interests (Art. 6(1) sentence 1 (f) GDPR.

Automated decisions in individual cases: credit report (decision based on a credit check).

Services used and service providers:

Compagnie Française d’Assurance pour le Commerce Extérieur SA (Coface)
Branch Office in Germany, Isaac-Fulda-Allee 1, 55124 Mainz
Website: www.coface.de
Privacy policy: https://www.coface.de/Home/Allgemeine-Informationen/Datenschutz

15. Electronic mail (email)

Information that you send to us unencrypted by electronic mail (email) could be read by third parties during transmission. As a rule, we also cannot verify your identity and do not know who is behind an email address. Legally compliant communication by regular email is therefore not guaranteed. We use filters against unsolicited advertising (“Spam Filters”), which in rare cases can also incorrectly classify normal emails automatically as unsolicited advertising and delete them. We automatically delete emails that contain harmful programs (“Viruses”) in any case.
If you want to send us messages that require protection, we recommend that you encrypt and sign them to prevent unauthorised reading and falsification during transmission, or send the message to us by conventional post.
Please also let us know if and how we can send you encrypted emails to respond to your messages to us. If you do not have the capability to receive encrypted emails, please let us know what form of contact you prefer when responding to your protectable messages.

16. Specific information about the application procedure

Handling of applicant data
We extend to you the opportunity to apply to us (e.g. by email or post). Below you will find information about the scope, purpose and use of your personal data collected during the application process. We warrant that the collection, processing and use of your data will be in accordance with applicable data protection law and all other legal requirements and that your data will be treated in strict confidence.

Scope and purpose of data collection
If you send us an application, we will process your associated personal data (e.g. contact and communication data, application documents, notes taken during interviews etc.) insofar as this is necessary to decide on whether to establish an employment relationship. The legal basis for this under German law is section 26 German Data Protection Act (new version) (BDSG-neu) (initiation of an employment relationship), Art. 6(1)(b) GDPR (general contract initiation) and – if you have given your consent – Art. 6(1)(a) GDPR. The consent can be revoked at any time. Within our company, your personal data will only be shared with persons who are involved in processing your application. If the application is successful, the data submitted by you will be processed on the basis of section 26 BDSG-neu and Art. 6(1)(b) GDPR for the purpose of implementing the employment relationship is stored in our data processing systems.

Data retention period
If we are unable to make you a job offer, if you reject a job offer or withdraw your application, we reserve the right to process the data you have submitted on the basis of our legitimate interests (Art. 6(1)(f) GDPR) for up to six months from the termination of the application process (rejection or withdrawal of the application).
The data is subsequently deleted and the physical application documents are destroyed. The purpose of the storage in particular is for evidence purposes in the event of a legal dispute. If it is evident that the data will be required after the six-month period has expired (e.g. due to an impending or pending legal dispute), deletion will only take place when the purpose for continued storage no longer applies.
Storage for a longer period can also take place if you have provided corresponding consent (Art. 6(1)(a) GDPR) or if legal retention obligations prevent the deletion.

Inclusion in the applicant pool
If we do not make you a job offer, we may be able to include you in our applicant pool. If you are included, all documents and information from the application will be transferred to the applicant pool so that you can be contacted in case of suitable vacancies.
Inclusion in the applicant pool is based exclusively on your express consent (Art. 6(1)(a) GDPR). Granting the consent is voluntary and is not related to the ongoing application process. The data subject may revoke their consent at any time. In this case, the data will be irrevocably deleted from the applicant pool, unless there are legal reasons for retention.

The data from the applicant pool will be irrevocably deleted a maximum of two years after consent has been given.

17. Subcontracting relationship/order processing

In the context of a subcontracting relationship, Smartbox Pro GmbH provides personal data to the following company on a potential order processing basis and also this information at the client’s instructions:

Liebensteiner Kartonagenwerk GmbH
Liebenstein 15
95703 Plößberg
Telephone: +49 (0) 9631 / 6050

Email: infoliebensteinerde

Managing Directors: Bernhard Schön / Elfriede Schön / Marion Forster / Bernhard Schön jun.

The following personal data is passed on to the data processor in the scope of this order processing:

• First name, last name (contact person)
• Company name and company details
• Address data
• Telephone
• Email address
• Bank details

The purpose of the subcontracting relationship is to fulfil the contractual agreements with our potential and existing customers (Art. 6(1)(b) GDPR) and in the interest of a professional handling of requests that have arisen due to a pre-sales activity, project handling, service contracts (e.g. vulnerability scans, penetration tests etc.) (Art. 6(1)(f) GDPR). The commissioned data processor will process your data only insofar as this is necessary for the fulfilment of its performance obligations and will follow our instructions with regard to this data.

In order to ensure processing compliant with data-protection stipulations, we have concluded a data processing agreement with Liebensteiner Kartonagenwerk GmbH.

18. Social media accounts

Data processing by social networks.

We maintain publicly accessible profiles on social networks. The specific social networks used by us are:

-              XING
-              YouTube
-              LinkedIn

Social networks such as Facebook, Twitter etc. can generally perform an extensive analysis of your user behaviour when you visit their website or a website with integrated social media content (e.g. “like” buttons or advertising banners). Visiting our social media sites triggers numerous processing operations relevant to data protection.

a. In detail:

If you are logged into your social media account and visit our social media services, the operator of the social media portal can assign this visit to your user account. However, your personal data may also be collected under certain circumstances if you are not logged in or do not have an account with the respective social media portal. In this case, this data collection takes place, for example, via cookies that are stored on your end device or by recording your IP address.

The operators of the social media portals can use the data collected in this way to create user profiles in which your preferences and interests are stored. In this way, interest-based advertising can be displayed to you inside and outside the respective social media service. If you have an account with the respective social network, the interest-based advertising may be displayed on all devices on which you are or were logged in.

Please also note that we cannot track all processing on the social media portals. Depending on the provider, further processing operations may therefore be carried out by the operators of the social media portals. For details, please refer to the terms of use and privacy policies of the respective social media portals.
Legal basis

Our social media services are designed to ensure the broadest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may have different legal bases as their foundations, which must be specified by the operators of the social networks (e.g. consent as defined under Art. 6(1)(a) GDPR).

b. Controller and assertion of rights

If you visit one of our social media sites (e.g. Facebook), we are jointly responsible with the operator of the social media platform for the data processing operations triggered during this visit. You can exercise your rights (information, correction, deletion, restriction of processing, data portability and complaint) both vis-à-vis us and vis-à-vis the operator of the respective social media portal (e.g. vis-à-vis Facebook).

Please note that we do not have full influence over the data processing operations of the social media portals despite the joint controllership with the social media portal operators. Our capabilities are largely determined by the corporate policy of the respective provider.

c. Storage duration

The data collected directly by us via the social media service will be deleted from our systems as soon as the purpose for storing it no longer applies, you request that we delete it, you revoke your consent to us storing it or the purpose for storing the data no longer applies. Stored cookies remain on your end device until you delete them. This will have no bearing on mandatory legal provisions – especially retention periods.

We have no influence over the storage period of your data that is stored by the operators of the social networks for their own purposes. For details, please contact the operators of the social networks directly (e.g. in their privacy policy, see below).

d. Social networks in detail

XING
We have a profile on XING. The provider is New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany. For details on how they handle your personal data, please refer to XING’s privacy policy: privacy.xing.com/de/datenschutzerklaerung

YouTube
We have a profile on YouTube. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. For details on how they handle your personal data, please refer to YouTube’s privacy policy: policies.google.com/privacy.

LinkedIn
We have a profile on LinkedIn. The provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. LinkedIn uses advertising cookies. If you wish to disable LinkedIn advertising cookies, please use the following link: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

Data transfer to the USA is based on the Standard Contractual Clauses of the EU Commission. Details can be found here: https://www.linkedin.com/legal/l/dpa and https://www.linkedin.com/legal/l/eu-sccs.

For details on how they handle your personal data, please see LinkedIn’s privacy policy: https://www.linkedin.com/legal/privacy-policy.

Last revised: 8 May 2023