Privacy Policy

1. Who is responsible for processing my data?

The

direct services Gütersloh GmbH

Business Unit Campaign
Reinhardt-Mohn-Str. 300
Phone: +49 5241 80-40865
Fax: +49 5241 80-640865

is responsible for processing your data on this website (hereinafter referred to as "the Company"). The Company processes personal data in accordance with the provisions of the GDPR and the Federal Data Protection Act (hereinafter referred to as "BDSG").

You can reach the company's Data Protection Officer at the above-mentioned postal address, with the addition 'For the attention of the Data Protection Officer' or at the email address: datenschutz@bertelsmann.de.

2. What data is collected?

When you visit the website, information is automatically collected from the calling computer (hereinafter referred to as "access data"). This access data includes server log files, which typically consist of information about the browser type and version, the operating system, the Internet service provider, the date and time of use of the website, the previously visited websites and the web pages newly accessed through the website, and the IP address of the computer. With the exception of the IP address, the server log files are not personally identifiable. An IP address is personally identifiable if it is permanently assigned during the use of the internet connection and the internet provider can associate it with a person.

If you continue to use the services of the website, pseudonymous usage profiles and/or the data you enter on the website (e.g., search terms, login information, reviews, form or contract entries, click data) will be processed.

Some services of the website require you to provide personal data to the company. In these cases, the data you provide will be used to deliver the service you requested or to process the respective concern. The following personal data are processed on the website: address data; contact details.

3. Which cookies are used

The website uses cookies. Cookies are small text files that are stored on your computer when you visit a website. The stored cookies are associated with the browser you are using. When the corresponding website is accessed again, the web browser sends back the content of the cookies, thus enabling user recognition. Certain cookies are deleted when you log out or end the browser session (so-called 'transient cookies'). Other cookies are stored for a predetermined time or permanently (so-called 'temporary cookies' or 'persistent cookies'). The deletion of these cookies occurs automatically after the defined time has elapsed. You can also delete cookies at any time in the security settings of your browser and configure the use of cookies according to your preferences. However, the company points out that you may not be able to use all the functions of the website if you do so.

Essentially, cookies are just an online identifier without any personal reference. Cookies become personal when the information generated by the cookies is combined with additional data. A distinction can be made between cookies that are necessary for the provision of the website and cookies that are required for other purposes such as analyzing user behavior or advertising.

Among the cookies that are necessary for the provision of the website, the following are particularly important:

• Cookies used for the identification or authentication of users.
• Cookies that temporarily store certain user inputs (e.g., contents of a shopping cart or an online form).
• Cookies that store certain user preferences (e.g., search or language settings).
• Cookies that store data to ensure the smooth playback of video or audio content.

Among the cookies that are necessary for additional purposes, the following are particularly included:

• Analytical cookies to record user behavior (e.g., clicked advertising banners, visited subpages, search queries made) and evaluate it in a statistical form.
• Tracking cookies associated with social plugins.

3.1 Functional Cookies

To obtain and store your consent for data protection purposes, we use the Consent Management Platform by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark (hereinafter referred to as "Cookiebot"). This involves setting a technically necessary cookie to query the consent status and thus be able to display the corresponding content. Usage analysis to measure how the consent acquisition is functioning is carried out based on our legitimate interest (Article 6(1)(f) GDPR).

The cookie will be stored until you revoke it and will be deleted at the latest after 13 months. You can find the privacy policy of Cookiebot at: https://www.cookiebot.com/de/privacy-policy/.

3.2. Consent-based Cookies

Information about cookies that collect and process your data based on your consent can be found in sections 4.3, 4.7, and 4.8. Privacy settings

Under the section Privacy Settings or Privacy Center, you can make the decision whether to consent to the storage of information on your device and the collection and processing of such information and other data by the operator of this site and its partners for personalization, distribution, and measurement of content within and outside of this offer, and for evaluations of the use of this offer.

4. What data is collected for what purposes?

The purposes of data processing may arise from technical, contractual, or legal requirements, as well as possibly from consent.

We use the data referred to in number 2 for the following purposes:

• for providing the website and ensuring technical security, particularly for resolving technical errors and to ensure that unauthorized individuals do not gain access to the website's systems;
• for range measurements and web analytics, to make the website more efficient and interesting for you, as well as to conduct market research;
• for communication, initiating contracts, and customer care;
• for networking with us or sharing our posts across various social media platforms
• for the use of the services on the website in accordance with the Terms and Conditions
• Provision of free downloads.

Further information on these purposes of data processing can be found in the following sections of this privacy notice.

4.1 Technical Provision of the Website

4.1.1 Description and scope of data processing

For the functionality of the website, the execution of security analyses, and the defense against attacks, the server log files are automatically captured and temporarily stored as part of the access data referred to in section 2 by the computer system of the calling machine upon entering and during the use of the website. The server log files are not stored together with other data. The company uses the server log files for statistical evaluations, to analyze and resolve technical incidents, to defend against attempts at attacks and fraud, and to optimize the functionality of the website.

4.1.2 Purposes and legal basis for data processing

The legal basis for the collection of server log files is Art. 6 para. 1 lit. f GDPR. The legitimate interests of the company lie in the functionality of the website, the execution of security analyses, and the defense against threats.

4.1.3 Duration of storage or criteria for determining this duration

After accessing the websites, the server log files are stored on the web server and the IP address contained therein is deleted no later than 7 days. An evaluation during this storage period occurs exclusively in the event of an attack.

4.1.4 Option to object and remove

You have the right to object to the processing of your data within the scope of server log files, provided there are reasons arising from your particular situation. If you wish to exercise your right to object, please contact the address provided in section 1.

4.2 Contact form, email and telephone contact

4.2.1 Description and scope of data processing

On the website, there is the option to contact the company via a contact form, an email address, or a phone number. If you take advantage of this option, the data entered in the contact form, your email address and/or your phone number, as well as your concern, will be transmitted to the company. Depending on the concern (e.g., questions about the company's products and services, assertion of your data subject rights such as requests for information), your contact details will be further processed (with the help of service providers). If necessary for the processing of your concern, your contact details may be forwarded to third parties (e.g., partner companies).

4.2.2 Purposes and legal basis for data processing

The legal basis for processing your contact data is based on Article 6(1)(f) of the GDPR. The legitimate interests lie in the handling of your concern and further communication. If your contact is aimed at concluding a contract with the company, then the legal basis for processing your contact data is Article 6(1)(b) of the GDPR.

4.2.3 Duration of Storage or Criteria for Determining This Duration

After processing your request and concluding any further communication, the contact details will be deleted. This does not apply if your contact is aimed at concluding a contract with the company or if you are asserting your rights as a data subject, such as the right to information. In these cases, the data will be stored until the contractual and/or legal obligations have been fulfilled and statutory retention periods do not prevent deletion.

4.2.4 Options for objection and removal

You have the right to object to the processing of your contact details if there are reasons arising from your particular situation. If you wish to exercise your right to object, please contact the address provided in section 1. If you object, communication cannot continue. However, this does not apply if the storage of your contact details is necessary for the initiation or fulfillment of a contract, or for the assertion of your rights as a data subject.

4.3 Web Tracking

The website incorporates services that optimize user-friendliness and measure the website's reach. In this process, your access data (see section 2) is collected and user behavior is evaluated using analysis cookies (see section 3). Personal identification is generally not necessary for web tracking, so when collecting your access data, the stored IP address is either not used or only used in a truncated form, and pseudonymous usage profiles are created. These are not merged with other data and you always have the option to revoke consent. The creation of personal usage profiles is done exclusively in exceptional cases and provided you have given your consent.

Web tracking services are usually provided by service providers who process the data only according to the instructions of the controller and not for their own purposes as so-called processors. This is ensured by contracts for order processing. If the service providers process your data outside the European Union or the European Economic Area (hereinafter referred to as 'EU or EEA'), a so-called third-country transfer takes place. This is permissible provided that the individuals have consented, the company has created guarantees for a level of data protection appropriate to European standards, or the EU Commission has classified the respective third country as safe. The third-country transfer of the respective service will be marked in the following. Further information on the recipients of your data can be found in section 4.3.1.

The individual web tracking services of the website are described in more detail below.

4.3.1 Google Tag Manager

The website uses the Google Tag Manager. This service is provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (Google Inc.). The Google Tag Manager allows the web tracking services embedded in this website, as well as other services, to be managed through so-called "Tags" (these are placeholders for website code). The Google Tag Manager only implements these Tags. No personal data is specifically collected by the Google Tag Manager. The Google Tag Manager only triggers other Tags, which may in turn collect data. However, the Google Tag Manager does not access this data. For more information about the Google Tag Manager, please visit: http://www.google.de/tagmanager/use-policy.html.

4.3.2 Google Analytics

The website uses the service Google Analytics. The provider of Google Analytics is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Analytics creates an anonymous usage profile to optimize the user-friendliness of the website. Anonymity is ensured by truncating the IP address before transmitting your data to Google, making it impossible to deduce your identity. Due to IP anonymization on this website, your IP address is truncated by Google within member states of the EU or in other contracting states of the Agreement on the European Economic Area and only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. Google will use this information to evaluate your use of the websites, to compile reports on website activities, and to provide other services related to website usage and internet usage. Google does not merge this information with other data. Through a data processing agreement, the company ensures that Google processes the data only according to their instructions.

4.3.3 Microsoft Clarity

We collaborate with Microsoft Clarity and Microsoft Advertising to collect data on how you use and interact with our website, utilizing behavioral metrics, heatmaps, and session replays to improve and market our products and services. Website usage data is gathered through first-party and third-party cookies and other tracking technologies to determine the popularity of products/services and online activities. Additionally, we use this information for website optimization, fraud/security purposes, and advertising. For more information on how Microsoft collects and uses your data, please refer to the Microsoft Privacy Statement (https://www.microsoft.com/de-de/privacy/privacystatement).

4.3.4 Purposes and legal basis for data processing:

The legal basis for the collection and analysis of your pseudonymous usage profile is Art. 6 Para. 1 lit. a GDPR. By giving your consent to data processing within our cookie consent tool, we are authorized to process your data in the manner and for the purposes mentioned.

4.3.5 Duration of storage or criteria for determining this duration:

The data collected and analyzed during the use of web tracking services are usually stored until you revoke your consent. The validity of the analysis cookies is limited to a maximum of 1 year.

Options for objection and removal:

You can object to the use of web tracking services at any time by changing your browser settings or by clicking the following link to download and install the available browser plugins:

You can find the browser plugin to opt out of Google Analytics on Google's website at https://tools.google.com/dlpage/gaoptout?hl=de

4.3.6 Options for objection and removal:

Furthermore, there is the option to object at any time for the future via the appropriate privacy setting in our cookie consent tool under the section Privacy Settings or Privacy Center.

4.4 Sweepstakes

4.4.1 Description and scope of data processing:

Through the website, you can participate in the company's sweepstakes. Your participant data is collected and stored via an input form as part of the terms and conditions of participation. Additionally, the processing of your access data is necessary to be able to prove the confirmation of the terms and conditions. Participation is voluntary. Reference is made to these data protection notices. Should you win, the company will inform you and send you your prize (with the help of service providers). In principle, your data is not shared with third parties (e.g., sponsors or partner companies).

4.4.2 Purposes and legal basis for data processing:

The processing of participant data is necessary for participation in the sweepstakes. The legal basis is the fulfillment of a contract according to Art. 6 Para. 1 lit. b GDPR.

4.4.3 Duration of storage or criteria for determining this duration:

After the prize draw, participant data will be deleted no later than 6 months afterwards, unless retention is legally required (e.g., winner participant data after the distribution of a cash prize, current retention period 6 to 10 years).

4.4.4 Options for objection and removal:

The processing of participant data is necessary for participation in the sweepstakes. Consequently, you do not have the option to object.

4.5 Business Customer Survey

4.5.1 Description and scope of data processing

As part of our business client relationships, we occasionally conduct customer surveys to measure satisfaction and improve our services. The survey is aimed at our business clients, but we regularly store your contact details in our customer database if you act as a contact person. We use your contact details to invite you to participate in the customer survey. Participation is voluntary and you always have the option to communicate to us that you no longer wish to receive invitations to participate in customer surveys in the future. Typically, your contact details are no longer necessary for the evaluation, so the survey results consist of purely statistical information. It is then no longer possible to draw conclusions about your person.

4.5.2 Purpose and legal basis for data processing

The legal basis for processing your contact data is Art. 6 (1) f GDPR. Legitimate interests lie in customer care and retention, as well as improving our services.

4.5.3 Duration of storage or criteria for determining the duration

In principle, the survey results are stored for the duration of the business relationship. Different rules apply if the survey results consist purely of statistical data.

4.5.4 Options for objection and removal

You have the right to object to the processing of your contact details if there are reasons arising from your particular situation. If you wish to exercise your right to object, please contact the address provided in section 1.

4.6. Download of free content (e.g., studies, whitepapers)

4.6.1 Description and scope of data processing

Through the website, you can download content provided by us such as studies or whitepapers on current topics from our business areas. For the download, your contact details are transmitted and stored via the registration form. We also record the date and time of your download. The download is voluntary, free of charge, and generally independent of other offers on the website. Further details can be found in the terms and conditions (T&C).

4.6.2 Purposes and legal basis for data processing

The download of free content represents an online offer from us to you. The legal basis for processing your related data is a contract according to Art. 6 (1) b GDPR.

4.6.3 Duration of storage or criteria for determining this duration

Your data will be stored as long as it is necessary for the execution of the contract for the download of free content. The contract is automatically terminated upon successful download. After the termination of the contract, your data will be stored until the contractual and/or legal retention periods (currently 6 to 10 years) are fulfilled.

4.6.4 Options for objection and removal

The processing of your data is necessary for the fulfillment of the contract regarding the download of free content. Therefore, you do not have a right to object.

4.7 Social Media Plugins

The website uses social media plugins. By using social media plugins, your access data (see item 2) is only collected after you have given consent, using tracking cookies (see item 3), and user profiles are created. These user profiles are transmitted to social networks such as Facebook, Youtube, Instagram, and used for advertising purposes, audience measurement, and to tailor the website to user needs. Such use occurs regardless of whether you have an account with the respective social network or are logged into your account during the website visit. Depending on the functionality of the respective social media plugin, it is also possible to deduce information about you, for example, if you have an account with the social network and/or your access data is merged with other data. Therefore, the company recommends logging out of a social network regularly after using it, as this can prevent such inference.

The company has no or only limited influence on the data processing after the transfer to the respective social network when using social media plugins. The purposes of data processing and the storage periods are also not or only partially known to the company.

If social networks process your data outside of the EU or EEA, a so-called third-country transfer occurs. This is permissible provided that you have consented, the company has created guarantees for a level of data protection appropriate to European standards, or the EU Commission has classified the respective third country as safe. The third-country transfer to the respective social network is marked in the following. You can find more information about the recipients of your data in sections 5 and 6.

The individual social media plugins are described in more detail below.

4.7.1.1 Facebook

This website uses the Facebook social media plugin. The provider of this social media plugin is Facebook Inc., 1601 South California Avenue, Palo Alto, CA 94304, USA. When you visit the website, no data is initially transmitted to Facebook. You have the option to activate the use of the social media button through consent. By activating it, you have the ability to share content from the website with Facebook and other users. In doing so, your data is transmitted to Facebook and stored there. If you are logged into Facebook during your visit to the website, the data collected on the website will be directly merged with other Facebook data and assigned to your user account.

We have no control over the data collected by Facebook and the data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, and the storage periods. We also have no information regarding the deletion of the data collected by Instagram.

By transmitting to Facebook, a transfer to a third country occurs. This is permissible provided that you have consented to it. Please note that data transfer outside the European Union may result in your data being transferred to a country that does not guarantee the same level of data protection as the European Union.

For more information on data processing with the Facebook social media plugin, refer to their Privacy Policy.

4.7.1.2 Twitter

On our website, features and content of the Twitter service, provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA, are integrated. This can include content such as images, videos, or texts and buttons that allow users to share content from this online offering within Twitter.

By integrating the plugin, Twitter receives the information that your browser has accessed the corresponding page of our web presence, even if you do not have a Twitter account or are not currently logged in to Twitter. In addition to this information, other data, such as your IP address, is transmitted to Twitter and stored there. If you are logged in to Twitter during your visit to the website, the data collected about you on the website will be directly merged with other Twitter data and assigned to your user account.

We have no control over the data collected by Twitter and the data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, and the storage periods. We also have no information regarding the deletion of the data collected by Instagram.

By transmitting to Twitter, a transfer to a third country occurs. This is permissible provided that you have consented to it. Please note that data transfer outside the European Union may result in your data being transferred to a country that does not guarantee the same level of data protection as the European Union.

If you do not want Twitter to associate the data collected through our website directly with your Twitter account, you must log out of Twitter before visiting our website. For more information on data processing at Twitter, please refer to the following privacy policy: https://twitter.com/de/privacy. You can make changes to the data processing you have authorized within the settings of your user profile: https://twitter.com/personalization.

4.7.1.3 LinkedIn

Our website incorporates features and content of the LinkedIn service, provided by LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland. This may include content such as images, videos, or texts and buttons that allow users to share content from this online offering within LinkedIn. By integrating the plugin, LinkedIn receives information that your browser has accessed the corresponding page of our web presence, even if you do not have a LinkedIn account or are not currently logged into LinkedIn. In addition to this information, other data, such as your IP address, is also transmitted to LinkedIn and stored there. If you are logged into LinkedIn during your visit to the website, the data collected about you on the website will be directly merged with other LinkedIn data and associated with your user account.

We have no influence over the data collected by Twitter and the data processing operations, nor are we aware of the full extent of the data collection, the purposes of processing, and the storage periods. We also have no information regarding the deletion of the data collected by Instagram.

For more information on data processing on LinkedIn, please refer to the following privacy policy: https://www.linkedin.com/legal/privacy-policy. You can make changes to the data processing you have authorized within the settings of your user profile: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out.

4.7.1.4 YouTube

On our website, features and content from the service Youtube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, are integrated. This can include content such as images, videos, or texts and buttons that allow users to share content from this online offering within LinkedIn. By integrating the plugin, Youtube receives the information that your browser has accessed the corresponding page of our web presence, even if you do not have a Youtube account or are not currently logged into Youtube. In addition to this information, other data, such as your IP address, is also transmitted to Youtube and stored there. If you are logged into Youtube during your visit to the website, the data collected about you on the website will be directly merged with other Youtube data and associated with your user account.

We have no influence over the data collected by Youtube and the data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, and the storage durations. We also have no information regarding the deletion of the data collected by Youtube.

For more information about the purpose and scope of data collection and processing, please refer to YouTube's privacy policy: https://policies.google.com/privacy?hl=en. You can make changes to the data processing you have authorized within the settings of your user profile Opt-Out: https://adssettings.google.com/authenticated

4.7.1.5. Instagram

This website uses the Instagram social media plugin. The provider of this social media plugin is Instagram LLC., 1601 Willow Road, Menlo Park, CA 94025, USA. When you visit the website, no data is initially transmitted to Instagram. You have the option to activate the use of the social media button through consent. Upon activation, you then have the ability to share content from the website with Instagram and other users. By integrating the plugin, Instagram receives information that your browser has accessed the corresponding page of our web presence, even if you do not have an Instagram profile or are not currently logged in to Instagram. In addition to this information, other data, such as your IP address, is transmitted to Instagram and stored there. If you are logged into Instagram during your visit to the website, the data collected on the website will be directly merged with other Instagram data and associated with your user account.

We have no control over the data collected by Instagram and data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, and the storage periods. We also have no information regarding the deletion of the data collected by Instagram.

By transmitting to Instagram, a transfer to a third country occurs (see section 4.9). This is permissible provided that you have consented to it. Please note that data transfer outside the European Union may result in your data being transferred to a country that does not ensure the same level of data protection as the European Union.

For information on the purpose and scope of data collection, further processing and use of the data by Instagram, as well as your related rights and options for protecting your privacy, please refer to Instagram's privacy policy at: help.instagram.com/155833707900388/ . If you do not want Instagram to directly link the data collected through our website to your Instagram account, you must log out of Instagram before giving your consent on our website.

4.7.2 Purpose and legal basis of data processing

The purposes of data processing when using social media plugins are advertising, audience measurement, and the design of the website to meet user needs. You also have the option to share the website's content with social networks and other users, as well as to receive advertising tailored to your interests. The legal basis for data processing is consent according to Art. 6 Para. 1 lit. a GDPR.

4.7.3 Duration of storage or criteria for determining this duration

Data processing will continue until you revoke your consent. Upon revocation, the company will delete the data collected from you on the website and inform the respective social network of your revocation and thus your request for deletion.

4.7.4 Options for objection and removal

You can revoke your consent at any time for the future, for example, via the corresponding link on the website or via the appropriate privacy setting in our cookie consent tool.

4.8 Hubspot

We use the services of HubSpot, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland for marketing, sales, and service management on our website. The service we use is a software solution that allows us to manage customer and user data and implement and evaluate various aspects of our online marketing. This includes, among other things, the analysis of our websites and the newsletters we send out. Cookies are used on the website for analysis and tracking purposes (see section 3). We use HubSpot to continuously optimize and make our website more user-friendly, and also to determine which services of our company are of interest to customers, users, and newsletter subscribers, and then to contact them for advertising purposes. The following personal data may be collected by HubSpot in this context: IP address, geographical location, type of browser, duration of visit, pages accessed, user behavior and preferences. The information collected, as well as the contents of our website, are stored on servers of our software partner HubSpot Ireland. However, your IP address is only collected in a shortened form, so that only a pseudonymous user profile is created from it. Only in exceptional cases is your full IP address transmitted to a HubSpot server in the USA and shortened there. It cannot be ruled out that the information generated by the cookie about your use of our online offer may also be transmitted to a Google server in the USA and stored there. The transmission to HubSpot may involve a transfer to a third country. This is permissible provided you have consented to it. In addition to your consent, we have concluded an EU standard contractual clause as a suitable guarantee, so that HubSpot commits to maintaining an adequate level of European data protection.

Further information about how HubSpot operates can be found in the HubSpot Inc. Privacy Policy.

4.8.1 Purpose and legal basis of data processing

The purposes of data processing when using Hubspot are the display of personalized advertising, reach measurement, and demand-oriented design of the website. The legal basis for data processing is consent according to Art. 6 para. 1 lit. a GDPR.

4.8.2 Storage duration or criteria for determining this duration

Data processing will continue until you revoke your consent. Upon revocation, the company will delete the data collected from you on the website.

4.8.3 Options for objection and removal

You have the option to revoke your consent at any time for the future via the appropriate privacy setting in our cookie consent tool.

5. Who receives my data?

Within the company, those positions that require access to your data for the purposes outlined in section 4 will have access. Service providers employed by the company may also have access to your data (so-called 'processors', e.g., data centers, newsletter distribution, or customer service). Contracts for processing ensure that these service providers adhere to instructions, data security, and confidential handling of your data.

The transfer of data to other recipients such as advertising partners, social media service providers, or financial institutions (so-called “third parties”) occurs when legal provisions require it or you have consented. The following third parties are included in the data transfer:

Providers of measurements and web analytics that measure the reach of websites for their own purposes and create usage profiles.

For more information on the transfer of data to the respective third party, please refer to the individual purposes under number 4.

6. Will my data be processed outside of the EU or EEA (transfer to third countries)?

To the extent that the service providers and/or third parties mentioned under number 5 process your data outside the EU or EEA for the purposes described in number 4, this may result in your data being transferred to a country where an adequate level of data protection equivalent to that of the EU or EEA cannot be guaranteed. However, such a level of data protection can be ensured with appropriate safeguards. Suitable safeguards may include standard contractual clauses provided by the EU Commission. You can request a copy of these safeguards using the contact details mentioned in number 1 if you wish. Exceptions to the requirement for safeguards may be made if, for example, you consent or if the transfer to a third country is necessary for the fulfillment of your contract with the company. The EU Commission has also recognized certain third countries as safe, which means that the company may also dispense with suitable safeguards in this case.

The following service providers process your data outside of the EU or EEA:

Google uses servers located in the EU for Analytics services whenever possible. However, it cannot be ruled out that data may also be transferred to the USA. In such cases, we ensure that service providers guarantee an equivalent level of data protection, either contractually or in another manner. For example, this could be the conclusion of a data protection contract prescribed by the EU Commission (so-called EU standard contractual clauses). You can request a copy of the respective guarantees using the contact details mentioned above under number 1.

The social media providers mentioned under number 4 are located partly or predominantly outside the EU. Therefore, data transfer to third countries, especially to the USA, is given. This transfer to a third country is permissible due to your prior consent. Please note that data transfer outside the European Union may result in your data being transferred to a country that does not guarantee the same level of data protection as the European Union. We have no control over the data collected by Instagram and the data processing operations, nor are we aware of the full extent of data collection, the purposes of processing, and the storage periods. We also have no information about the deletion of data collected by Instagram.

By transmitting to Hubspot, a transfer to a third country cannot be ruled out. This is permissible as long as you have consented to it. In addition to your consent, we have concluded an EU standard contractual clause as a suitable guarantee, so that Hubspot commits to maintaining an adequate level of European data protection.

7. What data protection rights do I have?

You have the right at any time to obtain information about the personal data stored by us concerning you. If data about you is incorrect or no longer up to date, you have the right to request its correction. You also have the right to request the deletion or restriction of the processing of your data in accordance with Art. 17 or Art. 18 GDPR. You may also have the right to receive the data you have provided in a common and machine-readable format (right to data portability).

If you have given consent for the processing of personal data for specific purposes, you may revoke this consent at any time with effect for the future. The revocation should be addressed to the company at the contact address mentioned in number 1. Consents that you have given on the website can also be revoked at info@campaign-services.de.

In accordance with Art. 21 GDPR, you have the right to object at any time to the processing of your data for reasons arising from your particular situation, where the processing is based on the legal grounds of Art. 6 para. 1 lit. f GDPR. You also have the right to object at any time to the processing of your personal data for the purpose of direct marketing. The same applies to automated processes using individual cookies, unless they are strictly necessary for the provision of the website.

In addition, you have the option to contact a data protection authority and file a complaint there. The authority responsible for the company is the State Commissioner for Data Protection and Freedom of Information
North Rhine-Westphalia, Kavalleriestraße 2-4, 40102 Düsseldorf. However, you can also contact the data protection authority responsible for your place of residence.

8. To what extent is there automated decision-making?

For the purposes mentioned under number 4, we do not use fully automated decision-making processes.

9. Is profiling conducted?

No, automated decision-making including profiling pursuant to Art. 22 (1) and (4) GDPR does not take place.

10. Conclusion/Version Information

As part of the ongoing development of the website and the implementation of new technologies to enhance our service for you, changes to this privacy notice may be required. Therefore, we recommend that you periodically review these privacy notices.

As of May 2021