Privacy Policy

• Inventory data (e.g., names, addresses).
• Job applicant data (e.g., personal details, postal and contact addresses, the documents belonging to the job application and the information contained therein, such as cover letter, curriculum vitae, certificates, as well as other information provided with regard to a specific position or voluntarily by job applicants concerning their person or qualifications).
• Content data (e.g., text input in online forms).
• Contact details (e.g., e-mail, telephone numbers).
• Meta / communication data (e.g., device information, IP addresses).
• Usage data (e.g., websites visited, interest in content, access times).
• Location data (information about the geographical position of a device or person).
• Contract data (e.g., subject of the contract, duration, customer category).

• Employees (e.g., employees, job applicants, former employees).
• Job applicants.
• Persons interested in us and our projects.
• Communication partners.
• Customers.
• Users (e.g., website visitors, users of online services).

• Provision of our online offer and user-friendliness.
• Conversion measurement (measurement of the effectiveness of marketing measures).
• Job application procedure (establishment and possible subsequent implementation as well as possible subsequent termination of the employment relationship).
• Office and organizational procedures.
• Content Delivery Network (CDN).
• Feedback (e.g., collecting feedback via online form).
• Interest-based and behavioral marketing.
• Contact requests and communication.
• Profiling (creation of user profiles).
• Remarketing.
• Reach measurement (e.g., access statistics, recognition of returning visitors).
• Security measures.
• Tracking (e.g., interest/behavioral profiling, use of cookies).
• Contractual performance and service.
• Management and answering of inquiries.

Only the German version is legally binding. The English version is solely provided for information purposes.

In the following, we inform you about the legal basis of the General Data Protection Regulation (GDPR), on the basis of which we process personal data. Please note that, in addition to the regulations of the GDPR, the national data protection requirements in your or our country of residence and domicile may apply. If, in addition, more specific legal bases are relevant in individual cases, we will inform you of these in the data protection declaration.

• Consent (Art. 6 Para. 1 S. 1 lit. a GDPR) - The people concerned have given their consent to the processing of their personal data for a specific purpose or several specific purposes.
• Fulfillment of contracts and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR) - The processing is necessary to fulfill a legal obligation to which the person responsible is subject, or necessary for the performance of pre-contractual measures, which are carried out at the request of the data subject.
• Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR) - Processing is necessary to safeguard the legitimate interests of the person responsible or a third-party, unless the interests or fundamental rights and freedoms of the data subject, which require the protection of personal data, predominate
• Job application procedure as a pre-contractual or contractual relationship (Art. 9 (2) (b) GDPR) - Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., health data, such as severely disabled status or ethnic origin) are requested from applicants as part of the application procedure, so that the controller or the data subject can exercise his or her rights under labor law and social security and social protection law and fulfill his or her obligations in this regard, they are processed in accordance with Art. 9 (2) (b) GDPR. exercise his or her rights under employment law and social security and social protection law and to comply with his or her obligations in this regard, their processing is carried out in accordance with Art. 9 (2) lit. b. GDPR, in case of protection of vital interests of the applicants or other persons pursuant to Art. 9 Para. 2 lit. c. GDPR, or for the purposes of preventive health care or occupational medicine, for the assessment of the employee's ability to work, for medical diagnostics, care or treatment in the health or social sector, or for the management of systems and services in the health or social sector pursuant to Art. 9 Para. 2 lit. h. GDPR. In the case of a communication of special categories of data based on voluntary consent, their processing is based on Art. 9 Para. 2 lit. a. GDPR.

In addition to the data protection regulations of the General Data Protection Regulation, national data protection regulations apply in Germany. This includes in particular the law on the protection against misuse of personal data during data processing (Federal Data Protection Act - BDSG). The BDSG contains in particular special regulations on the right to information, the right to erasure, the right of objection, the processing of special categories of personal data, processing for other purposes and transmission as well as automated decision-making in individual cases including profiling. It also regulates data processing for the purposes of the employment relationship (Section 26 BDSG), in particular with regard to the establishment, implementation or termination of employment relationships and the consent of employees. Furthermore, state data protection laws of the individual federal states can be applied.

If it is possible for us or the storage of the IP address is not necessary, we shorten or have your IP address shortened. When the IP address is shortened, also known as "IP masking", the last octet, i.e., the last numbers of an IP address are deleted (the IP address in this context is an identifier individually assigned to an Internet connection by the online access provider). By shortening the IP address, the identification of a person on the basis of their IP address is to be prevented or made considerably more difficult.

We use SSL encryption to protect your data transmitted via our online offer. You can recognize such encrypted connections by the prefix https: // in the address line of your browser.

• Temporary cookies (also: session cookies): Temporary cookies are only stored for a limited time during a session and are deleted from the device as soon as the user has left an online offer and closed his browser.
• Permanent cookies: Permanent cookies remain stored even after the browser is closed. For example, the login status can be saved, or preferred content can be displayed directly, when the user visits a website again. Likewise, the interests of users used for reach measurement or marketing purposes can be stored in such a cookie.
• First-party cookies: First-party cookies are set by us.
• Third-party cookies (also: third-party cookies): Third-party cookies are mainly used by advertisers (so-called third parties) to process user information.
• Necessary (also: essential or absolutely necessary) cookies: Cookies may be absolutely necessary for the operation of a website (e.g., to store logins or other user input or for security reasons).
• Statistics, marketing and personalization cookies: Furthermore, cookies are generally also used in the context of range measurement and when a user's interests or behavior (e.g., viewing certain content, using functions, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to show users content that matches their potential interests. This process is also referred to as "tracking", i.e., following the potential interests of users. Insofar as we use cookies or "tracking" technologies, we will inform you separately in our data protection declaration or in the context of obtaining consent.

The legal basis on which we process your personal data with the help of cookies depends on whether we ask for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is the declared consent. Otherwise, the data processed with the help of cookies will be processed on the basis of our legitimate interests (e.g., in the business operation of our online offer and its improvement) or, if the use of cookies is necessary, in order to fulfill our contractual obligations.

Unless we provide you with explicit information about the storage period of permanent cookies (e.g., in the context of a so-called cookie opt-in), please assume that the storage period can be up to two years.

Regardless of whether the processing is based on consent or legal permission, you have the option at any time to revoke any consent you have given or to object to the processing of your data by cookie technologies (collectively referred to as "opt-out"). You can first explain your objection using the settings of your browser, e.g., by deactivating the use of cookies (which can also restrict the functionality of our online offer). You can object to the use of cookies for online marketing purposes using a variety of services, especially in the case of tracking, via the US website https://www.aboutads.info/choices/ or the EU website https://www.youronlinechoices.com/. In addition, you can receive further instructions on how to object in the context of the information on the service providers and cookies used.

Before we process or have data processed within the scope of the use of cookies, we ask users for consent that can be revoked at any time. Before the consent has been expressed, at most, cookies are used which are absolutely necessary for the operation of our online offer.

• Processed data types: usage data (e.g., websites visited, interest in content, access times), meta / communication data (e.g., device information, IP addresses).
• Data subjects: users (e.g., website visitors, users of online services).
• Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

The web hosting services we use also include the dispatch, receipt and storage of e-mails. For these purposes, the addresses of the recipients and senders as well as other information relating to the sending of e-mails (e.g., the providers involved) and the content of the respective e-mails are processed. The aforementioned data can also be processed for the purpose of recognizing SPAM. Please note that emails on the Internet are generally not sent in encrypted form. As a rule, e-mails are encrypted on the transport route, but (if no so-called end-to-end encryption method is used) not on the servers from which they are sent and received. We can therefore not assume any responsibility for the transmission path of the e-mails between the sender and receipt on our server.

We (or our web hosting provider) collect data on every access to the server (so-called server log files). The server log files can include the address and name of the websites and files accessed, the date and time of the access, the amount of data transferred, notification of successful access, browser type and version, the user's operating system, referrer URL (the previously visited page) and, as a rule, IP Addresses and the requesting provider belong.

The server log files can be used on the one hand for security purposes, e.g., to avoid overloading the server (especially in the case of abusive attacks, so-called DDoS attacks) and on the other hand to ensure the load on the server and its stability.

We use a content delivery network (CDN). A CDN is a service with the help of which the content of an online offer, in particular large media files such as graphics or program scripts, can be delivered faster and more securely with the help of regionally distributed servers connected via the Internet.

• Processed data types: content data (e.g., text input, photographs, videos), usage data (e.g., websites visited, interest in content, access times), meta / communication data (e.g., device information, IP addresses).
• Data subjects: users (e.g., website visitors, users of online services).
• Purposes of processing: contractual performance and service.
• Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

jweiland.net: hosting platform for e-commerce / websites; Service provider: jweiland.net - Jochen Weiland, Echterdinger Straße 57, 70794 Filderstadt, Germany;

• Website: https://jweiland.net/;
• Privacy policy: https://jweiland.net/unternehmen/dsgvo.html.

Participation in the Forum requires registration, which, unless otherwise specified in the registration form, must include a name or your name, a password and the e-mail address to which the access data will be sent. For security reasons, the password should be state of the art, i.e., complicated (users will be advised of this during registration if necessary) and should not be used elsewhere. Forum posts are visible to the public unless their visibility is restricted to certain members or groups of members. The contributions of the authors are stored with their name, if registered or indicated, the time and the entry content. When registering and writing entries, the IP addresses of the users are also stored, in case the entries should have an illegal content and the IP addresses could serve the prosecution. The responsible person reserves the right to delete the applications and entries based on proper consideration.

• Processed data types: Inventory data (e.g., names, addresses), contact data (e.g., e-mail, telephone numbers), content data (e.g., text input in online forms), meta/communication data (e.g., device information, IP addresses), usage data (e.g., websites visited, interest in content, access times).
• Data subjects: Users (e.g., website visitors, users of online services).
• Purposes of processing: Contractual services and support, security measures, management of and reply to inquiries.
• Legal Basis: Consent (Art. 6 (1) (a) GDPR), Performance of a contract and prior requests (Art. 6 Para. 1 S. 1 lit. b GDPR), Legitimate Interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

If we ask communication partners for permission before communicating with them via Messenger, the legal basis of our processing of their data is their consent. Otherwise, if we do not request consent and you contact us, for example, voluntarily, we use Messenger services in our dealings with our contractual partners and as part of the contract initiation process as a contractual measure and in the case of other interested parties and communication partners on the basis of our legitimate interests in fast and efficient communication and meeting the needs of our communication partners for communication via Messenger services. We would also like to point out that we do not transmit the contact data provided to us to the Messenger service providers for the first time without your consent.

You can withdraw your consent or object to communication with us via messenger services at any time. In the case of communication via messenger services, we delete the messages in accordance with our general data retention policy (i.e., as described above after the end of contractual relationships, archiving requirements, etc.) and otherwise as soon as we can assume that we have answered any information provided by the communication partners, if no reference to a previous conversation is to be expected and there are no legal obligations to store the messages to prevent their deletion.

Finally, we would like to point out that we reserve the right, for reasons of your safety, not to answer inquiries about messenger services. This is the case if, for example, internal contractual matters require special secrecy or if an answer via the messenger services does not meet the formal requirements. In such cases we refer you to more appropriate communication channels.

Skype's end-to-end encryption requires its activation (if it should not be activated by default).

• Processed data types: Contact data (e.g., e-mail, telephone numbers), Usage data (e.g., websites visited, interest in content, access times), Meta/communication data (e.g., device information, IP addresses), Content data (e.g., text input in online forms).
• Data subjects: Communication partner.
• Purposes of processing: Contact requests and communication, Direct marketing (e.g., by e-mail or postal).
• Legal Basis: Consent (Article 6 (1) (a) GDPR), Legitimate Interests (Article 6 (1) (f) GDPR).

Mattermost
Self-hosted one-to-one and group messaging, file sharing and search; Mattermost, Inc., 530 Lytton Avenue, Suite 201, Palo Alto, CA, 94301, USA

• Website: https://mattermost.com/
• The processed data from Mattermost are stored on our server with German location.

The following services process your data on servers in the USA. There is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal recourse.

Microsoft Teams
Microsoft Teams - Messenger; Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA;

• Website: https://products.office.com;
  https://privacy.microsoft.com/de-de/privacystatement,
  https://www.microsoft.com/de-de/trustcenter

Skype
Skype Messenger with end-to-end encryption; Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA;

• Website: https://www.skype.com/de/;
  ttps://privacy.microsoft.com/de-de/privacystatement,
  https://www.microsoft.com/de-de/trustcenter

WhatsApp
WhatsApp Messenger with end-to-end encryption; Service provider: WhatsApp Inc. WhatsApp Legal 1601 Willow Road Menlo Park, California 94025, USA;

• Website: https://www.whatsapp.com/;
  https://www.whatsapp.com/legal.

If we ask the users for their consent to the use of third-party providers or certain functions (e.g., permission to record conversations), the legal basis of the processing is consent. Furthermore, the processing can be a component of our (pre)contractual services, provided that the use of the third-party was agreed within this context. Otherwise, user data will be processed on the basis of our legitimate interest in efficient and secure communication with our communication partners. In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.

• Processed data types: Inventory data (e.g., names, addresses), Contact data (e.g., e-mail, telephone numbers), Content data (e.g., text input in online forms), Usage data (e.g., websites visited, interest in content, access times), Meta/communication data (e.g., device information, IP addresses).
• Data subjects: Communication partners, users (e.g., website visitors, users of online services).
• Purposes of processing: Provision of contractual services and customer support, Contact requests and communication, Office and organizational procedures, direct marketing (e.g., by e-mail or postal mail).
• Legal Basis: Consent (Article 6 (1) (a) GDPR), Performance of a contract and prior requests (Article 6 Part 1 S. 1 lit. b GDPR), Legitimate Interests (Article 6 Part 1 S. 1 lit. f GDPR).

Due to the ECJ (European Court of Justice) ruling of July 2020 on the Privacy Shield and EU-US data flows, we consider it necessary to explicitly inform you about the processing of your data outside the EU.
Please note that WebEx processes the data (Pool1 in London, UK) outside the European Union and the European Economic Area and to a country that does not provide an adequate level of data protection.

Cisco WebEx 
Conference software; Service provider: Webex Communications Deutschland GmbH, Hansaallee 249, c/o Cisco Systems GmbH, 40549 Düsseldorf, Parent company: Cisco Systems, Inc. 170 West Tasman Dr., San Jose, CA 95134, USA;

• Website: https://www.webex.com/de;
  https://www.cisco.com/c/de_de/about/legal/privacy-full.html

Due to the ECJ (European Court of Justice) ruling of July 2020 on the Privacy Shield and EU-US data flows, we consider it necessary to explicitly inform you about the processing of your data outside the EU.
Microsoft Teams processes your data on servers in the USA. There is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal recourse.

Microsoft Teams
Messenger and conference software; Service provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA;

• Website: https://products.office.com; 
  https://privacy.microsoft.com/de-de/privacystatement, 
  https://www.microsoft.com/de-de/trustcenter

Insofar as special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g., health data, such as severely disabled status or ethnic origin) are requested from job applicants in the context of the application process so that the controller or the data subject can exercise the rights accruing to him or her under labor law and social security and social protection law and fulfill his or her obligations in this regard, their processing shall be carried out in accordance with Art. 9 (2) letter b. GDPR, in case of protection of vital interests of the job applicants or other persons according to Art. 9 para. 2 lit. c. GDPR or for the purposes of preventive health care or occupational medicine, for the assessment of the employee's ability to work, for medical diagnostics, for care or treatment in the health or social sector or for the management of systems and services in the health or social sector pursuant to Art. 9 para. 2 lit. h. GDPR. In the case of a notification of the special categories of data based on voluntary consent, their processing is based on Art. 9 para. 2 lit. a. GDPR.

The data provided by job applicants may be further processed by us for the purposes of the employment relationship in the event of a successful application. Otherwise, if the application for a job offer is not successful, the job applicants' data will be deleted. Job applicants' data will also be deleted if an application is withdrawn, which job applicants are entitled to do at any time. Subject to a justified withdrawal by the job applicants, the deletion will take place at the latest after the expiry of a period of six months so that we can answer any follow-up questions about the application and meet our obligations to provide evidence under the regulations on equal treatment of job applicants. Invoices for any reimbursement of travel expenses are archived in accordance with tax law requirements.

Inclusion in a job applicant pool, if offered, is based on consent. Job applicants are informed that their consent to inclusion in the talent pool is voluntary, has no influence on the current job application process and that they can revoke their consent at any time for the future.

• Processed data types: Job applicant data (e.g., personal details, postal and contact addresses, the documents belonging to the job application and the information contained therein, such as cover letter, curriculum vitae, certificates, as well as other information provided with regard to a specific position or voluntarily by job applicants concerning their person or qualifications).
• Data subjects: Job applicant.
• Purposes of processing: Job application procedure (establishment and possible subsequent implementation as well as possible subsequent termination of the employment relationship).
• Legal basis: Job application procedure as a pre-contractual or contractual relationship (Art. 9 (2) lit. b GDPR).

If we ask for consent to the use of cloud services, the legal basis for processing is consent. Furthermore, their use can be part of our (pre) contractual services, provided that the use of cloud services has been agreed in this context. Otherwise, user data is processed on the basis of our legitimate interests (i.e., interest in efficient and secure administrative and collaboration processes)

• Processed data types: inventory data (e.g., names, addresses), contact data (e.g., e-mail, telephone numbers), content data (e.g., text entries, photographs, videos), usage data (e.g., websites visited, interest in content, access times), meta / communication data (e.g., Device information, IP addresses), contract data (e.g., subject of the contract, duration, customer category).
• Data subjects: Customers, employees (e.g., employees, job applicants, former employees), interested parties, communication partners.
• Purposes of processing: office and organizational procedures.
• Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR), contract fulfillment and pre-contractual inquiries (Art. 6 Para. 1 S. 1 lit. b. GDPR), legitimate interests (Art. 6 Para. 1 S. 1 lit. f. GDPR).

Nextcloud is a free software for storing data on an in-house server (location Germany); Nextcloud GmbH, Hauptmannsreute 44a, 70192 Stuttgart Germany;

• Website: https://nextcloud.com/;
  https://nextcloud.com/privacy/

Due to the ECJ (European Court of Justice) ruling of July 2020 on the Privacy Shield and EU-US data flows, we consider it necessary to explicitly inform you about the processing of your data outside the EU.

KaleidoSim stores all data in the Google Datacenter in the Netherlands. Google processes your data on servers in the USA. There is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal recourse.

KaleidoSim: The application to solve your cases in the cloud. KaleidoSim Technologies AG, Englischviertelstrasse 33 8032 Zürich, Switzerland;

• Website: https://kaleidosim.com; 
  https://kaleidosim.com/privacy-policy/

If we ask users for their consent to use the third-party providers, the legal basis for processing data is consent. Otherwise, the users' data is processed on the basis of our legitimate interests (i.e., interest in efficient, economical and recipient-friendly services). In this context, we would also like to refer you to the information on the use of cookies in this privacy policy.

• Processed data types: Usage data (e.g., web pages visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses).
• Data subjects: Users (e.g., website visitors, users of online services).
• Purposes of processing: Reach measurement (e.g., access statistics, recognition of returning visitors), tracking (e.g., interest/behavior-based profiling, use of cookies), conversion measurement (measurement of the effectiveness of marketing measures), profiling (creation of user profiles).
• Security measures: IP masking (pseudonymization of the IP address).
• Legal basis: Consent (Art. 6 Para. 1 S. 1 lit. a GDPR), Legitimate Interests (Art. 6 Para. 1 S. 1 lit. f GDPR).

The information generated by the cookie about your use of this website is stored only on our server and is not shared with third parties; Service provider: Self-hosted web analytics/reach measurement;

• Website: https://matomo.org/
• Deletion of data: The cookies have a maximum storage period of 13 months.

• Processed data types: Inventory data (e.g., names, addresses), Contact data (e.g., e-mail, telephone numbers), Content data (e.g., text input in online forms), Usage data (e.g., websites visited, interest in content, access times), Meta/communication data (e.g., device information, IP addresses).
• Data subjects: Users (e.g., website visitors, users of online services).
• Purposes of processing: Contact requests and communication, tracking (e.g., interest/behavioral profiling, use of cookies), remarketing, reach measurement (e.g., access statistics, recognition of returning visitors).
• Legal basis: Legitimate Interests (Art. 6 Para. 1 S. 1 lit. f GDPR).

The following services process your data on servers in the USA. There is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal recourse.

• Instagram: Social Network; Service provider: Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA, Parent company: Facebook, 1 Hacker Way, Menlo Park, CA 94025, USA;
  • Website:
    https://www.instagram.com;
    https://instagram.com/about/legal/privacy.
• LinkedIn: Social Network; Service provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland;
  • Website:
    https://www.linkedin.com;
    https://www.linkedin.com/legal/privacy-policy;
    https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.
• Twitter: Social Network; Service provider: Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2 D02 AX07, Ireland, Parent company: Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA;
  • Website:
    https://twitter.com/de/privacy,
    https://twitter.com/personalization.
• YouTube: Social Network; Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA;
  • Website:
    https://policies.google.com/privacy;
    https://adssettings.google.com/authenticated.
• Xing: Social Network; Service provider: XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany;
  • Website: 
    https://www.xing.de;
    https://privacy.xing.com/de/datenschutzerklaerung.

If we ask the users for their consent to the use of third-party providers, the legal basis for processing data is consent. Otherwise, user data will be processed on the basis of our legitimate interests (i.e., interest in efficient, economical and recipient-friendly services). In this context, we would like to draw your attention to the information on the use of cookies in this data protection declaration.

• Processed data types: usage data (e.g., websites visited, interest in content, access times), meta / communication data (e.g., device information, IP addresses). 
• Data subjects: users (e.g., website visitors, users of online services). 
• Purposes of processing: Provision of our online offer and user-friendliness, contractual services and services.
• Legal basis: Legitimate interests (Art. 6 Para. 1 S. 1 lit. f GDPR).

We do not embed the Map from Google Map directly but provide a link to Google Maps with our address pre-selected. This means that the tracking of Google Maps is not used on our website.

Google Maps processes your data on servers in the USA. There is a risk that your data may be processed by US authorities for control and monitoring purposes without you possibly having any legal recourse.

Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland,
Parent company: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA; 

• Webseite: https://cloud.google.com/maps-platform
• Data protection declaration: https://policies.google.com/privacy
• Opposition option (Opt-Out): Opt-Out-Plugin: https://tools.google.com/dlpage/gaoptout?hl=de 
• Settings for the display of advertisements: https://adssettings.google.com/authenticated.

We also integrate the following social media sites into our website. The integration takes place via a linked graphic of the respective site. The use of these graphics stored on our own servers prevents the automatic connection to the servers of these networks for their display. Only by clicking on the corresponding graphic will you be forwarded to the service of the respective social network.

Once you click, that network may record information about you and your visit to our site. It cannot be ruled out that such data will be processed in the United States.

Initially, this data includes such things as your IP address, the date and time of your visit, and the page visited. If you are logged into your user account on that network, however, the network operator might assign the information collected about your visit to our site to your personal account. If you interact by clicking Like, Share, etc., this information can be stored your personal user account and possibly posted on the respective network. To prevent this, you need to log out of your social media account before clicking on the graphic. The various social media networks also offer settings that you can configure accordingly.

The following social networks are integrated into our site by linked graphics:

• YouTube Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland, ein Tochterunternehmen der Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA 
  Privacy information is available at https://policies.google.com/privacy
• LinkedIn LinkedIn Corporation, Legal Department, 1000 West Maude Avenue, Sunnyvale, CA 94085, USA 
  Privacy information is available at  https://linkedin.com/legal/privacy-policy
• Twitter der Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. 
  Privacy information is available at https://twitter.com/privacy
• WhatsApp WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland 
  Privacy information is available at https://www.whatsapp.com/legal/#privacy-policy

Our website uses the plug-ins of the following social networks. To integrate these plug-ins, we use the Shariff plug-in.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website.

Shariff is an open source program developed by c't and heise. By integrating this plug-in, linked graphics prevent the following social network plug-ins from automatically establishing a connection to the respective social networks server when you visit website(s) on which the plug-ins are integrated. Only if you click on one of these linked graphics will you be forwarded to the service of the respective social network. Only then will information about your use of our site be recorded by the respective social network. This information may include your IP address, the date and time you visited our site, as well as the pages you viewed.

If you are logged in to one of the social network services while visiting one of our plugged-in websites, the information collected by the plug-in from your specific visit will be recognized by the provider of that social network and assigned to your personal user account there and/or publish information about your interaction with our site there. If, for example, you use the a share button for the social network, this information may be stored in your user account there and published on the platform of the respective social network provider. To prevent this, you must either log out of the social network before clicking the graphic or make the appropriate settings in your social network account.

Further information about Shariff is available at http://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html 

We use YouTube in its advanced privacy mode to show you videos. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in improving the quality of our website. According to YouTube, the advanced privacy mode means that the data specified below will only be transmitted to the YouTube server if you actually start a video by clicking the "Activate" button.

Without this mode, a connection to the YouTube server in the USA will be established as soon as you access any of our webpages on which a YouTube video is embedded.

This connection is required in order to be able to display the respective video on our website within your browser. YouTube will record and process at a minimum your IP address, the date and time the video was displayed, as well as the website you visited. In addition, a connection to the DoubleClick advertising network of Google is established.

If you are logged in to YouTube when you access our site, YouTube will assign the connection information to your YouTube account. To prevent this, you must either log out of YouTube before visiting our site or make the appropriate settings in your YouTube account.

For the purpose of functionality and analysis of usage behavior, YouTube permanently stores cookies on your device via your browser. If you do not agree to this processing, you have the option of preventing the installation of cookies by making the appropriate settings in your browser. Further details can be found in the section about cookies above.

Further information about the collection and use of data as well as your rights and protection options in Google's privacy policy found at https://policies.google.com/privacy