Privacy Policy of the proALPHA Group

We would like to inform you about the processing of personal data by Böhme & Weihs Systemtechnik GmbH & Co. KG (hereinafter "Böhme & Weihs") in accordance with the EU General Data Protection Regulation. Böhme & Weihs Systemtechnik GmbH & Co. KG is part of the proALPHA Group. Since we have outsourced some of our services within our group, data may also be transferred to other companies within our group in individual cases. This is done either in the context of order processing in accordance with Art. 28 GDPR or in the context of a joint responsibility in accordance with Art. 26 GDPR and only if there is a legal basis for this.


We have made internal agreement to ensure that the processing of your data complies with the regulations of the applicable data protection laws. If you have any questions or remarks about this data protection information, you can always send them to the e-mail address specified in section 2.
The data processing addendum can be found in German and English in the Trustcenter: https://www.proalpha.com/en/trustcenter

 

1.    Overview
2. Name and Contact Details of the Party Responsible and the Data Protection Officer 
2.1. Party Responsible
2.2. Data Protection Officer
3. Data Processing on the Website
3.1. Use of the Website for Information Purposes
3.2. Online Presence and Website Optimization
3.3 Newsletter
3.4. Contact
 4. Registration on Our Website
 5. Applications
 6. Customers
6.1. What Data We Use
6.2. The Sources from Which the Data Originate
6.3. For What Purposes Are Your Data Used
6.4. To Whom Will Your Data Be Passed On?
6.5. Will Your Data Be Transferred to Countries Outside the European Union (Third Countries)?
6.6. How Long Will Your Data Be Stored?
7. Social Media
7.1. Use of Social Plugins and Embedded Functions
8. Data Transmission
8.1. Transmission to Companies of the proALPHA Group
8.2. Transmission to External Service Providers
9. Rights
 9.1. General Rights
9.2. Rights in Data Processing According to the Legitimate Interest
9.3. Rights in Direct Advertising
9.4. Right to File a Complaint with a Supervisory Authority
10. Data Security
11. State of the Privacy Policy

1. Overview

The following privacy policy informs you about the type, scope and purpose of the collection and use of your personal data as well as the use of cookies by the companies of the proALPHA Group as data protection authorities responsible (hereinafter referred to as "Böhme & Weihs", "we" or "us").
Personal data means all data that refer to you personally, such as your name, address or e-mail address.

2. Name and Contact Details of the Party Responsible and the Data Protection Officer

2.1. Party Responsible

The party responsible for processing your personal data on this website is:
Böhme & Weihs Systemtechnik GmbH & Co. KG
Linderhauser Straße 153
42279 Wuppertal
P: +49 202 38434-0
F: +49 202 38434-99
E-Mail: info@boehme-weihs.de
(see also our Legal Notice).
Further information about our group companies can be found HERE, a list of our locations can be found HERE.

2.2. Data Protection Officer

We have appointed a data protection officer for our company. You can reach them at  dataprotection@proalpha.com.

3. Data Processing on the Website

3.1. Use of the Website for Information Purposes

When you use our website for information purposes only, the browser you use on your device automatically sends information to the server of our website and temporarily saves it in a log file. The following information is entered without your intervention and saved until the automated deletion:
・ the IP address of the requesting Internet-compatible device,
・ the date and time of the access,
・ the name and the URL of the retrieved file,
・ the website from which you were redirected (referrer URL),
・ the browser you used and, if required, the operating system of your Internet-compatible computer and the name of your access provider.
The legal basis for processing these data is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in ensuring a smoothly established connection, ensuring the convenient usability of our services and ensuring and analyzing the system security and stability.
Further information on the storage time and deletion of the data is provided in the following chapters.

3.2. Online Presence and Website Optimization

For the purpose of analyzing and optimizing our websites, we use various services that help us to better understand the usage of our site and the frequency of calls. Among other things, we collect data about the website from which a person concerned was redirected to one of our websites (so-called referrers), the subpages of the website that were accessed, or how often and for how long a subpage was viewed. This helps us to tailor our offers to the user and improve them. The data collected are not used to identify individual users.

3.2.1. Cookies – General Notes
What are cookies? Cookies are small text files that are stored on your computer by a website or a service and allow for a recognition of the browser the next time the website is visited. Cookies transmit information to the site using the cookie. Cookies can store various pieces of information, such as your language settings, the duration of your visit to our website or your entries made there. This prevents you from having to enter required form data again every time. The information stored in cookies can also be used to identify preferences and to align content by areas of interest.
There are various types of cookies: Session cookies are quantities of data that are only temporarily stored in the memory and deleted when you close your browser. Permanent or persistent cookies are automatically deleted after a predefined period, which can vary depending on the cookie. With this type of cookie, the information can also be saved in text files on your computer. However, you can also delete these types of cookies at any time using the settings of your browser.
First-party cookies are set by the website you are visiting. Only this website may read information from these cookies. Third-party cookies are set by organizations that are not the operator of the website you are visiting. These cookies are used by marketing companies, for example.
The legal bases for potential processing of personal data by means of cookies and their storage time may vary. If you have given us your consent, the legal basis is Art. 6 Para. 1 lit. a GDPR. Insofar as the data processing is based on our overriding legitimate interests, the legal basis is Art. 6 Para. 1 lit. f GDPR. The stated purpose then corresponds to our legitimate interest.
We use cookies to ensure the proper operation of the website, provide basic functionalities, and – with your consent – tailor our services to your preferred areas of interest, as well as measure our reach. For this purpose, we use both transient cookies and persistent cookies.
You can delete cookies already stored on your device at any time. If you want to prevent cookies from being saved, you can do so by means of the settings in your Internet browser. You can find instructions for common browsers here: Internet Explorer, Firefox, Google Chrome, Google Chrome mobile, Microsoft Edge, Safari, Safari mobile. Alternatively, you can also install so-called ad-blockers. Please note that some functions of our website may not work if you have deactivated the use of cookies.
In addition, we use a consent management platform on our website, which allows for the central adjustment of consent given. This is possible at any time with the fingerprint shown at the bottom left.

3.2.2. Usercentrics Consent Management Platform
On our website we use the consent management service Usercentrics Consent Management Platform. The service provider is Usercentrics GmbH, Sendlinger Str. 7, 80331 Munich, Germany. This serves the purpose of complying with legal obligations to store and prove the consent. Technologies used are local storage and cookies.
This list contains all (personal) data collected by or through the use of this service.
• Device information
• Browser information
• Anonymized IP address
• Opt-in and opt-out data
• Date and time of visit
• Request website URLs
• Page path of website
• Geographic location
The legal basis for this data processing is Art. 6 Para. 1 lit. c GDPR. The consent data (consent given and revocation of consent) are stored for three years. The data will be exported after the contract has ended.
Click here to read the privacy policy of the data processor https://usercentrics.com/privacy-policy/
3.2.3. Google Analytics
If you have given your consent, Google Analytics, a web analysis service of Google LLC, will be used on this website. Responsible for users in the EU/EEA and Switzerland is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Analytics uses cookies which allow for an analysis of your use of our websites. The information about your use of this website collected by the cookies is usually transferred to a Google server in the USA, where it will be stored. We use the user ID function. By means of the user ID, we can assign a unique, permanent ID to one or several sessions (and the activities within these sessions) and analyze user behavior across devices.
We use Google Signals. Google Analytics uses it to collect additional information about users who have enabled personalized ads (interests and demographic data) in order to deliver ads to these users in remarketing campaigns across devices.
We use the ‘anonymizeIP’ function (IP masking): The anonymization of IP addresses is enabled by default for Google Analytics. Due to IP anonymization, Google shortens your IP address within the member states of the European Union or within other contract states of the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the USA, where it will be shortened. The IP address transferred by your browser in the context of Google Analytics will not be associated with any other data by Google.
Your user behavior is recorded during your visit to the website.
On behalf of the owner of this website, Google will use this information to analyze your use of the website and to compile reports on the website activities. The reports provided by Google Analytics are used to analyze the performance of our website and the success of our marketing campaigns.
During your visit to the website, the following data are collected:
• The pages you visited, your "click path
• Achievement of "website goals" (conversions, e.g. newsletter subscriptions, downloads)
• Your user behavior (e.g. clicks, time spent, jump rates)
• Your approximate location (region)
• Your IP address (in shortened form)
• Technical information about your browser and the devices you use (e.g. language settings, screen resolution)
• Your Internet provider
• The referrer URL (what website or advertising material brought you to this website)
Recipient(s) of the data are/may become outdated
• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (as processor pursuant to Art. 28 GDPR)¹
• Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA¹
• Alphabet Inc., 1600 Amphitheater Parkway Mountain View, CA 94043, USA
It cannot be excluded that US authorities will access the data stored by Google.
If data are processed outside the EU/EEA and there is no data protection level in compliance with the European standard, we have concluded EU standard contractual clauses with the service provider in order to establish an adequate data protection level. The parent company of Google Ireland, Google LLC, is located in California, USA. It cannot be excluded that the data stored by Google are transferred to the USA and accessed by US authorities. The USA is currently considered a third country with regard to data protection. They do not have the same rights as within the EU/EEA. You might not be entitled to any legal remedies against access by authorities.
The data that are sent by us and have cookies will be automatically deleted after 24 months. Data whose retention period has been reached are automatically deleted once a month. In addition, you can prevent the data generated by the cookie and relating to your use of the website (incl. your IP address) from being collected and processed by Google, by
a. not giving your consent to the setting of the cookie or b. downloading and installing the browser add-on to disable Google Analytics HERE.
You can also prevent cookies from being saved by means of the corresponding setting of your browser software. If you configure your browser to reject all cookies, though, you may experience restrictions on the functionality of this and other websites.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there. Further information on the terms of use of Google Analytics and the data protection at Google can be found at https://marketingplatform.google.com/about/analytics/terms/us/ and https://policies.google.com/?hl=en.
3.2.4. Google Ads Re/Marketing Services and Conversion Tracking
We use the marketing and remarketing services (in short "Google Marketing Services") of the provider Google on our website. This serves the optimization and economic operation of our online offer. The Google Marketing Services allow us to personalize ads for our website to only show you ads that may suit your interests. For example, if you see ads for our services on other websites, this is referred to as "remarketing". For these purposes, when our websites and other websites on which Google Marketing Services are active are called, Google runs a code of Google to integrate (re)marketing tags (invisible graphics or code, also referred to as "Web beacons") into the website. They are used to store an individual cookie on your device, i.e. a small file (technologies comparable to cookies may also be used).
The cookies may be set by various domains, including google.com, doubleclick.net, invitemedia.com, admeld.com, googlesyndication.com, and googleadservices.com. This file indicates the websites you visited, the content you were interested in and the offers you clicked on, technical information about the browser and operating system, referring websites, visit time and further information about the use of the online offer. Your IP address is also collected, but we will inform you in the context of Google Analytics that the IP address within the member states of the European Union or within other contract states of the European Economic Area is shortened and only in exceptional cases transferred to a Google server in the USA wholly and shortened there. The IP address will not be combined with your data within other Google offers.
The information mentioned above may also be linked by Google to such information from other sources. If you subsequently visit other websites, you will be presented with ads tailored to your interests.
We process your data in the context of Google Marketing Services pseudonymously. This means that Google does not save and process your name or e-mail address, for example, but the relevant data based on cookies within pseudonymous user profiles. The information collected by Google Marketing Services about the users is transmitted to Google and stored on Google's servers in the USA.
The Google Marketing Services we use include the online advertising program "Google Ads" (formerly: "Google AdWords"), for example. In the case of Google Ads, every Ads customer receives a different "conversion cookie". Cookies can therefore not be tracked via the websites of Ads customers. The information obtained by means of the cookie serves the purpose of generating conversion statistics for Ads customers who have opted for conversion tracking. Ads customers are informed about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they will not receive any information with which users can be identified.
We also use the "Google Tag Manager" to integrate the Google Analysis and Marketing Services into our website and manage them.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data are transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies.
Further information on the data usage by Google for marketing purposes can be found on the overview page: https://policies.google.com/technologies/ads?hl=en; Google's privacy policy is available at https://policies.google.com/privacy?hl=en.
If you wish to object to interest-based advertising by Google Marketing Services, you can use the setting and opt-out options provided by Google: https://adssettings.google.com/authenticated?hl=en
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.
3.2.5. Google Tag Manager
For reasons of transparency, we point out that we use the Tag Manager of the provider Google. This is a tag management system for managing JavaScript and HTML tags that are used to implement tracking and analysis tools.
The Google Tag Manager does not collect any personal data. The Tag Manager makes it easier for us to integrate and manage our tags. Tags are small code elements that are used to measure traffic and visitor behavior, capture the impact of online advertising and social channels, set up remarketing and targeting, and test and optimize websites. If you have deactivated tags, Google Tag Manager will take this deactivation into account. For more information about Google Tag Manager, see:
www.google.com/intl/de/tagmanager/use-policy.html
https://support.google.com/tagmanager/?hl=en#topic=3441530
safety.google/privacy/privacy-controls
3.2.6. Google Analytics Audiences
If you have given your consent, Google Analytics Audience (GA Audience), an advertising and conversion tracking service, will be used on this website. The service provider responsible in the EU is Google Ireland Limited.
GA Audience uses cookies that are stored on your computer and other mobile devices (e.g. smartphones, tablets, etc.) and allow for an analysis of the use of the corresponding devices. The data are partially analyzed across devices. Google Audience receives access to the cookies created by using Google AdWords and Google Analytics. The following data are processed during use.
• User Agent
• Location information
• Reference URL
• IP address
• Page depth
• Session duration
• Visit date and time
• Usage data
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data are transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.
Further information on data protection when using GA Audience can be found at the following link: https://support.google.com/analytics/answer/2700409?hl=en&ref_topic=2611283
3.2.7. Google AdSense
As far as you have given your consent, Google AdSense, an online advertising service, will be used on this website. The service provider responsible in the EU is Google Ireland Limited.
Google AdSense uses cookies that are stored on your computer and collect statistical information about you, which are then processed by our advertising partners. We use Google AdSense to present you with advertising tailored to your interests. By visiting our website, Google is informed that you have called up our website. This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data are transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies.
If you are logged in with your Google account, your data may be directly linked to it. If you do not wish to be linked with your Google profile, you have to log out. You can prevent the setting of cookies by Google AdSense by disabling interest-based ads on Google at https://www.google.de/ads/preferences. You may also disable interest-based ads of providers that are part of the "About Ads" self-regulation campaign using the link http://www.aboutads.info/choices .
Both settings for disabling are deleted when your cookies are deleted. You may also permanently disable the settings in the browsers Firefox, Internet Explorer or Google Chrome at https://www.google.com/settings/ads/plugin. However, you might not be able to use all functions of this offer to their full extent in this case.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.
Further information on the purpose and scope of data collection and processing by Google can be found at: https://policies.google.com/technologies/ads?hl=en.
3.2.8. DoubleClick by Google
If you have given your consent, the online marketing tool DoubleClick by Google will be used on this website. The service provider responsible in the EU is Google Ireland Limited.
DoubleClick uses cookies to display ads relevant to the users, improve campaign performance reports, or prevent users from seeing the same ads multiple times. For this purpose, Google uses a cookie ID to collect information about which ads are placed in which browser. This prevents the same ad from being displayed several times. In addition, DoubleClick may use cookie IDs to collect conversions with reference to ads. This is the case, for example, when a user views a DoubleClick ad and later uses the same browser to visit the advertiser's website and buy something there.
When you open a page that uses DoubleClick and allows the DoubleClick script, your browser automatically establishes a direct connection to the Google server. By integrating DoubleClick, Google receives the information that you have called the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can connect the visit to your account.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data are transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data are transferred. This can be the case for various purposes, e.g. for saving or processing.
You can prevent the collection by means of this tracking method in various ways: a. by means of a corresponding setting of your browser. The suppression of third-party cookies prevents you from being shown ads by third parties. b. By disabling cookies for conversion tracking, you prevent interest-based advertising from being shown. To do so, you have to block cookies from the domain "www.googleadservices.com" in your browser. c. You can set an opt-out cookie at https://www.google.de/settings/ads. However, this setting is deleted when you delete all of your cookies. d. By disabling the interest-based ads of the providers that are part of the "About Ads" self-regulation campaign at http://www.aboutads.info/choices, this setting being deleted when you delete your cookies; by permanently disabling cookies in your browser at https://www.google.com/settings/ads/plugin.
Please note that you might not be able to use all functions of our website to their full extent in this case.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.
Further information on DoubleClick by Google can be found at https://www.google.de/doubleclick and https://support.google.com/admanager/answer/2839090?hl=en, as well as on data protection at Google in general: https://policies.google.com/privacy?hl=en&gl=de. Alternatively, you can visit the Network Advertising Initiative (NAI) website at https://www.networkadvertising.org.
3.2.9. Hubspot
We use HubSpot on our website, a service for marketing, content management, web analysis and search engine optimization. The service provider is HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. It is used for statistics and marketing purposes.
This list contains all (personal) data collected by or through the use of this service.
• Geographical location
• Browser type
• Navigation information
• Reference URL
• Performance data
• City location
• How often is the application used?
• Mobile apps data
• HubSpot subscription service credentials
• Files displayed based on the location
• Domain names
• Pages viewed
• Aggregated usage
• Operating system version
• Internet service provider
• IP address
• Device ID
• Duration of visit
• From here the application was downloaded 
• Operating system
• Events occurring within the application
• Access times
• Clickstream data
• Device model and version
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.
The Analytics cookies are valid for a maximum of 6 months. Further information about the different cookies can be found at https://knowledge.hubspot.com/reports/what-cookies-does-hubspot-set-in-a-visitor-s-browser
Data recipient
• Service providers (https://legal.hubspot.com/impressum)
Information
The e-mail address of the data protection officer of Hubspot can be found below. privacy@hubspot.com
Disclosure to third countries
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data are transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data are transferred. This can be the case for various purposes, e.g. for saving or processing.
• Ireland, United States of America and other countries in which HubSpot partners are active
Click here to read the privacy policy of the data processor https://legal.hubspot.com/privacy-policy?_ga=2.80487636.2109353776.1547219595-1840724365.1539588495
3.2.10. HubSpot Forms
We use HubSpot Forms on our website, a service for creating online forms. The service provider is HubSpot, Inc., 25 First Street, 2nd Floor, Cambridge, MA 02141, USA. It serves the provision of online forms. Cookies are used for this purpose. This list contains all (personal) data collected by or through the use of this service.
• Device ID
• User agent information
• City location
• Device model and version
• IP address
• Operating system version
• Navigation information
• Phone number
• Browser type
• HubSpot subscription service credentials
• Duration of visit
• Geographic location
• Internet provider
• Access times
• Viewed pages
• Domain names 
• Company name
• Reference source
• Operating system 
• Referrer URL
• From where was the mobile application downloaded
• E-mail address
• Clickstream data
• Transaction information
• Frequency of use of the mobile application
• Aggregated use of the mobile applications
• Graphics
• HTML pages
• Events occurring in the mobile application
• Information from third-party sources
• Performance data for mobile applications
• Files displayed on our website
• Payment information
• Address
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there. The data are deleted as soon as they are no longer required for processing purposes.
3.2.11. LinkedIn Analytics
If you have given your consent, the LinkedIn Analytics analysis service will be used on this website. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Cookies are used for this purpose. This is used for the usage analysis. This list contains all (personal) data collected by or through the use of this service.
• Information about the operating system 
• Device ID
• ISP or mobile phone provider
• IP address
• Referrer URL
• Add-on information
• Browser information
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.
The data are deleted as soon as they are no longer required for processing.
Data recipients are LinkedIn Ireland Unlimited Company and LinkedIn Inc. USA.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data are transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data are transferred. This can be the case for various purposes, e.g. for saving or processing.
Click here to read the privacy policy of the data processor https://www.linkedin.com/legal/privacy-policy
Click here to object to all domains of the processing company https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en
Click here to read the cookie policy of the data processor https://www.linkedin.com/legal/cookie_policy
3.2.12. LinkedIn Ads
If you have given your consent, the advertising service LinkedIn Ads will be used on this website. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This is done for reasons of conversion tracking, advertising, and remarketing. Cookies, pixels and ads tags are used.
This list contains all (personal) data collected by or through the use of this service.
• IP address
• User agent data
• Device ID
• Search terms
• Viewed articles
• Visited pages
• Viewed ads
• Followers
• Connections
• Viewed videos
• Profile information
• Advertising ID
• Information about the operating system
• Devices information
The legal basis for this data processing is your consent, Art. 6 Para. 1 lit. a GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform and changing your selection there.
The data are deleted as soon as they are no longer required for processing.
Data recipients are LinkedIn Ireland Unlimited Company and LinkedIn Inc. USA.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data are transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data are transferred. This can be the case for various purposes, e.g. for saving or processing.
Click here to read the privacy policy of the data processor
https://www.linkedin.com/legal/privacy-policy
Click here to object to all domains of the processing company https://www.linkedin.com/help/linkedin/answer/62931/manage-advertising-preferences?lang=en
Click here to read the cookie policy of the data processor https://www.linkedin.com/legal/cookie_policy
3.2.13. LinkedIn Insight Tag
If you have given your consent, LinkedIn Insight Tag, a conversion tracking and retargeting service, will be used on this website. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. It is used for analysis, retargeting and marketing. Cookies are used for this purpose.
This list contains all (personal) data collected by or through the use of this service.
• Referrer URL
• IP address
• Devices information
• Browser information
• Time stamp
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a) GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there. The data will be deleted after 90 days. Data recipients are LinkedIn Ireland Unlimited Company and LinkedIn Corp.
Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data are transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data are transferred. This can be the case for various purposes, e.g. for saving or processing: United States of America.
Click here to read the data processor's privacy policy https://www.linkedin.com/legal/privacy-policy?src=li-other&veh=www.linkedin.com
Click here to read the data processor's cookie policy https://www.linkedin.com/legal/cookie_policy?src=li-other&veh=www.linkedin.com
3.2.14. SalesViewer
If you have given your consent, the Marketing and Optimization Service SalesViewer of SalesViewer GmbH, Bongardstraße 29, 44787 Bochum, Germany, will be used on this website. It is used for market research, optimization and marketing. Cookies and JavaScript are used for this purpose.
This list contains all (personal) data collected by or through the use of this service.
• Referrer URL
• Keyword
• Visited subpages
• Name, origin and industry of the host company
• Visit time
• Usage data
• Date and time of the visit
• Screen resolution
• Whether the user downloaded a file, image, or something else
• User ID
• IP address
• Browser information
• Device information
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a) GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there. The data are deleted as soon as they are no longer required for processing purposes.
Data Recipient
• SalesViewer GmbH
• Google Ireland Limited
For more information about the service provider, visit https://www.salesviewer.com/de/datenschutzerklaerung and https://www.salesviewer.com/opt-out
3.2.15. Albacross
This website uses functions of the lead identification and ad targeting service Albacross. The provider is Albacross Nordic AB, Kungsgatan 26, 111 35 Stockholm, Sweden.
Albacross uses cookies to enable an analysis of your use of the website. The information about your use of this website generated by the cookie is usually transferred to a Albacross Nordic AB server in Ireland, where it will be stored.
The data that Albacross collects and uses for this purpose include information about the IP address from which you have visited our website, as well as technical information that allows Albacross to distinguish different visitors from the same IP address. Albacross saves the domain from the form input to link the IP address to your employer.
If your browser supports the "Do Not Track" technique and you have enabled it, your visit is automatically ignored.
Your data will be deleted after 12 months at the latest.
Further information on the processing of personal data can be found in the privacy policy of Albacross (https://albacross.com/privacy-policy).
The legal basis for this data processing is your consent according to Art. 6 Para. 1 S.1 lit. a) GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings and changing your selection there.
3.2.16. Chatbot
On our website you can contact us via our chatbot, which is provided by swiss moonshot AG (Hochbordstrasse 40, 8600 Dübendorf, Switzerland). When you use the chatbot, we only collect technical connection data required for providing the service. We do not collect any personal data beyond that, unless you disclose them to us via existing free text fields.

If you request information material (e.g. brochures, white papers, etc.) via our chat, we will ask you to provide your e-mail address for the purpose of sending our newsletter. In this case, we will store them in our customer database, which is managed by Hubspot Inc. (25 First Street, 2nd Floor, Cambridge, MA 02141, USA).

The processing for the aforementioned purposes is based on your consent in accordance with Art. 6 Para. 1 lit. a GDPR, which you grant by entering your e-mail address.

You can revoke this consent at any time with effect for the future by clicking the unsubscribe link in any info mail. In this case, we will delete your data, unless there are retention obligations.

3.3. Newsletters

On our website you can subscribe to our free newsletter. In this process, the data from the input mask are transmitted to us.

Only your e-mail address, your country and your area of interest are mandatory. You can optionally enter your salutation, name and first name as well as the company with which you are employed.

To make sure that no errors occurred when the e-mail address was entered, we use the double opt-in method: After you have entered your e-mail address in the registration field, we will send you a confirmation link. Only when you click this confirmation link will your e-mail address be added to our mailing list. The processing of your electronic contact data is based on your consent (Art. 6 Para. 1 lit. a GDPR). You may revoke your consent at any time with effect for the future. To do so, just click the "Unsubscribe" button at the end of a newsletter.

Insofar as you have provided optional information for our newsletter in the course of the registration, we process these data on the basis of our legitimate interest (Art. 6 Para. 1 lit. f GDPR) in an appealing display of our newsletter and exclusively for personal salutation within the newsletter.

The newsletter is also sent for the purpose of the sale of goods or services:

If you purchase goods or services and enter your e-mail address, we might use it to send you a newsletter. In such a case, the newsletter only includes direct advertising for similar goods or services of our own. The legal basis for sending the newsletter as a result of the sale of goods or services is § 7 Para. 3 German UWG.
You can object to receiving the newsletter at any time on the basis of an existing customer relationship.

In connection with the data processing for sending newsletters, the data are not transmitted to third parties. The data are exclusively used for sending the newsletter.
Marketing e-mails are sent via HubSpot Mail, the server location is USA.

Newsletter tracking

Please note that when the newsletter is sent, we will analyze your user behavior to determine whether and when the newsletter was opened. For this analysis, the e-mails sent contain so-called Web beacons or tracking pixels that are stored on our server and loaded when the newsletter is opened. As a result, technical information such as browser type, time of opening and IP address are transmitted. For the analyses, we link the data mentioned and the Web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID and allow us to analyze your click behavior.
With the data obtained this way, we create a user profile to tailor the newsletter to your individual interests. We register when you read our newsletters and the links you click on to determine your personal interests. We link these data with actions you have taken on our website. The legal basis for this data processing is your consent, Art. 6 Para. 1 lit. a) GDPR.

You may revoke your consent at any time with effect for the future. In this case, the revocation includes the entire newsletter, since a separate revocation of the tracking is unfortunately not possible for technical reasons. To do so, simply click the unsubscribe link provided in every e-mail.

Moreover, such tracking is not possible if you have disabled the display of images in your e-mail program by default. In this case, the newsletter is not fully displayed and you may not be able to use all functions. If you manually display the images, the above-mentioned tracking takes place. The information from the tracking is saved as long as you have subscribed to the newsletter. After you have unsubscribed, the data are anonymized and used for purely statistical purposes. We will store the data you shared with us to receive the newsletter until you unsubscribe from the newsletter; they will be deleted afterwards. Data we stored for other purposes remain unaffected.

3.4. Contact

You can contact us via our e-mail address, our chat or our recall service contact form. We will of course use the personal data transmitted to us in this way exclusively for the purpose for which you provide it to us during the contacting. The legal basis is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR.

If we use our contact form to query entries that are not required for getting in contact, we have always marked them as optional. These data are used to specify your request and to improve the processing of your request. These data are expressly communicated on a voluntary basis and with your consent in accordance with Art. 6 Para. 1 lit. a GDPR. If this concerns voluntary information about communication channels (e.g. e-mail address, phone number), you also agree that we may also contact you via this communication channel in order to answer your request.

You may revoke your consent at any time with effect for the future. For this purpose, please contact the contact address above.

We delete the data resulting from this context after the storage is no longer required or restrict the processing if there are legal retention obligations.

4.Registration on Our Website

You can register for specific areas on our website to use additional functions. We use the data you entered only in the context of the offer or service for which you registered, such as the registration for an event or the download of a brochure. The required data that are requested for the registration must be specified completely. Otherwise, we are entitled to reject the registration. In case of important changes to the scope of the offer or in case of essential technical changes, we use the e-mail address you entered for the registration to inform you accordingly.

The data entered during the registration are processed on the basis of your consent (Art. 6 Para. 1 lit. a) GDPR). You may revoke a consent you have given at any time. To do so, you only need to send us an informal message by e-mail.

The lawfulness of the data processing already carried out remains unaffected by the revocation.

In certain cases, we would also like to use the information obtained by registration to send you information from our product portfolio or other news by e-mail. To the extent that we also use your data from the registration for these purposes, we will always inform you in the course of the registration process. The legal basis for this is always your consent, which you grant by registering for corresponding offers.

We will store the data you entered for the registration as long as you are registered on our website or use the corresponding service. If you have also consented to receiving information in the course of the registration, we store your data until you revoke your consent. Statutory retention periods remain unaffected.

5. Applications

You can apply online on our application portal at https://jobs.proalpha.com/de. Your online application will be forwarded directly to Human Resources via an encrypted connection and will of course be treated confidentially.
If you still apply to us by e-mail, we would like to point out that sending unencrypted e-mails or e-mail attachments is not secure. Your data will be used to process your application and to decide whether to start an employment relationship. The legal basis is § 26 Para. 1 in conjunction with Para. 8 S.2 BDSG. Furthermore, we may process your personal data insofar as this is necessary to defend against legal claims asserted against us in the application process. The legal basis for this is Art. 6 Para. 1 lit. f) GDPR. The stated purposes also include the legitimate interest in the processing.
If your application leads to an employment relationship between you and us, we may process the personal data we have already received from you for the purposes of the employment relationship in accordance with §26 Para. 1 German Federal Data Protection Act (BDSG), if this is necessary for the performance or termination of the employment relationship or for the exercise or fulfillment of the rights and obligations of the interest representation of employees resulting from a law or a collective agreement, a company or service agreement (collective agreement).
Your application data will not be processed beyond the use described herein. Your personal data will be deleted after completion of the application process after 6 months at the latest, provided that no other legitimate interests on our part stand in the way of the deletion or you have not given us consent for a longer storage. Other legitimate interests in this sense include the burden of proof in proceedings under the General Equal Treatment Act (AGG).
Further information on data protection in the application process can be found in the respective data protection information on our career page.

6. Customers

As a customer, we value you as a careful and trusting partner. For this reason, the protection of your data is of great importance to us. We therefore want to inform you below about how we process your data and how you can exercise your rights under the General Data Protection Regulation. The respective contractual relationship defines the personal data we process and the purpose for which they are processed.

Information about the party responsible and, if applicable, our data protection officer can be found in this privacy policy under 2.1 and 2.2.

6.1. What Data We Use

We process your personal data when you contact us on business, send us an inquiry about our products, or work with us on projects. In addition, we process your personal data, for example, to fulfill legal obligations, to safeguard a legitimate interest or on the basis of your consent.
Depending on the legal basis, the following categories of personal data are used:
• First name, last name
• Communication data (phone, e-mail address)
• Department
• Account information, especially registration and logins

6.2. The Sources from Which the Data Originate

We process personal data provided by you, our customers, service providers and suppliers or from other companies of the proALPHA Group.

6.3. For What Purposes Are Your Data Used

We process your personal data especially with regard to the General Data Protection Regulation(GDPR) and the Bundesdatenschutzgesetz (BDSG) and all other applicable laws.

6.3.1. Based on Your Consent (Art. 6 Para. 1 a GDPR)

If you have given us your voluntary consent to the collection, processing or transmission of certain personal data, then this consent forms the legal basis for the processing of these data. You are informed of the purposes of the processing when you give your consent.
We process your personal data on the basis of your consent, particularly in the following cases:
• Sending an e-mail newsletter
• Personalized newsletter tracking
• Market research (e.g. customer satisfaction surveys)
• Marketing and advertising - forming customer profiles

6.3.2. Zur Erfüllung eines Vertrags (Art. 6 Abs. 1 lit. b DSGVO)
We process your data to the extent required to maintain contractual relations with you, service current contracts and contact you.
• Fulfilling contractual relations
• Contacting and correspondence

6.3.3. Due to Our Legitimate Interest (Art. 6 Para. 1 lit. f GDPR)
In certain cases, we process your data in order to safeguard a legitimate interest of ours or third parties, in particular:
• Direct advertising or market and opinion research
• Central customer data management in the proALPHA Group
• Communication and collaboration in the context of projects
• Provision of communication media in the context of cooperation

6.4.To Whom Will Your Data Be Passed On?

We will not pass on your data to third parties. However, in order to fulfill our contractual and legal obligations, it may be necessary to disclose your data to other parties, such as public authorities or external service providers.
To the extent that this is necessary in order to fulfill our contractual obligations or for internal management purposes, data may be disclosed to other companies of the proALPHA Group. For an updated list of our group companies, see 2.1.

External service providers:
• IT service providers (e.g. maintenance service providers, hosting service providers)
• Print services
• Telecommunications
• Service providers for marketing or sales
• Lettershops

If you have further questions about the individual recipients, please contact us at the contact address above.

6.5. Will Your Data Be Transferred to Countries Outside the European Union (Third Countries)?

Countries outside the European Union (and the European Economic Area "EEA") handle the protection of personal data differently from countries within the European Union. To process your data, we also use service providers located in third countries outside the European Union. For some of these third countries, there is currently no decision by the EU Commission that they generally provide an adequate level of protection.

We have therefore taken special measures to ensure that your data are processed in third countries as safely as in the European Union. With service providers in third countries as well as within our company group, we conclude the standard data protection clauses provided by the European Commission. These clauses stipulate appropriate guarantees for the protection of your data with service providers in third countries. Within our group of companies, we have also taken contractual and organizational measures to ensure that the legal requirements for the transfer to third countries are met.

6.6. How Long Will Your Data Be Stored?

We store your personal data as long as they are required for the respective purpose and it is necessary to fulfill our legal and contractual obligations.
If the storage of the data is no longer required to fulfill our contractual or legal obligations, your data will be deleted, unless their further processing is necessary to comply with legal retention obligations or to keep data until existing periods of limitation have expired. The same applies in case of revoked consent.

6.7. What Rights Do You Have Concerning the Processing of Your Data?

Please refer to Section 9 of this Privacy Policy for details on your rights.

7. Social Media

We run channels on various social media platforms to communicate directly with you and to inform you about interesting news from our company.

We process the data of the visitors to our channels, in particular information about user interactions (for example, likes, comments, retweets), demographic and statistical data as well as the data transmitted to us in the context of messages and comments.

We would like to point out that the respective providers also have access to your data when you use these social networks. They might use these data for market research and advertising purposes. We have no further knowledge of the data processing by the providers of the respective social platforms. We would like to point out that the links to the respective platforms on our website are links only. The platforms only process your data when you visit them.

The processing of the personal data of the visitors to our online presence is based on our legitimate interest in accordance with Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in ensuring communication with our customers and their notification of news relating to our products.

We would like to point out that the data processed by social platforms and networks might be processed outside of the European Economic Area.
For a comprehensive view of the respective data processing and opt-out options, please refer to the following pages of the providers:

• YouTube / Google (Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland)
Privacy Policy: https://policies.google.com/privacy
Opt-out: https://adssettings.google.com/authenticated

• Xing (XING AG, Dammtorstraße 29-32, 20354 Hamburg, Germany)
Privacy policy: https://privacy.xing.com/de/datenschutzerklaerung
Opt-out: https://privacy.xing.com/de/datenschutzerklaerung

• LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland)
Privacy policy: https://www.linkedin.com/legal/privacy-policy
Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

• Instagram (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland)
Privacy policy: https://help.instagram.com/519522125107875
Opt-out: https://help.instagram.com/contact/1845713985721890

• Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA)
Privacy policy: https://twitter.com/en/privacy
Opt-out: https://twitter.com/personalization

• Facebook (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland)
Privacy policy: https://www.facebook.com/privacy/explanation
Opt-out: https://www.facebook.com/help/contact/367438723733209

7.1.1. YouTube

We use services by YouTube, a provider of video content of Google LLC, on our website. The service provider responsible in the EU is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This serves the improvement of our online offer. This always requires that the providers of these contents (hereinafter referred to as "third-party providers") can see the IP address of the users. Without the IP address, they would not be able to send the contents to the browser of the respective user. The IP address is a requirement in order for the contents to be displayed. We make every effort to use only those contents whose respective providers use the IP address only for the delivery of the contents. However, we have no influence on whether the third party providers store the IP address, e.g. for statistical purposes. As far as we know, we inform the users about this.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a) GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.

7.1.2. LinkedIn Widget

We use the LinkedIn widget on our website. The service provider is LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. This serves the improvement of our online offer and communication. This always requires that the providers of these contents (hereinafter referred to as "third-party providers") can see the IP address of the users. Without the IP address, they would not be able to send the contents to the browser of the respective user. The IP address is a requirement in order for the contents to be displayed. We make every effort to use only those contents whose respective providers use the IP address only for the delivery of the contents. However, we have no influence on whether the third party providers store the IP address, e.g. for statistical purposes. As far as we know, we inform the users about this.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a) GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.

7.1.3. Twitter für Webseiten

We use services by Twitter on our website. The service provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. This serves the improvement of our online offer and communication. This always requires that the providers of these contents (hereinafter referred to as "third-party providers") can see the IP address of the users. Without the IP address, they would not be able to send the contents to the browser of the respective user. The IP address is a requirement in order for the contents to be displayed. We make every effort to use only those contents whose respective providers use the IP address only for the delivery of the contents. However, we have no influence on whether the third party providers store the IP address, e.g. for statistical purposes. As far as we know, we inform the users about this.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a) GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.
We would like to point out that as the provider of these pages, we do not have any knowledge of the contents of the data transmitted to Twitter or their use. Further information can be found in the Twitter privacy policy.

7.1.4. Facebook Seiten-Plugin

We use the Facebook page plugin on our website. The service provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. This serves the improvement of our online offer and communication. This always requires that the providers of these contents (hereinafter referred to as "third-party providers") can see the IP address of the users. Without the IP address, they would not be able to send the contents to the browser of the respective user. The IP address is a requirement in order for the contents to be displayed. We make every effort to use only those contents whose respective providers use the IP address only for the delivery of the contents. However, we have no influence on whether the third party providers store the IP address, e.g. for statistical purposes. As far as we know, we inform the users about this.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a) GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there. For more information, go to https://www.facebook.com/policy.php

7.1.5. Twitter Syndication

We use services by Twitter Syndication on our website. The service provider is Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. This serves the improvement of our online offer and communication. Twitter Syndication stores and processes information about your user behavior on our website. For this purpose, Twitter Syndication uses cookies, i.e. small text files, which are stored locally in the cache of your Web browser on your device and which allow an analysis of your use of our website.
You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your Web browser. Please note that you may not be able to use all functions of our website to their full extent in this case. You can also prevent the aforementioned information from being collected by Twitter by setting an opt-out cookie on one of the websites linked below:
https://twitter.com/personalization
http://optout.aboutads.info/?c=2#!/

Please note that this setting is deleted when you delete your cookies. You can object to the collection and forwarding of personal data or prevent the processing of these data by deactivating the execution of JavaScript in your browser. In addition, you can prevent the execution of Java script code in general by installing a Java Script blocker (e.g. https://noscript.net/ or https://www.ghostery.com). Please note that you may not be able to use all functions of our website to their full extent in this case.
The legal basis and revocation for this data processing is your consent, Art. 6 Para. 1 lit. a) GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there. Further information on data protection can be found on the following website: https://twitter.com/de/privacy

7.1.6 Facebook Connect

We use Facebook Connect on our website. The service provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. (hereinafter referred to as: "Facebook"). Facebook Connect makes it easier to register for Internet services.
Instead of using a registration mask on our website, you can enter your Facebook login credentials and then use our offer. By using "Facebook Connect", your Web browser automatically establishes a direct connection to the Facebook server. You will be forwarded to the Facebook page for the login. You can log in with your credentials there. This links your Facebook user account to our service. We have no influence on the further use of data collected by Facebook Connect. These data are collected by Facebook and transmitted to us by Facebook (https://de-de.facebook.com/privacy/explanation) in compliance with the privacy policy. You can control the information we receive from Facebook using the privacy settings in your Facebook account.
This service may forward the data collected to another country. Please note that this service may transfer data outside the European Union and the European Economic Area and to a country which does not provide an adequate level of data protection. If the data are transferred to the USA, there is a risk that your data may be processed by US authorities for control and monitoring purposes without you being entitled to legal remedies. The following table contains a list of the countries to which the data are transferred. This can be the case for various purposes, e.g. for saving or processing.
• Worldwide
The legal basis and revocation
for this data processing is your consent, Art. 6 Para. 1 lit. a) GDPR. You may revoke your consent at any time with effect for the future by opening the cookie settings on our consent management platform (fingerprint shown on the bottom left) and changing your selection there.

8. Data Transmission

8.1. Transmission to Companies of the proALPHA Group

Your data will not be transmitted to third parties outside the proALPHA Group unless we are obliged by law to do so, the data transfer is required for fulfilling the contractual relationship or you have previously expressly granted your consent to the transfer of your data. External service providers and partner companies only receive your data if this is required for processing your request. In these cases, however, the scope of the data transmitted is limited to the required minimum.
Certain services within our company group are provided centrally by individual group companies. For this reason, data might be disclosed within the group with regard to order processing, customer support, marketing activities or for internal administration and analysis purposes. Only those data that are absolutely necessary for the respective purpose are transmitted and deleted after statutory retention periods have expired and the purpose of the data has ended.
Through internal agreements and codes of conduct, we have ensured that the integrity and security of data transmitted in this way can always be guaranteed.

8.2. Transmission to External Service Providers

Your data shall be disclosed to service partners provided that they are working on our behalf and support proALPHA in providing its services.
Your personal data are processed by authorized service providers in the context of the order processing according to Art. 28 GDPR. The aforementioned service providers only have access to such personal information as is necessary for the provision of the respective service. These service providers are prohibited from disclosing your personal information or from using it for other purposes, in particular for their own advertising purposes.
To the extent that external service providers come into contact with your personal data, we have taken legal, technical and organizational measures as well as regular checks to ensure that they also comply with the applicable privacy policy. Your personal data will not be disclosed commercially to other companies.

9. Rights of Persons Affected

9.1.General Rights

You have the right of access to information, rectification, erasure, restriction of processing, objection to the processing and data portability. If you have given your consent to the processing, you are entitled to revoke it with effect for the future.

9.2. Rights in Data Processing According to the Legitimate Interest

In accordance with Art. 21 Para. 1 GDPR, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you which is based on Art. 6 Para. 1 lit. e) GDPR (data processing in the public interest) or pursuant to Art. 6 Para. 1 lit. f) GDPR (data processing to protect a legitimate interest), this also applies to profiling based on this provision. If you object, we will no longer process your personal data, unless we demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.

9.3. Rights in Direct Advertising

If we process your personal data for direct advertising purposes, you have the right to object to the processing of your personal data for such advertising at any time in accordance with Art. 21 Para. 2 GDPR, including profiling, as far as it is connected with such direct advertising. If you object to the processing for direct advertising purposes, we will no longer process your personal data for these purposes.

9.4. Right to File a Complaint with a Supervisory Authority

You also have the right to file a complaint with a data protection authority about our processing of your personal data.

10.Data Security

We have taken extensive technical and operational safeguards to protect your data against accidental or intentional manipulation, loss, destruction or access by unauthorized persons. Our security procedures are regularly reviewed and adjusted to the technological progress.

11.State of the Privacy Policy

This privacy policy is constantly adjusted with the further development of the Internet or our offer. Changes will be announced on this page in good time. In order to stay informed about the current state of our privacy policy, you should regularly visit this page.

As of 08|2022