Privacy Policy
Privacy Policy of Böhme & Weihs GmbH, a Company of the Proalpha Group
We would like to inform you about the processing of personal data by Böhme & Weihs GmbH (hereinafter "Böhme & Weihs") in accordance with the EU General Data Protection Regulation. Böhme & Weihs GmbH is part of the Proalpha Group. Since we have outsourced some of our services within our Group, data may also be transferred to other companies within our Group in individual cases. This is done either in the context of order processing in accordance with Art. 28 GDPR or in the context of a joint responsibility in accordance with Art. 26 GDPR and only if there is a legal basis for this.
We have ensured through internal agreements that the processing of your data complies with the provisions of applicable data protection laws. If you have any questions or remarks about this data protection information, you may contact us at any time via the email address provided in Section 2.
- Overview
- Name and Contact Details of the Party Responsible and the Data Protection Officer
2.1. Data Controller
2.2. Data Protection Officer - Data Processing on the Website
3.1. Informational Use of the Website
3.2 Online Presence and Website Optimization
3.3. Newsletter
3.4. Contacting Us - Registration on Our Website
- Applications
- Customers
6.1. What Data We Use
6.2. Where the Data Comes From
6.3. For What Purposes Your Data Is User
6.4. Who Receives Your Data?
6.5. Will Your Data Be Transferred to Countries Outside the European Union (So-Called Third Countries)?
6.6. How Long Will My Data Be Stored - Social Media
7.1. Use of Social Plugins and Embedded Functions - Data Transfers
8.1. Transfers Within the Proalpha Group
8.2. Transfer to External Service Providers - Data Subject Rights
9.1. General Rights
9.2. Rights Regarding Data Processing Based on Legitimate Interest
9.3. Rights in Direct Advertising
9.4. Right to File a Complaint with a Supervisory Authority - Data Security
- Status of This Privacy Policy
1. Overview
The following Privacy Policy informs you about the type, scope and purpose of the collection and use of your personal data as well as the use of cookies by the companies of the Proalpha Group. The data controller is Böhme & Weihs GmbH (hereinafter referred to as "Böhme & Weihs", "we" or "us").
Personal data means all data that refer to you personally, such as your name, address or email address.
2. Name and Contact Details of the Party Responsible and the Data Protection Officer
2.1. Data Controller
The controller responsible for processing your personal data on this website is:
Böhme & Weihs GmbH
Linderhauser Straße 153
42279 Wuppertal
Germany
P: +49 202 38434-0
F: +49 202 38434-99
Email: info@boehme-weihs.de
(see also our Legal Notice).
Further information about our group companies can be found HERE, a list of our locations can be found HERE.
2.2. Data Protection Officer
We have engaged a data protection officer for our company. You can contact them at dataprotection@proalpha.com
3. Data Processing on the Website
3.1. Informational Use of the Website
When you use our website for informational purposes only, the browser you use on your device automatically sends information to the server of our website and temporarily saves it in a log file. The following information is collected automatically—without any action on your part—and stored until it is automatically deleted:
the IP address of the requesting internet-enabled device
- the date and time of access
- the name and URL of the requested file
- the website from which the request originated (referrer URL)
- the browser you are using and, if applicable, the operating system of your internet-enabled device, as well as the name of your internet access provider.
The legal basis for processing this data is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in ensuring a smoothly established connection, ensuring the convenient usability of our services and ensuring and analyzing the system security and stability.
Further information on the storage time and deletion of the data is provided in the following chapters.
3.2. Online Presence and Website Optimization
For the purpose of analyzing and optimizing our websites, we use various services that help us to better understand the usage of our site and the frequency of calls. Among other things, we collect data about the website from which a person concerned was redirected to one of our websites (so-called referrers), the subpages of the website that were accessed, or how often and for how long a subpage was viewed. This helps us to tailor our offers to the user and improve them. The data collected are not used to identify individual users.
3.2.1. Cookies – General Notes
What Are 'Cookies'? Cookies are small text files that are stored on your computer by a website or a service and allow for a recognition of the browser the next time the website is visited. Cookies transmit information to the site using the cookie. Cookies can store various pieces of information, such as your language settings, the duration of your visit to our website or your entries made there. This prevents you from having to enter required form data again every time. The information stored in cookies can also be used to identify preferences and to align content by areas of interest.
There are various types of cookies: Session cookies are quantities of data that are only temporarily stored in the memory and deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a predefined period, which can vary depending on the cookie. With this type of cookie, the information can also be saved in text files on your computer. However, you can also delete these types of cookies at any time using the settings of your browser.
First-party cookies are set by the website you are visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that are not the operator of the website you are visiting. These cookies are used by marketing companies, for example.
The legal bases for potential processing of personal data by means of cookies and their storage time may vary. If you have given us your consent, the legal basis is Art. 6 Para. 1 lit. a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 Para. 1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.
We use cookies to ensure the proper operation of the website, provide basic functionalities, and - with your consent - tailor our services to your preferred areas of interest, as well as measure our reach. For this purpose, we use both transient cookies and persistent cookies.
You can delete cookies already stored on your device at any time. If you want to prevent cookies from being saved, you can adjust your browser settings accordingly. You can find instructions for common browsers here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can also install so-called ad-blockers. Please note that some functions of our website may not work if you have disabled the use of cookies.
We also use a consent management platform on our website, which allows you to centrally manage and modify your consent preferences. This can be accessed at any time via the fingerprint icon displayed in the bottom left corner.
3.2.2. Usercentrics Consent Management Platform
We use the Usercentrics Consent Management Platform on our website to manage user consent. The service provider is Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This serves to comply with legal obligations regarding the storage of consent and to provide proof thereof. Technologies used are local storage and cookies.
This list includes all (personal) data collected by or through the use of this service.
- Device information
- Browser information
- Anonymized IP address
- Opt-in and opt-out data
- Date and time of visit
- Requested URLs on the website
- Page path of the website
- Geographical location
Legal Basis
The legal basis for this data processing is Art. 6 Para. 1 lit. c GDPR. The consent data (consent given and revocation of consent) are stored for three years. The data will be exported after the contract has ended.
Click here to read the data processor’s privacy policy: https://usercentrics.com/privacy-policy/
3.2.3. Google Analytics
If you have given your consent, Google Analytics, a web analysis service of Google LLC, will be used on this website. Responsible for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Analytics uses cookies which allow for an analysis of your use of our websites. The information about your use of this website collected by the cookies is usually transferred to a Google server in the USA, where it will be stored. We use the user ID function. By means of the user ID, we can assign a unique, permanent ID to one or several sessions (and the activities within these sessions) and analyze user behavior across devices.
We use Google Signals. Google Analytics uses it to collect additional information about users who have enabled personalized ads (interests and demographic data) in order to deliver ads to these users in remarketing campaigns across devices.
We use the 'anonymizeIP' function (IP masking): The anonymization of IP addresses is enabled by default for Google Analytics. Due to IP anonymization, Google shortens your IP address within the member states of the European Union or within other contract states of the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA, where it will be shortened. The IP address transferred by your browser in the context of Google Analytics will not be associated with any other data by Google.
Your user behavior is recorded during your visit to the website.
On behalf of the owner of this website, Google will use this information to analyze your use of the website and to compile reports on the website activities. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.
During your visit to this website, the following data may be collected, among other things:
• Pages you access and your click path
• Achievement of website goals (conversions, e.g., newsletter sign-ups, downloads)
• Your user behavior (e.g., clicks, time spent on pages, bounce rates)
• Your approximate location (region)
• Your IP address (in truncated form)
• Technical information about your browser and device (e.g., language settings, screen resolution
• Your internet service provider
• The referrer URL (the website or marketing channel from which you arrived at this site)
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as a data processor pursuant to Art. 28 GDPR)
• Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA
• Alphabet Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA
It cannot be excluded that US authorities will access the data stored by Google.
If data is processed outside the EU/EEA and there is no data protection level in compliance with the European standard, we have concluded EU standard contractual clauses with the service provider in order to establish an adequate data protection level. The parent company of Google Ireland, Google LLC, is located in California, USA. It cannot be excluded that the data stored by Google are transferred to the USA and accessed by US authorities. The USA is currently considered a third country with regard to data protection. They do not have the same rights as within the EU/EEA. You might not be entitled to any legal remedies against access by authorities.
The data that are sent by us and have cookies will be automatically deleted after 24 months. Data whose retention period has been reached are automatically deleted once a month. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by a. not giving your consent to the use of the cookie, or b. downloading and installing the browser add-on to deactivate Google Analytics, available HERE.
You can also prevent cookies from being saved by means of the corresponding setting of your browser software. If you configure your browser to reject all cookies, though, you may experience restrictions on the functionality of this and other websites.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there. For more information about the terms of use for Google Analytics and Google's Privacy Policy, please visit: https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en.
3.2.4. Google Ads Re/Marketing Services and Conversion Tracking
We use the marketing and remarketing services (in short "Google Marketing Services") of the provider Google on our website. This serves the optimization and economic operation of our online offer. The Google Marketing Services allow us to personalize ads for our website to only show you ads that may suit your interests. For example, if you see ads for our services on other websites, this is referred to as "remarketing". For these purposes, when our websites and other websites on which Google Marketing Services are active are called, Google runs a code of Google to integrate (re)marketing tags (invisible graphics or code, also referred to as "Web beacons") into the website. They are used to store an individual cookie on your device, i.e. a small file (technologies comparable to cookies may also be used).
The cookies may be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, and googleadservices.com. This file indicates the websites you visited, the content you were interested in and the offers you clicked on, technical information about the browser and operating system, referring websites, visit time and further information about the use of the online offer. Your IP address is also collected, but we will inform you in the context of Google Analytics that the IP address within the member states of the European Union or within other contract states of the European Economic Area is shortened and only in exceptional cases transferred to a Google server in the USA wholly and shortened there. The IP address will not be combined with your data within other Google offers.
The information mentioned above may also be linked by Google to such information from other sources. If you subsequently visit other websites, you will be presented with ads tailored to your interests.
We process your data in the context of Google Marketing Services pseudonymously. This means that Google does not save and process your name or email address, for example, but the relevant data based on cookies within pseudonymous user profiles. The information collected by Google Marketing Services about the users is transmitted to Google and stored on Google's servers in the USA.
The Google Marketing Services we use include the online advertising program "Google Ads" (formerly: "Google AdWords"), for example. In the case of Google Ads, every Ads customer receives a different "conversion cookie". Cookies can therefore not be tracked via the websites of Ads customers. The information obtained by means of the cookie serves the purpose of generating conversion statistics for Ads customers who have opted for conversion tracking. Ads customers are informed about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information with which users can be identified.
We also use the "Google Tag Manager" to integrate the Google Analysis and Marketing Services into our website and manage them.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies.
Further information on the data usage by Google for marketing purposes can be found on the overview page: https://policies.google.com/technologies/ads?hl=en; Google's Privacy Policy is available at https://policies.google.com/privacy?hl=en.
If you wish to object to interest-based advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google: https://adssettings.google.com/authenticated?hl=en
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
3.2.5. Google Tag Manager
For reasons of transparency, we point out that we use the Tag Manager of the provider Google. This is a tag management system for managing JavaScript and HTML tags that are used to implement tracking and analysis tools.
The Google Tag Manager does not collect any personal data. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that are used to measure traffic and visitor behavior, capture the impact of online advertising and social channels, set up remarketing and targeting, and test and optimize websites. If you have deactivated tags, Google Tag Manager will take this deactivation into account. For more information about Google Tag Manager, please refer to the following resources:
https://www.google.com/intl/en/tagmanager/use-policy.html
https://www.google.com/intl/en/tagmanager/faq.html
https://safety.google/privacy/privacy-controls/
3.2.6. Google Analytics Audiences
If you have given your consent, Google Analytics Audience (GA Audience), an advertising and conversion tracking service, will be used on this website. The service provider responsible in the EU is Google Ireland Limited.
GA Audience uses cookies that are stored on your computer and other mobile devices (e.g. smartphones, tablets, etc.) and allow for an analysis of the use of the corresponding devices. The data is partially analyzed across devices. Google Audience receives access to the cookies created by using Google AdWords and Google Analytics. The following data is processed during use:
• User agent
• Location information
• Referrer URL
• IP address
• Page depth
• Session duration
• Date and time of visit
• Usage data
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
For more information about data protection in connection with the use of GA Audience, please refer to the following link: https://support.google.com/analytics/answer/2700409?hl=en&ref_topic=2611283
3.2.7. Google AdSense
As far as you have given your consent, Google AdSense, an online advertising service, will be used on this website. The service provider responsible in the EU is Google Ireland Limited.
Google AdSense uses cookies that are stored on your computer and collect statistical information about you, which are then processed by our advertising partners. We use Google AdSense to present you with advertising tailored to your interests. By visiting our website, Google is informed that you have called up our website. This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies.
If you are logged in with your Google account, your data may be directly linked to it. If you do not wish to be linked with your Google profile, you have to log out. You can prevent the setting of cookies by Google AdSense by disabling interest-based ads on Google at https://www.google.de/ads/preferences. In addition, you can opt out of interest-based advertising from providers participating in the self-regulatory program "About Ads" by visiting the following link: http://www.aboutads.info/choices
Both settings for disabling are deleted when your cookies are deleted. You may also permanently disable the settings in the browsers Firefox, Internet Explorer or Google Chrome at https://www.google.com/settings/ads/plugin. However, you might not be able to use all functions of this offer to their full extent in this case.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
For more information about the purpose and scope of data collection and its processing by Google, please visit: https://policies.google.com/technologies/ads?hl=en
3.2.8. DoubleClick by Google
If you have given your consent, the online marketing tool DoubleClick by Google will be used on this website. The service provider responsible in the EU is Google Ireland Limited.
DoubleClick uses cookies to display ads relevant to the users, improve campaign performance reports, or prevent users from seeing the same ads multiple times. For this purpose, Google uses a cookie ID to collect information about which ads are placed in which browser. This prevents the same ad from being displayed several times. In addition, DoubleClick may use cookie IDs to collect conversions with reference to ads. This is the case, for example, when a user views a DoubleClick ad and later uses the same browser to visit the advertiser's website and buy something there.
When you open a page that uses DoubleClick and allows the DoubleClick script, your browser automatically establishes a direct connection to the Google server. By integrating DoubleClick, Google receives the information that you have called the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can connect the visit to your account.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data is transferred. This can be the case for various purposes, e.g. for saving or processing.
You can prevent tracking by this service in several ways: a. By adjusting your browser settings. Blocking third-party cookies in your browser will prevent you from seeing ads from third-party providers. b. By disabling cookies used for conversion tracking. This will stop interest-based advertising from being shown to you. To do this, block cookies from the domain "www.googleadservices.com" in your browser settings. c. By setting an opt-out cookie at https://www.google.de/settings/ads. This setting will be deleted if you remove all cookies from your browser. d. By disabling interest-based advertising from providers participating in the self-regulatory program "About Ads" via the link http://www.aboutads.info/choices. This setting will also be lost if you delete your cookies. e. By permanently disabling cookies in your browser using the plugin available at https://www.google.com/settings/ads/plugin.
Please note that you might not be able to use all functions of our website to their full extent in this case.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
Further information on DoubleClick by Google can be found at https://www.google.de/doubleclick and https://support.google.com/admanager/answer/2839090?hl=en, as well as on data protection at Google in general: https://policies.google.com/privacy?hl=en&gl=de. Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org.
3.2.9. Hubspot
We use HubSpot on our website, a service for marketing, content management, web analysis and search engine optimization. The service provider is HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. It is used for statistics and marketing purposes.
This list includes all (personal) data collected by or through the use of this service.
• Geographic location
• Browser type
• Navigation information
• Referrer URL
• Performance data
• City location
• Frequency of application use
• Mobile app data
• Login credentials for the HubSpot subscription service
• Files viewed on site
• Domain names
• Pages viewed
• Aggregated usage data
• Operating system version
• Internet service provider
• IP address
• Device identifier
• Visit duration
• Source of application download
• Operating system
• Events occurring within the application
• Access times
• Clickstream data
• Device model and version
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
The Analytics cookies are valid for a maximum of 6 months. For detailed information about the individual cookies set by HubSpot, please visit: https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser
Data recipients
• Service providers (https://legal.hubspot.com/legal-stuff)
Information
You can contact HubSpot's Data Protection Officer at the following email address: privacy@hubspot.com
Transfer to Third Countries
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data is transferred. This can be the case for various purposes, e.g. for saving or processing.
• Ireland, the United States of America, and other countries where HubSpot partners operate
Click here to read the data processor's privacy policy: https://legal.hubspot.com/privacy-policy?_ga=2.80487636.2109353776.1547219595-1840724365.1539588495
3.2.10. HubSpot Forms
We use HubSpot Forms on our website, a service for creating online forms. The service provider is HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. It serves the provision of online forms. Cookies are used for this purpose. This list includes all (personal) data collected by or through the use of this service.
• Device identifier
• User agent data
• City location
• Device model and version
• IP address
• Operating system version
• Navigation information
• Phone number
• Browser type
• Login credentials for the HubSpot subscription service
• Visit duration
• Geographic location
• Internet provider
• Access times
• Pages viewed
• Domain names
• Company name
• Referrer source
• Operating system
• Referrer URL
• Source of mobile application download
• Email address
• Clickstream data
• Transaction information
• Frequency of mobile app usage
• Aggregated usage of mobile applications
• Graphic
• HTML pages
• Events occurring within the mobile application
• Information from third-party sources
• Mobile app performance data
• Files viewed on our website
• Payment information
• Address
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there. The data is deleted as soon as it is no longer required for processing purposes.
3.2.11. LinkedIn Analytics
If you have given your consent, the LinkedIn Analytics analysis service will be used on this website. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Cookies are used for this purpose. This is used for the usage analysis. This list includes all (personal) data collected by or through the use of this service.
• Information about the operating system
• Device identifier
• ISP or mobile carrier
• IP address
• Referrer URL
• Information about add-ons
• Browser information
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
The data is deleted as soon as it is no longer required for processing.
Data recipients are LinkedIn Ireland Unlimited Company and LinkedIn Inc. USA.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data is transferred. This can be the case for various purposes, e.g. for saving or processing.
Click here to read the data processor’s privacy policy: https://www.linkedin.com/legal/privacy-policy
Click here to opt out across all domains of the data processing company: https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en
Click here to read the data processor's cookie policy: https://www.linkedin.com/legal/cookie_policy
3.2.12. LinkedIn Ads
If you have given your consent, the advertising service LinkedIn Ads will be used on this website. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This is done for reasons of conversion tracking, advertising, and remarketing. Cookies, pixels and ads tags are used.
This list includes all (personal) data collected by or through the use of this service.
• IP address
• User agent data
• Device ID
• Search terms
• Articles viewed
• Pages visited
• Ads viewed
• Followers
• Connections
• Videos watched
• Profile information
• Advertising identifier
• Information about the operating system
• Device information
The legal basis for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with future effect by opening the cookie settings on our consent management platform and changing your selection there.
The data is deleted as soon as it is no longer required for processing.
Data recipients are LinkedIn Ireland Unlimited Company and LinkedIn Inc. USA.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data is transferred. This can be the case for various purposes, e.g. for saving or processing.
Click here to read the data processor’s privacy policy:
https://www.linkedin.com/legal/privacy-policy
Click here to opt out across all domains of the data processing company:
https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en
Click here to read the data processor's cookie policy:
https://www.linkedin.com/legal/cookie_policy
3.2.13. LinkedIn Insight Tag
If you have given your consent, LinkedIn Insight Tag, a conversion tracking and retargeting service, will be used on this website. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It is used for analysis, retargeting and marketing. Cookies are used for this purpose.
This list includes all (personal) data collected by or through the use of this service.
• Referrer URL
• IP address
• Device information
• Browser information
• Time stamp
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there. The data will be deleted after 90 days. Data recipients are LinkedIn Ireland Unlimited Company and LinkedIn Corp.
Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data is transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data is transferred. This can be the case for various purposes, e.g. for saving or processing: United States of America.
Click here to read the data processor's privacy policy https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=www.linkedin.com
Click here to read the data processor's cookie policy: https://www.linkedin.com/legal/cookie_policy?src=li-other&veh=www.linkedin.com
3.2.14. Matomo (self hosted)
This is a self-hosted web analytics platform.
Purposes of Data Processing
This list outlines the purposes for which data is collected and processed:
- Analysis
- Optimization
Technologies Used
This list includes the technologies used by this service to collect data. Typical technologies include cookies and tracking pixels placed in the user's browser:
- Cookies
- Device fingerprinting
This list includes all (personal) data collected by or through the use of this service.
- Browser language
- Browser type
- Device operating system
- Device type
- Geographical location
- IP address
- Number of visits
- Referrer URL
- Screen resolution
- Usage data
- Subpages visited
The legal basis for processing this data is:
Art. 6 Para. 1 s. 1 lit. a GDPR
Retention Period
The retention period defines the duration for which the collected data is stored for processing purposes. Data must be deleted as soon as they are no longer needed for the stated purposes.
The data is deleted as soon as it is no longer required for processing purposes.
3.2.15. Albacross
This website uses functions of the lead identification and ad targeting service Albacross. The provider is Albacross Nordic AB, Kungsgatan 26, 111 35 Stockholm, Sweden.
Albacross uses cookies to enable an analysis of your use of the website. The information about your use of this website generated by the cookie is usually transferred to an Albacross Nordic AB server in Ireland, where it will be stored.
The data that Albacross collects and uses for this purpose include information about the IP address from which you have visited our website, as well as technical information that allows Albacross to distinguish different visitors from the same IP address. Albacross saves the domain from the form input to link the IP address to your employer.
If your browser supports the "Do Not Track" technique and you have enabled it, your visit is automatically ignored.
Your data will be deleted after 12 months at the latest.
Further information on the processing of personal data can be found in the Privacy Policy of Albacross (https://albacross.com/privacy-policy).
The legal basis for this data processing is your consent according to Art. 6 Para. 1 S.1 lit. a) GDPR. You may revoke your consent at any time with future effect by opening the cookie settings and changing your selection there.
Further information on the processing of personal data can be found in the Privacy Policy of Albacross (https://albacross.com/privacy-policy).
The legal basis for this data processing is your consent according to Art. 6 Para. 1 S.1 lit. a) GDPR. You may revoke your consent at any time with future effect by opening the cookie settings and changing your selection there.
3.3. Newsletter
Visitors to our website have the option to subscribe to free newsletters. When signing up, the data entered into the input form is transmitted to us.
The only required fields are your email address, your country and your area of interest. You may also optionally provide your title, first and last name, and the company you work for.
To ensure that no errors have been made when entering your email address, we use the double opt-in procedure: After you enter your email address in the subscription form, we will send you a confirmation link. Only when you click this confirmation link will your email address be added to our mailing list. The processing of your electronic contact data is based on your consent (Art. 6 Para. 1 lit. a GDPR). You may withdraw your consent at any time with future effect. To do so, just click the "Unsubscribe" button at the end of a newsletter.
Insofar as you have provided optional information for our newsletter in the course of the registration, we process this data on the basis of our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in an appealing display of our newsletter and exclusively for personal salutation within the newsletter.
The newsletter is also sent in connection with the sale of goods or services:
If you purchase goods or services and enter your email address, we might use it to send you a newsletter. In such a case, the newsletter only includes direct advertising for similar goods or services of our own. The legal basis for sending the newsletter following the sale of goods or services is Sect. 7 Para. 3 of the German Unfair Competition Act (UWG).
You can object to receiving the newsletter at any time on the basis of an existing customer relationship.
In connection with the data processing for sending newsletters, the data is not transmitted to third parties. The data is exclusively used for sending the newsletter.
Marketing emails are sent via HubSpot Mail, the server location is USA.
Newsletter tracking
Please note that we analyze your user behavior when sending our newsletter to determine whether and when the newsletter was opened. For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are stored on our server and loaded when the newsletter is opened. In this process, technical information such as your browser type, time of opening, and IP address is transmitted. We link this data and the web beacons with your email address and an individual ID for evaluation purposes. Links contained in the newsletter also include this ID and allow us to analyze your click behavior.
Based on the data collected in this way, we create a user profile to tailor the newsletter to your individual interests. We track when you read our newsletters, which links you click on, and infer your personal interests from this behavior. This information is also linked to any actions you take on our website. The legal basis for this data processing is your consent pursuant to Art. 6 Para. 1 lit. a) GDPR.
You may withdraw your consent at any time with future effect. Please note that the withdrawal applies to the entire newsletter subscription, as it is technically not possible to revoke tracking independently of the newsletter. To unsubscribe, simply click the unsubscribe link provided in every email.
Tracking will also not occur if you have disabled the automatic display of images in your email program by default. In this case, the newsletter may not be displayed in full, and some features may not be available to you. If you choose to manually display the images, the tracking described above will take place. The tracking data is stored as long as you remain subscribed to the newsletter. After you unsubscribe, the data is anonymized and used for statistical purposes only. The data you provided when subscribing to the newsletter will be stored by us until you unsubscribe and will be deleted after cancelation of your subscription. Data stored by us for other purposes remains unaffected.
3.4. Contacting us
You have the option to contact us via email, live chat, or our callback service contact form. Any personal data you provide to us in this context will, of course, be used solely for the purpose for which you provided it. The legal basis for this processing is our legitimate interest in responding to your inquiry in accordance with Art. 6 Para. 1 lit. f GDPR.
If our contact form includes input fields that are not required for contacting us, these fields are always marked as optional. This additional information helps us to better understand your inquiry and to process your request more efficiently. Providing this information is entirely voluntary and is processed based on your consent pursuant to Art. 6 Para. 1 lit. a GDPR. If you voluntarily provide contact details such as an email address or phone number, you also consent to us using that channel to respond to your inquiry.
You may withdraw your consent at any time with future effect. To do so, please contact us using the contact details provided above.
We will delete the data collected in connection with your inquiry once it is no longer required for the purpose for which it was collected, unless legal retention obligations apply. In such cases, the processing of your data will be restricted.
3.5. Appointment Scheduling: Interaction Tool meetergo
We use meetergo on our website. The service is provided by meetergo GmbH, Hansaring 61, 50670 Cologne, Germany. meetergo offers an online appointment scheduling tool. When you schedule an appointment with us online, the data you enter will be stored on meetergo's servers in Germany. The form may request the following information:
- Name
- Email address
- Phone number
- Reason for your consultation request
In addition, meetergo temporarily collects your IP address, referrer URL and access time, and may detect that an inquiry was made on our website. This data is used exclusively for the technical provision of the service and is automatically deleted afterward. The use of meetergo is based on Art. 6 Para. 1 lit. a GDPR. The website operator has a legitimate interest in providing a convenient way for users to schedule appointments. Where consent has been requested, data processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and/or Art. 9 Para. 1 lit. a GDPR, if applicable. Consent can be withdrawn at any time.
Further information about meetergo can be found at: https://meetergo.com/en
4. Registration on Our Website
You can register in certain areas of our website to access additional features. The data you provide during registration will be used solely for the purpose of granting access to the specific service or offering you have signed up for—for example, registering for an event or downloading an informational brochure. All mandatory fields requested during registration must be completed in full. Otherwise, we may be unable to process your registration. We use the email address provided during registration to inform you about important changes, such as updates to the scope of our services or technically necessary modifications.
The processing of the data entered during registration is based on your consent pursuant to Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time. A simple informal notification by email is sufficient for this purpose.
The lawfulness of the data processing already carried out remains unaffected by such withdrawal.
In certain cases, we may also wish to use the information obtained during registration to send you product updates or other news from our portfolio via email. If we intend to use your registration data for these purposes, we will always inform you of this during the registration process. The legal basis for this is your explicit consent, which you provide by signing up for the respective services or communications.
The data collected during registration will be stored for as long as you remain registered on our website or as long as the related service is being used. If you have also consented to receive information by email, we will retain your data until you withdraw your consent. Statutory retention obligations remain unaffected.
5. Applications
You can apply online via our application portal at https://jobs.proalpha.com/en. Your online application will be transmitted directly to our HR department via an encrypted connection and will, of course, be treated confidentially.
If you choose to apply by email, please note that sending unencrypted emails or attachments is not secure. Your personal data will be used to process your application and to make a decision regarding the establishment of an employment relationship. The legal basis for this is Sect. 26 Para. 1 in conjunction with Para. 8 Sent. 2 of the German Federal Data Protection Act (BDSG). Additionally, your personal data may be processed if necessary to defend against legal claims asserted against us in connection with the application process. The legal basis for this is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest in this case lies in the stated purposes.
If an employment relationship is established between you and us, we may further process the personal data we have already received from you in accordance with Sect. 26 Para. 1 German Federal Data Protection Act (BDSG), if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of employee representation arising from a law, collective agreement, works council agreement, or service agreement (collective regulation).
Your application data will not be processed beyond the scope described above. Your personal data will be deleted no later than six months after the conclusion of the application process, unless legitimate interests on our part oppose deletion or you have given us consent to retain the data for a longer period. A legitimate interest in this context may be, for example, the need to provide evidence in a proceeding under the General Equal Treatment Act (AGG).
Further information on data protection in the application process can be found in the corresponding privacy policy on our careers page.
6. Customers
We value our customers as reliable and trustworthy partners. For this reason, the protection of your data is of great importance to us. Below, we inform you about how we process your data and how you can exercise your rights under the General Data Protection Regulation (GDPR). Which personal data we process and for what purpose depends on the specific contractual relationship.
Information about the data controller and, where applicable, our Data Protection Officer can be found in sections 2.1 and 2.2 of this Privacy Policy.
6.1. What Data We Use
We process your personal data when you contact us for business purposes, when you inquire about our products, or when you collaborate with us on projects. In addition, we process your personal data, among other reasons, to comply with legal obligations, to safeguard legitimate interests, or based on your consent.
Depending on the legal basis, the categories of personal data we process may include, in particular:
• First and last name
• Contact details (phone, email address)
• Department
• Account information, especially registration and credentials
6.2. Where the Data Comes From
We process personal data provided by you, our customers, service providers and suppliers or from other companies within the Proalpha Group.
6.3. For What Purposes Your Data Is Used
We process your personal data in accordance with the General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and all other applicable laws.
6.3.1. Based on Your Consent (Art. 6 Para. 1 a GDPR)
If you have voluntarily given us your consent to collect, process or transfer certain personal data, this consent serves as the legal basis for the processing of that data. The specific purposes of processing will be communicated to you at the time your consent is obtained.
We process your personal data based on your consent particularly in the following cases:
• Sending of email newsletters
• Personalized newsletter tracking
• Market research (e.g., customer satisfaction surveys)
• Marketing and advertising – creation of customer profiles
6.3.2. For the Performance of a Contract (Art. 6 Para. 1 b GDPR)
We process your data to the extent necessary to maintain contractual relationships with you, to fulfill existing contracts and to communicate with you.
• Fulfilling contractual relationships
• Communication and correspondence
6.3.3. Based on Our Legitimate Interests (Art. 6 Para. 1 f GDPR)
In certain cases, we process your data to safeguard our legitimate interests or those of third parties, in particular:
• Direct marketing or market and opinion research
• Centralized customer data management within the Proalpha Group
• Communication and collaboration within the scope of projects
• Provision of communication tools to facilitate collaboration
6.4. Who Receives Your Data?
As a rule, we do not share your data with third parties. However, to fulfill our contractual and legal obligations, it may be necessary to disclose your data to other parties, such as public authorities or external service providers.
To the extent that this is necessary in order to fulfill our contractual obligations or for internal management purposes, data may be disclosed to other companies of the Proalpha Group. For an updated list of our group companies, see 2.1.
External service providers:
• IT providers (e.g., maintenance and hosting providers)
• Print service providers
• Telecommunications providers
• Marketing and sales service providers
• Letter shops
If you have further questions about the individual recipients, please contact us at the contact address above.
6.5. Will Your Data Be Transferred to Countries Outside the European Union (So-Called Third Countries)?
Countries outside the European Union (and the European Economic Area "EEA") handle the protection of personal data differently from countries within the European Union. To process your data, we also use service providers located in third countries outside the European Union. For some of these third countries, there is currently no decision by the EU Commission that they generally provide an adequate level of protection.
We have therefore taken special measures to ensure that your data is processed in third countries as safely as in the European Union. With service providers in third countries as well as within our Group, we conclude the standard data protection clauses provided by the European Commission. These clauses stipulate appropriate guarantees for the protection of your data with service providers in third countries. Within our group of companies, we have also taken contractual and organizational measures to ensure that the legal requirements for the transfer to third countries are met.
6.6. How Long Will My Data Be Stored?
We store your personal data as long as they are required for the respective purpose and it is necessary to fulfill our legal and contractual obligations.
If the data is no longer needed for the fulfillment of contractual or legal obligations, it will be deleted—unless further processing is necessary to comply with statutory retention periods or to preserve data until the expiry of applicable limitation periods. The same applies in cases where consent has been withdrawn.
6.7. What Rights Do You Have in Connection with the Processing of Your Data?
Please refer to Section 9 of this Privacy Policy for details on your rights.
7. Social Media
We run channels on various social media platforms to communicate directly with you and to inform you about interesting news from our company.
We process the data of the visitors to our channels, in particular information about user interactions (for example, likes, comments, retweets), demographic and statistical data as well as the data transmitted to us in the context of messages and comments.
We would like to point out that the respective providers also have access to your data when you use these social networks. They might use this data for market research and advertising purposes. We have no further knowledge of the data processing by the providers of the respective social platforms. We would like to point out that the links to the respective platforms on our website are links only. The platforms only process your data when you visit them.
The processing of the personal data of the visitors to our online presence is based on our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in ensuring communication with our customers and their notification of news relating to our products.
We would like to point out that the data processed by social platforms and networks might be processed outside of the European Economic Area.
For a comprehensive overview of the respective data processing activities and opt-out options, please refer to the following pages of the providers:
• YouTube / Google (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland)
Privacy Policy: https://policies.google.com/privacy
Opt-Out: https://adssettings.google.com/authenticated
• Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)
Privacy Policy: https://privacy.xing.com/en
Opt-Out: https://privacy.xing.com/en
• LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Privacy Policy: https://www.linkedin.com/legal/privacy-policy
Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
• Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Privacy Policy: https://help.instagram.com/519522125107875
Opt-Out: https://help.instagram.com/contact/1845713985721890
• Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
Privacy Policy: https://twitter.com/de/privacy
Opt-Out: https://twitter.com/personalization
• Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Privacy Policy: https://www.facebook.com/privacy/explanation
Opt-Out: https://www.facebook.com/help/contact/367438723733209
7.1.1. YouTube
We use services provided by YouTube on our website, a video content platform operated by Google LLC. The service provider responsible in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This integration serves to enhance our online offering. Using YouTube content requires that the providers of such content (hereinafter referred to as "third-party providers") are able to access users' IP addresses. Without the IP address, they would not be able to deliver the content to the user's browser. The IP address is therefore necessary for displaying this content. We make every effort to use only content whose respective providers use the IP address solely for the delivery of the content. However, we have no control over whether third-party providers also store the IP address, for example for statistical purposes. Where we are aware of such practices, we will inform users accordingly.
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
7.1.2. LinkedIn Widget
We use the LinkedIn widget on our website. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This integration serves to enhance our online offering and facilitate communication. Using this widget requires that the providers of such content (hereinafter referred to as "third-party providers") are able to access users' IP addresses. Without the IP address, they would not be able to deliver the content to the user's browser. The IP address is therefore necessary for displaying this content. We make every effort to use only content whose respective providers use the IP address solely for the delivery of the content. However, we have no control over whether third-party providers also store the IP address, for example for statistical purposes. Where we are aware of such practices, we will inform users accordingly.
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
7.1.3. Twitter for Websites
We use services by Twitter on our website. The service provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. This integration serves to enhance our online offering and facilitate communication. Using Twitter content requires that the providers of such content (hereinafter referred to as "third-party providers") are able to access users' IP addresses. Without the IP address, they would not be able to deliver the content to the user's browser. The IP address is therefore necessary for displaying this content. We make every effort to use only content whose respective providers use the IP address solely for the delivery of the content. However, we have no control over whether third-party providers also store the IP address, for example for statistical purposes. Where we are aware of such practices, we will inform users accordingly.
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
We would like to point out that as the provider of these pages, we do not have any knowledge of the contents of the data transmitted to Twitter or their use. Further information can be found in the Twitter Privacy Policy.
7.1.4. Facebook Page Plugin
We use the Facebook page plugin on our website. The service provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. This integration serves to enhance our online offering and facilitate communication. Using Facebook content requires that the providers of such content (hereinafter referred to as "third-party providers") are able to access users' IP addresses. Without the IP address, they would not be able to deliver the content to the user's browser. The IP address is therefore necessary for displaying this content. We make every effort to use only content whose respective providers use the IP address solely for the delivery of the content. However, we have no control over whether third-party providers also store the IP address, for example for statistical purposes. Where we are aware of such practices, we will inform users accordingly.
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there. For further information, please refer to https://www.facebook.com/policy.php
7.1.5. Twitter Syndication
We use services by Twitter Syndication on our website. The service provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. This integration serves to enhance our online offering and facilitate communication. Twitter Syndication stores and processes information about your user behavior on our website. For this purpose, Twitter Syndication uses cookies, i.e. small text files, which are stored locally in the cache of your Web browser on your device and which allow an analysis of your use of our website.
You can prevent the installation of cookies by deleting existing cookies and disabling the storage of cookies in your web browser settings. Please note that if you do so, you may not be able to use all features of our website to their full extent. You can also prevent Twitter from collecting the aforementioned information by setting an opt-out cookie on one of the websites linked below:
• https://twitter.com/personalization
• http://optout.aboutads.info/?c=2#!/
Please note that this setting is deleted when you delete your cookies. You can object to the collection and forwarding of personal data or prevent the processing of this data by deactivating the execution of JavaScript in your browser. In addition, you can prevent the execution of Java script code in general by installing a Java Script blocker (e.g. https://noscript.net/ or https://www.ghostery.com). Please note that if you do so, you may not be able to use all features of our website to their full extent.
The legal basis for this data processing is your consent in accordance with Art. 6 Para. 1 lit. a) GDPR. You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there. For more information on data protection, please refer to the following website: https://twitter.com/privacy.
7.1.6 Facebook Connect
We use Facebook Connect on our website. The service provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (hereinafter referred to as "Facebook"). Facebook Connect simplifies registration for online services.
Instead of using a registration form on our website, you can log in using your Facebook login credentials and then access our services. When using Facebook Connect, your web browser automatically establishes a direct connection to Facebook's servers. You will be redirected to the Facebook login page, where you can sign in using your user credentials. This process links your Facebook user account with our service. We have no control over the further use of the data that Facebook collects via Facebook Connect. This data is collected by Facebook and transmitted to us by Facebook (https://de-de.facebook.com/privacy/explanation) in compliance with the Privacy Policy. You can control the information we receive from Facebook using the privacy settings in your Facebook account.
This service may transfer the collected data to other countries. Please note that this may include transfers to countries outside the European Union and the European Economic Area that may not provide an adequate level of data protection. If data is transferred to the USA, there is a risk that your data may be accessed by US authorities for control and surveillance purposes, and you may not have effective legal remedies. Below, you will find a list of countries to which the data may be transferred. Transfers may occur for a variety of purposes, such as storage or processing.
• Worldwide
This data processing and your right to withdraw consent are based on Art. 6 Para. 1 lit. a) GDPR.
You may withdraw your consent at any time with future effect by accessing the cookie settings on our consent management platform (accessible via the fingerprint icon in the bottom left corner of the screen) and adjusting your preferences there.
8. Data Transfers
8.1. Transfers Within the Proalpha Group
As a general rule, your data will not be transferred to third parties outside the Proalpha Group unless we are legally obligated to do so, the transfer is necessary for the execution of a contractual relationship, or you have expressly consented to the transfer of your data in advance. External service providers and partner companies only receive your data if this is required for processing your request. In such cases, the scope of the data transferred is limited to the minimum required.
Certain services within our Group are provided centrally by individual group companies. Therefore, it is possible that data may be shared within the Group in connection with contract processing, customer support, marketing activities, or for internal administrative and analytical purposes. Only the data strictly necessary for the respective purpose will be transferred, and they will be deleted once that purpose no longer applies and applicable retention periods have expired.
We have implemented internal agreements and codes of conduct to ensure that the integrity and security of any data transferred in this way is always maintained.
8.2. Transfer to External Service Providers
Your data may be shared with service partners who act on our behalf and support Proalpha in the provision of its services.
Processing of your personal data by commissioned service providers takes place within the framework of a data processing agreement in accordance with Art. 28 GDPR. These service providers are granted access only to the personal data necessary to perform their specific tasks. They are strictly prohibited from disclosing your personal data or using it for any other purpose,particularly for their own marketing purposes.
Where external service providers come into contact with your personal data, we have ensured through legal, technical and organizational measures, as well as through regular audits, that they comply with applicable data protection regulations. Your personal data will not be commercially disclosed to other companies.
9. Data Subject Rights
9.1. General Rights
You have the right of access to information, rectification, erasure, restriction of processing, objection to the processing and data portability. Where processing is based on your consent, you also have the right to withdraw that consent at any time with future effect.
9.2. Rights Regarding Data Processing Based on Legitimate Interest
In accordance with Art. 21 Para. 1 GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 Para. 1 lit. e) GDPR (data processing in the public interest) or pursuant to Art. 6 Para. 1 lit. f) GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision. If you lodge an objection, we will no longer process your personal data, unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.
9.3. Rights in Direct Advertising
If we process your personal data for direct advertising purposes, you have the right to object to the processing of your personal data for such advertising at any time in accordance with Art. 21 Para. 2 GDPR, including profiling, as far as it is connected with such direct advertising. If you object to the processing for direct advertising purposes, we will no longer process your personal data for these purposes.
9.4. Right to File a Complaint with a Supervisory Authority
You also have the right to file a complaint with a data protection authority about our processing of your personal data.
10. Data Security
We have implemented extensive technical and organizational security measures to protect your data against accidental or intentional manipulation, loss, destruction, or unauthorized access. Our security procedures are regularly reviewed and adjusted in line with technological advancements.
11. Status of This Privacy Policy
This Privacy Policy is regularly updated as the internet and our services evolve. Any changes will be announced on this page in a timely manner. We recommend that you check this page regularly to stay informed about the current version of our Privacy Policy.
Last updated: March 2025