Data protection

A. Controller

The controller within the meaning of the General Data Protection Regulation (GDPR), other national data protection laws of the member states, and other data protection regulations is:

Mawave Marketing GmbH
Moosacher Str. 70
80809 Munich

Email address: get-started@mawave.de
Website: https://mawave.com/

‍External Data Protection Officer for Mawave Marketing GmbH‍

c/o TÜV SÜD Akademie GmbH
Westendstraße 160
80339 Munich
Email: datenschutz@mawave.de‍

B. Provision of the website and creation of log files

1. Description and scope of data processing

Every time you visit our website, our system automatically collects data and information from the computer system of the accessing device.

The following data is collected:

Information about the browser type and version used
The user's operating system
The user's IP address
Date and time of access
Websites accessed by the user's system via our website
The data is stored in our system's log files. This data is not stored together with other personal data of the user.

2. Legal basis for data processing

The legal basis for the collection and temporary storage of data is Art. 6 (1) (f) GDPR.

3. Purpose of data processing and legitimate interest

The system must temporarily store the IP address to enable the website to be delivered to the user's computer. To do this, the user's IP address must remain stored for the duration of the session.

Data is stored in log files to ensure the functionality of the website. Furthermore, we use this data to optimize the website and ensure the security of our IT systems. The data is not analyzed for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) (f) GDPR.

4. Storage duration

Data is deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected to provide the website, this occurs when the respective session has ended.

Data stored in log files is deleted after seven days at the latest. Storage beyond this period is possible. In such cases, users' IP addresses are deleted or masked so that the requesting client can no longer be identified.

5. Right to object and erasure

Collecting data to provide the website and storing it in log files is strictly necessary for the operation of the website. Consequently, the user has no option to object.

C. Use of cookies

1. Description and scope of data processing

Our website uses cookies. Cookies are text files that are stored in or by the internet browser on the user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is visited again.

We use cookies to ensure our website functions correctly. Some elements of our website require the browser to be identified even after navigating to a different page.

When you visit our website, you are informed about the use of cookies and, in the case of non-essential cookies, your consent to the processing of the personal data used in this context is obtained. You are also referred to this privacy policy in this regard. You can access and adjust your cookie settings at any time via the "Manage cookies" link in the footer at the bottom of our website. You can also make changes directly here:

2. Legal basis for data processing

The use of technically necessary cookies and similar technologies in the "Technically necessary" category is based on Section 25 (2) no. 2 of the German Telecommunications-Telemedia Data Protection Act (TTDSG). Subsequent data processing is based on legitimate interests pursuant to Art. 6 (1) (f) GDPR.

3. Purpose of data processing

The purpose of using technically necessary cookies is to enable the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.

4. Duration of storage, revocation

Cookies are stored on the user's computer and transmitted to our site. As a user, you therefore have full control over the use of cookies. By changing the settings in your internet browser, you can deactivate or restrict the storage of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

5. Third-party cookies

In addition to technically necessary cookies, we also use cookies and similar technologies from third-party providers ("third-party cookies") on our website. These are only loaded after you have given your express consent via our consent management tool.

Processing is based on your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

The services used can be divided into the following categories:

Analytics / Statistics: For evaluating user behavior and optimizing our website (e.g., Google Analytics, Microsoft Clarity, PostHog)
Marketing / Tracking: For measuring the effectiveness of marketing activities and displaying personalized advertising (e.g., Meta Pixel, LinkedIn Insight Tag)
Customer Management and Marketing Automation: For managing contacts, analyzing user interactions, and carrying out marketing and communication activities (e.g., HubSpot)

When using these services, personal data, such as IP addresses, usage data, device information, and interaction data, are processed.

A transfer of personal data to third countries, particularly the USA, cannot be ruled out. For the providers we use (in particular Google, Meta, LinkedIn, and HubSpot), there is an adequacy decision by the European Commission under the EU-U.S. Data Privacy Framework (DPF), provided they are certified accordingly. In addition, standard contractual clauses pursuant to Art. 46 GDPR may be used.

In addition, we use technical service providers that are necessary for the provision and security of our website (e.g., Cloudflare as an infrastructure and security service and Bunny.net as a content delivery network). These providers process data to deliver the website and ensure system security.

Further information on the individual services used, the specific data processed, the respective recipients, and the storage periods can be found in the following sections.

You can revoke or adjust your consent at any time with future effect via the cookie settings at the bottom of our website ("Manage cookies").

a) Google Analytics

If you have provided your consent, we use the web analytics service Google Analytics 4 on this website. The provider for users in the European Economic Area and Switzerland is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Scope of processing

Google Analytics uses cookies and similar technologies to enable an analysis of how our website is used. Information about your usage behavior is processed and recorded in the form of so-called events. These include, in particular:

Page views and sessions
Click paths and interactions with the website
Scrolling behavior
Clicks on external links
Interactions with content (e.g., videos or downloads)
Referrer URL (origin of visitors)

In addition, the following data is processed:

Your IP address (shortened, as IP anonymization is enabled by default)
Approximate location data (region)
Technical information about your device (browser, operating system, screen resolution)
Your internet service provider

We use the User-ID feature in Google Analytics. This allows interactions across multiple sessions and devices to be assigned to a pseudonymous identifier.

We also use Google Signals. This enables cross-device analysis of user behavior and the creation of aggregated reports on demographic characteristics and interests. Google Signals is only activated if you have consented to the use of marketing or analytics cookies.

Purposes of processing

Processing is carried out to analyze the use of our website, to generate reports on website activity, and to optimize our online services and marketing efforts.

Recipients

Recipients of the data may include:

Google Ireland Limited, Ireland
Google LLC, USA
Alphabet Inc., USA

Third-country transfer

A transfer of personal data to the USA cannot be ruled out. Google is certified under the EU-US Data Privacy Framework (DPF). There is therefore an adequacy decision by the European Commission for data transfers to the USA. In addition, standard contractual clauses in accordance with Art. 46 GDPR may be used.

Storage duration

The data sent by us and linked to cookies will be automatically deleted after 14 months. Deletion takes place automatically.

Legal basis

The legal basis for the processing is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG.

Revocation

You can revoke your consent at any time with future effect by accessing the cookie settings at the bottom of our website ("Manage cookies") and adjusting your selection. The legality of the processing carried out until the revocation remains unaffected.

Alternatively, you can prevent the storage of cookies by adjusting your browser software settings accordingly. Please note that in this case, you may not be able to use all the functions of this website to their full extent.

b) Meta Pixel

Provided you give your consent, we use the Meta Pixel from the provider Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta") on this website.

Scope of processing

The Meta Pixel allows us to track user behavior after they have been redirected to our website by clicking on a Meta advertisement (e.g., on Facebook or Instagram) ("conversion tracking").

In particular, the following data may be processed:

Information about your activity on our website (e.g., page views, clicks, interactions)
Technical information, in particular IP address, browser information, device data, and referrer URL
Pixel-specific data such as the pixel ID and cookie information
Information on ad tracking status

If the corresponding functions are enabled, additional data, such as hashed identifiers (e.g., email addresses), may also be transmitted to Meta as part of the use of the Meta Pixel. Furthermore, the system may be extended using server-side tracking technologies (e.g., Conversion API). Whether and to what extent these functions are used in individual cases depends on the specific technical implementation.

As a rule, the data we collect cannot be directly attributed to a specific person by us. However, Meta may link this data with existing user profiles and use it for its own purposes.

Joint controllership

The collection and transmission of data to Meta takes place under joint controllership in accordance with Art. 26 GDPR between us and Meta. The corresponding agreement ("Controller Addendum") governs the allocation of data protection obligations.

Meta is primarily responsible for fulfilling the rights of data subjects regarding the data stored by Meta.

Purposes of processing

Processing is carried out to analyze the effectiveness of our advertisements, to optimize our marketing activities, and to target users effectively.

Recipients

Recipients of the data may include:

Meta Platforms Ireland Limited, Ireland
Meta Platforms Inc., USA

Third-country transfer

A transfer of personal data to the USA cannot be ruled out. Meta is certified under the EU-U.S. Data Privacy Framework (DPF). Therefore, an adequacy decision by the European Commission exists for data transfers to the USA. In addition, standard contractual clauses in accordance with Art. 46 GDPR may be used.

Storage duration

The data collected and transmitted by us will be deleted after 10 months, unless longer statutory retention periods apply.

Legal basis

The legal basis for this processing is your consent in accordance with Art. 6(1)(a) GDPR and Section 25(1) TTDSG.

Withdrawal

You can withdraw your consent at any time with future effect by accessing the cookie settings at the bottom of our website ("Manage cookies") and adjusting your selection. The lawfulness of the processing carried out prior to the withdrawal remains unaffected.

Alternatively, you can prevent cookies from being stored by adjusting your browser settings accordingly. Please note that if you do so, you may not be able to use all the features of this website to their full extent.

c) HubSpot

We use the service HubSpot Inc., 25 First Street, Cambridge, MA 02141 USA, to manage customer data and optimize the customer experience.

Scope of processing

HubSpot uses cookies and, in this context, stores the IP address, pages visited on our website, clicks and any sales, browsing and clickstream behavior of visitors and users of services, session heatmaps and scrolls, as well as non-identifying data about the device used, operating system, browser, language settings, date/time stamp, geographical location, and/or unique device identifier. Data processing generally takes place on a server in Europe.

Purpose of processing

The purpose of the data processing is to optimize our website and increase customer satisfaction.

Recipients

Recipients of the data may include companies affiliated with HubSpot Inc. and sub-processors based in the USA.

Third country

HubSpot is based outside the EU and the EEA in the USA. There is no level of data protection there that corresponds to the European standard. Therefore, to ensure an adequate level of data protection, we have concluded EU standard contractual clauses with the service provider. A transfer of data to the USA and access to the data stored by us by US authorities cannot be excluded. From a data protection perspective, the USA is currently considered a third country. You do not have the same rights there as you do within the EU or the EEA, which may mean that you have no legal remedies against access by authorities.

Storage duration

The data will be deleted after 12 months at the latest.

Legal basis

The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

Withdrawal

You can prevent your data from being collected by HubSpot by not consenting to the use of HubSpot cookies in the banner displayed when you first access our website. You can withdraw your consent at any time with future effect by accessing the cookie settings in the footer at the bottom of our website under "Manage cookies" or in our privacy policy and changing your selection there. The lawfulness of the processing carried out based on your consent until the withdrawal remains unaffected.

You can also prevent cookies from being stored by adjusting your browser settings accordingly. However, if you configure your browser to reject all cookies, some functionality on this and other websites may be limited.

d) LinkedIn Insight Tag

We use the LinkedIn Insight Tag service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland.

Scope of processing

The service provider uses cookies and processes the following:

URL
Referrer URL
Device properties
Browser properties and
IP address.
We do not receive any personal data from LinkedIn, but only aggregated reports on the demographics of our target audience and the performance of our ads. This includes the following information on criteria such as:

Industry
Job title
Company size
Career level
Location

Purpose of processing

The purpose of the processing is to analyze LinkedIn members on a website in order to optimize our offerings and the performance of advertising campaigns on LinkedIn.

Recipients

The information generated by the cookies regarding the user's use of the online service may be transmitted to and stored on a server of the LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA.

Third country

Insofar as data is processed outside the EU or the EEA and there is no level of data protection equivalent to the European standard, the service provider has concluded EU standard contractual clauses with the LinkedIn Corporation to ensure an adequate level of data protection. A transfer of data to the USA and access by US authorities to the data stored by the LinkedIn Corporation cannot be excluded. From a data protection perspective, the USA is currently considered a third country. You do not have the same rights there as you do within the EU or the EEA, which may mean that you have no legal remedies against access by authorities.

Storage duration

LinkedIn anonymizes the data within 7 days. The data is deleted within 90 days.

Legal basis

The legal basis for this data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

Withdrawal

You can prevent LinkedIn from collecting your data by not consenting to the use of LinkedIn cookies in the banner displayed when you first access our website. You can withdraw your consent at any time with future effect by accessing the cookie settings in the footer at the bottom of our website under "Manage cookies" or in our privacy policy and changing your selection there. The lawfulness of the processing carried out based on your consent until the withdrawal remains unaffected.

You can also prevent the storage of cookies from the outset by adjusting your browser software settings accordingly. However, if you configure your browser to reject all cookies, some functionality on this and other websites may be limited.

e) Microsoft Clarity

Provided you have given your consent, we use the web analytics service Microsoft Clarity, provided by Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland ("Microsoft"), on this website.

Scope of processing

Microsoft Clarity allows us to analyze and visualize user behavior on our website. In particular, the following data is processed:

Mouse movements, clicks, and scrolling behavior
Session recordings
Interactions with the website (e.g., form usage)
technical information such as IP address, browser type, operating system, and device data
Referrer URL and pages visited

The data is processed in a pseudonymized form. We do not directly identify you as an individual.

Purposes of processing

Processing is carried out to analyze user behavior and to optimize our website and improve user-friendliness.

Recipients

Recipients of the data may include:

Microsoft Ireland Operations Limited, Ireland
Microsoft Corporation, USA

Third-country transfer

A transfer of personal data to the USA cannot be ruled out. Microsoft is certified under the EU-U.S. Data Privacy Framework (DPF). Therefore, an adequacy decision by the European Commission exists for data transfers to the USA. In addition, standard contractual clauses in accordance with Art. 46 GDPR may be used.

Storage duration

The data is stored by Microsoft for a period of up to 12 months and is subsequently deleted.

Legal basis

The legal basis for processing is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG.

Revocation

You can revoke your consent at any time with future effect by accessing the cookie settings at the bottom of our website ("Manage cookies") and adjusting your selection. The legality of any processing carried out prior to the revocation remains unaffected.

Alternatively, you can prevent the storage of cookies by adjusting your browser software settings accordingly. Please note that in this case, you may not be able to use all features of this website to their full extent.

f) PostHog

If you provide your consent, we use the analysis service PostHog on this website. The provider is PostHog Inc., 2261 Market Street, Suite 4008, San Francisco, CA 94114, USA ("PostHog").

Scope of processing

PostHog allows us to analyze user behavior on our website. In this context, the following data in particular may be processed:

Page views and sessions
Clicks, scrolling behavior, and interactions
technical information such as IP address, browser type, operating system, and device data
Referrer URL and usage data

PostHog uses cookies and similar technologies to recognize users. Data is processed in a pseudonymized form.

Purposes of processing

Processing is carried out to analyze and evaluate user behavior and to optimize our website and marketing activities.

Recipients

Recipients of the data may include:

PostHog Inc., USA

If processing takes place via European servers, data processing can also occur within the EU.

Third-country transfer

A transfer of personal data to the USA cannot be ruled out. PostHog is certified under the EU-US Data Privacy Framework (DPF). Therefore, an adequacy decision by the European Commission exists for data transfers to the USA. In addition, standard contractual clauses in accordance with Art. 46 GDPR may be used.

Storage duration

Data is only stored for as long as is necessary for the respective analysis purposes. The specific storage duration depends on the settings within the system used.

Legal basis

The legal basis for the processing is your consent in accordance with Art. 6 (1) (a) GDPR and Section 25 (1) TTDSG.

Revocation

D. Newsletter

1. Description and scope of data processing

Our website offers the option to subscribe to a free newsletter. When you sign up for the newsletter, the data from the input mask is transmitted to us. Providing your email address is sufficient for this purpose.

2. Legal basis for data processing

The legal basis for processing the email address is the user's consent in accordance with Art. 6 (1) (a) GDPR.

3. Purpose of data processing

The user's email address is used exclusively for the purpose of delivering the newsletter.

We use other personal data voluntarily provided by the user, such as your name, to address you personally.

4. Duration of storage

The data will be deleted as soon as it is no longer necessary for the purpose for which it was collected. The user's email address will therefore be stored until you have unsubscribed from the newsletter.

5. Revocation

You can revoke your consent to receive the newsletter at any time. You can do this by contacting the email address provided above or by using the unsubscribe link included in the newsletter.
‍

E. Contact form, contact via email

1. Description and scope of data processing

If you contact us via email, we will process all the data you provide in your message. The data you provide will be transmitted to us and stored.

2. Data processing in collaborations and co-registrations

For selected content (e.g., whitepapers, reports, studies, or events) that we offer together with cooperation partners, it may be necessary for the personal data you provide in the form (e.g., name, email address, company) to be processed by both us and the respective cooperation partner.

Data is collected for the purpose of providing the respective content as well as for follow-up communication related to the topic by us and the respective cooperation partner, and is exchanged between the participating parties.

The specific data processing and the partners involved are detailed in the respective form or on the relevant offer page.

a) Overview of current campaigns and cooperation partners

W&V Social Media Marketing Report / Collaboration with Ebner Media Group

We are collaborating with Ebner Media Group GmbH & Co. KG on the social media marketing report "W&V Social Media Report - Entering a Social First Era," published jointly with W&V / Werben & Verkaufen. When you request the report via the provided download form, we process the personal data you enter in the form, in particular your name, business email address, company, position, and other voluntarily provided information.

Processing is carried out for the purpose of providing the report, handling your inquiry, documenting your consent, and—if you provide your consent—for promotional contact via email by Mawave Marketing GmbH and Ebner Media Group GmbH & Co. KG. Promotional contact may include, in particular, information about our own offers, events, training opportunities, whitepapers, webinars, other publishing products, and relevant marketing, social media, and industry content.

As part of this campaign, the personal data you provide may be exchanged between Mawave Marketing GmbH and Ebner Media Group GmbH & Co. KG and processed independently by both parties for the stated purposes. Ebner Media Group GmbH & Co. KG processes your data in accordance with its own privacy policy.

If you consent to receiving promotional emails via the form, you also agree that the emails sent will be analyzed through individual measurement, storage, and evaluation of open and click rates. This evaluation serves to improve the content and technical aspects of future emails and to better tailor content to the interests of the recipients.

The legal basis for processing your data in connection with promotional contact and the analysis of open and click rates is your consent in accordance with Art. 6 (1) (a) GDPR. To the extent that processing is necessary for the technical provision of the form, the handling of your inquiry, or the documentation of your consent, the processing is based on Art. 6 (1) (b) GDPR or Art. 6 (1) (f) GDPR. Our legitimate interest lies in the proper execution and verifiability of the campaign.

You may withdraw your consent at any time with future effect. You can withdraw your consent, in particular, via the unsubscribe link in the respective emails or by sending an email to datenschutz@mawave.de. Withdrawal of consent from Ebner Media Group GmbH & Co. KG can be carried out using the contact methods specified in their privacy policy or by sending an email to widerruf@ebnermedia.de. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

‍

3. Legal basis for data processing

The legal basis for processing your contact inquiry is our legitimate interest under Art. 6 (1) (f) GDPR in responding to your request, or, in the case of an inquiry related to a contractual relationship, Art. 6 (1) (b) GDPR.

If your data is processed jointly or shared with cooperation partners as part of collaborations and co-registrations, this processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

4. Purpose of data processing

We process your contact details to handle your inquiry.

5. Storage duration

Data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected. For the information provided in your inquiry, this is the case when it is clear from the circumstances that the matter in question has been conclusively resolved.

6. Right to object

Users may object to the storage of their personal data at any time. In such a case, however, processing cannot be continued.

F. Photo and video recordings at events

1. Description and scope of data processing

We take photos and videos during events, functions, and similar formats. Participants in the event may be recognizable in these recordings.

The recordings are made primarily during closed B2B events (e.g., invite-only or VIP events).

2. Purpose of processing

The recordings are used to document our events and for public relations and corporate communication purposes.

This includes, in particular, publication:

on our website (e.g., as event impressions or background images)
on our social media channels (in particular Instagram, TikTok, and LinkedIn)

The recordings will not be used for paid advertising campaigns (e.g., ads).

3. Legal basis

Processing is based on Art. 6 (1) (f) GDPR.

Our legitimate interest lies in the presentation and documentation of our events as well as in the external representation of our company.

4. Type of publication

The recordings are used exclusively for the purposes mentioned above.
As a general rule, individuals are not identified by name or tagging.

5. Events with cooperation partners

If events are held jointly with cooperation partners, the processing of photo and video recordings takes place under joint controllership in accordance with Art. 26 GDPR.

In these cases, the recordings may also be used by the respective cooperation partners for their own public relations work.
This use is limited to organic publications (e.g., website and social media) and does not include paid advertising campaigns.

6. Recipients of the data

The recordings may be made publicly accessible as part of their publication, particularly via our website and social media platforms.

7. Storage period

In principle, the recordings are stored for as long as is necessary for the stated purposes.

Storage beyond this period occurs if there is a legitimate interest in continued use or if there are no overriding legitimate interests of the data subjects.

Recordings that are no longer required are regularly reviewed and deleted at appropriate intervals.

8. Right to object

You have the right to object to the processing of your personal data at any time.

In the event of an objection, we will review the recordings in question and—provided there are no overriding legitimate grounds—will cease using them or delete them.

To exercise your right to object, you may contact us at any time using the contact details provided above.

9. Notice regarding event participation

Participants are informed about the creation of photo and video recordings during registration and on-site.

If you do not wish to be included, you have the option to inform us of this on-site or afterward at any time.

G. Social Media Presence

We maintain profiles on social media. These social media platforms are operated by service providers that process data to provide such pages.

1. Scope of processing

The data processed consists of content and usage data from these social media profiles. Depending on the social media service, usage data may also be analyzed to improve our social media presence. This typically includes the following information:

User interactions (posts, likes, etc.)
Profile name and data provided by the user in the course of conversations, e.g., for processing inquiries
Statistical surveys for target group advertising
Statistical data on user interactions in aggregated form, i.e., without personal identification (e.g., page activity, page views, page previews, likes, recommendations, posts, videos, page subscriptions, including origin and time of day)
Targeted advertisements based on aggregated demographic data without personal identification (e.g., age, location, language, gender)

2. Legal basis for processing

The legal basis is our legitimate interest in communicating and evaluating aggregated (anonymous) data regarding the use of our social media channels in accordance with Art. 6 (1) (f) GDPR. Our legitimate interest outweighs the interests of the user in this context.

3. Purpose of processing

The purpose of data processing on our social media profiles is to provide interesting content, interact with visitors on social media platforms, and analyze usage data to improve our social media presence.

a) Facebook and Instagram

We and Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (hereinafter "Meta"), as the provider of Instagram, are joint controllers for the processing of personal data via our Instagram profile. The agreement on joint controllership is available at: https://www.facebook.com/legal/terms/page_controller_addendum. According to the agreement, Meta is responsible for informing data subjects about the processing. Instagram's privacy policy is available at: https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect. Data subjects may exercise their rights against either of the joint controllers, us and/or Meta. Further information on the data that Meta shares with us can be found at https://privacycenter.instagram.com/policy/?entry_point=ig_help_center_data_policy_redirect.

b) LinkedIn

We and LinkedIn (for users in the EU/EEA: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland) are joint controllers for the processing of personal data via our LinkedIn profile. The agreement on joint controllership is available at: https://legal.linkedin.com/pages-joint-controller-addendum. According to the agreement, LinkedIn is responsible for informing data subjects about processing activities. LinkedIn's privacy policy is available at: https://www.linkedin.com/legal/privacy-policy. Data subjects may exercise their rights against either of the joint controllers, us and/or LinkedIn. Further information on the data that LinkedIn shares with us can be found at https://www.linkedin.com/help/linkedin/answer/a547077/viewing-company-page-analytics?lang=en.

c) TikTok

We explicitly point out that TikTok stores the data of its service users (e.g., personal information, IP address, etc.) and may use it for business purposes. Further information on TikTok's data processing can be found in TikTok's privacy policy at: https://www.tiktok.com/legal/privacy-policy-eea?lang=en. We have no influence over data collection and further processing by TikTok. Furthermore, it is not clear to us to what extent, where, and for how long the data is stored, to what extent TikTok complies with existing deletion obligations, what evaluations and links are made with the data, and to whom the data is passed on. Insofar as the data you transmit to us via TikTok is also or exclusively processed by TikTok, TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, is a joint controller for data processing within the meaning of the General Data Protection Regulation (GDPR) alongside us. You can find information on how to view your own data on TikTok here (with further references): https://support.tiktok.com/en/account-and-privacy/account-information.

4. Recipients

Information and data displayed or shared on our social media profiles may be accessible to the respective operator of the social media platform, its users, or commissioned service providers.

5. Transfer to a third country

Insofar as personal data is transferred to servers in the USA and stored and further processed there, the respective social media provider has concluded the EU Commission's standard contractual clauses with the companies based in the USA, which allow for the transfer of personal data to the USA on a case-by-case basis.

6. Duration of storage

Once your request has been handled, the personal data you provided will be deleted from our systems. If you interact with us publicly, for example by leaving a comment or "liking" a post, this data will remain publicly visible on the page until it is deleted by us or by you. If legal retention requirements necessitate longer storage, your data will be stored only for that purpose and blocked for other uses.

7. Right to object to data processing

You may object to the processing at any time. Please contact us at the email address mentioned above to do so.

8. Obligation to provide data

Providing your data is voluntary. However, visiting our profile is not possible without us processing personal data.

H. Recipients

Within our company, access to your data is granted to those departments that require it to fulfill our contractual and legal obligations. Service providers and agents we employ (e.g., technical service providers, transport companies, waste disposal companies) may also receive data for the fulfillment of our contractual and legal obligations. Your data will only be shared with recipients outside the company if this is legally permitted or required, if the transfer is necessary for the processing and fulfillment of the contract, if you have requested pre-contractual measures, or if you have given us your consent. We have entered into data processing agreements with our service providers who act on our behalf and according to our instructions, in accordance with Art. 28 GDPR. In this case, categories of recipients include:

IT service providers
Customer management system providers
Email marketing providers

I. Rights of the data subject

In accordance with Article 15(1) of the GDPR, you have the right to request information free of charge regarding the personal data we store about you. Furthermore, provided the legal requirements are met, you have the right to rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), and data portability (Art. 20 GDPR) of your personal data.

If data processing is based on Art. 6(1)(e) or (f) GDPR, you have the right to object under Art. 21 GDPR. If you object to data processing, we will cease such processing in the future, unless the controller can demonstrate compelling legitimate grounds for further processing that outweigh your interests in objecting. If data processing is based on consent under Art. 6(1)(a) or Art. 9(2)(a) GDPR, you may withdraw your consent at any time with future effect, without affecting the lawfulness of processing based on consent before its withdrawal.

In the aforementioned cases, please contact us in writing or by email using the contact details provided above.

Additionally, you have the right to lodge a complaint with a data protection supervisory authority. The competent authority is the data protection supervisory authority of the federal state in which you reside or in which the controller is based.

J. Automated decision-making/profiling

We do not engage in automated decision-making or profiling (automated analysis of your personal circumstances).

K. SSL encryption

To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g., SSL) via HTTPS.

L. Changes to this privacy policy

As we continue to develop our website and services, or due to changes in legal or regulatory requirements, it may become necessary to update this privacy policy. The version currently available on our website applies.